METHOD AND SYSTEM FOR DATA PROCESSING

• US 20100138544A1
• Filed: 11/25/2009
• Published: 06/03/2010
• Est. Priority Date: 11/28/2008
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: GUO, MING LIANG, WU, WEI LEI, WANG, DEYU
• Granted Patent: US 8,352,617 B2
• Time in Patent Office: Days
• US Class Current: 709/227
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04L 67/146 Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding

Abstract

A computer-implemented method, system and computer program product for protecting data being transferred during a session with an application are presented. In response to receiving a session request that includes an application identifier for an application, a data processing node establishes a session with the application and assigns a session identifier for that session. A session response, which includes the session identifier, to the session request is sent. In response to receiving a first request that includes the session identifier, a first pipe in the session is established. This first pipe enables data related to the first request to be isolated according to an assigned first pipe identifier for the first pipe. A first response to the first request is sent, wherein the first response comprises the session identifier and the first pipe identifier.

Claims

1. A computer-implemented method comprising:

establishing, by a data processing node, a session with an application, wherein said session is established in response to a session request that comprises an application identifier for the application;

assigning a session identifier for said session;

sending, from said data processing node, a session response to said session request, wherein said session response comprises said session identifier;

establishing, by said data processing node, a first pipe in said session to perform data isolation on processing related to said first request, wherein said first pipe is isolated from other pipes in the session, and wherein said first pipe is established in response to said data processing node receiving a first request that comprises said session identifier;

assigning a first pipe identifier for said first pipe; and

sending, by said data processing node, a first response to said first request, wherein said first response comprises said session identifier and said first pipe identifier.

2. The computer-implemented method of claim 1, further comprising:

establishing, by said data processing node, a second pipe in said session to perform data isolation on processing related to said second request;

assigning a second pipe identifier for said second pipe, wherein said second pipe is established in response to said data processing node receiving a second request that comprises said session identifier but does not comprise said first pipe identifier; and

sending, by said data processing node, a second response to said second request, wherein said second response comprises said session identifier and said second pipe identifier.

3. The computer-implemented method of claim 2, wherein said session request is received and said session response is sent on a first transport layer connection, wherein said first request is received and said first response is sent on a second transport layer connection, and wherein said second request is received and said second response is sent on a third transport layer connection.

4. The computer-implemented method of claim 2, wherein said session response further comprises said application identifier, wherein said first request further comprises an identifier of a first thread, wherein said second request further comprises an identifier of a second thread, wherein said first response further comprises an identifier of said first thread, and wherein said second response further comprises an identifier of said second thread.

5. The computer-implemented method of claim 2, wherein said session request and said first request are received on a first transport layer connection, wherein said session response and said first response are sent on said first transport layer connection, and wherein second request is received and said second response is sent on a second transport layer connection.

6. The computer-implemented method of claim 2, wherein said data processing node assigns session storage space for said session, wherein said data processing node assigns first pipe storage space for said first pipe, and wherein said data processing node assigns second pipe storage space for said second pipe.

7. The computer-implemented method of claim 6, wherein said data processing node stores data shared in said session in said session storage space, wherein said data processing node stores a first set of data, which has been selected for isolation, in said first pipe storage space, and wherein said data processing node stores a second set of data, which has also been selected for isolation, in said second pipe storage space.

8. The computer-implemented method of claim 2, further comprising:

sending, by said data processing node, a third response to said third request, wherein said third response comprises said session identifier and said first pipe identifier, and wherein said third response is sent in response to said data processing node receiving a third request that comprises said session identifier and said first pipe identifier.

9. The computer-implemented method of claim 6, further comprising:

sending, by said data processing node, a third response to said third request, wherein said third response is sent in response to said data processing node receiving a third request that comprises said session identifier and said first pipe identifier, wherein said third response comprises said session identifier and said first pipe identifier, and wherein said third request, said third response, said first request and said first response share said first pipe storage space.

10. The computer-implemented method of claim 2, wherein data in a session is shared through said session identifier, wherein data of said first pipe is accessed through said session identifier and said first pipe identifier, and wherein data of said second pipe is accessed through said session identifier and said second pipe identifier.

11. The computer-implemented method of claim 2, further comprising:

active releasing said first pipe, wherein said active releasing allows said first pipe to be used by other data requests.

12. The computer-implemented method of claim 2, further comprising:

timeout releasing said first pipe, wherein said timeout releasing allows other data requests to use said first pipe after a timeout period expires.

13. The computer-implemented method of claim 1, wherein said data processing node establishes said first pipe in response to said first request based on said application identifier.

14. The computer-implemented method of claim 1, wherein said first request comprises a request to establish a pipe.

15. The computer-implemented method of claim 1, further comprising:

said data processing node determining a maximum number of pipes that are permitted to be established in said session.

16. A computer program product comprising a computer readable storage medium embodied therewith, the computer readable storage medium comprising:

computer readable program code configured to establish a session with an application, wherein said session is established in response to a session request that comprises an application identifier for the application;

computer readable program code configured to assign a session identifier for said session;

computer readable program code configured to send a session response to said session request, wherein said session response comprises said session identifier;

computer readable program code configured to establish a first pipe in said session to perform data isolation on processing related to said first request, wherein said first pipe is established in response to said data processing node receiving a first request that comprises said session identifier;

computer readable program code configured to assign a first pipe identifier for said first pipe; and

computer readable program code configured to send a first response to said first request, wherein said first response comprises said session identifier and said first pipe identifier.

17. The computer program product of claim 16, further comprising:

computer readable program code configured to establish a second pipe in said session to perform data isolation on processing related to said second request;

computer readable program code configured to assign a second pipe identifier for said second pipe, wherein said second pipe is established in response to said data processing node receiving a second request that comprises said session identifier but does not comprise said first pipe identifier; and

computer readable program code configured to send a second response to said second request, wherein said second response comprises said session identifier and said second pipe identifier.

18. The computer program product of claim 17, wherein said session request is received and said session response is sent on a first transport layer connection, wherein said first request is received and said first response is sent on a second transport layer connection, and wherein said second request is received and said second response is sent on a third transport layer connection.

19. The computer program product of claim 18, wherein said session response further comprises said application identifier, wherein said first request further comprises an identifier of a first thread, wherein said second request further comprises an identifier of a second thread, wherein said first response further comprises an identifier of said first thread, and wherein said second response further comprises an identifier of said second thread.

20. A computer system comprising:

a central processing unit; and

a computer readable memory coupled to the central processing unit, wherein the computer readable memory comprises software that, when executed, causes the central processing unit to implement;

establishing a session with an application, wherein said session is established in response to a session request that comprises an application identifier for the application;

assigning a session identifier for said session;

sending a session response to said session request, wherein said session response comprises said session identifier;

establishing a first pipe in said session to perform data isolation on processing related to said first request, wherein said first pipe is established in response to said data processing node receiving a first request that comprises said session identifier;

assigning a first pipe identifier for said first pipe; and

sending a first response to said first request, wherein said first response comprises said session identifier and said first pipe identifier.