Separating privileged functions from non-privileged functions in a server instance

• US 6,594,671 B1
• Filed: 06/14/1999
• Issued: 07/15/2003
• Est. Priority Date: 06/14/1999
• Status: Expired due to Term

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Riggs, Nancy P., Puchkoff, Gary S., Frey, Jeffrey A., Aman, Jeffrey D., Little, Rodney A.
• Primary Examiner(s): JUNG, DAVID YIUK
• Application Number:
  US09/333,059
• Time in Patent Office: 1,492 Days
• Field of Search: 707/1-206, 709/100-332, 713/192, 711/206
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2209/463 Naming
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 9/465 Distributed object oriented systems remote method invocation [RMI] G06F9/548
• CPC Class Codes: G06F 9/468 Specific access rights for resources, e.g. using capability register
• CPC Class Codes: G06F 9/505 considering the load
• CPC Class Codes: Y10S 707/99944 Object-oriented database structure

Abstract

A server instance includes a first region to perform one or more privileged functions and a second region to perform one or more non-privileged functions. Thus, the privileged functions are separate from the non-privileged functions. The first region includes at least a portion of an object request broker, which is used in communicating with one or more clients coupled to the server instance. The second region executes non-privileged application code, and can be replicated within the server instance based on workload management criteria.

Claims

1. A method of constructing a server instance of a computing environment, said method comprising:

providing a first region of said server instance in a first address space, said first region being used to perform one or more privileged functions, and wherein said server instance supports object-oriented technology; and

providing a second region of said server instance in a second address space, said second region being used to perform one or more non-privileged functions, wherein said privileged functions and said non-privileged functions are different, and wherein said first address space and said second address space are separate.

2. The method of claim 1, wherein said first region comprises at least a portion of an object request broker, said portion usable in communicating with one or more clients coupled to said server instance.

3. The method of claim 2, wherein said second region comprises at least another portion of said object request broker, said at least another portion performing different capabilities than said at least a portion.

4. The method of claim 1, wherein said providing said second region comprises providing a plurality of second regions.

5. The method of claim 4, wherein said plurality of second regions are replicas of one another.

6. The method of claim 4, further comprising balancing workload among said plurality of second regions using a workload manager coupled to one or more of said plurality of second regions.

7. The method of claim 6, wherein said workload manager uses one or more queues in balancing said workload.

8. The method of claim 1, further comprising dynamically providing one or more additional second regions.

9. The method of claim 8, wherein said dynamically providing is based on one or more workload management criteria.

10. The method of claim 8, further comprising dynamically removing one or more second regions.

11. The method of claim 10, wherein said dynamically removing is based on one or more workload management criteria.

12. The method of claim 1, wherein said providing said first region comprises providing a plurality of first regions.

13. The method of claim 1, wherein said one or more privileged functions includes at least one of client communications and security control.

14. A server instance of a computing environment, said server instance comprising:

a first region in a first address space being used to perform one or more privileged functions, and wherein said server instance supports object-oriented technology; and

a second region in a second address space being used to perform one or more non-privileged functions, wherein said privileged functions and said non-privileged functions are different, and wherein said first address space and said second address space are separate.

15. The server instance of claim 14, wherein said first region comprises at least a portion of an object request broker, said portion usable in communicating with one or more clients coupled to said server instance.

16. The server instance of claim 15, wherein said second region comprises at least another portion of said object request broker, said at least another portion performing different capabilities than said at least a portion.

17. The server instance of claim 14, further comprising a plurality of second regions.

18. The server instance of claim 17, wherein said plurality of second regions are replicas of one another.

19. The server instance of claim 17, further comprising a workload manager coupled to said server instance, wherein said workload manager is coupled to one or more of said plurality of second regions to balance workload among said plurality of second regions.

20. The system of claim 19, wherein said workload manager uses one or more queues in balancing said workload.

21. The server instance of claim 14, further comprising a plurality of first regions.

22. The server instance of claim 14, wherein said one or more privileged functions includes at least one of client communications and security control.

23. A system of constructing a server instance of a computing environment, said system comprising:

means or providing a first region of said server instance in a first address space, said first region being used to perform one or more privileged functions, and wherein said server instance supports object-oriented technology; and

means for providing a second region of said server instance in a second address space, said second region being used to perform one or more non-privileged functions, wherein said privileged functions and said non-privileged functions are different, and wherein said first address space and said second address space are separate.

24. The system of claim 23, further comprising means for dynamically providing one or more additional second regions.

25. The system of claim 24, wherein said dynamically providing is based on one or more workload management criteria.

26. The system of claim 24, further comprising means for dynamically removing one or more second regions.

27. The system of claim 26, wherein said dynamically removing is based on one or more workload management criteria.

28. An article of manufacture, comprising:

at least one computer usable medium having computer readable program code means embodied therein for causing the constructing of a server instance of a computing environment, the computer readable program code means in said article of manufacture comprising;

computer readable program code means for causing a computer to provide a first region of said server instance in a first address space, said first region being used to perform one or more privileged functions, and wherein said server instance supports object-oriented technology; and

computer readable program code means for causing a computer to provide a second region of said server instance in a second address space, said second region being used to perform one or more non-privileged functions, wherein said privileged functions and said non-privileged functions are different, and wherein said first address space and said second address space are separate.

29. The article of manufacture of claim 28, wherein said first region comprises at least a portion of an object request broker, said portion usable in communicating with one or more clients coupled to said server instance.

30. The article of manufacture of claim 29, wherein said second region comprises at least another portion of said object request broker, said at least another portion performing different capabilities than said at least a portion.

31. The article of manufacture of claim 28, wherein said computer readable program code means for causing a computer to provide said second region comprises computer readable program code means for causing a computer to provide a plurality of second regions.

32. The article of manufacture of claim 31, wherein said plurality of second regions are replicas of one another.

33. The article of manufacture of claim 31, further comprising computer readable program code means for causing a computer to balance workload among said plurality of second regions using a workload manager coupled to one or more of said plurality of second regions.

34. The article of manufacture of claim 33, wherein said workload manager uses one or more queues in balancing said workload.

35. The article of manufacture of claim 28, further comprising computer readable program code means for causing a computer to dynamically provide one or more additional second regions.

36. The article of manufacture of claim 35, wherein said computer readable program code means for causing a computer to dynamically provide is based on one or more workload management criteria.

37. The article of manufacture of claim 35, further comprising computer readable program code means for causing a computer to dynamically remove one or more second regions.

38. The article of manufacture of claim 37, wherein said computer readable program code means for causing a computer to dynamically remove is based on one or more workload management criteria.

39. The article of manufacture of claim 29, wherein said computer readable program code means for causing a computer to provide said first region comprises computer readable program code means for causing a computer to provide a plurality of first regions.

40. The article of manufacture of claim 28, wherein said one or more privileged functions includes at least one of client communications and security control.