Data transfer across a network

• US 8,739,182 B2
• Filed: 03/12/2012
• Issued: 05/27/2014
• Est. Priority Date: 07/30/2001
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Lambert, Howard Shelton, Orchard, James Ronald Lewis
• Primary Examiner(s): Truong, Lechi
• Assistant Examiner(s): SEYE, ABDOU K
• Application Number:
  US13/417,831
• Publication Number:
  US 20120173428A1
• Time in Patent Office: 806 Days
• Field of Search: None
• US Class Current: 719/315
• CPC Class Codes: G06F 2209/547 Messaging middleware
• CPC Class Codes: G06F 9/546 Message passing systems or structures, e.g. queues
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Abstract

Requests for retrieval of data items from another data processing apparatus include embedded objects having executable class functions for performing operations at the target data processing apparatus. This has the advantages of the request implicitly sending data as well as requesting data and allows the request to perform a test on data within an object (such as a comparison with parameters of the request to determine whether the request may be satisfied). Objects within the request may be embedded within each other with different encryption and compression applied to the different objects. As well as achieving communication efficiencies, the ability to selectively encrypt components of a request may be used to provide greater security. For example, a store may be able to interpret the request, while credit details may be separately encrypted such that only a bank may decrypt that subcomponent of the request.

Claims

1. A method for communication in a distributed object-oriented data processing environment, comprising:

receiving from a first data processing apparatus at a second data processing apparatus a request for retrieval of an item from the second data processing apparatus, the request comprising a first embedded object that is targeted at a data processing object of the second data processing apparatus, the first embedded object comprising data and a test executable class function that applies a test condition to data within the target data processing object;

responsive to receipt of the request that comprises the first embedded object at the second data processing apparatus, executing the class function to apply the test condition to the data within the target data processing object;

responsive to a positive result from the test condition;

generating a second object that implements a verification request and that comprises a requested verification check function;

sending the second object to a remote data processing apparatus to perform the requested verification check function;

receiving, from the remote data processing apparatus, a result of the requested verification check function at the second data processing apparatus;

generating a positive reply to the item request in response to the result of the requested verification check function comprising a positive verification result; and

sending the positive reply from the second data processing apparatus to the first data processing apparatus.

2. The method of claim 1, where the first embedded object comprises a data item identifier, the test condition, and one or more data parameter values of a specified data type, and where the class function operates on the identifier, the test condition, and the one or more data parameter values to determine whether a data item within the target data processing object corresponds to the identifier and satisfies the test condition.

3. The method of claim 1, where the positive reply to the item request comprises the requested item.

4. The method of claim 1, where the test condition comprises a comparison between data within the first embedded object and the data within the target data processing object.

5. The method of claim 1, where generating the second object comprises generating the second object with an embedded sub-component object extracted from the first embedded object.

6. The method of claim 5:

where the embedded sub-component object comprises financial information relevant to a user of the first data processing apparatus; and

where receiving, from the remote data processing apparatus, the result of the requested verification check function at the second data processing apparatus comprises receiving the result in response to a verification of the financial information being performed at the remote data processing apparatus.

7. The method of claim 6:

where the financial information is encapsulated within the embedded sub-component object within the first embedded object; and

where the embedded sub-component object instantiates a cryptor class that comprises an encryption executable class function that encrypts the embedded sub-component object in accordance with set security attributes for transmission in a secure form from the first data processing apparatus to the remote data processing apparatus.

8. The method of claim 1, where the first embedded object instantiates a class that comprises an encoding class function that encodes the first embedded object for transmission from the first data processing apparatus to the second data processing apparatus, and a restore class function that restores the first embedded object in response to receipt of the request that comprises the first embedded object at the second data processing apparatus.

9. The method of claim 8 where, responsive to attributes having been set for the first embedded object, the encoding of the first embedded object is performed in accordance with the attributes.

10. The method of claim 9, where a first sender computer program at the first data processing apparatus is responsible for sending the request that comprises the first embedded object, the first sender computer program being responsive to the set attributes to create an attributes object and to associate the attributes object with the first embedded object.

11. The method of claim 9, where the attributes comprise security attributes and the encoding class function that encodes the first embedded object is configured to encode the first embedded object in a secure form.

12. The method of claim 1, where the first embedded object instantiates an object class that comprises an embedding class function for object embedding, such that the first embedded object can comprise one or more embedded objects, and where different attributes can be set for each embedded object.

13. The method of claim 1, where the target data processing object instantiates a class that comprises one or more class functions for performing operations in response to receipt of the request that comprises the first embedded object and where the one or more class functions comprise a class function that responds to the received request that comprises the first embedded object by generating the second object and sending the generated second object to the remote data processing apparatus, and that generates and sends the positive reply to the first data processing apparatus in response to the positive verification result from the remote data processing apparatus.

14. A method for ordering goods or services using transmission of objects via a communication network, the transmitted objects comprising executable class functions and data, the method comprising:

embedding credit details within a request for goods or services as an embedded object within a first embedded object;

setting separate security attributes for the embedded object and the first embedded object, where the security attributes for the embedded object comprise a required cryptor that is used to encrypt the embedded object for subsequent decryption by a target communication partner authorized to decrypt the embedded object;

encoding each of the embedded object and the first embedded object in accordance with their respective security attributes for transmission from a first data processing apparatus to a second data processing apparatus;

sending the request for goods or services from the first data processing apparatus to a target data processing object of the second data processing apparatus, the request comprising the first embedded object further comprising the data and an executable class function that is responsive to receipt of the request at the second data processing apparatus to process data within the target data processing object to determine whether the request can be satisfied by one of the target data processing object and the second data processing apparatus; and

receiving a reply to the request that comprises a result of the determination by the executable class function of the first embedded object regarding whether the request can be satisfied by the one of the target data processing object and the second data processing apparatus.

15. The method of claim 14, further comprising embedding a sub-component object within the first embedded object, the embedded object comprising an embedded executable class function that is configured to be executed in response to a positive determination that the request can be satisfied by the one of the target data processing object and the second data processing apparatus.

16. The method of claim 14, where the first embedded object instantiates an object class comprising an encoding class function that performs the encoding of each of the embedded object and the first embedded object for transmission.

17. A method for communication in a distributed object-oriented data processing environment, comprising:

receiving from a first data processing apparatus at a second data processing apparatus a request for retrieval of an item from the second data processing apparatus, the request comprising a first embedded object that comprises an executable class function that performs an operation at the second data processing apparatus in response to receipt of the request comprising the first embedded object at the second data processing apparatus; and

responsive to receipt of the request comprising the first embedded object at the second data processing apparatus;

executing the executable class function to perform the operation, where the operation comprises;

generating a second object that implements a verification request and that comprises a requested verification check function;

sending the second object to a remote data processing apparatus to perform the requested verification check function; and

receiving, from the remote data processing apparatus, a result of the requested verification check function at the second data processing apparatus;

generating a positive reply to the request in response to the result of the requested verification check function comprising a positive verification result; and

sending the positive reply from the second data processing apparatus to the first data processing apparatus.