Nonconforming web service policy functions

• US 9,021,055 B2
• Filed: 05/31/2011
• Issued: 04/28/2015
• Est. Priority Date: 11/24/2010
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Kavantzas, Nickolas, Yamuna, Prakash
• Primary Examiner(s): Wasel, Mohamed
• Assistant Examiner(s): WU, TSUNG YIN
• Application Number:
  US13/149,065
• Publication Number:
  US 20120131135A1
• Time in Patent Office: 1,428 Days
• Field of Search: None
• US Class Current: 709/217
• CPC Class Codes: G06F 9/541 via adapters, e.g. between incompatible applications

Abstract

Arrangements for enforcing a nonconforming web service policy document are presented. A request for a web service policy document may be received by a web service. A conforming web service policy document may be generated using the nonconforming web service policy document. The nonconforming web service policy document may comprise one or more functions unsupported by the web service description language. The conforming web service policy document may be transmitted to the web service client. The nonconforming web service policy document may be enforced by the web service, wherein the functions that are unsupported by the web service description language standard modifies enforcement of the web service policy document by the web service computer system. The conforming web service policy document may comprise sufficient information for the web service client computer system to comply with the nonconforming web service policy document.

Claims

1. A method for enforcing a nonconforming web service policy document, the method comprising:

receiving, by a web service computer system, from a web service client computer system, a request for a conforming web service policy document, wherein;

the conforming web service policy document is required to conform to the web service description language;

the conforming web service policy document specifies security requirements between the web service computer and the web service client computer system;

generating, by the web service computer system, dynamically in response to the request from the web service client computer system, the conforming web service policy document using the nonconforming web service policy document, wherein;

the nonconforming web service policy document expressed in the web service description language and comprising at least one element conforming to web service description language and at least one element not conforming to the web service description language including at least a generating function unsupported by the web service description language that is used to generate a conforming document based on the request and the nonconforming web service policy document, the generating function comprising at least a silent element for identifying if another element should be included in the conforming document;

the nonconforming web service policy document specifies security requirements between the web service computer and the web service client computer system;

the nonconforming web service policy document is stored on the web service computer system;

the content of the conforming web service policy document is generated from the nonconforming web service policy document at least partially based on a context of the web service client computer system;

transmitting, by the web service computer system, to the web service client computer system, the conforming web service policy document; and

enforcing, by the web service computer system, with the web service client computer system, security requirements specified in the nonconforming web service policy document, wherein;

the nonconforming web service policy document comprises an enforcing function unsupported by the web service description language that is used to affect how web service policies are processed by the web service, the enforcing function comprising at least one of;

a sequence element for identifying an order in which assertions are to be evaluated, or

a guard element for specifying which elements to enforce based on a context of the client;

the enforcing function that is unsupported by the web service description language is utilized for enforcement of the conforming web service policy document by the web service computer system; and

the conforming web service policy document comprises sufficient information for the web service client computer system to comply with the security requirements specified in nonconforming web service policy document.

2. The method for enforcing the nonconforming web service policy document of claim 1, wherein the enforcing function unsupported by the web service description language further includes an enforce element that indicates whether an element in the nonconforming web service policy document is to be enforced by the web service computer system.

3. The method for enforcing the nonconforming web service policy document of claim 1, wherein the sequence element further indicates a sequence in which elements are executed by the web service computer system.

4. The method for enforcing the nonconforming web service policy document of claim 1, wherein content of the conforming web service policy document is at least partially determined based on the generating function unsupported by the web service description language.

5. The method for enforcing the nonconforming web service policy document of claim 1, wherein the enforcing function unsupported by the web service description language further included a category element that categorizes other elements in the nonconforming web service policy document.

6. A computer program product residing on a non-transitory processor-readable medium and comprising processor-readable instructions configured to cause a processor to:

receive, from a web service client computer system, a request for a conforming web service policy document, wherein;

the conforming web service policy document is required to conform to the web service description language;

the conforming web service policy document specifies security requirements between the web service computer and the web service client computer system;

generate, dynamically in response to the request from the web service client computer system, the conforming web service policy document using a nonconforming web service policy document, wherein;

the nonconforming web service policy document expressed in the web service description language and comprising at least one element conforming to web service description language and at least one element not conforming to the web service description language including at least a generating function unsupported by the web service description language that is used to generate a conforming document based on the request and the nonconforming web service policy document, the generating function comprising at least a silent element for identifying if another element should be included in the conforming document;

the nonconforming web service policy document specifies security requirements between the web service computer and the web service client computer system;

the nonconforming web service policy document is stored on the web service computer system;

the content of the conforming web service policy document is generated from the nonconforming web service policy document at least partially based on a context of the web service client computer system;

cause the conforming web service policy document to be transmitted to the web service client computer system; and

enforce, with the web service client computer system, security requirements specified in the nonconforming web service policy document, wherein;

the nonconforming web service policy document comprises an enforcing function unsupported by the web service description language that is used to affect how web service policies are processed by the web service, the enforcing function comprising at least one of;

a sequence element for identifying an order in which assertions are to be evaluated, or

a guard element for specifying which elements to enforce based on a context of the client;

the enforcing function that is unsupported by the web service description language is utilized for enforcement of the conforming web service policy document by a web service computer system; and

the conforming web service policy document comprises sufficient information for the web service client computer system to comply with the security requirements specified in nonconforming web service policy document.

7. The computer program product of claim 6, wherein the enforcing function unsupported by the web service description language further includes an enforce element that indicates whether an element in the nonconforming web service policy document is to be enforced by the web service computer system.

8. The computer program product of claim 6, wherein the sequence element further indicates a sequence in which elements are executed by the web service computer system.

9. The computer program product of claim 6, wherein content of the conforming web service policy document is at least partially determined based on the generating function unsupported by the web service description language.

10. The computer program product of claim 6, wherein the enforcing function unsupported by the web service description language further included a category element that categorizes other elements in the nonconforming web service policy document.

11. A system for enforcing a nonconforming web service policy document, the system comprising:

a web service computer system, comprising a processor and a non-transitory computer readable storage medium, wherein the web service computer system is configured to;

receive from a web service client computer system, a request for a conforming web service policy document, wherein;

the conforming web service policy document is required to conform to the web service description language;

the conforming web service policy document specifies security requirements between the web service computer and the web service client computer system;

generate, dynamically in response to the request from the web service client computer system, the conforming web service policy document using the nonconforming web service policy document, wherein;

the nonconforming web service policy document expressed in the web service description language and comprising at least one element conforming to web service description language and at least one element not conforming to the web service description language including at least a generating function unsupported by the web service description language that is used to generate a conforming document based on the request and the nonconforming web service policy document, the generating function comprising at least a silent element for identifying if another element should be included in the conforming document;

the nonconforming web service policy document specifies security requirements between the web service computer and the web service client computer system;

the nonconforming web service policy document is stored on the web service computer system;

the content of the conforming web service policy document is generated from the nonconforming web service policy document at least partially based on a context of the web service client computer system;

transmit to the web service client computer system, the conforming web service policy document; and

enforce with the web service client computer system, security requirements specified in the nonconforming web service policy document, wherein;

the nonconforming web service policy document comprises an enforcing function unsupported by the web service description language that is used to affect how web service policies are processed by the web service, the enforcing function comprising at least one of;

a sequence element for identifying an order in which assertions are to be evaluated, or

a guard element for specifying which elements to enforce based on a context of the client;

the enforcing function that is unsupported by the web service description language is utilized for enforcement of the conforming web service policy document by the web service computer system; and

the conforming web service policy document comprises sufficient information for the web service client computer system to comply with the security requirements specified in nonconforming web service policy document.

12. The system for enforcing the nonconforming web service policy document of claim 11, wherein the web service computer system is further configured such that the enforcing function unsupported by the web service description language further includes an enforce element that indicates whether an element in the nonconforming web service policy document is to be enforced by the web service computer system.

13. The system for enforcing the nonconforming web service policy document of claim 11, wherein the web service computer system is further configured such that the sequence element further indicates a sequence in which elements are executed by the web service computer system.

14. The system for enforcing the nonconforming web service policy document of claim 11, wherein the web service computer system is further configured such that content of the conforming web service policy document is at least partially determined based on the generating function unsupported by the web service description language.

15. The system for enforcing the nonconforming web service policy document of claim 11, wherein the web service computer system is further configured such that the enforcing function unsupported by the web service description language further included a category element that categorizes other elements in the nonconforming web service policy document.