System and method for distributed login with secure transfer to processor node based on one or more identifiers

• US 9,058,222 B1
• Filed: 08/30/2013
• Issued: 06/16/2015
• Est. Priority Date: 03/21/2011
• Status: Active Grant

• Current Assignee: IQNavigator Incorporated
• Original Assignee: IQNavigator Incorporated
• Inventors: Bullock, John, Lo, Zion
• Primary Examiner(s): An, Meng
• Assistant Examiner(s): TEETS, BRADLEY A
• Application Number:
  US14/015,635
• Time in Patent Office: 655 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 9/5033 considering data affinity
• CPC Class Codes: G06F 9/5083 Techniques for rebalancing the load in a distributed system

Abstract

A distributed networked computer system is provided. The distributed networked computer system receives processing threads from a plurality of workstations and distributes the processing threads to selected processing nodes through a load balancer. The load balancer is configured to recognize certain enterprise users and transfer the processing threads from the certain enterprise users to dedicated processing nodes dedicated to processing the threads of those certain users.

Claims

1. A method to transfer application threads to dedicated processing nodes in a secure, networked, computer system, the method comprising the steps performed on at least one processor comprising:

initially receiving a thread at a load balancer that distributes thread among a plurality of processing nodes wherein the thread is generated from a user having a unique identification wherein the unique identification of the user is not determined by the load balancer;

transferring the thread by the load balancer to one processing node of the plurality of processing nodes, wherein the one processing node determines the unique identification of the user;

identifying the unique identification of the user at the one processing node;

determining whether the plurality of processing nodes in the secure, networked, computer system comprises at least one dedicated processing node for processing threads of the user based on the unique identification;

appending a secure transfer identification to the thread subsequent to the step of determining whether the plurality of processing nodes comprises at least one dedicated processing node for processing threads of the user;

if at least one dedicated processing node is determined to exist, transferring the thread to the at least one dedicated processing node by firstly transferring, by the one processing node, the thread with the secure transfer identification to the load balancer and secondly transferring, by the load balancer, the thread with the secure transfer identification to the dedicated processing node to be processed by the dedicated processing node; and

if a dedicated processing node is determined to not exist, processing the thread at the one processing node.

2. The method of claim 1 wherein the at least one dedicated processing node comprises a plurality of dedicated processing nodes and wherein the step of transferring the thread to the at least one dedicated processing node further comprises the steps of transferring the thread to a load balancer that load balances the plurality of dedicated processing nodes and transferring the thread to one dedicated processing node of the plurality of dedicated processing nodes by the load balancer.

3. The method of claim 1 wherein the identifying step comprises a login.

4. The method of claim 3 wherein the load balancer initially assigns one login node selected from a plurality of login nodes to complete the login procedure, wherein the plurality of login nodes comprise a subset of the plurality of processing nodes.

5. The method of claim 1 further comprising the step of assigning a processing node of the plurality of processing nodes as the at least one dedicated processing node.

6. A method to securely transfer application threads in a secure networked, computer system, the method comprising the steps performed on at least one processor comprising:

providing a networked computer system comprising a plurality of login nodes and a plurality of processing nodes wherein the plurality of processing nodes comprise at least one dedicated processing node wherein the at least one dedicated processing node processes threads from a group of users;

initially receiving a thread at a login load balancer that distributes threads among the plurality of login nodes;

transferring, by the loin load balancer, the thread to one login node from the plurality of login nodes;

conducting a login procedure to determine a unique identifier of the user that transmitted the thread;

appending a secure transfer identification to the thread;

transferring the thread with the known identity of the user and the secure transfer identification to a processing node load balancer;

determining, at the processing node load balancer, whether the user is a member of the group of users based on the unique identifier;

if the user is determined to be a member of the group of users, transferring the thread to the at least one dedicated processing node to be processed without regard for the load balancing protocols; and

if the user is determined to not be a member of the group of users, transferring the thread to a processing node of the plurality of processing nodes using the load balancing protocols.

7. The method of claim 6 wherein the at least one dedicated processing node comprises a plurality of dedicated processing nodes.

8. The method of claim 7 further comprising a load balancer for the plurality of dedicated processing nodes and the step of transferring the thread to the at least one dedicated processing node comprises firstly transferring the thread to the load balancer for the plurality of dedicated processing nodes and secondly transferring the thread to one of the plurality of dedicated processing nodes.

9. A method to transfer application threads in a secure, networked computer system, the secure, networked computer system comprising a plurality of processing nodes configured to comprise at least one dedicated processing nodes dedicated to processing application threads generated by a group of users;

the method comprising the steps performed on at least one processor comprising;

receiving from a load balancer an application thread generated from a workstation of a user at one processing node of the plurality of processing nodes, wherein the user has a unique identification that is not known by the one processing node when the application thread is received from the load balancer;

identifying, by the one processing node, the unique identification of the user by a login;

determining whether the plurality of processing nodes in the secure, networked, computer system comprises at least one dedicated processing node for processing threads of the user based on the unique identification indicating that the user is a member of the group of users;

if at least one dedicated processing node is determined to exist, appending a secure transfer identification to the thread subsequent to the step of determining whether the plurality of processing nodes comprises at least one dedicated processing node for processing threads of the user and transferring the thread with the secure transfer identification to the load balancer which is configured to transfer the thread with the secure transfer identification to the dedicated processing node; and

if at least one dedicated processing node is determined to not exist, processing the thread at the one processing node.