Efficient identity mapping with self-correction for cascaded server systems

• US 9,104,776 B2
• Filed: 07/15/2008
• Issued: 08/11/2015
• Est. Priority Date: 07/15/2008
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Kao, I-Lung
• Primary Examiner(s): Reyes, Mariela
• Assistant Examiner(s): Davanlou, Soheila
• Application Number:
  US12/173,246
• Publication Number:
  US 20100017425A1
• Time in Patent Office: 2,583 Days
• Field of Search: 707/736, 707/737, 707/770
• US Class Current: 1/1
• CPC Class Codes: G06F 16/957 Browsing optimisation, e.g. caching or content distillation
• CPC Class Codes: H04L 61/4523 using lightweight directory access protocol [LDAP]
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/1023 based on a hash applied to IP addresses or costs

Abstract

A computer-implemented method, computer program product, and apparatus for identity mapping with self-correction for cascaded server systems is provided. A request to perform a business transaction is received. Responsive to performing a first server process of the business transaction, the servers necessary to perform the business transaction are identified, forming a set of identified servers. A user identity is retrieved for each server in the set of identified servers, wherein the user identity for each server in the set of identified servers is linked to a user registry of a server, forming a set of linked user identities. A data structure comprising the set of linked user identities is created. A user identity for a next server in the set of identified servers is retrieved from the data structure. In addition, the data structure is forwarded to a next server in the set of identified servers.

Claims

1. A computer-implemented method for identity mapping for a cascaded server system, the computer-implemented method comprising:

receiving, at a first server in the cascaded server system, a request to perform a business transaction;

responsive to the first server performing a first server process of the business transaction, identifying, by the first server, remaining servers for performing a set of remaining server processes of the business transaction to form a set of identified servers;

retrieving a user identity for each server in the set of identified servers, wherein the user identity for each server in the set of identified servers is linked to a user registry of a server to form a set of linked user identities;

generating a data structure comprising the set of linked user identities;

responsive to identifying, at the first server, information desired from a next server in the set of identified servers to perform a next server process of the business transaction in order to perform the business transaction, retrieving, at the first server, a next user identity for the next server in the set of identified servers from the data structure;

forwarding, from the first server, the data structure to the next server in the set of identified servers; and

repeating, for each server in the set of identified servers actions comprising;

performing a service process of a current server;

retrieving a subsequent user identity for a subsequent server in the set of identified servers from the data structure, wherein the subsequent user identity is different than a current user identity for the current server; and

forwarding the data structure to the subsequent server in the set of identified servers, wherein the set of identified servers include a plurality of servers.

2. A computer-implemented method for identity mapping for a cascaded server system, the computer-implemented method comprising:

receiving, at a first server in the cascaded server system, a request to perform a business transaction;

responsive to the first server performing a first server process of the business transaction, identifying, by the first server, remaining servers for performing a set of remaining server processes of the business transaction to form a set of identified servers;

retrieving a user identity for each server in the set of identified servers, wherein the user identity for each server in the set of identified servers is linked to a user registry of a server to form a set of linked user identities;

generating a data structure comprising the set of linked user identities;

responsive to identifying, at the first server, information desired from a next server in the set of identified servers to perform a next server process of the business transaction in order to perform the business transaction, retrieving, at the first server, a next user identity for the next server in the set of identified servers from the data structure; and

forwarding, from the first server, the data structure to the next server in the set of identified servers, wherein retrieving a user identity for the next server of the set of identified servers from the data structure comprises;

identifying the user registry for the next server in the set of identified servers, to form a next registry; and

selecting the user identity in the data structure linked to the next registry.

3. A computer program product for identity mapping for a cascaded server system, the computer program product comprising:

a computer readable storage device having computer usable program code tangibly embodied thereon, the computer usable program code comprising;

computer usable program code for receiving, at a first server in the cascaded server system, a request to perform a business transaction;

computer usable program code for, responsive to the first server performing a first server process of the business transaction, identifying, by the first server, remaining servers for performing a set of remaining server processes of the business transaction to form a set of identified servers;

computer usable program code for retrieving a user identity for each server in the set of identified servers, wherein the user identity for each server in the set of identified servers is linked to a user registry of a server to form a set of linked user identities;

computer usable program code for generating a data structure comprising the set of linked user identities;

computer usable program code for, responsive to identifying, at the first server, information desired from a next server in the set of identified servers to perform a next server process of the business transaction in order to perform the business transaction, retrieving, at the first server, a next user identity for a next server in the set of identified servers from the data structure;

computer usable program code for forwarding, from the first server, the data structure to the next server in the set of identified servers; and

computer usable program code for repeating, for each server in the set of identified servers, the computer usable program code for;

performing a service process of a current server;

retrieving a subsequent user identity for a subsequent server in the set of identified servers from the data structure, wherein the subsequent user identity is different than a current user identity for the current server; and

forwarding the data structure to the subsequent server in the set of identified servers, wherein the set of identified servers include a plurality of servers.

4. A computer program product for identity mapping for a cascaded server system, the computer program product comprising:

a computer readable storage device having computer usable program code tangibly embodied thereon, the computer usable program code comprising;

computer usable program code for receiving, at a first server in the cascaded server system, a request to perform a business transaction;

computer usable program code for, responsive to the first server performing a first server process of the business transaction, identifying, by the first server, remaining servers for performing a set of remaining server processes of the business transaction to form a set of identified servers;

computer usable program code for retrieving a user identity for each server in the set of identified servers, wherein the user identity for each server in the set of identified servers is linked to a user registry of a server to form a set of linked user identities;

computer usable program code for generating a data structure comprising the set of linked user identities;

computer usable program code for, responsive to identifying, at the first server, information desired from a next server in the set of identified servers to perform a next server process of the business transaction in order to perform the business transaction, retrieving, at the first server, a next user identity for a next server in the set of identified servers from the data structure;

computer usable program code for forwarding, from the first server, the data structure to the next server in the set of identified servers, wherein the computer usable program code for retrieving a user identity for the next server of the set of identified servers from the data structure comprises;

computer usable program code for identifying the user registry for the next server in the set of identified servers, to form a next registry; and

computer usable program code for selecting the user identity in the data structure linked to the next registry.

5. A data processing system for identity mapping for a cascaded server system, the data processing system comprising:

a bus;

a storage device connected to the bus, wherein the storage device contains computer usable code;

a communications unit connected to the bus; and

a processing unit connected to the bus, wherein the processing unit executes the computer usable code to;

receive, at a first server in the cascaded server system, a request to perform a business transaction;

responsive to the first server performing a first server process of the business transaction, identify, at the first server, remaining servers for performing a set of remaining server processes of the business transaction to form a set of identified servers;

retrieve a user identity for each server in the set of identified servers, wherein the user identity for each server in the set of identified servers is linked to a user registry of a server to form a set of linked user identities;

generate a data structure comprising the set of linked user identities;

responsive to identifying, at the first server, information desired from a next server in the set of identified servers to perform a next server process of the business transaction in order to perform the business transaction, retrieve, at the first server, a next user identity for the next server in the set of identified servers from the data structure; and

forward, from the first server, the data structure to the next server in the set of identified servers, wherein the processing unit further executes the computer usable code to repeat, for each server in the set of identified servers, execution of the computer usable program code to;

perform a service process of a current server;

retrieve a subsequent user identity for a subsequent server in the set of identified servers from the data structure, wherein the subsequent user identity is different than a current user identity for the current server; and

forward the data structure to the subsequent server in the set of identified servers, wherein the set of identified servers include a plurality of servers.

6. A data processing system for identity mapping for a cascaded server system, the data processing system comprising:

a bus;

a storage device connected to the bus, wherein the storage device contains computer usable code;

a communications unit connected to the bus; and

a processing unit connected to the bus, wherein the processing unit executes the computer usable code to;

receive, at a first server in the cascaded server system, a request to perform a business transaction;

responsive to the first server performing a first server process of the business transaction, identify, at the first server, remaining servers for performing a set of remaining server processes of the business transaction to form a set of identified servers;

retrieve a user identity for each server in the set of identified servers, wherein the user identity for each server in the set of identified servers is linked to a user registry of a server to form a set of linked user identities;

generate a data structure comprising the set of linked user identities;

responsive to identifying, at the first server, information desired from a next server in the set of identified servers to perform a next server process of the business transaction in order to perform the business transaction, retrieve, at the first server, a next user identity for the next server in the set of identified servers from the data structure; and

forward, from the first server, the data structure to the next server in the set of identified servers, wherein the processing unit executing the computer usable code to retrieve a user identity for the next server of the set of identified servers from the data structure comprises the processing unit executing the computer usable program code to;

identify the user registry for the next server in the set of identified servers, to form a next registry; and

select the user identity in the data structure linked to the next registry.