System and method for web services management

• US 9,407,513 B2
• Filed: 03/13/2013
• Issued: 08/02/2016
• Est. Priority Date: 07/01/2005
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Inventors: Shah, Mehul K., Lorenzo, Austin, Rodrigues, Ruchir, Bolduc, Paul, Anumala, Srinivas, Goyal, Vishnu
• Primary Examiner(s): Vaughan, Michael R
• Application Number:
  US13/800,944
• Publication Number:
  US 20130268645A1
• Time in Patent Office: 1,238 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: H04L 41/0273 using web services for network management, e.g. simple object access protocol [SOAP]
• CPC Class Codes: H04L 41/5003 Managing SLA; Interaction between SLA and QoS
• CPC Class Codes: H04L 41/5032 Generating service level reports
• CPC Class Codes: H04L 41/5048 Automatic or semi-automatic definitions, e.g. definition templates
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

Disclosed is a system and method for managing web services. The described exemplary system and method provides an infrastructure for managing various aspects of publishing and using web services, such as logging, security, monitoring, SLA management, service level metrics and notification.

Claims

1. A web service management system, comprising:

a server-side web service publisher platform that includes computer hardware, a web service repository containing published web services that are provided by said server-side web service publisher platform for access by one or more client-side web service subscribing applications, and a service agent that intercepts a web service request, from a client-side web service subscribing application included in said one or more client-side web service subscribing applications, for access to a web service included in said published web services and selectively authorizes or denies said access to said web service by said client-side web service subscribing application; and

a web service management platform that includes computer hardware and that is accessible to said server-side web service publisher platform over a communication network, said web service management platform comprising one or more web service management modules configured to monitor said published web services and report exceptions to said published web services;

wherein said service agent authorizes said access to said web service by said client-side web service subscribing application by;

examining a cache maintained by said service agent;

determining, based on data in said cache, that credentials for said client-side web service subscribing application have not been previously validated within a defined time frame;

sending said credentials and an identifier of said web service to a security unit included in said web service management platform for validation;

receiving a response from said security unit; and

evaluating said response to validate said credentials.

2. The system of claim 1, wherein said request comprises subscriber identification credentials for said client-side web service subscribing application.

3. The system of claim 1, wherein said service agent in said server-side web service publisher platform comprises a security application configured to communicate with said web service management platform in order to present and verify said web service request.

4. The system of claim 1, wherein said service agent in said server-side web service publisher platform is further configured to pass said web service request to said web service repository in response to said service agent authorizing said access to said web service by said client-side web service subscribing application.

5. The system of claim 1, wherein said security unit included in said web service management platform for validation is configured to receive said web service request from said service agent and inspect whether said client-side web service subscribing application is authorized to access said web service.

6. The system of claim 5, wherein said security unit includes a security policy server and a security policy database accessible to said security policy server, said security policy database containing authorization information related to said web service repository, said security policy server configured to manage different levels of access via user identifications.

7. The system of claim 1, wherein said web service management platform further comprises a logging unit that is configured to collect login information related to the web service request.

8. The system of claim 1, wherein said web service management platform further comprises an executive dashboard user interface for publishing and subscribing to web services.

9. The system of claim 1, wherein said one or more web service management modules of said web service management platform include a monitoring service that is configured to detect exception events and generate notifications for said exception events.

10. The system of claim 9, wherein said monitoring service includes a service-level agreement (“

SLA”

) evaluator that is configured to measure SLA data against a set of pre-defined rules.

11. The system of claim 9, wherein said one or more web service management modules of said web service management platform further include a notification service that is configured to receive said notifications from said monitoring service and pass said notifications to a web service subscriber.

12. The system of claim 1, wherein at least one of said one or more web service management modules of said web service management platform is configured to, in response to a user request, generate custom reports related to web services specified in said user request.

13. The system of claim 1, wherein said one or more web service management modules of said web service management platform include a monitoring service that is configured to detect a breach of a service-level agreement and to generate a notification of said breach of said service-level agreement.

14. The system of claim 1, wherein said service agent passes, after said credentials are validated, said web service request to said web service to facilitate access of said web service by said client-side web service subscribing application.

15. The system of claim 1, wherein said service agent caches, after said credentials are validated, data representative of said credentials and expiration information for said credentials.

16. A method comprising:

receiving, by a web service agent included in a server-side web service publisher platform that includes computer hardware and a web service repository containing published web services that are provided by said server-side web service publisher platform for access by one or more client-side web service subscribing applications, a web service request, from a client-side web service subscribing application included in said one or more client-side web service subscribing applications, for access to a web service included in said published web services; and

selectively authorizing or denying, by said web service agent, access to said web service by said client-side web service subscribing, the selectively authorizing or denying of said access to said web service comprising;

examining a cache maintained by said service agent;

determining, based on data in said cache, that credentials for said client-side web service subscribing application have not been previously validated within a defined time frame;

sending said credentials and an identifier of said web service to a web service management platform communicatively coupled to said server-side web service publisher platform by a network, said web service management platform including computer hardware and one or more web service management modules configured to monitor said published web services and report exceptions to said published web services;

receiving a response from said web service management platform; and

evaluating said response to validate said credentials.

17. The method of claim 16, further comprising:

passing, by said web service agent after said credentials are validated, said web service request to said web service to facilitate access of said web service by said client-side web service subscribing application.

18. The method of claim 16, further comprising:

caching, by said web service agent after said credentials are validated, data representative of said credentials and expiration information for said credentials.

19. A non-transitory computer-readable medium comprising computer-executable instructions configured to direct a computer device to:

receive, by a web service agent included in a server-side web service publisher platform that includes computer hardware and a web service repository containing published web services that are provided by said server-side web service publisher platform for access by one or more client-side web service subscribing applications, a web service request, from a client-side web service subscribing application included in said one or more client-side web service subscribing applications, for access to a web service included in said published web services; and

selectively authorize or deny, by said web service agent, access to said web service by said client-side web service subscribing, the selectively authorizing or denying of said access to said web service comprising;

examining a cache maintained by said service agent;

determining, based on data in said cache, that credentials for said client-side web service subscribing application have not been previously validated within a defined time frame;

sending said credentials and an identifier of said web service to a web service management platform communicatively coupled to said server-side web service publisher platform by a network, said web service management platform including computer hardware and one or more web service management modules configured to monitor said published web services and report exceptions to said published web services;

receiving a response from said web service management platform; and

evaluating said response to validate said credentials.

20. The non-transitory computer-readable medium of claim 19, wherein said computer-executable instructions are further configured to direct said computer device to:

pass, by said web service agent after said credentials are validated, said web service request to said web service to facilitate access of said web service by said client-side web service subscribing application.

21. The non-transitory computer-readable medium of claim 19, wherein said computer-executable instructions are further configured to direct said computer device to:

cache, by said web service agent after said credentials are validated, data representative of said credentials and expiration information for said credentials.