Secure access to a common session in a composite services delivery environment

• US 20070136793A1
• Filed: 12/08/2005
• Published: 06/14/2007
• Est. Priority Date: 12/08/2005
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Moore, Victor, Mandalia, Baiju, Nusbickel, Wendi, Da Palma, William
• Application Number:
  US11/297,079
• Publication Number:
  US 20070136793A1
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: H04L 41/5041 characterised by the time relationship between creation and deployment of a service
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms

Abstract

Embodiments of the present invention provide a method, system and computer program product for deploying and delivering composite services in an NGN network. In the present invention, a secure composite service enabling data processing system can include channel servlets enabled to establish multiple different channels of access to a common session for a composite service and a location registry including a table of entries associating the different channels of access with the common session for the composite service. A model servlet can be configured for coupling to a model for the common session, for modifying state data in the model for the common session, and to synchronize views for each of the different channels of access to the composite service responsive to changes detected in the model. Finally, authentication logic can be coupled to a session manager for the common session and can authenticate each end point for a corresponding one of the channels of access before establishing the corresponding one of the channels of access for the end point.

Claims

1. A method for securely access a session for a composite service in a composite services enablement environment, the method comprising:

creating a session for the composite service in the composite services enablement environment;

authenticating a plurality of end points for corresponding channels of access to the session before establishing the channels of access; and

,

synchronizing changes of state for the composite service in a view for each authenticated one of the channels of access to the session.

2. The method of claim 1, wherein creating a session for the composite service in the composite services enablement environment, further comprises setting authentication data for the session for use when authenticating the end points to establish corresponding channels of access to the session.

3. The method of claim 1, wherein authenticating a plurality of end points for corresponding channels of access to the session before establishing the channels of access, comprises:

prompting each of the end points for authentication data;

comparing authentication data received from the end points responsive to the prompting to pre-configured authentication data in the composite services enablement environment; and

,

for each channel of access, establishing the channel of access only where the received authentication matches the pre-configured authentication.

4. The method of claim 2, wherein authenticating a plurality of end points for corresponding channels of access to the session before establishing the channels of access, comprises:

prompting each of the end points for authentication data;

comparing authentication data received from the end points responsive to the prompting to the set authentication data for the session; and

,

for each channel of access, establishing the channel of access only where the received authentication matches the set authentication data.

5. The method of claim 4, wherein prompting each of the end points for authentication data, comprises lightweight messaging a request for the authentication data to each of the end points.

6. The method of claim 2, wherein authenticating a plurality of end points for corresponding channels of access to the session before establishing the channels of access, comprises:

retrieving identifying data for at least one of the end points;

comparing the identifying data to a pre-configured set of identifying data in the composite services enablement environment; and

,

establishing a channel of access for the at least one end point only where the retrieved identifying data matches an entry in the pre-configured set.

7. The method of claim 1, wherein synchronizing changes of state for the composite service in a view for each authenticated one of the channels of access to the session, comprises:

maintaining the state for the composite service in a model for the composite service;

creating listeners for changes of the state for the composite service;

detecting changes in the state for the composite service in the listeners; and

,

updating the view for each of the authenticated channels of access to the composite service responsive to detecting the changes of state for the composite service in the listeners.

8. A secure composite service enabling data processing system comprising:

a plurality of channel servlets enabled to establish multiple different channels of access to a common session for a composite service;

a location registry comprising a table of entries associating the different channels of access with the common session for the composite service;

a model servlet configured for coupling to a model for the common session, for modifying state data in the model for the common session, and to synchronize views for each of the different channels of access to the composite service responsive to changes detected in the model; and

,

authentication logic coupled to a session manager for the common session, the authentication logic comprising program code enabled to authenticate each end point for a corresponding one of the channels of access to the common session before establishing the corresponding one of the channels of access for the end point.

9. The system of claim 8, wherein the channel servlets comprise a voice enabler and voice server enabled to establish for the single session, a communications channel for a voice channel of access to the composite service.

10. The system of claim 8, wherein the channel servlets, model servlet, session manager and authentication logic are disposed in a Web container.

11. The system of claim 8, wherein the channel servlets, model servlet, session manager and authentication logic are disposed in an Internet protocol (IP) multimedia subsystem (IMS) in a next generation networking (NGN) network.

12. A computer program product comprising a computer usable medium having computer usable program code for securely access a session for a composite service in a composite services enablement environment, the computer program product including:

computer usable program code for creating a session for the composite service in the composite services enablement environment;

computer usable program code for authenticating a plurality of end points for corresponding channels of access to the session before establishing the channels of access; and

,

computer usable program code for synchronizing changes of state for the composite service in a view for each authenticated one of the channels of access to the session.

13. The computer program product of claim 12, wherein the computer usable program code for creating a session for the composite service in the composite services enablement environment, further comprises computer usable program code for setting authentication data for the session for use when authenticating the end points to establish corresponding channels of access to the session.

14. The computer program product of claim 12, wherein the computer usable program code for authenticating a plurality of end points for corresponding channels of access to the session before establishing the channels of access, comprises:

computer usable program code for prompting each of the end points for authentication data;

computer usable program code for comparing authentication data received from the end points responsive to the prompting to pre-configured authentication data in the composite services enablement environment; and

,

computer usable program code for establishing for each channel of access, the channel of access only where the received authentication matches the pre-configured authentication.

15. The computer program of claim 13, wherein the computer usable program code for authenticating a plurality of end points for corresponding channels of access to the session before establishing the channels of access, comprises:

computer usable program code for prompting each of the end points for authentication data;

computer usable program code for comparing authentication data received from the end points responsive to the prompting to the set authentication data for the session; and

,

computer usable program code for establishing, for each channel of access, the channel of access only where the received authentication matches the set authentication data.

16. The computer program product of claim 15, wherein the computer usable program code for prompting each of the end points for authentication data, comprises computer usable program code for lightweight messaging a request for the authentication data to each of the end points.

17. The computer program product of claim 15, wherein the computer usable program code for authenticating a plurality of end points for corresponding channels of access to the session before establishing the channels of access, comprises:

computer usable program code for retrieving identifying data for at least one of the end points;

computer usable program code for comparing the identifying data to a pre-configured set of identifying data in the composite services enablement environment; and

,

computer usable program code for establishing a channel of access for the at least one end point only where the retrieved identifying data matches an entry in the pre-configured set.

18. The computer program product of claim 12, wherein the computer usable program code for synchronizing changes of state for the composite service in a view for each authenticated one of the channels of access to the session, comprises:

computer usable program code for maintaining the state for the composite service in a model for the composite service;

computer usable program code for creating listeners for changes of the state for the composite service;

computer usable program code for detecting changes in the state for the composite service in the listeners; and

,

computer usable program code for updating the view for each of the authenticated channels of access to the composite service responsive to detecting the changes of state for the composite service in the listeners.