SECURE SERVICE ORIENTED ARCHITECTURE

• US 20110099558A1
• Filed: 12/29/2010
• Published: 04/28/2011
• Est. Priority Date: 05/21/2004
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Kasi, Jayaram, Mihic, Matthew, Urhan, Tolga, Kapoor, Chet, Aletty, Ashok, Patrick, Paul B.
• Granted Patent: US 8,688,972 B2
• Time in Patent Office: Days
• US Class Current: 719/315
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/00 Network arrangements or protocols for supporting network services or applications user-to-user messaging H04L51/00; network arrangements, protocols or services for supporting real-time applications in data packet communications networks H04L65/00

Abstract

A system, method and media for a service oriented architecture. This description is not intended to be a complete description of, or limit the scope of, the invention. Other features, aspects and objects of the invention can be obtained from a review of the specification, the figures and the claims.

Claims

1. A system for use in a service oriented architecture (SOA) environment, for processing messages using one or more service proxies, comprising:

a computer, which includes a computer readable storage medium and a processor;

a software interface, which is instantiated on the computer and compatible with a service proxy, and which is configured to receive messages for processing by the SOA environment;

a message processing graph which includes

a message processing pathway defined by the service proxy, instantiated on the computer, and associated with the software interface, and

a plurality of message processing nodes, which are associated with paths defined by the message processing pathway, wherein for a particular path each message processing node in that particular path includes a set of message processing stages that operate on a received message in a particular sequence; and

wherein, when a message is received by the service proxy via the software interface, the message is processed according to the message processing graph and the message processing pathway defined by the service proxy.

2. The system of claim 1, further comprising:

a context, associated with the message and stored at the service proxy, which includes a plurality of message context variables including a lookup variable, and wherein the context is accessible to each message processing stage through which the message processing stages exchange information.

3. The system of claim 2, wherein a branch node, in the plurality of message processing nodes, processes the message including selecting, based on the lookup variable stored in the context, one of the plurality of paths to further process the message.

4. The system of claim 1, wherein when the message is received by the service proxy via its software interface, the message is further processed, including:

transforming the message using a transformation mapping between a protocol associated with the message and a transmission protocol, wherein transformation mapping defines how context variables and transport-specific details within the message are to be modified, to conform the message with requirements of the transmission protocol.

5. The system of claim 1, wherein the service proxy is clustered to allow multiple instances of the service proxy and message pathway to process multiple incoming messages concurrently.

6. A method for use in a service oriented architecture (SOA) environment, for processing messages using one or more service proxies, comprising the steps of:

instantiating a software interface compatible with a service proxy which is configured to receive messages for processing by the SOA environment;

instantiating a message processing pathway defined by the service proxy associated with the software interface, wherein the message processing pathway is associated with a plurality of message processing nodes which are associated with a paths defined by the message processing pathway, wherein for a particular path each message processing node in that particular path includes a set of message processing stages that operate on a received message in a particular sequence;

incorporating the message processing pathway into a message processing graph;

receiving a message by the service proxy through the software interface; and

processing the message according to the message processing graph and the message processing pathway defined by the service proxy.

7. The method of claim 6, wherein the message is associated with a context, stored at the service proxy, which includes a plurality of message context variables including a lookup variable, and wherein the context is accessible to each message processing stage through which the message processing stages exchange information.

8. The method of claim 7, further comprising:

processing the message by a branch node, in the plurality of message processing nodes, including selecting, based on the lookup variable stored in the context, one of the plurality of paths to further process the message.

9. The method of claim 6, wherein processing the message according to the message processing graph and the message processing pathway defined by the service proxy, comprises:

transforming the message using a transformation mapping between a protocol associated with the message and a transmission protocol, wherein the transformation mapping defines how context variables and transport-specific details within the message are to be modified, to conform the message with requirements of the transmission protocol.

10. The method of claim 6, wherein the service proxy is clustered to allow multiple instances of the service proxy and message pathway to process multiple incoming messages concurrently.

11. A non-transitory computer readable storage medium including instructions stored therein which, when executed by a computer, cause the computer to perform the steps of:

instantiating a software interface compatible with a service proxy which is configured to receive messages for processing by the SOA environment;

instantiating a message processing pathway defined by the service proxy associated with the software interface, wherein the message processing pathway is associated with a plurality of message processing nodes which are associated with a paths defined by the message processing pathway, wherein for a particular path each message processing node in that particular path includes a set of message processing stages that operate on a received message in a particular sequence;

incorporating the message processing pathway into a message processing graph;

receiving a message by the service proxy through the software interface; and

processing the message according to the message processing graph and the message processing pathway defined by the service proxy.

12. The non-transitory computer readable storage medium of claim 11, wherein the message is associated with a context, stored at the service proxy, which includes a plurality of message context variables including a lookup variable, and wherein the context is accessible to each message processing stage through which the message processing stages exchange information.

13. The non-transitory computer readable storage medium of claim 12, further comprising:

processing the message by a branch node, in the plurality of message processing nodes, including selecting, based on the lookup variable stored in the context, one of the plurality of paths to further process the message.

14. The non-transitory computer readable storage medium of claim 11, wherein processing the message according to the message processing graph and the message processing pathway defined by the service proxy, comprises:

transforming the message using a transformation mapping between a protocol associated with the message and a transmission protocol, wherein the transformation mapping defines how context variables and transport-specific details within the message are to be modified, to conform the message with requirements of the transmission protocol.

15. The non-transitory computer readable storage medium of claim 11, wherein the service proxy is clustered to allow multiple instances of the service proxy and message pathway to process multiple incoming messages concurrently.