Security apparatus and method for a data processing system

• US 5,870,542 A
• Filed: 12/28/1995
• Issued: 02/09/1999
• Est. Priority Date: 12/28/1995
• Status: Expired due to Term

• Current Assignee: International Business Machines Corporation
• Original Assignee: Sterling Commerce (America) Incorporated (International Business Machines Corporation)
• Inventors: Ander, S. Dale, Von See, Christopher
• Primary Examiner(s): LE, DIEU MINH T
• Application Number:
  US08/580,136
• Time in Patent Office: 1,139 Days
• Field of Search: 395/186, 395/187.01, 395/188.01, 395/200.03, 395/200.06, 395/438, 395/479, 395/490, 395/726, 395/200.33, 395/200.42, 395/200.43, 395/200.47 , 395/200.49, 395/200.57, 380/4, 380/23, 380/25, 364/222.5, 711/111, 711/152, 711/163
• US Class Current: 726/5
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

A data processing system (10) includes processing nodes (12, 18) and submitting nodes (14, 16, 20, 22). Each processing node (12, 18) includes a list of remote proxies (36, 50) and a list of local proxies (38, 52). The remote proxies (36, 50) and local proxies (38, 52) specify access to the storage or processing capabilities of the processing nodes (12, 18) by the submitting nodes (14, 16, 20, 22).

Claims

1. A data processing system, comprising:

a submitting node having an identifier;

a processing node coupled to the submitting node, the processing node having a memory operable to store a proxy associated with the submitting node, the proxy specifying a location in the memory of the processing node accessible by the submitting node, the processing node operable to receive the identifier of the submitting node and to provide the submitting node access to the processing node in accordance with the proxy; and

a remote node coupled to the submitting node and the processing node, the remote node operable to receive the identifier of the submitting node and to communicate the identifier to the processing node.

2. The system of claim 1, wherein the identifier comprises a first identifier associated with the submitting node and a second identifier associated with the remote node.

3. The system of claim 1, wherein the identifier of the submitting node is included in a process to be executed at the location in the memory of the processing node specified by the proxy.

4. The system of claim 1, wherein the proxy comprises:

a remote proxy associated with the submitting node, the remote proxy having first access parameters and a local identifier for the submitting node; and

a local proxy associated with the local identifier, the local proxy having second access parameters.

5. The system of claim 1, wherein the proxy comprises:

a remote proxy associated with the submitting node, the remote proxy having first access parameters and a local identifier for the submitting node;

a local proxy associated with the local identifier, the local proxy having second access parameters; and

wherein the first access parameters from the remote proxy take precedence over the second access parameters from the local proxy.

6. The system of claim 1, wherein the proxy comprises:

a download directory specifying a location in the memory of the processing node operable to store files to send to the submitting node; and

an upload directory specifying a location in the memory of the processing node operable to store files received from the submitting node.

7. The system of claim 1, wherein the proxy comprises:

a download authorization indicating that the submitting node may receive files stored at the processing node;

a download directory specifying a location in the memory of the processing node operable to store files to send to the submitting node;

an upload authorization indicating that the submitting node may store files at the processing node; and

an upload directory specifying a location in the memory of the processing node operable to store files received from the submitting node.

8. A method for providing access to a processing node, comprising the steps of:

communicating an identifier from a submitting node to a remote node;

communicating the identifier from the remote node to the processing node;

retrieving a proxy stored at the processing node using the identifier, the proxy specifying a location in a memory of the processing node accessible by the submitting node; and

providing the submitting node access to the processing node in accordance with the proxy.

9. The method of claim 8, wherein the identifier comprises a first identifier associated with the submitting node and a second identifier associated with the remote node.

10. The method of claim 8, wherein the identifier of the submitting node is included in a process to be executed on the processing node.

11. The method of claim 8, wherein the proxy comprises:

a remote proxy associated with the submitting node, the remote proxy having first access parameters and a local identifier for the submitting node; and

a local proxy associated with the local identifier, the local proxy having second access parameters.

12. The method of claim 8, wherein the proxy comprises:

a remote proxy associated with the submitting node, the remote proxy having first access parameters and a local identifier for the submitting node;

a local proxy associated with the local identifier, the local proxy having second access parameters; and

wherein the first access parameters from the remote proxy take precedence over the second access parameters from the local proxy.

13. The method of claim 8, wherein the proxy comprises:

a download directory specifying a location in the memory of the processing node operable to store files to send to the submitting node; and

an upload directory specifying a location in the memory of the processing node operable to store files received from the submitting node.

14. The method of claim 8, wherein the proxy comprises:

a download authorization indicating that the submitting node may receive files stored at the processing node;

a download directory specifying a location in the memory of the processing node operable to store files to send to the submitting node;

an upload authorization indicating that the submitting node may store files at the processing node; and

an upload directory specifying a location in the memory of the processing node operable to store files received from the submitting node.

15. A method for generating access parameters for a submitting node accessing a processing node, the method comprising the steps of:

retrieving a remote proxy associated with the submitting node, the remote proxy having a plurality of first access parameters and a local identifier for the submitting node;

retrieving a local proxy associated with the local identifier, the local proxy having a plurality of second access parameters; and

generating access parameters for the submitting node using the first access parameters from the remote proxy and the second access parameters from the local proxy.

16. The method of claim 15, wherein the remote proxy is retrieved in response to an identification statement received from the submitting node.

17. The method of claim 15, wherein the first access parameters from the remote proxy take precedence over the second access parameters from the local proxy.

18. The method of claim 15, wherein the access parameters comprise:

a download directory specifying a location in the memory of the processing node operable to store files to send to the submitting node; and

an upload directory specifying a location in the memory of the processing node operable to store files received from the submitting node.

19. The method of claim 15, wherein the access parameters comprise:

a download authorization indicating that the submitting node may receive files stored at the processing node;

a download directory specifying a memory location of the processing node operable to store files to send to the submitting node;

an upload authorization indicating that the submitting node may store files at the processing node; and

an upload directory specifying a memory location of the processing node operable to store files received from the submitting node.