System and architecture for distributing, monitoring, and managing information requests on a computer network

• US 6,141,759 A
• Filed: 12/10/1997
• Issued: 10/31/2000
• Est. Priority Date: 12/10/1997
• Status: Expired due to Term

• Current Assignee: BMC Software Incorporated (KKR & Co., Inc.)
• Original Assignee: BMC Software Incorporated (KKR & Co., Inc.)
• Inventors: Braddy, Ricky Gene
• Primary Examiner(s): Peeso, Thomas R.
• Application Number:
  US08/988,107
• Time in Patent Office: 1,056 Days
• Field of Search: 713/201, 713/152, 713/168, 709/203
• US Class Current: 726/14
• CPC Class Codes: G06F 2209/509 Offload
• CPC Class Codes: G06F 9/5044 considering hardware capabilities

Abstract

A system and method are disclosed for distributing, monitoring and managing information requests on a computer network including one or more client computer systems, a first server computer system, and one or more secondary server computer systems. Information requests from the client computer systems to the first server computer system are intercepted and examined by a request broker software system implemented on the first server computer system. The request broker software system examines information regarding the capabilities and resources available on the first server computer system and the secondary server computer systems to determine whether to process the information request locally on the first server computer system or to process the information request remotely on one of the secondary server computer systems. The request broker software system will off-load or distribute the information requests to the secondary server computer systems so as to load-balance the information requests among the secondary server computer systems. The request broker software system will also monitor the processing of information requests and initiate recovery actions in the event a fault or error occurs during the processing of the request. If the information request is to be processed remotely on one of the secondary server computer systems, the request broker software system establishes an authenticated communication channel with the selected secondary server computer system to transmit the information request to the selected server computer system. The secondary server computer system processes the information request and sends the results back to the request broker software system on the first server computer system. The request broker software then sends the results of the information request that was processed either locally or remotely back to the client computer system that originated the information request.

Claims

1. A method for managing information requests on a computer network that includes a client computer system, a first server computer system, and a second server computer system, the method comprising the steps of:

(a) storing, on the first server computer system, configuration information corresponding to resources available on the first and the second server computer systems and corresponding to types of information requests received by the first server computer system that the first server computer system is to manage;

(b) receiving, at the first server computer system, an information request from the client computer system;

(c) examining said configuration information to determine whether said received information request from the client computer system corresponds to one of said information request types to be managed by the first server computer system;

(d) depending on the outcome of step (c), determining whether said information request is to be processed on the first server computer system or the second server computer system;

(e) processing said information request on the selected server computer system; and

(f) transmitting the results of said processing of said information request to the client computer system;

wherein the computer network includes one or more second server computer systems and wherein step (d) further includes the steps of;

(1) examining said configuration information to determine whether one or more of the second server computer systems are capable of processing said information request;

(2) depending on the outcome of step (1), selecting one of the one or more second server computer systems to process said information request in order to distribute the information requests received by the first server computer system among the one or more second server computer systems to balance the load of processing said information requests across the one or more second server computer systems.

2. The method of claim 1, wherein step (a) further includes receiving configuration information from the second server computer system corresponding to types of information requests that the second server computer system is capable of processing.

3. The method of claim 1, wherein said configuration information contains information corresponding to the maximum number of communication connections that may be maintained simultaneously between the first server computer system and the second server computer system.

4. The method of claim 1, wherein said examination of said configuration information includes comparing information contained in said received information request with information contained in said configuration information stored on the first server computer system.

5. The method of claim 1, wherein said configuration information contains URL virtual path information corresponding to types of information requests to be managed by the first server computer system.

6. The method of claim 1, wherein said configuration information contains URL virtual path information corresponding to types of information requests that the second server computer system processes.

7. The method of claim 1, wherein the data format of said received information request is in the HTTP data format.

8. The method of claim 1, wherein the data format of said received information request is in the SSL data format.

9. The method of claim 1, wherein one of said types of information requests to be managed by the first server computer system is a CGI program request.

10. The method of claim 1, wherein step (e) further includes mapping said information request to a set of computer program instructions configured to handle the processing of said information request.

11. The method of claim 10, wherein said set of computer program instructions configured to handle processing of said information request corresponds to a server-side plug-in computer program stored on the first server computer system or the second server computer system.

12. The method of claim 1, wherein said configuration information contains information corresponding to the maximum number of information request processes that can be executing simultaneously on the first server computer system.

13. The method of claim 10, wherein said set of computer program instructions are one of a plurality of sets of computer program instructions that handle the processing of different types of information requests.

14. The method of claim 10, wherein said set of computer program instructions handle the processing of CGI program requests.

15. The method of claim 10, wherein said set of computer program instructions handle the processing of NSAPI requests.

16. The method of claim 10, wherein said set of computer program instructions handle the processing of ISAPI requests.

17. The method of claim 10, wherein said set of computer program instructions handle the processing of JAVA program requests.

18. The method of claim 10, wherein said set of computer program instructions handle the processing of IIOP requests.

19. The method of claim 10, wherein said set of computer program instructions handle the processing of Active Server Page requests.

20. The method of claim 10, wherein said set of computer program instructions handles the processing of said information request and interfaces with the local data sources accessible to said selected server computer system.

21. The method of claim 1, further including the step of assigning a time out value to said information request corresponding to a time out period for said information request, wherein, if said processing of said information request has not completed by the end of said time out period, the first server computer system initiates recovery actions.

22. The method of claim 21, further including the step of re-initiating said processing of said information request on said selected server computer system if an error occurred during said processing of said information request and said time out period has not expired for said information request.

23. The method of claim 22, further including the step of examining said processing error to determine whether to re-initiate said processing of said information request.

24. The method of claim 21, wherein, if said selected server computer system for processing said information request is the second server computer system and a communication failure has occurred between the first server computer system and the second server computer system, said recovery action of the first server computer system includes attempting to re-establish a communication connection between the first server computer system and the second server computer system.

25. The method of claim 1, wherein, if the selected server computer system is the second server computer system, step (e) further includes the steps of.

(1) establishing a communication connection between the first server computer system and the second server computer system;

(2) transmitting said received information request from the first server computer system to the second server computer system, wherein the second server computer system handles the processing of said information request; and

(3) transmitting the results of said processing of said information request from the second server computer system to the first server computer system.

26. The method of claim 1, wherein said configuration information contains information corresponding to types of information requests that are to be stored in a cache memory on the first server computer system, wherein step (e) includes the steps of:

(1) determining whether said information request corresponds to one of said types of information requests that are to be stored in said cache memory;

(2) depending upon the outcome of step (1), determining whether the results of said information request have been previously stored in said cache memory;

(3) depending upon the outcome of step (2), retrieving said previously stored results of said information request from said cache memory, and returning said retrieved cached results as said result of said processing of said information request.

27. The method of claim 26, wherein, if the results of said information request have not been previously stored in said cache memory, step (e) further includes storing the results of said processing in said cache memory.

28. The method of claim 1, further including the steps of

(g) modifying the data format of said information request to incorporate information corresponding to processing said information request on the first or the second server computer system, wherein said modification does not alter the primary content of said information request;

(h) modifying the data format of said results of said processing of said information request to correspond to the data format of said received information request type for transmission to the client computer system, wherein said modification does not alter the primary content of said results.

29. The method of claim 1, wherein the computer network includes a third server computer system, the method further including the steps of:

(g) storing, on the second server computer system, configuration information corresponding to resources available on the second and the third server computer system and corresponding to types of information requests received by the second server computer system that the third server computer system is capable of processing;

(h) receiving, at the second server computer system, said information request from the first server computer system;

(i) examining said configuration information on the second server computer system to determine whether said information request is to be processed on the second server computer system or the third server computer system; and

(j) depending on the outcome of step (i), transmitting said information request to the third server computer system, processing said information request on the third server computer system, and transmitting the results of said processing of said information request from the third server computer system to the second server computer system.

30. The method of claim 1, further including the steps:

(a) establishing an encrypted communication channel between the first server computer system and the second server computer system;

(b) transmitting encrypted messages from the first server computer system to the second server computer system, said encrypted messages corresponding to said information requests; and

(c) receiving encrypted messages from the second server computer system to the first server computer system, said encrypted messages corresponding to said results from said processing of said information request.

31. The method of claim 30, wherein said encrypted communication channel is established by a challenge-response authentication procedure between the first server computer system and the second server computer system.

32. The method of claim 31, wherein said challenge-response authentication procedure comprises the steps of:

(a) generating a first password number by the first server computer system;

(b) encrypting said first password number by the first server computer system to generate a first encrypted number;

(c) transmitting said first encrypted number from the first server computer system to the second server computer system;

(d) receiving said first encrypted number at the second server computer system;

(e) decrypting said first encrypted number by the second server computer system to generate said first password number;

(f) modifying said first password number on the second server computer system using a pre-determined algorithm, known to the first server computer system and the second server computer system, to generate a second password number;

(g) encrypting said second password number by the second server computer system to generate a second encrypted number;

(h) transmitting said second encrypted number from the second server computer system to the first server computer system;

(i) receiving said second encrypted number at the first server computer system;

(j) decrypting said second encrypted number to generate said second password number;

(k) modifying said first password number on the first server computer system using said mathematical algorithm to generate a third password number;

(l) comparing said second password number with said third password number; and

(m) depending on the outcome of step (l), determining whether the first server computer system and second server system are authorized to transmit and receive messages from each other.

33. The method of claim 31, wherein said challenge-response authentication procedure comprises the steps of:

(a) generating a first password number by the first server computer system;

(b) encrypting said first password number by the first server computer system to generate a first encrypted number;

(c) transmitting said first encrypted number from the first server computer system to the second server computer system;

(d) receiving said first encrypted number at the second server computer system;

(e) decrypting said first encrypted number by the second server computer system to generate said first password number;

(f) modifying said first password number on the second server computer system using a mathematical algorithm, known to the first server computer system and the second server computer system, to generate a second password number;

(g) generating a third password number by the second server computer system;

(h) encrypting said third password number by the second server computer system to generate a second encrypted number;

(i) transmitting said second encrypted number and said second password number from the second server computer system to the first server computer system;

(j) receiving said second encrypted number and said second password number at the first server computer system;

(k) comparing said second password number with said first password number by the first server computer system to determine whether said first password number was correctly modified by the second server computer system;

(l) depending on the outcome of step (k), determining whether the second server computer system is authorized to receive messages from the first server computer system;

(m) decrypting said second encrypted number by the first server computer system to generate said third password number;

(n) modifying said third password number on the first server computer system using said mathematical algorithm to generate a fourth password number;

(o) transmitting said fourth password number from the first server computer system to the second server computer system;

(p) comparing said fourth password number with said third password number by the second server computer system to determine whether said third password number was correctly modified by the first server computer system; and

(q) depending on the outcome of step (p), determining whether the first server computer system is authorized to receive messages from the second server computer system.

34. A method for securely distributing information requests across a computer network including a client computer system, a first server computer system, at least one second computer system and a network firewall, wherein the network firewall separates the client computer system and the first server computer system from the at least one second server computer system, the method comprising the steps:

(a) storing, on the first server computer system, information corresponding to types of information requests that the at least one second server computer systems are capable of processing;

(b) receiving, at the first server computer system, an information request from the client computer system;

(c) examining said information on the first server computer system to determine whether said received information request corresponds to one of said types of information requests that the at least one second server computer systems are capable of processing;

(d) depending on the outcome of step (c), selecting one of the at least one second server computer systems to process said received information request;

(e) establishing a mutually authenticated communication channel between the first and the selected at least one second server computer system across the network firewall;

(f) transmitting said information request from the first server computer system to the selected at least one second server computer system through the network firewall using said mutually authenticated communication channel;

(g) processing said information request on the selected at least one second server computer system;

(h) transmitting the results of said processing of said information request from the selected at least one second server computer system to the first server computer system using said mutually authenticated communication channel; and

(i) transmitting said results of said processing of said information request from the first server computer system to the client computer system.

35. The method of claim 34, further including the step of maintaining said mutually authenticated communication channel to transmit a plurality of information requests from the first server computer system to the selected at least one second server computer system and to transmit a plurality of said results of said processing of said information requests from the selected at least one second server computer system to the first server computer system.

36. The method of 35, wherein said mutually authenticated communication channel is established using a challenge-response authentication procedure between the first server computer system and the at least one second server computer system.

37. A system for distributing, monitoring, and managing information requests on a computer network comprising:

(a) a client computer system;

(b) a first server computer system connected to said client computer system;

(c) at least one second server computer systems connected to said first server computer system;

(d) said first server computer system further including;

(1) means for receiving an information request from said client computer system;

(2) means for determining whether said received information request may be processed by one of said at least one second server computer systems;

(3) means for distributing said received information request to one of said at least one second server computer systems to process said information request;

(4) means for monitoring said information request to determine whether an error occurs during the processing of said information request;

(5) means for processing said information request on one of said at least one second server computer systems to generate the results of said information request;

(6) means for executing recovery actions in the event an error occurs during said processing of said information request;

(7) means for receiving at said first server computer system said results of said processing of said information request; and

(8) means for transmitting said results of said processing of said information request to said client computer system.

38. A network enterprise management system comprising:

(a) one or more client computer systems;

(b) a first server computer system connected to said one or more client computer systems;

(c) one or more second server computer systems connected to said first server computer system;

(d) said first server computer system including;

(1) means for receiving information requests from said client computer systems;

(2) means for distributing said information requests to one or more of said second server computer systems thereby balancing the information request processing load among said one or more second server computer systems;

(3) means for monitoring said information requests to determine whether a fault or error has occurred during the processing of said information request;

(4) means for initiating recovery actions in the event a fault or error is detected during said processing of said information request;

(5) means for processing said information requests using local data sources connected to said first server computer system in the event said information requests are not distributed to one or more of said second server computer systems;

(6) means for transmitting the results of said processing of said information requests to said client computer systems originating said information requests.

39. The system of claim 38, further including one or more third server computer systems connected to at least one of said one or more second server computer systems, wherein one or more of said second server computer systems include:

(1) means for receiving information requests from said first server computer system;

(2) means for distributing said information requests to one or more of said third server computer systems thereby balancing the information request processing load among said one or more third server computer systems;

(3) means for monitoring said information requests to determine whether a fault or error has occurred during the processing of said information requests;

(4) means for initiating recovery actions in the event a fault or error is detected during said processing of said information requests;

(5) means for processing said information requests using local data sources connected to said second server computer system in the event said information request are not distributed to one or more of said third server computer systems;

(6) means for transmitting the results of said processing of said information requests to said second server computer systems originating said information requests.

40. A method for managing information requests on a computer network that includes a client computer system, a first server computer system, and a second server computer system, the method comprising the steps of:

(a) storing, on the first server computer system, configuration information corresponding to resources available on the first and the second server computer systems and corresponding to types of information requests received by the first server computer system that the first server computer system is to manage;

(b) receiving, at the first server computer system, an information request from the client computer system;

(c) examining said configuration information to determine whether said received information request from the client computer system corresponds to one of said information request types to be managed by the first server computer system;

(d) depending on the outcome of step (c), determining whether said information request is to be processed on the first server computer system or the second server computer system;

(e) processing said information request on the selected server computer system; and

(f) transmitting the results of said processing of said information request to the client computer system;

wherein said configuration information contains information corresponding to types of information requests that are to be stored in a cache memory on the first server computer system and wherein step (e) includes the steps of;

(1) determining whether said information request corresponds to one of said types of information requests that are to be stored in said cache memory;

(2) depending upon the outcome of step (1), determining whether the results of said information request have been previously stored in said cache memory; and

(3) depending upon the outcome of step (2), retrieving said previously stored results of said information request from said cache memory, and returning said retrieved cached results as said result of said processing of said information request.

41. A method for managing information requests on a computer network that includes a client computer system, a first server computer system, and a second server computer system, the method comprising the steps of:

(a) storing, on the first server computer system, configuration information corresponding to resources available on the first and the second server computer systems and corresponding to types of information requests received by the first server computer system that the first server computer system is to manage;

(b) receiving, at the first server computer system, an information request from the client computer system;

(c) examining said configuration information to determine whether said received information request from the client computer system corresponds to one of said information request types to be managed by the first server computer system;

(d) depending on the outcome of step (c), determining whether said information request is to be processed on the first server computer system or the second server computer system;

(e) processing said information request on the selected server computer system;

(f) transmitting the results of said processing of said information request to the client computer system;

(g) modifying the data format of said information request to incorporate information corresponding to processing said information request on the first or the second server computer system, wherein said modification does not alter the primary content of said information request; and

(h) modifying the data format of said results of said processing of said information request to correspond to the data format of said received information request type for transmission to the client computer system, wherein said modification does not alter the primary content of said results.

42. An article of manufacture for securely distributing information requests across a computer network including a client computer system, a first server computer system, at least one second computer system and a network firewall, wherein the network firewall separates the client computer system and the first server computer system from the at least one second server computer system, the article of manufacture comprising:

a computer readable medium; and

a plurality of instructions stored on the computer readable medium, the plurality of instructions configured to initiate;

(a) storing, on the first server computer system, information corresponding to types of information requests that the at least one second server computer systems are capable of processing;

(b) receiving, at the first server computer system, an information request from the client computer system;

(c) examining said information on the first server computer system to determine whether said received information request corresponds to one of said types of information requests that the at least one second server computer systems are capable of processing;

(d) depending on the outcome of step (c), selecting one of the at least one second server computer systems to process said received information request;

(e) establishing a mutually authenticated communication channel between the first and the selected at least one second server computer system across the network firewall;

(f) transmitting said information request from the first server computer system to the selected at least one second server computer system through the network firewall using said mutually authenticated communication channel;

(g) processing said information request on the selected at least one second server computer system;

(h) transmitting the results of said processing of said information request from the selected at least one second server computer system to the first server computer system using said mutually authenticated communication channel; and

(i) transmitting said results of said processing of said information request from the first server computer system to the client computer system.