Electrical computers and digital processing systems: support – Multiple computer communication using cryptography – Protection at a particular protocol layer
Reexamination Certificate
2000-01-04
2004-11-30
Morse, Gregory (Department: 2134)
Electrical computers and digital processing systems: support
Multiple computer communication using cryptography
Protection at a particular protocol layer
C709S229000
Reexamination Certificate
active
06826695
ABSTRACT:
FIELD OF THE INVENTION
The present invention relates to multiplatform computer system networks, and more particularly to the grouping of computer systems in the networks.
BACKGROUND OF THE INVENTION
In distributed computer networks, many operating system platforms may be employed on server and client systems within the network. Each different platform utilizes its own administrative rules for user login procedures. Thus, each platform typically has characteristic techniques for assigning user identifiers and passwords to control access to the resources and services of the system. In large, heterogeneous network environments, difficulty exists in providing user access to resources on a platform that is different than the one the user is logged into. Thus, the user is restricted from effectively and efficiently utilizing the resources of the network.
One method and system of providing a common user identify and to integrate the user's experience among different platforms without being intrusive is developed by International Business Machines Corporation™. This method and system is described in co-pending U.S. Patent Application entitled, “Method and System for a Heterogeneous Computer Network System with Unobtrusive Cross-Platform User Access”, Ser. No. 09/165,368, filed on Oct. 2, 1998. In an exemplary system aspect, a plurality of computer systems are coupled in a network, each of the computer systems operating according to one of a plurality of operating system platforms. Each of the operating system platforms has an associated security mechanism. The network further includes an enterprise directory included on at least one server system of the computer systems. The Enterprise Directory is configured for security interception to allow an authorized user access among the services of the computer systems without affecting the associated security mechanisms of the operating system platforms.
Through this network, local security procedures and policies apply on each platform, thus allowing users to log-on to a single network operating system according to that system's known log-in procedures. A user object is achieved that, when spanning all systems, provides a distributed user context that is useful in unobtrusively achieving access to separate platforms. However, this network may be inefficient in that each user object has access to all systems in the network. It may be unnecessary or undesirable for a user object to have such broad access.
Difficulty also exists for user access through the Internet to large heterogeneous network environments. For example, XYZ Corporation may build a web site and provide application logic behind the web site on one system on a particular platform. The same corporation may build another web site on another system with a different platform. The web sites may not be linked to one another. The effect of the lack cooperation between XYZ Corporation's web sites is Internet user aggravation and an inability for XYZ Corporation to collect coordinated data on their Internet customers. For example, and Internet user interacts with a web application on one of the systems. This system asks the Internet user for his or her name, address, credit-card information, and many others things. The Internet user also interacts with a web application on another system. Since these systems do not share any user context information, the second system asks the Internet user to enter the same information again. The Internet user is thus aggravated, because XYZ Corporation does not behave as one comp any, making the user perform extra typing for no obvious benefit.
In addition to aggravating the Internet use r, XYZ Corporation also deprives itself of coordinated customer data across its divisions. At a minimum, coordinating customer data is difficult since XYZ Corporation will need to mine data from several sources and to cross check for duplicated customers.
Accordingly, there exists a need for an improved method and system for unobtrusively achieving secure cross-platform access in a heterogeneous network environment. The present invention addresses such a need.
SUMMARY OF THE INVENTION
The present invention provides an improved method and system for unobtrusively achieving secure cross-platform access in a heterogeneous network environment. In a system aspect, the system includes a plurality of heterogeneous computer systems, at least two of the computer systems including a system specified user identification; and an enterprise directory service, the enterprise directory service being shared by the plurality of computer systems to provide for the formation of an enterprise group, the enterprise directory service including at least one enterprise user which is associated with system specified user identification from the at least two of the computer systems. The system in the network in accordance with the present invention may perform cooperative programming with other systems in the same enterprise group. Systems within the same enterprise group are allowed to define enterprise users between them. Enterprise groups establish boundaries of who can and cannot share enterprise user definitions. They also establish administrative groups of systems. They establish where trusted directory servers must, can, and cannot reside. They also establish which enterprise directory service adapter can interact, i.e., scope of impersonation. By allowing for the grouping of systems, access to systems in the network may be more readily controlled. Unnecessary or undesirable access may be minimized.
REFERENCES:
patent: 5218699 (1993-06-01), Brandle et al.
patent: 5815665 (1998-09-01), Teper et al.
patent: 6065054 (2000-05-01), Dutcher et al.
patent: 6158010 (2000-12-01), Moriconi et al.
patent: 6192405 (2001-02-01), Bunnell
patent: 6243816 (2001-06-01), Fang et al.
patent: 6269405 (2001-07-01), Dutcher et al.
patent: 6269406 (2001-07-01), Dutcher et al.
patent: 6732172 (2004-05-01), House et al.
Daugherty Richard Lee
House Daniel Edward
Immanuel Chandra Paul
McGarvey John Ryan
Shi Shaw-Ben Shepherd
Morse Gregory
Nalven Andrew
Sawyer Law Group LLP
LandOfFree
Method and system for grouping of systems in heterogeneous... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Method and system for grouping of systems in heterogeneous..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method and system for grouping of systems in heterogeneous... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-3274292