Unlock instant, AI-driven research and patent intelligence for your innovation.

Identity propagation through application layers by using contextual mapping and planted values

An application layer, technology for mapping data structures, applied in special data processing applications, transmission systems, file systems, etc.

Active Publication Date: 2013-08-07
IBM CORP
View PDF4 Cites 2 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Although application layer audit trails can be used, specific security mechanisms often require data level audit trails and this can only be performed at the database layer

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Identity propagation through application layers by using contextual mapping and planted values
  • Identity propagation through application layers by using contextual mapping and planted values
  • Identity propagation through application layers by using contextual mapping and planted values

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0022] The illustrative embodiments provide mechanisms for identity propagation through the application layer using context maps and embedded values. The mechanisms of the illustrative embodiments address the above problems by providing a non-intrusive matching mechanism for identity propagation, ie, a matching mechanism that does not require changes to the application front-end code. Moreover, the matching mechanism of the illustrative embodiments is precise because it uses easily identifiable interpolations or implants of unique values ​​rather than values ​​that would appear from multiple database queries.

[0023] The illustrative embodiments work on the basic assumption that it is possible to manipulate incoming user-based requests to the application layer, implant uniquely identifiable values ​​into these requests, and monitor the impact on outgoing database requests, Outgoing database requests are, for example, SQL statements generated by the application layer and sent ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

Mechanisms are provided for propagating source identification information from an application front-end system in an application layer to a data layer inspection system associated with a back-end system. An incoming user request is received, at the data layer inspection system, from a gateway system associated with the application front-end system. One or more outgoing statements targeting a back-end system are received at the data layer inspection system. The data layer inspection system accesses a mapping data structure based on the one or more outgoing statements to correlate the one or more outgoing statements with the incoming user request. The data layer inspection system retrieves source identification information associated with the incoming user request based on the correlation of the one or more outgoing statements with the incoming user request. The data layer inspection system performs a data layer inspection operation based on the source identification information.

Description

technical field [0001] The present application relates generally to improved data processing apparatus and methods, and more particularly to mechanisms for identity propagation through the application layer using context maps and embedded values. Background technique [0002] The modern information processing environment is going through a trend from the traditional client-server model to the application-server model. While the client-server model categorizes information resources as services to clients, the application-based architecture also allows each application to perform specific and / or specialized portions of processing before switching the transaction or data flow to a continuous processing level. The application-server model can exhibit a so-called multi-level arrangement or architecture. In a multi-stage arrangement, each stage is responsible for performing a particular aspect of processing. The stages communicate by passing or transmitting data, usually accordi...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/08
CPCH04L29/06993G06F17/30091H04L29/08009H04L29/08702G06F17/2705H04L29/08711H04L69/28H04L29/0653H04L69/32H04L69/22G06F16/13G06F16/86G06F16/245H04L69/324H04L69/329G06F21/6227H04L61/103G06F2221/2101G06F21/55H04L63/168H04L63/1466G06F40/205H04L67/01G06F11/3664G06F11/3672H04L67/02
Inventor R·本-纳坦L·罗德尼安斯基
Owner IBM CORP