Systems and methods for distributing event driven network services

Patent metadata

Field	Value
Publication number	US-12432175-B2
Application number	US-202217749537-A
Country	US
Kind code	B2
Filing date	May 20, 2022
Priority date	May 21, 2021
Publication date	Sep 30, 2025
Grant date	Sep 30, 2025

Abstract

Systems and methods are provided for use in providing messaging among different regions, via a distributed event drive architecture. One exemplary method includes receiving, at an event gateway in a region, a network message from a different event gateway in a different region, via a persistent connection between the event gateway and the different event gateway, and validating, by the event gateway, the network message based on at least a certificate associated with the network message. The method also includes, in response to validation of the network message, converting, by the event gateway, the network message to an event and publishing, by the event gateway, the event to the message bus, thereby providing the event associated with the network message to a service to which the network request is directed.

First claim

What is claimed is:

1. A network for use in providing messaging among different regions, the network comprising:
at least one event gateway for coupling to a message bus in a first region, wherein the at least one event gateway is configured to:
receive a network message from a different event gateway in a different region, via a persistent connection between the at least one event gateway and the different event gateway;
validate the network message based on a certificate included in the network message being issued by a trusted source;
determine whether a distinguished name (DN) in the certificate is authorized to access a service to which the network measage is directed; and
in response to validation of the network message and determination that the DN is authorized to access the service:
convert the network message to an event; and
publish the event to an event topic on the message bus, wherein the event topic is specific to a service, thereby providing the event associated with the network message to the service to which the network message is directed.

2. The network of claim 1 , wherein the network message includes an HTTP request; and
wherein the network message is received via a persistent connection consistent with an HTTP/2 connection with the different event gateway.

3. The network of claim 1 , wherein the at least one event gateway is configured to establish the persistent connection with the different event gateway, based on a hostname included in an event to the message bus, prior to receiving the network message from the different event gateway.

4. The network of claim 1 , wherein the at least one event gateway is configured, in order to validate the network message, to:
determine that the network message is authentic based on mutual transport layer security (MTLS) with the different event gateway.

5. The network of claim 4 , wherein the at least one event gateway is configured, in order to validate the network message, to check the network message for malicious content based on one or more rules.

6. A computer-implemented method for use in providing messaging among different regions, the method comprising:
receiving, by a first event gateway computing device disposed in a first region, a network message from a second event gateway computing device in a second region, via a persistent connection between the first event gateway computing device and the second event gateway computing device;
validating, by the first event gateway computing device, the network message based on a certificate in the network message being issued by a trusted source;
determining, by the first event gateway computing device, whether a distinguished name (DN) in the certificate is authorized to access a service to which the network message is directed; and
in response to validating the network message and determining the DN is authorized to access the service:
converting, by the first gateway computing device, the network message to an event; and
publishing, by the first gateway computing device, the event to an event topic on a message bus, wherein the event topic is specific to a service, thereby providing the event associated with the network message to the service to which the network request is directed.

7. The computer-implemented method of claim 6 , wherein the network message includes an HTTP request; and
wherein receiving the network message includes receiving, by an HTTP handler of the first event gateway computing device, the network message via an HTTP/2 connection with the second event gateway computing device.

8. The computer-implemented method of claim 7 , wherein validating the network message is further based on:
determining, by a secure access handler of the first event gateway computing device, that the network message is authentic based on mutual transport layer security (MTLS) with the second event gateway computing device.

9. The computer-implemented method of claim 6 , further comprising establishing, by the first event gateway computing device, the persistent connection with the second event gateway computing device based on a hostname included in an event published to the message bus, prior to receiving the network message from the second event gateway computing device.

10. The computer-implemented method of claim 6 , wherein validating the network message includes checking the network message for malicious content based on one or more rules.

11. A non-transitory computer-readable storage media including executable instructions, which when executed by at least one processor of a first event gateway computing device in a first region, cause the at least one processor to:
receive a network message from a second event gateway computing device in a second region, via a persistent connection between the first event gateway computing device and the second event gateway computing device;
validate the network message based on a certificate included in the network message being issued by a trusted source;
determine whether a distinguished name (DN) in the certificate is authorized to access a service to which the network message is directed; and
in response to validation of the network message and determination that the DN is authorized to access the service:
convert the network message to an event; and
publish the event to an event topic on a message bus, wherein the event topic is specific to a service, thereby providing the event associated with the network message to the service to which the network request is directed.

12. The non-transitory computer-readable storage media of claim 11 , wherein the executable instructions, when executed by the at least one processor, cause the at least one processor, in connection with validating the network message, to:
determine the network message is authentic based on mutual transport layer security (MTLS) with the second event gateway computing device.

13. The non-transitory computer-readable storage media of claim 11 , wherein the executable instructions, when executed by the at least one processor, cause the at least one processor, in connection with converting the network message to an event, to limit certain information from the network message in the event based on a region to which the event is directed.

Assignees

• Mastercard International Inc

Inventors

• Thumma Bharat Reddy
• Maus Jim
• Zou Jun
• Augustine Belgi K
• Zhang Jian

Classifications

• H04L63/166

  at the transport layer · CPC title

• H04L63/0209 Primary

  Architectural arrangements, e.g. perimeter networks or demilitarized zones · CPC title

• H04L63/0823 Primary

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title