Connection model-based control of concurrent connection count and properties

Patent metadata

Field	Value
Publication number	US-9438637-B2
Application number	US-201213706919-A
Country	US
Kind code	B2
Filing date	Dec 6, 2012
Priority date	Dec 6, 2012
Publication date	Sep 6, 2016
Grant date	Sep 6, 2016

Abstract

A connection request including a connection model key and a partner system attribute of the partner system requesting a connection is received at an application server from a partner system. Using a predefined connection model, as determination is made as to whether the received connection model key and the received partner system attribute respectively match a configured connection model key and a configured authorized partner system attribute within the predefined connection model. In response to determining that the received connection model key and the received partner system attribute match the respective configured connection model key and the configured authorized partner system attribute within the predefined connection model, a connection is created that includes a first unique connection name derived from the received partner system attribute.

First claim

What is claimed is:

1. A system, comprising:
a memory; and
a processor programmed to execute an application server to:
receive, from a partner system, a connection request comprising a connection model key and a partner system attribute of the partner system requesting a connection;
determine, using a predefined connection model stored within the memory, whether the received connection model key and the received partner system attribute respectively match a configured connection model key and a configured authorized partner system attribute within the predefined connection model;
create, in response to determining that the received connection model key and the received partner system attribute match the respective configured connection model key and the configured authorized partner system attribute within the predefined connection model, a connection that comprises a first unique connection name derived from the received partner system attribute, where the predefined connection model comprises a connection namespace field limitation that limits a number of created unique connection names;
enforce a limit on a number of multiplexed logical connections to the application server from partner systems that share the partner system attribute using the connection namespace field limitation within the predefined connection model; and
receive additional connection requests comprising the connection model key from additional partner systems that share the partner system attribute; and
where, in being programmed to enforce the limit on the number of multiplexed logical connections to the application server from the partner systems that share the partner system attribute using the connection namespace field limitation within the predefined connection model, the processor is programmed to:
for each additional connection request:
determine whether the limit on the number of multiplexed logical connections to the application server from the partner systems that share the partner system attribute has been reached based upon the connection namespace field limitation that limits the number of created unique connection names and based upon previously-created connection names; and
create, in response to determining that the limit on the number of multiplexed logical connections has not been reached, an additional multiplexed logical connection that comprises an additional unique connection name derived from the received partner system attribute and based upon the previously-created connection names.

2. The system of claim 1 , where in being programmed to create, in response to determining that the received connection model key and the received partner system attribute match the respective configured connection model key and the configured authorized partner system attribute within the predefined connection model, the connection that comprises the first unique connection name derived from the received partner system attribute, the processor is programmed to:
concatenate the received partner system attribute and a next available connection number to form the first unique connection name.

3. The system of claim 1 , where the processor is further programmed to deny at least one additional connection request in response to determining, based upon the namespace field limitation that limits the number of created unique connection names and the previously-created connection names, that the limit on the number of multiplexed logical connections to the application server from partner systems that share the partner system attribute has been reached.

4. The system of claim 1 , where the processor is further programmed to:
receive a request to terminate the created additional multiplexed logical connection from one of the additional partner systems;
terminate the additional multiplexed logical connection to the one of the additional partner systems requesting the termination of the additional multiplexed logical connection; and
reuse the additional unique connection name used by the terminated additional multiplexed logical connection for a new multiplexed logical connection in response to a new connection request comprising the connection model key and the partner system attribute.

5. The system of claim 1 , where:
the predefined connection model authorizes a plurality of specific partner system instances to connect using the predefined connection model via the partner system attribute; and
the processor is further programmed to enforce connection authorization of multiplexed logical connections to the application server using the configured authorized partner system attribute within the predefined connection model.

6. The system of claim 1 , where the partner system attribute comprises a partner system cluster application instance identifier.

7. A computer program product, comprising:
a computer readable storage device having computer readable program code embodied therewith, where the computer readable program code when executed on a computer causes the computer execute an application server to:
receive, from a partner system, a connection request comprising a connection model key and a partner system attribute of the partner system requesting a connection;
determine, using a predefined connection model, whether the received connection model key and the received partner system attribute respectively match a configured connection model key and a configured authorized partner system attribute within the predefined connection model;
create, in response to determining that the received connection model key and the received partner system attribute match the respective configured connection model key and the configured authorized partner system attribute within the predefined connection model, a connection that comprises a first unique connection name derived from the received partner system attribute, where the predefined connection model comprises a connection namespace field limitation that limits a number of created unique connection names;
enforce a limit on a number of multiplexed logical connections to the application server from partner systems that share the partner system attribute using the connection namespace field limitation within the predefined connection model; and
receive additional connection requests comprising the connection model key from additional partner systems that share the partner system attribute; and
where in causing the computer to enforce the limit on the number of multiplexed logical connections to the application server from the partner systems that share the partner system attribute using the connection namespace field limitation within the predefined connection model, the computer readable program code when executed on the computer causes the computer to:
for each additional connection request:
determine whether the limit on the number of multiplexed logical connections to the application server from the partner systems that share the partner system attribute has been reached based upon the connection namespace field limitation that limits the number of created unique connection names and based upon previously-created connection names; and
create, in response to determining that the limit on the number of multiplexed logical connections has not been reached, an additional multiplexed logical connection that comprises an additional unique connection name derived from the received partner system attribute and based upon the previously-created connection names.

8. The computer program product of claim 7 , where in causing the computer to create, in response to determining that the received connection model key and the received partner system attribute match the respective configured connection model key and the configured autho

Assignees

• IBM

Inventors

• Allen Gerald M W
• Brooks Michael D
• Wakelin Philip I

Classifications

• H04L63/101

  Access control lists [ACL] · CPC title

• H04L67/1023 Primary

  based on a hash applied to IP addresses or costs · CPC title

• H04L65/1069 Primary

  Session establishment or de-establishment · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L67/141 Primary

  Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70) · CPC title