MICHAEL ROBERT THOMPSON, R.PH.
Pharmacy at 41 St, Austin, TX

2011004, Feb 24, 2011

Aug 20, 2009

12/544745

Paul W. Bennett - Austin TX, US
Elisa A. Ferracane - Austin TX, US
Daniel E. Morris - Austin TX, US
Michael C. Thompson - Austin TX, US

INTERNATIONAL BUSINESS MACHINES CORPORATION - Armonk NY

G06F 21/00, G06F 9/00

726 1, 726 2, 713100

Disclosed is a computer implemented method, computer program product, and apparatus to switch security configurations. A data processing system accesses a first security configuration via a thread of execution, wherein a security configuration comprises at least one security parameter. The thread receives an incoming request. The thread switches to a second security configuration that specifies a resource, based on the incoming request, responsive to receiving the incoming request. The thread stores the second security configuration or a reference to the second security configuration to a stack. The thread authenticates the incoming request based on the second security configuration. The thread grants or denies access to the resource. The thread executes a method referenced in the incoming request. The thread restores to a first security configuration, responsive to completing the method.

2013017, Jul 11, 2013

Jan 11, 2012

13/348466

William J. O'Donnell - Fichburg WI, US
Paul William Bennett - Austin TX, US
Elisa Ferracane - Austin TX, US
Michael Craig Thompson - Austin TX, US
Christopher Michael Dettlaff - Apex NC, US

International Business Machines Corporation - Armonk NY

G06F 21/00

726 6

A method for selectively refreshing group membership for an identifier associated with an authenticated user. The identifier represents an application server security context, and it is generated to enable a user credential associated with the authenticated user to be persisted. Following such authentication, the client is provided with a time-bounded, renewable security token. The method begins by configuring an option whether group membership information is refreshed during renewal of an expired security token. During renewal of an expired security token, the method determines whether the option is set. If so, an attempt is made to refresh information. This attempt performs a set of checks to verify certain conditions. If these checks are valid, the identifier is refreshed and the security token renewed with updated group membership information. If any check is not valid, the identifier is refreshed and the security token renewed with existing information.

8230478, Jul 24, 2012

Aug 27, 2009

12/548767

Paul W. Bennett - Austin TX, US
Elisa Ferracane - Austin TX, US
Daniel E. Morris - Austin TX, US
Michael C. Thompson - Austin TX, US

International Business Machines Corporation - Armonk NY

H04L 9/00, H04L 9/32

726 1, 726 4, 726 26, 726 27

A method, system, and computer usable program product for flexibly assigning security configurations to applications are provided in the illustrative embodiments. An embodiment determines, forming a first determination, whether a first identifier identifying the application is mapped to the security configuration. The embodiment determines, forming a second determination, whether the application participates in a group by determining whether a second identifier identifying the group is mapped to the security configuration. The embodiment assigns, forming a first assignment, the security configuration to the application if either of the first and the second determinations is true. The embodiment assigns, forming a second assignment, the security configuration to the application using a determination by a first policy if the first and the second determinations are false.

2012022, Aug 30, 2012

Feb 25, 2011

13/034907

Paul W. Bennett - Round Rock TX, US
Elisa Ferracane - Austin TX, US
William J. O'Donnell - Fichburg WI, US
Michael C. Thompson - Austin TX, US

INTERNATIONAL BUSINESS MACHINES CORPORATION - Armonk NY

G06F 9/44

717127

Mechanisms are provided for performing security role definition testing. An application is received in a container of a runtime environment of the data processing system. The application has methods and security role definitions associated with the methods. A properties object, which specifies a user identifier to security role mapping, is received in the container. A test application is executed, in the container, by the processor, on an execution of the methods of the application based on the user identifier to security role mapping and the security role definitions. The test application tests an operation of the application with regard to the security role definitions. A result of the execution of the test application on the execution of the methods of the application is then output.