Patent ID: 11902331
Assignee: KYNDRYL, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 15:
16. A computer implemented method for authorizing a request from a client, the computer implemented method comprising:
receiving, at a first validator, the dispatch datagram from a dispatcher, the first validator being adapted to provide access to a first service, and the dispatch datagram having been created by the dispatcher between the client and the first validator, wherein the received dispatch datagram includes the request for the first service in the distributed system wrapped together with an authorization header that includes one or more rules for handling the request specifying which services in the distributed system call one another and the first validator exists on a layer outside of the first service to decouple authorization of the request from a workload of the request;
separating the request and the authorization header from the dispatch datagram;
determining, by the first validator, whether the first service is authorized to receive the request based on comparing the authorization header to a parameter of the first service to verify that the first service is authorized by the dispatcher to receive the request as indicated by the authorization header;
sending only the request to the first service when the first service is determined to be authorized to receive the request; and
rejecting the request when the first service is not determined to be authorized to receive the request.