Patent ID: 7769996
Filing Date: 2010-08-03
Classification: G06Q,H04L

Abstract:
1. A method for facilitating private communication between a first node on a first network and a second node on a second network via an administrative network separately connected to each of the first and second network, the administrative network comprising additional nodes that are connectable to the first and second networks, the method comprising the steps of: a) providing each node with a gateway, each gateway connecting the node to the node's respective network, each gateway comprising a request microprocessor, a service invoker, a service implementation, a resource adapter, a data access layer and a security layer; b) the administrative network and the gateway of the second node authorizing the first node to access a service requested by the first node and provided by the second node; c) the administrative network transmitting from the first node a message, processed in through the gateway connected to the second node, that includes at least i) a unique name identifier assigned to the services interface of the second node, ii) a request universal identifier that uniquely identifies a request processed through the second node gateway, and iii) a unique identifier for a participant originating the request indicating that the first node desires to access the service; d) at least one of the administrative network and the gateway of the second node confirming the identity of the first node; e) at least one of the administrative network and the gateway of the first node confirming the identity of the second node; f) the administrative network establishing an encrypted private connection between the gateway at the first node and the gateway at the second node through the administrative network following the successful confirmation of the identity of the first node and the identity of the second node; g) the administrative network transmitting a request for the service from the first node to the second node; h) the administrative network controlling the encrypted private connection to allow the first node to access services for which the first node is authorized and to prevent access by the first node to services for which the first node is not authorized; and i) the administrative network logging activity of the first node and the second node; wherein the administrative network determines a relationship between the first node and the second node based on each node's domain and its given role in at least one of that domain and an additional domain to calculate a level of risk associated with allowing access by the first node to a requested service at the second node based on the type of requested service; wherein the services for which the first node is authorized are determined based on the relationship between the first node and the second node based on the domain of each node, and the level of risk associated with allowing access by the first node to a requested service in the second node.