Service access control

摘要

Embodiments of the present invention provide a service access control system having a service object for providing services, a messaging service facility and one or more spoke entities for accessing services provided by the service object, wherein the messaging service facility comprises one or more cells each having an input address and an output address, wherein at least one of the input address and the output address is linked to the other via a cryptographic key, the cell providing a message communication link between the spoke entity and a set of functions on the service object associated with the cell.

主权项

1. A service access control system, comprising:
service objects implemented at least in hardware for providing services to spoke entities that are implemented at least in hardware; a messaging service facility that is implemented at least in hardware, and through which the spoke entities communicate with the service objects;
wherein the messaging service facility comprises cells each having an input address and an output address that are both randomized addresses and wherein the output address is computed from the input address using a cryptographic key and vice-versa;wherein each cell is associated with one of the service objects and provides a message communication link between the spoke entities and the associated service object;wherein the spoke entities make service requests to the associated service object using the input address and the associated service object retrieves the service requests using the output address; andwherein the messaging service facility ensures that the input address is not revealed to the service object and the output address is not revealed to the spoke entities.