Abstract: Methods, systems and computer program products are provided which provide cryptographic services to an application by incorporating in the application an indication of at least one authorized cryptographic function for the application. The indication of at least one authorized cryptographic function for the application is communicated to a cryptographic library that supports a plurality of cryptographic functions. The at least one authorized cryptographic function corresponding to the indication of at least one authorized cryptographic function is then identified as a valid cryptographic function for the application.

Abstract: A method, system, and computer program product for flexibly including descriptive information items, and the various media resources used for those items, in a user interface (UI). One markup language document is used for the UI data content, and a separate markup language document is used for specifying the descriptive items and media resources to be used along with that content. This technique enables dynamically altering the descriptive items and media resources to be used for a UI document, without requiring change to the UI document itself This technique also enables developing the descriptive items and media resources separately from developing the UI document, without a requirement to share common files between these development efforts. The specifications of descriptive information items and media resources can be efficiently reused among multiple UI documents.

Abstract: A voice processing system, method and computer program product therefor, allows telephone callers without computers to access World Wide Web pages from the Internet. Usual graphical-based Hyper-Text Mark-Up language (HTML) commands are interspersed with special HTML tags including the commands and data for forming a voice application, which, when run on the voice processing system, provides a voice browser for allowing telephone callers to access Web pages. The voice application tags are provided together with the remainder of the HTML document, thus facilitating editing of the combined data. This helps to keep the graphical browser and voice browser versions of the same data set synchronized.

Abstract: A method and system for enabling wireless devices to be paired or permanently associated by a user or a network administrator. The method and system utilize well known public key cryptography and machine unique identifiers to establish a secure channel and associate the devices with eachother. This is extremely useful for associating a wireless headset with a telephone or associating a wireless mouse with a computer.

Abstract: A method, system, and computer program product code for dynamically refreshing user credentials in a distributed processing environment. The present invention provides for fast, local refresh of credentials by a server if the credentials expire during an on-going secure operation. This technique avoids the need for rolling back the operation and requiring the client to restart after acquiring fresh credentials. The ability for a systems administrator to invalidate credentials which have been compromised is maintained.

Abstract: User interfaces, methods, systems, and computer program products for improving interactions with users of pervasive computing devices such as personal digital assistants, Web-enabled cellular phones, Web appliances, wearable computing devices, so-called “smart” appliances in the home, and so forth. A multi-functional application launcher is defined that is specifically adapted for use on devices with limited display space and which use pen-based input or other similar input means. This application launcher enables improved navigation, and provides an improved way to show task status information to the device user. Multiple functions per task are supported, and status information is provided, all from an application launcher view.

Abstract: A method, system, and computer program product for caching dynamically generated content (including, but not limited to, dynamically generated Web pages), as well as determining when the cached content should be invalidated or purged. Rather than caching the generated datastream (i.e. the end result of the computations used in the dynamic generation process) as in the prior art, the interim results of computations (such as a generated bean instance or object, where the interim results may be stored using properties and methods) are cached according to the present invention. The input properties used to generate the bean or object, along with the input property values, are used to distinguish among cached instances and thereby identify when a cached instance may be used to respond to a subsequent request for the same content. Re-execution of the business logic of the bean or object may then be avoided, using the cached bean's or object's output properties to generate the content response.

Abstract: Methods, systems and computer program products are provided which communicate between client applications and a transaction server by establishing a persistent secure connection between the transaction server and a Secure Socket Layer (SSL) proxy server. A first session specific SSL connection, different from the persistent secure connection, is also established between a first client application and the SSL proxy server. Communications between the first client application and the SSL proxy server transmitted over the first session specific SSL connection are then forwarded with the client's identity preserved to the transaction server over the persistent secure connection.

Abstract: Management of configurable applications programs on a network is provided by using two program files for each configurable application program. The two program files are provided to a network server station which operates as the on-demand server for software deployment and may also act as the application server. The on-demand server makes the first (configuration manager) program available to an administrator to obtain preferences for the configurable preferences of the application program which have been designated as administrator preferences. The on-demand server also provides a second (application launcher) program to its client stations. The application launcher program not only provides for a user interface to execute the application program itself but also allows a user to specify one or more of the configurable parameters of the application program. An icon is displayed on the screen of the client station through which a user may initiate execution of the application program.

Abstract: A data processing system and method stores a relational database in which audit records are stored without compromising the ability to detect data tampering. The technique provides for detection of unauthorized row modification, row deletion, and row insertion. Extra measures are incorporated to protect from administrator attacks. In addition, the technique enables integrity checking and audit log archiving without having to suspend or bring down the audit subsystem. These on-line capabilities are especially important in mission critical applications which must satisfy the requirement that the application be disabled if the audit subsystem is not functioning properly.

Abstract: A method, system, and computer program product for using Java Server Pages to enable transcoding the content of a document requested by a client, in order to tailor the output document according to application-specific characteristics. In particular, the present invention enables the JSP author to override input source request characteristics and to specify transcoding hints to be used by a transcoding filter for selecting an appropriate style sheet.

Abstract: Methods, systems and computer program products are provided which allow for multi-party authentication by receiving a plurality of biometric authentication messages from a corresponding plurality of users. The biometric authentication messages include biometric data corresponding to the user. It is determined if each of the plurality of received biometric authentication messages is a valid message based on the biometric data contained in the biometric authentication messages so as to determine a quantity of valid biometric authentication messages. An indication of authentication is then provided if the quantity of the valid messages of the received plurality of messages is at least an authentication threshold value.

Abstract: Methods, systems and computer program products are provided which generate a cryptographic key utilizing user specific information to generate a user dependent key. The user specific information may be a user identification or biometric information associated with a user. In particular embodiments of the present invention a seed value is modified with biometric information to generate a user dependent key value. In alternative embodiments a key value is hashed with user specific information or user specific information is hashed and then combined with the key value to generate the user dependent key value. In still another embodiment of the present invention the space of potential key values is divided into subspaces and the subspaces assigned based on user specific information. A key value is then generated from the assigned subspace. Thus, the generated key values for different users are guaranteed to be disjoint.

Abstract: Systems, methods and computer program products are provided for testing whether Web content has been properly tailored by a transcoding proxy for display within various requesting pervasive computing devices. Simulated HyperText Transfer Protocol (HTTP) requests are built using information from one or more data files. Each simulated request includes a Uniform Resource Locator (URL) that identifies a location of Web content. Each simulated request also includes an HTTP header containing information about a respective pervasive computing device. Simulated HTTP requests are asynchronously issued to respective Web servers identified in the respective HTTP requests. An HTTP response to each respective simulated HTTP request is received and includes Web content tailored for display within a respective pervasive computing device associated with the respective simulated HTTP request. Each HTTP response is then compared with an expected HTTP response.

Abstract: The present invention provides a method, system, and computer program product for selectively replacing cached content (including, but not limited to, dynamically generated Web pages which have been cached) to provide a higher level of service to particular users or groups of users. Service providers may use the disclosed techniques to justify charging for an enhanced quality of service. The disclosed techniques enable reducing, in many cases, the system overhead and response time required for delivering content to those content requesters who have this type of enhanced service. When content is evaluated for potential caching and the cache is determined to be full, content is selected for overwriting according to the quality of service level of the content owner.

Abstract: Systems, methods and computer program products are provided for sharing resources within an Extensible Markup Language (XML) document that defines a console (i.e., a graphical user interface or GUI) for managing a plurality of application programs and tasks associated therewith. Upon receiving a user request to perform a task associated with an application program managed by a console, resource containers at each scoping level within the XML document are searched for one or more resources required to perform the task. A search is initiated at the scoping level where a task to be performed is defined and proceeds in ascending order towards the root scoping level until the resource is located. When found, a clone of each located resource is generated. The task is then performed using the clone of the resource. The clone of the resource may be discarded after the task has been performed.

Abstract: A method, system, and computer-readable code for a technique with which documents encoded according to the Extensible Markup Language (XML) notation or a derivative thereof can be more efficiently processed by selectively streaming document fragments. This selective streaming technique comprises identifying the static and the changeable portions or fragments of a document. The static fragments are written to a serialized binary format (i.e. a serialized binary stream), such as a disk file, thereby avoiding the re-parsing of this information when reconstituting a Document Object Model (DOM) tree for the document. Volatile fragments, on the other hand, remain in the XML or derivative notation when written to an output file.

Abstract: Extended business transactions are processed in a client-server system in a manner which allows processing initiated by a client to be interrupted before the transaction is complete and later resumed by the same or another client from the point of interruption. This is achieved by storing state information indicative of the progress of the transaction in a repository in association with an end-user identifier. When the end-user communicates his identifier via a client to the server for a second time, processing of the transaction can be resumed on the basis of the stored state.

Abstract: A method, system, and computer program product for optimizing recognition of presentation space data. Presentation space data is sent from a legacy host application to a workstation. A workstation application monitors arrival of multiple predetermined presentation space definitions, and invokes an appropriate target object to process each recognized presentation space of interest. Prioritization techniques are used to optimize the recognition process, whereby higher priority definitions are processed first. A time of day heuristic is defined, which influences priority of presentation space recognition according to the time of day in which specific presentation space data typically arrives at the user's workstation. Priority pools may be used to provide a desired granularity of priority. Priority may be learned dynamically by the implementation, and may be initialized explicitly (or defaulted). Priority of a definition may be demoted if an inactivity timer expires.

Abstract: A computer network, method, apparatus or program product utilizing a local web server, a reverse proxy and an internet hosting web server to allow one or more remote users to access information on the local web server by accessing a proxy servlet residing at the internet hosting web server, wherein the reverse proxy initiates a connection with the proxy servlet. The proxy servlet intercepts all of the communications from one or more remote users and routes the communication to the local web server. The reverse proxy then routes the response to the request to the proxy servlet.