Abstract: Methods and systems are described for providing a lock-down community. In one aspect, a system comprises an indication handler component in a host node device managing a lock-down community of a computer node device, the lock-down community comprising a plurality of resources where the computer node device is configured to communicate only with a resource in the lock-down community via a network. The host node device hosts an operating system that maintains an approved resource list that identifies the plurality of resources in the lock-down community of the computer node device. The indication handler component is configured to receive an indication to update the approved resource list, wherein the indication identifies a target resource. The system also includes an update handler component configured to update the approved resource list based on the received indication, thereby modifying the lock-down community of the computer node device.

Abstract: Methods, computer products, and systems are described for providing remote access to resources in a secure data center protected by at least one firewall. One method includes sending by an internal server within the secure data center a request to an external server outside of the secure data center to establish a secure data transport channel between the internal server and the external server. The request travels through at least one firewall protecting the secure data center and over a public network, a private network, and/or a second firewall. The internal server receives a reply to the request from the external server granting the request and confirming the establishment of the secure data transport channel.

Abstract: A method for protecting private enterprise computing resources in a cloud computing environment includes determining a virtual topology comprising a secure computing zone, which includes a secure virtual vault, associated with an enterprise application of a private enterprise in a cloud computing environment. A traffic control policy associated with the secure computing zone is determined that comprises a plurality of security rules that define data traffic flow into, out of, and within the associated secure computing zone. A plurality of cloud computing nodes is selected and associated with the secure virtual vault. Any of the cloud computing nodes is a virtual computer or a physical computer device. The traffic control policy is automatically implemented in each of the cloud computing nodes associated with the secure virtual vault, where each cloud computing node is configured to enforce the plurality of security rules at an operating system level of the cloud computing node.

Abstract: Methods, computer products, and systems are described for providing terminal view access of a client device in a secure enterprise network. One method includes receiving a request from a first client device within the secure enterprise network and/or a second client device for providing terminal view access of the first and/or second client device to the second and/or first client device respectively. A security check on the request is performed to enforce a security policy of the secure enterprise network. When the security policy is satisfied, a secure data transport channel is established between the first client device and the second client device. Terminal view data corresponding to a desktop associated with the first and/or second client device is received from the first and/or second client device respectively via the data transport channel and is provided to the second and/or first client device respectively via the data transport channel.

Abstract: A method for addressing an entity for an internet-based service other than electronic mailing includes selecting a prefix that is uniquely associated the internet-based service, providing an email address for the entity, where the email address includes a username and domain, and attaching the prefix to the domain to convert automatically the email address into an address for the entity for the internet-based service.

Abstract: A distributed instant multimedia communication (IMC) system that allows users to communicate with one another in real-time includes a plurality of autonomous networks. Each autonomous network includes at least one server that supports (IMC) sessions for a plurality of clients registered on the server, and a multi-point switch unit coupled to the server(s) that sends data out of and receives data into the autonomous network, and routes data within the autonomous network through the server(s). In addition the IMC system includes a network coupled to the autonomous networks. The network sends data between the autonomous networks so that the autonomous networks can communicate with one another. Because each autonomous network is capable of communicating with other autonomous networks in a secure manner over the network, two or more clients in one or more autonomous networks can conduct a secure IMC session with one another without requiring an independent service provider.

Abstract: A method for supporting a communication application between a plurality of enterprises in a secure manner, where each enterprise includes a plurality of clients, includes providing a distributed instant multimedia communication (IMC) system that includes a plurality of autonomous networks communicatively coupled to one another via a network. Each autonomous network is associated with an enterprise and includes an IMC server that manages IMC services for a plurality of clients in the enterprise, The IMC server is configured to support a private channel that allows each client in the enterprise to share its presence information with other clients in other enterprises.

Abstract: A scalable instant multimedia communication network includes at least one server that supports instant multimedia communication (IMC) sessions for a plurality of clients registered on the at least one server, and a multi-point switch unit coupled to the server(s) that sends data out of and receives data into the network, routes data between server(s), and performs a security check to enforce a security policy of the network on an invitation to establish a secure IMC session between at least two of the plurality of clients registered on the at least one server. The instant multimedia communication network can be expanded or contracted by coupling additional or fewer servers to the multi-point switch unit.

Abstract: A method for addressing an entity for an internet-based service other than electronic mailing includes selecting a prefix that is uniquely associated the internet-based service, providing an email address for the entity, where the email address includes a username and domain, and attaching the prefix to the domain to convert automatically the email address into an address for the entity for the internet-based service.