Abstract: The present invention concerns methods and apparatus for implementing context-dependent security for files and other computer system resources. In particular, methods and apparatus of the present invention implement context-based permissions that are used in context-dependent file security. In examples of the present invention, the context-based permissions may allow access to a file only when an attempt to access the file is made at a certain time of day, or from an authorized computer system, or from a computer having a certain application program installed. In general terms, the context-based permissions may specify time, location and application information that either alone or in combination may be used to restrict access to a file.

Abstract: The present invention concerns methods and apparatus for controlling software patching activity in, for example, computer systems. Methods and apparatus of the present invention may implement a software shell and institute a patching policy to control patching activities. When implemented, the software shell acts as a barrier which permits patching of the underlying software only when the patching activity would be in accordance with the instituted patching policy. Various patching policies can be instituted in embodiments of the present invention. For example, patching may be done when convenient; or just before when software characteristics and/or behavior. In other circumstances, patching may be delayed until confidence has been established in a new patch so as to avoid disrupting a computer system that is already functioning in an acceptable manner.

Abstract: The present invention concerns methods and apparatus for managing multiple virtual machines simultaneously operative in a computing environment. The methods and apparatus of the present invention provide an integrated work environment—for example, a desktop—which incorporates graphical and control elements from multiple virtual machines. In embodiments of the present invention, application programs and resources available in multiple virtual machines can be accessed from a single desktop. Methods and apparatus of the present invention provide visual cues for associating control elements and resources with particular virtual machines. In embodiments of the present invention, multiple virtual machines operative in a computing environment can comprise a plurality of collaborative virtual machines, or a private virtual machine and one or more collaborative virtual machines.

Abstract: In a first aspect of the present invention, methods and apparatus implement graphical user interfaces for interactively specifying service level agreements used to regulate delivery of services to, for example, computer systems. An interactive graphical user interface allows a user to see the effects of varying values of service delivery variables on the level of service achievable in a particular service delivery context. In a second aspect, methods and apparatus of the present invention provision resources required for service delivery. In the second aspect, the methods and apparatus of the present invention select a service delivery model dependent on context. The selected service delivery model is used to provision resources that will be required during service delivery. In a third aspect, methods and apparatus of the present invention monitor compliance with a service level agreement during a service delivery event.

Abstract: The present invention concerns methods and apparatus that categorize states of computer systems selected to receive state-dependent maintenance activities as a prelude to the performance of those maintenance activities. In methods and apparatus of the present invention, it is determined, for example, that a certain version of an application program operating in computer systems having a specific operating system will be updated. A signature corresponding to the combination of the application program and operating system is incorporated in a software agent. The software agent is designed to poll computer systems in order to identify targets drawn from a population of computer systems that have states corresponding to the signature incorporated in the software agent. All computer systems maintenance activity performed on them.

Abstract: A virtual workspace is provided for a user with a number of electronic devices, in which information can be exchanged among the electronic devices through a number of connections between the electronic devices. The virtual workspace is provided by determining where services are located and the type of the services, determining one or more data formats associated with data accessible by one or more of the electronic devices. A portion of the data has a given one of one or more data formats. An electronic device is selected based at least in part on predetermined criteria and the given data format. A route through the connections to the selected electronic device is determined, where the route may comprise a given one or more of the connections. At least the portion of the data associated with the given data format is routed to the selected electronic device. The portion of the data is utilizable for presentation by the selected electronic device when received by the selected electronic device.

Abstract: A virtual device hub, into which local devices are plugged, enables those devices to be virtualized locally and with a remote virtual machine. Those devices then appear as available to the remote application, and can be used, for example, to print a report being processed on the remote host to a printer located at the user's physical location. The user's virtual device hub is a small computer device with network capability that is able to access the remote virtual machine. When the user runs an application, the application is actually being run in the remote virtual machine.

Abstract: Apparatus and methods are disclosed for performing computer system management on an activity basis. In one embodiment, computer-system-related items are associated with at least one activity to be performed using the computer system. Then, management procedures are established for the at least one activity. Next, when the computer system is used to perform the at least one activity, the computer-system-related items associated with the at least one activity are managed in accordance with the management procedures established for the at least one activity. In another embodiment, apparatus and methods monitor patterns of use of a computer system. Using information gathered during monitoring operations, activity models are formulated, and for each activity model a management plan is devised. After management plans have been devised for each activity model, the use of the computer system is monitored to identify actions being performed with the computer system.

Abstract: The authenticity of a website is tested with software that runs on a personal computing device and a service that is provided via the Internet. The software on the personal computing device is in the form of a proxy, or transparent component in the Internet Protocol implementation. The proxy receives all outbound messages, analyzes them and forwards or modifies them without the user's intervention. The service tests the IP address and/or the behavior of the target website.

Abstract: A method and system for managing a group of computer applications operating on a computer. The method comprises the steps of establishing a set of policies for operating the applications under a variety of circumstances, each of the circumstances being associated with one of the policies and each of the policies setting forth a behavior to occur under the associated circumstance; and monitoring the environment of the computer to determine when one of the circumstances occurs. When one of the circumstances is determined as occurring, a search is made through the set of policies to identify the policy associated with said one of the circumstances, and said group of computer applications is operated in accordance with the behavior set forth in said associated policy.

Abstract: An encrypted audio decryption system for decrypting encrypted audio sound. The system includes a hearing device and a key FOB. The hearing device is adapted to receive the encrypted audio sound, decrypt the encrypted audio sound, and transmit signals corresponding to the decrypted audio sound to a speaker of the hearing device. The key FOB is adapted to transmit a decryption key to the hearing device. The hearing device is adapted not to decrypt the encrypted audio sound without receipt of the decryption key, corresponding to the encrypted audio sound, from the key FOB.

Abstract: A system for adjusting audio output including a transmitter unit adapted to be carried by a user and a sound generating system. The transmitter unit includes a memory and a signal transmitter. The sound generating system includes a sound generator, a signal receiver, means for altering a sound signal from the signal generator based upon a signal transmitted by the transmitter to the receiver, and speakers connected to the altering means.

Abstract: A method is disclosed for operating a digital data processing system, as is a digital data processing system that operates in accordance with the method. The method includes steps of (A) detecting an activation of a user input that indicates that the system or a program executed by the system has become non-responsive to the user; (B) in response to detecting the activation of the user input, transferring to a data storage business entity, through a data communications network, selected user information; and (C) operating the data storage business entity so as to store the transferred user information, and to subsequently retrieve and transfer back to the digital data processing system at least some of the stored user information.

Abstract: A method, apparatus and computer product that enables a processor associated with a node in a computer system having various nodes, the nodes having sensors which provide data, and the nodes being connected by a communications facility acquiring local data from the sensor and remote data from other nodes via the data transfer facility. The nodes process data from a local sensor at the node and from remote sensors at other nodes; and analyze the local data, data from other nodes and local decisions made at and received from other nodes to make a local decision for action at the node. A local decision made at a node is in turn communicated to other nodes.

Abstract: A virtual workspace is provided for a user with a number of electronic devices, in which information can be exchanged among the electronic devices through a number of connections between the electronic devices. The virtual workspace is provided by determining where services are located and the type of the services, determining one or more data formats associated with data accessible by one or more of the electronic devices. A portion of the data has a given one of one or more data formats. An electronic device is selected based at least in part on predetermined criteria and the given data format. A route through the connections to the selected electronic device is determined, where the route may comprise a given one or more of the connections. At least the portion of the data associated with the given data format is routed to the selected electronic device. The portion of the data is utilizable for presentation by the selected electronic device when received by the selected electronic device.

Abstract: A method includes steps of (A) detecting an activation of a user input that indicates that the system, or a program executed by the system, has become non-responsive to a user; (B) determining an identification of any currently open files and programs with which currently open files are associated; (C) determining an identification of those programs that are normally not in a non-responsive state; and (D) saving those currently open files that are associated with programs that are identified as being not normally in the non-responsive state. A next step notifies the user that any currently open files that are associated with programs identified as being not normally in the non-responsive state have been saved. In a further step the user may restart the digital data processing system, and retrieve at least one of the saved files. The step of detecting can be executed in response to the user manually activating a switch or by the user activating one or more keyboard keys.

Abstract: A method and system for managing a group of computer applications operating on a computer. The method comprises the steps of establishing a set of policies for operating the applications under a variety of circumstances, each of the circumstances being associated with one of the policies and each of the policies setting forth a behavior to occur under the associated circumstance; and monitoring the environment of the computer to determine when one of the circumstances occurs. When one of the circumstances is determined as occurring, a search is made through the set of policies to identify the policy associated with said one of the circumstances, and said group of computer applications is operated in accordance with the behavior set forth in said associated policy.

Abstract: A system and method for permitting an end user to select a media stream and immediately experience the audio and video of that stream, in order to evaluate whether the stream is appropriate to the user's interests and needs. The invention implements a multi-channel receiver that is actively receiving multiple streams, simultaneously. In a preferred aspect, the bandwidth requirements necessary to convey multiple streams, e.g., those communicated on the same network branch, is reduced. Further, the resource requirements of the multi-channel receiver device are reduced for enabling a user to select from among the received multiple streams. A novel user interface is provided that enables fast selection of a pre-acquired stream and, playback of the stream content immediately upon selection.

Abstract: A method, apparatus and computer product that enables a processor associated with a node in a computer system having various nodes, the nodes having sensors which provide data, and the nodes being connected by a communications facility acquiring local data from the sensor and remote data from other nodes via the data transfer facility. The nodes process data from a local sensor at the node and from remote sensors at other nodes; and analyze the local data, data from other nodes and local decisions made at and received from other nodes to make a local decision for action at the node. A local decision made at a node is in turn communicated to other nodes.

Abstract: This invention provides a method, apparatus and computer product that enables sending a query to other computers on a network for information relevant to the location of the computer; receiving, in response to said query, from said other computers on the network said information; processing the information in accordance with predetermined policy criteria; and storing information which meets said criteria for later use. While very useful for the processing of bookmarks relevant to a specific geographic location of the computer, other information may include e-mail addresses, configuration parameters, computer programs, computer resource address, store addresses, and emergency contact information.