Abstract: Provided are a computer implemented method and apparatus for manipulating data through directional or ordered selection of data. A first user input is received for selecting a section of data in a direction of selection, or an order of selection, from a source. A second user input is received for performing a basic editing operation on the selection. Responsive to the second input received from the user, the selected section of data is re-oriented or re-ordered in a direction or order corresponding to the direction or order of selection. A third user input is received for performing a basic editing operation at a destination. The re-oriented or re-ordered section of data is subjected to the second action at the destination. Once the user has selected a section of data, the user can also choose to re-orient or re-order the data in conjunction with a basic editing operation by selecting an enhanced editing operation that implements the inventive method from a menu.

Abstract: A web browser application program provides graphical print techniques, which allow the user to control how a web page is presented. The data processing system, under instruction of a program, responds to an instruction by the user to present a selected portion of a first document by creating a new document from the first document including the header, trailer, and the selected portion. The data processing system responds to an instruction by the user to change the font size of a selected portion of the first document by creating a copy of the first document and modifying or inserting font tags within the copy of the document. The data processing system responds to an instruction by the user to present the first document with page break indicators by creating a copy of the first document and inserting page break indicators within the copy to be presented to the user. The graphical print techniques may also be used together.

Abstract: A program written in untrusted code (e.g., JAVA) is enabled to access a native operating system resource (e.g., supported in WINDOWS NT) through a staged login protocol. In operation, a trusted login service listens, e.g., on a named pipe, for requests for login credentials. In response to a login request, the trusted login service requests a native operating system identifier. The native operating system identifier is then sent to the program. Using this identifier, a credential object is then created within an authentication framework. The credential object is then used to login to the native operating system to enable the program to access the resource. This technique enables a JAVA program to access a WINDOWS NT operating system resource under the identity of the user running the JAVA program.

Abstract: The present invention is a method for providing news syndication discovery and competitive awareness. The method includes generating a first search set, the first search set including at least one URL (Uniform Resource Locator) for being searched to determine if the at least one URL syndicates content from a first content provider's RSS (Rich Site Summary) feed. The method further includes validating the at least one URL of the first search set, the validated URL syndicating content from the first content provider's RSS feed. The method further includes generating a second search set, the second search set including at least one URL (Uniform Resource Locator) which syndicates content from a second content provider's RSS feed.

Abstract: A system, method, and related computer program for automatically cataloging Web elements, such as text and color, in a Web document for use by those performing searches for Web documents containing specific Web elements. The present invention allows users to scan Web elements into a Web site database where they are automatically cataloged for future searches of the particular element data. Searchers can search for a source document containing a particular color and/or text. Users may enter values related to scanned-in Web elements on source documents, such as an alternate color that may be used in addition to or instead of the scanned in color on said source document. Web elements or graphics are cataloged in a manner that allows users to query an entire set of objects quickly by accessing the database values. A user is able to automatically change text or color values on a global basis. Alternate values entered into the Web site database override Web element data previously scanned into the database.

Abstract: Method and computer program product for displaying user participation in a Web application. At least one predetermined rule is established for a plurality of user participation levels based upon an amount of at least one parameter of activity on a Web application server. An amount of the at least one parameter of activity that is attributable to a particular registered user is measured and the at least one predetermined rule is applied to the measured amount of the at least one parameter to determine a current participation level for the registered user. The registered user is then provided with a graphical user interface that displays the current participation level of the registered user in relation to the plurality of participation levels. Optionally, the user interface is persistent and provides the registered user with instructions on reaching the next participation level and information about benefits available at that level.

Abstract: The present invention provides a method, apparatus, and computer implemented instructions for executing cryptographic operations. Responsive to a request to perform a cryptographic operation, one (or more) of a software process and a hardware process is selected for performing the cryptographic operation based on a policy which process results with available resources to perform the cryptographic operation to form a selected process. The cryptographic operation is performed using the selected process. Necessary object conversions, which is transparent to the application, is carried out in order to convert objects to usable forms of the selected process(es).

Abstract: A system, apparatus and method for processing Personal InFormation EXchange Syntax (PFX) objects in a data processing system is presented. The PFX object may be formatted, i.e. may maintain a syntax, as defined by PKCS (Public Key Cryptography Standard) standards, and in particular PKCS #12. A PFX object utility allows a user to view and edit the contents of data objects embedded within a PFX object via a graphical user interface. Graphical objects represent the data objects embedded within a PFX object. A user may drag and drop objects onto other objects within the PFX object, and the PFX object utility automatically performs the necessary operations.

Abstract: A frames-based Web browser is used with existing distributed computing environment (DCE) interfaces to facilitate and simplify management of DCE cells. In the preferred embodiment, administration may be performed from any secure Web browser acting as a client. Management data is typically supported on a target Web server. At the browser, CGI scripts are used to dynamically generate HTML (hypertext markup language) pages based on the network administrator's selections and the current state and defined objects in the DCE cell. The result is a robust and efficient Web-based DCE management scheme.

Abstract: An analysis of at least one authentication token for an application is provided. At least one login module within the application is identified. Responsive to a failure to access the application, principal information is retrieved associated with the at least one login module. A recovery action is then generated. The recovery action corresponds to the failure and the principal information.

Abstract: A mechanism that allows enterprise authorities to be informed when security-sensitive decisions or actions have been or are attempting to be made by users of untrusted code executing in the trusted computing base. The mechanism may be implemented as an abstract class that is part of the trusted computing base. The class provides a framework abstract enough to permit multiple possible notifications (e.g., providing an e-mail to a system operator, sending an Simple Network Management Protocol (SNMP) alert, making an entry in an online database, or the like) in the event that a given action is taken by a user of untrusted code. The abstract class may provide a default notification, or the class may be extended to enable an authority to provide its own set of customized notifications.

Abstract: An apparatus and method for managing keystores is implemented. A distributed keystore is established by aggregating individual. The distributed keystore may, be organized in a multi-level structure, which may be associated with an organizational structure of an enterprise, or other predetermined partitioning. Additionally, a centralized management of certificates may be provided, whereby the expiration or revocation of the certificates may be tracked, and expired or revoked certificates may be refreshed. The keystore may be updated in response to one or more update events.

Abstract: A method and system for processing enveloped data objects in a data processing system. The enveloped data object may be formatted as defined by PKCS (Public Key Cryptography Standard) standards. An enveloped data object utility allows a user to view and edit the contents of data objects embedded within an enveloped data object via a graphical user interface. Graphical objects represent the data objects embedded within an enveloped data object. A user may drag and drop objects onto other objects within the enveloped data object, and the enveloped data object utility automatically performs the necessary encrypting operations. Logical associations between data objects contained within the enveloped data object are determined or created, and the logical associations are displayed using visual indicators. As data objects are added or deleted through user actions on the graphical objects, the visual indicators are updated.

Abstract: A framework for processing signed applets that are distributed over the Internet. Using the framework, an applet that is packaged as a Netscape- or JDK-signed jar file, or as an Internet Explorer-signed cab file, is processed within the same Java runtime environment irrespective of the browser type (i.e. Netscape Communicator, Internet Explorer or JDK) used to execute the applet. When the applet is executed, the framework verifies one or more applet signatures using the same algorithm that was used to sign the applet, verifies the signer(s) of the applet, and stores information about the signers so that they can be honored by a security policy when permissions for the applet are determined.

Abstract: A method and system for processing PKCS-attributes and user-defined attributes in heterogeneous environment is provided. Attributes are registered with a PKCS9 gateway class, and the attributes include user-defined attributes and PKCS-standard defined attributes. Each of the registered attributes is associatively stored with an identifier. A method in the PKCS9 gateway class may be called with a parameter containing an object identifier for an attribute. An attribute mapping data structure is searched using the object identifier in the received parameter, and in response to finding a matching object identifier, a class identifier that has been associatively stored with the matching object identifier is retrieved from the attribute mapping data structure. A method in the class identified by the class identifier is then called. The called method may include an operation for construction, attribute conversion to and from DER-encoding, attribute differentiation, and attribute value extraction.

Abstract: A method, program and system for mapping ASN.1 data to an object model are provided. The invention consists of identifying the start of a data stream and then generating a new object name for the data. Next, the data is parsed to get the identifier and the data length. Then the data's tag type is analyzed. If the tag type is simple, a class diagram is generated for the data and then the source code for the data is generated. If the tag type is not simple, a subroutine is called to further parse the data before generating the class diagram and source code.

Abstract: A method and apparatus in a data processing system for displaying data. A stream of data is received. The stream of data is displayed in a scrolling display field in which data is scrolling. Responsive to a user input selecting a portion of the data in the stream of data being displayed, scrolling of the data is halted in the scrolling display field. A stationary display field is created. Scrolling of the data on the scrolling display field is restored. Responsive to changes in the selected data in the stream of data being received, the scrolling display field and the stationary display field are updated.

Abstract: A mechanism to dynamically present basic authentication and cookie information to a web browser user. As part of a login, a user will have entered a userid and password as part of the basic authentication process. He or she also can configure the web browser to display cookies that are sent to the browser for setting. After their initial display, however, this information is either hidden or not easily accessible to the user. The present invention is a mechanism that allows a web browser user easy access to his or her logged-on userid and cookies.

Abstract: A method, computer program product, and data processing system for supporting application-generic licensing and purchasing of software in an intranet or internet in disclosed. A client license application resides on a client computer. The client license application cooperates with a software delivery server to install new software. The software delivery server uses a resource discovery protocol to identify software applications meeting requirements of the client license application. The software delivery server initiates the purchase of licenses at a purchase server and the installation of the software on the client computer.

Abstract: A method and system for processing authenticated data objects. An authenticated data object utility allows a user to view and edit the contents of data objects embedded within an authenticated data object via a graphical user interface. Graphical objects represent the data objects embedded within an authenticated data object. A user may drag and drop objects onto other objects within the authenticated data object, and the authenticated data object utility automatically performs the necessary authenticating operations. Logical associations between data objects contained within the authenticated data object, such as between certificates and recipient information objects, are determined or created, and the logical associations are displayed using visual indicators. As data objects are added or deleted through user actions on the graphical objects, the visual indicators are updated to reflect any updates to the logical associations between the data objects.