Abstract: A computer network, method, apparatus or program product utilizing a local web server, a reverse proxy and an internet hosting web server to allow one or more remote users to access information on the local web server by accessing a proxy servlet residing at the internet hosting web server, wherein the reverse proxy initiates a connection with the proxy servlet. The proxy servlet intercepts all of the communications from one or more remote users and routes the communication to the local web server. The reverse proxy then routes the response to the request to the proxy servlet.

Abstract: The present invention provides a method, system, and computer program product that enables software objects and applications to dynamically self-propagate, as needed, through a computer network. This technique may be used to dynamically establish a mirroring site to which processing of work elements can be offloaded. In addition, this technique can be used to automatically deploy a software application that is comprised of a sender part and a receiver part (such as a client/server application) from a single site without manual intervention. The propagation occurs in an application-independent manner, and may operate symmetrically at either or both the sender and receiver. The life-span of propagated software objects and applications can be specified, in order to control the amount of time the downloaded resources reside on the receiving system.

Abstract: The present invention provides a method, system, and computer program product for blending object-oriented (OO) programming languages with traditional (non-OO) programming languages such that they can execute and share data in a coordinated and integrated manner. Occurrence of a special keyword construct within a non-OO function triggers invocation of an OO method or script, the name of which is preferably specified as a parameter. The OO script executes synchronously, returning control to the non-OO function upon completion. The disclosed technique enables OO scripts to provide a more natural, logical interface to users wherein results of the non-OO function may be provided when most appropriate to the logic being executed, rather than requiring the non-OO function to be artificially designed as in prior art systems which must account for the limitations of their non-integrated execution environment.

Abstract: A method, system, and computer program product for optimizing recognition of presentation space data. Presentation space data is sent from a legacy host application to a workstation. A workstation application monitors arrival of multiple predetermined presentation space definitions, and invokes an appropriate target object to process each recognized presentation space of interest. Prioritization techniques are used to optimize the recognition process, whereby higher priority definitions are processed first. A time of day heuristic is defined, which influences priority of presentation space recognition according to the time of day in which specific presentation space data typically arrives at the user's workstation. Priority pools may be used to provide a desired granularity of priority. Priority may be learned dynamically by the implementation, and may be initialized explicitly (or defaulted). Priority of a definition may be demoted if an inactivity timer expires.

Abstract: Techniques are disclosed for programmatically deriving street geometry data from address data which is presented in textual format. A collection of address information is used as input, and is processed in a novel manner to populate tables of a spatially-enabled database. Preferred embodiments use a data mart schema which is disclosed, and leverage built-in functions of a spatially-enabled object relational database system. In contrast to prior art techniques, the present invention does not require input data to be encoded in a “well-known” format (i.e. a format that adheres to particular predefined syntax conventions known as “WKT” or “WKB”); rather, textual information of the type which is readily available from government and/or commercial sources may be used as input.

Abstract: A technique for adapting receiver thresholds to improve rate-based flow control in a data communications network. With this invention, the flow control process becomes self-calibrating such that threshold values are dynamically adjusted to adapt to current network conditions, without requiring user intervention. Several different indicators of network conditions are monitored, and appropriate adjustments are made to the threshold(s) upon detecting these specific indicators. One monitor enables the threshold to increase when the network is uncongested, enabling the sender to increase its transmission rate. Conversely, the threshold is lowered if the network is congested, so that the transmission rate will be decreased. Another monitor balances bandwidth allocation among connections sharing a bottleneck resource, by lowering the threshold (and therefore decreasing the send rate) when a connection uses a high share of the resource.

Abstract: A method, system, and computer-readable code with which a scheduling system can be implemented that allows a sender and a receiver to change priorities of queued messages. A technique is also defined for providing a receiver with an advance notice of intended message priority, enabling the receiver to request a priority change before transmission begins. These techniques provide the flexibility to respond to changes in dynamic, volatile network environments, as well as changes in user's wishes or requirements. A ranking technique is defined, whereby requests to change priority may be accepted or denied through a ranking algorithm that resolves potential conflicts in desired transmission priority using proposals exchanged by the parties (e.g. during connection establishment).

Abstract: A method, system, and computer program product for enabling messaging systems to use alternative message delivery mechanisms. In existing instant messaging systems, messages cannot be delivered to an intended recipient unless the recipient is currently logged on to an instant messaging system. According to the present invention, users may register one or more alternative message delivery mechanisms (such as pagers, cell phones, etc.) through which they are available as an alternative to an instant messaging system. Constraints may optionally be added to these registered alternatives, such as specifying a limitation on days of the week and/or hours of the day when a particular alternative may be used. Providing that an alternative messaging mechanism is registered, and any constraints for this alternative are satisfied, in the first preferred embodiment the extended IMS will select a suitable alternative and deliver the message.

Abstract: A method, system, and computer-readable code for delegating authority in a public key authentication environment from a client to a server machine or process, in order that the server machine or process can then securely access resources and securely perform tasks on behalf of the client. The authority is delegated by obtaining tickets (or other equivalent representation of user credentials) from a private key system, such as the Kerberos system, where the tickets identify a user's access rights or privileges. The present invention provides several alternative techniques with which this delegation model can be implemented. In these techniques, the client does not directly access the private key system.

Abstract: The present invention provides a method, system, and computer program product for using calendar events for users of electronic calendaring systems to prepare customized responses to incoming events (such as incoming electronic mail, voice calls, instant messages, etc.), where the response supplies information pertaining to the user. Electronic calendars are analyzed, and information from this analysis is stored in advance of detecting an incoming message. The stored information can then be used to quickly generate a response when a message does arrive. A multi-level hierarchy of calendar events is used, where a top level of the hierarchy is used for context events which have a relatively long duration and a lower level of the hierarchy is used for specific events which occur during context events. The calendar user may specify attribute values such as how the user can be reached; whether, and how often, the user checks his e-mail or voice mail; etc. Attribute values are hierarchically coalesced.

Abstract: A method, system, and computer-readable code for reducing Extensible Markup Language (XML) and Document Type Definition (DTD) document file size through one or more novel compression techniques. In one aspect, a compression technique for tags is defined that reduces the size of tags within either or both of XML and DTD files. In another aspect, a compression technique for attributes within tags may be used to further reduce file size (again, in either XML or DTD files). In a further aspect, a compression technique for strings within an XML file is defined, whereby the decompression will be performed automatically by an XML parser. While these compression techniques are described with reference to XML, they may also be used advantageously with other notations derived from SGML (Standard Generalized Markup Language).

Abstract: A method, system, and computer-readable code for a technique with which files encoded according to the Extensible Markup Language (XML) notation can be marked up to indicate that the content of the file (or some portion thereof) is dynamic in nature and is to be updated automatically to reflect changing information. The proposed technique provides a novel way to specify that a data repository should be accessed as the source of the updates. Techniques are defined for specifying that this data repository access occurs once, and for specifying that it occurs when a set of conditions are satisfied (which may include periodically repeating the data repository access and content update). In one aspect, the data repository is a database; in another aspect, the data repository is a file system. Preferably, the Lightweight Directory Access Protocol (LDAP) is used as an access method when the data repository being accessed is a database storing an LDAP directory.

Abstract: The present invention provides methods, systems, and computer program instructions for enabling a variety of devices, particularly low-power hand-held devices, to travel seamlessly through a networking environment such as that encountered within a building by establishing connectivity to a plurality of network access points. The illusion of seamless network connectivity is provided by having these access points coordinate with a core server to perform user authentication, device address assignment, and handoff services.

Abstract: A system and method are disclosed for securely establishing a cryptographic key between a first cryptographic device, for example a host cryptographic security module, and a second cryptographic device, for example a bank Automated Teller Machine (ATM). A plurality of key components is generated from a pool of random numbers and a unique reference number indexes each of the key components. The key components are encrypted, stored and indexed in the host security module by the corresponding reference numbers. The key components are arbitrarily distributed to field personnel in tamper evident envelopes to be entered into the ATM. Each of the tamper evident envelopes is marked with the reference number corresponding to the key component contained in the envelope. At least two field personnel each enter a different key component into the ATM to form the cryptographic key.

Abstract: In an electronic filing system over a computer network, a central server sets the requirements for making submissions. These requirements include a time limit after the expiry of which, submissions will no longer be accepted. A gateway server polls the central server for the submission requirements, and establishes a directory in its own file system to which all potential submitters have write access until expiry of the time limit. On completion of its submission, a submitter generates evidence of the complete submission. The evidence can be in the form of a digitally signed message digest. The submitter may encrypt the evidence using the gateway server's public encryption key and then forwards the evidence to the gateway server. If the evidence is filed before expiry of the time limit, the gateway server permits the evidence to be written to the directory established for the submission requirements.

Abstract: A method, system, and computer-readable code for measuring network latency between a client computer and a server machine without requiring any additional software on the client. Network latency is a measurement that reflects the network round trip delay between a client machine and a server machine. The present invention defines a novel technique for gathering latency information. This information may be used in a variety of ways (such as making policy decisions that may limit the amount of data sent over a communications path due to detection of high latency in the network).

Abstract: A method, system, and computer-readable code for dynamically determining the most appropriate location for applying style sheets. The style sheets may be applied on a server (and/or Web proxy), or on a client, or when multiple style sheets are to be applied, some may be applied at the server while others are applied at the client. Application at the client depends on the capabilities of the client device. If the client device cannot apply style sheets, then they are applied at the server, and the resulting document is sent to the client; otherwise, the document may be sent to the client, where the client will perform the application process. Optionally, the document may be trimmed before it is sent to the client, using a style sheet preprocessing technique. General-purpose style sheets may be leveraged advantageously where a device-specific style sheet is not available, increasing the applicability of such style sheets.

Abstract: Enforcing data policy using style sheet processing. A Document Type Definition (DTD) associated with an Extensible Markup Language document is modified to specify a reference to stored data policy to be applied to document elements. Each data element may specify a different data policy. This technique uses minimal network transmission overhead, as the policy itself is not transmitted through the network until the DTD reaches the node where the data policy will be applied. Programming code implementing the data policy is then retrieved, using the references, by an Extensible Stylesheet Language (XSL) processor instrumented according to the present invention. Data policy is preferably enforced by overriding the existing XSL “value-of” method. DTD information describing a document element may be suppressed from a DTD being generated for the output document of the data policy enforcement process, providing privacy protection for the details of the associated policy.

Abstract: A method, system, and computer program product for integrating structured document content, such as XML (Extensible Markup Language) content, in a 3270 data stream structured field. The 3270 data stream structured fields, including the structured document content so embedded, are passed between a primary logical unit and a secondary logical unit that communicate with each other over a network using 3270 data stream architecture. An initialization protocol sends a Read Partition (Query) structured field from the primary logical unit to the secondary logical unit, to query whether the secondary logical unit supports structured document content. The secondary logical unit sends a Query Reply structured field to the primary logical unit in response to receipt of the Read Partition (Query) from the primary logical unit if the secondary logical unit supports structured document content.

Abstract: A method, system, and computer-readable code for improving the manageability and usability of a Java environment. The advantages of applets and applications are combined, while avoiding particular disadvantages of both, resulting in a technique whereby all Java programs are executed without relying on use of a browser to provide a run-time environment. Techniques for improving the packaging of Java components, including run-time environments and extensions as well as applications, are defined. Dependencies are specified in a manner which enables them to be dynamically located and installed, and enables sharing dependent modules (including run-time environments) among applications. The dependency specification technique ensures that all dependent code will be automatically available at run-time, without requiring a user to perform manual installation.