Abstract: A system and method for managing simultaneous access to a scarce or serially re-usable resource by multiple process threads. A stationary queue is provided, including a wait counter for counting the cumulative number of threads that have been temporarily denied the resource; a satisfied counter for counting the cumulative number of threads that have been denied access and subsequently granted access to said resource; a sleep code routine responsive to the wait counter for generating a run identifier; and a wakeup code routine responsive to the satisfied counter for generating the run identifier.

Abstract: A system for displaying the status of a plurality of threaded tasks operating in the background includes a status bar; a progress control bar in the status bar for a primary task operating in the background and including a progress bar and first and second action buttons; the progress bar visually representing progress of a primary background operation; the first action button being selectable by a user for initiating an action with respect to the primary background operation and the second action button being selectable by a user for alternately displaying and canceling a drop list of secondary progress control bars for secondary tasks also operating in the background.

Abstract: The minimum number of rectangles required to fill a particular polygon and which meet input parameters including minimum stripe width, maximum stripe width, stripe overlap amount, maximum number of borders, and whether or not to merge adjacent borders, is determined by: (1) bordering, including computing a border width which is wide as possible, bordering all non-orthogonal polygons with one or more borders, merging borders when appropriate, halting bordering as soon as the interior can be efficiently filled using orthogonal fill rectangles; (2) filling, including filling the interior of the bordered non-orthogonal polygon or the unbordered orthogonal polygon with orthogonal paint stripes, filling, if possible, the uncovered area with a single least encompassing rectangle, otherwise generating orthogonal stripes using the minimum stripe width and where practical merging them with a previous adjacent stripe; and (3) processing, including locating any and all unfilled portions of the original polygon, applying

Abstract: Analysis of networks and testing and analyzing intelligent, network connected devices. An instantaneous network utilization value is assigned for the worst surviving ping instance of between 90% and 99% (determined proportionately from the ratio of dropped test samples to surviving test samples), and then used to solve for average network message size and average utilization of the network. A plurality transactions of different types are transmitted across the network to intelligent end systems and the results mathematically evaluated to determine the portion of the total response time contributed by the network and by the end processors; the utilization of the end processor processing subsystems and of the end processor I/O subsystems; and the utilization of the end system as a whole; and of the network and end processors considered as a unitary entity.

Abstract: A hybird Notes/DB2 environment provides a requisition catalog on the Web. Client browsers are connected to a GWA infrastructure including a first network dispatcher and a virtual cluster of Domino.Go servers. The network dispatcher sprays out browser requests among configured .nsf servers in virtual server cluster. Communications from this virtual server cluster are, in turn, dispatched by a second network dispatcher in a Domino cluster. External objects, primarily for a GUI, are served in a .dfs and include graphic files, Java files, HTML images and net.data macros. The catalog is built from supplier provided flat files. A front end is provided for business logic and validation, as also is a relation database backend. HTML forms are populated using relational database agents. A role table is used for controlling access both to Notes code and DB2 data. Large amounts of data are quickly transferred using an intermediate agent and window.

Abstract: A system and method for monitoring and controlling the total number of SSL port resources that are allowed to be tied up by a malicious or inept client making multiple requests from a single IP address. Smart SSL handshake timeout detection is used to track and deny service to any SSL clients that do denial of service (DOS) attacks.

Abstract: IP security is provided in a virtual private network using network address translation (NAT) by performing one or a combination of the four types of VPN NAT, including VPN NAT type a source-outbound IP NAT, VPN NAT type b destination-outbound, VPN NAT type c inbound-source IP NAT, and VPN NAT type d inbound-destination IP NAT. This involves dynamically generating NAT rules and associating them with the manual or dynamically generated (IKE) Security Associations, before beginning IP security that uses the Security Associations. Then, as IP Sec is performed on outbound and inbound datagrams, the NAT function is also performed.

Abstract: A shared memory parallel processing system interconnected by a multi-stage network combines new system configuration techniques with special-purpose hardware to provide remote memory accesses across the network, while controlling cache coherency efficiently across the network. The system configuration techniques include a systematic method for partitioning and controlling the memory in relation to local verses remote accesses and changeable verses unchangeable data. Most of the special-purpose hardware is implemented in the memory controller and network adapter, which implements three send FIFOs and three receive FIFOs at each node to segregate and handle efficiently invalidate functions, remote stores, and remote accesses requiring cache coherency. The segregation of these three functions into different send and receive FIFOs greatly facilitates the cache coherency function over the network. In addition, the network itself is tailored to provide the best efficiency for remote accesses.

Abstract: System for connecting a client system to a server system includes a client database of certificates; a user access panel for receiving user authentication indicia; a program interface for authenticating a certificate in the client database with respect to the indicia; a communication link interconnecting the client and server; a server database of certificates; a program interface for authenticating a certificate received from the client over with a certificate in the server database and responsive thereto for establishing a job session with the client without prompting for user input of user profile and password.

Abstract: A system and method for determining the physical location of a target device. Using communications network trace route and pinging commands, the distances of three test devices of known locations to the target device are determined; and responsive to those distances, the location of the target device is determined by triangulation. Based upon location, the target device may be blocked from a communications network or connected to a particular server.

Abstract: Collaboration space object model provides for a place consisting of rooms created by users interacting with a client browser. A skin (i.e., theme) may be used as template for creating places. PlaceBots (i.e., agents) provide for accessing, processing and managing data in a place. HTML may be dragged and dropped into a place, where it is parsed and corresponding place fields created. MS Excel or Word documents may be dragged and dropped into a place, which creates a corresponding form, and users may create new documents using that form. A place type comprising a template of an entire place, or collaboration space, may be used to create new places. Changes made to a place may be reported, subject to security controls, by selecting what's new. Task fields are provided allowing web browser creation of forms for work flow. Place enabled objects are provided for synchronous communications.

Abstract: A processor system includes an I/O bus to host bridge in which I/O address translation elements are shared across multiple I/O bus bridges. A TCE manager is provided for retaining in cache a TCE entry associated with a discarded channel for association with a new channel responsive to a subsequent read request for a memory page referenced by the TCE entry.

Abstract: Collaboration space object model provides for a Place consisting of rooms. A room is made up of pages. Folders are used to organize pages. Members belong to rooms, and are those users authorized to access them. Place type controls the creation of a place, including how many rooms it has, for example. Room type controls the appearance and content of rooms. A form manages the display of data notes. A form can contain fields for containing data and employ scripts to process and compute data. A page is the basic vehicle for content. Content is created using an or importing content from an external source. A member is also a data note, and each place contains its own member directory. A place is created and managed from a client browser in on-line mode and in offline mode with respect to a replicated copy of the space. Room security is independently managed, and security and aesthetics characteristics of subrooms selectively inherited.

Abstract: A hybird Notes/DB2 environment provides a requisition catalog on the Web. Client browsers are connected to a GWA infrastructure including a first network dispatcher and a virtual cluster of Domino.Go servers. The network dispatcher sprays out browser requests among configured .nsf servers in virtual server cluster. Communications from this virtual server cluster are, in turn, dispatched by a second network dispatcher in a Domino cluster. External objects, primarily for a GUI, are served in a .dfs and include graphic files, Java files, HTML images and net.data macros. The catalog is built from supplier provided flat files. A front end is provided for business logic and validation, as also is a relation database backend. HTML forms are populated using relational database agents. A role table is used for controlling access both to Notes code and DB2 data. Large amounts of data are quickly transferred using an intermediate agent and window.

Abstract: Collaboration space object model provides for a Place consisting of rooms. A room is made up of pages. Folders are used to organize pages. Members belong to rooms, and are those users authorized to access them. Place type controls the creation of a place, including how many rooms it has, for example. Room type controls the appearance and content of rooms. A form manages the display of data notes. A form can contain fields for containing data and employ scripts to process and compute data. A page is the basic vehicle for content. Content is created using an or importing content from an external source. A member is also a data note, and each place contains its own member directory. A place is created and managed from a client browser in on-line mode and in offline mode with respect to a replicated copy of the space. Room security is independently managed, and security and aesthetics characteristics of subrooms selectively inherited.

Abstract: Collaboration space object model provides for a place consisting of rooms created by users interacting with a client browser. A skin (i.e., theme) may be used as template for creating places. PlaceBots (i.e., agents) provide for accessing, processing and managing data in a place. HTML may be dragged and dropped into a place, where it is parsed and corresponding place fields created. MS Excel or Word documents may be dragged and dropped into a place, which creates a corresponding form, and users may create new documents using that form. A place type comprising a template of an entire place, or collaboration space, may be used to create new places. Changes made to a place may be reported, subject to security controls, by selecting what's new. Task fields are provided allowing web browser creation of forms for work flow. Place enabled objects are provided for synchronous communications. A quick browse feature provides a simplified format for browser windows based on selection of HTML links.

Abstract: A workflow, enterprise, and mail-enabled application server and platform supports distributed computing and remote execution of web applications. Lotus Domino online services (DOLS) is used by a web site administrator to configure Internet Notes (iNotes) clients to auto download from server, thus providing iNotes clients with web access using HTTP with various browsers, and with local processing and replication. A local run time model comprises a hierarchy of models including object data store model, security model, indexing model, replication model, agent workflow model and mail model. DOLS provides a layered security model that allows flexibility for controlling access to all or part of an application. The highest level of security is managed through a database access control list (ACL). Further refinements within the security model provide access to specific documents, and their views, forms or folders, and include read access lists, write access lists, form access lists and readers and authors fields.

Abstract: Virtual Private Networking (VPN) is an emerging technology area enabling e-business on the Internet. A key underlying VPN technology is IP Security (IPsec), for providing private (encrypted and authenticated) secure data transmission over public (Internet) networks. The definition of what data to protect ultimately results in IP filter rules, loaded to the operating system kernel. These are used to select the correct IP datagrams and cause each to be processed by the correct IPsec Security Associations. Connection filters which are used to implement VPN connections are dynamic, and must be inserted and deleted within the currently installed set of IP filters (non-VPN related). IP filter order is crucial to proper functioning. Micro filter placement employees filter collision detection and eliminates order Aependeney collisions among a set of connection filters.

Abstract: Graphics enabled applications run on a text-based host server by allowing a client application running at a workstation to inform the server of this session (1) that it, the client application, is graphics capable and (2) the IP address and port(s) it is waiting on; and then by having the server set capability indicia, such as rwt attributes, in the operating system for this session to indicate the (1) the client is graphics enabled, (2) the IP address and port(s) it is waiting on, (3) optionally, the path to an application to be automatically launched.

Abstract: A system for deploying to a client accounting installation a general procurement and accounts payable application specifically configured for the client by an enterprise includes a database server for (1) maintaining on a storage device a database of templates describing procedures for assessing, preparing, developing, deploying and supporting the application, and for (2) serving these templates to team members operating web-enabled terminals for coordinating, recording and tracking team activities with respect to the application while generating a description for adapting a front end server and an accounting system server to the requirements of the client.