Abstract: System and method for determining crackability of a password in real time. The system and method include and involve a server system that serves a software package, and a client system that is coupled to the server system. The client system is configured to receive the software package. The software package includes a password entry facility permitting a user to enter a password candidate string one character at a time, and a strength determination facility configured to communicate with the password entry facility and to determine the crackability of the password candidate in real time repeatedly as each character of the password candidate string is entered into the password entry facility.

Abstract: A system for instant communication in real time is described wherein it is determined if a user with a given e-mail address is available for on-line messaging. The system takes in a group of e-mail addresses and automatically looks for screen names that are available for instant messaging. Once a screen name is available for online communication, an ion appears next to the screen name. Instant messaging is achieved by pressing the icon. The screen names, the icons and the e-mail addresses all appear in the same window, thereby, integrating traditional e-mail addresses with instant messaging services making real time communication an effective tool.

Abstract: An implementation of a self-contained application may be distributed and automatically executed within a network client environment, such as within a web browser environment. The implementation of the self-contained application includes a first package that includes a manifest and an archive of files. The archive of files includes a markup language file that is the initial file to be processed and that includes instructions for initiating execution of the application. In the implementation, the archive of files also includes other files needed to execute the application and a second package that may be of the same type as the first package. The manifest file includes an initial file identifier that instructs the application to process the markup language initial file before processing the other files.

Abstract: Method, apparatus, system, and a file for integrated dynamic encryption and/or decryption for use in an application includes, for example, storage means or unit for storing a plurality of predetermined attributes and corresponding values, and a digital signature, a controller or control means for controlling selective retrieval of a plurality of attributes and values, and the digital signature from the storage unit, processing means or processor for selectively processing the predetermined attributes and values, and the digital signature and in accordance thereto, providing a supportable encryption and/or decryption level to the application, a compressor or compression means for compressing the attributes and values and in accordance thereto generating compressed attributes and values for storing in the storage unit, and decompressing means or decompressor for decompressing the compressed attributes and values in accordance with the controller retrieving the compressed attributes and values.

Abstract: A network client such as a world wide web browser and corresponding method that includes and involves a scanner component that accesses an input content stream via a network connection (e.g., such as via a URL, etc.) to extract renderable content therefrom, a parsing component coupled to the scanner component for parsing the renderable content, and a replaceable document type definition component configured to control the parsing component based on a particular document type definition corresponding to a particular grammar. The replaceable document type definition component being replaceable during execution of the network client. The network client and its corresponding method may be used within a data processing system to receive and manifest content based on a document type definition that is not otherwise known prior to execution and run time of the network client.

Abstract: A business rules system that creates a dynamic solution set between objects that have never been associated with one another prior to that particular instance of evaluation. A rule engine evaluates the associated objects and is programmed to evaluate a complex situation, come up with a solution and, as a result, not require the intervention of a human being. The rule engine enables the user to customize the behavior of business objects (e.g., access control, order management, catalogs, and membership) to meet sophisticated business requirements. The invention provides a graphical user interface that allows a user to rapidly set up and maintain Business Rules in real time—with no source code recompilation needed. Domain tables are used to define the overall set of possible values for a given attribute of an object. Each rule may have one to many classes of interacting objects.

Abstract: An optimization technique is provided which automatically reduces the number of globals in a program to the minimum required. The optimization technique identifies those elements which are placed in a program as global elements, but which do not need to be global elements. The optimization technique parses all files in a program, identifies all global elements, and removes any global elements that are not used outside of a particular file within the program by converting these global elements to local elements or by disregarding those elements.

Abstract: A web browser program automatically reconfigures chrome of an interface to provide access to groups of related information. The web browser program includes a content display program module, a chrome display program module, a current site communication program module, a chrome configuration processing program module, and a related information servers indication receiving program module.

Abstract: A network client such as a world wide web browser and corresponding method that includes and involves a scanner component that accesses an input content stream via a network connection (e.g., file, document or other content/data source located at a URL via the Internet and www., etc.) to extract renderable content therefrom, a parsing component coupled to the scanner component for parsing the renderable content, and a replaceable document type definition component configured to control the parsing component based on a particular document type definition corresponding to a particular grammar. The replaceable document type definition component being replaceable during execution of the network client. The network client and its corresponding method may be used within a data processing system to receive and manifest content based on a document type definition that is not otherwise known prior to execution and run time of the network client.

Abstract: A lightweight directory access protocol workflow management system. The invention converts a logical process into a reusable Lightweight Directory Access Protocol (LDAP) directory representation. The directory representation is a hierarchical tree structure where each process element in the process is represented as an LDAP directory entry and is assigned a unique distinguished name and is stored in a Directory Server database or filesystem. The tree structure of the LDAP representation allows the sharing of LDAP trees or subtrees among users. The LDAP trees and subtrees can be remotely located and distributed among different LDAP servers. Another preferred embodiment of the invention provides a graphical user interface for creating a Workflow process definition which is comprised of process elements: activities; actions; and entry/exit points. The user constructs a Workflow process using the process elements, logically interrelating each activity.

Abstract: An apparatus for an integrated dynamic encryption and/or decryption for use in an application includes a policy filter, a policy filter module coupled to said policy filter, a service module coupled to said policy filter, and a cryptographic module, where the apparatus retrieves the cryptographic module and configures the policy filter in accordance with the cryptographic module and the policy filter module performs a plurality of verification upon the cryptographic module, and further where the service module is configured to generate a plurality of cipher suites and the policy filter is configured to filter the plurality of cipher suites in accordance with a predetermined policy filter parameters to generate a plurality of filtered cipher suites.

Abstract: A simplified LDAP access language system provides user-defined attributes that tell the directory system who the user wants to give read or write access to a specific set of his attributes. The read and write attributes are separate lists and may, in fact, differ, thereby giving the user the flexibility to better manage access to his attributes. The value of the read and write attributes are in an LDAP Filter format which is an Internet standard (RFC 2254) which allows the user to specify not only users local to his intranet, but users across the Internet as well. Access control lists (ACL) are created by the System Administrators and list the specific attributes that the user is allowed to control read or write access, giving the Administrators full control of what information the user can give out. The ACLs are stored in the directory along with the entries. When a user accesses an entry in a directory, the server checks the ACL specified for the attributes being accessed.

Abstract: The present invention provides the ability to use an existing store-and-forward messaging network such as an electronic mail system to replicate data between computer sites. The replication provided by the present invention can be used with software applications, such as workgroup applications, to replicate data located on multiple sites. Workgroup replication data is sent to other sites via electronic mail (“e-mail”) messages. The present invention provides reliability features to handle errors in electronic mail transmissions. For example, the present invention provides the ability to reassemble objects at a replication site such that an object and all of its dependencies exist prior to the object's use at the site. Messages referred to as “ACK” messages are used to communicate a site's state and to provide other control information. Each site maintains latency information to determine transmission failures.

Abstract: A simplified user authentication to a computer resource utilizing a smart card. When a new user is issued a smart card, he or she is also issued a user name (ID) and password to be used during a first use to activate the smart card. The user then connects the smart card and enters the user ID and password. The user is authenticated using the user ID and password and identifying information from the smart card. The network administration server then requests a public key from the workstation. The workstation instructs the smart card to generates public and private key. The public key is transmitted to the server. A digital certificate is created the smart card is activated. Once the smart card is activated a simplified login procedure can be used wherein connecting the smart card to a workstation initiates a login process not requiring use of a PIN number or other user input.

Abstract: One aspect of the invention provides an HTTP based extensible protocol supporting a subset of the workflow object names and definitions of the OMG workflow protocol. HTTP is a synchronous communication interface. The HTTP based protocol can communicate across the Internet, traversing firewalls. Workflow applications requiring such traversal could then be built and readily integrated into the enterprise side workflow systems built with the OMG workflow protocol and CORBA.

Abstract: A system and method for dynamically determining applicable rule instances and a rule value utilizing a hierarchical context, hierarchically specified ruled with inheritance, and a hierarchically relevant conflict resolution strategy. The system includes a context provider, an attribute data store, and a rules engine. The context provider is configured to provide a context comprising an application configuration parameter and the set of context attribute values. The attribute data store has a hierarchical structure and is configured to provide a set of hierarchically relevant context attribute values, based on the set of context attribute values. The attribute data store is designed to permit the clear specification of rules and their applicability conditions.

Abstract: A system and method for dynamically determining a set of relevant rule instances based on a set of context attribute values comprising a directory server, an attribute data store, and a rules engine. The directory server includes rule instances having hierarchical structure. The attribute data store has a hierarchical structure and is configured to provide a set of hierarchically relevant context attribute values optimized from the rule instances, based on the set of context attribute values. The rules engine is configured to provide the set of context attribute values to the attribute data store in accordance with the context from the context provider, and to determine a set of relevant rule instances, based on the hierarchically relevant context attribute values from the attribute data store.

Abstract: An access control via properties system provides ACL rules based on the properties associated with the entries, thereby taking advantage of the fact that there are inherent properties associated with each entry and does not require any changes to the schema. Once the server supports the invention, the system administrator creates a few simple ACL rules and is done. The invention structures the ACL rule such that it indicates the attributes that the administrator has selected for user access and specifies the type of access to be granted to a user which can include: read, write, or any other privileges that the system supports. The desired attributes that the user must have to be granted such access is also listed along with the attribute fieldname associated with the desired attributes. The directory server will match the desired attributes within the specified attribute fieldname with the user's attributes and allows access to the directory entry only if the user has the desired attribute values.

Abstract: Methods and systems in accordance with the present invention allow users' private keys corresponding to their digital certificates to be stored and archived outside of the control of a Certificate Authority (“CA”). A CA may have a policy that a user's private key must be archived in order to receive a digital certificate upon a registration request from the user. Typically, the CA knows that the user's private key is archived because it implements the archival of the key, for example, on a data recovery manager and associated internal database that the CA controls. Methods and systems in accordance with the present invention allow for the enforcement of such a policy while allowing the archival of the private keys to be outside of the control of the CA by having a data recovery manager supply a digitally signed proof of archival token with a digital certificate request to a CA. The CA is assured that the key has been archived.

Abstract: A method and apparatus for transferring state information between a server computer system and a client computer system. In one embodiment of the method, an http client requests a file, such as an HTML document, on an http server, and the http server transmits the file to the http client. In addition, the http server transmits a state object, which describes certain state information, to the http client. The http client stores the state object, and will typically send the state object back to the http server when making later requests for files on the http server. In a typical embodiment, the state object includes a domain attribute which specifies a domain or network address, and the state object is transmitted from the http client to a server only when the http client makes an http request to the server and the server is within the domain. In one embodiment, the apparatus includes a processor and memory and a computer readable medium which stores program instructions.