Abstract: In a computer implemented method or system, users are enabled to associate usage rights with at least a first entity and a second entity. The first entity and second entity are selected from different ones of the module, a processing circuitry and the one or more files. Execution of the module is only enabled when the associated usage rights allow both use of the first entity by the second entity and use of the second entity by the first entity, i.e. mutual usage rights for at least two entities exist. Execution of the module is disabled when the associated usage rights prevent at least one of use of the first entity by the second entity and use of the second entity by the first entity.

Abstract: A method for providing rules for a plurality of processes from a user mode to a kernel mode of a computer is disclosed. The method includes providing to the kernel mode a policy for at least a first process of the plurality of processes, the policy indicating at least when and/or how notifications are to be provided from the kernel mode to the user mode upon detection in the kernel mode of launching of the first process. The method further includes selecting, from the rules stored in the user mode, rules related to the launching of the first process, in response to receiving from the kernel mode a first notification in accordance with the policy, and providing the selected rules related to the launching of the first process from the user mode to at least one of the one or more filter drivers in the kernel mode.

Abstract: In a computing environment comprising multiple desktop windows displayed to a user of a client computer, a method to manage client application windows associated with applications configured to run on the client computer is provided. The method includes detecting user input regarding movement of a client application window from a client desktop window to a remote desktop window, removing a task bar icon associated with the client application window from a task bar displayed in the client desktop window, instructing the remote computer to generate a drone of the client application window in the remote desktop window and to display the task bar icon associated with the client application window in a task bar of the remote desktop window, and displaying the client application window always on top of all other windows. The method may further include applying appropriate clipping region to the client application window.

Abstract: In a computer implemented method or system, users are enabled to associate usage rights with at least a first entity and a second entity. The first entity and second entity are selected from different ones of the module, a processing circuitry and the one or more files. Execution of the module is only enabled when the associated usage rights allow both use of the first entity by the second entity and use of the second entity by the first entity, i.e. mutual usage rights for at least two entities exist. Execution of the module is disabled when the associated usage rights prevent at least one of use of the first entity by the second entity and use of the second entity by the first entity.

Abstract: The invention relates to a system and method of tracking and communicating computing states of a first computer device for registering said computing states by a second computer device. The first computer device is connected to the second computer device and configured for assuming a plurality of successive computing states. Jobs are assigned to a different set of jobs each time a state transition has been detected. New sets are defined only when a state transition has been detected and typically not when a snapshot is made resulting in saving storage space.

Abstract: A method for providing rules for a plurality of processes from a user mode to a kernel mode of a computer is disclosed. The method includes providing to the kernel mode a policy for at least a first process of the plurality of processes, the policy indicating at least when and/or how notifications are to be provided from the kernel mode to the user mode upon detection in the kernel mode of launching of the first process. The method further includes selecting, from the rules stored in the user mode, rules related to the launching of the first process, in response to receiving from the kernel mode a first notification in accordance with the policy, and providing the selected rules related to the launching of the first process from the user mode to at least one of the one or more filter drivers in the kernel mode.

Abstract: In a computing environment comprising multiple desktop windows displayed to a user of a client computer, a method to manage client application windows associated with applications configured to run on the client computer is provided. The method includes detecting user input regarding movement of a client application window from a client desktop window to a remote desktop window, removing a task bar icon associated with the client application window from a task bar displayed in the client desktop window, instructing the remote computer to generate a drone of the client application window in the remote desktop window and to display the task bar icon associated with the client application window in a task bar of the remote desktop window, and displaying the client application window always on top of all other windows. The method may further include applying appropriate clipping region to the client application window.

Abstract: The invention relates to a system and method of tracking and communicating computing states of a first computer device for registering said computing states by a second computer device. The first computer device is connected to the second computer device and configured for assuming a plurality of successive computing states. Jobs are assigned to a different set of jobs each time a state transition has been detected. New sets are defined only when a state transition has been detected and typically not when a snapshot is made resulting in saving storage space.

Abstract: The invention relates to a method and system for determining one or more valid entitlements for one or more persons or roles to one or more resources of an organization. Person classification data, role classification data, role constraint data and/or entitlement constraint data are supplied to an inference engine that provides an inference result set defining valid entitlements of a person or role to one or more resources.

Abstract: A server-based computing system includes at least one server (1) and at least one client computer (5), connected to the server (1) through a network (2). The server (1) includes apparatus for providing the client computer (5) with a user interface. The client computer (5) includes an input device (8) for providing input to an application through the user interface and a display device (7) for presenting output from an application through the user interface. The server (1) includes apparatus for running the application and the client computer (5) includes apparatus for locally running at least one further application. The system includes apparatus for controlling the locally run applications through the user interface provided by the server (1).

Abstract: The invention relates to a method of providing access to one or more resources accessible via a remote computer. The resources are assigned to a remote security context. Access to at least one of said remote resources within the remote security context is controlled by access rules that are valid for said at least one of said remote resources, on receipt of a terminal services request for a terminal session from a local computer. A user of said local computer has already been authenticated in a local security context by local authentication information. The local computer runs a local agent and contains identification information in addition to the local authentication information.

Abstract: A method for setting priority levels in a multiprogramming computer system (1) with priority scheduling, in which threads (15, 16, 17) of execution of each process (13, 14) have a standard priority level, comprises measuring relative use of one or more processors (2) in the system (1) by the threads (15, 16, 17) of execution of a process (13, 14). The priority levels of one or more threads (15, 16, 17) of execution are lowered if their measured relative use exceeds a certain escalation threshold for the duration of an escalation time period (DT1).

Abstract: A server-based computing system comprises at least one server (1) and at least one client computer (5), connected to the server (1) through a network (2). The server (1) comprises means for providing the client computer (5) with a user interface. The client computer (5) comprises an input device (8) for providing input to an application through the user interface and a display device (7) for presenting output from an application through the user interface. The server (1) comprises means for running the application and the client computer (5) comprises means for locally running at least one further application. The system comprises means for controlling the locally run applications through the user interface provided by the server (1).

Abstract: A multi-user computer system, and method for creating a user session that comprises processing a log-on request entered by a user. The creation of the user session is halted when more than a maximum number of simultaneous log-on requests, maintained as a variable in the multi-user computer system, are being processed.

Abstract: A method of controlling memory allocation in a computer system (1) comprising physical memory (3), at least one storage device (7, 9, 10) and at least one processing unit (2) and arranged to implement virtual memory, which computer system is capable of enabling at least two processes associated with respective instances (14, 17) of application programs to be running, only one active process being enabled to receive input from a user at any one time, comprises selecting at least one of the processes to be at least partially transferred from physical memory (3) to a storage device (7, 9, 10). Processes are selected by monitoring which processes have been inactive for longer than a pre-determined time interval.