Abstract: Certain example embodiments relate to a system for secure complex event processing (CEP). The system includes an input adaptor configured to receive at least one input event from at least one external source system. The at least one input event comprises at least one event-specific disclosure permission concerning data of the input event. A CEP engine is configured to process the at least one input event and to produce at least one corresponding complex output event. A security enforcer is configured to remove data from the at least one output event that is not in accordance with the at least one event-specific disclosure permission defined in the corresponding at least one input event. An output adaptor is configured to send the at least one output event to at least one external target system.

Abstract: Certain example embodiments described herein relate to techniques for user feedback driven dynamic query rewriting in complex event processing (CEP) environments. In certain example embodiments, the adjustment of already-initiated queries may be permitted during runtime in order to help continuously or substantially continuously meet a user's requirements. In certain example embodiments, parameters of a query may be adapted dynamically, e.g., without the need to redeploy it. Adaptable parameters in certain example embodiments may be identified and/or based on, for instance, an automatic determination from original query creation, user specifications, the way in which a user interacts with a user interface for visualizing the results of queries, etc.

Abstract: The present invention concerns a complex event processing (CEP) engine (1) for processing CEP queries (10) over data streams, wherein the CEP engine (1) comprises: a. a parser (100), adapted for parsing a received CEP query (10) into a logical query graph (20); and b. a translator (300), adapted for translating the logical query graph (20) into a physical query plan (30) in accordance with one of a plurality of data stream representations; wherein c. the logical query graph (20) is independent of the plurality of data stream representations.

Abstract: Systems and methods are provided for transforming modeled business processes into executable processes. The modeled processes may comprise graphically modeled business processes. The executable processes may comprise processes suitable for execution by a computerized or software-based system. In one embodiment, transformation rules are provided for mapping or converting, for example, EPC model constructs to BPEL constructs. The transformation rules can be applied to graphical constructs in a modeled business process to generate an executable business process comprising an ordered sequence of programming constructs. The ordered sequence of programming constructs can be stored in a database for subsequent execution of the executable business process.

Abstract: In certain example embodiments of this invention, there is provided systems and/or methods for a streaming reverse HTTP gateway, and/or networks including the same. In such a network, a reverse HTTP gateway is located within a demilitarized zone (DMZ) disposed between public (or external) and private (or internal) networks for providing security therebetween. Requests from external clients may be streamed from the external network to the internal network over various connections and ports, including a substantially persistent reverse connection between an internal server and a reverse HTTP gateway. The reverse HTTP gateway architecture of certain example embodiments removes the need for proprietary protocols implemented between the reverse HTTP gateway located in the DMZ and the internal server located in the internal network. In certain example embodiments, the reverse HTTP gateway architecture is configured to leverage the capabilities of HTTP 1.1.

Abstract: A system for managing a plurality of web services of a service oriented architecture (SOA) comprising a registry including a description of each of the plurality of web services registered in the registry, a service filter adapted to filter at least one request of a client invoking at least one of the web services registered in the registry, wherein the service filter is adapted for gathering run-time information about the request in accordance with the description of the respective web service in the registry.

Abstract: Certain example embodiments described herein relate to security systems and/or methods for cloud computing environments. More particularly, certain example embodiments described herein relate to the negotiation and subsequent use of Trading Partner Agreements (TPAs) between partners in a Virtual Organization, the TPAs enabling resources to be shared between the partners in a secure manner. In certain example embodiments, TPAs are negotiated, an algorithm is executed to determine where an executable is to be run, the resource is transferred to the location where it is to be run, and it is executed—with the TPAs collectively defining a security policy that constrains how and where it can be executed, the resources it can use, etc. The executable may be transferred to a location in a multipart (e.g., SMIME) message, along with header information and rights associated with the executable.

Abstract: A consistency enforcement system includes an XML object of an SOA-registry. The XML object includes a plurality of processing task XML elements that define a processing task to be performed the SOA. An updated XML object is received through an interface. The updated object includes at least one additional processing task XML element that defines at least one further processing task to be performed by the SOA. A validation unit is use to query the SOA-registry in order to obtain one or more predefined processing task identifiers. The validation unit matches a processing task identifier of the at least one additional processing task XML element of the updated XML object against the one or more predefined processing task identifiers obtained from the SOA-registry and approves or rejects the updated XML object (20?) depending on the result of the match.

Abstract: Certain example embodiments described herein relate to techniques for the attachment of priorities and/or reaction time limits to various entities of a system such as, for example, events, event types, queries, etc. The system's processing may be tailored behavior to match these boundary conditions while at the same time increasing (and sometimes even maximizing) the rate of events processed. Advantageously, the system may be made to adapt its behavior to the current situation, which is changeable and may even be changing quite frequently, e.g., as in connection with a potentially rapidly changing stream. Users may in certain example embodiments specify policies to control this adaptation in certain example embodiments and, thus, in certain example instances, events (including events of special interest) may be handled appropriately, even in response to changing conditions.

Abstract: The example embodiments disclosed herein relate to application integration techniques built around the publish-and-subscribe model (or one of its variants). In certain example embodiments, application integration techniques for managing and/or monitoring a business process comprising a plurality of activities, events, and/or objects located in at least one resource external to the application integration system and a process engine thereof are provided. During design time, by introspecting the business object types involved in the activities, events, and/or objects of the at least one resource, potential state changes may be identified, and an integrative linkage may be established, with the integrative linkage being managed and maintained by a process monitoring agent (PMA). During runtime, the PMA may “listen” to the business object state changes in the at least one external resource and notify the local process engine accordingly.

Abstract: In certain example embodiments, distributed cloud application deployment systems (DCADS), and/or associated methods are provided. A formal description of the cloud application is created. The cloud application's formal representation, with its constituent nodes and their associated properties and interfaces, etc., is exported to a machine processable form. The exported DCADS machine processable rendition and any needed implementation artifacts are retrieved by a cloud application deployer that helps facilitate the deployment of the cloud application into the distributed and heterogeneous cloud environments as prescribed in the DCADS.

Abstract: Runtime execution of one or more tasks defined in a workflow process language. The method may include obtaining a description of the task from a process ontology (PO). The PO may define a hierarchical taxonomy of executable tasks, where each task refers to at least one frame of a hierarchical frame taxonomy of the PO. The method may further include identifying at least one parameter as described in the frame description to which the task refers, resolving the value of the at least one parameter, and executing the most specific applicable version of the task contained in the task taxonomy of the process ontology.

Abstract: The invention relates to a system for managing of communication between at least one client (10a-d) and at least one server (12a-d) with a primary broker (20) which comprises a first volatile memory (23) and which manages at least one request of the at least one client (10a-d) at the at least one server (12a-d). The system further comprises a backup broker (30) with a second volatile memory (33) which manages at least one request of the client (10a-d) at the server (12a-d), when the primary broker (20) has failed, wherein the primary broker (20) comprises a journal with entries on actions which may change the state of the first volatile memory (23) and sends these entries of the journal to the backup broker (30) such that the state of the second volatile memory (33) is essentially identical to the state of the first volatile memory (23).

Abstract: A computer-implemented method of generating output computer code, for an application executable via a server running application logic in communication with a client running a presentation layer for the application, from input computer code of a synchronous application in which logic and presentation layers run locally on a single computer. The output code runs asynchronously.

Abstract: Making a service implementation accessible for a client application in a service oriented architecture. The method may include extracting an interface definition language file from the service implementation, which defines the interface information to be provided by the client application to access the service implementation during runtime. The method may further include extracting a server-side mapping file from the service implementation, which defines how the interface information provided by the client application is mapped when accessing the service implementation during runtime.

Abstract: In certain example embodiments of this invention, there is provided systems and/or methods for processing BAM-related data to predict when events of interest are about to happen and/or to identify the root causes of, or at least data correlated with, such events of interest. In certain example embodiments, key performance indicators (KPIs) are gathered and gardened. The gardening process may identify KPI values of interest (e.g., based on a Z-factor analysis thereof across one or more collection intervals). The gardened KPIs may be processed using a time-series transform (e.g., a Fast Fourier Transform), matched to one of a plurality of predefined waveforms, and fed into a dynamic Naïve Bayesian Network (NBN) for prediction. The gardened data also may be used to determine the relevance of the KPI for root causes of problems (e.g., based on a chi-square analysis).

Abstract: The example embodiments disclosed herein relate to application integration techniques and, more particularly, to application integration techniques built around the publish-and-subscribe model (or one of its variants). In certain example embodiments, triggers are provided for establishing subscriptions to publishable document types and for specifying the services that will process documents received by the subscription. A standards-based messaging protocol (e.g., JMS messaging) may be fully embedded as a peer to a proprietary messaging protocol provided to an integration server's trigger subsystem so that all or substantially all of the feature-rich capabilities available via the proprietary protocol may also become available via the standards-based messaging protocol. The triggers may be JMS triggers in certain example embodiments.

Abstract: An interface unit adapted for connecting at least one database to at least one of a plurality of high availability cluster servers (HA cluster servers), wherein each database is adapted to execute a set of database-specific commands and wherein each HA cluster server is adapted to output a set of HA cluster server-specific commands. The interface unit may comprise a first interface layer adapted for receiving each of the set of HA cluster server-specific commands outputted by the HA cluster servers; and a second interface layer adapted for sending each of the set of database-specific commands to the respective databases. The interface unit may be further adapted to map each of the HA cluster server-specific commands to at least one of the database-specific commands.

Abstract: The present invention concerns a system for ad-hoc modification of a process running in a workflow management system (WFMS), wherein the process is defined by a process definition, the system comprising an ad-hoc modification component (110) adapted for: a. extracting the process definition from the running process; b. modifying the process definition (203); and c. redeploying the modified process definition (204), so that the process runs based on the modified process definition; d. wherein the redeployment in step c. is performed without interrupting the running process.

Abstract: The present invention concerns an XML data base management system (XDBMS, 10) for an XML database (20) comprising XML documents (30), each XML document (30) comprising one or more structural elements (35) and adhering to an XML schema (40), wherein at least one of the structural elements (35) is protected against access of a user (60), the XDBMS (10) comprising: a. an optimizer (300) adapted to process an XQuery (50) of the user (60) comprising one or more XQuery expressions (55) and further adapted to generate an optimized XQuery execution plan (70); b. an execution engine (400) adapted to execute the optimized XQuery execution plan (70) to retrieve XML data (80) from the XML database (20), characterized in that c. the optimizer (300) is adapted to generate the optimized XQuery execution plan (70), so that all XQuery expressions (55) relating to one or more of the structural elements (35) which are protected against access of the user (60) are ignored by the optimizer (300).