Abstract: Embodiments of the present invention address deficiencies of the art in respect to deploying XForms in an enterprise environment and provide a method, system and computer program product for forms integration of an external data model not implemented through a DOM accessible API. In one embodiment of the invention, a method for forms integration of an external data model not implemented through a DOM accessible API can include generating a data graph for an external data model for a forms based application and transforming the data graph into a DOM representation of the data graph. Value changes for fields of a form in the forms based application can be applied to nodes of the DOM representation and mutations in the nodes of the DOM representation can be synchronized to corresponding nodes in the data graph.

Abstract: A hyper-scatternet includes a first ad hoc piconet, a second ad hoc piconet and a wide area network, wherein the first and second ad hoc piconets are configured to communicate with one another via the wide area network. Each ad hoc piconet can include an application server that includes an ad hoc piconet interface that is configured to communicate with an ad hoc piconet using an ad hoc piconet protocol, and a wide area network interface that is configured to communicate with a wide area network using a wide area network protocol. The application server also includes a service manifest that is configured to determine ad hoc piconet services that are available from the ad hoc piconet via the ad hoc piconet interface, and to advertise the ad hoc piconet services to the wide area network as wide area network services via the wide area network interface.

Abstract: User privacy preferences are consolidated for location-based services. A mobile user is able to control the service providers to which the mobile user's location is transmitted as well as control the service providers from which the user wishes to receive content. Service providers and other online vendors request the location and network identifiers of mobile users in order to provide the mobile users with content. The user's privacy preferences are described in a document that includes the location format being used by the user, a link to the user's preference data, and the current location of the user's mobile device. The privacy preference file includes global privacy preferences that apply when the user is outside of established privacy locations and one or more privacy locations defined by geographical boundaries. These preferences apply while the user is inside the defined privacy location.

Abstract: Methods, systems, and computer program products are disclosed for dynamically integrating software resources (such as web services and other back-end software resources) using the services of a content framework (such as a portal platform). A portlet model is leveraged to allow programmatic portlets to serve as proxies for web services, thereby extending portlets beyond their traditional visual role. A deployment interface and a system interface are described for these portlet proxies. The deployment interface is used for composing new web services, and a composition tool is described. The system interface allows for run-time management of the web services by the portal platform. The service provider for a particular function may be bound to the portlet proxy at development time or at run-time.

Abstract: The present invention is a system, method and apparatus for for real-time blogging. In a preferred aspect of the invention, a real-time bi-directional blogging system can include a blog and a bi-directional syndication interface to the blog. Importantly, an instant messaging system can be coupled to the syndication interface of the blog. The instant messaging system of the present invention can include a chat server and at least one chat client. Notably, a bot can be coupled to the chat server. The bot can be programmed to communicate blog postings received in the chat server to the chat client or clients. The bot can be further programmed to communicate responses to the blog postings received from the chat client or clients to the blog through the syndication interface.

Abstract: Techniques for enhancing accessibility to web content are described herein. In some embodiments, a method includes presenting an activation element in association with a web page and detecting activation of the activation element, wherein the detection occurs following an activation event. The method can also include identifying draggable elements and drop zones in the web page and associating identifiers with the draggable elements and the drop zones, wherein the identifiers indicate one or more input events that will move a certain one of the draggable elements to a certain one of the drop zones. The method can also include modifying the web page to display the identifiers in association with the draggable elements and the drop zones, detecting the input events, and moving the certain one of the draggable elements to the certain one of the drop zones.

Abstract: A multi-dimensional search can be performed for each search term within a search phrase. Individual relevancies that represent the relevance to each search term can be determined for each search result. An overall relevancy can be calculated based on the individual relevancies. The individual relevancies can be displayed using a heatmap that depicts the relationship between the individual relevancies. In addition, the heatmap may be color-coded based on the overall or individual relevancies.

Abstract: A method of managing online communities within an online community management system can include declaratively specifying a taxonomy of online community types, declaratively specifying a plurality of roles for members of online communities, and declaratively specifying a security policy that associates permissions with roles and online community types. A plurality of online community profiles can be maintained. Each online community profile can represent an online community, specify an online community type from the taxonomy, and specify a list of members of that online community as well as an associated role for each member. Access can be provided to a selected online community according to the online community type of the selected online community, a role within the selected online community that is associated with a user attempting to access the selected online community, and the security policy.

Abstract: A non-subscription based system that can provide contextually-preferred content to information system users, include an online information system, and a preferred content service provider. The online information system can be configured to provide users with access to content items. Each content item can be associated with a specific content creator registered with the online information system and/or a specific organizational location of the online information system. The preferred content service provider can be configured to provide a content preference service to users of the online information system. The content preference service can be configured to provide a user with a recommendation listing of content items from the online information system that satisfies a predetermined level of user preference without the use of a subscription mechanism.

Abstract: A plurality of stochastic models is built that predict the probabilities of state transitions for components in a complex system. The models are trained using output observations from the system at runtime. The overall state and health of the system can be determined at runtime by analyzing the distribution of current component states among the possible states. Subsequent to a low level component failure, the state transition probability stochastic model for the failed component can be analyzed by uncovering the previous states at N time intervals prior to the failure. The resulting state transition path for the component can be analyzed for the causes of the failure. Additionally, component failures resulting from the failure, or worsening state transition, in other components can be diagnosed by uncovering the previous states at the N times prior to the failure for multiple components in the system and then analyzing the state transition paths for correlations to the failed component.

Abstract: Techniques are disclosed for achieving context-sensitive confidentiality within a federated environment for which content is aggregated in a distributed Web portal (or similar aggregation framework), ensuring that message portions that should be confidential are confidential to all entities in the federated environment except those entities to which the message portions may properly be divulged. The federation may comprise an arbitrary number of autonomous security domains, and these security domains may have independent trust models and authentication services. Using the disclosed techniques, messages can be routed securely within a cross-domain federation (irrespective of routing paths), thereby ensuring that confidential information is not exposed to unintended third parties and that critical information is not tampered with while in transit between security domains. Preferred embodiments leverage Web services techniques and a number of industry standards.

Abstract: A computer-implemented method that includes determining whether a predetermined collaboration client application is available locally at a local client, and using a proxy to integrate the collaboration client application into a web application of a web browser at the local client when the collaboration client application is unavailable locally at the local client, providing real-time presence awareness information of a plurality of users to a first user via the web application at the web browser, receiving, from the first user via the web application, a selection of at least one user of the plurality of users, with whom the first user desires to perform one or more real-time collaboration services, and determining at least one real-time collaboration service that is available via the web browser for use between the first user and the selected user, based at least in part on the real-time presence awareness information of the selected user.

Abstract: Techniques are disclosed for achieving context-sensitive confidentiality within a federated environment for which content is aggregated in a distributed Web portal (or similar aggregation framework), ensuring that message portions that should be confidential are confidential to all entities in the federated environment except those entities to which the message portions may properly be divulged. The federation may comprise an arbitrary number of autonomous security domains, and these security domains may have independent trust models and authentication services. Using the disclosed techniques, messages can be routed securely within a cross-domain federation (irrespective of routing paths), thereby ensuring that confidential information is not exposed to unintended third parties and that critical information is not tampered with while in transit between security domains. Preferred embodiments leverage Web services techniques and a number of industry standards.

Abstract: A Web document including Web content can be presented within a user interface. At least one content segment of the Web document can be associated with a visual identifier. At least one annotation can be associated with said content segment of the Web document. The annotation can be presented within an annotation view of the user interface. The annotation can include content provided by another in commentary to the Web document and in particular in commentary to the content segment of the Web document.

Abstract: A method of automatically creating portlets for a portal system can include identifying a location of structured data described by a data model specification and automatically determining, from the data model specification, relationships between a plurality of objects within the structured data. The method further can include automatically generating a plurality of portlets, wherein each portlet is configured to query the structured data according to the relationships specified within the data model specification. One or more communication links between at least two of the portlets can be automatically created according to the relationships specified within the data model specification.

Abstract: A method, system and apparatus for federated identity brokering. In accordance with the present invention, a credential processing gateway can be disposed between one or more logical services and one or more service requesting clients in a computer communications network. Acting as a proxy and a trusted authority to the logical services, the credential processing gateway can map the credentials of the service requesting clients to the certification requirements of the logical services. In this way, the credential processing gateway can act as a federated identity broker in providing identity certification services for a multitude of different service requesting clients without requiring the logical services to include a pre-configuration for specifically processing the credentials of particular service requesting clients.

Abstract: Methods, systems, and computer program products are disclosed for provisioning software resources used with aggregated web services. The disclosed techniques enable heterogeneous identity systems to be joined in the dynamic, run-time web services integration environment. Authentication and authorization may now be performed for the aggregated service, as well as for its sub-services. SOAP (“Simple Object Access Protocol”) messages, as an example, may be used to relay identity information among distributed services, whereby credentials may be specified in the SOAP message header to accompany a service request specified in the SOAP message body.

Abstract: A hyper-scatternet includes a first ad hoc piconet, a second ad hoc piconet and a wide area network, wherein the first and second ad hoc piconets are configured to communicate with one another via the wide area network. Each ad hoc piconet can include an application server that includes an ad hoc piconet interface that is configured to communicate with an ad hoc piconet using an ad hoc piconet protocol, and a wide area network interface that is configured to communicate with a wide area network using a wide area network protocol. The application server also includes a service manifest that is configured to determine ad hoc piconet services that are available from the ad hoc piconet via the ad hoc piconet interface, and to advertise the ad hoc piconet services to the wide area network as wide area network services via the wide area network interface.

Abstract: A hyper-scatternet includes a first ad hoc piconet, a second ad hoc piconet and a wide area network, wherein the first and second ad hoc piconets are configured to communicate with one another via the wide area network. Each ad hoc piconet can include an application server that includes an ad hoc piconet interface that is configured to communicate with an ad hoc piconet using an ad hoc piconet protocol, and a wide area network interface that is configured to communicate with a wide area network using a wide area network protocol. The application server also includes a service manifest that is configured to determine ad hoc piconet services that are available from the ad hoc piconet via the ad hoc piconet interface, and to advertise the ad hoc piconet services to the wide area network as wide area network services via the wide area network interface.

Abstract: A method, system and apparatus for federated identity brokering. In accordance with the present invention, a credential processing gateway can be disposed between one or more logical services and one or more service requesting clients in a computer communications network. Acting as a proxy and a trusted authority to the logical services, the credential processing gateway can map the credentials of the service requesting clients to the certification requirements of the logical services. In this way, the credential processing gateway can act as a federated identity broker in providing identity certification services for a multitude of different service requesting clients without requiring the logical services to include a pre-configuration for specifically processing the credentials of particular service requesting clients.