Abstract: A content sanitization process performed via a transcoding engine. The transcoding engine can include one or more patterns, each pattern identifying malicious content in a well-formed document. The transcoding engine also can include an annotation processor configured to annotate portions of the well-formed document which match the patterns. Finally, the transcoding engine can include a content sanitization processor configured to normalize the annotated portions in a transcoded document. In a preferred aspect of the invention, the transcoding engine can include a privacy policy resolution processor configured to identify terms of a privacy policy and to annotate portions of the well-formed document which violate the terms.

Abstract: Methods, systems, and computer program products are disclosed for managing storage resources in decentralized networks. Persistent identifiers are defined for nodes, allowing nodes to be identified across sessions and invocations, even though they re-enter the network with a different network address. Paths taken by content resources as they traverse the network (e.g. which nodes forwarded the content) are persisted, along with reputation information about nodes (e.g. indicating how successful they are at answering queries from peers). Trust relationships can be derived using the persisted information. A tiered broadcast strategy is defined for reducing the number of messages exchanged. Preferred embodiments leverage a web services implementation model.

Abstract: Methods, systems, and computer program products are disclosed for persisting identifiers and relationships in a transient peer-to-peer networking environment where communities have ad hoc participants. Persistent identifiers are defined for nodes, allowing nodes to be identified across sessions and invocations, even though they re-enter the network with a different network address. Paths taken by content resources as they traverse the network (e.g. which nodes forwarded the content) are persisted, along with reputation information about nodes (e.g. indicating how successful they are at answering queries from peers). Trust relationships can be derived using the persisted information. A tiered broadcast strategy is defined for reducing the number of messages exchanged. Preferred embodiments leverage a web services implementation model.

Abstract: Methods, systems, and computer program products are disclosed for classifying nodes into broadcast tiers to reduce traffic in decentralized networks. Persistent identifiers are defined for nodes, allowing nodes to be identified across sessions and invocations, even though they re-enter the network with a different network address. Paths taken by content resources as they traverse the network (e.g. which nodes forwarded the content) are persisted, along with reputation information about nodes (e.g. indicating how successful they are at answering queries from peers). Trust relationships can be derived using the persisted information. Preferred embodiments leverage a web services implementation model.

Abstract: Methods, systems, and computer program products are disclosed for providing management functions in decentralized networks. Persistent identifiers are defined for nodes, allowing nodes to be identified across sessions and invocations, even though they re-enter the network with a different network address. Paths taken by content resources as they traverse the network (e.g. which nodes forwarded the content) are persisted, along with reputation information about nodes (e.g. indicating how successful they are at answering queries from peers). Trust relationships can be derived using the persisted information. A tiered broadcast strategy is defined for reducing the number of messages exchanged. Preferred embodiments leverage a web services implementation model.

Abstract: Methods, systems, and computer program products are disclosed for providing role-specific views from a business web portal which supports one or more aggregated web services, where a “business web portal” is a collection of one or more portals which may be hosted by potentially disparate, autonomous service providers. This may be useful, for example, to extend the services of a particular business by programmatically including services of other enterprises. The disclosed techniques enable heterogeneous user profiles to be federated and exchanged in the dynamic, run-time web services integration environment. In this manner, users having particular roles can be programmatically presented with different views into an aggregated service. XML Linking language (“XLink”) is preferably used to associate role-specific views of a particular sub-service from the aggregation with the role(s) to which that view pertains.

Abstract: Methods, systems, and computer program products are disclosed for provisioning software resources used with aggregated web services. The disclosed techniques enable heterogeneous identity systems to be joined in the dynamic, run-time web services integration environment. Authentication and authorization may now be performed for the aggregated service, as well as for its sub-services. SOAP (“Simple Object Access Protocol”) messages, as an example, may be used to relay identity information among distributed services, whereby credentials may be specified in the SOAP message header to accompany a service request specified in the SOAP message body.

Abstract: A method, system, and computer-readable code for dynamically determining the most appropriate location for applying style sheets. The style sheets may be applied on a server (and/or Web proxy), or on a client, or when multiple style sheets are to be applied, some may be applied at the server while others are applied at the client. Application at the client depends on the capabilities of the client device. If the client device cannot apply style sheets, then they are applied at the server, and the resulting document is sent to the client; otherwise, the document may be sent to the client, where the client will perform the application process. Optionally, the document may be trimmed before it is sent to the client, using a style sheet preprocessing technique. General-purpose style sheets may be leveraged advantageously where a device-specific style sheet is not available, increasing the applicability of such style sheets.

Abstract: Enforcing data policy using style sheet processing. A Document Type Definition (DTD) associated with an Extensible Markup Language document is modified to specify a reference to stored data policy to be applied to document elements. Each data element may specify a different data policy. This technique uses minimal network transmission overhead, as the policy itself is not transmitted through the network until the DTD reaches the node where the data policy will be applied. Programming code implementing the data policy is then retrieved, using the references, by an Extensible Stylesheet Language (XSL) processor instrumented according to the present invention. Data policy is preferably enforced by overriding the existing XSL “value-of” method. DTD information describing a document element may be suppressed from a DTD being generated for the output document of the data policy enforcement process, providing privacy protection for the details of the associated policy.

Abstract: Methods, systems, and computer program products are disclosed for dynamically integrating software resources (such as web services and other back-end software resources) using the services of a content framework (such as a portal platform). A portlet model is leveraged to allow programmatic portlets to serve as proxies for web services, thereby extending portlets beyond their traditional visual role. A deployment interface and a system interface are described for these portlet proxies. The deployment interface is used for composing new web services, and a composition tool is described. The system interface allows for run-time management of the web services by the portal platform. The service provider for a particular function may be bound to the portlet proxy at development time or at run-time.

Abstract: Methods, systems, and computer program products are disclosed for dynamically integrating software resources (such as web services and other back-end software resources) using the services of a content framework (such as a portal platform). A portlet model is leveraged to allow programmatic portlets to serve as proxies for web services, thereby extending portlets beyond their traditional visual role. A deployment interface and a system interface are described for these portlet proxies. The deployment interface is used for composing new web services, and a composition tool is described. The system interface allows for run-time management of the web services by the portal platform. The service provider for a particular function may be bound to the portlet proxy at development time or at run-time.

Abstract: Methods, systems, and computer program products are disclosed for dynamically integrating software resources (such as web services and other back-end software resources) using the services of a content framework (such as a portal platform). A portlet model is leveraged to allow programmatic portlets to serve as proxies for web services, thereby extending portlets beyond their traditional visual role. A deployment interface and a system interface are described for these portlet proxies. The deployment interface is used for composing new web services, and a composition tool is described. The system interface allows for run-time management of the web services by the portal platform. The service provider for a particular finction may be bound to the portlet proxy at development time or at run-time.

Abstract: A method, system, and computer program product for facilitating network delivery of Wireless Markup Language (WML) decks (or decks in similar notations) to memory-constrained client devices such as Wireless Application Protocol (WAP) devices, by applying a novel deck-reduction process to the decks, such that the decks are reduced by fragmentation into new decks of a manageable size. No loss of deck content occurs in this fragmentation process. The cards of the original deck are grouped into new sub-decks, where each sub-deck is no larger than a particular maximum deck size. When defining the new sub-decks, card adjacency is used along with commonality of event bindings and text strings, in order to regroup the cards in such a way as to reduce the size of the resulting sub-decks while minimizing the number of remote references generated.

Abstract: A method, system, and computer-readable code for translating an input document into an Extensible Markup Language (XML) dialect which is well-formed, such that automated, dynamically-selected transformations (such as those that will indicate a user's current context) can be applied to the document. The new XML dialect indicates dynamically-selected document transformations that are desired. Further, a novel technique is provided for dynamically generating a Document Type Definition (DTD) to describe the new XML dialect, so that the XML document created in this dialect can subsequently be processed by an XML parser. In the preferred embodiment, the desired transformations account for a user's dynamic context, and this information is represented by the dynamically-generated XML dialect.

Abstract: Methods, systems, and computer program products for improving network operations by dynamically redeploying services (such as web services or other network-accessible services) in a computing network. A programmatic replication or redeployment process is defined, whereby system upgrades may be implemented by redeploying services dynamically, without human intervention, enabling the complexity of upgrading previously-deployed software to be reduced significantly.

Abstract: Methods, systems, and computer program products for improving network operations by dynamically deploying services (such as web services or other network-accessible services) in a computing network. A process is defined whereby conditions such as usage metrics for incoming client requests (or other network conditions such as load balancing considerations) are monitored, and used to trigger dynamic deployment of web services to locations in the network in order to improve efficiency (e.g. by reducing response time to the client and/or reducing the burden on the back-end computing system resources). Service requests are dynamically routed to the destination where the service resides, in a manner which is transparent to the client. In an optional aspect, programmatic replication of system upgrades may be implemented by redeploying services using this same dynamic deployment approach, enabling the complexity of upgrading previously-deployed software to be reduced significantly.

Abstract: Methods, systems, and computer program products for improving network operations by dynamically undeploying services (such as web services or other network-accessible services) in a computing network. A process is defined whereby conditions such as usage metrics for incoming client requests (or other network conditions such as load balancing considerations) are monitored, and used to trigger dynamic undeployment of web services from locations in the network. The undeployment may apply to distributed locations of a service, and may also apply to an origin server from which the service was originally deployed. Service requests are dynamically routed to the destination where the service resides, in a manner which is transparent to the client.

Abstract: A method, system, and computer-readable code for retrieving style sheets from a directory or other repository, based upon partial characteristic matching. Characteristics are associated with style sheets, and retrieval is accomplished by specifying a pattern which includes one or more of the characteristics. Preferably, the style sheet characteristics are stored as LDAP (Lightweight Directory Access Protocol) objects in an LDAP directory. The style sheets may be encoded in Extensible Stylesheet Language (XSL), Document Style Semantics and Specification Language (DSSSL), or any other style sheet language having equivalent semantics.

Abstract: Method, apparatus and program products for increasing the performance of communications using differencing data communications over a message queue supporting asynchronous communications from a variety of applications executing on a source device over a shared external communication link to destination devices are provided. A data stream between the source device and the destination device is segmented based on the type of the data stream to provide a logical segmentation which increases the occurrence of repeated transmissions of a segment. The segments are then placed in the message queue as a message for transport to a destination computer. Differencing is provided by replacing the segment with an associated identifier for segments which have previously been transported to provide a reduced volume of data for transmittal based on recognition and replacement of data segments which have previously been transmitted by the source device.

Abstract: Methods, systems and computer programs provide reliable transmission of data over a communications link in a communications network which otherwise may be unreliable. The transmission of the data packets in a communications link between a sending station and a receiving station is reliably managed by biasing the expected round trip time associated with the first sending station to accommodate relatively large fluctuations in the actual latency of transmissions in the data packets between the sending station and the receiving station whereby the number of retransmissions of data packets between the sending station and the receiving station is relatively minimized.