Abstract: A generic endpoint package includes a generic node configuration, which can be used by all nodes within a network, containing consolidated configuration information regardless of the operating system, the generic node configuration including: node property sets; common information containing rules to apply to nodes while in service mode and prior to authorization; and registration information directing the node to a pre-defined registration servers. A method of using a generic endpoint package includes deploying the generic endpoint package having a generic node configuration, which can be used by all nodes within a network, containing consolidated configuration information regardless of the operating system, the generic node configuration including: node property sets; common information containing rules to apply to nodes while in service mode and prior to authorization; and registration information directing the node to a pre-defined registration servers.

Abstract: A method of creating secure endpoints on a network includes registering by a node using a random selection algorithm to choose which server to register to; receiving by the node a property set ID of a property set that the node is a member of; and authorizing by the node using the property set ID to look up its authorization details in the property set. A method of creating secure endpoints on a secure network having at least one community of interest, includes registering by a node using a random selection algorithm to choose which server to register to; receiving by the node a property set ID of a property set that the node is a member of; and authorizing by the node through an authorization server using the property set ID to look up its authorization details in the property set; wherein the node and the authorization server are a member of the at least one community of interest.

Abstract: A network model includes nodes, node property sets, authorization groups and authorization servers. The node property sets define how the nodes operate and authenticate. The nodes are member of the node property sets. The authorization groups are associated with the node property set. And, authorization servers are member of the authorization groups. In addition, a network model in a secure network environment has at least one community of interest. The network model includes at least one node being a member of a node property set that defines how the node operates and authenticates.

Abstract: A system and method for masking the complexity of developing software for a heterogeneous target execution environment may be established by configuring an integrated development environment to perform certain masking mechanisms. For example, the integrated development environment used to develop a background process may be used to create a background process-file on the target execution environment. The integrated development environment may further be configured to synchronously connect with an agent on the target execution environment, allowing the agent to initiate the background process using the integrated development environment user credentials. Additionally, the integrated development environment may be configured to monitor completion of the background process execution on the target execution environment, and to return the output from the background process after completion to the integrated development environment user.

Abstract: An apparatus for and method of predefining a series of messages between a client application and a server application which needed to be transferred and honored in sequence to perform a compound service request. The sequence of messages is predefined through the use of an Action Control List, whereby the event handler defines the messages to the administrative object.

Abstract: An apparatus for and method of efficiently accessing shared JavaScript objects within a multi-user environment by reducing the overhead required to maintain object/database property synchronization. A version is associated with each object to indicate whether any particular requested access is associated with the most current properties of the object. Each user has a version list which indicates whether any particular object properties need be updated before access. The version list is maintained in faster and more available memory than the actual object to enhance efficiency.

Abstract: An apparatus for and method of utilizing an internet terminal coupled to the world wide web to access an existing proprietary data base management system having a dialog-based request format. The user request is received by a web server from the world wide web and converted into one or more sequenced data base management commands stored as corresponding to the service request. If a particular service request requires access to secured data and/or services, the request may be granted in relationship to a particular user security profile. This security profile is determined through a special field indicative of the internet user transferred in conjunction with the service request.

Abstract: An apparatus for and method of processing a digital certificate by a legacy data base management system within its legacy security facility. The digital certificate is defined by accepted international standards and is presented to the legacy data base management system after being unpacked and stored within a temporary file. This permits the legacy data base management system to fully utilize and benefit from the digital certificate technology, even though it possesses an incompatible security facility.

Abstract: An apparatus for and method of processing a service request in XML document format via a legacy data base management system to produce a response. The service is defined by a component definition which is presented to the legacy data base management system as a combination of tables, variables, and script defining various components. The inputs are defined in accordance with a combination of components from a variety of sources. The legacy data base management system honors the service and returns results as appropriate.

Abstract: An apparatus for and method of accommodating an XML document within a legacy data base management system. The XML document is defined by a Document Type Definition (DTD). The XML document is converted into a form suitable for use by the legacy data base management system in accordance with an Input Definition Table (IDT). The IDT is a table containing a plurality of sequential text statements which define the conversion process. The IDT is stored within a repository of the legacy data base management system.

Abstract: An apparatus for and method of utilizing an Internet terminal coupled to the world wide web to interface with an existing proprietary data base management system through a user interface which permits access to an application service using a combination of proprietary language syntax and SGML-derived syntax. A specific code within the proprietary language is redefined to indicate that the immediately following script is in SGML-derived syntax.

Abstract: An apparatus for and method of utilizing an internet terminal coupled to the world wide web to access an existing proprietary data base management system having a dialog-based request format. The create empty data set user request is received by a web server from the world wide web. The security profile is validated to establish permission for honoring the service request. The Cool ICE engine is called to implement the create data set method. An appropriate area within the repository is located and the new empty data set is created in accordance with the parameters received.

Abstract: An apparatus for and method of utilizing an internet terminal coupled to the world wide web to access an existing proprietary data base management system having a dialog-based request format. The internet terminal transfers a service request to the data base management system, having a password provided as required. When a service request is made having an expired password, the data base management system recognizes the problem. The internet terminal is queried for certain parameters, and the data base management system automatically reassigns a new and unexpired password.

Abstract: An apparatus for and method of utilizing an internet terminal coupled to the world wide web to access an existing proprietary data base management system having a dialog-based request format. The user request is received by a web server from the world wide web and converted into one or more sequenced data base management commands stored as corresponding to the service request. If the user terminal requests access to a secure function or to secure data, the user terminal is interrogated to determine its user profile. This user profile is compared to the security profile of the service request. The service request is honored if and only if the user profile corresponds to the security profile. The secure session control object created to honor the request is deleted upon completion of the session.

Abstract: An apparatus for and method of utilizing an internet terminal coupled to the world wide web to access an existing proprietary data base management system having a dialog-based request format. The multiple file upload user request is received by a web server from the world wide web. Each of the files is stored in a different temporary file created to buffer the uploaded files until they are processed. Following processing, the temporary files are deleted. Through the use of this feature, an application developer can make efficient multiple file data transfers from a user terminal without the need to analyze the transfer in binary form.

Abstract: An apparatus for and method of utilizing an Internet terminal coupled to the world wide web to create multiple applications for accessing an existing proprietary data base management system. A dynamic tracing facility permits the developer to debug the applications using a common trace capability which processes and stores information from the trace of the applications within a common storage facility. The trace process is divided into two major components. A generic trace formatting module processes all trace results from various applications into a standardized format for storage and subsequent use. The second component is a generic policy in which the developer can present the trace parameters of a particular unique application in a standardized form. To store trace information from a plurality of applications into a common storage area, each of the applications is provided with a common identifier within the trace parameters.

Abstract: An apparatus for and method of utilizing an internet terminal coupled to the world wide web to access an existing proprietary data base management system having a dialog-based request format. The user transmits a URL which is utilized to address one of a number of administrative objects. The addressed administrative object corresponds to one of a number of connection pools. The data base access is made from the connection pool. One of a number of runtime objects also corresponds directly to the one connection pool. Thus, the access attributes of the internet terminal may be modified during a single session.