Abstract: A method and system for combining the bandwidth available to a user communications device from multiple access points by switching output requests and corresponding replies to such requests among a plurality of such access points. In the simplest implementation the switching can be on a round-robin basis, but the switching can be enhanced to prioritize and use quality of service requirements associated with each output request, and also to measure congestion at each access point and base switching upon the congestion level. The invention operates by generating subset ISO communication stacks for each available access point, preferably the subset from the IP layer to the data control link, and switching between these stacks.

Abstract: A dynamic derivation mechanism is defined which enables limited permissions to be dynamically and flexibly derived for executables based upon their authenticated description. The dynamic derivation mechanism uses the authenticated description to determine the maximal permissions that individual principals can delegate to the content. A principal's maximal permissions for content define a superset of the rights that that principal will actually delegate to that content. Although the maximal permissions are derived from predefined specifications, the specifications can be sensitive to runtime state on the downloader's system or previous delegations to enable the dynamic (i.e., runtime) derivation. Multiple principals can delegate a subset of their maximal permissions for the executable content. The mechanism uses policy for combining the delegated permissions into the content's runtime permissions.