Abstract: In a multiple machine data processing system, a volume group may be accessed by other than the original owner of the volume group and maintain integrity of the volume group. A logical volume manager on the primary machine holds all incoming I/O requests to the logical volumes in the volume group and waits for all the I/O requests already sent down to the disks in the volume group. Once all the outstanding I/O requests to the disk have been completed, the disks in the volume group are closed and reopened without reserve. The logical volume manager on a secondary machine opens the disks in the volume group without taking a reserve to allow meta-data to be refreshed on the secondary machine. When the secondary machine is finished the disks are closed. The logical volume manager on the primary machine holds all incoming I/O requests to the logical volumes in the volume group and waits for all the I/O requests already sent down to the disks in the volume group.

Abstract: There is disclosed an improved method for increasing performance in multiprocessing parallel computing systems, comprising plural processor resource groups sharing a storage subsystem, by reducing contention during read attempts through assigning each processor resource group a primary mirror. Mirrors may be designated as primary by the administrator during system configuration. Thereafter read requests originating in a given processor resource group are first attempted on the primary mirror previously associated with that processor resource group. If that mirror is unavailable, another mirror is chosen via a default mirror selection process.

Abstract: A system and method for including export information in the file system extended attribute data area is provided. File export information is determined by a system administrator or automated process. The determined export information is stored in an extended attribute data area corresponding with the file. When a computer system issues mount commands for the file systems to be mounted, the file system provides export information included in the extended attributes to the kernel whereupon the kernel exports the file system. Maintenance of file export information is thereby reduced. Backup, replications, and restorations of file systems is simplified by maintaining the export information along with the files being backed, replicated, or restored. For example, when the system administrator backs up a file, the export information in the extended attributes is backed-up as well. When the file system is retrieved, the export information is also retrieved within the extended attributes.

Abstract: Scrolling through lengthy Web pages or other documents in search of particular data types or files is simplified. In a system for scrolling a displayed document using a scroll bar for indicating the position of the displayed data in the direction being scrolled, there is provided an implementation for determining the type of the displayed data being scrolled at a position, in combination with an implementation responsive to this determination for indicating within said scroll bar the type of data being scrolled at said position. A color indicator has been found to provide very effective indication.

Abstract: The potential purchaser of a product from a Web page on the Web is provided with a purchase profile of the product which is quicker and easier to obtain and provides more comprehensive data about the products and their sources than any information that a user may obtain about products purchased over the counter from real world stores and like businesses. An implementation is provided for storing at a Web receiving station, a set of predetermined search queries respectively to each of a set of Web database sites for data related to attributes of a selected product and responsive to a selection of a product for sending said search queries to said Web database sites to thereby provide a purchase profile of the product. The sending of the search queries may be set up so as to be automatically responsive to the selection of the product.

Abstract: Activity rate information of the Web site providing the Web document at the particular time of day of the proposed request is presented to a user requesting a Web document at a receiving Web station so that the user may choose to request the Web document at a different time if there is an indication of high activity at the Web site which may cause a delay. Such activity rate information is presented as an indicator associated with a bookmark to the document of the proposed request. The rates of the numbers of specific Web documents transmitted from a source, i.e. hits during daily time cycles are tracked and indicators of said rates of transmission of said documents are displayed along with the respective bookmarks at the time that the selectable bookmarks are displayed.

Abstract: In an interactive display interface, an implementation for highlighting all icons in any set of a plurality of said icons, wherein each icon in the set is within a predetermined distance of an approaching pointer or cursor. In other words, the point of the pointer or cursor may be considered to be surrounded by a circular halo with a radius of said predetermined distance. The user moves the cursor in a standard manner. However, if the icons that the moving cursor is approaching are so densely spaced that more than one, i.e. a plurality of icons come within the halo, then all of the icons within this set of the plurality of icons is highlighted to give the user a more distinct choice. The highlighting of each of said highlighted icons is ended when the pointer moves outside of said predetermined distance or halo radius. There is also an implementation for sequentially highlighting each icon in the set instead of simultaneously highlighting the set of icons.

Abstract: An apparatus and method for encrypting and decrypting data with incremental data validation is provided. With the apparatus and method, data is encrypted and a digital digest is generated in chunks. That is, the digital digest is comprised of a plurality of intermediate digital digest chunks, each of which can be used to validate a portion of the associated encrypted data. During decryption, a portion of the encrypted data is read and decrypted at approximately the same time that a digital digest is calculated for that portion of the encrypted data. The calculated digital digest may then be compared to an intermediate digital digest associated with the portion of the encrypted data, and which is appended to the encrypted data. If the two digital digests match, decryption of the encrypted data may proceed to the next portion of the encrypted data. If the two digital digests do not match, decryption is halted and the data message or packet is discarded without having decrypted the entire data message or packet.

Abstract: An apparatus and method for building metadata using a heartbeat of a clustered system are provided. The apparatus and method send portions of metadata for a computer system resource, to each of the other computer systems in the clustered system as a heartbeat data message. Upon receiving the heartbeat data message having the portion of metadata, the receiving computer systems store the portion of metadata in a temporary storage until all of the metadata is received. In subsequent heartbeat data messages, the remaining portions of the metadata are transmitted to the computer systems which, upon receiving all portions of the metadata, store the metadata in a secure location. If the sending computer system were to fail, the metadata stored in the secure location is read and used to takeover the resources of the failed computer system. In this way, the processing cycles used to read in the metadata from the resources of the failed computer system in the prior art are eliminated.

Abstract: Disclosed is a system and method for enhancing the security of virtual private network (VPN) connections by automatic pre-negotiation of a secondary configuration. If snooping or other security breaches are detected, the VPN tunnel is modified automatically to the secondary pre-arranged configuration, stymieing attempted security violations.

Abstract: There is provided a system for dynamically resynchronizing a storage system made up of a plurality of mirrored logical volumes respectively divided into a plurality of mirrored logical data partitions in the event of a system failure. Immediately after the correction of the problem causing the failure, meals start to resynchronize the plurality of logical volumes but without waiting for the resynchronization to be completed; means access data from a data partition in one of said logical volumes. Then there are means for determining whether the portion of the logical volume containing the accessed partition has already been resynchronized, together with means responsive to these determining means for replacing the corresponding data in the other mirrored partitions in the logical volume with the accessed data, in the event that the portion of the logical volume has not been resynchronized.

Abstract: A Web browser having search capabilities, automatically generates a search list from URLs in the browser's bookmark and/or history files and automatically accesses and searches each URL on the Internet or cache on the browser's computer. Each bookmark or each web page generated for the list, when accessed, may be searched for selected keywords. URL search parameters are entered into the search function, a list of URLs is automatically created from the bookmark file and/or the history file. A new browser is opened and the new browser, in background, accesses the Web or cache, connects when prompted, with each web page listed. Each web page is then searched for keywords provided by a user. Web pages containing the target keywords are then displayed in a format selected by the user on the data processing system display. Individual web pages may be accessed and displayed in successive order by utilizing the graphical “next/previous” buttons present in the web browser window.

Abstract: Protecting data files from being stolen or compromised in a data processing operation having stored data in a plurality of data files by receiving user requests for access to data files, determining whether said requests are unauthorized intrusions into the requested data files and, responsive to a determination that a request is an unauthorized intrusion, changing the identification of the requested data files by renaming the files. Preferably, the rename should be one which does not identify the contents of the file, i.e. the rename disguises the file contents. Then, it is also desirable that the renamed file be moved to a new “hidden” directory. In such a case, the renamed file is also assigned a covert name which indicates a covert location in the new directory. Then, there is provided a log referencing each renamed file to the covert name of the respective file so as to indicate the covert location of said file in said new directory.

Abstract: A method of automatically generating and decommissioning mirrors of data contained in physical storage volumes in computer system is disclosed. Physical storage volumes and portions of volumes are monitored to collect usage statistics. Those usage statistics are then used to determine whether to mirror the volume or volume portion for greater efficiency. Likewise, the usage statistics are used to determine when mirrors already generated should be decommissioned due to lack of usage.

Abstract: A method, system and computer readable instructions for executing a file with a file format is provided. An attempt is made to execute the file with a first computer application within a plurality of computer applications. Responsive to the first computer application being unable to recognize the file format of the file, a second computer application within the plurality of computer applications is selected to execute the file. The file is then executed using the selected second computer application.

Abstract: Data files are protected from being stolen or compromised by unauthorized users by a system comprising receiving user requests for access to data files, means for whether said requests are unauthorized and means for destroying the requested data files responsive to a determination that a request is unauthorized for such files. The present invention offers a very aggressive solution to the problem of theft of data in files. At the first suspicion of intrusion, there is a set up for destroying the intruded files. It would be advantageous to have duplicate or backup files for all files. These duplicates must be substantially inaccessible to user requests.

Abstract: There is provided a computer controlled display interface permitting simplified tracking of access time periods to secured data in a user interactive display system with a multitude of displayed windows comprising secured data. A process is provided for tracking for each of said plurality of windows a variable parameter relative to the window, in combination with a process for displaying along at least a portion of the borders of each of said windows a color varying with said variable parameter being tracked for said window. In secured access systems, the parameter being tracked is the period of access time.

Abstract: An apparatus and method of controlling the download and display of images within a web browser are provided. The method and apparatus allow a user to selectively control either one or a plurality of images currently being downloaded and displayed by the web browser. For example, the user may terminate or suspend the download of any or all of a plurality of images being downloaded or displayed within a web page or frame. The user may later resume the download or display of any or all of the images whose downloads had been suspended.

Abstract: A universal computer controlled display terminal provided with a withdrawable card with stored data specific to the user of said card and a process responsive to the stored data for displaying on said terminal a layout of user interactive graphics personalized to said user. The invention is very effective in display terminals including a user interactive input touch screen having said layout of graphics personalized to said user. The layout of graphics may include a set of enlarged touch pads. The layout may also include images personalized to said user. The user card may also include integrated circuitry associated with said stored data, e.g. a smartcard. The data displayed responsive to the data stored on the card may also include text personalized to the user. The text may be in a language personalized to said user, or the text may be in an enlarged character font.

Abstract: A method for ensuring security of a system accessed utilizing a keypad wherein access is provided to said system via a security code entered on the keypad. A security code is entered on the keypad utilizing a first character configuration of the keypad. Following this, the location of one or more access characters on the keypad is repositioned to present a second character configuration of the keypad. The repositioning of the character configuration is completed electronically in a generally random manner. The change in configuration may take place immediately after each user interface, or after a predetermined number of user interfaces.