Abstract: An apparatus and method for multi-threaded password management are provided. With the apparatus and method, resources may be grouped into families of resources. A family of resources is defined as a group of resources that may make use of the same password. When a user sets a new password for a family of resources, all of the passwords for each of the resources in the family are reset to this new password. That is, the multi-threaded password management apparatus and method spawns threads to reset the passwords of the other resources in the family. In this way, a single operation of resetting a password for a resource in the family may cause a plurality of passwords to be reset. Moreover, the passwords need only be reset when the earliest reset time of the resources in the family occurs. Thus, the number of passwords that must be memorized by a user is significantly reduced. Furthermore, the number of times that passwords need be reset is also reduced due to the resetting of passwords on a group level.

Abstract: A method and system for allowing for the secure transmission and reception of data in a processing system is disclosed. The method and system includes providing at least one crypto algorithm in a region of a system memory in the processing system; and assigning a cryptographic function of the at least one crypto algorithm to the region. A system and method in accordance with the present invention ties the encryption/decryption algorithm to specific DMA regions and the encryption key to the particular DMA transfer. This allows the system processors to offload the encryption and enable all network (and non-network) adapters to take advantage of this offload without hardware changes to the adapters.

Abstract: A display interface at a sending/receiving display terminal including the conventional implementations for reading and sending E-Mail with an implementation for organizing the text content of a chronological sequence of E-Mail documents having the same subject identifier or header. There is designated a subject identifier of one received electronic mail as a message text sequencer and there is an implementation at a receiving display station for enabling the display of a chronological sequence of the text of said received message and the text of all subsequent messages having said designated subject identifier. The designation of the identifier may automatically designate a subject identifier as a message text sequencer based upon user predetermined attributes.

Abstract: A system and method of servicing a plurality of read requests using a common mirror are provided. When a plurality of requests is received, it is determined whether the amount of data requested by the read requests is within a user-configurable threshold. The read requests are chained together if the amount of data requested by the read requests is within the user-configurable threshold. After being chained together, the read requests may be sent to the common mirror for servicing. The common mirror, in this case, is a least used mirror in a set of mirrors. To reduce seek and/or rotational time of the common mirror, it may be ascertained that the data being requested by the read requests is within a user-configurable range before chaining the read requests together. In some cases, it may be ascertained that the plurality of read requests is to be grouped together before the read requests are chained together.

Abstract: A system and method for protecting data transmitted across a private network is disclosed. A secure channel is established so that the client computer can securely transmit a password to the server computer. Once the password has been transmitted, future transmissions use the password to encrypt data by the sending computer and decipher the data at the receiving computer. In one embodiment, passwords expire after a certain amount of time and are thereafter renegotiated. In another embodiment, the password is successively modified by a counter value further preventing unauthorized persons from discovering the password used to encrypt the data. By using passwords rather than public-key encryption methods, less system resources are required to maintain data confidentiality. An information handling system securely transmitting data within a private network as well as a computer program product programmed to perform the encryption processing are further disclosed.

Abstract: A method, apparatus, and computer instructions for providing updated time at a mobile data processing system. An area code is determined from a call made to a server from the mobile data processing system. A time zone is determined using the area code to form an identified time zone; and an adjusted time based on the identified time zone is sent to the mobile data processing system.

Abstract: A display interface at a sending terminal including the conventional means enabling the sender of an electronic mail document to specify users to receive the document; but, in addition, provides means enabling the sender of the electronic mail document to specify users not receive the document. Then, users specified not to receive the electronic mail document are precluded from receiving the document. Thus, the sender is enabled to specify users not to receive a copy, forward or print of the document. A display interface is also provided at a receiving terminal that includes means enabling the receiver of an electronic mail document to further specify users to be forwarded the document; and also means enabling the receiver of the electronic mail document to specify users not to be forwarded the document.

Abstract: Apparatus for eavesdropping within an area layer adjacent to and surrounding a LAN area periphery for potential wireless transmissions of an intruder having a lower frequency within a level below the LAN frequency; and an implementation responsive to said eavesdropping apparatus for changing the encryption code of said encrypted wireless transmission upon the eavesdropping detection of a wireless transmission of said lower frequency addressed to a network location of one of the terminals in said LAN.

Abstract: A method and apparatus in a data processing system for providing access to resources within the data processing system. A request is received from a requestor to access a resource in the data processing system. A cookie is sent to the requestor, wherein the cookie is used to access the resource. An identification of the requestor and the cookie is stored to form a stored identification and a stored cookie. Responsive to receiving a subsequent cookie from a source, an identification of the source and the cookie is compared with the stored identification and the stored cookie. Responsive to a match between the identification of the source and the cookie and the stored identification and the stored cookie, access to the resource is allowed.

Abstract: A system, apparatus and method of notifying a user that there may be a possibility of communicating with a computer system other than an intended one are provided. When a host in use by the user is to request a DNS name service, the request is sent to two or more DNS servers. If all the servers return the same IP address, then there is a likelihood that the user may communicate with the intended computer system. If, however, two or more different IP addresses are returned, there is a high likelihood that the user may communicate with a computer system other than the intended one. When this occurs a warning is generated notifying the user of such a likelihood.

Abstract: A method and apparatus for providing hardware aware logical volume mirrors are provided. In particular, the an improved logical volume system and method are provided in which a mirroring device driver is provided that selects a physical storage device from which data is to be read based on information obtained regarding the physical devices used in the mirror of the data. The mirroring device driver may be part of a logical volume device driver (LVDD), such that a modified LVDD is provided, or may work in concert with the logical volume device driver to achieve the purposes of the present invention. The information regarding the physical devices used in the mirror may include characteristic data of physical storage devices (e.g., whether a write cache is used, whether a read-ahead cache is used, RPM speed, connector type, etc.) and may also include operational history data.

Abstract: In order to reduce overall downloading time for Web documents without depriving the user of valuable Web document resources, the user at a receiving Web station is enabled to preselect which received Web documents will be downloaded in a text-only mode. An implementation is provided at the receiving Web station for determining whether a received web document has been preselected for downloading in a text-only mode, and in responsive to this determination, there is an implementation for downloading such received preselected Web documents in a text-only mode. The user is enabled not only to designate specified documents to be downloaded in a text-only mode but the user may also preselect whole World Wide Web domains or specified Web sites within such domains from which received Web documents are to be downloaded in a text-only mode.

Abstract: A method, system and apparatus for allowing a mirroring map to be used with more than one piece of data are provided. First, a mirroring map is created and given a name. Then, the name of the mirroring map and the mirroring map itself are stored into the computer system. When a piece of data is to be stored in accordance with the mirroring map any time thereafter, the name of the mirroring map is used to associate the mirroring map with the piece of data.

Abstract: A method, system and token are described which control access to a token server system. In a first aspect, a method and system for controlling access to a file system of a token server comprise encoding a time specific permission into a token. In a second aspect, a token server system comprises at least one client and a token server accessible by the at least one client. The token server provides a token to the at least one client to allow the client to have access to the data on the token server. The token includes a time specific permission. In a third aspect, a token for use in a token server system comprises a group of privileges and security identifiers. The token includes a time specific permission. A system and method in accordance with the present invention controls access to networked systems, but does not totally disable or change a system to accommodate temporary outages of access.

Abstract: A system and method for performing a point in time backup is presented. A backup application initiates a point in time backup whereupon a backup tracker monitors write requests during the point in time backup. The backup tracker logs data block locations that have already been backed up whose content changes in response to a write request. After a first pass of backing up data blocks, the backup application backs up the changed data blocks. During the changed data block backup procedure, the backup application invokes a copy on write command for particular changed data blocks that receive write requests prior to their content being backed up. The copy on write command stores the particular changed data block's content in a temporary storage area in which the backup application retrieves when the backup application is ready to backup the particular changed data blocks.

Abstract: A system and method for designating and deleting expired files includes a means for storing expiration dates along with file identification data maintained by the file system. An earliest expiration date is stored in data maintained by the file system pertaining to each directory. In this manner, a check of the directory data indicates whether one or more expired files exist in the directory. The system date is compared to the earliest expiration date for a directory, for example when a “list contents of directory” command is received. If the earliest expiration date is earlier than the system date then a comparison is made with the files in the directory and individual files with expiration dates earlier than the current date are deleted. The earliest expiration date is then update to the correspond to the next earliest expiration date falling after the current date.

Abstract: The present invention is embodied in a system and method for monitoring and alerting remote client users of digital intrusions of their computers by host servers. In general, the present invention monitors actions taken by host servers relating to information about the remote client and displays graphical alerts when a digital intrusion or a breach of security occurs during a network connection, such as a connection to the Internet, with the host server. Specifically, the present invention monitors certain aspects of the remote client user s interaction with host servers. Based on certain interaction, such as an attempt by the host server to retrieve non-related information about the remote client, the remote client user can be provided with a graphical alert. This allows the remote client user to make an informed decision whether or not to allow certain host server sites to retrieve the client user s personal information.

Abstract: A system, apparatus and method of allowing an application program continued access to a frozen file system are provided. An application program that requires continued access to a file system, even when the file system is frozen, may register with the system. Doing so allows the system to identify application program as one that needs continued access to the file system. Hence, the application program may continue to be provided access to the file system while all other application programs are prevented from accessing the file system.

Abstract: A method, system, and product are disclosed for automatically generating a symbol-based debug script, which is executable by a debug program, for debugging a software program. Function symbols included in the software program are identified. The functions represented by the function symbols may be executed during an execution of the software program. A debug script is then automatically generated which, when executed by a debug program, will record each one of the functions symbols which represent a function called by the software program during execution of the software program by the debug program.

Abstract: A method of automatically generating and decommissioning mirrors of data contained in physical storage volumes in computer system is disclosed. Physical storage volumes and portions of volumes are monitored to collect usage statistics. Those usage statistics are then used to determine whether to mirror the volume or volume portion for greater efficiency. Likewise, the usage statistics are used to determine when mirrors already generated should be decommissioned due to lack of usage.