Abstract: The present invention relates to a method for granting a user (U1) secure access to one or more resources (D1, D2, D3) accessed by a process (P1), the process (P1) being defined in a SOA registry (100) and comprising one or more process-steps (S1, S2, S3), each process-step (S1, S2, S3) accessing one or more resources (D1, D2, D3) stored in a SOA repository (200), the method comprising the following steps: a. during an execution of the process (P1), for each resource (D1, D2, D3) accessed by at least one of the process-steps (S1, S2, S3), creating an entry (E1, E2) in the SOA registry (100) determining the accessed resource (D1, D2, D3); b. creating a process-instance-role (R1) in the SOA registry; c. for each resource (D1, D2, D3) accessed by at least one of the process-steps (S1, S2, S3), creating an access privilege (AP1) in the SOA repository (200) that grants access to the respective resource (D1, D2, D3) for the process-instance-role (R1); and d.

Abstract: The present invention concerns a database index for indexing one or more text documents (10) in a database, the text documents (10) comprising one or more hierarchical nodes (10a, 10b, 10c) each comprising one or more words (20a, 20f), the database index comprising at least one entry (50), each entry (50) comprising: a. a key (51) comprising a subset (510) of words occurring in one of the hierarchical nodes (10a, 10b, 10c) of the text documents (10) and the name (511 of the respective hierarchical node (10a, 10b, 10c); and b. a value (52) comprising one or more references (520) to the text documents (10) in which the subset (510) occurs.

Abstract: The present invention concerns a method for generating one or more system-specific security-definitions (310, 311, 320, 321) for one or more heterogeneous subsystems (S1, S2) of a software system, the method comprising the following steps: a. storing one or more natural-language security-definitions (100) in a rule-repository; b. storing one or more machine-readable security-definitions (200) and a first mapping of each natural-language security-definition (100) onto one or more of the machine-readable security-definitions (200) in the rule-repository; and c. generating the one or more system-specific security-definitions (310, 311, 320, 321) from the one or more machine-readable security-definitions (200) by one or more rule-converters (RC1, RC2) corresponding to the one or more heterogeneous subsystems (S1, S2), wherein the generating is based on a second mapping of each machine-readable security definition (200) onto one or more of the system-specific security-definitions (310, 311, 320, 321).

Abstract: The invention concerns a SOA-registry (1) for the automatic deployment of at least one SOA-application onto at least one platform, the at least one SOA-application comprising one or more components, the SOA-registry (1) comprising: a. at least one SOA-application description (A1) being related to one or more abstract component descriptions (AC1, AC2, AC3) describing the components of the at least one SOA-application; b. at least one concrete component description (CC11, CC12, CC21, CC22, CC31) for each of the one or more abstract component descriptions (AC1, AC2, AC3), the at least one concrete component description (CC11, CC12, CC21, CC22, CC31) comprising one or more requirements of the respective component on a target platform; and c. at least one platform descriptor (P1, P2) comprising one or more properties of the at least one platform.

Abstract: A method of pre-processing an XQuery on a XML data base and may comprise parsing the XQuery to obtain an abstract syntax tree and typing the abstract syntax tree to provide at least one pointer into a schema for XML documents of the XML data base. The typing step may involve the use of schema and accumulated instance data of the XML data base. Use of the accumulated instance data in addition to schema data allows for reduction of the set of pointers to a smaller set, which in turn reduces the number of documents to be examined when the query is executed.

Abstract: Monitoring a software system based on a service oriented architecture (SOA). The method may involve system components communicating with each other via sending messages. The method may include receiving a monitoring message by a monitoring component where the monitoring message may be sent from a system component of the software system. The method may further include providing an ontology including at least one interpretation rule for the message by the monitoring component. The method may also include reacting of the monitoring component in accordance with the at least one interpretation rule.