Abstract: A convenient and safe way is provided to update the security policy associated with an electronic device after a user has purchased the device and taken it away for use. In particular, a scripting tool is provided that can be used to create a policy update script that describes the desired modifications to the electronic device security policy. An OSGi resource processor, referred to as a Policy Update Resource Processor, is further provided, wherein the Policy Update Resource Processor is located on the electronic device and is configured to carry out the security policy modifications outlined in the policy update script.

Abstract: A method of providing termination of threads in a virtual machine includes defining one or more of a protected set of code segments and an unprotected set of code segments, deferring termination of a thread that has been identified for termination in response to the thread being located in the protected set, and terminating the thread that has been identified for termination in response to the thread being located in the unprotected set.

Abstract: A method, and related equipment, for interoperating between a device (11a) in a first network, such as an IMS network, and a device (12a) in a second network (12), such as a WV network, the first network using a first protocol (SIP) requiring that a message have a request uniform resource identifier including an address scheme, and the second network (12) using one or more other protocols. The method includes a step (41) of converting a message constructed according to the first protocol (SIP) but having as an address scheme indicating a protocol of the second network (such as “wv:”) to a message in which the address scheme is changed (e.g. to “sip:”) to indicate the protocol of the first network and in which a user uniform resource locator parameter is provided having a value indicating the original scheme, before conversion (i.e. “wv” in the example given).

Abstract: A system and method for enforcing a security policy in a distributed system. A request is transmitted to a receiving program on a first virtual machine to permit a requesting program on a second virtual machine to access the receiving program. A first call stack is accessed in the target virtual machine to determine whether the requesting program is permitted to access the receiving program. A second call stack, in the originating virtual machine, is accessed to determine whether the requesting program is permitted to access the receiving program. If the requesting program is permitted to access the receiving program, the receiving program is invoked. If the requesting program is not permitted to access the receiving program a signal indicating access is not allowed is transmitted.

Abstract: A system and method for managing next hop addressing where multiple address schemes are provided in messages transmitted via a network. A predefined addressing policy may be applied to an incoming message if the predefined addressing policy includes a policy corresponding to an incoming address scheme of the incoming message. The incoming address scheme is converted to one or more outgoing address schemes provided by a location service in response to a location query. A plurality of outgoing messages is dispatched, each using one of the outgoing address schemes provided by the location service. A default next hop addressing operation is effected when the predetermined addressing policy does not correspond to the incoming address and when none of the multiple outgoing address schemes provides a useful result.

Abstract: A relay server (11) including functionality for enabling a user in one domain to perform a group operation on a group used by a service in another domain, and so hosted by a server in the other domain. A predetermined list (11e) of mappable group commands, i.e. a table of mappings of group operation commands/ primitives is used. If the group command is not in the list of mappable group commands and so is not mappable, then the relay server copies the group from the other domain to the user domain, and binds the group to an approximately equivalent service in the user domain if there is one according to a predetermined list (11f) of such equivalents, but otherwise notifies the user that the group is available locally, and user interaction is required to bind the group to a service in the user domain.

Abstract: A method for use by an I-CSCF (12b) in resolving an address of a message according to SIP but using a protocol-agnostic scheme, and corresponding equipment. The method includes: a step (32) of querying a data store (12c) of scheme mappings, in response to receiving such a request, the querying for determining possible mappings to trial schemes at least one of which resolves the address, i.e. which can be used by the I-CSCF (12b) to find the S-CSCF (12e) for the target user (11b) if the target user is an IMS client, or for forwarding to a gateway or next hop in the path to the target user (11b) if the target user (11b) is not an IMS client; and a step (33) of testing in turn (until success or until all possible trial schemes are tested) each possible trial scheme, the testing based on comparing an address using the trial scheme with an address in a data store (12d) of addresses.

Abstract: A method for use by an I-CSCF (12b) in resolving an address of a message according to SIP but using a protocol-agnostic scheme, and corresponding equipment. The method includes: a step (32) of querying a data store (12c) of scheme mappings, in response to receiving such a request, the querying for determining possible mappings to trial schemes at least one of which resolves the address, i.e. which can be used by the I-CSCF (12b) to find the S-CSCF (12e) for the target user (11b) if the target user is an IMS client, or for forwarding to a gateway or next hop in the path to the target user (11b) if the target user (11b) is not an IMS client; and a step (33) of testing in turn (until success or until all possible trial schemes are tested) each possible trial scheme, the testing based on comparing an address using the trial scheme with an address in a data store (12d) of addresses.

Abstract: A system and method for managing next hop addressing where multiple address schemes are provided in messages transmitted via a network. A predefined addressing policy may be applied to an incoming message if the predefined addressing policy includes a policy corresponding to an incoming address scheme of the incoming message. The incoming address scheme is converted to one or more outgoing address schemes provided by a location service in response to a location query. A plurality of outgoing messages is dispatched, each using one of the outgoing address schemes provided by the location service. A default next hop addressing operation is effected when the predetermined addressing policy does not correspond to the incoming address and when none of the multiple outgoing address schemes provides a useful result.

Abstract: A method, and related equipment, for interoperating between a device (11a) in a first network, such as an IMS network, and a device (12a) in a second network (12), such as a WV network, the first network using a first protocol (SIP) requiring that a message have a request uniform resource identifier including an address scheme, and the second network (12) using one or more other protocols. The method includes a step (41) of converting a message constructed according to the first protocol (SIP) but having as an address scheme indicating a protocol of the second network (such as “wv:”) to a message in which the address scheme is changed (e.g. to “sip:”) to indicate the protocol of the first network and in which a user uniform resource locator parameter is provided having a value indicating the original scheme, before conversion (i.e. “wv” in the example given).