Abstract: A method and apparatus for storage of security keys and certificates is provided in which the keys and certificates are fragmented into non-uniform lengths and stored in a data file (110). The fragments (152, 154) of the keys and certificates are intermixed within the data file (110). The fragmentation is carried out according to an algorithm (200) which may be based on a pass phrase (140) to the data file (110). The position of storage of each fragment (152, 154) within the data file (110) is also determined by the algorithm (200).

Abstract: A software security system is arranged to verify the authenticity of each element of a Java Virtual Machine installation. A digital signature is attached to each file of the JVM installation. A loader (20) verifies the digital signature of the JVM DLL (30). The JVM DLL 30 then verifies the digital signature of each other DLL and configuration file to be loaded (40, 50, 60, 70), and only loads those files which have successfully verified digital signatures. In this way the security of the JVM is enhanced, a user has greater confidence that the Java applications will function correctly, and the detection of incorrect or damaged JVM installations is improved.

Abstract: A computer system includes a software virtual machine (such as Java) for running one or more applications. An object is provided that is responsive to a call from an application for placing the virtual machine and application into a state of suspension. This involves interrupting all current threads, and recording the state of the components of the virtual machine, including heap, threads, and stack, into a serialization data structure. Subsequently the serialization data structure can be invoked to resume the virtual machine and application from the state of suspension. Note that many virtual machines can be cloned from the single stored data structure. One benefit of this approach is that a new virtual machine can effectively be created in an already initialized state.

Abstract: A software security system is arranged to verify the authenticity of each element of a Java Virtual Machine installation. A digital signature is attached to each file of the JVM installation. A loader (20) verifies the digital signature of the JVM DLL (30). The JVM DLL 30 then verifies the digital signature of each other DLL and configuration file to be loaded (40, 50, 60, 70), and only loads those files which have successfully verified digital signatures. In this way the security of the JVM is enhanced, a user has greater confidence that the Java applications will function correctly, and the detection of incorrect or damaged JVM installations is improved.

Abstract: A Java Virtual Machine comprises a class loader and a library file loader. The class loader responds to requests to instantiate a class by searching a classpath in which class files and archived files are stored; and responsive to locating a requested class file in the classpath or within an archived file in the classpath, loads the class into memory. The library file loader responds to requests to load a native code library, by searching a library path in which library files are stored; and responsive to locating a requested library file in the library path, loads the library into memory. According to the invention, the library file loader also searches the classpath; and responsive to locating a requested library file in an archived file in the classpath, loads the library into memory.

Abstract: A computer system includes a software virtual machine (such as Java) for running one or more applications. An object is provided that is responsive to a call from an application for placing the virtual machine and application into a state of suspension. This involves interrupting all current threads, and recording the state of the components of the virtual machine, including heap, threads, and stack, into a serialization data structure. Subsequently the serialization data structure can be invoked to resume the virtual machine and application from the state of suspension. Note that many virtual machines can be cloned from the single stored data structure. One benefit of this approach is that a new virtual machine can effectively be created in an already initialized state.

Abstract: A method and apparatus for storage of security keys and certificates is provided in which the keys and certificates are fragmented into non-uniform lengths and stored in a data file (110). The fragments (152, 154) of the keys and certificates are intermixed within the data file (110). The fragmentation is carried out according to an algorithm (200) which may be based on a pass phrase (140) to the data file (110). The position of storage of each fragment (152, 154) within the data file (110) is also determined by the algorithm (200).