Abstract: Provided is a method for defining security permissions in a computer application in a manner that distributes the assignment of security permissions among multiple levels of the software development and delivery process. A developer defines the permissions for a particular application as metadata and saves the permissions in a permissions metadata file stored in conjunction with the application. A signer inspects the application and permissions file and, if satisfied that the appropriate permission levels in the file have been properly set, validates, or “signs,” the application. Once a signer has validated, or signed, the permissions in the application and the permissions file, the application is deployed, or provided to a user who installs the application on a computing system with the maximum permissions allowed under the permissions file.

Abstract: An arrangement, a system and a method provide communication between clients and managed systems via managing systems. The clients communicate with the managing system over a first network using an IP-protocol, and a managing system(s) communicate with a number of managed systems over a second network. Each managing system includes a service management node with an information handling device for separating addressing information from other information of an incoming message and for adapting the information to the communication protocol used for communication with the addressed managed system.

Abstract: A method and a system for establishing a connection between a first computer of a first computer network and a resource of a second computer network via a third network through a gateway intervening between the second computer network and the third network. A requester issues a request for a connection from the first computer to the resource by specifying a name of the resource. A temporary IP number is returned to the first computer in answer to the request. The temporary IP number is mapped to a tunnel to the gateway. The gateway administrates the handling of data packets such that data packets addressed by the first computer to the temporary IP number, arriving through the tunnel, are routed to the resource and data packets arriving from the resource destined to the first computer, are routed through the tunnel to the first computer.

Abstract: A novel object called the Data Object is used to represent different information types in a system in a singular way in an object-oriented programming environment. The Data Object stores the value of the information and a reference to an object that handles that specific type of information. All requests on the Data Object are forwarded to this handler. The interface allows programmers to query the structure of the information, place constraints on values and names of the parts. This makes it possible to write code that performs a service that adapts itself to whatever Data Object it gets. The use of a Data Object significantly minimizes the coupling between modules and make reusable code easier to develop because each object class in the object-oriented software system is now coupled only to the Data Object class.