Abstract: An integrated software development system including an interface description language adapted to specify constraints on input parameters, a program analyzer adapted to identify input parameters of a software program, and a validation enforcement system adapted to enforce that an interface description in the interface description language complying with a predefined set of validation rules is provided for the input parameters of the software program.

Abstract: The invention relates to an integrated software development system 4, comprising an interface description language adapted to specify constraints on input parameters, a program analyzer 6 adapted to identify input parameters of a software program 7, and a validation enforcement system 5 adapted to enforce that an interface description 8 in the interface description language complying with a predefined set of validation rules 9 is provided for the input parameters of the software program 7. The invention further relates to a method for validation, a computer arrangement and a computer program product.

Abstract: The invention concerns a perforating device comprising a cutting tool (10), means for rotating (11) the cutting tool (10) and means for translating (12, 14) the cutting tool (10), the ratio between the rotational speed and the translational speed being variable during rotation of the cutting tool (10). It comprises a gear train (16, 17; 18, 19) for synchronizing the rotating means (11) with the translating means (12, 14). The speed ratio between a driving pinion (16; 18) of the gear train, rotationally linked to the means (11) for rotating the cutting tool (10) and a transmission pinion (17; 19) of the translating means is reversed at least once during one rotation of the cutting tool (10). The invention is useful for fragmenting the resulting shavings.

Abstract: The invention concerns a perforating device comprising a cutting tool (10), means for rotating (11) the cutting tool (10) and means for translating (12, 14) the cutting tool (10), the ratio between the rotational speed and the translational speed being variable during rotation of the cutting tool (10). It comprises a gear train (16, 17; 18, 19) for synchronizing the rotating means (11) with the translating means (12, 14). The speed ratio between a driving pinion (16; 18) of the gear train, rotationally linked to the means (11) for rotating the cutting tool (10) and a transmission pinion (17; 19) of the translating means is reversed at least once during one rotation of the cutting tool (10). The invention is useful for fragmenting the resulting shavings.

Abstract: An integrated software development system including an interface description language adapted to specify constraints on input parameters, a program analyzer adapted to identify input parameters of a software program, and a validation enforcement system adapted to enforce that an interface description in the interface description language complying with a predefined set of validation rules is provided for the input parameters of the software program.

Abstract: The invention relates to an integrated software development system 4, comprising an interface description language adapted to specify constraints on input parameters, a program analyzer 6 adapted to identify input parameters of a software program 7, and a validation enforcement system 5 adapted to enforce that an interface description 8 in the interface description language complying with a predefined set of validation rules 9 is provided for the input parameters of the software program 7. The invention further relates to a method for validation, a computer arrangement and a computer program product.

Abstract: One embodiment disclosed is a computer program with metadata management function. The computer program includes a basic program module and a metadata management module. The metadata management module includes intercept definition elements that define intercept points in the basic program module. The metadata management module further includes intercept instructions that define metadata operations to be performed when an intercept point occurs in the basic program module.

Abstract: A method for using a drilling device with a rotating tool, a drilling machine and lubrication device. The device includes an intermediate chamber for storage of chips produced during an elementary drilling operation, and a scavenging device capable of generating an airflow scavenging the chips. The elementary drilling operation is performed without activating the scavenging device, and the elementary drilling operation is followed by an airflow scavenging operation of the chips stored in the intermediate storage chamber during the elementary drilling operation.

Abstract: The invention relates to drilling device (1) with a rotating tool comprising a drilling machine (8) and lubrication means (26). According to the invention, the device comprises: an intermediate chamber (18) for storage of chips (20) produced during an elementary drilling operation; introduction means (46), for introducing the chips into the intermediate storage chamber (18) during the elementary drilling operation, the introduction means being designed so as to operate other than by generating an airflow; a main chamber for storage (18) of chips (20) communicating with the intermediate storage chamber (18); and scavenging means (30, 38), capable of generating an airflow scavenging the chips present in the intermediate chamber (18), towards the main chamber (42).

Abstract: The present invention is a method and apparatus for maintaining security context data within a distributed environment. The method can include the step of identifying a context reference to the security context data within an application request. The security context data can be retrieved from a remote source in the distributed environment by reference to the context reference. Subsequently, the retrieved security context data can be passed to security logic coupled to a hosted application targeted by the application request. Importantly, for each application server and each application service through which the reference can pass, the context can be augmented as the request traverses through services and servers.

Abstract: The invention relates to data integrity in applications employing smartcards, in particular smartcards in connection with remote stations like personal or desktop card readers or similar inexpensive terminals. Since smartcards today are extensively used particularly in the financial and banking field, the data integrity issue is of particular importance. In such applications, any interrupted data transfer between the smartcard and a terminal can result in making the smartcard unusable and/or corrupt the data, any of which in turn often greatly affects the user. The solution according to the invention is, in brief, to apply an “adapted atomicity approach” to the smartcard environment, i.e. to adapt and use an atomic approach for smartcard transactions.

Abstract: A robust and secure password (or key) change method between a user and an authentication server in a distributed communication network is disclosed. The protocol requires the exchange of only two messages between the user desiring the key change and the server, the user's request including, at least partly encrypted, an identification of the sending user, old and new keys, and two nonces, at least one including a time indication. The authentication server's response includes a possibly encrypted accept/reject indication and the regularly encrypted request from the user.

Abstract: A method and system for providing secure authenticated cryptographic key distribution in a communication system having properties very similar to a Two-Party Authentication Protocol. A new group key is distributed by a server to a selected group of users in the system. A braided structure of the messages, sent by the server to each user, allows authentication and, at the same time, secure and secret key distribution. Moreover, the braided structure makes it possible to construct minimal-length protocol messages.

Abstract: A method and apparatus for providing authentication among a dynamically selected group of users in a communication system with a dynamically changing network topology. With this invention, freshness information and alleged identity information are transmitted from each of the users in the group using available paths in the network. A group key is then generated, and coded information, derived from the group key and the above transmitted information, is sent to each of the users. Each unit of coded information is accompanied by an identifying tag so as to identify which of the users is to use the appropriate unit of coded information. Each alleged user will then extract the group key from a corresponding coded information unit only if it shares an appropriate secret with a server. Without knowledge of the group key, a user cannot be authenticated.

Abstract: An arrangement of authenticating communications network users and means for carrying out the arrangement. A first challenge N1 is transmitted from a first user A to a second user B. In response to the first challenge, B transmits a first response and second challenge N2 to A. A verifies the first response. A then generates and transmits a second response to the second challenge to B, where the second response is verified. The first response must be of a minimum formf(S1, N1, . . . ),and the second response must be of the minimum formg(S2, N2, . . . ).S1 and S2 are shared secrets between A and B. f() and g() are selected such that the equationf'(s1,N1', . . . )=g(S2, N2)cannot be solved for N1' without knowledge of S1 and S2. f'() and N1' represent expressions on a second reference connection. Preferably, the function f() may include the direction D1 of the flow of the message containing f(), as in f(s1, N1, D1, . . . ). In such a case, f() is selected such that the equationf'(S,N1',D1', . . . )=f(S, N2, D1, .

Abstract: In a ring communication system comprising several stations, access to the ring is granted to one station at a time by a circulating token indication. A method is provided guaranteeing a transmission opportunity for synchronous or circuit-switched data in periodic time intervals to authorized stations. A CS monitor station issues a frame header which is marked in a specific bit position to allow only authorized stations to transmit their synchronous data together with a destination address. In a first embodiment, a single frame comprises a plurality of slots each having a free/busy indication, a destination address field and a field for synchronous data, and each authorized station can occupy one such slot. In a second embodiment, a marked frame can be used by only one authorized station for transmitting synchronous data, but a new marked frame header is reissued until all authorized stations around the ring have transmitted synchronous data.

Abstract: In a communication network comprising block switching nodes interconnected by transmission links, a flow control mechanism is provided in each switching node for regulating the flow of addressed data blocks or messages. A hardware look-ahead mechanism effective within each node tests for each data block received from a link and buffered at an input port, whether it can be accepted at the appropriate output port of the same node for further transmission. A token mechanism effective over links permits maintenance at each output port of a node of an indication whether any data block can be accepted in the input port at the other end of the respective link. By the combined operation of look-ahead mechanisms and token mechanisms the flow of addressed messages in a direction where the transmission path is already filled up is prevented. This has a positive smoothing effect on overall traffic flow where short-time or local overloads occur.