Abstract: A network of nodes transports a plurality of flows from central nodes to a plurality of display sessions executing processes that operate under the control of one or more central operating systems. A plurality of isolated virtual nodes comprises 1) a plurality of virtual graphics nodes that concurrently process graphics flows used in the plurality of display sessions at the plurality of remote zero client nodes and 2) a plurality of virtual switches that switch the concurrently processed graphic flows from the virtual graphics nodes to the plurality of remote zero client nodes. Two or more graphic flows are used simultaneously in two or more display sessions at a single remote zero client node that executes a separating operating system for separating the two or more display sessions from each other based on a a separation policy for the two or more graphics flows.

Abstract: A network of nodes transports a plurality of flows from central nodes to a plurality of display sessions executing processes that operate under the control of one or more central operating systems. A plurality of isolated virtual nodes comprises 1) a plurality of virtual graphics nodes that concurrently process graphics flows used in the plurality of display sessions at the plurality of remote zero client nodes and 2) a plurality of virtual switches that switch the concurrently processed graphic flows from the virtual graphics nodes to the plurality of remote zero client nodes. Two or more graphic flows are used simultaneously in two or more display sessions at a single remote zero client node that executes a separating operating system for separating the two or more display sessions from each other based on a a separation policy for the two or more graphics flows.

Abstract: A system and method for issuing a cryptographic certificate comprises describing one or more prerequisite condition on the cryptographic certificate. The one or more prerequisite conditions comprise membership in one or more prerequisite group of entities. An entity may be a participant, a resource or a privilege, etc. The present invention also requires naming one or more target groups of entities on the cryptographic certificate. One or more prerequisite group stakeholder that authorizes an entity in the one or more prerequisite group of entities to be added as members in another group of entities sign the cryptographic certificate. The cryptographic certificate is also signed by one or more target group stakeholders that authorizes an entity to be added as a member of the one or more target groups.

Abstract: A system, method and article of manufacture for communication in a network application. A connection or communication path to a replaceable transport is initiated in a network application. After the initiation, the network application creates an object to accept the connection or communication path. Once the connection or communication path is established, the network application provides QoS information for the replaceable transport to the replaceable transport, and to at least one object corresponding to the connection or communication path.

Abstract: A system, method and article of manufacture for communication in a network application. A connection or communication path to a replaceable transport is initiated in a network application. After the initiation, the network application creates an object to accept the connection or communication path. Once the connection or communication path is established, the network application provides QoS information for the replaceable transport to the replaceable transport, and to at least one object corresponding to the connection or communication path.