Abstract: A station used as a node in a peer-to-peer communications system keeps a list of stations to which requests for resources may be sent. The list includes for each member a performance parameter. When a station receives a request for resources it selects at least one station from the list and sends a resource request message to it. The selection of the station from the list may be performed by a random or pseudo-random process such that the probability of selection of any station is a function of the stored parameter. A station receiving such a request, for resources that it can itself supply, sends a reply to the originator. When the originator receives a reply it updates the respective performance parameter: the degree of adjustment may vary according to the quality of reply received.

Abstract: The present invention relates to distributed systems in which resource utilisation decisions depend upon the semi-automatic categorisation of resource descriptions stored in the distributed system. In the principal embodiment, the resource descriptions are web service descriptions which are augmented with tags (i.e. descriptive words or phrases) entered by users and/or by web service administrators. The initial use of automatic categorisation of these descriptions, followed by a user-driven fine-tuning of the automatically-generated categories enables the rapid creation of reliable categorisation of the resource descriptions, which in turns results in better resource utilisation decisions and hence a more efficient use of the resources of the distributed system.

Abstract: A network of devices permits data to be stored on the devices and subsequently searched and accessed from any other one of the devices. A plurality of channels are defined to distribute a plurality of access points throughout the network. A mechanism securely assigns authorizations to users to read or write from or to specified ones of the channels, which authorizations are capable of being checked by each of the access points. To write into a channel, a request is made to one of the access points which checks if the requesting user is authorized to write onto the requested channel. If appropriate, the data is associated with the requested channel. To search for data from a particular channel or group of channels, a search request is made to one of the access points which first checks the requesting user is authorized to read from the requested channel or group of channels.

Abstract: Security is provided in a network system. A message is received from a user, which message requires authentication of the user. An authentication message is sent indicating the identity of the user to an initial software security agent. The software security agent, on receipt of the authentication message, determines whether information relating to the user is stored on a security database associated with the software security agent, and, if so, the software security agent adds an authentication key to the authentication message. The authentication message is sent on to one or more further software security agents. The prior noted steps are repeated with the further software security agent(s) and, if user-related stored security information is found, adding an authentication key to the authentication message and sending the authentication message on to one or more further software security agents until the number of keys associated with the authentication message equals a predetermined number N.

Abstract: A computer security system uses a plurality of co-operating software agents to protect a network against attack. Individual agents at each node the network co-operatively act to detect attacks and to share attack signatures and solutions via a message exchange mechanism. A global internal measurement of the overall health of the group of agents may be used as an indicator of a possible attack. In larger networks, the agents may be formed a plurality of separate autonomous groups, with a common group identity being automatically maintained by the message passing mechanism. Individual groups may be located by a system designer in separate cells or domains within the network, so that if one cell becomes compromised the rest of the network is not affected.

Abstract: A station used as a node in a peer-to-peer communications system keeps a list of stations to which requests for resources may be sent. The list includes for each member a performance parameter. When a station receives a request for resources it selects at least one station from the list and sends a resource request message to it. The selection of the station from the list may be performed by a random or pseudo-random process such that the probability of selection of any station is a function of the stored parameter. A station receiving such a request, for resources that it can itself supply, sends a reply to the originator. When the originator receives a reply it updates the respective performance parameter: the degree of adjustment may vary according to the quality of reply received.

Abstract: A method and system of authenticating the identity of a person is disclosed which involves obtaining a value representing an overall degree of trust that the user is who he or she claims to be. A plurality of values are obtained from different authentication sources. By combining the values using fuzzy inference rules, an authentication system which is more easily adapted to new sources of authentication information is provided. in one embodiment the authentication sources are software agent programs.

Abstract: A method and apparatus of providing security in a network system, the method comprising:—receiving (201) a message from a user, which message requires authentication of the user.

Abstract: A computer security system uses a plurality of co-operating software agents (14) to protect a network against attack. Individual agents (14) at each node (10) of the network co-operatively act to detect attacks and to share attack signatures and solutions via a message exchange mechanism. A global internal measurement of the overall health of the group of agents may be used as an indicator of a possible attack. In larger networks, the agents may be formed a plurality of separate autonomous groups, with a common group identity being automatically maintained by the message passing mechanism. Individual groups may be located by a system designer in separate cells or domains within the network, so that if one cell becomes compromised the rest of the network is not affected.

Abstract: A method and apparatus of providing communications in a networks with dynamic topology is disclosed in which data is carried by software agents which operate autonomously and independently of global network information.

Abstract: A mobile agent computing system comprising at least one computer (10) having a communications port (12) running a host program (70) for facilitating execution of a mobile program (50) received via the port (12), the mobile program (50) including identification data indicative of its type, identity or origin, in which the host program (70) is arranged to test the mobile program for the possible presence of code which is inconsistent with the agent identification data, and to prevent execution of said inconsistent code.