Abstract: An identity vectoring method is accomplished by matching a distinguished name or partial distinguished name from a digital certificate with a distinguished name mapping record. A data field in the distinguished name mapping record includes either a variable name or a user ID. The variable name corresponds to any environmental factor. The next mapping record to be considered, the criteria mapping record, is determined by substituting the environmental factor for the variable name in the data field. A data field in the criteria mapping record includes either a variable name or a user ID. The process completes when a mapping record containing only a user ID is encountered or when no matching criteria mapping records are found.

Abstract: A computer system or network tailors scopes of commit processing by using local work unit identifiers and more global logical unit of work identifiers. The local work unit identifiers are used to identify the scope of commit processing within each execution environment, and the logical unit of work identifiers are used to identify related work units of different execution environments. The related work units are coupled to each other by a protected conversation between the execution environments.

Abstract: In a computer system or process, sync point managers are distributed throughout each real machine for a plurality of execution environments, but all of the execution environments and sync point managers within one real machine share a common recovery facility and recovery log. A common recovery log is used by the recovery facility for all of the execution environments in the system. Different systems are interconnected by a communication facility and each has its own recovery facility and recovery log. A protected conversation can be initiated between the first and second execution environments in the same real machine, and the sync point managers within the respective execution environments coordinate the two-phase commit procedures associated with the protected conversations. A conversation manager within each real machine assists in routing the conversation between the first and second execution environments.

Abstract: To recover a failed commit procedure, a first recovery facility collects and compares sync point state information from a variety of different types of resources including a data repository and a protected conversation. The comparison of the sync point state information is made automatically in response to a sync point failure event. A second recovery facility serving another execution environment notifies the first recovery facility after a failure and subsequent recovery procedure of the second execution environment has completed. The first recovery facility makes automatic cyclic attempts to communicate with the second recovery facility. The first recovery facility can receive a manually initiated but automatically simulated response of sync point state information when there is a failure such that actual sync point state information cannot be received.

Abstract: A computer system provides registration of resource for synchronization point processing. Resources include file systems, data bases, and protected conversations. A resource becomes protected by the system when it is registered in the application's execution environment. The execution environment includes but is not exclusive to the interactive environment. Accordingly the invention provides an efficient and uniform method for identification of protected resources. The registration facility is separate from the application. Thus, the users of applications, application program developers, system administrators and operators need not have to consider or design a registration facility but only involve the one provided. A protected resource manager, through its adapter, can modify, at any time, the registration information, either by adding missing information or by changing the existing information. A resource registers only for the work unit in which it wishes to participate.

Abstract: A Space Management System for a Data Access System of a File Access Processor for servicing requests from a set of Application Support Processors, which can exist in a global network, with each Application Support Processor sharing access to data in files stored by the File access Processor. The File Access Processor manages access to a set of data files and information about files held in file directories, which allow for managing file collections, can relate to each other hierarchically, and may be shared. Each Application Support Processor also maintains therein an internal cache of file information to improve performance by reducing communications required with the File Access Processor for informatin about files. The File Access Processor provides the Application Support Processors with information for updating and maintenance of local caches of directory and file description information through a centralized accumulation and distribution of cache change notifications.