Abstract: Methods and systems for specifying settings used by a file are described. A file is accessed using a software application. Associated with the file are global settings defined by the application. The application automatically imposes the global settings on all files associated with the application. However, a file-specific setting is defined for the file and saved. The file-specific setting replaces a corresponding global setting defined by the application for the file. The global settings for other files associated with the application are not affected by the file-specific setting. The file-specific setting is used instead of the corresponding global setting upon subsequent accessing of the file.

Abstract: Methods and arrangements for collecting tracing data from a plurality of threads of a program. A storage buffer is provided, a first number of units of tracing data for a first thread of the program is determined, and a second number of units of tracing data for a second thread of the program is determined. In the storage buffer, a first block of storage space is reserved for storing the first number of units of tracing data and a second block of storage space is reserved for storing the second number of units of tracing data. Tracing data are thence written concurrently into the first and blocks.

Abstract: A developer is provided with an emulation tool, which approximates speed conditions of an application executing on a target device, for example a MIDlet executing on a mobile information device, by matching network operations of a development platform to the lesser performance capabilities of the target device. The developer is thereby enabled to optimize an application's network usage early in its development. The time required to perform communications operations in the development environment is increased sufficiently to permit an application developer to more accurately emulate the target device.

Abstract: A computer language translator that translates all or any portion thereof of source code in an original computer language to source code in a target computer language, which may then be translated back to the original language while still maintaining concept, syntax, form of expression, and formatting of the original source code.

Abstract: Multiple coprocessor scheduling of parallel processing steps control with bit arithmetic using a bitmask for each data block buffer indicating next processing step and a bitmask of processing steps with available coprocessors. ANDs of the bitmasks for the buffers with the bitmask of processing steps determines processing steps to run. This allows for parallel processing on the data blocks in the various buffers.

Abstract: In an embodiment of the present invention, at a Deployer level, an application software component is provided with a tree representation 510 of objects it contains. An object is a leaf node, with the attributes of the object being in nexus between the root and the leaf node. An accessor object 511 has methods to access the tree 510. In one embodiment of the present invention, at an administrator level, a handler object 611 in turn accesses accessor object 511. Handler object 611 may be part of a handler home object 619. Client applications 710 have lookup services 711 to access handler objects like 611, e.g. via a lookup home object 719, and handler home object 619.

Abstract: A method of dynamic real time translation of first program code written for a first programmable machine into second program code (target code) for running on a second programmable machine employing run time generation of an intermediate representation of the first program code. The intermediate representation is generated to include a combination of register objects and expression objects. Register objects represent abstract registers that provide a representation of the state of the first programmable machine based on expected effects of the instructions within the first program code, while expression objects represent elements, such as operations or sub-operations, of the instructions in the first program code. In the intermediate representation, a branched tree-like network is formed in which each register object serves as a basic root of the network and references expression objects to which they relate either directly or indirectly through references from other expression objects.

Abstract: Efficient and flexible support for parametric polymorphism in a dynamic execution environment is provided. The addition of efficient parametric polymorphism in a dynamic execution environment expands the support of features of various source languages in intermediate language code. Dynamic allocation of typing context data and support tables at runtime optimizes memory requirements and performance in a dynamic execution environment. As typing-context-relevant-code-points are executed within the program, indices are assigned to these code points and indexed slots in appropriate typing context data structures are allocated. As a typing-context-relevant-code-point is executed within a typing context, the indexed slot within the associated typing context data structure is filled in with typing context data. Such populated slots may be reused in subsequent execution of the code point within the same typing context to avoid re-computing the typing context data.

Abstract: A method for inducing multi-threading in software code may use blocks of code as the basis for scheduling and to suggest concurrent execution for each block. The method may comprise marking one or more blocks of code in an application coded for sequential execution to generate marked code. The marking may comprise inserting a marker at each of the one or more blocks to suggest that block for potential concurrent execution. Concurrent code may be generated from the marked code. Generating the concurrent code may comprise analyzing the marked code to estimate performance benefits of concurrently executing the marked blocks of code and determine which marked blocks would meet a performance benefit threshold if executed concurrently. Generating the concurrent code may also comprise transforming one or more of the marked blocks into corresponding concurrently executable tasks. The method may include scheduling one or more of the concurrently executable tasks.

Abstract: A method for compiling a logic design includes inputting a logic design and an input file into a plurality of compilers, respectively, where the logic design comprises a plurality of modules, compiling separately the plurality of modules into a plurality of object files, and linking the plurality of object files to execute the logic design.

Abstract: A mechanism for sharing files, and sets of related files, or packages of files, in a multi-host, multi-platform environment is provided. A public package client handles user requests to perform operations on a software package. Additionally, information about the package and the files contained therein may be obtained. A server, responsive to the client, performs the operations on the package. Data about the files is set in a data structure which may be stored in an archive along with the files themselves. In particular, this data may identify each file as either a text or binary file and as an executable file. A client may access the aforementioned data to determine if the file or files require further processing to adapt the file to the operating system on the client. Such processing may, for example, include linefeed/carriage return translation and codepage translation, or setting file attributes.

Abstract: An apparatus and method for maintaining integrity of data in a software environment are provided. With the apparatus and method, the individual software resources associated with a transaction are identified and the processing of these resources is started. As the processing of these resources terminates, their associated APIs return messages indicating either that the software resource committed or was unable to commit and the reason why the software resource was unable to commit. Based on this reason, appropriate error resolution and recovery operations are performed and the transaction is resubmitted only to those software resources that were unable to commit. The software resources that already committed have their states maintained. In this way, roll back of committed software resources is avoided.

Abstract: Workloads, as defined by customers, are tracked on an individual basis. This tracking enables a customer to identify the amount of resources consumed by a particular workload. The customer defines the workload to be tracked, and that workload is tracked using a Unit of Work value. The Unit of Work value ensures that there is an accounting for the resources attributable to that workload.

Abstract: An operating system registry contains multiple “identities.” One of these identities is designated the current identity. An application executing on a multitasking computer system uses information stored in the current identity to configure the application, for example to provide a user-specific user interface. When an application opens, it registers with an identity manager using objects known as “connection points.” To switch identities, a user supplies the name of an identity to switch to. The identity manager then uses the registered connection points to query each of the applications for permission to switch identities. If all the registered connection points grant permission to switch identities, then the identity manager switches the current identity by changing information in the registry. The identity manager then notifies all applications, via their registered connection points, that a change to the registry has been made so that the applications can take appropriate action.

Abstract: Embodiments include methods, apparatuses, articles, and systems having a plurality of agents of a plurality of virtual machines of a physical device. In various embodiments, first and second agents of first and second virtual machines are adapted to cooperate to ensure that a port of the physical device is listened to by only a first application of the first virtual machine and by the second agent of the second virtual machine. Also, the first and second agents are further adapted to cooperate to facilitate the first application and a second application of the second virtual machine in communicating with each other in a network-like manner.

Abstract: Provided are a computer program, method and system providing simplified administration of groups of computer programs. Command target qualifiers are defined which enable a command to be targeted at either an individual computer program or all members of a group of computer programs. Additionally, scope parameters are defined which enable a command to be targeted at specific computer system resources managed by the computer programs within the group. The computer system resources which are to be accessible to all members of a group have an associated scope parameter defining shared or group access and are held in shared storage, whereas computer system resources to be accessed by only one computer program in the group have a corresponding scope parameter and are held in the local storage of the individual computer program.

Abstract: Provided is a method, system, and program for allowing communication among nodes in a system. A request is received in a source node from a source object executing in the source node to send a message to a destination object executing in a destination node. Each node includes a processor capable of multitasking multiple program objects and a communication interface to transmit and receive data with the other nodes. A determination is made in the source node as to whether the destination node and source node are a same node. The message is sent in the source node to the destination object within the source node if the destination node is the source node. If the destination node is not the source node, then the source node transmits the message to the destination node through the communication interface. The destination node sends the message to the destination object within the destination node.

Abstract: Hot deployable video management modules maintain a video device management platform by integrating independently developed support for new or updated video devices at runtime. A video device module loader builds a management interface for the new or updated video device associated with the management module based on attributes and operations of the video device defined by an XML descriptor and based on access instructions. The management interface is used to create a video device instance in the management platform for each video device under management. The management platform manages a variety of different types of video devices with a video device management module added as a given video device is added to the management platform or an already managed video device is updated.

Abstract: A support member is designed to move in the longitudinal direction in a rack mount type disk array apparatus. A frame member is attached to the support member for relative rotation around the rotation axis located between the front and rear ends of the frame member in the longitudinal direction. Recording disk drives are held within the frame member in an upright attitude. The recording disk drives can be removed from and inserted into the frame member in a facilitated manner. This leads to a facilitated replacement of the recording disk drives. Moreover, the upper face of the frame member is allowed to face forward through the rotation around the rotation axis. Even if the disk array apparatus is placed at a higher level, the operator easily accesses the recording disk drives in the frame member.

Abstract: An air flow generated during disk rotation is rectified to suppress disk vibrations and prevent the qualities of recorded and reproduced signals from being degraded. Notches 24 and 26 are formed on top edges of right and left side walls 22 and 22 of a frame 10. Opposite ends of a clamp holder 28 along its long side direction are fixedly mounted on the notches 24 and 26. Rectifiers of repetitive structures 32 and 34 having a wave shape as viewed in plan are formed on the clamper holder 28 on the plate portions 28a and 28b on both sides of a clamper 30 and at edges on the output side of an air flow generated during disk rotation.

Abstract: Various embodiments of the present invention are directed to a compact, portable, external optical disc drives. In one embodiment of the present invention, an optical disc drive is comprised of one or more substrates having a width smaller than the diameter of an optical disc and that covers and protects one or more data recording surfaces of the optical disc. The optical disc drive may also include an external connector that is capable of plugging into an outlet of an electrical device so that the optical disc drive extends beyond an external sidewall of the electrical device and is electronically interconnected to the electrical device.

Abstract: A disk cartridge, which is easy to handle, is provided. The disk cartridge includes a cartridge main body having: an opening facing a disk; and a shutter for opening and closing the opening. A part of the cartridge main body is formed in an approximately semicircular shape. Such a shape allows a user to easily know an insertion direction. Moreover, since the cartridge main body does not have any corners, the insertion into a drive device is simplified. The shutter is provided pivotably for the cartridge main body. Any one of a plurality of types of medium can be provided in the disk cartridge. When the disk cartridge is inserted into an external device such as the drive device, the device receives a signal indicating the type of medium, which is transmitted through an electric terminal, so as to perform a process in accordance with the type of medium.

Abstract: A set top box (STB) includes a trusted transactional cache and associated transactional protocol and enables e-commerce transactions to be securely committed to a remote server extremely quickly and with little network overhead. The invention does away with the user concern of whether the transaction was successful. The STB operates equally well on robust private networks as on unpredictable Internet or wireless networks, and avoids upsetting users who would otherwise have to wait in front of a display screen for confirmation of completion of the transaction after a temporary communication failure with the central site. The method may advantageously be used to provide cost-effective micro-payments solutions. The STB may include a dual headed display capability in which data and video maybe be directed to separate displays. The STB may feature an embedded ticket printer, as well as an embedded barcode scanner.

Abstract: A plurality of intelligent device systems for use with a wideband signal distribution network, and methods for transmitting digital information and receiving digital and non-digital information onto and off of an RF carrier through a wideband signal distribution network, are disclosed. The intelligent device systems provide networks of intelligent devices that modulate and demodulate digital video, IP video/data/voice and digital wireless onto, and off of, a wideband signal distribution system, such as an analog carrier system, using existing EIA/TIA 568 standard wiring infrastructure. The methods modulate and demodulate digital video, IP video/data/voice and digital wireless onto, and off of, a wideband distribution system, such as an analog carrier system, and separate IP portions from non-IP portions.

Abstract: In a messaging system adapted to operate in a television environment, the invention teaches a method and apparatus for allowing a user to enter textual outgoing message, which is translated to speech by text to speech module. The speech is than delivered to a target server such as a voice mail or e-mail server, for listening by the message recipient.

Abstract: A method for providing enhanced content for play across multiple play platforms employs steps of delivering media content to a client device; delivering HTML content to a client device, the HTML content being accessible and usable by a plurality of client device platforms; activating a browser to access the HTML content, the browser being located on and compatible for use with the client device; activating firmware on the client device to access the media content; and incorporating the accessed HTML content with the accessed media content.

Abstract: A set of pluggable rules are used to define low-level security rules in terms of high-level security concepts. The rules are part of a pluggable module that can interact with a business logic to provide different granularities of control.

Abstract: A proactive network security system to protect against hackers for the proactive automated defense against hackers by automatically finding, reporting, communicating with countermeasures about and removing the common vulnerabilities and exposures (CVEs) that they exploit.

Abstract: Techniques are disclosed for federating identity management within a distributed portal server, leveraging Web services techniques and a number of industry standards. Identities are managed across autonomous security domains which may be comprised of independent trust models, authentication services, and user enrollment services. The disclosed techniques enable integrating third-party Web services-based portlets, which rely on various potentially-different security mechanisms, within a common portal page.

Abstract: In order to remove security vulnerability in an IP-SAN and eliminate unauthorized access by spoofing, firewalls are installed in valid user servers and storage devices, and a distributed firewall manager for managing the firewalls integrally is provided in the IP-SAN. The distributed firewall manager obtains discovery domain information from an iSNS server, determines nodes registered in the iSNS server as the nodes of valid users, and autocreates a security policy according to sets consisting of an iSCSI name and portal information. This security policy is distributed to all of the firewalls as a common policy, whereupon access control is executed to deny TCP connection requests from unauthorized access sources.

Abstract: A data-sharing scheme between entities disposed behind respective firewalls. A sharer of the data subscribes to a public service that enables a secure connection (similar to a peer-to-peer network) between at least one requestor and the data sharer. By subscribing, the sharer provides information to the service that enables the service to generate a private key. When the request is received from the requestor, the service retrieves the corresponding private key, authenticates the requestor, and transmits the key to the requestor thereby facilitating a secure tunnel for communicating the shared data. The requestor can then access the data directly from the sharer without the need for copying or moving the shared data to a server outside the firewall or for emailing.

Abstract: Messages are sent over secure communication links in networks with a mobile terminal and another terminal. A secure communication link is established between an initial network address of the mobile terminal and the address of the other terminal. When the mobile terminal moves from the initial network address to a new network address, a request message is sent from the mobile terminal to the other terminal to change the secure connection to be used between the new address and the other terminal. The other terminal responds with a reply message with a description about the overcoming methods supported by the other terminal.

Abstract: The disclosed embodiments relate to a system and method for storing and accessing secure data where non-secure data needs to be exchanged between entities without exposing underlying or related secure data which is already known to those entities and which must also be communicated to identify or otherwise contextualize the non-secure data. A Hashing Facility is provided that uses a Hash Function to create a unique Hash Value from a secure data value. The Hash Value may then be communicated along with the related non-secure data.

Abstract: The invention provides a method and system for scanning specialized computing devices for viruses. In a preferred embodiment, a filer is connected to one or more supplementary computing devices that scan requested files to ensure they are virus free prior to delivery to end users. When an end user requests a file the following steps occur: First, the filer determines whether the file requested must be scanned before delivery to the end user. Second, the filer opens a channel to one of the external computing devices and sends the filename. Third, the external computing device opens the file and scans it. Fourth, the external computing device notifies the filer the results of the file scan operation. Fifth, the filer sends the file to the end user provided the status indicates it may do so.

Abstract: In an apparatus for auditing security of a computer system, at least one secure application server is in communication with a global computer network. The secure application server is programmed to receive selectively security audit instruction data from a remote computer system via the global computer network. A plurality of scanning machines each are in communication with the global computer network and are programmed to execute selectively a security audit scan of the remote computer system via the global computer network. A central computer, having a memory, is configured as a database server and as a scheduler. The central computer is in communication with the secure application server and the scanning machine.

Abstract: The present disclosure is a method for bridging requests for access to resources between requesters in a distributed network and an authenticator servicing the distributed network. The bridging mechanism has security features including a naming service for machine authentication and machine process rules to authorize what process machines can perform. The security proxy bridge intercepts an access request, and checks the IP address for machine authentication as well as the machine process rules and if both verifications are successful, the bridge then forwards the request for access to the authenticator. The security proxy framework utilizes a data structure that provides a method for storing selected security information stored as data records supporting an authentication and authorization system for users to access resources on multiple components of a distributed network supporting multiple business units of an enterprise.

Abstract: A method for transferring at least one data record from an external data source into a processor unit, e.g., and a suitably designed processor unit are described. In such a method for transcribing at least one data record from the external data source to a processor unit, the at least one data record is transmitted from the external data source together with additional information to a buffer memory of the process unit. A check of the admissibility of using the at least one data record is performed on the basis of the additional information. A blocking signal is generated when the check reveals that use of the at least one data record is not allowed. The at least one data record is then deleted from the buffer memory. An enable signal is generated when the use of the at least one data record is allowed. The additional information includes an identifier assigned individually to the processor unit, with the validity check being performed in the processor unit.

Abstract: A navigation apparatus having a hard disk (called HD below) recording and reproduction unit and comprising: a password memory unit that stores a unique first password for each individual navigation apparatus, and that is used when recording data on or reproducing data from a first HD; the HD recording and reproduction unit that performs recording or reproduction by the first password; and a system control unit, which determines whether or not it is possible to use a second password for recording data on or reproducing data from a second HD that is used for updating the data on the first HD, and when it determines that it is possible to do, it updates the data on the first HD with one on the second HD, then it changes the second password to the first password.

Abstract: A device in one example comprises a standalone universal serial bus keyboard emulator and an ultrasonic sensor component. The standalone universal serial bus keyboard emulator is coupled with a computer through a universal serial bus port. The ultrasonic sensor component is coupled with the standalone universal serial bus keyboard emulator. The ultrasonic sensor component communicates one or more signals to the standalone universal serial bus keyboard emulator that serve to allow the standalone universal serial bus keyboard emulator to make a determination of entry to or exit from a predetermined proximity of the computer by a user. The determination of entry to or exit from the predetermined proximity of the computer by the user causes the standalone universal serial bus keyboard emulator to send a corresponding entrance or exit user configurable keystroke sequence to the computer through the universal serial bus port.