Abstract: Methods and apparatus to manage virtual machines are described. An example method includes presenting a list of available basic blueprints, storing a multi-machine blueprint referencing a first basic blueprint for a first virtual machine from the list and a second basic blueprint for a second virtual machine from the list, and in response to a request to provision the multi-machine blueprint, the request including an identification of a first number of instances to be provisioned for the first virtual machine and a second number of instances to be provisioned for the second virtual machine, provisioning the first number of instances of the first virtual machine and the second number of instances of the second virtual machine.

Abstract: User sessions are authenticated based on locations associated with a user account used for sending a request for creating a session. Examples of locations of a source of a request include a geographical location, a network address, or a machine cookie associated with a device sending the request. Locations of the request are compared with stored safe locations associated with the user account and a suspiciousness index is determined for the session. The level of authentication required for the session is determined based on the suspiciousness index. Locations are associated with a reputation based on past history of sessions originating from the locations. A location associated with a history of creating suspicious session is considered an unsafe location. Reputation of the location originating the session is used to determine the level of authentication required for the session.

Abstract: A method, in a user equipment device, for managing use of applications installed on the user equipment device is disclosed. The method comprises receiving a request from a user to launch an application, checking whether the user equipment device is roaming, and, if the user equipment device is roaming, consulting a user roaming profile and preventing launch of the application if the user roaming profile indicates that launch of the application is not permitted while roaming. Also disclosed are a computer program product for carrying out the above method and a user equipment device configured to carry out the above method.

Abstract: An image forming apparatus which is capable of preventing firmware from being updated to firmware with wrong specifications regardless of specifications of the firmware. The image forming apparatus is able to communicate with a server apparatus and has plural pieces of firmware for performing at least one function. The plural pieces of firmware are updated to update firmware corresponding thereto. Version information and characteristic information on the plural pieces of firmware, and version information and characteristic information on the update firmware are obtained from a server apparatus. The update firmware having a difference from the plural pieces of firmware in terms of the version information is identified and obtained from the server apparatus. When the identified update firmware has the characteristic information, a display screen indicates that the characteristic information will not be maintained and prompts a user to choose whether or not to perform an update.

Abstract: A method of customization of software configuration includes generating and saving user information relating software features, when the software features are requested by a user for the first time. The computer system executes instructions to allow the user to input and adjust the user information. The user information is reviewed and adjustments to configurations of the software features based on the saved user information. Then, the computer system executes the software features requested by the user, according to the implemented adjustments to the configurations of the software features.

Abstract: Methods and systems for a networked storage environment are provided. For example, a method includes interfacing by a management device with a plurality of management layers that communicate with a plurality of application plugins executed by a plurality of computing devices, where each application plugin is associated with an application for providing storage services for stored objects managed by a storage system for the plurality of applications; for managing the plurality of computing devices, presenting selectable options for adding an application plugin for a computing device, configuring the application plugin, migrating the application plugin from one location to another and placing the computing device in a maintenance mode; and providing a summary for a plurality of storage service operations and a data protection summary.

Abstract: A cloud computing environment consists of a cloud deployment platform with an application management server executing thereon, and a cloud management server configured to manage a plurality of virtual machines deployed in a cloud infrastructure. When a cloud-based application is deployed to the cloud infrastructure, a deployment plan for the cloud-based application is read, where the deployment plan comprises a first plurality of tasks to be executed in the cloud infrastructure. A determination is made that one or more custom tasks are required to be executed in the cloud infrastructure. After the determination, the one or more custom tasks are inserted into the first plurality of tasks to generate a second plurality of tasks. The second plurality of tasks is then transmitted to the cloud management server for execution in the cloud infrastructure.

Abstract: An application executing in a virtual environment, such as a web browser, may be serviced by an application host, such as a webserver that maintains application resources or provides runtime services to the application. However, it may be difficult to configure the application to operate suitably when the application host is unavailable. Techniques for facilitating such operation include the storing of application resources in a computing environment (such as the local file system or a deployable mesh or cloud environment) while also initiating the application within the virtual environment in the context of the application host, which may reduce difficulties with isolation policies imposed by the virtual environment (e.g., cross-domain restrictions imposed by the web browser.) This configuration may promote the servicing of the application alongside other applications and data objects, e.g.

Abstract: The current document is directed to methods and systems for efficiently executing OSL-virtualization containers within the execution environments provided by virtual machines that execute above traditional virtualization layers within large, virtualized, distributed computing systems. The currently disclosed methods and systems anticipate the need for additional virtual machines in order to meet anticipated demands for one or more computational resources by the containers. In addition, the methods and systems provision and launch virtual machines with computational-resource allocations that minimize overhead and computational-resource wastage. In one implementation, computational-resource utilization of ATMs and containers within the virtualized, distributed computer system are periodically monitored in order to estimate future demand for the computational resource and, when necessary, to launch additional virtual machines to meet the estimated future demand for the computational resource.

Abstract: An application term of a declarative programming language is provided for creating an application to be executed on a node in a cloud network. The application term is independent of an application configuration for the application prior to compilation of the application term and the application configuration is associated with the application at execution time. A resource term for preparing a resource for the application is provided independent of the application configuration prior to compilation and the application configuration prepares the resource of a selected node for the application at execution time. An action term for performing an action and a task term for performing a task of the action are provided independent of the application configuration prior to compilation. The terms are compiled and executed to build the application in the cloud network.

Abstract: A method and apparatus for remote purchase, installation, and licensing of software is disclosed. The method comprising receiving, from a mobile device, a request for a software application; determining compatibility between at least one registered device and the software application; providing, to the mobile device, a list comprising compatible registered devices; placing the software application on an installation queue for the selected registered device in response to an input; and downloading the queued software application to the registered device.

Abstract: A method, system, and computer program product for identity-aware load balancing are provided in the illustrative embodiments. A sender of a packet is identified using an attribute communicated with the packet. The attribute is sufficient to identify a sender of the packet. The packet is directed to a set of resources managed by a load balancing application. A rule corresponding to the sender is selected. The rule is executed to identify a characteristic of an algorithm usable in a load balancing operation of the load balancing application. The packet and the identified characteristic of the algorithm are communicated to the load balancer. The communicating causes the load balancer to select an algorithm for a load balancing operation with the packet such that the selected algorithm includes the identified characteristic of the algorithm.

Abstract: A method for providing a space market widget by a market server is disclosed. The method includes: generating the space market widget; forming applications related to the space market widget as objects arranged in the space market widget; transmitting the objects to a user device in which the space market widget is installed; requesting installation of objects moved to an arrangement space from a market space of the space market widget; and transmitting the applications corresponding to the moved objects to the user device so as to be installed in the user device, wherein the space market widget includes a market space displaying the objects that are not yet installed in the user device and an arrangement space arranging and displaying the objects installed in the user device.

Abstract: A data structure including simple and complex objects. Each simple object includes a content type indicator, a size indicator, and one or more simple data types. Each complex object includes a content type indicator, a size indicator, and one or more child objects. The complex objects include a layer object having first and second child objects. The first child object is a collection of complex objects storing information for configuring a virtual filesystem of a virtual application at application startup. The second child object is a collection of complex objects storing information for configuring a virtual registry of the virtual application at application startup. Reading of selected simple and complex objects may be deferred at startup based on the content type indicator. Deferred objects may be read after startup when access to information stored by the deferred object is request by the virtual application.

Abstract: The present invention provides a common framework to determine if machines are patched and automatically applies patches as required. It provides an automated tool to assess patch levels and apply patches on several different UNIX machine types. Further, it provides a centralized, consistent method of providing patches to multiple roles within an organization while automatically managing large quantities of machines. It can manage multiple security standards, machine classifications, and patch security levels and be customized to interface with existing asset management tools. It evaluates the most suitable patch to satisfy the minimal patch requirements and is an early warning system that will tell a user when the user's machine will go out of compliance. The tool is composed of two parts: a server component and client component.

Abstract: Methods of determining status of advertised system management server (SMS) packages at a client device include receiving a request for a determination of the status from a user at the client device. Responsive to the received request and without further input from the user a plurality of SMS packages that have been advertised to the client device may be identified, an installation status of the identified plurality of SMS packages may be determined and a graphical user interface (GUI) may be generated. The GUI lists the identified plurality of SMS packages and provides a visual indication of the determined installation status of the listed plurality of SMS packages. The generated GUI may be displayed to the user on a display of the client device.

Abstract: A system for validating a correction to map data for a geographic location, the system comprising: a processing resource; and a navigation device; wherein the processing resource comprises: a user request generator that is configured to generate a user request for transmission to the navigation device; a transmitter for transmitting the generated user request to the navigation device; and a receiver for receiving a user response from said navigation device; and the navigation device comprises: a receiver for receiving the user request transmitted from the processing resource; a user request module configured to present said received user request to a user of the navigation device; a user response module for capturing a user response to said presented user request, and a transmitter for transmitting said captured user response to said processing resource.

Abstract: A portal is established between a software installer and a client to allow on-line management of a software implementation project. The installer of customizable software and the client may communicate through the portal to establish specifications for the software product. The software may be implemented by incorporating preconfigured software components into the software product. A portion of the preconfigured components may be modified based on the specifications of the client. The specifications may be identified by providing the client with a set-up wizard through the portal. The set-up wizard prompts the client for information and the software system may be configured based on logic generated in response to client input.

Abstract: A device, of a cloud computing environment, receives an instruction to create a virtual packet analyzer from a user device associated with a user. The device creates the virtual packet analyzer in the device based on the instruction, and receives a packet provided in a portion of the cloud computing environment associated with the user. The virtual packet analyzer determines information associated with the packet, and determines whether to duplicate the packet based on the information. The virtual packet analyzer processes the packet based on whether the packet is to be duplicated. A duplicate packet of the packet is generated when it is determined that the packet is to be duplicated, and is transmitted to another device to identify or resolve a problem within the portion. The packet is transmitted to a destination of the packet when it is determined that the packet is not to be duplicated.

Abstract: An approach is provided for queuing clients when a web page is temporarily unavailable. The approach includes providing a computer infrastructure operable to: maintain a queue of clients requesting the web page; receive an indication of an availability number from a host of the web page; and release one or more of the clients from the queue equal to the availability number indicated by the host, based on the receiving the indication of the availability number.

Abstract: A computer installs an operating system. The computer receives, in a logical partition (LPAR) via a management network, a deploy program configured to download a disk image from an image repository and to write the disk image to a first direct access storage device (DASD) of the LPAR. The disk image includes an operating system, applications, and management components including an upgrade program. The computer receives, in the LPAR via a data network, the disk image, and writes, to the first DASD of the LPAR, the disk image. The computer boots the LPAR into the operating system of the disk image written to the first DASD, and determines whether the installed operating system is a deployment or an upgrade.

Abstract: In one embodiment, a method for placing virtual machines in a collection is provided. A plurality of equivalence sets of hosts is determined prior to placing virtual machines in the collection. The hosts in an equivalence set of hosts are considered similar. An equivalence set of hosts in the plurality of equivalence sets is selected to place the virtual machines in the collection. The method then places at least a portion of the virtual machines in the collection on one or more hosts in the selected equivalence set of hosts.

Abstract: The present principles are directed to utility aware uninterruptible power supplies. A method includes evaluating services, including service combinations, from among a set of services provided by a computing facility operating under an energy constraint, to select a subset of services to power down or maintain powered so as to maximize a total utility value of the computing facility while operating under the energy constraint. The method further includes powering down, or maintaining power to, the selected subset of services.

Abstract: Certain aspects direct to a system for installing an operating system to a signage device from a flash memory of the signage device. In certain embodiments, the flash memory has a non-bootable partition, which stores a plurality of operating system images and an installer program. When booting the signage device, a boot program detects that no bootable device exists, and executes the installer program. The installer program receives a user input indicating one of the operating system images as a selected operating system image. Then, the installer program creates a partition in the flash memory, installs a copy of the selected operating system image in the partition as a bootable operating system, and configures the partition as the bootable device. Thus, when the signage device reboots, the boot program may detect the partition as the bootable device, and executes the bootable operating system.

Abstract: A method and system are provided. The method includes defining an application manifest that describes a computing solution for transfer from a cloud site to an on-premises computing appliance at a given premises. The computing solution is executable for a dataset resident at the given premises. The method further includes defining a characterization of a local premises environment in which the computing solution will be executed. The method also includes modifying the application manifest using the characterization of the local premises environment by at least one of adding, removing and modifying at least one component of the application manifest to provide a modified application manifest. The method additionally includes installing the computing solution in a computing appliance at the local premises environment according to the modified application manifest. The computing appliance is for executing the computing solution.

Abstract: An apparatus capable of hosting a secure module, which secure module comprises at least one secure module application. The apparatus is configured to provide connectivity to the secure module. A processing module is configured to obtain from the secure module information concerning the at least one secure module application. The processing module is, based on the obtained information, configured to check whether a compatible counterpart application is present in the apparatus. A communication module is configured to obtain the compatible counterpart application from an outside source in case no compatible counterpart application is present in the apparatus.

Abstract: A rights management system monitors and controls use of a computer program to prevent use that is not in compliance with acceptable terms. The system monitors usage of the computer program for usage and activities that are not in compliance with the license or other use terms. Upon detection of a violation of these terms, state information pertaining to the computer program is saved and operation of the computer program and/or a portion of the computer system is suspended. The system maintains the suspension for as long as the violation exists. Once compliance has been reestablished, the suspension is terminated.

Abstract: A method and an electronic device for protecting data for a first electronic device with a data transmission interface are provided. A basic I/O system of the first electronic device is provided with a verification program for verifying a second electronic device. The method includes: loading the verification program into a memory of the first electronic device; verifying the second electronic device to acquire a verification result by the memory running the verification program via the memory; disabling the data transmission interface to cause the second electronic device to be unable to perform data transmission with the first electronic device by the data transmission interface in a case that the verification result indicates that the second electronic device is not a valid device.

Abstract: This invention provides a system or method to provide dynamically packaged Cloud services to customers via a Cloud services registry. The Cloud services registry is dynamic and operates by polling different Cloud service providers and Cloud service databases to ensure that the Cloud services registry is up to date with the latest available Cloud services. The Cloud services registry is available for queries from Cloud customers and abstracts multiple Cloud service providers. By abstracting the Cloud services, the dynamic Cloud services registry creates a modular package of different services from different Cloud service providers based on the query and requested priority for services. The dynamic Cloud registry is dynamically updated based on the level of services that the provider has available. The dynamic registry determines what service best matches the requirements from a Cloud service request (CSR) and returns a personalized set of matching services.

Abstract: An approach is provided for automatically deploying an information technology (IT) system instance having hardware and software components. Based on components consisting of system context diagrams, component models, operational models, data flow diagrams, and use cases describing functional requirements of the IT system instance, an application model of the software components is generated. Based on the application model and the use cases, an infrastructure model of infrastructure components is generated. Based on the application model and the infrastructure model, a computer file in a markup language is generated. The computer file includes a design of the IT system instance and instructions for accessing library-stored assets specifying the hardware and software components. The computer file is exported to a deployment tool for an automatic deployment of the IT system instance based on carrying out the instructions to access the assets.

Abstract: An approach for managing licenses for software installations on virtual machine (VM) instances in a networked computing environment (e.g., a cloud computing environment) is provided. Specifically, in one example, data (e.g., real-time and/or historical) pertaining to usage of a set of software installations on a set of (VM) instances in the networked computing environment is collected. When a request is received (e.g., from a requester) for a license for a particular software installation of the set of software installations, it is determined whether the license is available. If not, it is then determined whether the license is obtainable based on the collected data and a current configuration of the networked computing environment. Then, responsive to the license being obtainable, the requested license may be allocated.

Abstract: Systems and methods for managing deployment of an update to computing devices, and for diagnosing issues with such deployment, are provided. An update deployment manager determines one or more initial computing devices to receive and execute an update. The update deployment manager further monitors a set of performance metrics with respect to the initial computing devices or a collection of computing devices. If a deployment issue is detected based on the monitored metrics, the update deployment manager may attempt to diagnosis the deployment issue. For example, the update deployment manager may determine that a specific characteristic of computing devices is associated with the deployment issue. Thereafter, the update deployment manager may modify future deployment based on the diagnosis (e.g., to exclude computing devices likely to experience the deployment issue).

Abstract: A method, system, and computer program product for improving software component placement on software execution platforms are provided in the illustrative embodiments. A computer determines whether a code corresponding to the software component includes business process logic. The computer determines a granularity level of the code. The granularity level of the code is a categorization of the code according to whether a number of external references in the code exceed a threshold value. The computer, responsive to determining the granularity level of the code, recommends placement of a first portion of the code on a first platform in the set of software execution platforms.

Abstract: A token-based billing model for delivering server-side rendered applications to remote users. A token represents a right to access a server-side rendered application. Each remote user is associated with one or more tokens. When a given token expires, the set of tokens associated with a user is decremented. The rate at which tokens expire are modulated based on aggregate load across the resources of the server-side rendered application provider, as well as the individual loads attributable to each of the users.

Abstract: Techniques are described for facilitating file access control of a storage service. In response to a third-party application requesting access to a user's file, the service extracts an application-specific ID from a file type associated with the retrieved file; and grants access to the requested file in response to a determination that an application-specific ID for the third-party application matches an application-specific ID extracted from the file. This Abstract is submitted with the understanding that it will not be used to interpret or limit the scope or meaning of the claims.

Abstract: In accordance with embodiments, there are provided mechanisms and methods for validating a developed application. These mechanisms and methods for providing such validation can enable embodiments to ensure that new versions of developed applications will operate in the same application environment of a previous version. The ability of embodiments to provide such validation may lead to an improved application migration development/runtime framework, etc.

Abstract: Systems, methods, and other embodiments associated with automated upgrade of an operating system are described. In one embodiment, a method includes receiving a request for an upgrade package in a gateway server from a remote device and determining a source location for the upgrade package. The example method may also include sending the request to the source location to cause the source location to provide the upgrade package to the remote device.

Abstract: Systems, methods, and software are described herein for operating a data management system, including executing an attached application and application data on a first virtual machine running a first operating system, separating the attached application and application data from the first virtual machine, and dynamically attaching the application and application data to a second virtual machine running an updated version of the first operating system.

Abstract: A method for generating a secure application is described herein. The method can include the steps of obtaining a target application and decomposing the target application into original files that contain predictable instructions. One or more predictable instructions in the original files may be identified. In addition, the target application may be modified to create the secure application by binding one or more intercepts to the target application. These intercepts can enable the modification of the predictable instructions in accordance with one or more policies such that the behavior of the secure application is different from the original behavior of the target application. Modification of the target application may be conducted without access to the source code of the target application.

Abstract: Aspects of the subject matter described herein relate to generating and caching software code. In aspects, a target device may receive software to install. The software may include source code that has not been compiled. The target device may install the software and indicate the source code of the package is to be compiled into intermediate or executable code that is persistently stored. If the target device receives a request to execute the software prior to it being compiled, the target device may compile and execute the software without delay. If the target device receives a request to execute the software after it is compiled, the target device may obtain and execute the compiled code. The behavior above may also be applied to scripting code obtained from a server remote to the target device.

Abstract: Various example embodiments are methods and devices for providing an application from at least one remote machine to at least one local machine. The local machine may execute a local executable that has access to local resources of the computer device. The local machine may also execute a browser configured to communicate with the at least one remote machine through a firewall. A connection may be generated between the browser and the local executable. The local machine may download code for implementing a portion of the application from the at least one remote machine through the firewall. The code may be executed in the browser. The browser may generate an instruction directing the local executable to act on the local resources of the computer device. The instruction may be communicated to the local executable via the connection. The local executable may act on the local resources of the computer device in response to the instruction and return to the browser results of the action on the local resources.

Abstract: An improved system and method for submitting, distributing and/or managing digital products with respect to a product distribution site are disclosed. The submission of digital products to the product distribution site is able to be performed by numerous submitters in a uniform and computer-assisted manner. The submitted digital products can then be managed in a largely automated manner and made available for online purchase and distribution at the product distribution site. Once a digital product is submitted, the user can access the status of the digital product submission to obtain information of whether the digital product has been approved or rejected. In one embodiment, the digital products are computer program products (e.g., computer software programs).

Abstract: A management apparatus obtains setting information from a replacement target device. Thereafter, it designates a distribution mode for distributing the setting information to a new device. If a replace mode is designated as the distribution mode, the management apparatus distributes the setting information to the new device and issues a power-off request to the replacement target device. The replacement target device that received the power-off request turns off its own power. The new device that received the setting information reflects the setting information in the new device in accordance with the designated distribution mode.

Abstract: A system for blueprint-driven environment template creation in a virtual infrastructure comprises a processor and a memory. The processor is configured to receive a blueprint, receive an environment template configuration, and build an environment template using the blueprint and the environment template configuration. The environment template is for provisioning an environment. The environment is for deploying an application. The memory is coupled to the processor and is configured to provide the processor with instructions.

Abstract: A system engram encoding an existing configuration of a target system is received. The existing configuration includes one or more of hardware and software of the target system. The system engram is originally acquired by a first processing device and is received by a second processing device. The second processing device compares the system engram with a product engram encoding a required configuration of the target system for a product to be compatibly installed in relation to the target system. The required configuration includes one or more of required hardware and required software within the target system for the product to be compatibly installed in relation to the target system. The second processing device can output, as compatibility information of the product with the target system, results of comparison of the system engram with the product engram.

Abstract: A system (and method) discloses migrating data of a first client device to a second client device. A second client device transmits configuration information of the second client device to a remote server. The remote server compares this data to data from the first client device that was previously sent to the remote server from the first client device. The remote server prepares data that is in a format that is compatible with hardware or software configuration of the second client device and that corresponds to the data from the first client device. Thereafter, the remote server transmits this data to the second client device, which uses it to initialize (e.g., restore or reinitialize) the second client device.

Abstract: Technology disclosed herein includes a method for loading a network specific operating system (OS) onto a computing device depending on a specific network the computing device is connected to. The computing device can connect to multiple networks, e.g., different networks at different times or multiple networks simultaneously. When the computing device switches from a first network to a second network, an OS specific to the second network is automatically installed on the computing device. When the computing device connects to more than one network simultaneously policies may be defined to determine which specific OS distribution is to be installed on the computing device.

Abstract: Methods, computer program products, and systems for installing an application at a runtime instance. A method includes receiving a request to install an application and accessing data defining shared resources required by the application. Data that defines shared resources already installed at existing runtime instances is accessed. An existing runtime instance with the greatest number of installed shared resources common to the shared resources required by the application is selected. The application is installed at the selected runtime instance.

Abstract: The present invention relates to a system and method for managing an application wherein a function of a controlled device can be dynamically extended by continually updating the application for use in the controlled device. According to the present invention, a framework capable of providing integrated support to a variety of home network middleware is loaded on an application server corresponding to a control device, and Internet access services and middleware services for accessing various kinds of devices are bundled into the framework. Thus, application installation and management can be performed within a home network environment regardless of the hardware, network protocol and operating system used.

Abstract: One or more bookkeeping nodes may receive a request to deploy update information from a requesting node. The bookkeeping node(s) may determine whether to authorize the requesting node to deploy the update information based at least in part on one or more deployment parameters. If authorized, the requesting node may download the update information from one or more download nodes.