International Business Machines Corporation

David Medina

Mark Alan Peloquin

Allen Chester Wynn

James Franklin Macon, Jr

Stefan Nusser

Gareth Christopher Matthews

James Christopher Mahlbacher

William Henry Hartner

Charles Rudolph Schmitt

Luca Contessa

Eckhart Koeppen

Jonathan Paul Munson

Giovanni Pacifici

Jurij R Paraszczak

Marco M Hurtado

Michael G Lisanke

Glenn E Brew

David Andrews Kerr

Raymond J Venditti

Teresa Ann Bradford

Paul Ronald Friedberg

Alaa S You{grave Over (s)}sef

Lawrence Warner Gosselin

Lisa Brucoli Leahy

Frederik Soendergaard-Jensen

A system and method of providing a way of providing operating information about software which is operating within a protected processing or operating environment. The present invention includes an encrypted trace log which may be of substantially constant size and which is encrypted as it is created. In the event of an error, the trace log may be selectively engaged in response to a signal (e.g., in the event of an error or other anomaly or an operator command) and then removed from the protected processing environment and provided in its encrypted form to a central processing location which possesses the decrypting key. Once the trace log is decrypted, the events may be analyzed to determine if an error has occurred and how to correct it.

Method and system for diagnosing operation of tamper-resistant software

A rights management module controls access to a data set by processing requests for flexibly defined types of access to the data set and determines if the requested access may be granted. The requester's right for the requested type of access is verified by a verification module that may be part of the rights management core or verified through expansion rights verification modules. Extension verification modules may be contained within the data set itself or obtained from a separate store. Extension verification modules are authenticated by the rights management core.

System and method for dynamically extending a DRM system using authenticated external DPR modules

A system for providing persistent access control of protected content is disclosed. The method on a client system includes sending a first request for authentication of the client to a server system. Subsequently, the client is authenticated by the server. Next, a user on the client attempts to access a file comprising a trailer and content encrypted with an encrypting key. Then, a second request for access to the content is sent to the server by the client, wherein an identifier from the trailer is included in the second request. The identifier identifies the content or an access control policy of the content. The server determines that the second request is in accordance with an access control policy associated with the content, and grants access to the content. Lastly, the client accesses the content in accordance with the access control policy.

Persistent access control of protected content

A method, system and computer-usable medium are presented for coordinating an enterprise's resources needed for regulation/standards compliance. The method includes the establishment of a common data framework that includes multiple data structures for multiple applications, selection of a regulation to be complied with by an enterprise, determination of which data is needed by the enterprise to be in compliance with the regulation, and extraction of needed data for compliance from the common data structure

Risk and compliance framework

An improved system, method, and computer program product is provided to manage userid/password combinations by utilizing a universally accessible Internet location. This site stores and manages an encrypted database containing the customers multiple userid and password combinations, and also acts as the repository and distribution center for the software used to access and manage the database by the customer. In one embodiment, these applications are designed to work seamlessly with the Internet connection-software (e.g. a set of buttons on a browsers tool bar). Encryption is used on both the client and/or server side to ensure security and integrity.

Universal userid and password management for internet connected devices

A method in a data processing system for managing memory within the data processing system. A discardable page that is to be removed from the memory is identified. A determination is made as to whether performance will increase by storing the discardable page in a paging device located within the data processing system. If it is determined that performance will increase, the discardable page is marked as a paged discardable page and stored in the paging device locally, wherein this page may be retrieved from the paging device. The paging device may take the form of a paging file, such as a swap file. If space is unavailable within the paging device, the discardable page may be discarded. These processes may be implemented in a network computer.

Data processing system having a network and method for managing memory by storing discardable pages in a local paging device

A method and apparatus for reducing time needed to initialize a data processing system and to execute applications on the data processing system. In accordance with a preferred embodiment of the present invention, pages for an application are pre-loaded onto a client from a server. The pre-loading of the application includes loading pages that will be required for execution of the application in preparation for hibernation. These pages may include other pages for executable code or data that will be used during execution of the application. Subsequently, the application is executed using the locally stored pages without having to retrieve pages from the server. In addition, an application is provided with an opportunity to prepare itself for hibernation via hibernation notification. For example, the application may read and process files from the server. This processing is done once prior to hibernation and is not required for later executions of the application.

Method and apparatus for preloading data in a distributed data processing system

A method and apparatus provides initializing a data processing system within a distributed data processing system. The data processing system receives data wherein the data is used to initialize the data processing system. The data processing system saves an image within the data processing system in a selected state after initialization of the data processing system, wherein the image is a saved image. The data processing system restores to the state using the saved image.

Method and apparatus for hibernation within a distributed data

An apparatus and method for allocating virtual memory upon demand to reduce the amount of virtual memory allocated. Privilege level transitions requested by a program of instructions invoke a fault handler routine which allocates memory for implementing the transition. Allocation of memory is thus delayed until such request for privilege level transition occurs.

Apparatus and method allocating virtual memory upon demand

A multiprocessor computing system has memory shared by all processors of the computing system and includes an symmetric multiprocessor (SMP) operating system and at least one external device controlled by a device driver. The device driver is typically written to run in a uniprocessor environment. A method for protecting the execution state of the device driver uses a pair of 'collaborative' spinlocks, an interrupt time spinlock and a task time spinlock. At task time, prior to calling the device driver, the task time spin lock is acquired by the operating system. The operating system then waits until the interrupt time spinlock is in an 'unowned' state before calling the device driver. Upon return from the device driver, the operating system releases the task time spinlock. At interrupt time, prior to calling the device driver's interrupt handler, the interrupt time spinlock is acquired by the operating system. The operating system then determines if the task time spinlock is owned. If it is owned, the operating system then issues an interprocessor interrupt (IPI) to the processor owning the task time spinlock, thus placing that processor into a predetermined 'spin' state. The receiving processor remains in the spinning state until return of the device driver execution.

Method of using collaborative spinlocks to provide exclusive access to a

A data processing system, such as a personal computer, contains a file allocation table that is stored in memory in a packed format. During initialization, file allocation tables stored on an external storage device are 'packed' and stored in a region of memory and subsequently 'unpacked' during a read operation.

Apparatus and method for storing file allocation table efficiently in

Methods and apparatus provide external interrupt serialization compatibility for a multiprocessing environment so that software written to run in a uniprocessor environment can run without degradation caused by inadequate or improper handling. When a processor receives an external interrupt, the interrupt manager will acquire an external interrupt spinlock. Once acquired, the interrupt manager will transfer control to the external interrupt service routine and upon return from that routine, the interrupt manager will release the external interrupt spinlock. Also, protection of processor execution state in a multiprocessor environment is provided using the same spinlock.

Growing community of inventors

Coral Springs, FL, United States of America

David Medina