International Business Machines Corporation

Glenn E Brew

Steven Michael French

Chakkalamattam Jos Paul

James Christopher Mahlbacher

Stefan Nusser

Joseph C Polimeni

Jeffrey Bruce Lotspiech

Peter Hans Westerink

Jonathan Paul Munson

Giovanni Pacifici

William Russell Belknap

Marco M Hurtado

David Medina

Aidon Paul Jennery

James Richard Schoech

Khoa D Huynh

Kenneth W Christopher, Jr

Michael S Kogan

Ted C Waldron

Alaa S You{grave Over (s)}sef

Julie Hong-Van Tran

A method and computer program product to procure digital rights management (DRM) event data comprises collecting a first set of event data in one or more standardized event data formats, and communicating the first set of event data to an event data collection server for storage. A second set of event data may also be collected in one or more standardized event data formats, which is also communicated to the event data collection server for storage. The method and computer program product may also include storing the first set, and optional second set, of event data in a centralized repository, authorizing access to the event data, and responding to at least one query from an authorized audit computer to provide event data associated with at least one of the first set of event data and the second set of event data retrieved from the centralized repository.

Procurement and audit of digital rights management data

A method to procure and audit digital rights management (DRM) event data by collecting a first set of event data in a first event data format, converting the first set of event data to one or more standardized event data formats, and communicating the first set of event data to an event data collection server for storage. The method may also include collecting a second set of event data in a second event data format, converting the second set of event data to one or more standardized event data formats, and communicating the second set of event data to the event data collection server for storage. The method may also include storing the first and second sets of event data in a centralized repository, authorizing access to the event data, and performing an event data audit corresponding to the event data.

Procurement and audit of digital rights management event data

A system for providing persistent access control of protected content is disclosed. The method on a client system includes sending a first request for authentication of the client to a server system. Subsequently, the client is authenticated by the server. Next, a user on the client attempts to access a file comprising a trailer and content encrypted with an encrypting key. Then, a second request for access to the content is sent to the server by the client, wherein an identifier from the trailer is included in the second request. The identifier identifies the content or an access control policy of the content. The server determines that the second request is in accordance with an access control policy associated with the content, and grants access to the content. Lastly, the client accesses the content in accordance with the access control policy.

Persistent access control of protected content

A system, method and computer readable medium for providing secure IP-based streaming in a format independent manner is disclosed. The method on a content mastering system begins with an encoded media file consisting of content data and associated metadata. First, the metadata is read from the encoded media file. Next, the encoded media file including the content data and the associated metadata is encrypted. Then, in a streaming server system, the encoded/encrypted media file is divided into more than one data packet, streamed in accordance with one or more parameters in the metadata. Each data packet includes a portion of the encoded/encrypted media file and an offset value corresponding to a location within the encoded/encrypted media file. The data packets are then streamed to a client information processing system (i.e., the client) over a network.

Secure IP based streaming in a format independent manner

The present invention provides a system for creating server-managed configuration information for computing devices. The configuration information is composed of individual configuration components. The configuration components can be grouped for convenience into templates called machine classes, which can be used to manage a set of similar machines. Configuration components and machine classes can be stored permanently in a database. Machine classes are instantiated with machine-specific information such as network addresses and configuration information for peripherals to produce fully configured operating systems for a computing device. Software and configuration information is installed based on the machine class selected. Individual configuration components can be added or overridden when the machine instance is created. The machine instance can be customized with additional configuration information, such as its network address(es), machine name, and video resolution. The machine instance can be used either to boot a device remotely or to install the operating system locally on the computing device.

Server based configuration of network computers via machine classes

A method and apparatus for application management in a multiuser networked data processing environment are implemented. An application definition is generated for each application available to users on the network. Each application definition includes a plurality of application parameters, the values of which may be set by a system administrator. Application definitions are stored in a database on a domain controller. A subset of application parameters are user overridable. Each application definition may be associated with at least one user by a system administrator, whereby the corresponding application is made available to each such user. User overridable parameters may be assigned user specific values, which may be different for each user associated with the application definition. These are also stored in the domain controller database with the user associations. At a user logon on a client processor, the portion of the domain controller database corresponding to the user is retrieved by a desktop builder, and a local copy generated on the client processor. Using the local copy of the application definitions associated with the user, the desktop builder presents to the user a representation of each application associated with the user. The user may access each application thereby, wherein a desktop and each application are customized for the user.

Method and apparatus for application management in computer networks

A data processing system has a virtual memory manager for swapping information between primary memory (such as RAM) and secondary memory (such as a fixed disk). The virtual memory manager employs an ager to determine which information in RAM is eligible for swapping out to the fixed disk. The ager links eligible information to an idle list. The idle list has minimum and maximum sizes. The ager has execution priorities that depend on the minimum and maximum sizes of the idle list. When the idle list is at the minimum size, the ager runs at a higher priority in order to identify information that can be swapped out. When the idle list is at or near the maximum size, the ager runs at a lower priority. The size of the idle list is dynamically adjusted to account for any information that is reclaimed from the idle list and also to account for any changes in the amount of swappable information (which is in non-resident primary memory). The priorities of the ager are adjusted according to the changes in the idle list sizes.

Dynamic idle list size processing in a virtual memory management

A system and method for loading a segmented program into a memory for a multitasking data processing system utilizing paged virtual storage for processes is disclosed. A virtual address space having a plurality of pages for the segmented program is established. Segments of the segmented program suitable for packing end to end across page boundaries are identified. A virtual storage object over a contiguous portion of the virtual address space is defined and the segments identified for packing into the virtual storage object are mapped into the contiguous portion. Any segments not suitable for packing across page boundaries start on page boundaries in the virtual address space. Then segments corresponding to selected pages of the virtual address space are demand loaded into frames of the memory in the same manner in which they are addressed into the virtual address space.

Growing community of inventors

Boca Raton, FL, United States of America

Glenn E Brew