Novell, Inc.

Grant G Echols

Carlos A Nevarez

Howard Rollin Davis

Michael Dege

John G Sumsion

Greg Neath

Jonathan Richey

B Gregory Hundley

A resource access system and method for providing interpreters with the ability to provide interpreter applications access to any desired server resource regardless of type of server and current capability of the client node to access such server resources. The invention is an application-level extension of the interpreter, enabling the interpreter to provide server resource access independently of the type of operating system implemented in the client node. In addition, the invention utilizes existing techniques to communicate with the server, such as a distributed object system or an existing client redirector, enabling the invention to provide such access with minimal modifications to the client or server nodes, accommodating the client node's current capability to access the server resources. Also, the resource access system provides access without having to use a foreign application interface.

System and method for providing interpreter applications access to server resources in a distributed network

Methods, systems, and devices are provided for delegating security rights to Java servlets and other executable tasks by using secure operating system queues. In particular embodiments, the invention allows secure loading of Java servlets on a Novell NetWare server. The invention allows users to run servlets from various locations with the same rights, namely, the user's rights. The servlet submitted by a given user runs in the context of that user's rights. A system according to the invention verifies that the user has the right to submit the task to a given task queue; the queue is managed by the system, and the user is authenticated to the system. Queue servers which receive tasks from the queue and service them by executing the tasks are likewise authenticated by the system. When a queue server attempts to service a task in a queue, the system verifies that the queue server has rights to service that queue and that job. This two way verification&mdash;that a user has rights to submit the task, and that the queue server has rights to service the task&mdash;allows the user and the queue server to establish a trusted relationship using the operating system's trusted queues. Moreover, existing user rights databases and access control systems can be used to determine and enforce rights and trust levels.

Authority delegation with secure operating system queues

A method for controlling communications between endnodes in a packet-switched computer network includes dynamic window sizing and dynamic packet metering. Dynamic window sizing regularly probes the network to determine whether higher throughput is available at an increased window size, and avoids unnecessary decreases in window size after a packet is dropped or all available data has been transmitted. Dynamic packet metering regularly adjusts the rate at which packets are transmitted in response to changes in the measured propagation rate of packets through the network. To avoid unnecessary ack packets, acks are bundled together and piggybacked on returning data packets when appropriate. The invention provides control even if the address of an endnode changes. The invention also supports multiplexing several logical connections over a single transport session and combining data from several connections in a single packet, as well as construction of packets in a network-layer-independent format.

System for placing packets on network for transmission from sending

Growing community of inventors

Payson, UT, United States of America

Grant G Echols