International Business Machines Corporation

Luca Ferri

Luigi Pichetti

Patrizia Manganelli

Alessandro Scotti

Marco Secchi

Rosario Gangemi

Luigi Massa

Massimiliano Celli

Marcello Velati

A method and a corresponding system for authenticating software products are proposed. A digital certificate and a corresponding private key required to sign each product are stored on a server computer. Whenever a user needs to sign a product, he/she logs on a client computer and transmits a corresponding request to the server computer. The server computer verifies whether the request has been received from an authorized subject; for example, an address of the client computer and an identifier of the user are compared with a predefined list. If the result of the verification is positive, the product is signed and returned to the client computer. For this purpose, a script called on the server computer includes either an instruction passing the access password to a signing tool as a parameter or an instruction causing the signing tool to import the access password from a registry of the server computer.

Authenticating digitally encoded products without private key sharing

A solution is proposed for facilitating accessing resources of a data processing system with distributed architecture by a data processing entity of the system (with each resource that is accessible via a corresponding address). A set of bookmarks are provided for corresponding resources. Each bookmark is associated with a stored address of the corresponding resource&#x2014;for accessing the corresponding resource in response to a selection of the bookmark. In the solution according to an embodiment of the invention, a signature identifying the corresponding resource is associated with each bookmark. Each bookmark is updated by verifying accessibility of the resource at the stored address matches the signature. The resource matching the signature is then located via a search engine in response to the non-accessibility of the resource. It is then possible to replace the stored address with a new address of the located resource.

Method, system and computer programming for maintaining bookmarks up-to date

A software distribution method () with security add-on is proposed. Particularly, any software package to be deployed to selected target endpoints is encrypted (-) with a symmetric key (generated dynamically). The symmetric key is in turn encrypted (-) with a public key of each target endpoint. A multi-segment software package (embedding the encrypted software package and the encrypted symmetric keys) is then deployed (-) to all the target endpoints. In this way, each target endpoint can decrypt (-) the encrypted symmetric key with a corresponding private key; it is then possible to decrypt (-) the encrypted software package with the symmetric key so obtained. As a result, the endpoint is able to apply () the decrypted software package. Therefore, the application of the software package can be restricted to the desired target endpoints only.

Method, system and computer program for deploying software packages with increased security

A method and a corresponding system for authenticating software products are proposed. A digital certificate () and a corresponding private key () required to sign each product are stored on a server computer. Whenever a user needs to sign a product, he/she logs on a client computer and transmits a corresponding request to the server computer. The server computer verifies whether the request has been received from an authorized subject; for example, an address of the client computer and an identifier of the user are compared with a predefined list (). If the result of the verification is positive, the product is signed and returned to the client computer. For this purpose, a script () called on the server computer includes either an instruction passing the access password to a signing tool () as a parameter or an instruction causing the signing tool () to import the access password from a registry of the server computer.

Method of authenticating digitally encoded products without private key sharing

A software distribution application supporting the installation of operating systems on pristine computers is proposed. A new configuration element is added for virtually defining an operating system; the configuration element points to a corresponding image of the operating system on different pristine servers. Moreover, the pristine computers can be defined in a target database before they actually exist; each pristine computer subscribes to a reference model specifying the installation of the operating system. A plan is then generated with actions for installing the operating system on the pristine computers. When the plan is submitted for execution, a plug-in module associates each pristine computer with the image of the operating system on the respective pristine server. In this way, as soon as a pristine computer is turned on and transmits a remote installation request to the pristine server the associated image is automatically installed.

Software distribution application supporting operating system installations

A method and system for tracing the failing or successful execution of nested functions coded with return codes in a thread during its execution. The method comprises an ENTRY and EXIT trace macro to mark the beginning and the end of execution of the function, a TRACE macro to record messages and program variable values, and a QUIT macro marking the failing execution of the corresponding function. Using a Graphical User Interface, an interactive trace analyzer reads the trace file and displays the tree structure of the nested functions and marks, by using different colors, the success or failure of each of them. The trace analyzer utilities help the user to quickly identify the error in the source code corresponding to a function with a failing execution.

Method and system for tracing and displaying execution of nested functions

A method and system for controlling a tabbed pane () in a graphical user interface of a data processing system. The tabbed pane consists of several overlying panels () resembling a stack of pieces of paper lying on top of one another, with only the topmost panel that is visible to a user; a selection tab () is attached to each panel. When the number of the tabs is high, they are organised into two or more alignments. In the tabbed pane of the invention, the alignments are arranged along different edges of the visible panel. Therefore, the tabs are distributed along the border of the visible panel, so that each time a tab is selected by the user the corresponding panel is popped up and made visible without affecting the position of the other tabs.

Growing community of inventors

Rome, Italy

Luca Ferri