International Business Machines Corporation

Ronald W Lynn

Michael J Dockter

Randal James Richardt

Roland Seiffert

Jochen F Doerre

Joseph A Munoz

Joel Frank Farber

Stephan Grell

Timothy A Best

A technique for executing applets is provided. Initially, a webtop applet is loaded into, for example, a browser window. The webtop applet displays the list of applets available to a user. The user selects one or more applets from the list received by the webtop applet. The webtop applet generates a separate JInternal frame for each selected applet, and each JInternal frame executes its associated applet within a separate window. The windows assume different configurations such as being resized, repositioned, cascaded, tiled, windowed, minimized, maximized, or overlapped with one or more other windows within a fixed-size view space of the browser window. Each window is manipulated by the user separately from the other windows which are contained within the fixed sized view space.

Webtop: multiple applet delivery within a fixed-sized viewing space

A method and system for improving text searching is disclosed. The method and system provides a network of document relationship and utilizes the network of document relationships to identify the region of documents that can be used to satisfy a user's request. In a preferred embodiment, the text searching method in accordance with the present invention augments a conventional text search by using information on document relationships and metadata. The text searching method and system improves upon conventional text search techniques by incorporating relationship metadata to define regions to search within. In the present invention the definition of a region is not limited to just categories as it includes neighborhoods around individual documents and sets which have been user defined.

Method and system for improving a text search

A system and method for storing and managing sets of objects is disclosed. The method and system comprises providing a plurality of set nodes based upon a defined set of data objects; and associating a plurality of constraint nodes with the plurality of set nodes. The method and system includes providing a plurality of object nodes based upon the objects; and obtaining object metadata from the plurality of object nodes. The method and system further includes associating at least one of the plurality of object nodes with at least one of the plurality of set nodes based upon a criteria and detecting that at least one of the plurality of set nodes has been modified and delivering a notification to at least one constraint node of a plurality of constraint nodes. Each of the plurality of constraint nodes provides constraints on at least one set node. Accordingly, a method and system in accordance with the present invention unifies the storing and managing of sets in order to simplify overall system behavior. The system and method uses an attributed, directed graph model to store object metadata, object-within-set metadata, and set constraints. By using this model, no special cases exist when an object belongs to just one set or hundreds of sets. The operations required to maintain the graph model are the same in every case. The operations required to maintain the metadata and constraints are also the same in every case. The entire model is therefore a unified and simplified system.

Method and system for storing and managing sets of objects

The security evaluation method of the invention utilizes multiple levels of security evaluation before certain user's can gain access to system resources. Upon receiving a user access request, the method acquires qualification data regarding the access request and determines a security level that is applicable to a selected system resource which is indicated by the user access request. Thereafter, the method performs at least one of a plurality of security tests to determine if the qualification data matches the security level applicable to the selected system resource. At least some of the plurality of security tests are arranged to be performed in an order of speed of execution, with a fastest executable security evaluation test being performed first and a slowest executable security test being performed last. A more slowly executable security test is performed with respect to the user access request only if all faster executable security tests return &ldquo;don't know&rdquo;, or equivalent, responses. The method enables the speed of execution ordering to be overridden if a further system constraint will enable another ordering to maximize system performance.

Method and apparatus for multi-level security evaluation

The invention controls access to data resources by performing the steps of: providing (i) a first directory which relates data objects to object groups, each object group including all data objects having a common assigned security attribute; (ii) a second directory which relates functions to function groups, each function group including functions having a common execution attribute; (iii) a third directory which relates users to user groups, each user group including users having a common user attribute; and a permission directory which lists allowed combinations of (user group, function group, object group). In response to a request from a user to perform a function with respect to an object, the permission directory is examined to determine if the access request is to be allowed or not allowed.

Growing community of inventors

Gilroy, CA, United States of America

Ronald W Lynn