A system and method for maintaining security in a distributed computing environment comprises a policy manager located on a server for managing and distributing a security policy, and an application guard located on a client for managing access to securable components as specified by the security policy. In the preferred embodiment, a global policy specifies access privileges of the user to securable components. The policy manager may then preferably distribute a local client policy based on the global policy to the client. An application guard located on the client then manages access to the securable components as specified by the local policy.

System and method for maintaining security in a distributed computer network

A system for managing edge devices, such as scanner devices, typically includes a management module having a processor. The processor is typically communicatively coupled to a user interface that includes a visual display and a plurality of edge devices. The processor may also be communicatively coupled to a plurality of intermediate devices. The management module enables a user of the user interface to manage various aspects of the system. The processor is typically configured for displaying with the visual display (i) a physical view of the connections between the management module, the intermediate devices, and the edge devices and (ii) a first user-defined view of the management module, the intermediate devices, and the scanner devices. The processor is typically also configured for managing operational information generated by connected edge devices, including for efficiently storing operational information and intelligently querying the operational information to assist the user in matching compatible plug-in applications with particular edge devices.

System, method, and computer-readable medium for managing edge devices

A sharing model enables users to easily and conveniently create and share standard and custom database objects, and applications, among users or groups of users. The sharing model includes systems and methods that allow users to conveniently create and customize tabs and tab sets that define relationships between custom objects and fields, standard objects and fields, and applications. A tab visually represents a user interface into an element of an application or into a database object. Selection of a tab provides a user access to the object or element of the application represented by the tab. A tab set is a group of related tabs that work as a unit to provide application functionality. New tabs and tab sets may be defined and tab set views may be customized so that an end user can easily and conveniently switch between the various objects and application elements represented by the displayed tabs and tab set views.

Systems and methods for implementing multi-application tabs and tab sets

A pluggable architecture allows security and business logic plugins to be inserted into a security service hosted by a server, and to control access to one or more secured resources on that server, on another server within the security domain, or between security domains. The security service may act as a focal point for security enforcement, and access rights determination, and information used or determined within one login process can flow transparently and automatically to other login processes. Entitlements denote what a particular user may or may not do with a particular resource, in a particular context. Entitlements reflect not only the technical aspects of the secure environment (the permit or deny concept), but can be used to represent the business logic or functionality required by the server provider. In this way entitlements bridge the gap between a simple security platform, and a complex business policy platform.

System and method for server security and entitlement processing

An embodiment of the invention, for controlling a context menu, used with a Web page, wherein the Web page is divided into regions, can comprise downloading additional menu items that are not part of the context menu prior to download, and monitoring for when a user calls for a context menu. Upon detecting a context menu call, it is determined what region was selected by the user, and at least one of the additional menu is made available to the user as part of the context menu interface. At least one of the additional menu items is chosen based on the region selected by the user.

Method and system of controlling a context menu

A system and method for managing a network of thin clients is disclosed. The thin clients may be organized into a hierarchy with multiple administrative servers in a hierarchy, each managing one or more thin clients. Updates to thin client configurations may be performed by propagating update information to a top-level master administrative server, which in turn conveys the update information to one or more lower-level remote administrative servers, which in turn convey the update information to their managed thin clients. To simplify network management, the thin clients may be organized into arbitrary clusters, regardless of their position within the hierarchy structure. The hierarchy may also be used to control the propagation of error messages from thin clients. The hierarchy may be implemented using a thin client management program that configures thin clients according to their position within the hierarchy.

Hierarchical system and method for centralized management of thin clients

A customizable browser framework configured to simplify the task of generating application-specific, user-specific, and location-specific browser user interfaces is disclosed. The browser may be configured for execution on a specialized browser, or on a generic personal computer. Upon power-up or user login, the browser is configured to access a configuration file. The configuration file may be locked to prevent user access, and may stored locally or on a server. The browser is configured to use the information stored in the configuration file to generate a user interface that may have one or more of the following features: customizable icons and links, plug-ins, and persistent portals. The configuration file may include position information, size information, and linking information for one or more graphics files that are usable to generate the icons and other user interface features. The configuration file may be automatically updated from a remote server based on a predetermined update schedule and based on when the appliance is in an idle state.

Persistent portal for a browser

A method and software application with a framework for customizable graphical user interfaces is disclosed. The framework is configured to simplify the task of generating application-specific, user-specific, and location-specific graphical user interfaces. The framework may be configured for execution on a specialized Internet appliance, or on a generic personal computer, or a network browser. Upon power-up or user login, the software application is configured to access a set of configuration information. The configuration information may be locked or protected to prevent user access, and may be stored locally or on a server. The application is configured to use the configuration information to generate a user interface that may have one or more of the following features: customizable icons and links, plug-ins, and persistent portals. The configuration file may include position information, size information, and linking information for one or more graphics files that are usable to generate the icons and other user interface features. The configuration file may be automatically updated from a remote server based on a predetermined update schedule and based on when the appliance is in an idle state. The updates may be generated based on historical execution data conveyed by the application to the remote server.

Framework for a customizable graphics user interface

A system and method for tracking user interactions with a graphical user interface (e.g., those used by web browser applications). User activity may be monitored in a number of ways, e.g., by using a video camera to detect user movement, or by detecting mouse or cursor movements. Information generated by monitoring user activity may be used to determine the user's response to certain displayed content (e.g., advertising). Information regarding user activity may be stored locally along with information about the content being displayed and other data (e.g., the date and time that the content was displayed). This information may then be transmitted to a remote server (e.g., in a background task performed when the application generating the user interface is idle). The remote server may be configured to accumulate this information for multiple users.

Mark Dennison

Papers

Hierarchical system and method for centralized management of thin clients

Persistent portal for a browser

Framework for a customizable graphics user interface

System and method for tracking user interaction with a graphical user interface