US20060075020A1 - Context administrator - Google Patents
Context administrator Download PDFInfo
- Publication number
- US20060075020A1 US20060075020A1 US11/266,502 US26650205A US2006075020A1 US 20060075020 A1 US20060075020 A1 US 20060075020A1 US 26650205 A US26650205 A US 26650205A US 2006075020 A1 US2006075020 A1 US 2006075020A1
- Authority
- US
- United States
- Prior art keywords
- context
- application
- computer readable
- readable medium
- subject
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Abandoned
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
- G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
- G06F21/6245—Protecting personal data, e.g. for financial or medical purposes
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q40/00—Finance; Insurance; Tax strategies; Processing of corporate or income taxes
- G06Q40/08—Insurance
-
- G—PHYSICS
- G16—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR SPECIFIC APPLICATION FIELDS
- G16H—HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA
- G16H10/00—ICT specially adapted for the handling or processing of patient-related medical or healthcare data
- G16H10/20—ICT specially adapted for the handling or processing of patient-related medical or healthcare data for electronic clinical trials or questionnaires
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2115—Third party
Definitions
- the present invention relates to tools for managing and administering the management of context in software applications.
- context is a collection of data items and corresponding values, wherein the items represent information required in common between plural applications in an industry or business setting.
- patient ID is an item which is part of the context in which plural clinical applications may participate, or share.
- a physician or other professional or staff member may need to store, retrieve, analyze, etc. various types of patient data.
- the patient data to be processed may be clinical; e.g. x-ray images or blood work results, or may be financial, e.g. insurance cover and billing history.
- clinical applications such as those to store, retrieve and display x-ray images and those to store, retrieve and display blood work results have inputs and outputs which fall into two broad classes: highly specialized, work product specific I/O; and more general, context-related I/O.
- CM-1.1 Health Level Seven Context Management Specification Version CM-1.1 was promulgated by the Health Level Seven (HL7) Clinical Context Object Workgroup (CCOW) on Nov. 6, 1999, incorporated herein in its entirety by reference, to define an interface and other architectural definitions of a Context Management Architecture (CMA), whereby clinical applications interact with a Context Manager to manage context information across a range of clinical and other health care related applications.
- CMA Context Management Architecture
- What is desired is a context administrator and method which solves the problems associated with settings using plural, unrelated software applications to process data related to a common context.
- context is a collection of data items and corresponding values, wherein the items represent information required in common between plural applications in an industry or business setting.
- a patient identifier (patient ID) is an item which is part of the context in which plural clinical applications may participate, or share.
- the data items comprising context are organized into subjects.
- subjects defined by HL7 CCOW CM-1.1 include User, Patient and Encounter.
- a subject definition is a data structure including the following parts:
- inter-dependencies between context subjects.
- the only inter-dependencies that shall be defined and enforced are those that stipulate that a specific set of additional subjects that must be set each time a particular subject is set.
- subject X whenever subject X is set by an application, the application must also set subject Y. These dependencies shall be enforced by the context manager. This notion of subject inter-dependency also necessitates an additional assertion, which is that if setting X requires that Y also be set, then whenever Y is set and X is not set, the value for X shall not be post-filled by the context manager. Instead, it shall appear after the context change transaction as though X is empty.
- Inter-dependencies for custom subjects may be stipulated by the organization that defines the custom subject.
- a custom subject may be dependent upon any other subject.
- a custom subject may not require that a standard subject, or a custom subject defined by another organization, be dependent upon it.
- custom subject X can not assert that it must always be set whenever standard subject Y is set.
- context management is a process of storing, retrieving, modifying and communicating context information between a user and one or more applications, or between the plural applications used in a particular setting. For example, in health care, when a doctor switches from a heart monitor application to a blood analysis application, the patient ID need not be reentered if context management has been implemented.
- context administration is a process of storing, retrieving, modifying and communicating information by which a context management system is controlled or supervised. A single context administrator may supervise multiple context managers or may supervise only one context manager.
- a method of administering a context management system comprising configuring a subject data definition.
- the method may further include identifying one or more available context managers to administer. Identifying may also further include pinging possible context manager addresses to find the available context managers.
- the method may include maintaining in a subject data definition, a list or other means of identifying applications that are allowed to transact on that subject.
- the method may further include storing with each application a value, which is a function of, but not equal to a passcode for the application, so that the identity of an application desiring to transact on a secure subject can be verified.
- the method may yet further include encrypting the passcode to form the value.
- Methods embodying the invention can further include maintaining an inventory of applications whose context is managed; and maintaining a map relating users to user identifiers formatted for each application in the inventory.
- the method can also include identifying for each context, which applications share the context.
- the method can configure communication parameters for the available context managers, generate a status report for the system or intervene in a context management process. Interventions can include forcing an application out of a context, canceling a transaction in progress or shutting down a context manager.
- Methods embodying aspects of the invention can include communicating with a context manager using a hypertext transport protocol.
- the hypertext transport protocol is HTTP 1.1.
- embodiments thereof can include a context management and administrative system, comprising a context manager; and an administration suite.
- the administration suite can further include a context administrator; and a context server.
- the context server can further include a passcode service; a user-mapping agent (UMA) service; and a lightweight directory access protocol (LDAP) service.
- UUA user-mapping agent
- LDAP lightweight directory access protocol
- the LDAP service can further provide a data storage module in which the passcode service stores encrypted passcodes and in which the user-mapping agent service stores user mapping data.
- the context server can further include a registry in which the context manager is registered.
- the context server can further include configuration memory holding a common configuration used as a default configuration for the context manager.
- FIG. 1 is a schematic block diagram of a system embodying aspects of the invention.
- FIG. 2 is an organizational map of one software embodiment of aspects of the invention.
- FIG. 1 A block diagram of the embodiment is given in FIG. 1 .
- the illustrated embodiment complies with the HL7 CCOW CM-1.1 standard.
- this embodiment can perform context management in a health care environment including CM-1.1 compliant clinical applications.
- Other standards for context management protocols and interfaces may exist, particularly outside of health care, for which the present invention is applicable. Regardless of the existence of such standards, while the present invention is described in connection with an application of the principles thereof to the health care industry, the invention may be practiced in connection with any industry that relies on plural applications for which context can preferably be managed or synchronized.
- FIG. 1 The overall architecture of FIG. 1 is now briefly described.
- One or more computer systems, workstations, desktop personal computers (PCs) or the like 100 have executing thereon one or more applications 101 , e.g., in the health care field, clinical applications. It is assumed that context management of the applications 101 is desired, and that they comply with at least one standard for context management protocols and interfaces, e.g., HL7 CCOW CM-1.1.
- a context manager 102 also executing on a computer system, workstation, desktop PC or the like communicates with the applications 101 through an interface and using a protocol defined by standard.
- the context manager may or may not be executing on the same computer system, workstation, desktop PC or the like as the applications, but may communicate with the applications through a communications network.
- Microsoft® COM protocol defines one layer of the communication protocol.
- Administration functions may be remote from the managed computer systems, workstations, desktop PCs, etc., for example as an independent software module or program resident on a context administration console 103 .
- the console 103 communicates with the system 100 on which the applications 101 reside through a channel 104 which may pass through an interconnection network, e.g., the Internet, an intranet, a Local Area Network (LAN), a Wide Area Network (WAN) or the like 105 .
- an interconnection network e.g., the Internet, an intranet, a Local Area Network (LAN), a Wide Area Network (WAN) or the like 105 .
- HTTP Hypertext Transport Protocol
- Messages transported by HTTP may be formatted as headers, Hypertext Markup Language (HTML) files, Extended Markup Language (XML) files, etc.
- a daemon 106 resident on each of the systems 100 , translates the protocol used for communication over the interconnection network (e.g., HTTP) into that used for context management of the applications (e.g., COM).
- the daemon 106 may alternatively be part of the context manager 102 .
- a database 107 of context information is maintained either on the context administration console or separately.
- a context management installation tool 108 When a context management installation tool 108 is invoked, similar links are established using an administration daemon 109 to draw current, common context information from the database 107 , to set up the context of newly installed applications 100 .
- This administration function can be performed at other times, as well, such as when a stand-alone system is brought into the context managed environment.
- modules For convenience, and without loss of generality, modules, programs and machines, particularly machines executing software programs are referred to herein as modules.
- modules could be function or procedure calls in a software program, a program module, a complete program, a machine executing a program or any part of a program, and the like, where a module performs a defined portion of the overall function of the system described.
- the architecture described above appears to assume a particular partitioning of the context management and context administration task into individual modules, as evidenced by the blocks of FIG. 1 . That apparent assumption, of course, is that there is a context manager module, a context administrator module and a context server module.
- the context manager and context server can be combined in a single module in which the functions are shared in such a way as to behave as a single functional block.
- the context administrator and context server can be combined in a single module in which the functions are shared in such a way as to behave as a single functional block.
- all three separately described functional elements can be combined in a single module in which the functions are shared in such a way as to behave as a single functional block.
- a context management and administration system has been implemented using the Microsoft Java programming language.
- the structure of the code is illustrated in FIG. 2 .
- a top layer is the user interface 200 .
- This may be implemented using a conventional presentation manager available as a resource in many operating systems, or using a markup language such as HTML or the like and HTTP so that it can use a standard browser as the display module.
- Beneath the user interface layer, and tunneling through both lower layers is the HTTP, COM, signing and XML communication facility 201 used by all layers.
- An inventory facility 202 , passcode facility 203 and user mapping agent facility 204 all described below, exist in the second layer.
- the third layer embodies the low-level functions of database management 205 , scanning the network (pinging) 206 and Lightweight Directory Access Protocol (LDAP) 207 , also all described below.
- LDAP Lightweight Directory Access Protocol
- the context administrator which is connected to a communication network through which it can communicate with other elements of the system, compiles an inventory of context managers available to it on the network.
- the context administrator determines whether a context manager is available at each legal network address by pinging at each address a communication port registered with the Internet Assigned Numbers Authority (IANA).
- IANA Internet Assigned Numbers Authority
- the context administrator can then build a database of available context managers.
- the database can be presented to users in a tree form, similar to the tree used in the WindowsTM Explorer program used to navigate through files and folders on a computer hard disk.
- the inventory can alternatively be built and updated automatically as context managers join or leave a network.
- each context manager will register itself to the context administrator by transmitting an identifier, for example a DCE UUID, “hello” message to the context administrator.
- the identifier needs to be unique within a given network.
- a context manager can be removed from inventory, making it invisible to the context administrator.
- a context manager manually removed by a user of the context administrator then continues to function normally, but cannot be configured, etc. by the context administrator.
- the context administrator can then configure the context managers, obtain status from the context managers, perform interventions on the context managers and produce human- or machine-readable outputs communicating various types of information about the context administration process. It is also possible to view a human-readable listing of all operations performed by the context administrator. The listing is updated or appended to each time an operation is performed.
- Configuring the context managers is a wide-ranging task, defining how a particular instance of a context manager behaves, as well as defining site-wide information relevant to the operation of all context managers under administration.
- Examples of configuration parameters defining how a particular instance of a context manager behaves include the parameters related to the details of performing a transaction, such as timing parameters.
- Examples of configuration parameters which affect an entire site include defining which applications will join in a particular context, passcodes and other security settings, and the subjects defined by the standard, including User, Patient and Encounter, required by the standard, and optional customizable subjects.
- Configuring the security settings includes defining values in a database identifying which subjects are available only through a secure connection.
- User is a secure subject. Defining a subject as secure necessitates that trusted participants be identified, as they can only access the subject, for example for viewing or editing, provided they give the passcode identifying them as a trusted participant.
- a trusted participant is one which will be allowed to edit the contents of a secure subject.
- User is a secure subject.
- a user mapping agent identifies each user by a unique, site-wide User Identification (User ID).
- the User ID is linked to the individual login identifiers, such as username and password, used to obtain access to each individual application. This map of User ID to login identifier is housed on the context server module described above.
- Status information which can be obtained by the context administrator can include one or more of the version number of each context manager in the inventory, which context managers have joined a particular context, what changes have been processed by each context manager, what changes have been aborted by each context manager, etc.
- Status information can also include a complete record of the current configuration of each context manager, so that if a context manager inadvertently becomes out of sync with the changes made by the context administrator, as determined by making a status inquiry, that context manager can be brought back into sync.
- status can also include a log of exceptions which may occur from time to time during operation. The log may contain the date and time of each event, the severity of the event and a message describing the event.
- the context administrator module can be configured to force an application to leave a context, cancel a transaction in progress, remotely shut down an aberrantly behaving context manager or remotely restart a context manager.
- all outputs of the context administrator can be printed, sorted, exported to XML, etc., so as to be available in both human- and machine-readable form.
- Context changes are effected in the system by means of transactions.
- HL7 CCOW CM-1.1 defines what constitutes a transaction.
- a secure transaction occurs as follows:
- ContextData::SetltemValues This method is similar to ContextData::SetltemValues. [See CM-1.1.] The primary difference is that the context participant's digital signature shall be provided as the value of the input appSignature when secure subject item values are among the items to be set. This signature enables the context manager to authenticate that they came from a designated application or from a valid secure subject mapping agent, and that the values were not tampered with between the time they were sent and were received.
- a signature is not required when the values for the user subject items are null. This enables any application to set the user context to empty. When a signature is not provided, the value of the input appSignature shall be an empty string (“ ”).
- a participant shall compute its digital signature by encrypting the message digest with its private key.
- the exception SignatureRequired is raised if the value of appSignature is not a digital signature and a signature is required in order to perform this method.
- the exception AuthenticationFailed is raised if a digital signature is required and provided, but the process of authentication determines that: the application that invoked this method did not previously provide its public key via the interface SecureBinding; that the input appSignature has been forged; that the input parameter values have been tampered with; that the participant has not been designated for performing user context changes.
- the context administrator module contains the logic defining the overall operation of the system. The actual maintenance and switching of context is performed by the context manager module. A variety of support functions are provided by the context server.
- the context server may include a passcode service, a user mapping agent service and a LDAP service. These services are now discussed.
- the passcode service provides a virtual software vault for the passcodes.
- Passcodes are stored in encrypted form in the LDAP data store accessed by the context server. Passcodes are not themselves ever transmitted as messages, but rather the context manager sends a signed HTTP message to the context server, which checks the signature and contents of the message against the stored, encrypted passcode. An MAC acknowledgement is returned to the context manager either authorizing or denying the request contained in the message.
- the user mapping agent provides a similar service with respect to User IDs.
- a request is sent by the context manager for the login identifiers corresponding to a particular User ID, and a list of data is returned to the context manager.
- the context manager can then add the login identifiers corresponding to the User ID to the context data, in this case for the User subject, where it can be accessed by any application that has joined in the current context and that also has access to the User subject, which is secure.
- the context administrator sends to the context server an LDAP message requesting a change to the passcode list or the map of User ID information, a security check is first performed, and then the transaction is either approved or disapproved.
- the context server could be used to provide other services, as well.
- the context server could provide a registry service, in which each context manager is registered.
- the registry would automate the inventorying process to a greater extent, allowing context managers and context servers to perform a handshake when a new module comes on line on a network, and the context manager to be automatically registered.
- the context administrator could also provide a default configuration service. Each registered context manager could be configured to the default configuration at the time it is registered, unless the default configuration is overridden.
- the context server can be implemented as a server appliance.
- a server appliance is a network-connected server that services multiple client computers. Like conventional servers, a server appliance receives requests from client computers to perform specific tasks. The server performs a task requested and returns back to the client the result of performing the task. Unlike conventional servers that provide general purpose platforms for a wide range of computing tasks, a server appliance is singular in purpose. A server appliance contains specialized software and possibly specialized hardware to enable it to achieve its purpose. Thus, a server appliance can be optimized for the specific tasks that it is intended to perform, thereby reducing the cost and complexity of the server appliance when compared with the cost and complexity of a general purpose server configured for the same purpose.
- the context administrator inventories the network by pinging all possible context manager addresses on a port registered with the IANA, according to one embodiment of the invention.
- the context administrator can be implemented on a WindowsTM 98/2000/NT machine, and use the WindowsTM Networking ping function to perform the required scan.
- Other operating systems such as Unix, Linux and the like, with their corresponding networking facilities can also be used.
- communication between the context administrator and the context manager can occur using HTTP.
- context managers communicate with applications using the COM protocol, as mentioned above. Therefore, in these embodiments of the invention, rather than add to the complexity and size of the context manager, a software daemon translates between HTTP and COM protocols.
- the context administrator sends signed messages to the context manager in HTTP, which are translated by the daemon into signed COM messages.
- the context manager returns XML messages, which the daemon wraps in HTTP to forward to the context administrator.
- other communications protocols can be used, and even the native protocol used by the context manager can be used directly, in variations on embodiments of the invention.
- the daemon is restricted to calling only COM objects which are part of the context manager module.
- an HTTP request could be for any COM object, but that would create a security breach by allowing the daemon to be used to gain access to other system components.
- one configuration parameter set in the context managers is which context server, of a possible plurality on a given network, should be used.
- a failover mechanism can also be provided which would cause a secondary context server to be used in the event a primary context server failed to respond to a message.
- a new subject is implemented by the context administrator as follows. First the subject is defined in the context administrator by giving it a name and defining its schema. The definition is stored in the repository. Next, a user gestures to send out the configuration, causing an HTTP call to the context manager, through the daemon, to be sent out. Alternatively, the configuration can be stored in a context server in a configuration service, as discussed above. Finally, the context manger obtains and stores the new configuration information locally in a text file.
- This discussion assumes that one or more applications controlled by the context manager have a priori knowledge of the new subject, thus giving life and meaning to the new subject definition. If the subject has been defined to be secure, then the application will need a passcode to use the subject. Also, any new subject definition must have at least one application capable of setting data in the subject.
- the context manager can be embodied in a server appliance, as described above in connection with the context server.
- the applications may reside in a different computer, workstation, PC, etc. than the context manager appliance, which also may reside in a different computer, workstation, PC, etc. than the context administrator.
- the components of such a system which reside in different computers, workstations, PCs, etc. would be connected to each other through a network, such as a LAN, a WAN, an intranet, the Internet, etc.
- the structures and methods described herein can be combined with: the context sensitive web casting methods and apparatus disclosed in U.S. patent application Ser. No. 60/135,907, filed May 25, 1999, incorporated herein in its entirety by reference; the context management server appliance methods and apparatus disclosed in U.S. patent application Ser. No. 60/136,670, filed May 28, 1999, incorporated herein in its entirety by reference; the healthcare server appliances methods and apparatus disclosed in U.S. patent application Ser. No. 60/139,235, filed Jun. 14, 1999, incorporated herein in its entirety by reference; the HTTP Post message encoding of COM dispatch interface calls disclosed in U.S. patent application Ser. No. 60/139,145, filed Jun.
Abstract
A context management and administration system includes a context manager, which manages the context of plural applications programs, and an administration suite, which oversees and manages the manager. Context administration can include setting up and maintaining subject data definitions, intervening in context manager operations, providing security functions to protect sensitive context information against tampering by unauthorized users, etc.
Description
- This application is a continuation of U.S. Ser. No. 09/545,396, filed Apr. 7, 2000, entitled “CONTEXT ADMINISTRATOR,” now pending. This application claims domestic priority under 35 U.S.C. § 119(e) to U.S. Provisional Patent Applications having Ser. No. 60/128,145, filed Apr. 7, 1999, Ser. No. 60/135,907, filed May 25, 1999, Ser. No. 60/136,670, filed May 28, 1999, Ser. No. 60/139,235, filed Jun. 14, 1999, Ser. No. 60/139,145, filed Jun. 14, 1999, Ser. No. 60/146,722, filed Aug. 2, 1999, and Ser. No. 60/145,681, filed Jul. 26, 1999, all of which are incorporated by reference.
- The present invention relates to tools for managing and administering the management of context in software applications.
- There are many businesses or fields of endeavor, which rely on the use of plural desktop computer applications. One such field is the modern practice of medicine. In such a setting, users quite often find themselves entering and reentering similar information over and over. For example, a single user may have to repeat login information in plural applications, followed by the same or similar client information. Such information, that defines the environment in which each application operates is known as context. That is, context is a collection of data items and corresponding values, wherein the items represent information required in common between plural applications in an industry or business setting. For example, in health care, a patient identifier (patient ID) is an item which is part of the context in which plural clinical applications may participate, or share.
- In the modern practice of medicine, a physician or other professional or staff member may need to store, retrieve, analyze, etc. various types of patient data. The patient data to be processed may be clinical; e.g. x-ray images or blood work results, or may be financial, e.g. insurance cover and billing history. Thus, clinical applications, such as those to store, retrieve and display x-ray images and those to store, retrieve and display blood work results have inputs and outputs which fall into two broad classes: highly specialized, work product specific I/O; and more general, context-related I/O.
- The desirability of managing context information, so that a user at a workstation need not reenter information such as user identification (user ID) or patient identification (patient ID) has long been recognized.
- A standard known as Health Level Seven Context Management Specification Version CM-1.1 was promulgated by the Health Level Seven (HL7) Clinical Context Object Workgroup (CCOW) on Nov. 6, 1999, incorporated herein in its entirety by reference, to define an interface and other architectural definitions of a Context Management Architecture (CMA), whereby clinical applications interact with a Context Manager to manage context information across a range of clinical and other health care related applications.
- At this time, there are no other known, comprehensive context management software packages available. Some small steps have been taken for example to share context amongst one publisher's own titles, using proprietary methods absent a context manager, or to permit a user to sign onto a single application which transfers user context to plural other applications. However, no context manager handling both user and patient context is known, much less a complete system with central administration of the context management process.
- What is desired is a context administrator and method which solves the problems associated with settings using plural, unrelated software applications to process data related to a common context.
- As discussed above, context is a collection of data items and corresponding values, wherein the items represent information required in common between plural applications in an industry or business setting. For example, in health care, a patient identifier (patient ID) is an item which is part of the context in which plural clinical applications may participate, or share. The data items comprising context are organized into subjects. For example, subjects defined by HL7 CCOW CM-1.1 include User, Patient and Encounter. In accordance with some aspects of the invention, a subject definition is a data structure including the following parts:
-
- Name (The Name must be correctly formatted per the CM-1.1 standard because attempting set the context data for an unknown subject is invalid and enforced by the context manager, as specified by the CM-1.1 standard.)
- IsSecure (If true, IsSecure indicates that only applications specifically configured to be participants to that subject can get the subjects context data. Additionally, some applications can be identified as “trusted,” meaning that they can change the subject's context data, as specified by the CM-1.1 standard.)
- List of Applications (The List of Applications identifies those configured for the subject and which ones are “trusted”.)
- List of Correctly Formatted Item Names for the Subject (This List gives the names of the fields that the subject is allowed to contain. Each name must be correctly formatted per the CM-1.1 standard. Each item name may be one defined in the standard or it may be formatted as a custom item name, where the format is per the CM-1.1 standard.)
- List of Dependent Subjects (One subject may be dependent on another, meaning that if the dependent subject's context is changed, this subject's context data is cleared, as specified in the CM-1.1 standard.)
- On the subject of Dependent Subjects, the CM-1.1 standard has the following remarks:
- For simplicity, it is generally desirable that there not be any semantic dependencies between context subjects. This enables an application to set a context subject without concern for the other available subjects.
- With this assumption, it is possible for an application to independently set the context data items for just one subject, some, or all subjects during the course of a single context change transaction. A context subject whose items have not been set by the application shall remain as it was prior to the transaction.
- However, in certain cases it is necessary to define and enforce semantic inter-dependencies between context subjects. The only inter-dependencies that shall be defined and enforced are those that stipulate that a specific set of additional subjects that must be set each time a particular subject is set.
- For example, whenever subject X is set by an application, the application must also set subject Y. These dependencies shall be enforced by the context manager. This notion of subject inter-dependency also necessitates an additional assertion, which is that if setting X requires that Y also be set, then whenever Y is set and X is not set, the value for X shall not be post-filled by the context manager. Instead, it shall appear after the context change transaction as though X is empty.
- The inter-dependencies for standard subjects are documented in the document Health Level-Seven Standard Context Management Specification, Subject Data Definitions. [Ed. Note: the referenced document is part of the CM-1.1 standard.]
- Inter-dependencies for custom subjects may be stipulated by the organization that defines the custom subject. A custom subject may be dependent upon any other subject. However, a custom subject may not require that a standard subject, or a custom subject defined by another organization, be dependent upon it. In other words, custom subject X can not assert that it must always be set whenever standard subject Y is set.
- As used herein, context management is a process of storing, retrieving, modifying and communicating context information between a user and one or more applications, or between the plural applications used in a particular setting. For example, in health care, when a doctor switches from a heart monitor application to a blood analysis application, the patient ID need not be reentered if context management has been implemented. As used herein, context administration is a process of storing, retrieving, modifying and communicating information by which a context management system is controlled or supervised. A single context administrator may supervise multiple context managers or may supervise only one context manager.
- According to one aspect of the invention, there is a method of administering a context management system, comprising configuring a subject data definition. The method may further include identifying one or more available context managers to administer. Identifying may also further include pinging possible context manager addresses to find the available context managers.
- One type of data useful for security purposes is a shared secret. Thus, according to this aspect of the invention, the method may include maintaining in a subject data definition, a list or other means of identifying applications that are allowed to transact on that subject. The method may further include storing with each application a value, which is a function of, but not equal to a passcode for the application, so that the identity of an application desiring to transact on a secure subject can be verified. The method may yet further include encrypting the passcode to form the value. Methods embodying the invention can further include maintaining an inventory of applications whose context is managed; and maintaining a map relating users to user identifiers formatted for each application in the inventory. When the steps of maintaining are included, the method can also include identifying for each context, which applications share the context. In yet another variation, the method can configure communication parameters for the available context managers, generate a status report for the system or intervene in a context management process. Interventions can include forcing an application out of a context, canceling a transaction in progress or shutting down a context manager. Methods embodying aspects of the invention can include communicating with a context manager using a hypertext transport protocol. In some embodiments, the hypertext transport protocol is HTTP 1.1.
- According to other aspects of the invention, embodiments thereof can include a context management and administrative system, comprising a context manager; and an administration suite. The administration suite can further include a context administrator; and a context server. The context server can further include a passcode service; a user-mapping agent (UMA) service; and a lightweight directory access protocol (LDAP) service. The LDAP service can further provide a data storage module in which the passcode service stores encrypted passcodes and in which the user-mapping agent service stores user mapping data. The context server can further include a registry in which the context manager is registered. Finally, the context server can further include configuration memory holding a common configuration used as a default configuration for the context manager.
- In the drawings, in which like reference designations indicate like elements:
-
FIG. 1 is a schematic block diagram of a system embodying aspects of the invention; and -
FIG. 2 is an organizational map of one software embodiment of aspects of the invention. - The invention will be better understood upon reading the following description of an embodiment of our invention in connection with the drawings. This embodiment is described in connection with the administration of a software system, software components and software architecture for performing context management to synchronize a plurality of application programs to a single context. A block diagram of the embodiment is given in
FIG. 1 . The illustrated embodiment complies with the HL7 CCOW CM-1.1 standard. Thus, this embodiment can perform context management in a health care environment including CM-1.1 compliant clinical applications. Other standards for context management protocols and interfaces may exist, particularly outside of health care, for which the present invention is applicable. Regardless of the existence of such standards, while the present invention is described in connection with an application of the principles thereof to the health care industry, the invention may be practiced in connection with any industry that relies on plural applications for which context can preferably be managed or synchronized. - The overall architecture of
FIG. 1 is now briefly described. - One or more computer systems, workstations, desktop personal computers (PCs) or the like 100 have executing thereon one or
more applications 101, e.g., in the health care field, clinical applications. It is assumed that context management of theapplications 101 is desired, and that they comply with at least one standard for context management protocols and interfaces, e.g., HL7 CCOW CM-1.1. Acontext manager 102, also executing on a computer system, workstation, desktop PC or the like communicates with theapplications 101 through an interface and using a protocol defined by standard. The context manager may or may not be executing on the same computer system, workstation, desktop PC or the like as the applications, but may communicate with the applications through a communications network. In the case of an HL7 CCOW CM-1.1 compliant system, Microsoft® COM protocol defines one layer of the communication protocol. - Administration functions may be remote from the managed computer systems, workstations, desktop PCs, etc., for example as an independent software module or program resident on a
context administration console 103. Theconsole 103 communicates with thesystem 100 on which theapplications 101 reside through achannel 104 which may pass through an interconnection network, e.g., the Internet, an intranet, a Local Area Network (LAN), a Wide Area Network (WAN) or the like 105. In order to simplify communication through theinterconnection network 105, a standard printable-character based protocol, such as the Hypertext Transport Protocol (HTTP) may be used. Messages transported by HTTP may be formatted as headers, Hypertext Markup Language (HTML) files, Extended Markup Language (XML) files, etc. Other protocols and message formats may alternatively be used. Adaemon 106, resident on each of thesystems 100, translates the protocol used for communication over the interconnection network (e.g., HTTP) into that used for context management of the applications (e.g., COM). Thedaemon 106 may alternatively be part of thecontext manager 102. - A
database 107 of context information is maintained either on the context administration console or separately. When a contextmanagement installation tool 108 is invoked, similar links are established using an administration daemon 109 to draw current, common context information from thedatabase 107, to set up the context of newly installedapplications 100. This administration function can be performed at other times, as well, such as when a stand-alone system is brought into the context managed environment. - Although both the foregoing and the following discussion is given with respect to HL7 CCOW CM-1.1, HTTP 1.1, COM and health care clinical settings in particular, it will be apparent from the discussion that the inventors contemplate adaptations of the concepts illustrated to other industries and settings, some suggestions for which have been given.
- For convenience, and without loss of generality, modules, programs and machines, particularly machines executing software programs are referred to herein as modules. In this document, modules could be function or procedure calls in a software program, a program module, a complete program, a machine executing a program or any part of a program, and the like, where a module performs a defined portion of the overall function of the system described.
- It should be noted that the architecture described above appears to assume a particular partitioning of the context management and context administration task into individual modules, as evidenced by the blocks of
FIG. 1 . That apparent assumption, of course, is that there is a context manager module, a context administrator module and a context server module. However, the inventors have found that the context manager and context server can be combined in a single module in which the functions are shared in such a way as to behave as a single functional block. Alternatively, the context administrator and context server can be combined in a single module in which the functions are shared in such a way as to behave as a single functional block. Finally, all three separately described functional elements can be combined in a single module in which the functions are shared in such a way as to behave as a single functional block. These variations have important implications for the design of the communications and user interface portions of the system because communication between more tightly coupled functional elements, such as within a module, is easier and more secure than between more loosely coupled elements, such as between modules, and because the user interface can ultimately be defined using standard elements of a page markup language interpreted by a browser, rather than a proprietary ad hoc interface design. - A context management and administration system according to a presently preferred embodiment of the invention has been implemented using the Microsoft Java programming language. The structure of the code is illustrated in
FIG. 2 . - A top layer, over all, is the
user interface 200. This may be implemented using a conventional presentation manager available as a resource in many operating systems, or using a markup language such as HTML or the like and HTTP so that it can use a standard browser as the display module. Beneath the user interface layer, and tunneling through both lower layers is the HTTP, COM, signing andXML communication facility 201 used by all layers. Aninventory facility 202,passcode facility 203 and usermapping agent facility 204, all described below, exist in the second layer. Finally, the third layer embodies the low-level functions ofdatabase management 205, scanning the network (pinging) 206 and Lightweight Directory Access Protocol (LDAP) 207, also all described below. - The following description explains the operation of the components of the architecture described above.
- The context administrator, which is connected to a communication network through which it can communicate with other elements of the system, compiles an inventory of context managers available to it on the network. The context administrator determines whether a context manager is available at each legal network address by pinging at each address a communication port registered with the Internet Assigned Numbers Authority (IANA). When a context manager is configured to respond to messages on the registered port, at the address pinged, it responds. The context administrator can then build a database of available context managers. The database can be presented to users in a tree form, similar to the tree used in the Windows™ Explorer program used to navigate through files and folders on a computer hard disk.
- The inventory can alternatively be built and updated automatically as context managers join or leave a network. In order to do so, each context manager will register itself to the context administrator by transmitting an identifier, for example a DCE UUID, “hello” message to the context administrator. The identifier needs to be unique within a given network.
- As part of inventory management, a context manager can be removed from inventory, making it invisible to the context administrator. A context manager manually removed by a user of the context administrator then continues to function normally, but cannot be configured, etc. by the context administrator.
- Once an inventory of context managers exists, the context administrator can then configure the context managers, obtain status from the context managers, perform interventions on the context managers and produce human- or machine-readable outputs communicating various types of information about the context administration process. It is also possible to view a human-readable listing of all operations performed by the context administrator. The listing is updated or appended to each time an operation is performed.
- Configuring the context managers is a wide-ranging task, defining how a particular instance of a context manager behaves, as well as defining site-wide information relevant to the operation of all context managers under administration. Examples of configuration parameters defining how a particular instance of a context manager behaves include the parameters related to the details of performing a transaction, such as timing parameters. Examples of configuration parameters which affect an entire site include defining which applications will join in a particular context, passcodes and other security settings, and the subjects defined by the standard, including User, Patient and Encounter, required by the standard, and optional customizable subjects.
- Configuring the security settings includes defining values in a database identifying which subjects are available only through a secure connection. For example, User is a secure subject. Defining a subject as secure necessitates that trusted participants be identified, as they can only access the subject, for example for viewing or editing, provided they give the passcode identifying them as a trusted participant. In the preferred embodiment, a trusted participant is one which will be allowed to edit the contents of a secure subject. In the HL7 CCOW CM-1.1 standard, User is a secure subject.
- The contents of a subject are now illustrated by describing the subject, User. The subject User is used to configure who the users are within a particular site, for example. A user mapping agent identifies each user by a unique, site-wide User Identification (User ID). The User ID is linked to the individual login identifiers, such as username and password, used to obtain access to each individual application. This map of User ID to login identifier is housed on the context server module described above.
- Status information which can be obtained by the context administrator can include one or more of the version number of each context manager in the inventory, which context managers have joined a particular context, what changes have been processed by each context manager, what changes have been aborted by each context manager, etc. Status information can also include a complete record of the current configuration of each context manager, so that if a context manager inadvertently becomes out of sync with the changes made by the context administrator, as determined by making a status inquiry, that context manager can be brought back into sync. Finally, status can also include a log of exceptions which may occur from time to time during operation. The log may contain the date and time of each event, the severity of the event and a message describing the event.
- In some circumstances, intervention in the operation of individual context managers may be required. The context administrator module can be configured to force an application to leave a context, cancel a transaction in progress, remotely shut down an aberrantly behaving context manager or remotely restart a context manager.
- According to a preferred embodiment, all outputs of the context administrator can be printed, sorted, exported to XML, etc., so as to be available in both human- and machine-readable form.
- Context changes are effected in the system by means of transactions. In the health care field, HL7 CCOW CM-1.1 defines what constitutes a transaction. According to this standard, a secure transaction occurs as follows:
- This method is similar to ContextData::SetltemValues. [See CM-1.1.] The primary difference is that the context participant's digital signature shall be provided as the value of the input appSignature when secure subject item values are among the items to be set. This signature enables the context manager to authenticate that they came from a designated application or from a valid secure subject mapping agent, and that the values were not tampered with between the time they were sent and were received.
- A signature is not required when the values for the user subject items are null. This enables any application to set the user context to empty. When a signature is not provided, the value of the input appSignature shall be an empty string (“ ”).
- Concatenating the string representations of the following inputs in the order listed shall form the data from which a message digest is computed by the participant:
- participantCoupon
- itemNames (i.e., All the elements in the order that they appear in the array.)
- item Values (i.e., All the elements in the order that they appear in the array.)
- contextCoupon
- A participant shall compute its digital signature by encrypting the message digest with its private key.
- The exception SignatureRequired is raised if the value of appSignature is not a digital signature and a signature is required in order to perform this method.
- The exception AuthenticationFailed is raised if a digital signature is required and provided, but the process of authentication determines that: the application that invoked this method did not previously provide its public key via the interface SecureBinding; that the input appSignature has been forged; that the input parameter values have been tampered with; that the participant has not been designated for performing user context changes.
- We now return to
FIG. 1 , to discuss how the illustrated architecture provides the facility for performing the operations described. - The context administrator module contains the logic defining the overall operation of the system. The actual maintenance and switching of context is performed by the context manager module. A variety of support functions are provided by the context server. For example, the context server may include a passcode service, a user mapping agent service and a LDAP service. These services are now discussed.
- The passcode service provides a virtual software vault for the passcodes. Passcodes are stored in encrypted form in the LDAP data store accessed by the context server. Passcodes are not themselves ever transmitted as messages, but rather the context manager sends a signed HTTP message to the context server, which checks the signature and contents of the message against the stored, encrypted passcode. An MAC acknowledgement is returned to the context manager either authorizing or denying the request contained in the message.
- The user mapping agent provides a similar service with respect to User IDs. A request is sent by the context manager for the login identifiers corresponding to a particular User ID, and a list of data is returned to the context manager. The context manager can then add the login identifiers corresponding to the User ID to the context data, in this case for the User subject, where it can be accessed by any application that has joined in the current context and that also has access to the User subject, which is secure.
- Similarly, if the context administrator sends to the context server an LDAP message requesting a change to the passcode list or the map of User ID information, a security check is first performed, and then the transaction is either approved or disapproved.
- The context server could be used to provide other services, as well. For example, the context server could provide a registry service, in which each context manager is registered. The registry would automate the inventorying process to a greater extent, allowing context managers and context servers to perform a handshake when a new module comes on line on a network, and the context manager to be automatically registered. The context administrator could also provide a default configuration service. Each registered context manager could be configured to the default configuration at the time it is registered, unless the default configuration is overridden.
- The context server can be implemented as a server appliance. A server appliance is a network-connected server that services multiple client computers. Like conventional servers, a server appliance receives requests from client computers to perform specific tasks. The server performs a task requested and returns back to the client the result of performing the task. Unlike conventional servers that provide general purpose platforms for a wide range of computing tasks, a server appliance is singular in purpose. A server appliance contains specialized software and possibly specialized hardware to enable it to achieve its purpose. Thus, a server appliance can be optimized for the specific tasks that it is intended to perform, thereby reducing the cost and complexity of the server appliance when compared with the cost and complexity of a general purpose server configured for the same purpose.
- The context administrator inventories the network by pinging all possible context manager addresses on a port registered with the IANA, according to one embodiment of the invention. The context administrator can be implemented on a Windows™ 98/2000/NT machine, and use the Windows™ Networking ping function to perform the required scan. Other operating systems such as Unix, Linux and the like, with their corresponding networking facilities can also be used.
- According to some embodiments of the invention, communication between the context administrator and the context manager can occur using HTTP. However, context managers communicate with applications using the COM protocol, as mentioned above. Therefore, in these embodiments of the invention, rather than add to the complexity and size of the context manager, a software daemon translates between HTTP and COM protocols. The context administrator sends signed messages to the context manager in HTTP, which are translated by the daemon into signed COM messages. The context manager returns XML messages, which the daemon wraps in HTTP to forward to the context administrator. Naturally, other communications protocols can be used, and even the native protocol used by the context manager can be used directly, in variations on embodiments of the invention.
- It should be noted that for security reasons, the daemon is restricted to calling only COM objects which are part of the context manager module. Theoretically, an HTTP request could be for any COM object, but that would create a security breach by allowing the daemon to be used to gain access to other system components.
- In order to effect proper communication between the context managers and the context servers, one configuration parameter set in the context managers is which context server, of a possible plurality on a given network, should be used. A failover mechanism can also be provided which would cause a secondary context server to be used in the event a primary context server failed to respond to a message.
- Based upon the foregoing architecture, a new subject is implemented by the context administrator as follows. First the subject is defined in the context administrator by giving it a name and defining its schema. The definition is stored in the repository. Next, a user gestures to send out the configuration, causing an HTTP call to the context manager, through the daemon, to be sent out. Alternatively, the configuration can be stored in a context server in a configuration service, as discussed above. Finally, the context manger obtains and stores the new configuration information locally in a text file. This discussion, of course, assumes that one or more applications controlled by the context manager have a priori knowledge of the new subject, thus giving life and meaning to the new subject definition. If the subject has been defined to be secure, then the application will need a passcode to use the subject. Also, any new subject definition must have at least one application capable of setting data in the subject.
- In one variation of the invention, the context manager can be embodied in a server appliance, as described above in connection with the context server. In such an embodiment of the invention, the applications may reside in a different computer, workstation, PC, etc. than the context manager appliance, which also may reside in a different computer, workstation, PC, etc. than the context administrator. The components of such a system which reside in different computers, workstations, PCs, etc. would be connected to each other through a network, such as a LAN, a WAN, an intranet, the Internet, etc.
- In other variations of the invention, the structures and methods described herein can be combined with: the context sensitive web casting methods and apparatus disclosed in U.S. patent application Ser. No. 60/135,907, filed May 25, 1999, incorporated herein in its entirety by reference; the context management server appliance methods and apparatus disclosed in U.S. patent application Ser. No. 60/136,670, filed May 28, 1999, incorporated herein in its entirety by reference; the healthcare server appliances methods and apparatus disclosed in U.S. patent application Ser. No. 60/139,235, filed Jun. 14, 1999, incorporated herein in its entirety by reference; the HTTP Post message encoding of COM dispatch interface calls disclosed in U.S. patent application Ser. No. 60/139,145, filed Jun. 14, 1999, incorporated herein in its entirety by reference; the application context management methods and apparatus disclosed in U.S. patent application Ser. No. 60/139,145, filed Jun. 14, 1999, incorporated herein in its entirety by reference; and the context management web site methods and apparatus disclosed in U.S. patent application Ser. No. 60/145,681, filed Jul. 26, 1999, incorporated herein in its entirety by reference. This discussion and that contained in the referenced patent applications clearly suggest to the skilled artisan how such combinations would be made.
- The invention has now been described and illustrated in connection with one embodiment and some variations thereof. Numerous other variations and modifications which will now be obvious to the skilled artisan are also contemplated as within the scope and spirit of the invention. The scope of the invention is not to be limited by the description of embodiments thereof, but only by the scope of the properly construed claims which follow.
Claims (20)
1. At least one computer readable medium encoded with a program that, when executed, performs a method of administering a context management system that manages a context, the method comprising:
configuring a subject data definition which defines a plurality of subjects in the context using, for each subject, subject data that comprises a data item usable by a plurality of applications comprising at least a first application and a second application, the data item having a set of values comprising at least a first value corresponding to the first application and a second value corresponding to the second application, the set of values identifying the subject in the context, the value of the data item corresponding to the first application being exchangeable with the value of the data item corresponding to the second application when a user switches from the first application to the second application to retain the context.
2. The at least one computer readable medium of claim 1 , wherein the method further comprises:
identifying one or more available context managers to administer.
3. The at least one computer readable medium of claim 2 , wherein identifying further comprises:
pinging possible context manager addresses to find the available context managers.
4. The at least one computer readable medium of claim 1 , wherein the method further comprises:
maintaining in the subject data definition, information identifying which applications are allowed to access the subject.
5. The at least one computer readable medium of claim 4 , wherein the method further comprises:
storing with each application a value which is a function of but not equal to a passcode for the application.
6. The at least one computer readable medium of claim 5 , wherein the method further comprises:
encrypting the passcode to form the value.
7. The at least one computer readable medium of claim 1 , wherein the method further comprises:
maintaining an inventory of applications whose context is managed.
8. The at least one computer readable medium of claim 7 , wherein the method further comprises:
maintaining a map relating User IDs to login identifiers formatted for each application in the inventory.
9. The at least one computer readable medium of claim 2 , wherein the method further comprises:
configuring communication parameters for the available context managers.
10. The at least one computer readable medium of claim 2 , wherein the method further comprises:
generating a status report for the system.
11. The at least one computer readable medium of claim 2 , wherein the method further comprises:
intervening in a context management process.
12. The at least one computer readable medium of claim 11 , wherein intervening further comprises:
forcing an application out of a context.
13. The at least one computer readable medium of claim 11 , wherein intervening further comprises:
canceling a transaction in progress.
14. The at least one computer readable medium of claim 11 , wherein intervening further comprises:
shutting down a context manager.
15. The at least one computer readable medium of claim 1 , wherein the method further comprises:
communicating with a context manager using a hypertext transport protocol.
16. The at least one computer readable medium of claim 15 , wherein the hypertext transport protocol is HTTP 1.1.
17. An apparatus comprising:
at least one processor programmed to manage and administer a context, the at least one processor programmed to implement:
a context manager; and
an administration suite for configuring a subject data definition, the subject data definition defining a subject in the context using subject data that comprises a data item usable by at least a first application and a second application, the data item having a set of values comprising at least a first value corresponding to the first application and a second value corresponding to the second application, the set of values identifying the subject in the context, the value of the data item corresponding to the first application being exchangeable with the value of the data item corresponding to the second application when a user switches from the first application to the second application to retain the context.
18. The apparatus of claim 17 , wherein the at least one processor is programmed so that the administration suite further comprises a context administrator and a context server.
19. The apparatus of claim 18 , wherein the at least one processor is programmed so that the context server implements:
a passcode service;
a user mapping agent (UMA) service; and
a lightweight directory access protocol (LDAP) service.
20. The apparatus of claim 19 , wherein the at least one processor is programmed so that the LDAP service further comprises:
a data storage module in which the passcode service stores encrypted passcodes and in which the user mapping agent service stores user-mapping data.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US11/266,502 US20060075020A1 (en) | 1999-04-07 | 2005-11-03 | Context administrator |
Applications Claiming Priority (9)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US12814599P | 1999-04-07 | 1999-04-07 | |
US13590799P | 1999-05-25 | 1999-05-25 | |
US13667099P | 1999-05-28 | 1999-05-28 | |
US13923599P | 1999-06-14 | 1999-06-14 | |
US13914599P | 1999-06-14 | 1999-06-14 | |
US14568199P | 1999-07-26 | 1999-07-26 | |
US14672299P | 1999-08-02 | 1999-08-02 | |
US09/545,396 US6993556B1 (en) | 1999-04-07 | 2000-04-07 | Context administrator |
US11/266,502 US20060075020A1 (en) | 1999-04-07 | 2005-11-03 | Context administrator |
Related Parent Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US09/545,396 Continuation US6993556B1 (en) | 1999-04-07 | 2000-04-07 | Context administrator |
Publications (1)
Publication Number | Publication Date |
---|---|
US20060075020A1 true US20060075020A1 (en) | 2006-04-06 |
Family
ID=35694988
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US09/545,396 Expired - Fee Related US6993556B1 (en) | 1999-04-07 | 2000-04-07 | Context administrator |
US11/266,502 Abandoned US20060075020A1 (en) | 1999-04-07 | 2005-11-03 | Context administrator |
Family Applications Before (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US09/545,396 Expired - Fee Related US6993556B1 (en) | 1999-04-07 | 2000-04-07 | Context administrator |
Country Status (1)
Country | Link |
---|---|
US (2) | US6993556B1 (en) |
Cited By (12)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20050131925A1 (en) * | 2001-09-29 | 2005-06-16 | John Coker | Computing system and method to implicitly commit unsaved data for a world wide Web application |
US20050137908A1 (en) * | 2003-12-23 | 2005-06-23 | Sentillion Inc. | Methods and apparatus for externally controlling a software application to create new application behavior |
US20050177587A1 (en) * | 2001-09-29 | 2005-08-11 | Anil Mukundan | Method, apparatus, and system for immediate posting of changes in a client server environment |
US20080028366A1 (en) * | 2006-07-25 | 2008-01-31 | Carefx Corporation | Computer program generation system and method thereof |
US20080172669A1 (en) * | 2007-01-12 | 2008-07-17 | Carefx Corporation | System capable of executing workflows on target applications and method thereof |
US7711758B1 (en) * | 2006-04-06 | 2010-05-04 | American Megatrends, Inc. | Method, apparatus, and computer-readable medium for storing character strings in a human interface infrastructure database |
US7885996B2 (en) | 2001-09-29 | 2011-02-08 | Siebel Systems, Inc. | Method, apparatus, and system for implementing notifications in a framework to support web-based applications |
US20110055912A1 (en) * | 2009-08-25 | 2011-03-03 | Sentillion, Inc. | Methods and apparatus for enabling context sharing |
US7962899B2 (en) | 2006-12-01 | 2011-06-14 | Harris Corporation | System for monitoring a target application and method thereof |
US8146097B2 (en) | 2001-09-29 | 2012-03-27 | Siebel Systems, Inc. | Method, apparatus, and system for implementing view caching in a framework to support web-based applications |
US20130111372A1 (en) * | 2011-10-31 | 2013-05-02 | General Electric Company | Preference management methods and apparatus |
USD735225S1 (en) | 2013-01-03 | 2015-07-28 | Par8O, Inc. | Display screen of a computing device with graphical user interface |
Families Citing this family (23)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7143437B2 (en) * | 2001-01-12 | 2006-11-28 | Siemens Medical Solutions Health Services Corporation | System and user interface for managing user access to network compatible applications |
US7127609B2 (en) * | 2001-01-12 | 2006-10-24 | Siemens Medical Solutions Health Services Corporation | System and user interface for adaptively processing and communicating URL data between applications |
US7103666B2 (en) | 2001-01-12 | 2006-09-05 | Siemens Medical Solutions Health Services Corporation | System and user interface supporting concurrent application operation and interoperability |
US7127608B2 (en) * | 2001-01-12 | 2006-10-24 | Siemens Medical Solutions Health Services Corporation | System and user interface supporting URL processing and concurrent application operation |
US7334031B2 (en) * | 2001-01-12 | 2008-02-19 | Siemens Medical Solutions Health Services Corporation | System and user interface supporting processing and activity management for concurrently operating applications |
CN1659847B (en) * | 2002-06-11 | 2011-09-07 | 美国西门子医疗解决公司 | System and method for supporting concurrent applications interoperability |
DE10227560A1 (en) * | 2002-06-20 | 2004-01-22 | Siemens Ag | Processing methods for data that are combined into several data records by several applications |
EP1563665A2 (en) * | 2002-11-18 | 2005-08-17 | Hipaat Inc. | A method and system for access control |
US7577743B2 (en) * | 2003-08-01 | 2009-08-18 | Sentillion, Inc. | Methods and apparatus for performing context management in a networked environment |
US7660845B2 (en) * | 2003-08-01 | 2010-02-09 | Sentillion, Inc. | Methods and apparatus for verifying context participants in a context management system in a networked environment |
US7269830B2 (en) * | 2003-09-16 | 2007-09-11 | Sun Microsystems, Inc. | Methods and hardware for safe memory allocation in arbitrary program environments |
CN1853148A (en) * | 2003-09-17 | 2006-10-25 | 西门子医疗健康服务公司 | A processing device security management and configuration system and user interface |
US8078990B2 (en) | 2006-02-01 | 2011-12-13 | Research In Motion Limited | Secure device sharing |
US7840683B2 (en) * | 2006-08-31 | 2010-11-23 | Sap Ag | Systems and methods of migrating sessions between computer systems |
US8959192B1 (en) * | 2009-12-15 | 2015-02-17 | Emc Corporation | User-context management |
US8954554B2 (en) | 2010-07-09 | 2015-02-10 | General Electric Company | Systems and methods for transferring remote context |
US8914247B2 (en) | 2011-08-01 | 2014-12-16 | General Electric Company | Systems and methods to monitor the operation of a power generation system |
US8650308B2 (en) | 2011-09-30 | 2014-02-11 | General Electric Company | Methods and apparatus for client-side context managers |
US8914485B2 (en) * | 2011-09-30 | 2014-12-16 | General Electric Company | Methods and apparatus for in-process client-side context managers |
US9256462B2 (en) | 2012-02-17 | 2016-02-09 | Microsoft Technology Licensing, Llc | Contextually interacting with applications |
US10223156B2 (en) | 2013-06-09 | 2019-03-05 | Apple Inc. | Initiating background updates based on user activity |
US9432796B2 (en) | 2014-05-30 | 2016-08-30 | Apple Inc. | Dynamic adjustment of mobile device based on peer event data |
US10594835B2 (en) * | 2015-06-05 | 2020-03-17 | Apple Inc. | Efficient context monitoring |
Citations (16)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5491817A (en) * | 1993-05-25 | 1996-02-13 | Bell Communications Research Inc. | Linking system and method for accessing directory information about an object in one context when information in another context is known |
US5664109A (en) * | 1995-06-07 | 1997-09-02 | E-Systems, Inc. | Method for extracting pre-defined data items from medical service records generated by health care providers |
US5805786A (en) * | 1996-07-23 | 1998-09-08 | International Business Machines Corporation | Recovery of a name server managing membership of a domain of processors in a distributed computing environment |
US5893912A (en) * | 1997-08-13 | 1999-04-13 | International Business Machines Corporation | Thread context manager for relational databases, method and computer program product for implementing thread context management for relational databases |
US5991731A (en) * | 1997-03-03 | 1999-11-23 | University Of Florida | Method and system for interactive prescription and distribution of prescriptions in conducting clinical studies |
US5995927A (en) * | 1997-03-14 | 1999-11-30 | Lucent Technologies Inc. | Method for performing stochastic matching for use in speaker verification |
US6026428A (en) * | 1997-08-13 | 2000-02-15 | International Business Machines Corporation | Object oriented thread context manager, method and computer program product for object oriented thread context management |
US6064973A (en) * | 1998-04-17 | 2000-05-16 | Andersen Consulting Llp | Context manager and method for a virtual sales and service center |
US6119145A (en) * | 1997-02-28 | 2000-09-12 | Oracle Corporation | Multithreaded client application storing a separate context for each transaction thus allowing threads to resume transactions started by other client threads |
US6134594A (en) * | 1997-10-28 | 2000-10-17 | Microsoft Corporation | Multi-user, multiple tier distributed application architecture with single-user access control of middle tier objects |
US6205476B1 (en) * | 1998-05-05 | 2001-03-20 | International Business Machines Corporation | Client—server system with central application management allowing an administrator to configure end user applications by executing them in the context of users and groups |
US6237092B1 (en) * | 1998-05-05 | 2001-05-22 | International Business Machines Corp. | Client-server system with central application management allowing an administrator to configure user and group contexts during application configuration without relaunching the application |
US6260021B1 (en) * | 1998-06-12 | 2001-07-10 | Philips Electronics North America Corporation | Computer-based medical image distribution system and method |
US6377994B1 (en) * | 1996-04-15 | 2002-04-23 | International Business Machines Corporation | Method and apparatus for controlling server access to a resource in a client/server system |
US6401138B1 (en) * | 1996-10-28 | 2002-06-04 | Koninklijke Philips Electronics N.V. | Interface for patient context sharing and application switching |
US6510466B1 (en) * | 1998-12-14 | 2003-01-21 | International Business Machines Corporation | Methods, systems and computer program products for centralized management of application programs on a network |
Family Cites Families (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5734831A (en) | 1996-04-26 | 1998-03-31 | Sun Microsystems, Inc. | System for configuring and remotely administering a unix computer over a network |
-
2000
- 2000-04-07 US US09/545,396 patent/US6993556B1/en not_active Expired - Fee Related
-
2005
- 2005-11-03 US US11/266,502 patent/US20060075020A1/en not_active Abandoned
Patent Citations (16)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5491817A (en) * | 1993-05-25 | 1996-02-13 | Bell Communications Research Inc. | Linking system and method for accessing directory information about an object in one context when information in another context is known |
US5664109A (en) * | 1995-06-07 | 1997-09-02 | E-Systems, Inc. | Method for extracting pre-defined data items from medical service records generated by health care providers |
US6377994B1 (en) * | 1996-04-15 | 2002-04-23 | International Business Machines Corporation | Method and apparatus for controlling server access to a resource in a client/server system |
US5805786A (en) * | 1996-07-23 | 1998-09-08 | International Business Machines Corporation | Recovery of a name server managing membership of a domain of processors in a distributed computing environment |
US6401138B1 (en) * | 1996-10-28 | 2002-06-04 | Koninklijke Philips Electronics N.V. | Interface for patient context sharing and application switching |
US6119145A (en) * | 1997-02-28 | 2000-09-12 | Oracle Corporation | Multithreaded client application storing a separate context for each transaction thus allowing threads to resume transactions started by other client threads |
US5991731A (en) * | 1997-03-03 | 1999-11-23 | University Of Florida | Method and system for interactive prescription and distribution of prescriptions in conducting clinical studies |
US5995927A (en) * | 1997-03-14 | 1999-11-30 | Lucent Technologies Inc. | Method for performing stochastic matching for use in speaker verification |
US6026428A (en) * | 1997-08-13 | 2000-02-15 | International Business Machines Corporation | Object oriented thread context manager, method and computer program product for object oriented thread context management |
US5893912A (en) * | 1997-08-13 | 1999-04-13 | International Business Machines Corporation | Thread context manager for relational databases, method and computer program product for implementing thread context management for relational databases |
US6134594A (en) * | 1997-10-28 | 2000-10-17 | Microsoft Corporation | Multi-user, multiple tier distributed application architecture with single-user access control of middle tier objects |
US6064973A (en) * | 1998-04-17 | 2000-05-16 | Andersen Consulting Llp | Context manager and method for a virtual sales and service center |
US6205476B1 (en) * | 1998-05-05 | 2001-03-20 | International Business Machines Corporation | Client—server system with central application management allowing an administrator to configure end user applications by executing them in the context of users and groups |
US6237092B1 (en) * | 1998-05-05 | 2001-05-22 | International Business Machines Corp. | Client-server system with central application management allowing an administrator to configure user and group contexts during application configuration without relaunching the application |
US6260021B1 (en) * | 1998-06-12 | 2001-07-10 | Philips Electronics North America Corporation | Computer-based medical image distribution system and method |
US6510466B1 (en) * | 1998-12-14 | 2003-01-21 | International Business Machines Corporation | Methods, systems and computer program products for centralized management of application programs on a network |
Cited By (17)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7962551B2 (en) | 2001-09-29 | 2011-06-14 | Siebel Systems, Inc. | Method, apparatus, and system for immediate posting of changes in a client server environment |
US20050177587A1 (en) * | 2001-09-29 | 2005-08-11 | Anil Mukundan | Method, apparatus, and system for immediate posting of changes in a client server environment |
US8359335B2 (en) | 2001-09-29 | 2013-01-22 | Siebel Systems, Inc. | Computing system and method to implicitly commit unsaved data for a world wide web application |
US20050131925A1 (en) * | 2001-09-29 | 2005-06-16 | John Coker | Computing system and method to implicitly commit unsaved data for a world wide Web application |
US7885996B2 (en) | 2001-09-29 | 2011-02-08 | Siebel Systems, Inc. | Method, apparatus, and system for implementing notifications in a framework to support web-based applications |
US8146097B2 (en) | 2001-09-29 | 2012-03-27 | Siebel Systems, Inc. | Method, apparatus, and system for implementing view caching in a framework to support web-based applications |
US7953760B2 (en) * | 2001-09-29 | 2011-05-31 | Siebel Systems, Inc. | Computing system and method to implicitly commit unsaved data for a world wide web application |
US20050137908A1 (en) * | 2003-12-23 | 2005-06-23 | Sentillion Inc. | Methods and apparatus for externally controlling a software application to create new application behavior |
US7711758B1 (en) * | 2006-04-06 | 2010-05-04 | American Megatrends, Inc. | Method, apparatus, and computer-readable medium for storing character strings in a human interface infrastructure database |
US8176467B2 (en) | 2006-07-25 | 2012-05-08 | Harris Corporation | Computer program generation system and method thereof |
US20080028366A1 (en) * | 2006-07-25 | 2008-01-31 | Carefx Corporation | Computer program generation system and method thereof |
US7962899B2 (en) | 2006-12-01 | 2011-06-14 | Harris Corporation | System for monitoring a target application and method thereof |
US20080172669A1 (en) * | 2007-01-12 | 2008-07-17 | Carefx Corporation | System capable of executing workflows on target applications and method thereof |
US20110055912A1 (en) * | 2009-08-25 | 2011-03-03 | Sentillion, Inc. | Methods and apparatus for enabling context sharing |
US8528066B2 (en) | 2009-08-25 | 2013-09-03 | Microsoft Corporation | Methods and apparatus for enabling context sharing |
US20130111372A1 (en) * | 2011-10-31 | 2013-05-02 | General Electric Company | Preference management methods and apparatus |
USD735225S1 (en) | 2013-01-03 | 2015-07-28 | Par8O, Inc. | Display screen of a computing device with graphical user interface |
Also Published As
Publication number | Publication date |
---|---|
US6993556B1 (en) | 2006-01-31 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US6993556B1 (en) | Context administrator | |
US9213513B2 (en) | Maintaining synchronization of virtual machine image differences across server and host computers | |
US9392078B2 (en) | Remote network access via virtual machine | |
US7415509B1 (en) | Operations architectures for netcentric computing systems | |
US20030154413A1 (en) | Information processing device, information processing system, authentication method, storage medium and program | |
US5706349A (en) | Authenticating remote users in a distributed environment | |
US7143437B2 (en) | System and user interface for managing user access to network compatible applications | |
US7849498B2 (en) | System and user interface supporting context sharing between concurrently operating applications | |
US8539346B2 (en) | Associating annotations with document families | |
US7103666B2 (en) | System and user interface supporting concurrent application operation and interoperability | |
CN100437530C (en) | Method and system for providing secure access to private networks with client redirection | |
US6226746B1 (en) | Stack-based system and method to combine security requirements of methods | |
US20080222694A1 (en) | System, server, and program for access right management | |
JP2002529008A (en) | Apparatus and method for managing key material in disparate cryptographic assets | |
US20070276696A1 (en) | Multi-agent distributed environment for a hierarchical medical environment | |
WO2005020021A2 (en) | Information system supporting customizable user interfaces and process flows | |
US20040034707A1 (en) | System and user interface supporting multiple different concurrent application interoperability methods | |
US7346648B1 (en) | Context management server appliance | |
Lang et al. | Developing secure distributed systems with CORBA | |
WO2000059286A2 (en) | Method and system for administrating context | |
JP2001256188A (en) | User registration method, user registration information transfer computer and computer readable recording medium having program recorded thereon | |
EP1224536B1 (en) | Context management server appliance | |
CN1148662C (en) | Trade system with intensified safety control function | |
Flanagan et al. | Clinical communication among health providers and systems using Web tools. | |
Ultes-Nitsche et al. | Secure access to medical data over the Internet |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
STCB | Information on status: application discontinuation |
Free format text: ABANDONED -- FAILURE TO RESPOND TO AN OFFICE ACTION |
|
AS | Assignment |
Owner name: MICROSOFT TECHNOLOGY LICENSING, LLC, WASHINGTON Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:MICROSOFT CORPORATION;REEL/FRAME:034766/0509 Effective date: 20141014 |