Situation awareness system

Situation management apparatus, comprising:

• a memory, which stores a specification of a composite event as a combination of two or more predefined component events, each such component event comprising an occurrence external to a computer that is detected by the computer, and which stores a definition of a rule, which causes a reaction to be invoked upon an occurrence of the composite event subject to a given condition;
• and
• a processor, which is coupled to read the specification and the rule from the memory, and which is configured to receive at least first and second instances of the component events and, when the at least first and second instances of the component events are received before invoking the reaction, to evaluate the first instance subject to the condition, so as to determine whether the first instance can satisfy the rule, before evaluating the second condition, thus to determine that the composite event has occurred and invoke the reaction responsive thereto.

Situation management apparatus, comprising:

• a memory, which stores a specification of a lifespan, having an initiation associated with an occurrence of an initiator event and a termination associated with an occurrence of a terminator event, the initiator and terminator events comprising occurrences external to a computer that are detected by the computer, together with a condition attached to at least one of the initiator and terminator events, such that at least one of the initiation and the termination of the lifespan takes place subject to the condition, and which stores a definition of a rule, which causes a reaction to be invoked upon an occurrence of an invoking event during the lifespan;
• and
• a processor, which is coupled to read the specification, condition and rule from the memory, and which is configured to receive event instances, including at least one instance of each of the initiator event, the invoking event and the terminator event, and to evaluate the instances of the events subject to the condition so as to determine that the invoking event has occurred during the lifespan and invoke the reaction response thereto.

Situation management apparatus, comprising:

• a memory, which stores a specification of a lifespan, defined by an initiator event and a terminator event, the initiator and terminator events comprising occurrences external to a computer that are detected by the computer, and which stores a definition of a rule, which causes a reaction to be invoked upon the occurrence of an interim event during the lifespan;
• and
• a processor, which is coupled to read the specification and the definition from the memory, and which is configured to receive multiple instances of the initiator event before the terminator event has occurred and to open multiple instances of the lifespan, responsive to the multiple instances of the initiator event, and further to receive an instance of the interim event and to evaluate the instance of the interim event with respect to at least two of the multiple instances of the lifespan, so as to determine that the invoking event has occurred during at least one of the instances of the lifespan and invoke the reaction responsive thereto.

A computer software product, comprising program instructions stored in a computer-readable medium, which instructions, when read by a computer, cause the computer to read a specification of a composite event as a combination of two or more predefined component events, each such component event comprising an occurrence external to the computer that is detected by the computer, and to read a definition of a rule, which indicates a reaction to be invoked upon an occurrence of the composite event subject to a given condition, and which instructions further cause the computer, when it receives at least first and second instances of the component events before invoking the reaction, to evaluate the first instance subject to the condition, so as to determine whether the first instance can satisfy the rule, before evaluating the second condition, and responsive to evaluating the first instance subject to the condition, to determine that the composite event has occurred and to invoke the reaction responsive thereto.

A computer software product, comprising program instructions stored in a computer-readable medium, which instructions, when read by a computer, cause the computer to read a specification of a lifespan, having an initiation associated with an occurrence of an initiator event and a termination associated with an occurrence of a terminator event, the initiator and terminator events comprising occurrences external to the computer that are detected by the computer, and further to read a condition attached to at least one of the initiator and terminator events, such that at least one of the initiation and the termination of the lifespan is to take place subject to the condition, and also to read a definition of a rule, which indicates a reaction to be invoked upon an occurrence of an invoking event during the lifespan, and which instructions further cause the computer, when it receives event instances including at least one instance of each of the initiator event, invoking event and terminator event, to evaluate the instances of the events subject to the condition so as to determine that the invoking event has occurred during the lifespan and to invoke the reaction responsive thereto.

A computer software product, comprising program instructions stored in a computer-readable medium, which instructions, when read by a computer, cause the computer to read a specification of a lifespan, defined by an initiator event and a terminator event, the initiator and terminator events comprising occurrences external to the computer that are detected by the computer, and to read a definition of a rule, which causes a reaction to be invoked upon the occurrence of an interim event during the lifespan, and which instructions further cause the computer, when it receives multiple instances of the initiator event before the terminator event has occurred, and further receives an instance of the interim event, to open multiple instances of the lifespan, responsive to the multiple instances of the initiator event, and to evaluate the instance of the interim event with respect to at least two of the multiple instances of the lifespan, so as to determine that the invoking event has occurred during at least one of the instances of the lifespan and to invoke the reaction responsive thereto.