Abstract: A system and method for policy-based advertising. According to an embodiment, an advertisement server receives a request for advertising content from a user computer over a network, the advertising content associated with an advertising policy specifying one or more usage conditions to be met by a user of the user computer in connection with the advertising content in order for the user to qualify for a promotional consideration, provides to the user computer over the network, in response to the request for the advertising content, the advertising content and one or more constraints to be enforced by a content player on the user computer in accordance with the advertising policy, receives from the user computer metering data reflecting usage of the advertising content on the user computer, and determines whether the one or more advertising policy usage conditions have been met based on the received metering data.

Abstract: The invention provides a method for managing access to a network resource on a network from a mobile device, the method including the steps of intercepting a data stream from the mobile device attempting to access the network resource, extracting information from the intercepted data stream relating to at least one of the mobile device or a user of the mobile device, accessing at least one of enterprise service based information and third party information regarding at least one of the mobile device or the user of the mobile device, determining whether the mobile device is authorized to access the network resource, preparing an access decision that specifies whether the mobile device is authorized to access the network resource, and storing the access decision in a database on the network.

Abstract: A system, method and computer program product are provided for heuristically identifying protocols during network analysis utilizing a network analyzer. First provided is a sequencing and reassembly (SAR) engine module for sequencing and/or re-assembling network communications. Coupled to the engine module is a plurality of protocol interpreter modules for interpreting protocols associated with the network communications. At least one of the protocol interpreter modules is adapted for heuristically identifying protocols associated with the network communications.

Abstract: An apparatus for offering embolic protection is provided that includes a sponge operable to be positioned in an area of a patient who is to undergo a cardiovascular procedure. The sponge is operable to collect debris present in or proximate to the area and to allow a portion of blood flow or no blood flow associated with the area to continue while the debris is collected.

Abstract: A method is provided in one example embodiment and includes receiving a packet that is part of a flow, and identifying parameters within the packet for mapping the packet to a selected endpoint amongst a plurality of endpoints. The method further includes generating a first binding table that reflects the packet being associated with the selected endpoint, and identifying that the selected endpoint has changed state. An update message is communicated to a peer network element, the update message directing the peer network element to rebuild a peer binding table to reflect the changed state. In more specific embodiments, the binding tables include matching entries for the selected endpoint and the flow. One of the parameters can be a Signaling System Number 7 (SS7) parameter within the packet.

Abstract: In one embodiment, a method can include: receiving a request for service in a first edge proxy; applying a hash function to a source address of an endpoint; and forwarding the request to a second edge proxy in response to a first result of the hash function, or servicing the request in the first edge proxy in response to a second result of the hash function.

Abstract: On a host, host content change requests are intercepted in real-time. In a tracking mode, the change requests are logged and allowed to take effect on the host. In an enforcement mode, the change requests are logged and additionally compared against authorized change policies and a determination is made whether to allow the change to take effect or to block the changes, thereby enforcing the authorized change policies on the host. Tracking and enforcement can be done in real-time. In either mode and at any time, the logged changes can be reconciled against a set of approved change orders in order to identify classes of changes, including changes that were deployed but not approved and changes that were approved but not deployed.

Abstract: In one embodiment, a network device receives an Internet protocol (IP) registration request, such as a mobile IP registration request, from an access terminal. The network device may be a home agent that is configured to register the access terminal for IP services at the network layer. In addition to registering the access terminal at the network layer, the network device may facilitate registration at another layer, such as the application layer. In one example, registration information for the access terminal for an application layer registration, such as information needed to register for a session initiation protocol (SIP) services, is determined. The network device then facilitates registration at the application layer automatically using the registration information.

Abstract: In a tiered system of networks capable of processing distributed hash table (DHT) Put and Get messages, if a sending network of a Put or Get is at a tier below a subject tier at which a subject network receiving the message is located, the message is forwarded to networks at tiers below the subject tier. On the other hand, if the sending network is at a tier equal to or above the subject tier, the message is forwarded to all networks in the system other than the sending network.

Abstract: In one embodiment, techniques provide QoS-aware service flow mapping in an access network. A message is received from an access device at a gateway in the access network. The message includes a traffic flow specification. The traffic flow specification may include packet filter information, which is used to install a packet filter to route traffic to the access device. The gateway creates a session and associates the packet filter with it. When an incoming packet is received at the network device, the packet is matched to the packet filter. The incoming packet is then sent to the access device for the session. The traffic flow specification may also specify QoS parameters that are desired. The QoS parameters may then be applied to the packet sent to the access device. The gateway and access device may negotiate to determine a QoS to apply.

Abstract: In one embodiment, a method can include: (i) receiving an outbound packet in a network device, where the outbound packet includes a packet header; (ii) modifying the outbound packet by adding a service identifier to a cleartext portion of the packet header; (iii) when the outbound packet represents an event boundary, adding an event delimiter to the packet header; and (iv) passing the outbound packet to an encryption process for packaging and transmitting across a tunnel.

Abstract: A method is provided in one example embodiment and includes evaluating a first plurality of messages from a media server configured to receive a media stream. The first plurality of messages is indicative of an active state for the media server. The method also includes detecting an anomaly associated with a portion of the first plurality of messages. The anomaly is associated with a failure of the media server. The method can also include activating a failover media server to receive the media stream based on the anomaly, and evaluating a second plurality of messages. The second plurality of messages is indicative of a resumed active state for the media server that experienced the failure. The failover media server can be deactivated based on the resumed active state. Media metadata can be communicated from the failover media server to the media server that experienced the failure.

Abstract: A protective guard for reducing injury to a shin of a person is provided. The protective guard includes an elastomeric substrate having a pocket disposed therein. A central core is carried by the pocket of the elastomeric substrate. The central core includes a plurality of rigid plates, a first of which is joined by at least one hinge to a second of the plates.

Abstract: Particular embodiments generally relate to providing different censoring levels for audio-video streams. In one embodiment, an audio-video stream is received. Metadata including censoring information for the audio-video stream is also received. The audio-video stream and metadata may be sent by a source in separate streams. A first level of censoring associated with a first receiver is determined along with a second level of censoring for a second receiver. A first audio-video stream is generated for the first receiver with a first censor level and a second audio-video stream is generated for the second receiver with a second censor level. For example, the first audio-video stream may include censoring of faces and the second audio-video stream may be an audio-video stream without censoring or may censor some other part of the audio-video. The first audio-video stream and the second audio-video stream are then sent to the first and second receivers, respectively.

Abstract: A method and computer program product provide the capability to use UDP to send messages that include more data than can be handled by a single UDP packet. A method for performing data transfer implemented in a computer system comprises transmitting a request for data, receiving a response to the request for data comprising a portion of the requested data and an indication that additional data is available, and transmitting a request for additional data.

Abstract: A filter mechanism for unwanted e-mail messages uses a downloadable central source (1, 2) of filter rule data. User reports of received unwanted e-mail messages are relayed back to the central source of the filter data and used to automatically update that filter data. An algorithmic approach to identifying characteristics of unwanted e-mail messages may be applied based upon the preponderance of predetermined words within an e-mail message or characteristics of the addressee list. If an e-mail message is identified as suspect, but not definitely unwanted, then it may be encapsulated within a HTML document and sent to its addressee together with buttons (28) allowing the recipient to provide feedback in the form of votes as to whether or not that email message is unwanted. This recipient feedback may be used to establish a new local rule.

Abstract: In one embodiment, a method can include: (i) classifying a packet in a server load balancer (SLB) for determining if the packet is destined for a virtual Internet protocol (VIP) address hosted on the SLB; (ii) selecting a server from a group of servers representing the VIP address; (iii) changing a destination IP address of the packet from the VIP address to a real IP address of the selected server; and (iv) recirculating the packet for repeating the classifying.

Abstract: Examples of a system, method, and apparatus for encrypting and recording content are presented. When content is recorded to storage media, the content is encrypted with a content instance key. This content instance key is encrypted with the public key of a first set-top box and a duplicate of the content instance key is encrypted with the public key of other than said first set-top box. A private key corresponding with the public key of the first set-top box may be used to decrypt the content instance key, or a private key corresponding to the public key of other than the first set-top box may be used to decrypt the duplicate of the content instance key so that the encrypted content from the removable storage media may be made available in the clear.

Abstract: A system and method to generate and maintain controlled growth DAG are described. The controlled growth DAG conveys information about objects captured by a capture system.