Abstract: Disclosed is a method of improving electronic security by establishing a path between a user and a secure transaction appliance. The secure transaction appliance receiving information destined for the user which includes a tagged portion, said tagged portion triggering the secure transaction appliance to forward the information to the computer from which the request was issued, and to seeking an electronic signature to verify the content or transaction by transmitting a watermark, tagged portion of the content, or similar electronic content. The secure trusted path providing the user with the tagged portion incorporating additional elements such as a watermark, or in some embodiments only the additional elements, upon a personalized security device associated with the user making interception or manipulation more complex and difficult.

Abstract: An obfuscated policy data encryption system and method for re-encrypting data to maintain the confidentiality and integrity of data about a user when the data is stored in a public cloud computing environment. The system and method allow a user to specify in a data-sharing policy who can obtain the data and how much of the data is available to them. This policy is obfuscated such that it is unintelligible to the cloud operator and others processing and storing the data. In some embodiments, a patient species with whom his health care data should be shared with and the encrypted health care data is stored in the cloud in an electronic medical records system. The obfuscated policy allows the electronic medial records system to dispense the health care data of the patient to those requesting the data without disclosing the details of the policy itself.

Abstract: A portlet may be selected from among one or more portlets rendered by an origin server. The origin server may have an object listening for pointer activity wherein a user event triggers selection of a portlet. The origin server, in response, may send state information of the portlet in the form of a key to a client, often operated by a user. Client may later send the key to a disjoint server, wherein the key is integrated into a portal containing services that the client subscribes to. Thus a persistent session may exist between the disjoint server and the origin server based on the user's preferences.

Abstract: Techniques for securing a coverage of a wireless system provided by a stationary or mobile node are disclosed. The node may be provided with at least one encryption key. The key may comprise an encryption function table having therein varying functions, such as time-varying physical layer functions, such as transmit power or beam shape/direction of the node. In accordance with the key, coverage associated with transmissions from the node may be varied.

Abstract: A system and method for processing an input data stream in a first data format of a plurality of first data formats to an output data stream in a second data format of a plurality of second data formats. A plurality of input connector modules receive respective input data streams and at least one input queue stores the received input data streams. A plurality of job threads is operatively connected to the at least one input queue, each job thread formatting a stored input data stream to produce an output data stream. At least one output queue stores the output data streams from the plurality of job threads. A plurality of output connector modules is operatively connected to the at least one output queue, the output connector modules supplying respective output data streams.

Abstract: An apparatus, method, system, computer program and product, which are capable of controlling an operating system message. The operating system message, generated by an operating system, is obtained. When a destination application, which has requested or may request for the operating system message is found, the operating system is converted to an application message readable to or executable by the destination application. The application message may be sent to the destination application.

Abstract: Disclosed are methods and apparatus for managing services within a computer network. In one embodiment, a message interchange network for exchanging application-level messages between services, which are located outside the message interchange network, is provided. At the message interchange network, a plurality of application-level messages, which each specify which one or more receiving services are to receive the each application-level message, are received. Each received application-level message is forward towards the one or more receiving services. Correlation information regarding each application-level message that is received into message interchange network is retained. The application-level messages are sent between pairs of the services, and the retained correlation information for each application-level message pertains to each application-level message and any other application-level messages related to the each application-level message.

Abstract: A receiving device receives messages, detects the priority levels set in the headers of the messages, and reads the first and second messages. When the receiving device receives the header of the second message during reading of the first message, it controls, in accordance with the priority levels of the first and second messages, the reading rates at which the first and second messages are read.

Abstract: A method begins with a processing module selecting one of a plurality of dispersed storage (DS) processing modules for facilitating access to a dispersed storage network (DSN) memory. The method continues with the processing module sending a DSN memory access request to the one of the plurality of DS processing modules. The method continues with the processing module selecting another one of the plurality of DS processing modules when no response is received within a given time frame or when the response to the access request does not include an access indication. The method continues with the processing module sending the DSN memory access request to the another one of the plurality of DS processing modules.

Abstract: A media streaming device which automatically senses the proximity of an auxiliary media player such as a digital picture frame or digital audio device, and automatically streams media information from the media streaming device to the auxiliary media player. Permissions can be set so that only some files are sent to the auxiliary media player, based on user specified permissions and/or based on copyright restrictions.

Abstract: An image forming apparatus for executing a processing flow including a plurality of steps, includes a determination unit which determines whether or not a processing flow to be executed includes an instruction required step that requires an instruction of a user, a selection unit which selects, when the processing flow to be executed includes the instruction required step, a notification destination of information required to display an operation window for accepting the instruction of the user, a notification control unit which notifies the notification destination selected by the selection unit of the operation window, and an execution unit which executes processing of the instruction required step according to instruction contents input via the operation window.

Abstract: Methods, devices, and systems for creating and using an interactive voice object are provided. An alternative way of providing Interactive Voice Response (IVR) capabilities to a Session Initiation Protocol (SIP) endpoint is described. More specifically, the present invention allows the SIP endpoint to have its SIP signaling controlled by an application running in a SIP application server.

Abstract: A method is disclosed for determining a whether access to host requested by a user is permitted. User identifying information is obtained using any of a variety of techniques. The method includes determining a user domain, which indicates an identity of the user's home service provider. A list of hosts is determined based on the home provider. If the requested host is in the list of hosts, then the user is allowed access to the requested host though the user is not authorized. The list of hosts may be determined by one or more attributes from an actual or implied user profile, such as a domain name.

Abstract: A method of packet security management to ensure a secure connection from one network node to another. The method includes creating a security tag for each packet in a network session, selecting one of a number of possible tag locations within the packet, inserting the security tag at that location, transmitting the tagged packets from a sending node to the receiving node, authenticating the packets' security tags at the receiving node, and dropping non-authenticated packets. The method also includes determining best possible tag locations when sending a packet and locating a security tag when receiving a packet.

Abstract: Process management techniques using a representation state transfer architecture include, for example, a method of managing a given process in a data-centric manner in a client/server environment, comprising at least one client and at least one server. In an exemplary method, the server obtains from the client at least one request associated with the given process. In response to the request obtained from the client, the server generates an entity, wherein the generated entity is represented in terms of a data model and a lifecycle model associated therewith, wherein the lifecycle model comprises states and state transitions with each transition caused by one or more activities in the given process, and wherein the given process is represented as a collection of communicating entities. The server sends a response to the at least one request to the client, wherein the response is based at least in part on the generated entity.

Abstract: A communication system includes a communication server configured to receive a request to generate a communication and receive a request to associate the communication with one or more classifications from a plurality of classifications. The system further includes a store coupled to the communication server and configured to store the communications and/or store the classification received in the association request. The classifications are associated with a request for information from a recipient of the communication. The classifications are associated with a request for information from a recipient of the communication, a request for sharing information with the recipient of the communication, and a request for action from the recipient of the communication.

Abstract: A communication network and software for its implementation that controls a mobile device based on historical user activity is provided. The mobile device communicates with a server and includes a function that is dependent on the user activity. The server senses the user activity over time and produces a histogram of that activity. The rate at which the server attempts to sense the user activity depends on the histogram. An application might change the function depending on the result of detecting the user activity and the rate at which it does so.

Abstract: A method and apparatus for processing path-based database operations is provided. According to one aspect, a path cache is maintained. For each hierarchical node that is traversed during a path-determining operation, it is determined whether a cache entry corresponding to that node is already contained in the path cache. If such a cache entry is already contained in the path cache, then the path indicated in that cache entry is used to complete the pathname for the node for which the operation is being performed. As a result, hierarchically higher nodes do not need to be traversed to complete the operation. Alternatively, if such a cache entry is not already contained in the path cache, then a cache entry for the node currently being traversed is generated and inserted into the path cache for use in subsequent path-determining operations.

Abstract: A network audio system allows AV files existing in a PC to be readily registered and music to be reproduced using a client machine. The client machine is connected to the PC and a server application and a controller application are installed in the PC. Music is reproduced using the client machine based on an AV file existing in a user folder, when the user drags and drops an icon for the AV folder to an icon for the client machine. In response to the operation, the controller application produces music piece information including the artist name and the like based the tag information of the AV file. When the music piece information is not yet registered, the server application provides the music piece information with a music piece ID for registration in the content information database. The controller application transmits a command including the ID to the client machine.

Abstract: In various embodiments, data processing apparatus, software, or machine-implemented methods can optimize NFSv3 asynchronous write requests or MSRPC calls that traverse a wide area network, for example, by receiving, from a client, a first request directed to a server across a wide area network; determining whether a related second request has been received previously; when a related second request has been received previously, sending, to the client, a first reply to the second request and forwarding the first request to the server, and otherwise forwarding the first request to the server without sending any reply to the client for the first request. Sending local replies from a WAN optimizer induces the client to send continuous requests, improving throughput, but at least one client request remains unreplied to, and one server error reply is always reported to the client, facilitating correct error processing at the client.