Abstract: Methods, apparatus, and products for stateful business application processing in an otherwise stateless service-oriented architecture (‘SOA’), the SOA including SOA services where each SOA service carrying out a processing step of the business application, where the stateful business application processing includes: configuring each service of the SOA to record state information describing the state of the service upon completion of a processing step in the business application and provide the state information to a subsequent service; and executing the business application in the SOA, including sending requests for data processing among the services, each such request including a specification of the state of the executing business application.

Abstract: A system for processing a media data stream comprises a processor and a memory. The processor is configured for determining that video processing of a media data stream reaches a lag criterion with respect to an associated audio processing of the media data stream. The processor is further configured to skip video processing of a portion of the media data stream such that video processing achieves a lead criterion with respect to the associated audio processing of the media data stream. The memory is coupled to the processor and is configured to provide the processor with instructions.

Abstract: Methods, devices, and systems for creating an intermediate layer between a SIP endpoint and a SIP service. The intermediate layer may operate to provide a greater flexibility in quickly adapting to customer requirements and/or requests of the SIP service that would, without the intermediate layer, have to wait for long release cycles and request changes directly from the SIP service. The intermediate layer provides a way of increasing the set of features provided to SIP endpoints around the SIP service without changing the SIP service itself.

Abstract: An embodiment of the present invention provides a computer implemented method for the transfer of private information of one user to another user—a primitive known as Oblivious Transfer. An output from a strong pseudorandom function generation (SPRFG) is calculated by a first user's computing module based on first and second parameters: the first parameter specifying one of two secret keys; the second parameter being a value selected within the domain of the SPRFG by the first user. The first user is prevented from reading or learning the stored two secret keys. The output is transmitted to a computer of a second user which generates first and second encrypted values that are each based on an inverse SPRFG calculation using the first and second secret keys, respectively, and corresponding private values of the second user.

Abstract: The present invention is an architecture and technology for a method for synchronizing multiple streams of time-based digital audio and video content from separate and distinct remote sources, so that when the streams are joined, they are perceived to be in unison.

Abstract: A method, apparatus, and system are directed toward configuring a dependency relationship between resources in a cluster. A dependency relationship between a dependent in a first resource group and a dependee in a second resource group is declared. The dependency relationship might include a locality based qualifier and/or a time based qualifier. The locality based qualifier includes a Local Node, Any Node, or From Resource Group Affinity relationship. The time based dependency qualifier includes a Strong dependency, Weak dependency, Online Restart dependency, or Offline Restart dependency. The declaration might be made using a graphical user interface, property list, configuration file, or the like. A candidate node on which to activate the first resource group is determined. The dependent is brought online on the candidate node based on whether an instance of the dependee is online on a node specified by the locality based qualifier.

Abstract: There is provided person oneself authenticating means for authentication of a user, which is highly secure and realizable by functions ordinarily provided by a PC, mobile phone, etc., and which is less burdensome than typical user authentication key management and authentication operations. Sound or an image is adopted as an authentication key for person oneself authentication. Authentication data is edited by combining an authentication key, which is selected by a registered user, and sound or an image that is other than the authentication key, and the authentication data is continuously reproduced in a user terminal. A time in which a user has discriminated the authentication key from the reproduced audio or video is compared with a time in which the authentication key should normally be discriminated, which is specified from the authentication data. When both times agree, the user is authenticated as a registered user.

Abstract: Recommending network object information to a user includes, for each of a plurality of network objects, a respective plurality of behavior frequencies by the user is determined; a network object among the plurality of network objects that is of interest to the user is identified, the identification being based at least in part on the respective plurality of behavior frequencies that corresponds to each of the plurality of network objects; and additional information relating to the identified network object is provided to the user.

Abstract: An apparatus, system, and method are disclosed for redundant device management. The apparatus is provided with a plurality of modules configured to functionally execute the necessary steps of receiving a communication message, determining whether an address associated with the communication message designates a local processor as a destination for the communication message, wherein the address is stored in an address field associated with the communication message, and transmitting the communication message to a remote device. These modules in the described embodiments include a transmitter module, a receiver module, and an addressing module.

Abstract: In various embodiments, the present disclosure provides a system and method for establishing a secure tunnel between a client device and a remote server utilizing multiple user identities, and in some embodiments, a client device identity, to authenticate access to the remote server.

Abstract: A data transferring system and an object tracking system. The data transferring method includes generating messages based on the data, connecting the clients to the server, generating a plurality of event trigger thread instances, each of the instances being in communication with a corresponding one of the clients and sending the messages from the server to the clients through remote events by using the corresponding event trigger thread instance to control the communication between the server and the client.

Abstract: A content distribution storage system includes: a first transmission unit configured to transmit a special content including certificate revocation list information indicating a list of at least an invalid electronic certificate to a first node group; a second transmission unit configured to transmit identification information for identifying the special content to a second node group; and a first node device.

Abstract: The server system includes a server apparatus transmitting and receiving file data based on an access request transmitted from a client apparatus; and a management apparatus managing the server apparatus, wherein the server apparatus includes a plurality of virtual server parts controlling transmission and reception of the data independently for each of the predetermined client apparatuses; a data flow configuration part configuring a data flow for each of the file data transmitted to and received by the virtual server parts based on a command from the management apparatus; and a load control part controlling a data flow for each of the file data to control load of the virtual server parts based on the data flow for each of the file data configured by the data flow configuration part.

Abstract: Architecture for a session lock and lobby feature in a distributed conferencing framework for a conferencing session. Under a lock scenario, once a user enters the session, the session can be locked to prevent other individuals from entering, even if the individuals were invited to the session. Locking can be accomplished manually by a session participant and/or automatically based on criteria. The lobby feature allows a session participant to be aware of users in the lobby and pending access to the session by providing notification and/or identification of the user attempting to gain access. The session leader can selectively allow access to the session. The architecture facilitates lock and lobby features in multiple identical, leaderless, conference servers which together form a distributed conferencing system. The lock and lobby features can employ media session protocols such as session initiation protocol (SIP) and centralized conference control protocol (C3P).

Abstract: A system and a method share an experience with media content between multiple devices for providing access to electronic program guide information and/or multimedia metadata of the media content. Users share and/or view the electronic program guide information and/or the multimedia metadata associated with the media content by transferring and/or by publishing the electronic program guide information and/or the multimedia metadata via one or more networks. Two or more participating devices establish a connection via one or more networks for a sending device to transfer the electronic program guide information and/or the multimedia metadata to one or more receiving devices via one or more networks. The electronic program guide information and/or the multimedia metadata has communications and/or comments associated with consumption of the media content.

Abstract: Disclosed are various embodiments for securing execution of page generation code supplied by customers. The page generation code may be instrumented with code that facilitates monitoring of one or more resources consumed by the page generation code. Various compile-time checks relating, for example, to code size and whether exception-handling code is present may be performed. The page generation code is executed to generate a network page in response to a request obtained from a client. One or more resource consumption limits are enforced upon the page generation code.

Abstract: Systems, methods, and other embodiments associated with key generation for networks are described. One example method includes configuring a key server with a pseudo-random function (PRF). The key server may provide keying material to gateways. The method may also include controlling the key server to generate a cryptography data structure (e.g., D-matrix) based, at least in part, on the PRF and a seed value. The method may also include controlling the key server to selectively distribute a portion of the cryptography data structure and/or data derived from the cryptography data structure to a gateway. The gateway may then encrypt communications based, at least in part, on the portion of the cryptography data structure. The method may also include selectively distributing an epoch value to members of the set of gateways that may then decrypt an encrypted communication based, at least in part, on the epoch value.

Abstract: A communication system includes a plurality of nodes, the communication system being arranged to assign each of the plurality of nodes a certificate by means of which it can authenticate itself to other nodes in the communication system and periodically distribute to the plurality of nodes an update formed by compressing a data set representing the validity of the certificates assigned to the plurality of nodes. The update is such that a node may not be able to unambiguously determine from the update whether or not a particular certificate is valid. The system further provides the plurality of nodes with a source of information about the validity of the plurality of certificates that is different from the update and by means of which a node may resolve an ambiguity in the update regarding a particular certificate's validity.

Abstract: An onboard access control system to an information system onboard an aircraft, for communication from the open domain to the avionics domain, the open end avionics domains being connected to each other through a single-directional link from the avionics domain to the open domain. The system includes: a security device including: access switches controlling access to the avionics and open domains, a controller, a module for acquisition putting data into buffer memory and transmission to the avionics domain, a data control module, an acquisition module from the open domain and putting into buffer memory, and an operator's authentication mechanism.

Abstract: A method is intended for controlling dissemination of content in a peer-to-peer mode between peers having wireless communication capacities. This method consists, each time a peer receives a content item it had requested and which is associated to a request counter, in creating at least one set of instructions intended for allowing replication of this content item by this peer, and in authorizing this peer to generate at most N replications of this content item for other peers it will meet and which does not possess it, where N is an integer value depending on the current value of this request counter and of an impatience reaction function which is representative of the mean time these peers are ready to wait for obtaining this content item.