Abstract: The invention relates to a method of executing a secure application in an NFC device, the method comprising steps during which: a contactless link is established between first and second NFC devices, the first NFC device transmits by the contactless link an identifier of a secure processor of the first NFC device, the second NFC device transmits by the contactless link an application identifier, the secure processor transmits by the contactless link first authentication data allowing the authentication of the secure processor of the first NFC device, the second NFC device transmits to an application server the first authentication data, the application server transmits to an authentication server the first authentication data and second authentication data) to authenticate the application and authorizes the two NFC devices to execute the application only if the secure processor and the application are authenticated.

Abstract: Disclosed are a system and method of integrating an on-demand compute environment into a local compute environment. The method includes receiving a request from an administrator to integrate an on-demand compute environment into a local compute environment and, in response to the request, automatically integrating local compute environment information with on-demand compute environment information to make available resources from the on-demand compute environment to requestors of resources in the local compute environment.

Abstract: Some embodiments of the invention relate to a method of managing a distributed compression system comprised of a plurality of compression modules.

Abstract: An image based email system associates images with different electronic mail (email) senders. The email system receives email messages from different email senders and then looks through either website member profiles or user contacts for associated images. Any located image is displayed in a list of recent senders. This allows the email user to associate recently received email messages with particular sender images or photographs. The images can also be used in a list of favorite or most frequent email senders. Other features of the email system extract information from received email messages to better identify the email senders. These and other features of the email system provide more intuitive and easier to perform email operations.

Abstract: A server apparatus for establishing communication with a plurality of input/output devices via a network. The apparatus includes: a management unit configured to manage a communication session with the input/output devices; a storage unit configured to store information of the input/output devices in association with group information thereof; an execution unit configured to execute an application program; a communication unit configured to receive an operation instruction for the application program and to transmit to the input/output devices a processing result of the application program; a determination unit configured to determine whether the processing result requires connection of the input/output devices to an external server; and a message transmission unit configured to generate a message including an instruction to connect to the external server, when the determination unit determines that the processing results requires such a connection. The message includes the group information.

Abstract: Systems and methods are presented to prevent denial of service attacks through the use of an interleaved pseudo-random sequence that is generated from two or more pseudo-random codes. Portions of the pseudo-random codes are interleaved with each other using a pre-determined instruction pattern. A message incorporating the interleaved sequence is transmitted to a receiver, which identifies the interleaved bit sequence in the message and, if the interleaved bit sequence is identified in the message, allows access to the service.

Abstract: The present invention extends to methods, systems, and computer program products for group based allocation of terminal server network bandwidth. Output packets are classified into groups based on classification criteria. Output packets for each group are queue into a corresponding queue. During a queue flush cycle each queue containing data is flushed for an essentially equal amount of time. Flushing each queue essentially equally reduces the negative impact that can otherwise result when a subset of sessions (or even a single session) request(s) a disproportional share of terminal server network bandwidth. Responsiveness can be further increased by distributing the essentially equal amount for each queue across the queue flush cycle.

Abstract: A computer-implemented method of alerting users to collaborative activity can include receiving a user input selecting at least one of a plurality of data types to be included within a notification, wherein the plurality of data types correspond to collaborative session data exchanged during a collaborative session among a plurality of users. The method can include buffering collaborative session data during the collaborative session and responsive to detecting an occurrence of an awareness triggering event, outputting the notification comprising at least a portion of the buffered collaborative session data corresponding to the selected at least one of a plurality of data types.

Abstract: A method of maintaining the integrity of software stored in memory, the method comprising: storing an indicator associated with the memory; calculating a reference value from the stored indicator; storing the reference value; modifying the indicator when the software in the memory is modified; storing the modified indicator; recalculating the reference value from the modified indicator; storing the recalculated reference value; and verifying the integrity of the software by: retrieving the modified indicator; calculating an expected value from the modified indicator; and comparing the expected value with the recalculated reference value. Preferably the integrity of the software is verified without calculating an expected value from the software. The reference and expected values are typically calculated in accordance with a secret key.

Abstract: Disclosed is an on-demand system and method for managing resources in an on-demand compute environment from a local compute environment. The method includes receiving information at a local resource broker that is associated with resources within an on-demand compute environment, based on the information, communicating instructions from the local resource broker to the on-demand compute environment and modifying resources associated with the on-demand compute environment based on the instructions.

Abstract: The invention provides a service providing apparatus and method and an information processing apparatus and method as well as a program storage medium by which a plurality of users can communicate with each other simultaneously. A plurality of client computers are connected to a shared server over a network and log in a common chat room of a chat system. If a user of one of those of the client computers which are in a group requests for reproduction of a predetermined tune, then the instruction is transmitted to the shared server over the network. The shared server receives the instruction transmitted thereto and reads out music data of the request stored in a music database therein, and transmits the music data to the client computers of the group.

Abstract: A method of configuring an on-demand secure connection between a control site and a client network is described. The method involves establishing a first tunnel between the control site and the edge device of the client network. The method then involves automatically detecting a sub-network coupled to the edge device, and configuring the edge device to allow a second tunnel to be established within the first tunnel, where the second tunnel connects the control site to the detected sub-network.

Abstract: A communication method in which an operation, such as authentication, required when a new communication terminal participates in a mesh network is carried out in a more efficient manner. A second communication terminal that has already established an adjacent communication link with at least two first communication terminals, out of a plurality of communication terminals, distributes an adjacent terminal list including terminal identifiers of the first communication terminals along with a temporal key generated by the second communication terminal. One of the first communication terminals that received the adjacent terminal list and the temporal key distributes adjacent registration information, which is generated using a second temporal key.

Abstract: A client includes a card selector, and receives a security policy from a relying party. If the client does not have an information card that can satisfy the security policy, the client can define a virtual information card, either from the security policy or by augmenting an existing information card. The client can also use a local security policy that controls how and when a virtual information card is defined. The virtual information card can then be used to generate a security token to satisfy the security policy.

Abstract: A method and structure for detecting whether the packets received by the switch are low latency packets or high bandwidth packets and routing detected low latency packets to a first one of a pair of switching structures and for high bandwidth packets to a second one of the pair of switching structures. The switch includes an output section for detecting whether a low latency packet is being received during transmission of a high bandwidth packet and, under such detected condition interrupting the transmission of the high bandwidth packet, transmitting the low latency packet, and then transmitting a remaining portion of the high bandwidth packet. The switch inserts delimiters at the start of transmission of the low latency packet and an end of transmission of the low latency packet. The transmission of the low latency packet commences immediately upon detection of such low latency packet.

Abstract: Embodiments of the present disclosure provide systems and methods for publishing content over a network. Briefly described, in architecture, one embodiment of the system, among others, can be implemented as follows. The system includes an instant messaging module configured to generate a request for creation of a base uniform resource locator from an instant messaging server and configured to receive the base uniform resource locator. The instant messaging module is further configured to form an enhanced uniform resource locator by adding information to the base uniform resource locator to identify content stored on a local machine hosting the instant messaging module. The system also includes a local web server module configured to deliver the content stored on the local machine identified by the enhanced uniform resource locator, where the local machine hosts the local web server module. Other systems and methods are also provided.

Abstract: Apparatus, systems, and methods may operate to create a virtual image, define usage privileges associated with the virtual image in a description file, and associate a coded summary of an encrypted version of the description file with the virtual image. Other activities may include receiving a request to access the virtual image, authenticating a transmitted version of the coded summary to determine validity of the encrypted version, and processing the encrypted version to determine whether the request to access will be granted. Additional apparatus, systems, and methods are disclosed.

Abstract: A method for managing distributed computer data stream acceleration devices is provided that utilizes distributed acceleration devices on nodes within the computing system to process inquiries by programs executing on the computing system. The available nodes and available acceleration devices in the computing system are identified. In addition, a plurality of virtual acceleration device definitions is created. Each virtual acceleration device definition includes attributes used to configure at least one of the plurality of identified acceleration devices. When an inquiry containing an identification of computing system resources to be used in processing the inquiry is received, at least one virtual acceleration device definition that is capable of configuring an acceleration device in accordance with the computing system resources identified by the inquiry is identified.

Abstract: An image based email system associates images with different electronic mail (email) senders. The email system receives email messages from different email senders and then looks through either website member profiles or user contacts for associated images. Any located image is displayed in a list of recent senders. This allows the email user to associate recently received email messages with particular sender images or photographs. The images can also be used in a list of favorite or most frequent email senders. Other features of the email system extract information from received email messages to better identify the email senders. These and other features of the email system provide more intuitive and easier to perform email operations.

Abstract: A method and apparatus for maintaining data coherency in a computer system having a plurality of nodes forms a directory by grouping the nodes into a plurality of hierarchical groups of two or more levels. The method and apparatus also 1) set the directory to have data relating to a first set of groups within a first level, and 2) determine if a requesting node requesting data is a member of one of the first set of groups. The directory then is set to have data relating to a second group of nodes if the requesting node is determined not to be a member of the first set of groups within the first level. The second group of nodes is in a higher level than the first level.