Abstract: A Dynamic Hierarchical Address Resource Management Architecture (DHARMA) coordinates a logical hierarchy of address spaces with a virtual topology of network elements using a manageable database environment. Address spaces are apportioned into hierarchical levels in accordance with a network policy. Network elements may be represented as objects, coupled via the logical address space. Both address space hierarchy definition and virtual topology modelling may occur independent from actual network deployment. As a result, multiple address space hierarchy definitions and virtual topologies can be pre-generated and stored for selective use during network deployment. With such an arrangement, a flexible addressing architecture is provided which may advantageously be used in any network that desires dynamic network configuration.

Abstract: A rack system for an appliance is provided. The rack system includes a door link, a first coupler link, a first rack, a bracket, a second coupler link, and a second rack. The door link is attached to an appliance door. The first coupler link is attached to the door link and connected to the first rack. The bracket is attached to either the first rack or the second rack. The second coupler link is attached to the bracket at one of the sites for attachment and connected to whichever one of either the first or second racks to which the bracket is not attached. The linear movement of the first and second racks can be non-staggered or staggered depending on the attachment site of the bracket to which the second coupler link is attached.

Abstract: A method, system and apparatus for allowing media context sensitive SIP signaling exchange and call establishment while denying or challenging any other session description protocol extension dialogs which might not be desired by a user. User client media policy preferences are defined, the user media policy preferences establishing the parameters for evaluating a media session request received by a user client. The user client media policy preferences are provided to a policy enforcement point device, the policy enforcement point device evaluating the media session request received by the user client and applying the user client media policy preferences to the media session request. A user client portal is utilized to gain access to a media policy database, the media policy database providing storage for user client media policy preferences.

Abstract: A leveling leg for an appliance is provided, including a main shaft and a foot coupled to the main shaft. A recess extends at least partially into the foot and includes an opening through a bottom surface of the foot. A ball is adapted to be received within the recess. The opening substantially surrounds at least a portion of the ball and is configured to inhibit removal of the ball from the recess. In one example, the ball is adapted to be received within the recess by a snap-fit engagement with the at least one arm. In another example, a plurality of arms are at least partially disposed within the recess and cooperate at one end thereof to engage the ball at an area below a great circle of the ball to inhibit removal of the ball from the recess.

Abstract: This invention provides a method, system and apparatus for allowing media context sensitive SIP signaling exchange (such as voice) and call establishment while denying or challenging any other session description protocol (“SDP”) extension dialogs which might not be desired (such as instant messaging, video, Web broadcasting or pushing, data and/or application sharing and the like) by a user. The method and apparatus may further include defining user client media policy preferences, the user media policy preferences establishing the parameters for evaluating a media session request received by a user client, and providing the user client media policy preferences to a policy enforcement point device, the policy enforcement point device evaluating the media session request received by the user client and applying the user client media policy preferences to the media session request.

Abstract: A leveling leg for an appliance is provided, including a main shaft and a foot coupled to the main shaft. A recess extends at least partially into the foot and includes an opening through a bottom surface of the foot. A ball is adapted to be received within the recess. The opening substantially surrounds at least a portion of the ball and is configured to inhibit removal of the ball from the recess. In one example, the ball is adapted to be received within the recess by a snap-fit engagement with the at least one arm. In another example, a plurality of arms are at least partially disposed within the recess and cooperate at one end thereof to engage the ball at an area below a great circle of the ball to inhibit removal of the ball from the recess.

Abstract: A rack system for an appliance is provided. The rack system includes a door link, a first coupler link, a first rack, a bracket, a second coupler link, and a second rack. The bracket has a plurality of sites for attachment with the second coupler link. The door link is attached to an appliance door. The first coupler link is attached to the door link and connected to the first rack. The bracket is attached to either the first rack or the second rack. The second coupler link is attached to the bracket at one of the sites for attachment and connected to whichever one of either the first or second racks to which the bracket is not attached. The rack system translationally couples angular displacement of the appliance door to linear movement of the first rack and the second rack. The linear movement of the first and second racks can be non-staggered or staggered depending on the attachment site of the bracket to which the second coupler link is attached.

Abstract: The present invention advantageously provides a method, system and apparatus for allocating addresses to secure unique local networks by providing a brokered federated policy and identity management system, the brokered federated policy and identity management system having an address domain manager that allocates network addresses, the address domain manager arranged to interoperate with a network identity management module, the network identity management module providing management of identity at an application level, receiving an authorization from the brokered federated policy and identity management system, and assigning a network address to a unique local network based on the authorization from the brokered federated policy and identity management system. The method, system and apparatus may further include authenticating a user, wherein authenticating a user includes passing an assertion token to a device of the user.

Abstract: End-to-end security is established automatically for network communications. In one embodiment a first host is associated with a policy manager that determines, for the first host, whether a secure session is permissible. If the secure session is determined to be permissible then the policy manager signals to intermediate devices in order to prompt establishment of SA/DA pinholes. In an alternative embodiment a neutral policy broker determines, for both first and second hosts, whether the secure session is permissible and signals to the intermediate devices to establish the pinholes if the secure session is permissible. In another embodiment the end-to-end session includes back-to-back tunnel mode sessions linked by at least one intermediate device. The intermediate device is operative to decrypt and re-encrypt traffic in the session, and may be configured by a policy manager or policy broker.

Abstract: A method and system for transmitting packets having a first address length on a core network supporting a second address length, where the second address length is larger than the first address length by determining a length of the first address and establishing an offset to the first address such that a combined length of the offset, length of a network prefix for the second address and length of the first address equals the length of the second address. The method and system of the present invention can be implemented as an enhancement to existing network protocols such as IPv4, IPv6 and the like.

Abstract: This invention provides a method, system and apparatus for allowing media context sensitive SIP signaling exchange (such as voice) and call establishment while denying or challenging any other session description protocol (“SDP”) extension dialogs which might not be desired (such as instant messaging, video, Web broadcasting or pushing, data and/or application sharing and the like) by a user. The method and apparatus may further include defining user client media policy preferences, the user media policy preferences establishing the parameters for evaluating a media session request received by a user client, and providing the user client media policy preferences to a policy enforcement point device, the policy enforcement point device evaluating the media session request received by the user client and applying the user client media policy preferences to the media session request.

Abstract: The present invention advantageously provides a method, system and apparatus for allocating addresses to secure unique local networks by providing a brokered federated policy and identity management system, the brokered federated policy and identity management system having an address domain manager that allocates network addresses, the address domain manager arranged to interoperate with a network identity management module, the network identity management module providing management of identity at an application level, receiving an authorization from the brokered federated policy and identity management system, and assigning a network address to a unique local network based on the authorization from the brokered federated policy and identity management system. The method, system and apparatus may further include authenticating a user, wherein authenticating a user includes passing an assertion token to a device of the user.

Abstract: A method and system for transmitting packets having a first address length on a core network supporting a second address length, where the second address length is larger than the first address length by determining a length of the first address and establishing an offset to the first address such that a combined length of the offset, length of a network prefix for the second address and length of the first address equals the length of the second address. The method and system of the present invention can be implemented as an enhancement to existing network protocols such as IPv4, IPv6 and the like.

Abstract: An electrical connector within a tubular structure is disclosed which includes a pole (12) having a tubular bottom portion (15) and a tubular top portion (16). The bottom portion has a top connecting end (17) having a narrowed neck (18) with a large notch (19). The pole top portion has a bottom connecting end (21) having an internal diameter sized to receive the neck of the bottom portion. The pole top portion also has a window (22) therein. A cover plate (24) is configured to be mounted over the window. The structure also includes an electrical cord (27) which provides an electrical current to a device coupled to the pole. The electrical cord has a first portion (28) terminating with a female electrical coupler or connector (29) and a second portion terminating with a male electrical coupler (32). The male coupler or connector is configured to be received within the female coupler.

Abstract: A fan (10) in disclosed which includes a fan motor (11), a motor housing (12), a plurality of fan blades (13). The fan also includes an elongated pole (16) and a pedestal (17). The pedestal includes a main housing (18) and a lower portion (19). The main housing has a shroud (21) and a hollow spindle (22). The shroud and spindle have a coextensive central channel (23) configured to receive the elongated pole. The lower portion has a plate-like skirt (26) and a centrally positioned mounting post (28). The mounting post includes a narrower top end (29) configured to be telescopically received within the bottom end of the pole. The diameter of the skirt is much greater than the diameter of the accompanying shroud to restrict tipping of the fan due to an external force place upon it.

Abstract: Network policies are managed based at least in-part on user/entity identity information with: a state monitor operable to monitor for state change events in user/entity state and related, network state or in traffic pattern and traffic flow state; an identity manager operable to obtain and validate user credentials; and a policy manager operable in response to a state change event detected by the state monitor (either the identity manager or a defense center) to select a policy based in-part on the user identity obtained by the identity manager or security context obtained by the defense center, and to prompt application of the selected policy. The policies are indicative of user/device authorization entitlements and restrictions to utilization of certain network resources, network services or applications. Dynamic policy selection and targeted responses can be used, for example, against a user who gains network access with stolen user ID and password, and subsequently attempts malicious behavior.

Abstract: A Dynamic Hierarchical Address Resource Management Architecture (DHARMA) coordinates a logical hierarchy of address spaces with a virtual topology of network elements using a manageable database environment. Address spaces are apportioned into hierarchical levels in accordance with a network policy. Network elements may be represented as objects, coupled via the logical address space. Both address space hierarchy definition and virtual topology modelling may occur independent from actual network deployment. As a result, multiple address space hierarchy definitions and virtual topologies can be pre-generated and stored for selective use during network deployment. With such an arrangement, a flexible addressing architecture is provided which may advantageously be: used in any network that desires dynamic network configuration.

Abstract: A ceiling fan blade is disclosed that is twisted rather than flat and has a graduated dihedral. The dihedral is provided for a wider distribution of divergence of air in the space beneath the fan. The blade (10) is demarked to have three sections which include a mounting section (11) and two airflow sections (12) and (13). The two airflow sections (12) and (13) are twisted with the rate of twist from the root end to the tip end being nonuniform. The twist or ratio of the degree increase in the angle of attack over each inch in length deceases from root end to the tip end.