Abstract: A method for remote attestation includes establishing, using a cryptographic protocol, a communication session between a first computing device and a second computing device. The communication session includes communications encrypted by an ephemeral session key. The method includes receiving, at the first communication device via the communication session, from the second computing device, an attestation request requesting the first computing device to provide an attestation report. The method includes generating, by the first computing device, the attestation report based on the ephemeral session key and sending, using the communication session, the attestation report to the second computing device.

Abstract: A method for remote attestation includes establishing, using a cryptographic protocol, a communication session between a first computing device and a second computing device. The communication session includes communications encrypted by an ephemeral session key. The method includes receiving, at the first communication device via the communication session, from the second computing device, an attestation request requesting the first computing device to provide an attestation report. The method includes generating, by the first computing device, the attestation report based on the ephemeral session key and sending, using the communication session, the attestation report to the second computing device.

Abstract: A method for remote attestation includes establishing, using a cryptographic protocol, a communication session between a first computing device and a second computing device. The communication session includes communications encrypted by an ephemeral session key. The method includes receiving, at the first communication device via the communication session, from the second computing device, an attestation request requesting the first computing device to provide an attestation report. The method includes generating, by the first computing device, the attestation report based on the ephemeral session key and sending, using the communication session, the attestation report to the second computing device.

Abstract: A system and method for configuring client access to a network includes at a first port, accessing a first server on a first local area network associated with the first port. An authorized local area network other than the first local area network is determined to which an authorized connection can be properly made based on information in a client request. The first port is assigned to the authorized local area network. Communications are handled with a new client configuration in the authorized local area network.

Abstract: A method (and system) for managing a distributed-memory parallel application running on multiple servers, includes dynamically moving a plurality of executable program components, where each of the plurality of executable program components are running on one of a plurality of virtual machines, using migration of the virtual machines between physical servers. The load balancing is operated based on a workload of each of the virtual machines and servers, where a virtual machine, or a plurality of virtual machines, are transferred to balance the workload between each of the servers.

Abstract: An information processing system comprises first and second levels of a storage hierarchy, wherein accessing information in the first level consumes more energy than accessing information in the second level; and a processor for writing information to the second level of storage based on energy-conserving criteria. The energy-conserving criteria comprise a set of heuristics, including system state information and user preferences.

Abstract: A method and system for managing electric power consumption by elements of a distributed computing system comprises: determining one or more system metrics that relate to electric power usage as consumed by elements of a configured distributed environment; determining a system value in response to the one or more system metrics, the value determined according to one or more value criteria; and, while in-progress applications are being run in the computing environment, evaluating one or more potential changes in the distributed computing environment and determining an alternate system value based on the changes; and, re-configuring elements of the distributed computing environment dynamically while the computing environment is operating, in accordance with a determined alternate system value. The re-configuring elements step is in accordance with a potential change operative to alter electric power consumption.

Abstract: A method and system for optimizing SOAP messages combines mechanisms of accelerating the composition of SOAP messages, reducing SOAP parsing overheads, and reducing SOAP message sizes by leveraging elements of the previous two techniques and policies for configuring these mechanisms. A byte-level partial representation of a SOAP message may be constructed upon its first use and each new instantiation of the same message is composed from this representation and the encoded parameters or return values. SOAP message parsing may be accelerated using a cache of associations. Each entry may associate the byte-level encoding of an XML tag with its component in the internal data representation of the received message. These two techniques can be used independently on one or both SOAP endpoints.

Abstract: To conserve energy, components in mobile devices normally have to transition less frequently between “active” and “sleep” modes, and to sleep for longer intervals. In accordance with at least one presently preferred embodiment of the present invention, there is broadly contemplated herein an approach to reduce energy consumption by using HTTP proxies to shape incoming WLAN traffic. Proxies contemplated herein use techniques specific to the HTTP payload to compensate for any negative impact that shaping may have. Thus, there is described herein the architecture of a “PowerAware Streaming Proxy” (PASP), built on a PowerAware x-Proxy (PAxP) framework. PASP preferably uses RTSP/RTP semantics to effectively schedule media streams across the WLAN. Herein, PASP is compared with PAWP, which is a PAxP extension for web traffic, and problem areas are identified.

Abstract: A computer-implemented method for specifying the characteristics of a desired item includes specifying a plurality of items, each of which possess at least one but not all characteristics of the desired item, selecting a subset of characteristics from each of said plurality of items, combining selected subsets of characteristics into a characterization of the desired item, and validating an availability of the desired item.

Abstract: A computer program product includes instructions for causing a processor to: alert a client of the configuration of said computer program product; use a memory space for buffering the network application data destined for the client; release the network application data to the client, based on at least one occurrence of a specified condition that promotes energy savings; and purposely delay at least some of said data with an amount of time greater than zero to promote energy savings.

Abstract: A services broker provides session suspend and resume capabilities to a computer-supported multi-user session made up of associations between a plurality of participants and the services broker. The services broker includes: a memory; an input/output subsystem for transmission of session data and for communicating with the plurality of participants; a processor, operatively connected to the memory, for carrying out instructions. The instructions cause the processor to: receive a trigger event from at least one of the plurality of participants, the trigger event for resuming a suspending session; verify that the suspending session can be resumed; transmit a resume request to the plurality of participants; and re-establish associations among the plurality of participants. Additionally, the services broker will transmit a stored session state and stored session data to at least one environmental device for resuming the suspended session at the point where the suspended session ended.

Abstract: A portable device for connecting to a host information processing platform includes: a digital information storage medium storing an operating system image, secure data, applications, and system state of an owner of the portable device, wherein the medium is in read only mode until a set of tests are run on the host platform; and a platform validation program for: running the plurality of tests on the host computer to determine whether the host is safe, depending on the outcome of the tests, presenting the owner with a user-identifiable message, prompting the owner to enter decryption credentials, and receiving the decryption credentials. The portable device could also optionally include subsystems that provide additional functionality to the owner such as media playback, communications, and entertainment.

Abstract: A method (and system) for managing a distributed-memory parallel application running on multiple servers, includes dynamically moving a plurality of executable program components, where each of the plurality of executable program components are running on one of a plurality of virtual machines, using migration of the virtual machines between physical servers. The load balancing is operated based on a workload of each of the virtual machines and servers, where a virtual machine, or a plurality of virtual machines, are transferred to balance the workload between each of the servers.

Abstract: To conserve energy, components in mobile devices have to transition less frequently between “active” and “sleep” modes, and to sleep for longer intervals. In accordance with at least one preferred embodiment of the present invention, there is broadly contemplated herein an approach for remote discovery of wireless client and access point configurations, especially those settings associated with the power consumption of the client's wireless interface. Methods contemplated in the preferred embodiment use packet probing techniques to determine the client and access point configurations remotely. The probing techniques include sending packets to the client device, over the wireless LAN, at intervals calculated using data publicly available on the wireless LAN technology in use and results of previous packet probing measurements. Measurements from several packet probes and methods for statistical data processing are used to make a determination.

Abstract: A method and system for optimizing SOAP messages combines mechanisms of accelerating the composition of SOAP messages, reducing SOAP parsing overheads, and reducing SOAP message sizes by leveraging elements of the previous two techniques and policies for configuring these mechanisms. A byte-level partial representation of a SOAP message may be constructed upon its first use and each new instantiation of the same message is composed from this representation and the encoded parameters or return values. SOAP message parsing may be accelerated using a cache of associations. Each entry may associate the byte-level encoding of an XML tag with its component in the internal data representation of the received message. These two techniques can be used independently on one or both SOAP endpoints.

Abstract: A method for creating an annotated transcript of a presentation includes steps of: receiving an annotation stream recorded on a mobile device, wherein the annotation stream includes time stamped annotations corresponding to segments of the presentation; receiving a transcript of the presentation, wherein the transcript is time stamped; and then merging the annotation stream with the transcript of the presentation by matching the time stamps from both, for creating the annotated transcript of the presentation. A method for recording an annotation stream on a mobile device includes steps of: assigning a unique identifier to the annotation stream; creating the annotation stream, the annotation stream including annotations entered by a user of the mobile device, wherein each annotation is associated with at least one segment of the presentation; and storing the annotation stream.

Abstract: The present invention is directed to a user-level thread scheduler that employs a service that propagates at the user level, continuously as it gets updated in the kernel, the kernel-level state necessary to determine if an I/O operation would block or not. In addition, the user-level thread schedulers used systems that propagate at the user level other types of information related to the state and content of active file descriptors. Using this information, the user-level thread package determines when I/O requests can be satisfied without blocking and implements pre-defined scheduling policies.

Abstract: A services broker provides session suspend and resume capabilities to a computer-supported multi-user session made up of associations between a plurality of participants and the services broker. The services broker includes: a memory; an input/output subsystem for transmission of session data and for communicating with the plurality of participants; a processor, operatively connected to the memory, for carrying out instructions. The instructions cause the processor to: receive a trigger event from at least one of the plurality of participants, the trigger event for resuming a suspending session; verify that the suspending session can be resumed; transmit a resume request to the plurality of participants; and re-establish associations among the plurality of participants. Additionally, the services broker will transmit a stored session state and stored session data to at least one environmental device for resuming the suspended session at the point where the suspended session ended.

Abstract: A method (and system) for managing a distributed-memory parallel application running on multiple servers, includes dynamically moving a plurality of executable program components, where each of the plurality of executable program components are running on one of a plurality of virtual machines, using migration of the virtual machines between physical servers. The load balancing is operated based on a workload of each of the virtual machines and servers, where a virtual machine, or a plurality of virtual machines, are transferred to balance the workload between each of the servers.