Abstract: A data model in which a set provides an abstraction that isolates the computation of membership from the details of how an enforcement point determines access (e.g., based on claims, based on security group membership etc). Set operations (e.g., intersection, union, inverse) can then be used across the sets. The architecture utilizes workflow on set transitions such that when an object such as a user enters the scope of one of these sets, notification can occur, such that inadvertent changes which lead to separation-of-duties violations can be detected quickly. The sets can also be used to define entitlements for enforcement of claims-based access control in a cross-organization deployment (e.g., to a cloud-hosted application).

Abstract: A computer monitoring system uses a set of parameterized models to gather information about monitored devices. The models include scripts for gathering information, as well as type validation and data validation functions. The parameters within the model are used to generate user interface prompts and to populate discovery scripts as well as data validation scripts. In some cases, the models may include localization settings that may customize the user interface and validation output for different languages. A processing engine may generate a user interface from the parameters defined in the models, customize the scripts from the user input, and cause the scripts to be executed. The data gathered by the scripts may be analyzed using type validation and data validation.

Abstract: The phase relationship between two clock signals in an integrated circuit (IC) is determined by transforming each of the clock signals into a data word, where bit transitions in the data word represent signal transitions in the clock signal, and comparing the two data words. For example, in an IC having a de-serializer as part of its input/output logic, the clocks are sequentially multiplexed into the de-serializer, which transforms the clocks into parallel-format data words. The resulting words corresponding to the first and second clock signals can then be compared to determine clock signal transition differences and thus the phase relationship between the corresponding clocks signals.

Abstract: Techniques are described herein for managing access to services (e.g., Web sites, applications, results of executable operations, etc.) that are provided by relying parties. A relying party is a processing system that relies on an identity provider to authenticate an entity (e.g., user or software application) that attempts to access a service provided by the relying party. The identity provider is a processing system that is configured to perform authentication and authorization operations with respect to the entity. The identity provider generates a claim that indicates access rights of the entity with respect to the relying party. The identity provider provides the claim to the relying party via a user system or via a direct or indirect link that bypasses the user system. The relying party determines whether to allow the entity to access the service based on the access rights indicated by the claim.

Abstract: A connecting arrangement for articles of furniture, such as seating furniture and/or tables of the type used in an office environment. A pair of articles of furniture are positioned adjacent to one another, each including a downwardly-opening channel along a lower portion of its side. An elongate connector spans the distance between the channels and has opposite side portions in respective engagement with the channels to connect the furniture articles together in a manner wherein the connector may be visually hidden in use. If one, or both, of the connected articles of furniture includes upholstered sides, the upholstery is compressed upon abutting engagement of the articles of furniture to generate a separation force which is resisted by the connector and aids in maintaining the connector in secure engagement with the channels of the adjacent articles of furniture.

Abstract: A connecting arrangement for articles of furniture, such as seating furniture and/or tables of the type used in an office environment. A pair of articles of furniture are positioned adjacent to one another, each including a downwardly-opening channel along a lower portion of its side. An elongate connector spans the distance between the channels and has opposite side portions in respective engagement with the channels to connect the furniture articles together in a manner wherein the connector may be visually hidden in use. If one, or both, of the connected articles of furniture includes upholstered sides, the upholstery is compressed upon abutting engagement of the articles of furniture to generate a separation force which is resisted by the connector and aids in maintaining the connector in secure engagement with the channels of the adjacent articles of furniture.

Abstract: The phase relationship between two clock signals in an integrated circuit (IC) is determined by transforming each of the clock signals into a data word, where bit transitions in the data word represent signal transitions in the clock signal, and comparing the two data words. For example, in an IC having a de-serializer as part of its input/output logic, the clocks are sequentially multiplexed into the de-serializer, which transforms the clocks into parallel-format data words. The resulting words corresponding to the first and second clock signals can then be compared to determine clock signal transition differences and thus the phase relationship between the corresponding clocks signals.

Abstract: A system comprising a simulation coordinator, a sensor, and an intrusion detection management component to provide training of intrusion detection administrators by generating simulated notifications of network traffic associated with intrusions.

Abstract: A system which provides additional controls in access management for single sign on deployments, in order to restrict the range of resources in the deployment which could be accessed by an attacker, without unnecessarily burdening the user for their typical and legitimate use of these resources via single sign on. A misuse protection agent (12) intercepts access requests before they reach the target resource, and will check the status of the user for this resource in the database (28).

Abstract: A registry service is described which uses a partitioned publisher assertion recording and accessing scheme. A publisher assertion regarding a relationship between entities (e.g., business or other types of entities) is encoded within a directory information tree in a memory. The publisher assertion includes publisher assertion part nodes corresponding to entity nodes in the directory information tree. The publisher assertion is complete if all publisher assertion parts corresponding to entities in the relationship are present in the directory information tree. The service may include a network including directory servers and registry servers. The publisher assertions are manipulated by authorized publishers and accessed by users using a variety of techniques, the operations of which are performed by such parties and/or are encoded upon computer-readable media.

Abstract: A method and apparatus for processing a signal is presented. An accumulator receives an input signal and generates an accumulated value. A hysteresis controller sets an adjustable upper and lower limit. The upper and lower limits are compared with the accumulated value in a comparator. The comparator outputs a result, which is fed back into the hysteresis controller through a feedback loop. Once the input signal stays within the upper and lower limits, a test signal is considered within specification. When the input signal is outside of the boundary limits, a corrupt test signal is detected.

Abstract: A method and apparatus for optimizing data transfer between launch and capture domains driven by plesiochronous launch and capture clocks transmits a beacon of representational data from the launch domain to the capture domain and captures the beacon in the capture domain using the capture clock. The captured beacon is monitored for an anomaly. If an anomaly is not detected, a phase of the capture clock is adjusted and the beacon is transmitted, captured and monitored until an anomaly is detected. If an anomaly is detected, the phase of the capture clock is optimized relative to the captured beacon.

Abstract: A method and apparatus is presented for performing an n-dimensional gradient search. A state machine is implemented to manage the initial location of the search, increment a counter used to count a search, generate locations (i.e., settings) of the search and the errors associated with the search. The state machine manages an n-dimensional counter. In one embodiment, a tertiary counter is implemented. The tertiary counter performs a three-state count and then rolls over to the beginning count at the end of the three states. The three-state count corresponds to a location of a search, a location of the search minus one, and a location of the search plus one.

Abstract: A cable management device traps and provides support for at least one electrical cable end connector which is located below an existing cable management hole through a work surface. In one embodiment, the cable management device includes a plate defining at least one aperture adapted to releasably receive an electrical connector. The plate is mountable directly to an underside of the work surface across a portion of the existing cable management hole such that the electrical connector is accessible from the top side of the work surface. Another embodiment of the cable management device includes a cylindrical sleeve adapted for mounting in a standard size cable management hole in a work surface, the sleeve including a lip protruding outwardly at a first end, the lip retaining the sleeve in the cable management hole, and at least one aperture defined by the sleeve, the aperture adapted to releasably receive an electrical connector.

Abstract: A method and apparatus for testing a serial connection is presented. A serial data stream is transmitted from a sending device to a receiving device. The serial data stream is generated using sending device timing information and input data. A receiver in the receiving device recovers both the timing information and the input data and then inputs them back into a transmitter located in the receiving device. The transmitter in the receiving device then generates a second serial data stream based on the recovered input data and the sending device timing information. A receiver in the sending device receives the second serial data stream and outputs the sending device timing information and input data to a FIFO buffer, for alignment of the input data. Since the input data and timing information are generated based on a sending device timing information, the FIFO can provide a signal for testing by performing phase alignment on the data. There is no need to re-synchronize the data in the sending device.