Abstract: In a system providing for user access of secure resources upon user authentication by a remote authentication server, a successful user authentication is saved locally for use when the authentication server is not available. The successful user authentication returns an authenticated credential which is stored on the local client utilizing a security method such as Public Key Infrastructure which prevents tampering with the credential. If a gateway machine provides connectivity between the client and the authentication server, the credential is also stored on the gateway.

Abstract: Solutions which address a growing and compelling need recognized in connection with rendering VOIP systems on laptops, or even on other mobile devices, even more versatile and user-friendly so as to even better replicate the advantages of cell phones. Broadly contemplated herein two modes of network access and two modes of user interface, which modes can be combined in any way as deemed suitable or appropriate. Preferably, a commonality between the contemplated network access and user interface modes is the use of a low-powered secondary processor, a secondary operating system, and non volatile storage applications which could be networking applications (e.g., an Always On subsystem).

Abstract: Arrangements for employing a system BIOS (basic input/output system) to handle email during a suspended state (such as an “S3” state as will be better understood herebelow). Preferably, the BIOS is employed to “jump” between two suspended images such that, e.g., two more powerful OS's can be employed to manage the mail function.

Abstract: A technique for providing a software patch to an associated computer system includes receiving, at a wireless communication device, a communication. Next, it is determined, at the wireless communication device, whether the communication is associated with a software patch available for the associated computer system. When the communication is associated with the software patch, a notification is sent from the wireless communication device to the associated computer system that the software patch is available.

Abstract: Arrangements for managing displays of ultra-mobile devices (UMD's). Automatically or manually, a small-mode interface on a UMD screen, wherein one application window is visible, is switched to a large-mode interface.

Abstract: A method for enticing computer users to return to an electronic commerce portal is disclosed. In response to a user registering to a merchant server for the first time, a unique number is associated with the user. Hardware information is then obtained from a computer utilized by the user. A digital certificate is generated by encrypting the unique number along with the obtained hardware information. The digital certificate is subsequently sent to the user computer for generating a unique customer number to be displayed on a web page of the user computer. On a periodic basis, the merchant server sends a master number to the user computer to be displayed on a web page of the user computer. In response to a notification of the master number matches the unique customer number on the user computer, a prize claiming process can be initiated.

Abstract: A system and method for concurrent WLAN and WPAN wireless modes from a single device is presented. A client uses a Wi-Fi device's infrastructure mode to communicate in a WLAN environment and, during idle WLAN times, uses the Wi-Fi device's adhoc mode to communicate in a WPAN environment. The Wi-Fi device uses a watchdog timer to switch between infrastructure mode and adhoc mode. When the client's Wi-Fi device switches to infrastructure mode, the client's Wi-Fi device uses an infrastructure register and an infrastructure device driver to transfer data over the WLAN environment. Likewise, when the client's Wi-Fi device switches to adhoc mode, the client's Wi-Fi device uses an adhoc register and an adhoc device driver to transfer data over the WLAN environment. The client uses a code shim to act as a virtual device driver at times when either the infrastructure device driver or the adhoc device driver is inactive.

Abstract: The loss of a computer's primary O.S. password, BIOS password, or HDD password (or even an application password) is sensed by a secondary O.S. based on a number of failed log on attempts to the affected component. The password can be reset by having the secondary O.S. generate an intermediate password automatically, verify user authorization, and then make the intermediate password available to, e.g., the primary O.S., so that the affected component can be accessed and its password reset without help desk personnel intervention.

Abstract: The loss of a computer's primary O.S. password, BIOS password, or HDD password (or even an application password) is sensed by a secondary O.S. based on a number of failed log on attempts to the affected component. The password can be reset by having the secondary O.S. generate an intermediate password automatically, verify user authorization, and then make the intermediate password available to, e.g., the primary O.S., so that the affected component can be accessed and its password reset without help desk personnel intervention.

Abstract: In a system providing for user access of secure resources upon user authentication by a remote authentication server, a successful user authentication is saved locally for use when the authentication server is not available. The successful user authentication returns an authenticated credential which is stored on the local client utilizing a security method such as Public Key Infrastructure which prevents tampering with the credential. If a gateway machine provides connectivity between the client and the authentication server, the credential is also stored on the gateway.

Abstract: A method, computer program product and system for restoring previously un-backed up data during a system restore. A computing system may include a locked partition in its storage medium to store an alternate operating system and backed-up files. The alternate operating system may determine which files have been modified since the most recent backup and run a virus scan on those modified files. The alternate operating system may copy the modified files with no detected viruses as well as those modified files with a detected virus but cleaned by the virus scan. The backup files in the locked partition that have been modified since the most recent backup operation may be replaced with these uncorrupted modified files. In this manner, the system may be able to recover files since the most recent backup while ensuring at least in part that the restored files do not contain any viruses.

Abstract: A method for providing an authentication of a user of a computer system in a network is disclosed. The method comprises capturing biometric data of a user; encrypting and signing the biometric data with a private key and sending the encrypted and signed data to a central server in the network. The method further comprises accepting and verifying credentials associated with the signed and encrypted data from the server utilizing the public key from the server. The method further comprises installing the credentials into the computer if the credentials are verified. In a method and system in accordance with the present invention, a user can walk up to any client within an enterprise and have their locally captured biometric input authenticated at a central server. The user can then have their individual credentials securely imported to the local client for subsequent use during that time period, without needing any additional identification or memory token such as a smartcard.

Abstract: In a system providing for user access of secure resources upon user authentication by a remote authentication server, a successful user authentication is saved locally for use when the authentication server is not available. The successful user authentication returns an authenticated credential which is stored on the local client utilizing a security method such as Public Key Infrastructure which prevents tampering with the credential. If a gateway machine provides connectivity between the client and the authentication server, the credential is also stored on the gateway.

Abstract: An autonomic system for selective administration isolation for more secure remote management in a computer network is disclosed. The aspects include isolating administrative access to managed client systems in a computer network via a data center, and utilizing the data center to control remote initiation of services in the managed client systems by an administrative system. Through the present invention, peer-to-peer management is avoided through the inclusion of a trusted third party in the form of a data center. User data privacy can be enforced and system configuration can be limited to administrator control, which are both accomplished under the enforcement of the data center. These and other advantages will become readily apparent from the following detailed description and accompanying drawings.

Abstract: Methods, systems and programs for partitioning an RGB gamma ramp frame buffer of a workstation into groupings of bit planes to isolate for independent generation the images of multiple objects displayed on a common video screen. According to a preferred practice, groups of bit planes are masked while others are written with scaled and off-set data suitable to represent shaded three-dimensional images. A matching partition of the color palettes in the digital to analog converters ensures consistency in the translation from digital frame buffer data to analog red-green-blue (RGB) color signals. The images as stored in the frame buffer can be arranged in any order of overlay priority. Retention of static image data in a partition reduces the graphics processor load by eliminating the need for regenerating the static component of a complex animation, thereby faciliting real-time motion or user interaction. Losses in color bandwidth resolution are substantially offset through the use of dithering techniques.

Abstract: An apparatus for processing high level instructions including a plurality of processing units, means for generating a plurality of instructions to perform said high level instructions, and means for dynamically organizing said generated instructions into at least one group, each group including at least one instruction to be processed by one of said processing units. In addition, a method of processing high level instructions by a plurality of processing units including generating a plurality of instructions to perform said high level instructions, and dynamically organizing said generated instructions into at least one group, each group including at least one instruction to be processed by one of said processing units.

Abstract: A system for providing a time-based interrupt signal to a processor for executing a real time interrupt event with reduced interrupt latency, involves: a first programmable counter, which is capable of interrupting the processor by generating an interrupt signal on a regular time period based on the decrementing of an initial count value loaded therein, which value is re-loaded in the counter when the count is exhausted and the interrupt signal is generated; one or more second programmable counters, also having initial count values loaded therein that are decremented, and each of which, if the count is exhausted before that of the first counter, will not allow certain types of instructions or events, respectively associated with each second counter, to execute, if the execution of such instructions or events would cause an unwanted latency in the interrupt caused by the interrupt signal from the first counter.

Abstract: Apparatus and methods for selectively controlling by graphics environment window the characteristics of an overlay common to multiple-windows while operating within the context of a conventional RAMDAC overlay control architecture. Window specific overlay control is accomplished by concatenating the window, masking and overlay data as an address to a mapping memory. The bit content of the mapping memory is controlled directly by the general purpose processor to selectively refine the relationship between the concatenated input as an address and the mapping memory output as the state conveyed to the overlay control of the RAMDAC. A common overlay is thus selectively modifiable by window.

Abstract: A method for managing a data transfer between a first device and an allocated portion of common memory including the steps of receiving a reallocation request of the allocated portion of common memory from a second device, receiving a veto of the requested reallocation from the first device, and delaying the reallocation request. In addition, a method for transferring data between a peripheral device and a common memory in a virtual memory system including the steps of instructing the peripheral device to transfer data with an allocated portion of the common memory, requesting a reallocation of the allocated portion of the common memory, and receiving a veto of the requested reallocation from the peripheral device in response to the instructed data transfer.

Abstract: Apparatus and methods for selectively controlling by window the number of overlay planes, the number of overlay palettes, and the overlay/underlay plane masks in a graphics video display system. A logic/multiplex control translates overlay and underlay data patterns from a multiple plane VRAM (Video Random Access Memory), referenced to the graphics system frame buffer, into window specific patterns. The window related translation is conveyed to conventional RAMDACs (Random Access Memory Digital-to-Analog Converters) for raster scan synchronized digital-to-analog conversion. The translation as provided by the controller is responsive to data selectively and dynamically written into a random access memory, thus providing translation of overlay/underlay data into window distinct and selective overlay/underlay palette functions.