Abstract: A system and method for supporting Service Networks in a SOA environment. In accordance with an embodiment, the principles governing the topology of computer networks can be similarly applied to the service space—from small federated Service Segments (or sub-domains), to large public federated Service Domains. At the heart of the Service Network are one or more Service Routers, that are themselves responsible for transparently bridging between federated Service Segments. The Service Routers determine where services reside in the Service Network and, based on routing information gathered through interaction with other Service Routers, Network Routers and other mechanisms, deliver service requests, using optimal routes, from a source Service Segment to the target Service Segment. Working in concert with the Service Router, an Enterprise Service Bus (ESB) can abstract the location of services, and hide the existence of the Service Network from service requestors.

Abstract: A service router for use with a service-oriented architecture environment. In accordance with an embodiment, the principles governing the topology of computer networks can be similarly applied to the service space—from small federated Service Segments (or sub-domains), to large public federated Service Domains. At the heart of the Service Network are one or more Service Routers, that are themselves responsible for transparently bridging between federated Service Segments. The Service Routers determine where services reside in the Service Network and, based on routing information gathered through interaction with other Service Routers, Network Routers and other mechanisms, deliver service requests, using optimal routes, from a source Service Segment to the target Service Segment. Working in concert with the Service Router, an Enterprise Service Bus (ESB) can abstract the location of services, and hide the existence of the Service Network from service requestors.

Abstract: A system, method and media for a service oriented architecture. This description is not intended to be a complete description of, or limit the scope of, the invention. Other features, aspects and objects of the invention can be obtained from a review of the specification, the figures and the claims.

Abstract: Novel vaccines for use against ?-hemolytic Streptococcus colonization or infection are disclosed. The vaccines contain an immunogenic amount of a variant of streptococcal C5a peptidase (SCP). Also disclosed is a method of protecting a susceptible mammal against ?-hemolytic Streptococcus colonization or infection by administering such a vaccine. Enzymatically inactive SCP, and polynucleotides encoding these SCP proteins are further disclosed.

Abstract: A pluggable architecture allows security and business logic plugins to be inserted into a security service hosted by a server, and to control access to one or more secured resources on that server, on another server within the security domain, or between security domains. The security service may act as a focal point for security enforcement, and access rights determination, and information used or determined within one login process can flow transparently and automatically to other login processes. Entitlements denote what a particular user may or may not do with a particular resource, in a particular context. Entitlements reflect not only the technical aspects of the secure environment (the permit or deny concept), but can be used to represent the business logic or functionality required by the server provider. In this way entitlements bridge the gap between a simple security platform, and a complex business policy platform.

Abstract: A system and method can detect and track targets in a scene of interest. Interframe differencing can be performed on sequential pairs of images of the scene and a Bayesian model analyzer can obtain an interframe difference density function. The interframe difference density function can be partitioned into static and mobile regimes to provide an objective function. A tracking module can construct a level set and geodesic active contours can be determined for the targets. An adaptive control can apply a spatial transformation and level set perturbation to the geodesic contours to oscillate the contours such that the level set can drop to a lower energy level. The expanded contour can be fed back for use in processing subsequent interframe differences. Target motion analysis data, such as bearing and bearing rate data, can be extracted from the geodesic active contours by applying geometric based transformations on the curve's coordinates.

Abstract: In accordance with one embodiment of the present invention, there are provided mechanisms and methods for securing access to data. These mechanisms and methods for securing access to data make it possible for systems to have improved control over accesses to information by redacting responses made by services based upon access policies. Requestors may be users, proxies or automated entities. This ability of a system to redact responses to queries or requests for services in accordance with access policies makes it possible to attain improved security in computing systems over conventional access control mechanisms that control based upon privileges for accessing a file, an account, a storage device or a machine upon which the information is stored.

Abstract: A system, method and media for dynamically redacting data based on the evaluation of one or more policies. This abstract is not intended to be a complete description of, or limit the scope of, the invention. Other features, aspects and objects of the invention can be obtained from a review of the specification, the figures and the claims.

Abstract: A system, method and media for dynamically redacting data based on the evaluation of one or more policies. This abstract is not intended to be a complete description of, or limit the scope of, the invention. Other features, aspects and objects of the invention can be obtained from a review of the specification, the figures and the claims.

Abstract: A system, method and media for dynamically redacting data based on the evaluation of one or more policies. This abstract is not intended to be a complete description of, or limit the scope of, the invention. Other features, aspects and objects of the invention can be obtained from a review of the specification, the figures and the claims.

Abstract: A barrier for diverting fish from a water flow channel (42) along which water is to flow, the barrier (45) comprising a generally planar array of fixed upright slats (46) each extending at least the entire depth of the water. The array (45) is set at an angle less than 90° to the initial flow direction, preferably even less than 30°, and each slat is set at an orientation so as to divert water into a direction other than that through the barrier; the spacing between adjacent slats measured along the array is less than 300 mm. For example the flow channel (42) may branch off from a river (40), the barrier (45) being provided at the mouth of the channel (42) so that the barrier is oriented substantially parallel to the flow in the river, and the slats (46) may be at say 60° or 30° to the initial flow direction in the river, so as to divert fish and passively-carried objects along past the barrier and on down the river. (FIG.

Abstract: In accordance with one embodiment of the present invention, there are provided mechanisms and methods for controlling access to data. These mechanisms and methods for controlling access to data make it possible for systems to have improved control over accesses to information by redacting responses made by services accessible by the system based upon a determined current access policy. This ability of a system to redact responses to queries or requests for services in accordance with an access policy makes it possible to attain improved security in computing systems over conventional access control mechanisms that control based upon access privileges to a file, an account, a storage device or a machine upon which the information is stored.

Abstract: A system, method and media for service infrastructure that enables dynamic service composition and orchestration. This description is not intended to be a complete description of, or limit the scope of, the invention. Other features, aspects and objects of the invention can be obtained from a review of the specification, the figures and the claims.

Abstract: A system, method and media for a service oriented architecture. This description is not intended to be a complete description of, or limit the scope of, the invention. Other features, aspects and objects of the invention can be obtained from a review of the specification, the figures and the claims.

Abstract: A barrier for diverting fish from a water flow channel such as an intake (12) consists of a dyke (10) enclosing the water intake, and extending at least the entire depth of the body of water. There are pipes (20) extending between opposite sides of the dyke (10), of diameter at least 800 mm (31 inches). The inlet end of each pipe (20) communicates with the body of water through one or more inlet ducts (26) of width no more than 600 mm (24 inches), this being a duct size to which the fish from the body of water have an aversion. Each inlet duct (26) may also be aligned at least 45° below the longitudinal axis of the pipe (20). The confined space, the resulting darkness, and the change in water flow direction, all have the effect of discouraging fish from entering the ducts. The number of pipes (20) should be sufficiently large that the intake velocity will be less than 150 mm/s (0.5 ft/s), to minimise entrainment or impingement of fish.

Abstract: A system, method and media for a service oriented architecture, including in one embodiment a method for configuring at least one service proxy, comprising: providing a configuration to a service bus segment, accepting a response from the service bus segment wherein the response indicates whether or not the configuration can be applied to a service bus segment that provided the response, and instructing the service bus segment to either commit the configuration or to cancel the configuration, wherein the commit instruction is provided if each accepted response indicates success. Other features, aspects and objects of the invention can be obtained from a review of the specification, the figures and the claims.

Abstract: A system, method and media for a service oriented architecture. This description is not intended to be a complete description of, or limit the scope of, the invention. Other features, aspects and objects of the invention can be obtained from a review of the specification, the figures and the claims.

Abstract: A method for adaptively authenticating a subject, said method adapted to cooperate with a security provider interface hierarchy, said method comprising the steps of providing for the implementation of an authentication interface adapted to extend and implement at least a portion of the security provider hierarchy, providing for the authentication of the subject when so directed by the authentication interface, and providing for the association of a signed principal with the subject upon the successful authentication of the subject.

Abstract: A system, method and media for a service oriented architecture, including in one embodiment, a method for configuring a service proxy, comprising configuring a transformation between a reception protocol and a transmission protocol, configuring a potential message processing path capable of processing a message that has been received with the reception protocol, providing the message for transmission to the transmission protocol, wherein the potential message processing path includes a message processing node capable of processing the message, and wherein the message processing node implements an interface and/or a protocol that is compatible with the service proxy. Other features, aspects and objects of the invention can be obtained from a review of the specification, the figures and the claims.

Abstract: Liquid computing can include using a service bus to interact with a number of heterogeneous systems.