Abstract: Disclosed is a self-cleansing intrusion tolerance-domain name systems system comprising at least three DNS servers, at least four storage systems accessible by the DNS servers, a communications link, a message transfer mechanism, and a self-cleansing mechanism. The storage systems include at least three online storage systems and at least one offline storage system. The communications link can connect the DNS servers with the storage systems, as well as connect the DNS servers with a local area network, which can connect the DNS servers with an external network. The message transfer mechanism can rotate the DNS servers into a plurality of roles, including a primary role, a secondary role, a designated role, and a self-cleansing role. The self-cleansing mechanism can be used to perform the self-cleansing role.

Abstract: An embodiment for providing a secure virtual browsing environment includes creating a virtual browsing environment with a virtualized operating system sharing an operating system kernel of a supporting operating system and executing the browser application within the virtual browsing environment. Another embodiment includes receiving a website selection within a browser application, determining if the website selection corresponds to a secure bookmark, and creating a second virtual browsing environment and executing the browser application within the second virtual browsing environment to access the website selection when the website selection corresponds to a website specified as a secure bookmark.

Abstract: Disclosed is a self-cleansing intrusion tolerance-domain name systems system comprising at least three DNS servers, at least four storage systems accessible by the DNS servers, a communications link, a message transfer mechanism, and a self-cleansing mechanism. The storage systems include at least three online storage systems and at least one offline storage system. The communications link can connect the DNS servers with the storage systems, as well as connect the DNS servers with a local area network, which can connect the DNS servers with an external network. The message transfer mechanism can rotate the DNS servers into a plurality of roles, including a primary role, a secondary role, a designated role, and a self-cleansing role. The self-cleansing mechanism can be used to perform the self-cleansing role.

Abstract: A system and method for processing a client request using single use virtual servers. The method: receives the client request from a network; passes the client request to a new virtual incoming client request server; passes an application request from the virtual incoming client request server to a new virtual application server; destroys the virtual incoming client request server; passes an application result from the virtual application server to a new virtual outgoing client result server; destroys the new virtual application server; passes the application result from the new virtual outgoing client request server to the network; and destroys the virtual outgoing client request server.

Abstract: Processor(s) for detecting malicious software. A hardware virtual machine monitor (HVMM) operates under a host OS. Container(s) initialized with network application template(s)operate under a guest OS VM. A detection module operates under the guest OS VM includes a trigger detection module, a logging module and a container command module. The trigger detection module monitors activity on container(s) for a trigger event. The logging module writes activity report(s) in response to trigger event(s). The container command module issues command(s) in response to trigger event(s). The command(s) include a container start, stop and revert commands. A virtual machine control console operates under the host OS and starts/stops the HVMM. A container control module operates under the guest OSVM and controls container(s) in response to the command(s). The server communication module sends activity report(s) to a central collection network appliance that maintains a repository of activities for infected devices.

Abstract: Disclosed is a self-cleansing intrusion tolerance-domain name systems system comprising at least three DNS servers, at least four storage systems accessible by the DNS servers, a communications link, a message transfer mechanism, and a self-cleansing mechanism. The storage systems include at least three online storage systems and at least one offline storage system. The communications link can connect the DNS servers with the storage systems, as well as connect the DNS servers with a local area network, which can connect the DNS servers with an external network. The message transfer mechanism can rotate the DNS servers into a plurality of roles, including a primary role, a secondary role, a designated role, and a self-cleansing role. The self-cleansing mechanism can be used to perform the self-cleansing role.

Abstract: Disclosed is a self-cleansing system comprising at least two subsystems including an active subsystem and at least one available inactive subsystem. At least two of the subsystems may be connected to each other by a communications link and connected to an external network through a local network. An arbitration mechanism is capable of designating one of the at least one available inactive subsystem to be a designated active system. An active subsystem and a designated active subsystem may share an IP address, but only the active subsystem utilizes the IP address to output information to the external network. A transfer mechanism capable of deactivating the active subsystem and then activating a designated active system may be initiated by a transfer criterion. A self-cleansing mechanism may then cleanse the deactivated subsystem.

Abstract: An on-demand disposable virtual work system that includes: a virtual machine monitor to host virtual machines, a virtual machine pool manager, a host operating system, a host program permissions list, and a request handler module. The virtual machine pool manager manages virtual machine resources. The host operating system interfaces with a user and virtual machines created with an image of a reference operating system. The host program permissions list may be a black list and/or a white list used to indicate allowable programs. The request handler module allows execution of the program if the program is allowable. If the program is not allowable, the host request handler module: denies program execution and urges a virtual machine specified by the virtual machine pool manager to execute the program. The virtual machine is terminated when the program closes.

Abstract: An attack resistant continuous network service trustworthiness controller comprising: state estimation module(s), response selection module(s), actuation module(s), and client dispatcher communication module(s) for maintaining the availability and integrity of online server(s). The state estimation module(s) are configured to generate state estimate(s) for online server(s) using behavior data obtained using sensor module(s). The response selection module(s) are configured to determine corrective action(s) to maintain the availability and integrity of online server(s) when state estimate(s) indicate that the integrity of an online server(s) is compromised. The actuation module(s) are configured to activate actuator(s) based upon the corrective action(s). Client dispatcher communication module(s) are configured to communicate online server availability information to a client dispatcher.

Abstract: A perpetual lottery system and method for use by a plurality of players is provided wherein each play participates in the game indefinitely. The perpetual lottery provides a lotto-type lottery wherein a play registered on the payment of a single price is eligible for an indefinite number of subsequent draws or for as long as the game lasts. Furthermore, a lottery system and method is provided having a plurality of plays in a draw period followed by a draw in which each play's chance of winning is dependent upon a wager corresponding to the play.

Abstract: A faucet assembly includes a faucet body, a valve seat, a control shaft, a sealing member, and a control handle. Thus, the control handle is located under the faucet body to facilitate a user operating the control handle, so that the control handle is operated easily and conveniently. In addition, the control handle is located under the faucet body, so that the user can operate the control handle to stop the water flow after use easily and conveniently, thereby saving the water resource.

Abstract: Disclosed is a self-cleansing intrusion tolerance-domain name systems system comprising at least three DNS servers, at least four storage systems accessible by the DNS servers, a communications link, a message transfer mechanism, and a self-cleansing mechanism. The storage systems include at least three online storage systems and at least one offline storage system. The communications link can connect the DNS servers with the storage systems, as well as connect the DNS servers with a local area network, which can connect the DNS servers with an external network. The message transfer mechanism can rotate the DNS servers into a plurality of roles, including a primary role, a secondary role, a designated role, and a self-cleansing role. The self-cleansing mechanism can be used to perform the self-cleansing role.

Abstract: A lottery system and method is disclosed which promotes the continued play of a participant by rewarding them, on a pro-rated basis, for their loyalty. There are two aspects to the invention: (i) the tracking of a player's behaviour; and (ii) calculating a lottery payout structure based on the player's behaviour. In general, players are recognized for their loyalty or patronage, with those demonstrating superior loyalty being awarded a greater amount of a loyalty prize pot. In the event that several players select the winning number in a given lottery, the main prize would be equally divided amongst them. However, for those particularly loyal customers, additional moneys would be paid out from a loyalty reward pot. A mathematical formula in the form of a decay function incorporating the recency, frequency and intensity of a player's lottery ticket purchases would establish whether or not a player qualifies for a loyalty reward payout from the loyalty reward pot as well as the amount to be awarded.

Abstract: Disclosed is an insoluble support that can be used, for example, for producing replicates of sample nucleic acids. The support includes a plurality of attached oligonucleotides that include a prokaryotic promoter sequence and a target annealing sequence 3? of the promote. The proximal end of the promoter sequence is spaced from the insoluble support by a distance greater than 10 nm.

Abstract: Disclosed is a method of producing replicates of sample nucleic acids. The method can include providing an insoluble support comprising attached oligonucleotides, annealing sample nucleic acids to the attached oligonucleotides; constructing template nucleic acids by extending the attached oligonucleotides using a polymerase; and transcribing the template nucleic acids to produce RNA replicates of the sample nucleic acids The attached oligonucleotides comprise a promoter sequence and a target annealing sequence, and (2) the proximal end of the promoter sequence is spaced from the insoluble support by a predetermined distance.

Abstract: Disclosed is a method of producing replicates of sample nucleic acids. The method can include providing an insoluble support comprising attached oligonucleotides, annealing sample nucleic acids to the attached oligonucleotides; constructing template nucleic acids by extending the attached oligonucleotides using a polymerase; and transcribing the template nucleic acids to produce RNA replicates of the sample nucleic acids The attached oligonucleotides comprise a promoter sequence and a target annealing sequence, and (2) the proximal end of the promoter sequence is spaced from the insoluble support by a predetermined distance.

Abstract: Immobilized nucleotide primers of this invention include a modified nucleotide tethered to a support substrate through a linking group. In particular, the modified nucleotide is constructed such that the C-5′ end of the nucleotide is tetherable to the linking group and the protected C-3′ end is available for further controlled modification, e.g., addition of other nucleotides in specific sequences to the immobilized nucleotide primer. Additionally, the linking group is of sufficient length to allow the immobilized nucleotide primer to be used to synthesize and screen arrays of oligonucleotides, e.g., enzymatic C-3′ primer extension.

Abstract: Immobilized nucleotide primers of this invention include a modified nucleotide tethered to a support substrate through a linking group. In particular, the modified nucleotide is constructed such that the C-5′ end of the nucleotide is tetherable to the linking group and the protected C-3′ end is available for further controlled modification, e.g., addition of other nucleotides in specific sequences to the immobilized nucleotide primer. Additionally, the linking group is of sufficient length to allow the immobilized nucleotide primer to be used to synthesize and screen arrays of oligonucleotides, e.g., enzymatic C-3′ primer extension.

Abstract: Immobilized nucleotide primers of this invention include a modified nucleotide tethered to a support substrate through a linking group. In particular, the modified nucleotide is constructed such that the C-5′ end of the nucleotide is tetherable to the linking group and the protected C-3′ end is available for further controlled modification, e.g., addition of other nucleotides in specific sequences to the immobilized nucleotide primer. Additionally, the linking group is of sufficient length to allow the immobilized nucleotide primer to be used to synthesize and screen arrays of oligonucleotides, e.g., enzymatic C-3′ primer extension.

Abstract: Immobilized nucleotide primers of this invention include a modified nucleotide tethered to a support substrate through a linking group. In particular, the modified nucleotide is constructed such that the C-5′ end of the nucleotide is tetherable to the linking group and the protected C-3′ end is available for further controlled modification, e.g., addition of other nucleotides in specific sequences to the immobilized nucleotide primer. Additionally, the linking group is of sufficient length to allow the immobilized nucleotide primer to be used to synthesize and screen arrays of oligonucleotides, e.g., enzymatic C-3′ primer extension.