Abstract: Resource restrictions are associated with a user identifier. A resource restriction agent receives operating system calls related for resources and provides resource request data to a resource agent. The resource agent determines whether the resource is restricted based on the resource request data and resource restriction data and generates access data based on the determination. The resource restriction agent grants or denies the system call based on the access data.

Abstract: Some embodiments provide a method for defining a selection of text in an unstructured document that includes a number of glyphs. The method identifies associated sets of glyphs and a reading order that specifies a flow of reading through the glyphs. The method displays the document. The method receives a start point and end point for a selection of text within the displayed document. The method defines a selection of text from the start point to the end point by using the identified sets of glyphs and intended flow of reading.

Abstract: Some embodiments provide a method for automated configuration of a set of resources for hosting a virtual machine at a particular node in a hosting system. The hosting system includes several nodes for hosting several virtual machines. The method, at a first virtual machine operating using a first set of resources of the particular node, receives a configuration for a second virtual machine to be hosted on a second set of resources of the particular node. The method, from the first virtual machine, accesses the second set of resources to partition a file system for storing the second virtual machine. The method modifies the file system to configure the second virtual machine as specified by the configuration.

Abstract: A configurable integrated circuit (“IC”) that includes several configurable tiles, each of which has a set of configurable logic circuits and a set of configurable routing circuits for routing signals between configurable logic circuits. The configurable IC provides a set of associated configurable logic circuits for performing a particular portion of a larger arithmetic operation. The configurable IC provides a carry circuit for generating a carry out signal for the particular portion of the larger arithmetic operation. A configurable storage element is for configurably storing the carry out signal and for providing the stored carry out signal to the carry circuit for performing a subsequent portion of the larger arithmetic operation. The configurable IC provides a configurable interconnect/storage element for configurably routing a carry signal from a first carry chain to a second carry chain and for storing the routed carry signal.

Abstract: Some embodiments provide an IC with configuration context switchers. The IC includes several configurable circuits, each of which configurably performs one of several operations at any given time, based on the configuration data set that it receives at that time. The IC includes several storage circuits for storing several configuration data sets for each of the configurable circuits. The IC also includes a context switching interconnect circuit for switchably connecting the configurable circuit to different sets of storage circuits to receive different sets of configuration data sets. The context switcher includes one or more stages for re-timing the data coming from the configuration storage elements. The stages can include interconnect circuitry or storage circuitry. Some embodiments build one of the stages in the configuration data storage elements. Some embodiments encode the configuration data bits and hence utilize a decoder in the context switcher to decode the encoded configuration data.

Abstract: A method of determining the location of a mobile device is provided. The method receives a signal with a known radio transmission pattern at the mobile device from each of several transmitting devices. The method correlates each received signal with a corresponding signal that has a same known radio transmission pattern to determine the time the signal traveled between the corresponding transmitting device and the mobile device. The method determines the location of the mobile device based on the time the signal travelled between the corresponding transmitting device and the mobile device. In some embodiments, determining the location of the mobile device does not require calculating a distance between the mobile device and any of the transmitting devices. In some embodiments determining the location of the mobile device includes solving a function that is dependent on the time the signals traveled between each corresponding transmitting device and the mobile device.

Abstract: Embodiments of the present invention include a wireless access point that acquires and processes radio frequency identification (RFID) information. The wireless access point may be coupled to a network of RFID readers over a wireless network. The RFID readers may read a plurality of RFID tags and transmit information to one or more readers. The readers may, in turn, transmit the RFID information to a wireless access point. The wireless access point may include a middleware layer for performing a variety of RFID data processing functions. In one embodiment, the wireless RFID reader network may be used to improve positioning of readers and tags, and may include a GPS system or position assisted GPS system at the reader and/or tag level.

Abstract: Some embodiments of the invention provide a content-distribution system for distributing content under a variety of different basis. For instance, in some embodiments, the content-distribution system distributes device-restricted content and device-unrestricted content. Device-restricted content is content that can only be played on devices that the system associates with the particular user. Device-unrestricted content is content that can be played on any device without any restrictions. However, for at least one operation or service other than playback, device-unrestricted content has to be authenticated before this operation or service can be performed on the content. In some embodiments, the system facilitates this authentication by specifying a verification parameter for a piece of device-unrestricted content.

Abstract: Some embodiments of the invention provide an apparatus that (1) delivers a fusion member between two vertebral bodies after at least a portion of the fibrocartilaginous disc between the vertebral bodies has been removed, and (2) affixes the fusion member to the vertebral bodies. In some embodiments, the apparatus includes (1) a fusion member that is delivered and positioned between the vertebral bodies, (2) a delivery mechanism that delivers and positions the fusion member between the vertebral bodies, and (3) an anchoring member that affixes the fusion member to the vertebral bodies.

Abstract: Some embodiments provide a method that provides a display area for displaying an image that includes several of edges. The method provides a border drawing tool that in response to cursor movement across the image displays a search window about the cursor. The search window specifies a region to be searched to identify edges for use in defining a border for the image. In some embodiments, the size of the search window varies based on the speed of the cursor. The search window is a square box in some embodiments and a circle in other embodiments. The search window is centered at the cursor in some embodiments. In some embodiments, the display area is also for displaying the defined border over the image.

Abstract: Some embodiments of the invention provide an integrated circuit (IC) with configurable input/output (I/O) circuits for optimally operating with two or more interfaces. Some embodiments optimally operate over the two or more interfaces by supporting a particular voltage for each interface. Also, some embodiments optimally operate over two or more interfaces by supporting a particular frequency for each supported voltage whereby supporting a particular frequency involves producing sufficient current drive at each voltage to support the particular frequency.

Abstract: Some embodiments provide a system and method that secures access to data objects of an enterprise that includes multiple data objects and multiple user applications that access data attributes of the data objects. In some embodiments, access is provided by secure resources that (1) filter a set of the data objects using a user attribute to identify a subset of data attributes of the data objects and (2) performing a query by identifying the secure resources accessible by the user based on the particular user attribute and retrieving data attributes from the secure resources according to the query.

Abstract: Some embodiments provide an IC with configuration context switchers. The IC includes several configurable circuits, each of which configurably performs one of several operations at any given time, based on the configuration data set that it receives at that time. The IC includes several storage circuits for storing several configuration data sets for each of the configurable circuits. The IC also includes a context switching interconnect circuit for switchably connecting the configurable circuit to different sets of storage circuits to receive different sets of configuration data sets. The context switcher includes one or more stages for re-timing the data coming from the configuration storage elements. The stages can include interconnect circuitry or storage circuitry. Some embodiments build one of the stages in the configuration data storage elements. Some embodiments encode the configuration data bits and hence utilize a decoder in the context switcher to decode the encoded configuration data.

Abstract: Some embodiments of the invention provide a method for encoding a video signal that is formed by a series of successive images. Each image includes several sections, and each section has a set of image values. To encode a particular section of a particular image, the method initially partitions the particular section into several sub-sections. For each of at least two particular sub-sections, the method then computes a statistical parameter regarding the image values of the particular sub-section. The method compares the computed statistical parameters, and based on the comparison, selects an encoding technique from a set of encoding techniques to encode the particular section. In some embodiments, the set of encoding schemes includes a first scheme that encodes the selected section without reference to any other section of any other image, and a second scheme that encodes the selected section by reference to at least one other section.

Abstract: An RFID system includes an RFID tag, an RFID reader, and a server. The RFID tag communicates to the server via encrypted information. The information may be encrypted with synchronized encryption keys. In this manner, the reader need not decrypt the information from the RFID tag. The effectiveness of malicious readers is thereby reduced, resulting in improved RFID tag security.

Abstract: A graphical user interface for performing color correction and methods for implementing the color correction are disclosed. The graphical user interface allows a user to adjust the colorspace of the pixels in the image. In one embodiment, a color adjustment pad allows the user to push the pixels from a particular luminance level a desired magnitude towards a desired hue. Pixels from other luminance levels are affected proportionally. The graphical user interface further allows a user to adjust the luminance of the pixels in the image. A luminance adjustment slider allows the user to adjust the luminance of pixels from a selected luminance level by a relative amount. Pixels from other luminance levels have their luminance are affected in a manner proportional to a difference between the selected luminance level value and the luminance value of the other pixel.

Abstract: Some embodiments use scanning devices to characterize radio signals received at a number of locations within a geographical area of interest. The signal characteristics along with the location information associated with the characteristics are stored in a centralized reference database. A mobile device characterizes signals it receives at a certain location and compares the characteristics with the signal characteristics stored in the reference database to obtain accurate location information of the certain location.

Abstract: Some embodiments of the invention disclose an apparatus for achieving rapid mechanical fusion between two adjacent vertebral bodies by positioning a fusion member with one or more channels between the two vertebral bodies. Once the fusion member properly positioned, one or more needles are passed through the fusion member's channels and advanced into the marrow space of the adjacent vertebral bodies. Each needle has a lumen for receiving adhesive material and supplying said material to the marrow space of the adjacent vertebral bodies. The adhesive material is for adhesively bonding the needle to the adjacent vertebral bodies. In some embodiments, a needle also has various surface contours along its shaft, including angled teeth and backfacing ridges.

Abstract: Some embodiments of the invention provide a computer system for processing an audio track. This system includes at least on DSP for processing the audio track. It also includes an application for editing the audio track. To process audio data in a first interval of the audio track, the application first asks and obtains from the DSP an impulse response parameter related to the DSP's processing of audio data. From the received impulse response parameter, the application identifies a second audio track interval that is before the first interval. To process audio data in the first interval, the application then directs the DSP to process audio data within the first and second intervals.

Abstract: The invention relates to a grid synchronizer for connecting an AC output of a power converter to the AC grid mains. In one aspect the invention provides a grid synchronizer comprising an inverter controller to control an AC output of the inverter, the controller including a receiver to receive grid data from a grid sensor location remote from said inverter. In another aspect we describe techniques for rapid removal of charge from a control terminal of a power switching device such as a MOSFET, IGBT or Thyristor using a particular driver circuit.