Abstract: Mechanisms to support multiple name space aware projects are provided. Multiple roots of a project declare multiple namespacing mechanisms. Resources of the project can utilize each of the multiple namespacing mechanisms. In some cases, a particular resource of the project can override and use a foreign namespace that is associated with a different project hierarchy even while that particular resource resides within a project hierarchy associated with the original project and even while the project hierarchy does not declare, at the root, the foreign namespace.

Abstract: A computer readable storage medium includes executable instructions to order a binary tree using primary values and selected secondary values required to resolve a position in the binary tree. The remaining secondary values are in a do not care state. A new primary value is compared to the primary value at the root node of the binary tree. If necessary, a new secondary value is compared to the secondary value at the root node to determine whether the new primary value and the new secondary value or the value at the root node should be placed in a sorted list.

Abstract: A backup method for a computer system network avoids generating hashes from data that may be inaccurate due to network errors affords verification of source data written to backup media includes reading at a network client a portion of the source data from a source storage volume and generating a hash of the source data at the client. The source data and hash are transmitted to a backup server and written to the backup media. The hash is written to the backup media is associated with the backup data corresponding to the source data from which the hash was generated. Verification of the backup data is performed by reading the backup data from the backup media, generating a hash from the backup data read, and comparing that hash with the hash originally stored on the backup media.

Abstract: Techniques are presented for anonymous Internet access. Internet requests are intercepted within a firewalled environment before being routed over the Internet to destination sites. Each Internet requests is evaluated in view of policy and one or more anonymizers are selected in response to that evaluation. The Internet requests are then routed through the appropriate anonymizers for processing to the destination sites. A relationship between an Internet Protocol (IP) address associated with the firewalled environment and IP addresses of the destination sites is masked and hidden via the anonymizers from Internet observers. Moreover, a secure communication between the firewalled environment and the anonymizers is maintained.

Abstract: Techniques for port hopping are presented. A sender and a receiver engage in a communication session with one another and dynamically switch ports during that communication session. A decision to switch ports is based on a data length or packet count of a given transaction occurring during the communication session. The data length and packet count randomly and dynamically change during the communication session and varies from one transaction to another transaction. Any particular port to switch to during the communication session is also randomly and dynamically generated and varies from one transaction to another transaction.

Abstract: Techniques for secure network communication are provided. Credentials for a user along with a transparently generated secret are sent to a resource that the user desires to establish a secure communication session with. After successful authentication of the user, an initial sequence number for a first transaction of the session is set on a client of the user. Thereafter, with each transaction of the session the client supplies a new and unique sequence number to a server of the resource and uses the secret to encode and validate that transaction. The server of the resource does not permit any transaction that includes an invalid or previously used sequence number.

Abstract: A method for expressing and evaluating signed reputation assertions is disclosed. In one embodiment, a first entity receives a request to generate a signed assertion relating to a piece of content. The first entity generates a reputation statement about a second entity from reputation-forming information (RFI) about the second entity available to the first entity. The first entity then generates a signed assertion from the reputation statement and the piece of content at least in part by binding the piece of content to the reputation statement and signing a portion encompassing at least one of the bound piece of content and the bound reputation statement. The signed assertion is then transmitted to a receiving entity.

Abstract: Silicon, silicon dielectrics and low-k dielectrics are etched in a focused ion beam process using gaseous fluorinating etchants selected from the group of triethylamine trihydrofluoride (TEATHF) and xenon fluoride. Xenon fluoride is combined with a secondary protecting agent to avoid undesired corrosion of bare silicon. The protecting agent may be an oxidizing agent such as oxygen, perfluorotripentylamine (PFTPA), or a heavy completely fluorinated hydrocarbon.

Abstract: A drive system for a rotary device, such as an automotive alternator compensates for and dampens the effect of sudden bidirectional rotational velocity variations of the pulley caused by sudden acceleration and deceleration of an internal combustion engine without using a one-way clutch. The drive system in one aspect comprises an axially movable cam member rotatably supported on a hub that is connected to the alternator shaft and that is journaled within the pulley. The cam member is coupled to the pulley by splines so that it rotates with the pulley while affording axial movement. Springs urge the cam member into engagement with a cam follower on the hub. Upon sudden acceleration or deceleration of the pulley, the cam member rotates angularly relative to the cam follower and moves axially to compress the springs, which exert a restoring force on the cam member and cam follower to eliminate their relative angular rotation.

Abstract: In various embodiments, techniques for flexible resource authentication are provided. A principal attempts to login to a target resource using first credentials. The target resource does not recognize the first credentials and in response thereto forwards the first credentials to an identity service. The identity service authenticates the principal via the first credentials and supplies second credentials to the target resource. The target resource recognizes and authenticates the second credentials and grants access to the principal.

Abstract: A method for detecting and resolving a partition condition in a cluster of computers in a networked environment is described. In one example, the method includes creating a scratch pad area and dividing the scratch pad into slots. Each slot is associated with a node within the cluster. A generation number and a list of known nodes are recorded in each slot when a change of membership occurs in the cluster. The slots are compared to ensure the generation number and the list of known nodes matches in each slot, and the partition condition is resolved by creating a list of surviving nodes and re-allocating appropriate resources to each of the surviving nodes.

Abstract: Mechanisms to support fine-grain namespacing are provided. When an object is to be loaded within a processing environment, a specific namespace for that object is dynamically resolved during the load. That namespace can be dynamically resolved via object inheritance, via specific object-attribute declaration, and/or via consultation with a namespace object.

Abstract: Role-based access controls improve user access in a computer system. A profile associated with a role is generated. The profile is enforced with respect to one or more users associated with the role. Optionally, the profile is generated based at least in part on a user interaction.

Abstract: A system for pluggable event correlation may include an input manager that receives a plurality of events and converts the events into a format compatible with one or more of a plurality of correlation engines. The correlation engines may then evaluate the converted events using various rules and generate correlated events when the evaluated events trigger at least one of the rules. An action manager may execute remedial actions when the correlation engines generate the correlated events. Moreover, extensibility may be provided by enabling a user to define rules to be triggered when events occur in a predetermined pattern, and actions to be executed when a predetermined rule triggers a correlated event. Further, to plug a new correlation engine into the system, adapters may be deployed to handle input and output, while the user-defined rules may be validating according to semantic requirements of the new correlation engine.

Abstract: Systems and methods in accordance with various embodiments relate to a storage switch including task processing synchronization. In embodiments of the present invention, the packet processing units may generate and store Task Index and Generation Count information that prevents the processing of expired commands or responses. Additionally or alternatively, embodiments of the present invention may further employ timeout sequences to prevent previous instances of a stale task resource from disrupting the current use of the task resource.

Abstract: In various embodiments, techniques for virtualized federated role provisioning are provided. An entire policy and role provisioning environment is packaged in a first environment and sent to a second environment. The second environment authenticates and initiates the policy and role provisioning environment as a virtualized federated role provisioning service or a shared policy decision point service. The shared policy decision point service dynamically resolves policy, roles, and constraints for requesting resources within the second environment and supplies this information to a local policy enforcement point service that enforces roles on the resources.

Abstract: The present invention relates to a device and method for managing inbound and outbound communications for a multi-homed network. A connection manager is located on a local network that is connected to an external network, such as the Internet, through multiple service provider connections. The connection manager intercepts all communication packets that are inbound to the local network from the external network and all packets that are outbound from the local network to the external network. The connection manager then associates the packets with a particular ISP connection based on the availability and bandwidth load status of the ISP connections.

Abstract: A programmatic method for automatically backing up and restoring an integrated database system including a Lotus Notes/Domino loosely structured database and a linked DB2 relational database that stores data mapped from the Domino database. The method includes integrated first and second client application programs running on server hosts for backup and recovery of the Domino and DB2 databases that communicate with the database managers for the databases using client application APIs. Backup and recovery of the integrated linked databases is controlled by the client application associated with the Domino database.

Abstract: Techniques for the session sensitive data backups and restores are presented. Data having a plurality of hard linked file references are backed up and restored once during a backup operation. Any modifications to the backed up data are noted as session-specific versions and also backed up once. The hard linked file references are maintained in a data structure and managed during backups to define associations to the backed up data and to the session-specific versions of the data. The data structure is also used during restores to re-establish desired hard linked file reference associations to either the backed up data or to a particular session-specific versions of the data.

Abstract: An enhancement to e-mail user interfaces and message formats includes a dynamic preview window to view and retrieve attachments and summaries of e-mail messages directly in the e-mail list view or inbox view without opening an e-mail message. The efficient viewing mechanism further allows previews without cluttering the listing of the e-mails in the inbox by allowing the client to detect special preview instructions within an e-mail and run executables within the preview window. The enhancement is applicable to standalone e-mail clients (POP or IMAP based) and to web-based e-mail systems.