Abstract: A method for caching information objects is provided. Information objects are stored in portions of a non-volatile storage device called arenas, which are contiguous regions from which space is allocated in parallel. Objects are contiguously allocated within an arena and are mapped to directory tables that provide an efficient search mechanism. Each object is identified by a name key and a content key. The name key is constructed by applying a hash function to the composition of the name or URL of the object along with implicit or explicit context about the request. The content key is constructed by applying a hash function to the entire contents of the object data. Buckets and blocks in the directory tables store tags and subkeys derived from the keys. Since duplicate objects that have different names will hash to the same content key, the cache can detect duplicate objects even though they have different names, and store only one copy of the object.

Abstract: A grounding clip for computer peripheral cards includes a base and at least one finger. The base has a contact surface and contains an aperture. Further, the aperture is sized to receive the particular peripheral card that must be discharged by the grounding clip. The finger extends from an internal length portion of the base, and in the case where a plurality of fingers are provided, they paired and disposed in registry along opposing internal length portions of the base. Each finger includes a discharge surface for contacting and grounding the peripheral card.

Abstract: In a network management system, a method and apparatus for preparing a computer program for execution in relation to a particular network device among a plurality of network devices having a plurality of device types is provided. Each network device is associated with a device type value, and each network device has an associated device mapper. The device mappers are stored in a hierarchical structure that reflects a functional relationship or family relationship of the devices. Functions to be carried out by one or more devices are expressed as a plurality of executable program components. Preferably, each executable program component has one or more classes that define executable functions. Each device mapper associates a device type value with one or more overridden classes in the executable program components and one or more overriding classes. At runtime, device type values are acquired for each device in the managed network.

Abstract: A graphical user interface for network management permits a network manager to select a limited number of network components to be displayed, along with the information relative thereto, while removing the display of undesirable or unnecessary data. Information is provided to inform the network manager that connections to other components may exist. In addition, information regarding the relationship of other components connected to the selected components is displayed. The network manager is provided with the opportunity to navigate about the map which illustrates the network topology, to locate the source of a problem. If the relationship between components changes, the network manager can expand the information displayed on the screen, to view all of the components that are directly connected to an illustrated component associated with a problem.

Abstract: A method for distributing a secret key from a key holder H to intended group members M. The method assumes that during the distribution process each party, a group member M and the key holder H, can decrypt and encrypt exchanged information such that the encrypter knows that the decrypter will be the intended party. The method preferably uses a public key/private key encryption technique in which, for example, a trusted Certificate Authority in a public key infrastructure signs the certificates to provide the public keys involved in the encryption. Alternatively, the method, together with a symmetric cipher, uses a shared secret, established in an authenticated mechanism that is outside the information exchanges of the invention. Additionally, the method uses a strong mixing function that takes several items of data as input and produces a pseudorandom authentication (or digest). Inputs to the mixing function include identity stamps that are generated by each member M and key holder H.

Abstract: A method and apparatus for parallel processing is provided. A parallel execution object organizes and initiates execution of two or more parallel processing threads that act on members in the context of a transaction. The members comprise one or more sets of data for which parallel processing is needed, for example, sets of network device data. The threads are organized by receiving a set of execution components that have a partial order defined by preconditions and resource requirements. A partial order evaluator resolves the partial order into a final order of execution of the components. The parallel execution object, members, transaction, and partial order can be declared in the context of an application program. Optionally, the threads are organized by selecting execution components that are optimized for use with a particular current phase of execution of the application program.

Abstract: A three dimensional (3D) modeling system for generating a 3D representation of a modeled object on a display device of a computer system. The modeled object is represented by an initial definition of an object and a set of modifiers. Each modifier modifies some portion of the definition of an object that may result in a change in appearance of the object when rendered. The modifiers are ordered so that the first modifier modifies some portion of the initial definition of the object and produces a modified definition. The next modifier modifies the results of the previous modifier. The results of the last modifier are then used in rendering processes to generate the 3D representation.

Abstract: Using a method for controlling access to information resources, a single secure sign-on gives the user access to authorized resources, based on the user's role in the organization. The information resources are stored on a protected server. A user of a client or browser logs in to the system. A runtime module on the protected server receives the login request and intercepts all other request by the client to use a resource. The runtime module connects to an access server that can determine whether a particular user is authentic and which resources the user is authorized to access. User information is associated with roles and functional groups of an organization to which the user belongs; the roles are associated with access privileges. The access server connects to a registry server that stores information about users, roles, functional groups, resources, and associations among them. The access server and registry server exchange encrypted information that authorized the user to use the resource.

Abstract: Described is a method that comprises storing information that defines administration roles, that associates a user with one or more of the administrative roles, and that associates each administration role with one or more administrative privileges. An administrative privilege authorizes at least one administrative function. When the user requests the execution of an administrative function, the requests is honored only when one of the user's administrative roles includes an administrative privilege that authorizes the requested administrative function. In addition, information is stored that associates each of a plurality of users with one or more administrative roles. At least two users administer the access control computer system from different locations, or from computers connected to two different local area networks. Information associating a user with one or more administrative roles may be stored in a cookie, which may be encrypted.