Abstract: The present invention discourages effective illegal use of compromised biometric information in biometric authentication and allows biometric authentication to be securely continued even when some biometric information is compromised. A user authentication system compares extracted user features with a previously registered combination of features and authenticates the user on the basis of the result of the comparison. If the authentication is successful, the previously registered combination is replaced with a new combination of features that are registered for use in the subsequent authentication of the authentication object.

Abstract: Cache hit ratio is improved in a cache apparatus that reads and caches contents from a large-scale database. The cache apparatus includes a cache section for recording a plurality of sets. Each set includes an attribute ID, an extractor for extracting the attribute ID from an object ID, and attribute data identified by the attribute ID. The cache apparatus receives an object ID and extracts an attribute ID from the object ID using an extractor recorded in the cache section. If the extracted attribute ID coincides with attribute ID cached in association with the extractor, the cache apparatus returns attribute data recorded in association with the extractor. On the other hand, if the extracted attribute ID does not coincide with the attribute ID recorded in association with the extractor, the cache apparatus receives attribute data and an extractor from a DB using the object ID, and caches the read extractor and attribute data in the cache section in association with attribute ID.

Abstract: The present invention is a method, system and apparatus for reducing the run-time cost of invoking a server page. The system can include a server page translation unit configured to translate a server page document into program code. The system also can include a program code compiler configured to compile the program code into a program object. Finally, the system can include an optimization processor programmed to modify the program code to permit direct invocation of the program object by external program objects bypassing a server engine typically used to invoke the server page. Notably, in a preferred aspect of the invention the server page can be a JSP. Similarly, the program code can be Java source code and the program object can be a Java class. Finally, the external program objects can be servlets.

Abstract: A method for use in a resource management infrastructure conforming to the WMI architecture are proposed. The WMI architecture includes a framework, known as CIM Object Manager (or CIMOM), which exploits WMI providers of dynamic services for the managed objects; in the WMI architecture, the CIM providers must be implemented as Common Object Model (COM) objects and must comply with a specific WMI provider interface (named “IWbemServices”). The invention discloses a method for integrating non-compliant providers, for example written in the Java language, into the WMI infrastructure. For this purpose, a bridge provider is associated with each managed object that is supported by the Java providers. The bridge provider identifies the Java provider that must be invoked to fulfill a particular request (based on a specific CIM qualifier); the parameters of the request are converted into Java types, and a corresponding method is called on an intermediate Java object.

Abstract: A display device which displays a plurality of objects on a screen has a group configuration storage section for storing association information indicating the association between each of the plurality of objects and one of a plurality of groups, a group priority level storage section for storing group display priority levels which are priority levels for displaying each of the objects associated with one of the groups at the front of the objects associated with the other groups, an object priority level storage section for storing object display priority levels which are priority levels for displaying one of the objects associated with one of the groups at the front of the others, an object priority level changing section for changing the object display priority level while the association information is maintained, and a display section for displaying the plurality of objects according to the group display priority levels and the object display priority levels.

Abstract: A central system can quickly pass on job requests intended for remote systems with minimal costs and delays. When a job request for a remote system is received, the central system initiates a conventional telephone call to the remote system. At the remote system, a communications terminal logs the incoming call without allowing it to be completed. When the call is refused, the central system terminates the call attempt. The remote system analyzes the logged call information to determine whether the call originated with the central system. If it did, the remote system, generates an HTTP request which is transmitted to the central system via a public computer network such as the Internet. The central system responds to the HTTP request by retrieving the job request from storage and passing it on to the remote system via the public computer network in the form of an HTTP response.

Abstract: Methods, systems, computer program products, and a method of doing business are disclosed for autonomically provisioning network-accessible services in a decentralized network having a federated grid infrastructure. Autonomic, grid, and web services-related technologies, standards, and concepts are leveraged. More particularly, web service behaviors (augmented as grid services, according to preferred embodiments) are autonomically provisioned (i.e., dynamically distributed) via a grid of hosting services. In preferred embodiments, this dynamic distribution occurs in response to (and as a function of) external catalysts, such as algorithms that monitor designated resources (e.g., to proactively determine when the commitments in a utility service provider's service level agreements are in jeopardy).

Abstract: Methods, systems, and computer program products are disclosed for persisting identifiers and relationships in a transient peer-to-peer networking environment where communities have ad hoc participants. Persistent identifiers are defined for nodes, allowing nodes to be identified across sessions and invocations, even though they re-enter the network with a different network address. Paths taken by content resources as they traverse the network (e.g. which nodes forwarded the content) are persisted, along with reputation information about nodes (e.g. indicating how successful they are at answering queries from peers). Trust relationships can be derived using the persisted information. A tiered broadcast strategy is defined for reducing the number of messages exchanged. Preferred embodiments leverage a web services implementation model.

Abstract: Techniques are disclosed for efficiently and selectively reloading frames of a multiframe Web page or a multiframe window. Multiple frames may be reloaded as a result of the server sending its response to a single client request message. Server-side logic maintains an awareness of which frames need to be reloaded, regardless of whether that need results from something synchronous with the client's request for a frame or asynchronous to that request. Then, when the client requests data for a single frame, in addition to sending content for the requested frame, the server also sends data to cause reloading of the other frames that need to be reloaded (and only those frames). Preferably, the data to cause reloading of the other frames comprises indicators (such as scripting code) that will force the client to request reloading of each of these other frames. Multiple reload requests may be collapsed into a single response. The disclosed techniques apply also to frames to be initially loaded.

Abstract: Methods, systems, and computer program products are disclosed for persisting node reputations in a transient peer-to-peer networking environment where communities have ad hoc participants. Persistent identifiers are defined for nodes, allowing nodes to be identified across sessions and invocations, even though they re-enter the network with a different network address. Paths taken by content resources as they traverse the network (e.g. which nodes forwarded the content) are persisted, along with reputation information about nodes (e.g. indicating how successful they are at answering queries from peers). Trust relationships can be derived using the persisted information. A tiered broadcast strategy is defined for reducing the number of messages exchanged. Preferred embodiments leverage a web services implementation model.

Abstract: In a machine translation environment, a context-specific domain directory must sometimes be selected to provide a proper translation in context. A database for trigger patterns associated with specific domains is prepared. When a resource is to be translated, appearances of the pattern within the resource are detected. If appearance frequency for at least one domain exceeds a threshold value, the appearance frequency for that domain is compared to the appearance frequency for other domains. If the appearance frequency for the one domain is found to be significantly higher, the dictionary for that domain is selected for the translation.

Abstract: The invention relates to an apparatus for providing event data, generated by a JVM local to the apparatus, to a profiling agent on a remote system as requested by that agent. A request is received at the apparatus, via a network interface, from the profiling agent for certain event data. This request is forwarded via the JVMPI to the JVM and the requested data is transmitted to the apparatus, as and when generated by the JVM. (The event data is also transmitted via the JVMPI). The event data is then transmitted to the profiling agent via the network interface.

Abstract: A management system comprises a gateway component adapted to reside on a workstation and a device agent adapted to reside on a pervasive device for configuring pervasive devices. The gateway component is instantiable during synchronization of the workstation with a pervasive device to transfer the device agent to the pervasive device; and to transmit configuration information to the pervasive device. The device agent executes configuration commands in response to the configuration information. The invention enables pervasive devices to be managed through a workstation to which they connect to synchronize without requiring any intervention by the pervasive device user. Preferably, the workstation acts as a gateway for managing the device within what becomes a four tier management system.

Abstract: Congestion at an output from a node in a packet data communications network is controlled by maintaining a traffic profile based on the discardability/priority characteristics of recently received packets and by selecting at least an initial discard strategy which should be effective in ending congestion based on that profile. The profile is established by maintaining counts of the number of packets actually stored in an output buffer and of the number of packets which would have been stored if different discard strategies had been in force. The relationship of certain of the count values to a threshold determines which discard strategy is initially selected. Different, successively less intrusive discard strategies can be implemented until the congestion ends.

Abstract: Provided are methods, data communication apparatus and computer programs for managing communications between a remote communication manager and a set of communications managers in an associated group. The group of communication managers have shared access to resources which enable any communication manager in the group to recover from failures experienced by another communication manager in the group. In particular, recovery of failed inbound and outbound channels is achieved with the advantage of improved availability of data transmissions. Preferably, the recovery uses synchronization information to ensure that data is recovered to a consistent state to that channel recovery is achieved without loss of data integrity.

Abstract: A method and system for verifying the availability of a back-up virtual private network IP security (IPSec) tunnel between two network elements by originating a plurality of connection tests between the network elements. The first network element transmits a backup tunnel verification test message to the second network element over the back-up secure tunnel upon receipt of a backup tunnel verification test command. The back-up secure tunnel includes two unidirectional tunnels. The second network element receives the back-up tunnel verification test message over the first back-up unidirectional secure tunnel and transmits a response back to the first network element over the second back-up unidirectional secure tunnel.

Abstract: Methods, systems, computer program products, and methods of doing business by automatically and dynamically annotating events in an event management system (“EMS”) to adapt to capabilities of a management system of which the EMS is an integral part. Furthermore, the EMS may automatically and dynamically recycle existing events (including events which are already annotated) for processing with newly-defined or different EMS capabilities. Events may also be re-annotated to reflect new or different capabilities of the EMS. These benefits of “smart events” are realized without requiring re-instrumentation of the event generation code of managed applications.

Abstract: Technics are disclosed for programmatically calculating directions (or other types of paths between points) without reliance on proprietary file formats or binary shape files, and without requiring application programmers to write code that performs complex manipulations of directed graphs. Preferred embodiments leverage built-in functions of a spatially-enabled object relational database system. Information about intersections between streets is used in a novel manner to compute paths between points. The intersection information is preferably obtained from precomputed information stored in a spatially-enabled relational database table.

Abstract: A network interface device (150) for connecting a computer (100) to a network (155) includes a port (210) with a plurality of leads for a network communication link (215) and a plurality of functional blocks (225a-225d) each one for operating the device (150) according to a different type of network, each type of network being identified by a corresponding set of active leads; the device (150) further includes logic means (235-245,250-260) for detecting if a signal is present on each lead and for determining the type of network corresponding to the present signals, and configuration means (235-245,230a,230n) for activating the functional block (225a-225d) corresponding to the determined type of network.

Abstract: A secure method for changing a password to a new password when the passwords are being transmitted over a network is presented. The present invention does not require the use of any additional keys (such as symmetric keys or public/private key pairs) to protect the password exchanges. Moreover, the present solution does not require the use of any encryption algorithms (such as DES, RC4/RC5, etc.), it only requires the use of a collision-resistant hash function.