Abstract: A method of passive current balancing for digital control of multiphase DC-DC converters is provided based upon the duty-cycle matching principle. Current balance is achieved by inserting a digital filter into the control path. Being sensorless, it is insensitive to current measurement inaccuracies caused by noise, component value tolerance or variation. It will be shown that effective current balancing can be achieved via some simple modifications to standard voltage mode control laws, allowing current balancing to be achieved with minor additional complexity. The current share scheme has been shown to perform well dynamically, matching currents cycle by cycle during load steps, and clearly benefiting from the absence of the slow current share loop popular in traditional methods. The current share filter proposed, blends well with existing digital controllers. Given the very low complexity in implementing the filter, the degree of matching achieved is exceptional.

Abstract: Techniques for provisioning databases for users on a wide area network such as the Internet include a first party managing one or more database systems. Second parties subscribe to database services supported by the database systems managed by the first party. The first party provides, over a network, to database applications controlled by the second parties, access to the database services to which the second parties are subscribed. The database systems may use database appliances hosting both database process(es), and non-database process(es) tailored to the needs of the database process(es). A user is therefore able to obtain database resources from an Internet Database Service Provider (IDSP) without the user incurring the full costs of database administrator(s), dedicated database equipment facilit(ies), or even dedicated database device(s), depending on usage.

Abstract: Techniques are described for providing a display of visual elements representing various media elements on a composite media presentation, wherein the display may be altered such that the visual elements transition from an overlapping arrangement to an arrangement where the overlap is minimized or eliminated. Once in the non-overlapping arrangement, a particular element may be selected or manipulated, for example applying an effect to the underlying media element, and the display returns to the original overlapping arrangement of visual elements, in some embodiments ending with the selected visual element at the top of the overlapping arrangement where before the visual elements may have been partially or completely obstructed from view.

Abstract: In a client, a system receives a set of transformation functions for use in transforming a first content, requests the first content from a gateway, and receives the first content from the gateway, including an invocation of at least one transformation function maintained on the client. The system invokes the at least one transformation function to transform the first content to access a second content on the server. In a gateway communicating with a server, a system transmits a set of transformation functions to at least one client for use in transforming a first content, receives a request from at least one client for the first content residing on the server, rewrites the first content to include the invocation of at least one transformation function maintained on the client, and transmits the first content including the invocation of at the least one transformation function maintained on the client.

Abstract: Techniques are provided for executing query statements, or portions thereof, in parallel without using slave SQL to communicate to each slave the operations to be performed by the slave. Instead of generating one cursor for the query coordinator (QC) based on the original statement, and separate cursors for each DFO based on the slave SQL, the techniques involve sharing the cursor that is generated from the original statement among the various participants involved in the parallel execution of the operations specified in the original statement.

Abstract: A data processing apparatus, comprising at least one processor and a traffic monitor comprising logic which, when executed by the processor, causes the processor to perform: creating, using forward Domain Name System (DNS) lookups, a mapping of domain names to Internet Protocol (IP) addresses; determining whether a particular domain in the mapping requires handling data traffic to or from the particular domain by performing a particular action; based on the mapping, determining one or more IP addresses that are associated with the particular domain; generating policy for a firewall that instructs the firewall to perform the particular action upon receiving a particular request; wherein the particular request specifies a particular IP address that is within the particular domain.

Abstract: Techniques are provided for lock management. The techniques are based on an enhanced lock management system that generates a semantic response in response to lock requests for a resource. The semantic response communicates both the underlying cause blocking the request, and information that may be used by the requester to obtain notification of when the underlying cause should no longer lead to denial of the lock request. The semantic response may be generated by the master of the resource, who provides the semantic response to the local lock manager of the lock requester. The semantic response may be retained by the local lock manager so that the semantic response can be provided to subsequent lock requesters, without need for interacting with another lock manager on another node.

Abstract: Techniques in a data processor for drawing on a map a geodetic polygon that straddles a splitting meridian include, in one embodiment, maintaining data that represents the geodetic polygon, the data comprising a set of geographic coordinates; transforming the set of geographic coordinates into a set of planar coordinates representing a planar polygon; splitting the planar polygon into a plurality of sub-figures; shifting at least one sub-figure of the plurality of sub-figures along a horizontal axis of two-dimensional plane to produce a shifted sub-figure; and causing the shifted sub-figure to be displayed on a map concurrently with at least one other sub-figure of the plurality of sub-figures that was not shifted.

Abstract: A method for optimizing a solid state drive is described. The method involves determining whether a free space fragment on the SSD is smaller than the threshold fragment size. If the free space fragment on the SSD is smaller than the threshold fragment size, eliminating the free space fragment. If the free space fragment on the SSD is not smaller than the threshold fragment size, retaining the free space fragment for storing data. Elimination of the free space fragments smaller than the threshold fragment size results in a fewer number of free space fragments being used when writing to the SSD, allowing for improved SSD performance.

Abstract: A method is disclosed by which network elements such as packet routers and packet switches guarantee the delivery of application layer messages within a network. According to one aspect, a first network element retrieves an application layer message from a source message queue, adds a message identifier to the application layer message, encapsulates the application layer message into data packets, and sends the data packets toward a destination application. A second network element intercepts the data packets, determines the application layer message from payload portions of the data packets, determines the message identifier from the application layer message, stores the application layer message in a destination message queue, generates an acknowledgement message that contains the message identifier, and sends the acknowledgement message toward a source application.

Abstract: Techniques are provided for publishing digital image feeds, where the feeds are automatically created and uploaded to a server along with the images described in the feed, along with techniques for subscribing to digital image feeds, where the feed is downloaded and the images described therein are automatically downloaded and organized. The feeds may be subscribed to and automatically updated.

Abstract: A technique for differencing XML documents is provided. An edit graph is generated for computing the cost of possible edits that may be applied to a first XML document in order to generate a second XML document. A hash value is assigned to nodes included in the axes of the edit graph, where one axis includes nodes in the first XML document and the other axis includes nodes in the second XML document. The hash value may be generated based on a particular node's name and attributes, and the hash value of the name and attributes of each child node of the particular node. A technique for patching an XML document is also provided. Events are generated for each node in the input document and for at least one operation specified in the edit script. The edit script is applied to the input document by performing one or more operations specified in the operation events on one or more node events.

Abstract: Online fraud is reduced by identifying suspicious activities in real time and providing alerting so that interdiction may be performed. Historical customer behavior is used to identify and flag deviations in activity patterns. An HTTP data stream is parsed, intelligently filtered, and key data is extracted in real time. The key data is periodically extracted from network traffic and used to update corresponding summaries stored in a fraud data mart. The data mart is constantly incrementally updated so that the most current historical information is available to a rules engine for real time comparison with new customer data and patterns occurring on the network. Fraud-related business signatures are applied to this data stream and/or a data mart to identify suspicious online transactions. By understanding the customer session, the customer's intended use of the online application is derived and possible fraudulent activities identified.

Abstract: Methods are provided for utilizing a process-independent schema library that contains all the devices and all the device parameters in each of various process-specific schema libraries that a user or a group of users is working with. A process-specific schematic based on a first process technology can be converted to a process-specific schematic based on a second process technology by being first converted to a process-independent schematic that is based on the process-independent schema library, which is then converted to the process-specific schematic based on the second process technology. Circuits can be also be stored as a process-independent schematic that is based on the process-independent schema library but designed using a user interface that displays process-specific devices and device parameters.

Abstract: In an embodiment, a data processing system comprises a storage system coupled to a unit under test comprising a heap memory, a static memory and a stack; second logic operable to perform: detecting one or more changes in a first state of the heap memory and the static memory; storing, in the storage system, as a state point of the unit under test, the one or more changes in the first state of the heap memory and the static memory; third logic operable to perform: receiving a request to change the memory under test to a particular state point; in response to the request, loading the particular state point from the storage system and applying the state point to the heap memory and the static memory to result in changing the heap memory and the static memory to a second state that is substantially equivalent to the first state.

Abstract: Techniques are described herein for performing column functions on virtual columns in database tables. A virtual column is defined by the database to contain results of a defining expression. Statistics are collected and maintained for virtual columns. Indexing is performed on virtual columns. Referential integrity is maintained between two tables using virtual columns as keys. Join predicate push-down operations are also performed using virtual columns.

Abstract: Techniques for implementing secure normal forms are provided. In one embodiment, in response to a request for data from a client, a database server is operable to enforce a column-level security policy that is defined for a particular column of some, but not necessarily all, rows of a table stored in a database. After retrieving a set of rows from the table and before returning a result set of rows to the client, the database server modifies the retrieved set of rows into the result set of rows by applying the security policy to each row of the retrieved set of rows, where applying the security policy to a row comprises: determining whether the security policy is satisfied for the particular column of that row; replacing, in the result set of rows, a data value in the particular column of that row with a security-NULL value when the security policy is not satisfied; and including the data value in the particular column of that row into the result set of rows when the security policy is satisfied.

Abstract: A system and method for making program recommendations to users of a network-based video recording system utilizes expressed preferences as inputs to collaborative filtering and Bayesian predictive algorithms to rate television programs using a graphical rating system. The predictive algorithms are adaptive, improving in accuracy as more programs are rated.

Abstract: In one embodiment, an apparatus comprises logic for detecting stolen authentication cookie attacks. A first transport connection is established between a client and a gateway server, where the first transport connection is authenticated by the gateway server. A first authentication cookie is associated with a client session, between the client and the gateway server, that includes the first transport connection. A second transport connection is established at the gateway server. A request is received over the second transport connection. The request includes the first authentication cookie to associate the second transport connection with the client session. A second authentication cookie is generated for the client session and is returned over the second transport connection. Thereafter, a determination is made whether the second authentication cookie is received over the first transport connection.

Abstract: A method of preventing network denial of service attacks by early discard of out-of-order segments comprises creating a reassembly queue for a connection between a first network node and a second network node, wherein the connection has been established based on a transport-layer network protocol, the reassembly queue having a size based on a buffer size of an input interface with which the connection is associated. As out-of-order data segments arrive on the connection, and before other processing of the segments, whether the reassembly queue is full is determined, and the out-of-order segments are discarded if the reassembly queue is full. The size of the reassembly queue is automatically changed in response to one or more changes in any of network conditions and device resources.