Abstract: An approach is provided for using settings mismatch tolerance levels to handle mismatches between print job settings and printing device settings. A print driver generates a graphical user interface that allows a user to select a print settings mismatch tolerance level from a plurality of print settings mismatch tolerance levels. The print driver determines whether a mismatch exists between a set of print settings specified for the particular electronic document to be printed and a set of print settings specified for a printing device on which the particular electronic document is to be printed. If a mismatch exists, then the print driver performs one or more actions corresponding to the particular print settings mismatch tolerance level to address the mismatch.

Abstract: Techniques for managing access to data in a database allow several policies to be applied simultaneously to the same row in a database table, and provide a pluggable module in the form of the database package that allows one or more access control security policies to be added to a common database server without taking the database server off line. Techniques include registering one or more packages of routines with a database management system. An access mediation routine in a first package is invoked for determining whether to allow operation on data in a first table associated with a first policy. Other techniques include, for each operation in an operation set, determining whether to perform the operation on a row of the table based on a set of labels associated with the row. The set of labels correspond to a policy set associated with the table.

Abstract: Techniques for provisioning databases for users on a wide area network such as the Internet include a first party managing one or more database systems. Second parties subscribe to database services supported by the managed database systems. The first party provides, over a network, to database applications of the second parties, access to database services to which the second parties are subscribed. The database systems may use database appliances hosting both database process(es), and non-database process(es) tailored to the needs of the database process(es). A user is therefore able to obtain database resources from an Internet Database Service Provider (IDSP) without incurring the full costs of database administrator(s), dedicated database equipment facilit(ies), or even dedicated database device(s), depending on usage. Meanwhile, the IDSP incurs minimum staffing loads because of self-service tools. Costing model and automatic billing are also described.

Abstract: A system for determining security associations using binary output sequences is described. In an example systematic embodiment, a first device is coupled over a network to a second device. Each device includes a processor and an indicator mechanism coupled to the processor. The indicator mechanism is configured to output a binary representation of a security state established between the devices to a user in perceivable proximity to at least one of the devices. A computer readable storage medium is coupled to the processor and includes executable instructions for the processor. The instructions when executed by the processor initiate a security transaction between the devices. The security transaction includes a protocol that uses one or more public keys to establish a security state between the devices. The indicator mechanism then outputs the binary representation to the user based on the established security state.

Abstract: A network device is allowed to transmit only authentication protocol traffic and no other traffic on an interface that is coupled to a port using port-based authentication until after authentication succeeds.

Abstract: A liquid crystal display comprises a plurality of pixels, each pixel comprising three or more sub-pixels. A first sub-pixel of the three or more sub-pixels comprises a first transmissive part that has a first transmissive area, and a first reflective part having a first reflective area. A second sub-pixel comprises a second transmissive part that has a second transmissive area, and a second reflective part that has a second reflective area. A third sub-pixel comprises a third transmissive part that has a third transmissive area, and a third reflective part that has a third reflective area. At least two among the first transmissive area, the second transmissive area, and the third transmissive area are different in size. The first reflective area, the second reflective area, and the third reflective area are equal in size.

Abstract: Techniques exporting data and metadata from a source database environment to a target database environment are provided. The techniques include the steps of analyzing metadata that describes one or more items, the data for which is in a source database, where the one or more items include at least one of a view, a sequence, a dimension, a cube, an ETL mapping, and any database object for which the metadata is stored outside of the source and target databases. The data for each item resides in a data file associated with the source database. The data for each item is incorporated into the target database based on the metadata by providing the target database access to an incorporated data file, where the incorporated data file is the data file or a copy thereof. Techniques are also provided for exporting database data from the source database.

Abstract: A method is disclosed for performing message payload processing functions in a network element on behalf of an application. According to one aspect, a network element intercepts data packets comprising network layer or transport layer headers having an address of a destination which destination differs from the network element. The network element determines whether information contained in layer 2-4 headers of the data packet satisfies specified criteria. If the information satisfies the specified criteria, the network element directs the data packets to a blade of the network element that performs processing based on an application layer message at least partially contained in the data packets. If the information does not satisfy the specified criteria, the network element forwards the data packets towards the destination without sending them to the blade.

Abstract: A method and apparatus is provided for printing to a Web services-enabled printing device. A print driver executing on a client device receives, from the printing device, printing device capability data that specifies a plurality of features and options currently supported by the printing device. The print driver generates a second version of a PrintCapabilities Document from a first version. The PrintCapabilities Document indicates, in XML, a particular print feature and one or more options for the particular print feature that are indicated in the printing device capability data. A user interface may be generated based on the second version. As a result of one or more user (and/or default) selections, a PrintTicket Document may be generated that indicates that an option of the particular print feature is selected. The print driver generates a print job ticket based the PrintTicket Document.

Abstract: Techniques are provided for efficiently evaluating XML queries that conform to an extension of an XML language (e.g., XQuery or XPath). The extension allows XML queries to have full-text search capabilities. Such an XML query is compiled to generate a tree of nodes that correspond to one or more conditions in the full-text portion of the query. In one technique, the amount of memory for the execution state of the tree is determined at compile time and allocated only once throughout execution of the query. In another technique, to ensure at most a single scan of a document, all the words or phrases in the full-text portion of an XML query are located before any of the other conditions in the full-text portion are evaluated. In another technique, the elements of the full-text portion of an XML query are analyzed to determine, based at least in part on cost, which evaluation strategy, of a plurality of evaluation strategies, should be employed.

Abstract: An apparatus comprises data storage coupled to one or more processors and a plurality of data elements contained in a database structure and organized in a hierarchical data tree, and instructions that perform receiving a network location identifier from a client computer, wherein the network location identifier comprises at least a portion that specifies a first view of the data tree; creating, using the portion of the network location identifier, a relational database query and submitting the query to a relational database; receiving from the relational database a set of data elements that is associated with the first view; generating a first electronic document comprising the set of data elements, including generating transformative links to other network location identifiers corresponding to performing actions on nodes in the data tree; and providing the first electronic document to the client computer.

Abstract: Techniques are provided that allow users to collaborate in relationship to data views, application displays, applications or events. A user can type in a text view related to a specific view in an application display, and the information is shared with other users that take part in sharing that view. A user that expresses an interest in an event is notified about the event and has the capability to interact, in relation to the event, with other users (e.g. by text). The particular form of interaction (and sharing) can be selectively specified. This interaction is comparable to a dynamic bulletin board where the subject is event driven, and where a user can specify who are allowed to participate. In the case of an event interest(s), users specify their interest (e.g. in other user application events or system events) and the system automatically alerts them to the occurrence of the event.

Abstract: A method, apparatus and computer program product for preventing infection propagation in a DMVPN is presented. An infected spoke router site is isolated from the DMVPN network such that the spoke router may (bi-directionally) completely or partially limit communicating with any network devices (including the hub router, any other spoke routers etc.) within the DMVPN which prevents the DMVPN melt-down, isolates a worm-infected spoke router site from the rest of the DMVPN and restricts the spread of the worm within the DMVPN network.

Abstract: A cluster manager is configured to manage a plurality of copies of a mid-tier database as a mid-tier database cluster. The cluster manager may concurrently manage a backend database system. The cluster manager is configured to monitor for and react to failures of mid-tier database nodes. The cluster manager may react to a mid-tier database failure by, for example, assigning a new active node, creating a new standby node, creating new copies of the mid-tier databases, implementing new replication or backup schemes, reassigning the node's virtual address to another node, or relocating applications that were directly linked to the mid-tier database to another host. Each node or an associated agent may configure the cluster manager to behave in this fashion during initialization, based on common cluster configuration information. Each copy of the mid-tier database may be, for example, a memory resident database. Thus, a node must reload the entire database into memory to recover a copy of the database.

Abstract: A method comprises, in a network comprising VPN gateway devices configured only for plaintext data communication, configuring a policy server with a security policy including DO NOT ENCRYPT statements temporarily overriding PERMIT statements defining which packets should be encrypted; selecting one sub-group of the VPN gateway devices in which tunnel-less encryption is not configured; configuring of the VPN gateway devices in the sub-group for tunnel-less encryption by: configuring each device in a passive mode of operation in which the device is configured to receive either encrypted packets or plaintext packets matching encryption policy; configuring local DO NOT ENCRYPT statements matching traffic that is currently being converted to ciphertext; removing, from the access control list of the policy server, DO NOT ENCRYPT statements referring to protected LAN CIDR blocks behind the VPN gateway devices in the selected sub-group; configuring the sub-group to send encrypted packets by removing, from each of the

Abstract: A method and apparatus for adjusting the effect of applying a kernel to a signal is provided. The adjustment may be based on the magnitude of an effect that a kernel matrix is intended to have on the signal matrix. The adjustments can be based on factors including, but not limited to, a signal-to-noise ratio of the signal data, properties of a device (e.g., lens) used to capture the signal data, or a metric that is derived based on an analysis of the signal data. Processing image data in accordance with an embodiment of the present invention is aimed at regaining lost contrast that may be due to properties of optics that are used to capture the image data.

Abstract: A set of item-item affinities for a plurality of items is determined based on collaborative-filtering techniques. A set of an item's nearest neighbor items based on the set of item-item affinities is determined. A set of user feature-item affinities for the plurality of items and a set of user features is determined based on least squared regression. A set of a user feature's nearest neighbor items is determined based in part on the set of user feature-item affinities. Compatible affinity weights for nearest neighbor items of each item and each user feature are determined and stored. Based on user features of a particular user and items a particular user has consumed, a set of nearest neighbor items comprising nearest neighbor items for user features of the user and items the user has consumed are identified as a set of candidate items, and affinity scores of candidate items are determined.

Abstract: Techniques described herein enable searching for multimedia content and for downloading or scheduling the recording of the multimedia content. The multimedia content may have been previously stored on one or more databases. The client device may download or schedule the recording of multimedia content in one step, for example, in one touch. When desired multimedia content is not available, the multimedia content is added to the client device's wish list. When the client device's does not have a wish list, the client device's wish list may be created on the spot. During the scheduling of the recording, a tag associated with the multimedia content is checked to determine whether the multimedia content is live or delayed. When the tag indicates the multimedia content is live or delayed, the client device prompts with a suggestion to add extra time to the end of the recording of the multimedia content.

Abstract: An approach for assembling and repairing probe assemblies using laser welding includes aligning a beam element to a post element on a probe substrate. The beam element is positioned in contact with the post element on the probe substrate. The beam element is then attached to the post element on the probe substrate by laser welding the beam element to the post element on the probe substrate. The approach may include the use of a vacuum capillary pickup tool to align and position the beam element. The vacuum capillary pickup tool may also operate in conjunction with a laser beam delivery system for guiding the laser beam to the correct location for welding and also to assist in removing gases and debris attributable to the laser welding process. The approach allows probe elements to be connected directly to a probe substrate without requiring an intermediate layer.

Abstract: A technique is provided for providing a trust indicator for a particular webpage. The trust indicator may indicate whether publishers of web content and/or end-users trust the content of the particular webpage and whether the particular webpage is popular. A user requests, via a web browser a webpage to be displayed. A process associated with the webpage requests a value to be displayed along with the webpage. The value may indicate 1) a number of links that link to the webpage, 2) a number of user-created tags that have been associated with the webpage, or 3) a trust rank that a web crawler associates with the webpage. A trust rank may be based, at least in part, on user-created tags that have been associated with the webpage. A value may also be associated with an advertisement that is displayed along with a particular webpage.