Abstract: A computer apparatus comprises first Border Gateway Protocol (BGP) logic comprising BGP route table data; a network interface to communicatively couple to a first autonomous system; data collection logic in computer-readable storage media when executed operable to perform discovering an address prefix of a data collector that is communicatively coupled to second BGP logic of a router within a second autonomous system that is coupled to the first autonomous system, wherein the second autonomous system is independent of the first autonomous system; determining a path through the first autonomous system, the one or more networks or internetworks, and the second autonomous system to the data collector based on the BGP route table; requesting the data collector to provide one or more data values relating to performance of network elements of the second autonomous system; receiving and storing the one or more data values.

Abstract: In an embodiment, a multi-mode LCD comprises pixels, each comprising sub-pixels, each sub-pixel comprising a first polarizing layer; a second polarizing layer; a first substrate layer and an oppositely oriented second substrate layer, the first and second substrate layers are between the first and second polarizing layers; a liquid crystal material between the first and second substrate layers; a first reflective layer that is adjacent to the first substrate layer and comprises at least one opening that forms a transmissive part of the sub-pixel and wherein a remainder of the first reflective layer that forms a reflective part of the sub-pixel; a first filter of a first color opposite to and covering the transmissive part with an area larger than that of the transmissive part; a second filter of a second color opposite to and partially covering the reflective part, wherein the second color is different from the first color.

Abstract: A multi-mode Liquid Crystal Display (LCD) capable of functioning in a multi-mode, a monochrome reflective mode and a color transmissive mode. One embodiment provides an LCD with color filters only over most or all of the transmissive part of a pixel but only part of the reflective portion of a pixel, enabling readability in the ambient light. Embodiments eliminate the black matrix mask used typically in color filter creation. Additionally, an embodiment provides diagonal pixels to improve the resolution of the LCD in the color transmissive mode. Further, an embodiment enables the light to switch between two colors, while a third color (typically green) is always on, thereby decreasing the required frame rate of the LCD, when used in the hybrid field sequential approach. Yet another embodiment creates colors from the backlight, eliminating the need for color filters.

Abstract: An approach is provided for implementing locked printing on a printing device with remote unlock. The printing device includes a locked print process that is configured to examine print data received by the printing device and determine whether locked printing is to be used for the print data. Print data designated for locked printing is stored on the printing device. The printing device also includes a Web application configured to generate Web pages that define a Web-based graphical user interface. When processed at a client device, the Web pages allow a user to enter authorization data that is transmitted to the Web application on the printing device. The locked print process verifies the authorization data and if the authorization data is successfully verified, allows the user access to locked print data on the printing device. The approach may also be implemented using a common repository to store print data.

Abstract: A network infrastructure element such as a router or switch performs brokering network user identity and credential information. An application or administrative user can declare a policy for user identity information extraction, authentication and authorization. Based on the policy, the network element extracts user identity information or credentials from a transport-layer message header, application-layer message header, and message body. Based on the policy, the network element performs one or more authentication or authorization operations with the user identity information or credentials. As a result, a network element can broker identity information among incompatible applications and perform identity operations for the applications.

Abstract: An apparatus is disclosed for creating and storing policy data records comprising data identifying network policy decisions. After a data packet is received, a network policy decision is made based on information in the packet and one or more network policies. A policy data record identifying the network policy decision is created, and the policy data record is stored.

Abstract: In an embodiment, a data processing system comprises application workflow optimizing logic and which when executed is operable to receive first workflow data that defines a sequence of processing operations to perform on an application-layer message; rewrite the first workflow data by separation of dependent update operations to result in creating rewritten workflow data; and store the rewritten workflow data in a data repository. Application gateway logic may be operable to receive one or more packets; construct a received message from one or more payloads of the packets; classify the received message to identify a particular workflow associated with the message; apply the particular workflow, using the rewritten workflow data, to the received message to result in identifying a destination application server and creating an outgoing message; send the outgoing message to the destination application server.

Abstract: A method and apparatus are provided for building and using a persistent XML tree index for navigating an XML document. The XML tree index is stored separately from the XML document content, and thus is able to optimize performance through the use of fixed-sized index entries. The XML document hierarchy need not be constructed in volatile memory, so creating and using the XML tree index scales even for large documents. To evaluate a path expression including descendent or ancestral syntax, navigation links can be read from persistent storage and used directly to find the nodes specified in the path expression. The use of an abstract navigational interface allows applications to be written that are independent of the storage implementation of the index and the content. Thus, the XML tree index can index documents stored at least in a database, a persistent file system, or as a sequence of in memory.

Abstract: Techniques are provided for identifying suspect links between objects from multiple domains. A plurality of links that associates a collection of requirement objects with a set of configuration management objects is stored. The collection of requirement objects is defined in a requirement management system for a software product, and the set of configuration management objects is defined in a configuration management system that is operable to manage the development of the software product. A determination is made that a particular requirement object was changed. In response to determining that the particular requirement object was changed, one or more links of the plurality of links are automatically determined. The one or more links respectively associate one or more configuration management objects, of the set of configuration management objects, with the particular requirement object. The one or more links are then identified as suspect.

Abstract: Techniques for passing security configuration information between a security policy server and a client includes the client forming a request for security configuration information that configures the client for secure communications. The client is separated by an untrusted network from a trusted network that includes the security policy sever. A tag is generated that indicates a generic security configuration attribute. An Internet Security Association and Key Management Protocol (ISAKMP) configuration mode request message is sent to a security gateway on an edge of the trusted network connected to the untrusted network. The message includes the request in association with the tag. The gateway sends the request associated with the tag to the security policy server on the trusted network and does not interpret the request. The techniques allow client configuration extensions to be added by modifying the policy server or security client, or both, without modifying the gateway.

Abstract: An approach is provided to partition inter-linked documents into partitions of a database system. In some embodiments, a plurality of documents may be assigned to two or more partitions in the database system, thereby forming a number of inter-partition links between a first partition and a second partition. Here both the first partition and the second partition are in the two or more partitions. First documents may be assigned to the first partition while second documents are assigned to the second partition. Both the first documents and the second documents are in the plurality of documents. It is then determined whether moving one or more of the first documents in the first partition to the second partition reduces the number of inter-partition links between the first partition and the second partition. If that is the case, the one or more of the first documents are moved to the second partition.

Abstract: A method and apparatus for a multicasting multimedia content distribution system. A content server creates a schedule of transmission times for data streams and assigns the streams to multicast groups. DVRs receive the schedule from content server that contains content descriptions for each data stream along with the transmission times of each particular content description. The content server transmits the content across the Internet according to the published schedule via a multicast transmission designated for a particular multicast group. Each DVR determines the content for which it has an interest, finds the scheduled time for transmission for the content, schedules a recording time in its recording schedule, and joins the associated multicast group at the scheduled time. The DVR receives the multicast stream for the group and stores the stream on its local storage device for use by the DVR or for viewing by a user.

Abstract: Techniques are provided for selecting which videos to recommend to users by predicting the degree to which recommending each video will satisfy certain goals. To make the predictions, a trained machine learning engine is fed both collaborative filtering parameter values and content-based filtering parameter values. In the case of video-to-video recommendations, the collaborative filtering parameter values may be based on a video pair that includes a video in which a user has already demonstrated an interest. The machine learning engine generates a machine-learning score for each video. The machine learning scores are used as the basis for selecting which videos to recommend to a particular user.

Abstract: A technique is disclosed for calculating a value for a second color for a particular pixel. The technique selects a first set of neighboring pixels situated on a first side of the particular pixel, and a second set of neighboring pixels situated on an opposite side of the particular pixel. Based upon color values from the first set of neighboring pixels, the technique determines a first representative relationship, and based upon color values from the second set of neighboring pixels, the technique determines a second representative relationship. Based upon these representative relationships, the technique determines a target relationship between the value for the second color for the particular pixel and a value for a first color for the particular pixel. Based upon the target relationship and the value for the first color for the particular pixel, the technique calculates the value for the second color for the particular pixel.

Abstract: Methods and apparatuses for presenting targeted advertisements to DVR users are described. After a DVR has finished playing a recorded television program, or in response to other specified events, the DVR presents a screen which comprises a “save or delete” menu. In addition to the “save” and “delete” options, the menu additionally comprises one or more other options. Each of these other options may correspond to a separate promotional item. For example, a user's selection of such an option may cause the DVR to display or play an advertisement on the user's television set. Additionally or alternatively, these other options, when selected by a user, may cause the DVR to display a user interface through which the user can actually purchase a product or service. The product or service advertised or offered may be one that was featured or referenced in the television program that the user was just watching.

Abstract: A method and apparatus for allowing applications to access edited image data from an image editing application are disclosed herein. When the user desires to export edited images, the user causes the image editing application to display a plug-in user interface (UI). The plug-in UI may allow the user to enter exporting parameters, although this is not required. After the user selects an “export” button in the plug-in UI, the image editing application confirms with the plug-in on an image-by-image basis which of the images should be exported. The image editing application then generates an export version of the image. If necessary, the image editing application applies image adjustments to the master image to generate the export version. The image editing application then makes the export version available to the plug-in.

Abstract: A system defines at least one key event to be monitored by at least one agent, and creates a graphical model for the at least one key event. The system observes the at least one key event. The system infers a degree of attack on the computer system based on an observation of the at least one key event in conjunction with a result of an effect the at least one key event has on the graphical model. The system then adjusts a security policy based on an output of the graphical model.

Abstract: Data used and generated by the process of validating XML documents is divided into two categories: compile-time static data and runtime data. Runtime data may be specific to a particular XML document and changes when validating the XML document, while compile-time data does not change in this way. For example, compile-time data may be data that defines, according to a schema, the descendant elements and ordering between them. Runtime data is information generated to track which descendants occurred in a particular XML document being validated. Compile-time static data, once generated to validate a particular XML document, is cached within a shared volatile memory. Once the compile-time data is cached, the compile-time static data may be used to validate other XML documents without the need to regenerate the compile-time static data.

Abstract: A system comprises a packet data processing element; first network resource tracking logic operable to perform monitoring data packets as the packets pass through the network element; detecting network resource identifiers within the data packets; forming network resource identifier report messages that carry the network resource identifiers; forwarding the network resource identifier report messages to a bookmark processing server; storing records of each of the network resource identifiers carried therein; storing counters that identify numbers of times that associated network resource identifiers were requested; determining interesting network resource identifiers based on the records and decision steps; generating and providing a report of the interesting network resource identifiers. As one result, interesting network resource identifiers can be automatically found in network traffic and provided to a social bookmarking site.

Abstract: The invention relates to a method and apparatus for providing information in an easily customizable, interactive and collaborative format. The invention can be looked at as the combination of one or more functional components in one aspect, the invention features aggregating raw data on at least one DataServer connected to a communication network; performing analysis of that data using at least one AnalyticalServer that is connected to the network; maintaining a cache of the most recent data and analysis of that data from the AnalyticalServers on at least one ViewServer connected to the network; maintaining communications with the network for accessibility by users over the network; and maintaining an ApplicationServer on the network that, based either on requests of the user through the web server, or through an automatic refresh, generates display data using, for example, the cached information on the ViewServer.