Abstract: A system gathers real-time data about an enterprise over a network. A user device displays a dashboard showing a component business model map, a heat map, key performance indicators for components, key performance indicators for the enterprise, and gradients. The business is enhanced by making investments and changes to those operations having large gradients.

Abstract: A business enterprise is assessed by a consultant using a computer implemented tool for practicing component business modeling techniques. The tool builds a map of components, filters the map to form a heat map and identifies collaborations. Key performance indicators are evaluated.

Abstract: A rules engine assigns a set of appropriateness rules to a particular data collection. The set of appropriateness rules describes an optimum usage for the particular data collection based on a source of the particular data collection and a type of activity that is deemed best suited to utilize the particular data collection. In response to determining that a requesting computer is implementing an activity that matches the particular set of appropriateness rules, a database controller is directed to transmit the particular data collection to the requesting computer.

Abstract: A three dimensional web store having product images is created. Three dimensional product images are rendered from manufacturing information instead of the products themselves. The location of all products, advertisements, aisles, signs, and displays is determined for a real world store. The web store is then created using three dimensional internet or virtual world viewing and maneuvering capabilities, to appear identical to the real world store.

Abstract: A client-server application is provided to clients across a network. Requests from the client are accepted by a reliable proxy and sent to master and standby configurations of the client-server application. Each configuration processes the request to produce master and standby responses respectively. The proxy selects one response based on various criteria including a length being greater than the other response by more than a fixed value. The selected response is returned to the client over the internet. The configuration producing the selected response is thereafter designated as the master configuration. A recovery process may be initiated on the unselected configuration.

Abstract: A method and system for optimizing a configuration of mediation devices in a telecommunications central office. Specifications associated with mediation devices are provided. A configuration of mediation devices and legacy devices in a central office is generated. A specification is compared to an attribute of a mediation device in the configuration. The attribute is one of: (1) a distance between the mediation device and a legacy device to be connected to the mediation device, (2) an amount of data to be received by the mediation device from one or more legacy devices to be connected to the mediation device, and (3) a count of one or more legacy devices to be connected to the mediation device. The configuration is updated in response to the comparing of the specification to the attribute. The updating of the configuration provides an optimized number of mediation devices.

Abstract: A remote user, two-way authentication and password change protocol that also allows parties to optionally establish a session key which can be used to protect subsequent communication. In a preferred embodiment, a challenge token is generated and exchanged which is a one-time value that includes a random value that changes from session to session. The construction and use of the challenge token avoids transmission of the password or even the transmission of a digest of the password itself. Thus the challenge token does not reveal any information about a secret password or a digest of the password.

Abstract: Data is extracted from multiple diverse sources and copied into an initial staging area in order to be processed. A copy of the data is persisted in non-volatile storage. Quality functions perform checking on the copy and store a checked copy into a clean staging area. New data elements are created by enriching the checked copy. Joins, lookups, aggregations, and delta processing are used to process the data which is then formatted and filtered into a target filtering area making the data load-ready for target applications.

Abstract: Complex nested if-then statement on data objects in a digital computer are organized as a plurality of logical case statements; for each case statement, a set of binary condition arrays is provided and for each data object a condition set. Case statements are executed on the data objects for which a condition array from the set of binary condition arrays matches the condition set for the data object.

Abstract: A blended learning solution is defined by determining degrees of elements in learning zones. The zones are defined by the types of interactions of the learners. Both formal and informal learning is defined for each zone. A specialized circular display is constructed to depict the optimal blended learning solution.

Abstract: Access to data in a file created by a first application is provided to other applications without the need for use of the first application. A request is received from the other application for a document in the file. The document is retrieved in XML from using a specially developed database. Sections in the document may be expanded by retrieving content in HTML form from the file and inserting into the retrieval document. Data for attachments, image tags, and iframe links is obtained and inserted into the document. A complex XML object is created containing the entire expanded document. The object is converted into a SOAP message according to a complex set of rules and sent back to the requesting application over a communication link using any transmission protocol such as HTTP or HTTPS.

Abstract: A client-server application is provided to clients across a network. Requests from the client are accepted by a reliable proxy and sent to master and standby configurations of the client-server application. Each configuration processes the request to produce master and standby responses respectively. The proxy selects one response based on various criteria including a length being greater than the other response by more than a fixed value. The selected response is returned to the client over the internet. The configuration producing the selected response is thereafter designated as the master configuration. A recovery process may be initiated on the unselected configuration.

Abstract: A system and method of designing a secure solution which meets the needs of a customer but which is appropriate and repeatable and may use components which are insecure or not trusted. In its preferred embodiment, the security system includes subsystems selected from access control, information flow, identity and credentials management, integrity and assurance In each subsystem, elements are employed to reduce the effect of perils and to provide a repeatable system design.

Abstract: Image capture devices attached to a computer processor are located in a retail store. Items of merchandise for sale are tracked from their display position to a shopping container using optical tracking software. The software is capable of identifying the items and containers optically. A list of items in each container is maintained in a database. A customer may request a listing of items in a cart at any time via a query. At checkout time, there is no need to scan the items.

Abstract: A method for managing stock so that a merchant who provides both on-line and in-person shopping may dependably advise an on-line shopper regarding availability of an item. An approximate quantity available of the item is determined, and then adjusted according to an estimate of the quantity of the item held before checkout by in-person shoppers. When the result is less than a threshold, corrective action is invoked. The corrective action may be prompting the on-line shopper to select an alternative item, asking the on-line shopper to submit an order immediately, monitoring the approximate quantity during the on-line shopping session and informing the on-line shopper if the approximate quantity falls below a second threshold, and instructing an in-house shopping assistant to reserve the item for the on-line shopper.

Abstract: An improved method for enabling an electronic commerce web server to provide commercial promotions. Modules of selectively executable compiled web server code are included within the web server's larger body of compiled code. A database contains the terms of each promotion and an association of each promotion with one of the modules. When a commercial transaction arrives at the server, the transaction is checked for a qualifying value that matches one of the qualifying values of the promotions in the database. When a match is found, the associated module of selectively executable compiled web server code is executed, thereby providing the promotion.

Abstract: The invention is devised to facilitate the editing of a graphic displayed on a screen.

Abstract: A system and method for detecting a drone implanted by a vandal in a network connected host device such as a computer, and controlling the output of the drone. The system includes an inbound intrusion detection system (IDS), an outbound IDS, a blocker such as a firewall, an inbound trace log for storing a trace of inbound traffic to the protected device, an outbound trace log for storing a trace of outbound traffic from the protected device, and a correlator. When the outbound IDS detects outbound distributed denial of service (DDoS) traffic, the outbound IDS instructs the blocker to block the outbound DDos traffic. The correlator then recalls the outbound trace log and the inbound trace log, correlates the logs, and deduces the source ID of a message responsible for triggering the drone. The correlator then instructs the blocker to block incoming messages that bear the source ID.

Abstract: A method for providing secure access to information held in a shared repository, for example to electronic business cards stored on a server. A data owner registers with the server and provides information to be shared with selected data users. The server returns public-key cryptography keys. To access the information, a data user sends its public key to the data owner. The data owner encrypts the public key using the data owner private key, and sends the result to the server, along with permission to transfer information to the data user. The server decrypts the received result using the data owner public key, and compares the outcome with the data user public key. If they match, the server records permission on an access list. In response to a request for information the server checks the access list to determine whether the data user has permission. If so, the server encrypts the information using the data user public key, and transfers the result to the data user.

Abstract: A network management system determines whether end-to-end network paths are working, using network probes. A network component is deemed suspicious if included in every failed path, and deemed working if included in at least one working path. From the set of suspicious network components and the set of working components, a set of failed network components is deduced. The sets may be refined using SNMP to test visible components. In one embodiment, the set of failed network components is deduced by eliminating, from the set of suspicious network components, every network component that is included in the set of working network components. This may be done by finding the intersection of two sets: the set of suspicious network components, and the complement of the set of working network components, where the complement is with respect to the set of all network components.