Abstract: A new approach to network security includes manipulating an access point such that an initial communication from an external device is passed to a restricted subset of a computing network including a gatekeeper. The gatekeeper is configured to enforce a security policy against the external device before granting access to a less-restricted subset of the computing network. If requirements of the security policy are satisfied, then the gatekeeper reconfigures the access point such that further communication from the external device may be received by elements of the less-restricted subset. Enforcement of the security policy optionally includes performing a security audit of the external device.

Abstract: A system and method for intelligent data management enables the transport of items within a network by creating a first database defining a transport path of an item from an origin facility to a destination facility, and operations that affect the transport of items. In order to update the transport path and operations, a data management application receives changes. The application, and associated data storage device, includes user profile, table, network model and development model databases. Modules within the application manage users and data, implement ad hoc and holiday schedules, report errors, verify changes and create new databases to reflect the changes.

Abstract: An active pixel sensor in a p-type semiconductor body includes an n-type common node formed below a pinning region. A plurality of n-type blue detectors more lightly doped than the common node are disposed below pinning regions and are spaced apart from the common node forming channels below blue color-select gates. A buried green photocollector is coupled to the surface through a first deep contact spaced apart from the common node forming a channel below a green color-select gate. A red photocollector buried deeper than the green photocollector is coupled to the surface through a second deep contact spaced apart from the common node forming a channel below a red color-select gate. A reset-transistor has a source disposed over and in contact with the common node. A source-follower transistor has gate coupled to the common node, a drain coupled to a power-supply node, and a source forming a pixel-sensor output.

Abstract: A programmable logic device (PLD) adapted to enter a low-power or sleep mode with programmable wakeup pins in a wakeup group of pins is disclosed. Wake on a single pin change, wake on vector, and wake on a single pin transition are supported. The approach is to select the actively participating pins, enable the desired operation, define the wakeup condition, enter sleep mode, monitor the external signals coupled to the active pins, and exit sleep mode when the wakeup condition is detected.

Abstract: A method of transforming and sending data, comprising: receiving an image with an associated mask; transforming the received image; quantizing the transformed image; encoding the quantized image and associated mask; and transmitting the encoded image and mask; wherein transforming the received image comprises transforming the dimension subset by repeating steps of: preparing an input vector; determining a filter type; determining a first intermediate vector; determining a second intermediate vector; computing a transform vector from the sum of the first intermediate vector and the second intermediate vector; and computing an output value from the input vector and the computed transform vector.

Abstract: A method for control over the level of detail within a rendered object is provided. The method may be a program embodied on a machine readable medium. The method identifies a set of parent vertices defining a polygon within a rendered object. A child vertex of the set of parent vertices is generated and pushed toward a predetermined location within the anticipated contours of the rendered object. One of the parent vertices is then connected to the child vertex to generate an additional polygon. A graphics engine configured to control a level of detail in a rendered object through the generation of additional polygons in the rendered object is also provided.

Abstract: A wireless device having vertically and horizontally polarized antenna arrays can operate at multiple frequencies concurrently. A horizontally polarized antenna array allows for the efficient distribution of RF energy in dual bands using, for example, selectable antenna elements, reflectors and/or directors that create and influence a particular radiation pattern. A vertically polarized array can provide a high-gain dual band wireless environment using reflectors and directors as well. The polarized horizontal antenna arrays and polarized vertical antenna arrays can operate concurrently to provide dual band operation simultaneously.

Abstract: A system and method for actively validating a network device is provided. Nodes in a network game community are prompted to engage in interrogation and response to facilitate the identification of nodes operating with hacked, modified and non-typical game configurations. In one embodiment, a query is presented to a user's machine which triggers a response, and where the response indicates whether certain data at the user is valid and wherein invalid data is suggestive of illegal community behavior. Functions are triggered and data is queried to determine whether the state of game environment is operating according to known metrics or constraints. Various queries to test user integrity include memory peeks, confirmation of location of functions in memory, memory hashing, profiling of threads operating on the user machine, and combinations thereof.

Abstract: A network arrangement that employs a cache having copies distributed among a plurality of different locations. The cache stores state information for a session with any of the server devices so that it is accessible to at least one other server device. Using this arrangement, when a client device switches from a connection with a first server device to a connection with a second server device, the second server device can retrieve state information from the cache corresponding to the session between the client device and the first server device. The second server device can then use the retrieved state information to accept a session with the client device.

Abstract: A fishing spool line control system includes a cutter housing attached to an annular elastic cloth band that fits around and covers fishing line on a spool. Fishing line, such as tippet, is fed from the spool through a hole in the rear of the cutter housing, and is cut to desired length by a blade in the front of the cutter housing. A thumb rest behind the blade allows pressure to be placed on the cutter housing, allowing safer, easier, and more accurate cutting of the fishing line.

Abstract: Communicating between virtual machines on a host computer and remotely located devices connected to device interfaces of remote computers is disclosed. The method comprises establishing communication between the host computer and at least one remote computer in operative control of at least a first device interface and a second device interface; determining that the device interfaces belong to a set of supported device interfaces; associating the at least one remote computer with at least one virtual machine; presenting to the virtual machine, in forms recognizable by the virtual machine as forms in which interface functions are presented by local controllers, interface functions associated with the first device interface and the second device interface; executing commands in response to the interface functions associated with the device interfaces; and sending to the remote computer commands and/or data related to the presented interface and usable by the device interfaces.

Abstract: Initiating a virtual presence at a physical access point in response to a request for a service from a wireless access device is provided. A particular wireless service may be provided to a subscriber on an on-demand basis according to location and/or type of service requested. The service may be terminated when demand for the service comes to an end whereby a common wireless service infrastructure may be shared amongst service providers thus eliminating the need for radio channel coordination and otherwise enhancing service quality for those service providers.

Abstract: Techniques for determining which resource access requests are handled locally at a remote computer, and which resource access requests are routed or “redirected” through a virtual private network. One or more routing or “redirection” rules are downloaded from a redirection rule server to a remote computer. When the node of the virtual private network running on the remote computer receives a resource access request, it compares the identified resource with the rules. Based upon how the identified resource matches one or more rules, the node will determine whether the resource access request is redirected through the virtual private network or handled locally (e.g., retrieved locally from another network). A single set of redirection rules can be distributed to and employed by a variety of different virtual private network communication techniques.

Abstract: A device for ophthalmologically treating the eye has a treatment laser beam (UV) for ablating parts of the cornea (12) and a fixation light beam (24). A fixation light spot in the vicinity of the fovea (30) and the fovea are imaged by means of a camera (40). This makes it possible to check whether the patient has reliably fixated the fixation light source (22). In addition, the pupil can be recorded and both recordings can be superimposed.

Abstract: A fluid pathway is provided with a flow controller in at least a portion of its length wherein the flow controller comprises an active surface capable of influencing the fluid flow through the fluid pathway, the configuration of the active surface conforming to at least one logarithmic curve conforming to the Golden Section.

Abstract: An enhanced performance field programmable gate array integrated circuit comprises a field programmable gate array and other functional circuitry such as a mask-programmable gate array in the same integrated circuit. A circuit interface provides communication between the field programmable gate array, the mask-programmable gate array and the integrated circuit I/O.

Abstract: A privacy impact assessment is performed to determine and implement privacy requirements for any information resource that uses personal information. Data may be collected and analyzed regarding the information resource and the personal information, and applicable laws, regulations, and policies may be considered to determine privacy requirements. Such requirements may include, for example, access controls, information retention periods, systems requirements, and risk assessments.

Abstract: An apparatus and method for enhancing the security of a cluster box unit which includes a protective enclosure, internal cabinetry, door, hinge and locking system. The cluster box unit may also include outgoing mail compartment doors that are heavily constructed and rigidly reinforced, with the locks carried thereon protectively shielded, and with the extensible bolts of these locks being engaged by brackets that not only lock the outgoing mail compartment doors but also the master loading doors of the cluster box units. The cluster box unit may also include master loading doors are provided with hinges that extend the full height of the doors—hinges that are defined by pivotally interlining elements of extrusions that very sturdily mount the master loading doors, that prevent prying or bending the doors in the vicinities of their hinges.

Abstract: A system and method for maintaining direct, two-way asynchronous communication between a client and a web server. An HTTP-compliant request is communicated from a client to a web server. The HTTP request is configured to initialize a CGI that operates within or in conjunction with the web server. A task, associated with the CGI, is executed in accordance with the HTTP request. The task is configured to perform the two-way asynchronous communication with the client until terminated by the client or the CGI. The task includes an operation in which client request data is listened for and read by the CGI through the web server. The task further includes an operation in which data is created and sent by the CGI to the client through the web server.

Abstract: A messaging system comprises a server which registers clients (users) and stores uploaded contact data in contacts databases. The contact databases have meta data including profile attributes indicating the subject matter profiles of the contacts. A content manager receives content items such as collateral parts and message text and stores them in content databases, also with meta data having profile attributes. When a client requests a message to be sent to a contact, the content manager automatically identifies relevant content items according to the profile attributes, and a messaging engine sends a message with a wrapper having links to these content items. When the contact responds, a response management function captures response data and instructs a build engine to build content from the identified items. The content is then sent to the contact.