Abstract: An Extended SmartCard file system is proposed which resides in one flat file within the ISO file system of a SmartCard. A second file containing user information like size of the file system, owner information, and key fields is used to configure the file system driver dynamically. However, this file may be omitted if the file system driver is statically initialized. The nested file system of the present invention has the advantage that files can be fully dynamically accessed and edited without affecting the underlying ISO file layout, i.e. the outer fixed structure of the outer file system. Further, data integrity and consistency are achieved by a transaction oriented commit concept. Additionally, all security mechanisms of the underlying SmartCards in terms of data protection are fully maintained and are enhanced in cases of power loss or unexpected card removal as two distinct directories are provided for data management.

Abstract: In a system for finding output information such as an output link identification, by a longest-matching prefix search in response to a search key, only a search data structure comprising search tables is provided which is derived from a basic data structure comprising detailed prefix tables. The full basic data structure need not be maintained, but auxiliary information is provided in the search tables of the search data structure to enable reconstruction of relevant portions of the basic data structure when updates have to be made. In an updating procedure, first the relevant search tables are found and then reconverted to the associated prefix tables from which they were derived. Updating is performed on the reconstructed prefix tables which are then reconverted into search tables to be inserted into the search data structure, for replacing or supplementing search tables that required updating.

Abstract: A method, apparatus and computer product that enables one or more computing devices to discover and use services over a network, which may be ad-hoc when the computing device is mobile. Service discovery is based on periodic multicasting of exported service descriptions to nearby devices over the (ad-hoc) network. Middleware enables a device to discover, advertise and use services. This enables software clients on the same device to share a service implementation (in the case of a local service) or to share an implementation proxy (in the case of a remote service). Each device being aware of the services (and service locations) that are currently available generally reduces the response time associated with accessing available services. While service descriptors are multicast and discovered, the service software is only downloaded on the device when the service is used. This enables economical resource management that is particularly useful for mobile devices.

Abstract: This invention makes it possible for a user to know the characteristics of a quantization table used for image compression. An apparatus and method are provided wherein image data compression software displays the compressed image data (expanded image data) according to the JPEG method expanded by a JPEG expansion unit on a display unit 20 through an image display IF 18. Moreover, the image data compression software 5 reflects all values of n×n quantization levels included in a quantization table (first quantization table) supplied from a block decoding section used to generate input JPEG data and displays quantization index value to be indexed (first quantization index value before changed) on the display unit 20.

Abstract: An apparatus, a search tree structure, methods and computer devices for constructing and using the structure to efficiently accomplish policy based service differentiation in packet networks is presented. This invention reduces the number of steps performed to implement packet classification. It uses a method of preprocessing a given set of policy rules by modeling the conditions in the rules as multidimensional hyper-cubes, a simple and compact search tree is constructed. Using this search tree, packet classification is achieved determining all applicable policies for a packet with a few compare and branch instructions.

Abstract: A method, system and product for resource constrained network elements to validate a set of records in a network repository by verifying validation information stored in the repository by a record validator. A record validator with adequate computational resources validates one or more set of records in a repository such a network directory, and stores validation information records in the repository. The resource-constrained network elements run simple checks to verify the validation information records thus stored. The validation information records may include the modification or creation time of validated records in the repository. The network elements compare the time stored in the validation information records to the actual modification or creation time of records to verify validity information. Cryptographic signature for enhanced security, and validation status records may be used to ensure fault-tolerant behavior.

Abstract: An image map Java Bean or ActiveX control has a display image property and a mapping image property. The mapping image comprises a plurality of regions colored from a pre-determined sequence of colors. When instantiated the image map displays the display image. The image map is, responsive to user interaction with the display image, to obtain a coordinate in the display image and to reading an index color of a corresponding coordinate in the mapping image. If the index color is from the pre-determined sequence of colors, the image map indicates user selection of a region of the display image by highlighting the region.

Abstract: This invention is a method and apparatus which provide a solution to the problem of constructing efficient and secure digital signature schemes. It presents a signature scheme that can be proven to be existentially unforgeable under a chosen message attack, assuming a variant of the RSA conjecture. This scheme is not based on “signature trees”, but instead it uses a “hash-and-sign” paradigm, while maintaining provable security. The security proof is based on well-defined and reasonable assumptions made on the cryptographic hash function in use. In particular, it does not model this function as a random oracle. The signature scheme which is described in this invention is efficient. Further, it is “stateless”, in the sense that the signer does not need to keep any state, other than the secret key, for the purpose of generating signatures.

Abstract: A robust means of watermarking a digitized image with a highly random sequence of pixel brightness multipliers is presented. The random sequence is formed from ′robust- watermarking-parameters′ selected and known only by the marker and/or the marking entity. A watermarking plane is generated which has an element array with one-to-one element correspondence to the pixels of the digitized image being marked. Each element of the watermarking plane is assigned a random value dependent upon a robust random sequence and a specified brightness modulation strength. The so generated watermarking plane is imparted onto the digitized image by multiplying the brightness value or values of each pixel by its corresponding element value in the watermarking plane. The resulting modified brightness values impart the random and relatively invisible watermark onto the digitized image. Brightness alteration is the essence of watermark imparting.

Abstract: This invention provides methods and apparatus as a countermeasure to image distorting. Several image distorting algorithms have been developed that are intended to attack and obliterate robust relatively invisible image watermarks. These algorithms modify a watermarked image so subtly by geometric distortion that the modification is essentially unnoticeable to a human observer. However, their effect on imbedded relatively invisible watermarks can be devastating, often successfully rendering them unextractable. A method of the present invention involves detecting the presence of distortion in a presumed distorted image, then measuring the magnitude and type of distortion, and finally creating a reoriented image from which the measured distortion has been removed. Once image distortion is removed, conventional invisible watermark extraction methods can be employed to extract the watermark from the reoriented image.

Abstract: An object of the invention is to provide an information processing system that enables a user to always use a business object in the assurance of its credibility. It provides a business object (software component) for use in highly secured information processing, such as an accounting calculation or an electronic commerce, is rendered to contain therein electronic certificate and signature of its provider, in addition to object management information such as term's validity information. In so doing, it becomes possible to check credibility of the object. Also, if a given object is found to have a problem about its credibility, another provider of another object with the same name that exists on a predetermined object retrieval path, as well as its term's validity information will be checked to automatically locate such an object on a network that passes the test of credibility, thereby to automatically correct the security problem.

Abstract: This invention provides methods, apparatus, system, and article of manufacture which solve the problem of mismatch between the keywords employed by a user in making a query and those assigned by the manual or automatic classification system stored in the system's keyword index. The system records the initial keyword(s) input by the user and holds them until the user is either satisfied or gives up. If in a query session the user is satisfied with the object(s) retrieved from the repository, the system associates the initial keywords(s) with the retrieved object(s). This facilitates the object's retrieval by the same user or subsequent users who input the same keywords. The keyword index is modified directly when, for example, a single service or application controls the interaction between user and repository, end to end.

Abstract: A system simplifies a geometric model to accelerate the rendering of the geometric model. A surface description of the geometric model is stored in one or more of the system memories. A wire-frame description of the geometric model is also stored. A surface simplification process alters the surface description to create an approximation of the original surface description. A wire-frame draping process drapes the wire-frame description onto the simplified surface and simplifies one or more of the line segments that are draped, the simplified line segments and the simplified surface description are rendered onto a display device.

Abstract: An improved method for consistent updates of redundant data in a database is achieved advantageously by providing a dependency model identifying source fields and respective derived fields. The model having the necessary information for dependent data to be identified and calculated on a change of respective source data according to some predetermined rules. Further, by recording changes, i.e., modifications to data involved in a redundancy, and propagating changes including cascaded changes directed to the derived fields using the rules defied in said dependency model. Advantageously, the dependency model is stored as a database table (2) and the changes are recorded in a change table in the database. The step of recording changes is separated from the step of propagating changes to derived fields in order to improve performance.

Abstract: The present invention provides methods, devices and systems for dynamically adjusting transcoding parameters so as to increase the benefits of transcoding. Methods of adaptation are designed to cope with the variability of network characteristics and of the size of transcoded images. The invention also provides a method and apparatus to enable the transcoding proxy to adjust a quality-size tradeoff on a per-image and/or a per-client basis. The adaptive transcoder chooses different parameters for each object, and provides performance improvements. The invention further provides a general framework for making policy decisions taking into account available bandwidth, content and type of image, and user preferences. The invention also includes methods for generating feedback about the choice of optimal transcoding parameters to the user.

Abstract: The Virtual Machine is viewed by many as inherently insecure despite all the efforts to improve its security. This invention provides methods, apparatus, and computer products to implement a system that provides operating system style protection for code. Although applicable to many language systems, the invention is described for a system employing the Java language. Hardware protection domains are used to separate Java classes, provide access control on cross domain method invocations, efficient data sharing between protection domains, and memory and CPU resource control. Apart from the performance impact, these security measures are all transparent to the Java programs, even when a subclass is in one domain and its superclass is in another, when they do not violate the policy. To reduce the performance impact, classes are grouped and shared between protection domains and map data lazily as it is being shared.

Abstract: Integrated circuit cards comprising a microprocessor, volatile memory (RAM), non-volatile memory (ROM, EEPROM), and a power coupling device allowing external power to be supplied to the card. The integrated circuit cards further comprise failure protection device for maintaining power for a short period of time in case of a power supply failure, and a power-failure detector sensing a power supply failure. This power-failure detector triggers the transfer of information from the volatile memory to the non-volatile memory if a power supply failure is sensed. The failure protection device provides power for this transfer. The integrated circuit cards further comprise a device for setting a power supply failure indicator (PF) into the non-volatile memory if a power supply failure is sensed by the power-failure detector, in order to leave a trace that a power supply failure has occurred, where the failure protection device provides the power for setting the indicator (PF).

Abstract: This invention relates to the electronic distribution of business card information. There is provided a method and apparatus for distributing smart card information comprising the steps of: acquiring electronic information from a first smart card; acquiring an electronic address from a second smart card; and sending the information from the first smart card to the electronic address of the second card. This allows electronic information from one smart card to be sent to an e-mail location contained on another smart card without the e-mail location of the second smart card being manually entered by the card carrier.

Abstract: This invention solves problems due to employing error degraded data in digital processing. It particularly solves multi-generation problems wherein transform data degrade during each inverse transform and forward transform cycle even without any processing due to the rounding and clipping errors. It provides methods, systems and devices for reduced-error processing of transform-coded data. After inverse transformation of transform data, high-precision numbers are converted to integers and clipped to an allowed range forming converted data. High-precision differences are obtained by subtracting the high-precision output of the inverse transform from the converted data. The converted data can be manipulated and sent to output devices which expect integer data. Processed high-precision numbers are formed by adding the high-precision differences to the processed converted data. Thus, the rounding and clipping errors are greatly reduced in the processed high-precision numbers.

Abstract: A computer system and method for simplifying annotations on a surface includes a tolerance process creates a tolerance window lying in a plane and centered on the query point at the end of a test edge and perpendicular to the test edge. The tolerance window is defined by a first tolerance that specifies an amount of first error measured by the distance from a simplified path to an original path in the plane tangent to the surface, and a second tolerance that specifies an amount of second error measure by the distance from the simplified path to the original path in the plane perpendicular to the surface. The original path is a set of original edges on the surface. A point projection process that projects a second end point of one or more second edges onto the plane of the tolerance window. The second edges has the query point also as an end point where the projection of the second end points are projected points.