Abstract: Adaptive failover occurs between a Layer Three (L3) based network tunnel and a Layer Four (L4) based network tunnel. An example of a L4 based network tunnel is a Secure Sockets Layer (SSL) tunnel and an example of a L3 based network tunnel is an Internet Protocol Security (IPSec) tunnel. SSL tunnels work through most firewalls and proxies, but may introduce latency and other performance problems. IPSec tunnels provide a more efficient performance, but may not work through some firewalls and proxies. The techniques include dynamically selecting a tunneling protocol in order to achieve a more efficient network tunnel performance when possible while maintaining consistent L3 connectivity from a variety of remote network environments.

Abstract: The disclosure provides a method for associating a detected therapy adjustment to a posture state and storing the association with a plurality of associations for the posture state. In a record mode, an implantable medical device is configured to store therapy adjustments for each posture state and allow a user to find efficacious therapy based upon review of the associations made during therapy. The system may determine the associations through implementation of a posture search timer and a posture stability timer. These timers allow the system to correctly associate therapy adjustments to posture states when the patient anticipates the posture change by adjusting therapy before engaging in the desired posture state. An external programmer may present a range of the therapy adjustments for each posture state to allow a user to review the therapy adjustments that have been made during the therapy.

Abstract: An MPLS-aware firewall allows firewall security policies to be applied to MPLS traffic. The firewall, which may be integrated within a routing device, can be configured into multiple virtual security systems. The routing device provides a user interface by which a user specifies one or more zones to be recognized by the integrated firewall when applying stateful firewall services to the packets. The user interface allows the user to define different zones and policies for different ones of the virtual security systems. In addition, the user interface supports a syntax that allows the user to define the zones for the firewall by specifying the customer VPNs as interfaces associated with the zones. The routing device generates mapping information for the integrated firewall to map the customer VPNs to specific MPLS labels for the MPLS tunnels carrying the customer's traffic.

Abstract: A method of manufacturing a neutron detector comprises forming a first wafer by at least forming an oxide layer on a substrate, forming an active semiconductor layer on the oxide layer, and forming an interconnect layer on the active semiconductor layer, forming at least one electrically conductive pathway extending from the interconnect layer through the active semiconductor layer and the oxide layer, forming a circuit transfer bond between the interconnect layer and a second wafer, removing the substrate of the first wafer after forming the circuit transfer bond, depositing a bond pad on the oxide layer after removing the substrate of the first wafer, wherein the bond pad is electrically connected to the electrically conductive pathway, depositing a barrier layer on the oxide layer after removing the substrate of the first wafer, and depositing a neutron conversion layer on the barrier layer after depositing the barrier layer.

Abstract: A device, such as an implantable medical device (IMD), programming device, or other computing device determines when a patient is attempting to sleep. When the device determines that the patient is attempting to sleep, the device determines values for one or more metrics that indicate the quality of a patient's sleep based on at least one physiological parameter of the patient. When the device determines that the patient is not attempting to sleep, the device periodically determines activity levels of the patient. Activity metric values may be determined based on the determined activity levels. A clinician may use sleep quality information and patient activity information presented by a programming device to, for example, evaluate the effectiveness of therapy delivered to the patient by a medical device.

Abstract: In general, this disclosure relates to maintaining security between an optical network terminal (ONT) and an optical network aggregation device in an Active Ethernet network. An optical network aggregation device includes one or more optical Ethernet switches that can be adaptively configured to support authentication of one or more ONTs. For example, the optical network aggregation device may include a controller with an authentication unit for managing ONT authentication and an optical Ethernet interface for transmitting and receiving data over the optical network. The authentication unit may exchange authentication request messages via the optical Ethernet interface with an ONT and grant the ONT access to the provider network based on the exchange, thereby preventing rogue devices from gaining access to the provider network.

Abstract: A router determines a graph of unicast tunnels that connect a set of edge routers that will distribute multicast traffic in a network, wherein the graph comprises vertices and edges connecting one or more vertex pairs. The router calculates a minimum-cost spanning tree for the graph based on edge metric values, wherein the minimum-cost spanning tree includes the graph vertices and a selected subset of the graph edges, and wherein the minimum-cost spanning tree includes a first vertex that represents an ingress one of the set of edge routers for the multicast traffic and a second vertex that shares one of the edges with a third one of the vertices other than the first vertex representing the ingress edge router. The router then establishes an MPLS-based multicast distribution tree based on the calculated minimum-cost spanning tree to distribute the multicast traffic from the ingress router to the edge routers.

Abstract: In general, the invention is directed toward techniques for controlling access to a network or other computing resource in order to slow down the execution of a password attack while providing minimal obstruction to normal network activity. The method includes generating a history of successful network logins, detecting symptoms of a network password attack, and activating countermeasures in response to the detection. The method further includes receiving a valid login request from the user while the countermeasures are activated and analyzing the history of successful network logins to determine whether the valid login request satisfies a match condition. The method further includes granting the user access to the network when the valid login request satisfies the match condition and denying the user access to the network when the valid login request does not satisfy the match condition even though the valid login request contains a valid username and a valid password.

Abstract: In general, the present disclosure is directed to techniques for displaying, e.g., events of multiple calendars or annotations in a word processor in a single view. In one example, a method includes, providing a first calendar and a second calendar, wherein the first calendar includes a first group of calendar events at least some of which have corresponding textual event details, and wherein the second calendar includes a second group of calendar events at least some of which have corresponding textual event details; receiving a user input to select one of the first calendar or the second calendar; displaying the one or more corresponding textual event details of the first group of calendar events for the first calendar; and displaying visual representations of the second group of calendar events for the second calendar without displaying the corresponding textual event details.

Abstract: The disclosure describes an implantable stimulation system that guides programming with a therapeutic tree. All possible stimulation parameters are arranged on the therapeutic tree, with each level of the therapeutic tree containing a different stimulation parameter type. Each level includes nodes that are connected to nodes of adjacent levels. A program path is created by moving through nodes of lower levels. The stimulation parameter types are arranged so that coarse adjustments occur at higher levels of the tree and fine adjustments occur at lower levels of the tree. The nodes of the program path define the stimulation parameters of the delivered stimulation therapy. The user may provide information such as efficacy input and/or medication dosage information to the system for identifying the most efficacious program path in treating pain of the patient. Additionally or alternatively, efficacy feedback may be received from physiological parameter sensors.

Abstract: A system and method for detecting malware on a mobile platform in a mobile network. The system and method verifies that an executable is malware-free by computing the checksum of the executable and comparing that checksum with a checksum obtained from a malware-free copy of the executable. The checksum is a sum of all 32-bit values in a code section and an import section of said executable, a byte sequence at an entry point in said executable, a size descriptor of an import table, a size descriptor of said import section, a cyclic redundancy check of said executable, or a combination thereof.

Abstract: The disclosure is directed to techniques for providing a patient-individualized efficacy rating. Different stimulation parameters impact efficacy. For example, efficacy may be a function of parameters such as electrode combination, stimulation amplitude, pulse width, and pulse rate. Efficacy may vary from patient-to-patient. For example, efficacy may vary according to age, gender, physiology, disease state, activity level, or activity profile. Comparable stimulation programs may provide different efficacy levels for different patients, according to patient characteristics or desires. Patients may rank efficacy parameters differently. The efficacy parameters may include desirable therapeutic effects and undesirable side effects. For one patient, optimization of a particular efficacy parameter may be the paramount concern. Other patients may be willing to compromise the outcome of the same parameter in favor of better outcomes with other efficacy parameters.

Abstract: An MPLS-aware firewall allows firewall security policies to be applied to MPLS traffic. The firewall, which may be integrated within a routing device, can be configured into multiple virtual security systems. The routing device provides a user interface by which a user specifies one or more zones to be recognized by the integrated firewall when applying stateful firewall services to the packets. The user interface allows the user to define different zones and policies for different ones of the virtual security systems. In addition, the user interface supports a syntax that allows the user to define the zones for the firewall by specifying the customer VPNs as interfaces associated with the zones. The routing device generates mapping information for the integrated firewall to map the customer VPNs to specific MPLS labels for the MPLS tunnels carrying the customer's traffic.

Abstract: The present disclosure relates to techniques for processing data requests using multiple request timers. An example method includes sending a request for data to an external device and starting a first request timer using a first request timeout value, the first request timeout value specifying a first amount of time to wait for receiving data that is responsive to the request. When first data responsive to the request is received prior to expiration of the first request timer, the method includes starting a second request timer using a second request timeout value, the second request timeout value specifying a second amount of time to wait for receiving additional data that is further responsive to the request. The method further includes determining whether the request is unsuccessful based upon expiration of the first request timer or the second request timer.

Abstract: In general, techniques are described for managing timers for large scale service statistics collection. For example, as described herein, a network device includes a timing wheel data structure defining a plurality of slots. A rate limiter selects up to a rate limit value of timer events stored in a first one of the slots, wherein the rate limit value is less than a total number of the plurality of timer events stored in the first one of the time slots. A timer service module services the selected timer events during the first time interval, wherein the timer service module defers at least one of the unserviced timer events from the first one of the slots to a second one of the slot. During a second time interval, the timer service module services at least one of the timer events deferred from the first one of the slots.

Abstract: In one embodiment, a method for processing queries initiated by users of mobile devices includes receiving an incoming message containing a query initiated by a user of a mobile device, and extracting the query from the received message. The message further includes obtaining a result of the query and creating an outgoing message with the result of the query for delivery to the mobile device.

Abstract: A computing device displays a call history graphical user interface (GUI). The call history GUI includes a new list and an old list. The new list may include new missed call elements and missed call elements associated with new unopened voicemails. The old list may include other call history GUI elements, such as old missed call elements and missed call elements associated with opened voicemails.

Abstract: A device includes one or more network interfaces to receive layer two (L2) communications from an L2 network having a plurality of L2 devices; and a control unit to forward the L2 communications in accordance with forwarding information defining a plurality of flooding next hops. Each of the flooding next hops stored by the control unit specifies a set of the L2 devices within the L2 network to which to forward L2 communications in accordance with a plurality of trees, where each of the trees has a different one of the plurality of L2 devices as a root node. The control unit of the device computes a corresponding one of flooding next hops for each of the trees using only a subset of the trees without computing all of the trees having all of the different L2 network devices as root nodes.

Abstract: The disclosure describes an implantable neurostimulator device for delivery of neurostimulation to treat head, neck, or facial pain or tension, including pain or tension caused by occipital neuralgia. The device may be a neurostimulation device having a miniaturized housing with a low profile that permits subcutaneous implantation at a stimulation site directly adjacent a neuralgic region at the back of the neck of a patient. For example, the device may be subcutaneously implanted at the back of the neck of a patient to relieve symptoms of occipital neuralgia.

Abstract: Techniques are described for initiating a video conference between two video conferencing devices by leveraging information obtained from two mobile phones that are engaged in a mobile phone session with one another and are each associated with a respective one of the video conferencing devices. A video conferencing device may obtain the information, including the telephone numbers for both mobile phones, using a Bluetooth connection between the mobile phone and the video conferencing device. A data center receives and maintains the mobile phone session information, determines whether each mobile phone engaged in the mobile phone session is associated with an available video conferencing device, and, if so, invites the associated video conferencing devices to initiate a video conference with one another.