Abstract: A system and method for re-synchronizing or resetting packet sequence numbers including allowing a sender to send packets with a special sequence number pattern to cause convergence of the sequence numbers on a receiver side. In a preferred embodiment, no explicit routing protocol based sync-up between Sender and Receiver is required. One embodiment of the invention can provide for a maximum drop of two packets regardless of network bandwidth between sender and receiver, or of the processing power of the sender or receiver. In another embodiment, resynchronization can be achieved with no, or one, packets dropped. The implementation can be solely on a sending side of the transfer so that a receiver can operate according to standard protocols and sequencing rules without modification.

Abstract: Methods, systems, and an apparatus for generating and dispatching a flexible control key to be appended with the data packets while being dispatched across a plurality of software modules running on the integrated network security device, are provided. The control key is divided into two sections: an operations (ingress/egress) section, and an application section. The ingress section includes the invariable-ordered set of operations to be performed to the data packet at the device's input. The egress section includes the invariable-ordered set of operations to be performed to the data packet at the receiver's address. The application section includes the sequence of applications to be performed to the data packet while being processed by the integrated network security device. The operation section is encoded using bit encoding technique. The application section is encoded by using a binary operation encoding technique, which allows variable sequences of execution.

Abstract: A root node sets wireless network timer values by using dynamic location information of a plurality of non-root nodes. In an embodiment, the root node and the non-root nodes are bridges, wherein the non-root bridges are connected to the root bridge in a point-to-point or point-to-multipoint manner. The locations of the nodes are determined by using a location system and locations receivers. The root node and each of the non-root nodes use this location information to determine the optimum timer values for the wireless network, thereby improving throughput on the wireless network. In one embodiment, the location system is the global positioning system (GPS). The location receiver is a GPS location receiver that is embedded in each of the nodes. In another embodiment, the GPS location receiver is external to the nodes, and the location information is determined remotely.

Abstract: An application server system is provided having a core engine connecting one or more protocol providers to one or more applications. In a preferred embodiment, the one or more applications run on a respective one or more virtual machines having their own execution threads. A thread pool may be used to spawn instances of applications or scripts. Preferably, the core engine, the protocol providers, and each of the one or more virtual machines run in separate AppDomains. In another embodiment, a visual designer is provided preferably having XML conversion capability and interactive debug capability.

Abstract: Methods and systems are provided for managing network traffic in a network device based on matching criteria. The method includes providing a plurality of objects associated with a packet of the network traffic; creating a set of criteria corresponding to the type of objects; and accepting the packet if the plurality of objects satisfies the set of criteria.

Abstract: A static neighbor configured network device is configured with a static neighbor feature including a static neighbor list of network devices. The static neighbor configured network device is in a network segment that includes a dynamically configured network device. The static neighbor configured network device receives a multicast packet from the dynamically configured network device. It is determined if the dynamically configured network device is included in the static neighbor list of the static neighbor configured network device. The multicast packet is accepted if the dynamically configured network device is found in the neighbor list for the static neighbor configured network device. Also, adjacency for the static neighbor configured network device is not lost with any other currently adjacent network devices when the multicast packet is received.

Abstract: In one embodiment, a method for determining a contour simplification of an object for a simulation is provided. An object in a layout of a transistor design to be created with the photolithographic process is determined. The object includes a width and a length in the layout. A contour simulation is performed to determine a generated contour object. The contour simulation simulates parametric variation factors that may occur in the photolithographic process. An adjusted width and adjusted length of the object is then determined based on the generated contour object. The adjusted width and the adjusted length are usable to determine a parametric model for simulation of the object. For example, a layout versus schematic (LVS) tool may back-annotate the layout. Then, a SPICE simulation may use the output of the LVS tool to verify the electrical behavior of the transistor using the adjusted width and adjusted length.

Abstract: A method of providing a game for a gaming device is provided. The method includes providing a plurality of average values. Average values in the plurality of average values represent different values of a prize pool. A wager amount and an input to initiate game play are received. An average value is selected from the plurality of average values and a random award is determined from the prize pool. The random award is determined from the average value selected from the plurality of average values.

Abstract: In one embodiment, a focus on an focus item associated with a controllable item is determined. For example, the focus may be moving a pointer over an focus item displayed on a display. One or more functional actions for the controllable item are then determined based on the focus being on the focus item. For example, if the controllable item is a camera and the focus is on an icon for the camera, then one or more functional actions for the camera are determined. The one or more functional actions are then assigned to one or more inputs on a input device. The input device can now be used to perform the one or more functional actions by using the one or more inputs. For example, the user may select one of the inputs, which sends signals to a processing device. The processing device can then determine the functional action assigned to the input and cause the action to be performed with the controllable item.

Abstract: In a System-in-Package (SiP) module, a method and a system for optimizing the timing margin of source-synchronous interface clocks is provided. Clock signals generated by first device are transmitted to serpentine traces located on a Printed Circuit Board (PCB) which adjusts the active edge of one signal relative to another signal. The serpentine trace introduces a delay in the clock signal thereby optimizing timing margins. By providing access to signals otherwise internal the SiP, testing and signal verification is also simplified.

Abstract: Techniques for conducting a meeting using a meeting management system are provided. A connection from a user to a connection interface is received for a meeting being offered by the meeting management system. An input is received that provides contact information for a user. The user may choose to be a virtual participant in the meeting. A meeting interface is provided during the meeting using the meeting management system where the interface includes an option to contact the user. The user is listed as a virtual participant in the meeting. A request to contact the user is received at the meeting interface and the user is automatically connected to the user using the contact information.

Abstract: A method and system for preventing the detection of an operating system by an intruder, the operating system installed on a host in a network, is provided. The intruder transmits a network probe for operating system detection. The network probe is identified and a response is generated to the network probe, generated by the operating system, is modified. The modified response provides the intruder with false information related to the operating system, thereby misleading the intruder about the type of operating system.

Abstract: Disclosed is a microelectromechanical (MEM) speaker device. In one embodiment, the MEM speaker device includes: (i) a base layer; (ii) a device controller; (iii) a coil layer connected to magnetic material; (iv) an oscillator connected to a spring and the magnetic material; (v) a spring between the oscillator and a support layer; (vi) a protective layer over the oscillator; and (vii) a support post connected to the oscillator, the base layer, the protective layer, and the coil layer. Embodiments of the invention can provide a MEM speaker device where control of the oscillator by electromagnetic force produces sound energy.

Abstract: A one-arm data center topology routes traffic between internal sub-nets and between a sub-net and an outside network through a common chain of services. The data center topology employs layer 4 services on a common chassis or platform to provide routing and firewall services while reducing the number of devices necessary to implement the data center and simplifying configuration. Load balancing is provided by a load balancing device. In the one-arm topology, policy based routing or client network address translations or NAT pushes traffic to the CSM.

Abstract: A method and apparatus for initiating a zeroization process in an electronic device is provided. Diagnostic information is provided by a plurality of sub-systems such that when one or more conditions are detected that are expected to cause the electronic device to experience a failure in the near future or if the electronic device appears to have been compromised, then the zeroization process is triggered.

Abstract: Allocation of buffer space for segment re-ordering is restricted based on a probability that the flow would consume too much space. A flow's current or recently past space consumption is used to predict the flow's activity with respect to future consumption. If the prediction of future consumption is high relative to other flows and to the total allocable buffer space in the device, then a decreasing amount of space than would otherwise be provided is allocated to the flow. In a preferred embodiment, if a flow's buffers are below a predetermined threshold for the flow (i.e., the “flow threshold”), and the amount of overall system memory space is above a predetermined system threshold then buffer allocation can proceed normally for that flow. For example, all of an additional amount of space that the flow may currently be requesting can be allocated to the flow.

Abstract: Techniques for creating facial animation using a face mesh are provided. The techniques include determining a face mesh sequence. A portion of the face mesh sequence is then fitted to an image of the face. For example, a first frame of the face mesh sequence is fitted to the image. The face image is then projected onto the portion of the face mesh based on the fitting. Also, a hair model may be generated and fitted onto the face mesh sequence. Additionally, changes in color differences between sequences of the face mesh may be computed. The face mesh sequence is then played to create a facial animation sequence for the face image. The color differences that were created may also be added to the sequences as they are being played. Accordingly, the playing of the face mesh sequence creates a realistic facial animation of the image of the face.

Abstract: A method and apparatus for authorizing a file to use stored information for executing a process in a Linux operating system. The file includes an executable linking format, an application authorization data, and other attributes for the application.

Abstract: In one embodiment, an apparatus for three-dimensional (3-D) image acquisition can include: (i) first and second lenses configured to receive light from a scene; (ii) first, second, third, and fourth sensors; (iii) a first beam splitter arranged proximate to the first lens, where the first beam splitter can provide a first split beam to the first sensor, and a second split beam to the second sensor; and (iv) a second beam splitter arranged proximate to the second lens, where the second beam splitter can provide a third split beam to the third sensor, and a fourth and split beam to the fourth sensor. For example, the sensors can include charge-coupled devices (CCDs) or CMOS sensors.

Abstract: An architecture, arrangement, system, and method for providing service access in a data center are disclosed. In one embodiment, an arrangement can include: an aggregation switch configured to transfer data between a network and an access layer; and service modules coupled to the aggregation switch, where each service module is configured to provide a service for the data when selected. The service modules can include: firewall, load balancer, secure sockets layer (SSL) offloader, intrusion detection system (IDS), and cache, for example. Further, the service selection can be substantially transparent to an associated server.