Abstract: A method and apparatus for proactive information security management is described. In one embodiment, for example, a computer-implemented method for controlling access to sensitive information, the method comprising: maintaining access constraint data that can be used to control access to the sensitive information, wherein the access constraint data includes match pattern data and apply pattern data; receiving a semantic query from a querier requesting access to the sensitive information; based on the match pattern data, determining whether the semantic query should be constrained according to the apply pattern data; where said semantic query should be constrained according to the apply pattern data, rewriting the semantic query according to the apply pattern data to produce a rewritten query; executing the rewritten query against a database that contains the sensitive information; and returning any results of executing the rewritten query.

Abstract: A universal print driver allows an application program to print to any printer available on a network without the user having to perform the configuration that is required in conventional printing arrangements. The universal print driver includes functionality for performing printing device discovery to determine printing devices that are available to process print data. The universal print driver allows users to manage options and settings for printing devices through the universal print driver. The universal print driver may also be configured with a “best fit” matching function that selects an available printing device to process print data that has characteristics that most closely match user-specified characteristics. The universal print driver generates a graphical user interface that allows users to view printing devices available to process print data and to select options and settings for printing devices.

Abstract: In an embodiment, a computer-implemented method comprises receiving an application identifier value associated with a printed application; receiving a media size; receiving a machine identifier value associated with a first document processing machine; determining programming instructions for a second document processing machine based on said received application identifier value, media size, and machine identifier value.

Abstract: Techniques and systems for automatically configuring devices to interact with “legacy” wireless access points (“WAPs”) are disclosed. According to one technique, a user programs a WPS-enabled WAP with the configuration information of a “legacy” WAP. This makes the WPS-enabled WAP “aware” of the “legacy” WAP. When any other user brings his device within discovery range of the WPS-enabled WAP, the WPS-enabled WAP sends, to that device, a list of the WAPs of which the WPS-enabled WAP is aware. The device's user selects one of the WAPs (e.g., a “legacy” WAP) from the list. The WPS-enabled WAP receives the user's selection and sends, to the device, the configuration information for the selected WAP. The user's device configures itself, using the configuration information, to interact with the selected WAP. Thereafter, the user's device can access a network through the selected WAP, even if the selected WAP is a “legacy” WAP.

Abstract: An approach for reconciling a data warehouse includes automatically identifying, based upon a change made to a definition of an object, one or more other objects in the data warehouse that are affected by the change made to the definition of the object. The object and the other objects may be any type or form of data, for example, database tables or routines, and the invention is not limited to any particular type of object. Dependency analysis is used to evaluate dependency data to identify the one or more other objects affected by the change made to the definition of the object. The dependency data specifies dependencies between the object and the one or more other objects. The dependency data may also specify dependencies between the one or more other objects. As described in more detail hereinafter, the dependency data used may vary depending upon a particular function to be performed.

Abstract: A system and method for enabling a second database instance to more quickly process a request to execute a database statement that has previously been executed by a first database instance is described. In one embodiment, the method involves sending the database statement from the first database instance to the second database instance, and generating by the second database instance one or more structures needed to prepare the statement for execution, such as a parse tree and an execution plan for the statement. If at some point in the future, the second database instance receives a request to execute the same statement, the above structures can be used for execution, thereby eliminating the need for one or more potentially time-consuming operations, such as generation of a parse tree or execution plan for the statement.

Abstract: An apparatus comprising three memory portions and logic for programming the memory portions is presented. The first memory portion comprises a plurality of first data structures, each which includes an IGP label and an adjacency identifier that identifies one of a plurality of outgoing interfaces in the network element. The second memory portion comprises a plurality of IGP load-halancing entries, each of which includes two or more reference values that point to two or more of the plurality of lirsi data structures. The third memory portion comprises a plurality of BGP load-balancing entries, each of which includes an index value and a pointer. The fourth memory portion comprises a plurality of second data structures, each of which includes a network address identifier and a unique value associated with two or more of the plurality of BGP load-balancing entries.

Abstract: An apparatus for VPN fast convergence in MPLS networks is disclosed. The apparatus comprises a first memory portion, a second memory portion, and a first logic for programming the memory portions. The first memory portion comprises a plurality of first data structures, where each of the plurality of first data structures includes an IGP label and an adjacency identifier that identifies one of a plurality of outgoing interfaces associated with the apparatus, where each IGP label indicates a Label Switched Path (LSP) through a network. The second memory portion comprises a plurality of second data structures, where each of the plurality of second data structures includes a network address identifier, a VPN label associated with the network address identifier, and a pointer that indicates one of the plurality of first data structures in the first memory portion, where each VPN label identifies a VPN that is reachable over the network.

Abstract: A method and apparatus for configuring an imaging device is provided. A first imaging device may monitor communications exchanged between clients and imaging devices over a network to identify requests to process electronic documents. In response to the first imaging device either detecting a particular request, to process an electronic document, issued to a different imaging device than the first imaging device or receiving at the first imaging device the particular request to process the electronic document, the first imaging device may update its own current configuration for processing electronic documents. For example, an imaging device may update its own current configuration to reflect the most popular way in which electronic documents have been processed by imaging devices on the network.

Abstract: A method and apparatus for performing an action in response to a file system event is provided. According to one aspect, sets of “event listeners” are associated with a file hierarchy and/or the nodes thereof. Each event listener contains a set of “event handlers.” Each event handler corresponds to a separate type of event that may occur relative to the file hierarchy's nodes. When an event is going to occur relative to the hierarchy or a node thereof, all event listeners that are associated with that hierarchy/node are inspected to determine whether those event listeners contain any event handlers that correspond to the event's type. Those event handlers that correspond to the event's type are placed in an ordered list of event handlers to be invoked. As the event handlers in the list are invoked, programmatic mechanisms that correspond to those event handlers are executed to perform customized user-specified actions.

Abstract: A method for detecting unavailable network connections comprises, at a first data processing node that is hosting a transport protocol connection that uses a plurality of sequence values to identify messages sent to a peer node, wherein the first node is communicatively coupled to a second data processing node serving as a redundant backup, periodically sending a checkpoint sequence value to the second node; detecting that either the transport protocol connection or a process using the transport protocol connection is unavailable, without use of a timeout; and in response thereto, sending a notification to the peer node, wherein the notification includes the checkpoint sequence value. One embodiment provides for rapidly detecting and responding to failure of a TCP process without using long timeouts as conventionally provided in long-lived applications that run on top of TCP.

Abstract: Techniques are provided for deploying applications hosted by an application service provider. An application in a first environment is automatically deployed to a second environment in response to receiving a request over a network from the party for whom the second environment is being hosted. The first environment may be an environment where applications are developed by the party over the network. Deployment of the application may entail provisioning of an environment for the application.

Abstract: A centralized resource manager manages the routing of audio or visual information within a device, including a handheld device such as a smartphone. The resource manager evaluates data-driven policies to determine how to route audio or visual information to or from various input or output components connected to the device, including headphones, built-in speakers, microphones, bluetooth headsets, cameras, and so on. Among the data considered in the policies are connection status data, indicating if a device is connected, routing status data, indicating if a device is permitted to route information to or from a component, and grouping data, indicating logical relationships between various components. Components may be considered inherently routable, automatically routable, or optionally routable. Numerous other uses exist for such data, including providing simpler and more logical management interfaces.

Abstract: Techniques are described to increase the diversity or focus of image search results. A user submits an original query to search for images. A server generates a first results set by executing the original query using metadata associated with each image. The server selects, from the first results set, a specified number of results ranked highest and generates a list of terms from the metadata of each of the results selected. The terms may be only the tags of the results. The server generates an updated query using terms in the list that may be weighted based on the frequency of the term in the list or include only a specified number of the highest occurring terms in the list. The server generates a second results set by executing the updated query using metadata associated with each image. The second results set is then stored and displayed to the user.

Abstract: Techniques are described herein for synchronizing cluster time. According to one technique, a master node is appointed in a cluster. Other “slave” nodes periodically synchronize their clocks with the master node. To synchronize its clock with the master node, a slave node sends a timestamped message to the master node, which also timestamps the message and sends the message back to the slave node, which then timestamps the message again. Based on the timestamps, the slave node is able to determine the difference between the master node's clock's time and slave node's clock's time, compensating for the message travel time between master node and slave node. Depending on various circumstances, and based on the determined difference, the slave node adjusts its clock so that the time indicated by the slave node's clock at least begins to approach more closely the time indicated by the master node's clock.

Abstract: A method and apparatus for sharing personal media using a digital recorder transfers multimedia content via email to a digital video recorder.

Abstract: A cryptographically signed filesystem provides a central database resident on a server that contains database objects. The server creates startup software to be installed in a client system's read only memory. The startup software contains a hash value for a second stage loader. The server also creates software for a bootstrap loader object which typically contains the operating system for a client system and also the bootstrap loader's hash value and a digital signature that is unique to the server. The startup software and objects created by the server are initially installed on a client device at the time of manufacture. The server can update a client's bootstrap loader and root filesystem at any time through the transmission of slices.

Abstract: Systems, methods, and other embodiments associated with multiple NAT traversal are provided. A request is received from a host for a publicly-routable communication path identifier for the host, where the host is a member of a private network associated with a first network address translation device. The first network address translation device communicates with a second network address translation device using an address-port-borrowing-protocol to acquire information related to the publicly-routable communication path identifier. Information related to the publicly-routable communication path identifier is received with the first network address translation device and the publicly-routable communication path identifier is provided to the host.

Abstract: A system includes a control source that is provided on a server and control logic that executes on a terminal. The control logic executes on a terminal to (i) identify a plurality of attributes on the terminal, the attributes including an identifier for each of a plurality of terminal assets that include one or more of a hardware fixture, firmware, or operating system; and (ii) generate signature data from the plurality of attributes. The control source is configured to make a determination from the signature data as to whether the terminal is known or unknown.

Abstract: Constraints that restrict how corresponding identifiable groups of files are stored in a database, are enforced on corresponding file data. In response to a query on any data from an identifiable group of files, the effect of the constraint on how the corresponding data is stored is determined. The original query is rewritten, based on the effect of the constraint, so that the rewritten query is directed to a particular subset of the data stored in the database. Consequently, the search space is restricted to an identifiable subset of the database and execution of the rewritten query is more efficient than execution of the original query.