Abstract: Embodiments of the invention provide for controlling message flow across a parallel computer system having multiple compute nodes by selectively grouping compute nodes of such a system into node pools and assigning message flow control policies to nodes in the node pools. The message flow control policies specify logging and/or tracing activities to be performed by instances of applications running on nodes assigned to the node pools. As the application is executed, logging and/or tracing messages are generated on the compute nodes according to message flow control policies assigned to the nodes. Optionally, the message flow is analyzed, the message flow control policies are adjusted, and duplicate messages are eliminated.

Abstract: A system for managing genealogy data is provided. The system includes a genealogy application for storing genealogy account identification data for a first genealogy account. A social network interface receives data from the first genealogy account and provides genealogical data to the genealogy application. A relative invitation system generates an invitation to a user to create a second genealogy account for the genealogy application.

Abstract: In a communication system that includes a communication terminal that originates and receives a call through a call control server, the call control server receives destination information from the communication terminal as a call request. The call control server checks an address of the communication terminal and determines based on the destination information whether transmission to a destination terminal is permitted for the communication terminal. Only when the transmission is permitted, the call control server originates a call to an address corresponding to the destination information to connect the communication terminal to the destination terminal.

Abstract: A method for sharing content between clients at a common trust level in a trust hierarchy associated with a network implementing policy-based management includes receiving integrity information from a first client at a first trust level in the trust hierarchy at a second client at the first trust level, requesting permission to receive electronic content from the first client, receiving a determination regarding the requested permission, and communicating the determination to the first client. The first client obtained content from a policy enforcement point in the network. The request for permission is made to the policy enforcement point and the request includes the integrity information. The determination is received from the policy enforcement point and is based in part on the integrity information about the first client. The second client communicates to the first client the determination of whether the second client receives the content from the first client.

Abstract: A remotely accessible integrated development environment, and a sub-system for deploying applications to a remote device is disclosed. The sub-system may further comprise a rendering engine which is configured based upon a platform of the remote device, wherein the rendering engine is configured to communicate with, and receive applications from, a remotely accessible application server.

Abstract: The present invention provides a solution for sharing server generated output to satisfy requests for content originated by different clients. More specifically, a server side resource can analyze a content request and compare this request to a set of active request handling operations. When one of the active operations is capable of satisfying a discrete portion of the content request, an association can be established between the active operation and the content request. When the active operation produces results, these results are returned to satisfy a request of an original client as well as to satisfy a request of a client that issued the content request. The solution can be implemented in a variety of environments, including one where asynchronous server-side operations are conducted by different server-side resources for a single request context.

Abstract: In some embodiments, a method includes receiving an input from a participant of a collaborative session among two or more devices, wherein the input is to cause a capture of at least part of data that is part of the state of the collaborative session at a point in time. The method also includes saving a state of the collaborative session at the point in time, wherein the state is saved into an editable format. The saving includes capturing the at least part of the data that is part of the collaborative session. The saving also includes storing the data in the editable format into a machine-readable medium.

Abstract: A system and computer program product for using a multi-user operating system. A user attempts to access the multi-user operating system. The system prompts the user to enter a shared credential associated with the multi-user operating system and an individual credential of the user. The system verifies the entered shared credential and the entered individual credential. The system grants the access to the user if both the entered shared credential and the entered individual credential are verified. The system tracks commands entered by the user granted the access via the entered shared credential while the user is using the multi-user operating system. The tracked commands indicate the entered individual credential.

Abstract: Techniques are described for managing communications sent to and/or from multiple computing nodes, such as for a group of computing nodes that are part of one or more private networks. In at least some situations, the techniques are used in conjunction with providing network address translation (“NAT”) functionality to a group of computing nodes that share one or more networks, such as to provide NAT functionality in a distributed and asymmetric manner using multiple computing devices that perform different types of operations at different locations within the private network.

Abstract: According to one embodiment, an apparatus may store a first and second subject token that indicate a first authentication method performed by the user and a second authentication method performed by the user respectively. The apparatus may detect at least one new subject token indicating at least one different authentication method performed by the user. The apparatus may then determine that a particular combination of subject tokens in the first subject token, second subject token, and the at least one new subject token indicates a privilege should be granted to the user, and facilitate the granting of the privilege to the user.

Abstract: Embodiments of the present invention provide a method, system and computer program product for an embedded multi-channel knowledgebase for embedded product support. In one embodiment of the invention, an embedded multi-channel knowledgebase data processing system can be configured for embedded product support. The system can include a consumer appliance, a knowledgebase embedded in the consumer appliance, a help module disposed in the consumer appliance and programmed to provide access to the knowledgebase through the consumer appliance, and multi-channel escalation and reporting logic coupled to the help module. The logic can include program code enabled to escalate support requests in the help module from the embedded knowledgebase to a remote, communicatively coupled response manager over a computer communications network.

Abstract: There is presented a method for providing a media content, one embodiment comprising recording a first version of a movie on a first content medium in a first format, encrypting one or more content supplement to the movie, each content supplement having a format different from the first format, embedding at least one encryption key in each content supplement, providing a retrieval code for key data enabling playback of the content supplement, and bundling the content supplement and the retrieval code for distribution with the first content medium. In one embodiment, a flexible format media bundle comprises a first content medium, a first version of a media content recorded on the first content medium in a first format, at least one content supplement having a different format, at least one encryption key, and a retrieval code enabling access to the content supplement.

Abstract: In one aspect, a method to generate an attack graph includes determining if a potential node provides a first precondition equivalent to one of preconditions provided by a group of preexisting nodes on the attack graph. The group of preexisting nodes includes a first state node, a first vulnerability instance node, a first prerequisite node, and a second state node. The method also includes, if the first precondition is equivalent to one of the preconditions provided by the group of preexisting nodes, coupling a current node to a preexisting node providing the precondition equivalent to the first precondition using a first edge and if the first precondition is not equivalent to one of the preconditions provided by the group of preexisting nodes, generating the potential node as a new node on the attack graph and coupling the new node to the current node using a second edge.

Abstract: A method of processing an action executes an action requested by a control point for controlling a controlled device through a network, stores a result of executing the action as a pending result of the action when a network connection between the controlled device and the control point is terminated, and transmits the stored pending result of the action to the control point when the network connection between the controlled device and the control point is resumed.

Abstract: An adaptive media distribution system provides an on demand user experience across a limited throughput wireless network by selectively utilizing available storage on a handheld communication device, taking advantage of increased availability of extended memory solutions. Creation of an adaptable user interface (UI) widget (e.g., Trig) serves as a near real-time mechanism for delivery of media content, overcoming the over-the-air latency and difficulties with streaming interoperability. Yet, for handheld communication devices with limited storage, the adaptive media distribution system further allows legacy devices to receive on demand services via streaming, albeit with the requisite relatively long latency associated with cellular multimedia services.

Abstract: A first computer of a plurality of computers in a server computer system may be associated with a first user on an exclusive basis. An administrator of the server computer system may utilize an administrative user interface in order to specify the association. Associating the first computer with the first user on the exclusive basis may prevent users other than the first user from using the first computer. In response to receiving a request from the first user to connect to the server computer system, the system may operate to determine that the first computer is associated with the first user on the exclusive basis and may assign the first computer to the first user. Once the first computer has been assigned to the first user, the first user can begin using the first computer. In some embodiments the first computer may be a physical computer. In other embodiments the first computer may be a virtual machine.

Abstract: A CAS device receives streaming media content encrypted utilizing a CAS, decrypts the received streaming media content utilizing a CAS module associated with the CAS, and transmits the unencrypted streaming media content to a rendering device. The CAS device may be operable to receive and store an additional CAS module associated with an additional CAS. The CAS device may also be operable to receive unencrypted streaming media content, encrypt the streaming media content utilizing a CAS module, and transmit the encrypted streaming media content. In another embodiment, the CAS device receives streaming media content encrypted utilizing a first CAS, decrypts the received streaming media content utilizing a first CAS module, transmits the unencrypted streaming media content from the first CAS module to a second CAS module, encrypts the unencrypted streaming media content utilizing the second CAS module, and transmits the encrypted streaming media content to a rendering device.

Abstract: According to one embodiment, an apparatus may store a plurality of tokens indicating a user is accessing a resource over a network. The plurality of tokens may include a risk token indicating a risk associated with access by the user to the resource. The apparatus may detect a token indicating a change associated with accessing the resource, and determine that the change triggers a risk update. The apparatus may then generate a dataset token that represents the risk token and the token indicating the change, and communicate the dataset token to a token provider to perform the risk update. The apparatus may then receive a recomputed risk token representing an updated risk. The updated risk may indicate the risk associated with continuing access to the resource with the change.

Abstract: A method and a corresponding apparatus for authenticating data in a digital processing system (DPS) is disclosed, wherein a root/first tier key pair associated with a first tier/root authority may sign data and second tier keys for authorizing data for processing in the DPS. The first tier/root authority may pass entitlements to the authorized second tier key, which may itself authorize third tier keys and pass entitlements to said key.

Abstract: A network includes communication media transmitting streams to addressees, and a method includes: step of allocation of a cryptonymic identity to communication media by a first instance, the streams transmitted by a medium bearing a mark, as a function of its cryptonym, the cryptonymic identity of a medium being distinct from its real identity; step of reading and of analyzing the streams by a second instance, the analysis including a phase of identifying streams to their communication media by searching for similarity between the mark of the streams and the cryptonymic identity of the media, with the aid of a table listing the cryptonyms, and a phase of logging observable characteristics of the streams through the network. A behavior defined by a set of characteristics is declared typical or atypical by comparison with a given set of criteria, the table of cryptonymic identities having no link with the real identities.