Abstract: Systems, methodologies, media, and other embodiments associated with provisioning an Internet Protocol (IP) core network services multimedia subsystem (IMS) are described. One exemplary system embodiment includes a Home Subscriber Server (HSS) logic operably connectable to components including, a user database, an application server (AS), and a permissions database. The HSS logic may be a component of an IMS that facilitates communications between application servers and users. Thus, the HSS logic may be configured to receive an AS-to-user-database-interface-message (AUDIM) and to selectively update the permissions database based, at least in part, on the AUDIM. The user database may store user data concerning IMS users and the permissions database may store information for controlling AUDIM initiated interactions between an AS and the user database.

Abstract: A computer-implemented system processes secure electronic documents from one or more content providers in accordance with subscriber instructions has a processor and modules operative within the processor. A monitoring module obtains a provider GUID, a subscriber GUID, and a transaction ID from public metadata associated with a transaction received from a particular content provider. A determination module determines any designees of the subscriber and contact information one or more of the subscriber and any designees. A transaction module distributes a transaction addressed to at least one of the subscriber and any designees. Each distributed transaction includes data that is used for management, tracking, and alerting. Also described is a station for constructing transactions for distribution to subscribers through such a system, and management of local-advertising to users of such a system. An end-to-end system and method are described.

Abstract: A method and system of interaction between a requesting entity and a responding entity on a communication network based on the session initiation protocol (SIP). A machine-readable service description includes specifications of interaction between the requesting entity invoking a service at the responding entity and the responding entity offering the service. The specifications include at least a set of rules including abstract input/output message formats and SIP protocol binding rules so that the requesting entity may invoke the service to a SIP uniform resource identifier by means of SIP invocation message patterned according to the service description and it may interpret the response provided by the responding entity according to the service description.

Abstract: A method of accessing a first computing device from a second computing device using a remote desktop service is disclosed. The first and second device register are authenticated and registered with a remote access gateway. In some embodiments, the remote access gateway stores a copy of the first computer and changes made to the copy are synchronized with the actual first computer when it access the remote access gateway. A virtual operating system experience on the second computer is virtually the same as the real operating system experience on the first computer.

Abstract: Systems and methods for effectively protecting data against differential fault analysis involved in Rivest, Shamir, and Adleman (“RSA”) cryptography using the Chinese Remainder Theorem (“CRT”) are described herein. A CRT RSA component facilitates modular exponentiation of a received message, and a verification component reconstructs the received message. An exponentiation component performs a first modular exponentiation and a second modular exponentiation of the received message. A recombination component performs a recombination step utilizing CRT computation as a function of the first and second modular exponentiations. A modular exponentiation component performs first and second public exponent derivations as a function of a private exponent. The verification component can reconstructs the received message as a function of the first and second public exponent derivations. The verification component calculates the received message utilizing Chinese Remainder Theorem computation.

Abstract: A method and system for transmitting and receiving user's personal information using an agent are provided. An information management server managing user's personal information provides an agent including user's personal information in response to a user's personal information request message from a client. A client receives the agent and requests user's personal information from the agent. Then, the agent determines whether the client is authorized and provides the user's personal information to the client when it is determined that the client is authorized. Accordingly, the user's personal information is safely managed and transmitted.

Abstract: Methods, systems, and computer program products for modifying a resource by an authenticated user impersonating another user. In one embodiment of the invention, a lock may be acquired on the resource to be modified, storing the identity of the authenticated user and the identity of the impersonated user inside the lock object, and generating a message indicating that the lock was acquired successfully by the authenticated user impersonating another user.

Abstract: In one embodiment, a multi-stakeholder environment is controlled by first assigning a first domain to a first stakeholder and a second domain to a second stakeholder. Then a first access policy is defined for the first domain and access is restricted to the first domain for the second stakeholder according to the first access policy. In another embodiment, an access request is handled in a multi-stakeholder environment by first receiving parameters forwarded by hooks in system call functions in a kernel of the multi-stakeholder environment, wherein the parameters contain information about a first stakeholder requesting access to a domain corresponding to a second stakeholder. Then it is determined whether to allow the first stakeholder to access the domain based at least partially upon security settings corresponding to the domain.

Abstract: The present invention is aimed to provide a mechanism whereby a Public Service Identity identifying a service, which runs in an application service, may be created in a network both dynamically by the application server and statically by an O & M system, the means and method for the dynamic creation harmonizing with those for the static creation, and allowing a similar behavior of the network with minimum impact when the service is invoked. Therefore, the present invention provides a new method, a new central entity in the network, and enhanced Home Subscriber Server and application server, all co-operating to carry out the different embodiments for the invention.

Abstract: A web server utility executes on a server and provides the following functions: determining when a web page profile also includes an assignment of additional content; dynamically retrieving the additional content; and generating the web page with the additional content either appended to, prepended to, or wholly replacing one or more sections of the baseline content. When the utility detects assignment of additional content, the utility checks a specific location within the filesystem for the additional content. When the additional content is not found at the specific location, the utility automatically checks the temporary directory (for static content) then the centralized administrative and/or content (CAC) server for the additional content. When the additional content is dynamic, the CAC server retrieves and executes the file at the CAC server to generate the dynamic content, which is transmitted back to the web server for rendering within or as the whole-page output.

Abstract: A first support node and a third node provide online collaborative support to a customer node over a computer network. An online support session facilitating, at least in part, bi-directional communication between the customer node and the first support node is established. The third node is also connected to the online support session and receives support session information from the customer node. In addition, information is communicated bi-directionally between the first support node and the third node.

Abstract: In one embodiment, a Manufacturer Installed Certificate (MIC) and a personal identification number are sent to a call controller to request a configuration profile. When the configuration file is received, the IP phone is provisioned according to the configuration profile.

Abstract: A system may include reception of a request from a user to start a report associated with a node of a business object object model, where the node of the business object object model is associated with an access control list associating instances of the node with at least one access context restriction, determination of a first access context restriction associated with the user, retrieval of the at least one instance of the node based on the first access context restriction and on the access control list associated with the node, and presentation of an instance of the report to the user, the instance of the report populated with the at least one instance.

Abstract: In a first data compression process, a compressed code of an input symbol is generated in accordance with a compression dictionary selected on the basis of P symbols immediately preceding the input symbol, and a (P+1)K+1-th compressed code is encrypted to generate a compressed and encrypted code. Then, compressed and encrypted data comprising compressed and encrypted codes and other compressed codes is output. In a second data compression process, a bit string is added to the head of compression target data, and a compressed code of an input symbol is generated in accordance with a compression dictionary selected on the basis of a bit string or a symbol immediately preceding the input symbol. Then, a plurality of compressed codes are alternately output to different output destinations.

Abstract: A telecommunications architecture processes telecommunications service requests received from third parties through a secure access gateway. The third parties may be other telecommunications service providers which employ the services to support their own products and services or may be or individual subscribers. The service broker provides a flexible and efficient layer in the telecommunications architecture for processing the service request. The service broker also overcomes the technical problems associated with third party service request processing. In addition to providing technical solutions for efficient and secure processing of service requests for exposed services, the architecture also provides an additional revenue channel for existing telecommunication service providers.

Abstract: The invention relates to a method of notifying an Application Function (AF) in a communications network of resource restrictions relating to a communication session. The network includes a Policy and Charging Rules Function (PCRF) for authorising and controlling flows of data in the session. In the method the AF sends an authorisation request to the PCRF for establishing the communication session. The authorisation request includes an indication that the AF is to be notified of resource restrictions for the data flows in the session. The PCRF notifies the AF of the resource restrictions.

Abstract: Provided are, among other things, systems, methods and techniques for managing associations between keys and values within a computer processing system. In one exemplary implementation, requests to store associations between keys and data values corresponding to the keys are input, and the associations are stored in entry nodes within a data structure represented as a hash-based directed acyclic graph (HDAG). Upon receipt of a data value request and accompanying request key, together with satisfaction of any additional access criterion, a return data value corresponding to the request key automatically is provided, the return data value having been generated based on at least one of the associations that involve the request key.

Abstract: The invention relates to message-based communication between at least two units (100; 200) participating in a communications session. A first communications unit (100) generates and stores a state (10) comprising unit-associated data applicable for multiple messages to be communicated between the unit (100) and a second unit (200). A copy of this state (10) is then transmitted to the second unit (200), where it is stored. The state (10) and state copy can now be used in message processing for the purpose of reducing the message size and reducing utilization of communications resources. Data contained in the state (10) or state copy and found in the message (m1) is removed from the message prior transmission thereof. The resulting reduced-size message (m1?USD) is transmitted to the receiving unit, where the message (m1?USD) is anew processed by re-entering the data, removed by the transmitting unit, into the message (m1?USD) using the state copy or state. The original message (m1) is then recreated.

Abstract: A system and method provides a remote direct memory access over a transport medium that does not natively support remote direct memory access operations. An emulated VI module of a storage operating system emulates RDMA operations over such a medium, e.g., conventional Ethernet, thereby enabling storage. Storage appliances in a cluster configuration utilize the non-RDMA compatible transport medium as a cluster interconnect.

Abstract: A computer program product, including a computer readable storage medium to store a computer readable program, wherein the computer readable program, when executed by a processor within a computer, causes the computer to perform operations for moving data stored on a transactional semantic independent persister in a distributed environment. The operations include: receiving an indicator to move data stored by the persister at a first node of the distributed environment to a second node of the distributed environment, wherein the data corresponds to a source; and cloning the persister at the first node to a cloned persister at the second node in response to receiving the indicator, wherein the cloning includes: moving data stored by the persister at the first node to the cloned persister; and moving remaining data in a data stream between the source and the persister at the first node to the cloned persister.