Abstract: A computer implemented method includes monitoring activity on the virtual machine. A plurality of activities being performed at the virtual machine is identified. Each of the activities includes an activity source, an activity target, and an association between the activity source and the activity target. The activity information is stored in the memory. The one or more of the activity sources, activity targets, and associations are transmitted to prevent future attacks.

Abstract: A method, system and computer program product for facilitating access to a resource represented in an image at a later time. A screen capture of an image displayed on a computing device is implemented. Metadata, including the resource location, resource navigation and positional metadata, regarding the source data of the screen capture image is generated. The generated metadata is then embedded into the screen capture image. The screen capture image with the embedded metadata is then transmitted to a different user. By embedding the metadata into the screen capture image, the user receiving the screen capture image will be able to reproduce the state of the source environment when the image was captured using the embedded metadata thereby opening the resource represented in the image.

Abstract: Systems 100, 1000, methods, and machine-interpretable programming or other instruction products for the management of data transmission by multiple networked computing resources 106, 1106. In particular, the disclosure relates to the synchronization of related requests for transmitting data using distributed network resources.

Abstract: Described are techniques and systems for providing authentication credentials associated with a user. The user is authenticated using one or more techniques, such as multi-factor authentication using one or more biometric characteristics, biomedical data, passwords, and so forth, to generate authentication data. The authentication data may be used in conjunction with information about a wearable device (“wearable”), such as a wristband. Authentication may be confirmed upon an indication that the wearable has not been removed, tampered with, and so forth. In some implementations the wearable device may store and distribute the authentication credentials to requesting devices so long as the wearable has not been removed, tampered with, and so forth.

Abstract: A computer-implemented method of limiting access time to a computer network for client computing devices may comprise disposing an access controlling device such as router between the computer network and the client computing devices such that the client computing devices can only access the network through the access controlling device, at least while within an area of coverage thereof. A unique identifier may be stored for client computing devices whose access to the network is to be limited and a selectable allowable cumulative network access time period may be stored for at least some of these client computing devices. Using at least the unique identifiers, the cumulative network usage time may be tracked for each of the client computing devices. The access controlling device may then prevent further network access to those client computing devices whose tracked cumulative network usage time exceeds the selectable allowable cumulative network access time period.

Abstract: There is disclosed a method of controlling use of encrypted content by a plurality of client terminals each provided with a digital rights management (DRM) client and a content decryption module separate to the DRM client. First key information is provided for use by one or more selected ones of the DRM clients, and second key information is provided for use by one or more selected ones of the content decryption modules. Content key information is encrypted to form encrypted content key information such that the selected ones of the content decryption modules are enabled by the second key information to recover the content key information from the encrypted content key information. The encrypted content key information is further encrypted to form super-encrypted content key information such that the selected ones of the DRM clients are enabled by the first key information to recover the encrypted content key information from the super-encrypted content key information.

Abstract: Described techniques enable resource accounting and tracking in high access rate systems using low cost memories. A first set of counters is maintained in relatively lower cost memory. The first counters generally indicate the amount of resources used for each object in a set of objects, but on a potentially delayed basis. A second set of counters of smaller size is stored in a relatively higher cost memory that supports high arrival and departure rates for accurate accounting. Each second counter indicates the amount of resources assigned (or unassigned) to an object since the object's first counter was last updated, and is incremented or decremented whenever this amount changes. A background process is configured to update individual first counters from the corresponding second counters on a recurring basis. The exact times at which a given first counter is updated may vary in accordance with a variety of approaches.

Abstract: Updating web resources includes downloading an application to a client device, extracting web resources from the application to local files, and querying an external server for web resource updates specific to at least one operating condition of the client device.

Abstract: A system (100) includes an application model (140) to characterize a given application (110) for deployment on a cloud (130). A deployment manager (120) analyzes an application requirement for the given application (110) based on the application model (140) and policies (150) associated with the given application (110) to substantially match infrastructure resources (160) in the cloud (130) to fulfill the application requirement.

Abstract: Methods and systems for data relocation in global storage cloud environments are provided. A method includes locating a data server near a travel location of a user based on one or more travel plans of the user. The method further includes transferring data of the user from a home data server near a home location of the user to the data server near the travel location.

Abstract: A method implemented in an electronic device serving as a stream distributor distributing unicast video and audio streams of a streaming platform system is disclosed. The stream distributor receives a unicast data flow containing data of a video and audio stream from a load balancer, the unicast data flow being transmitted in user datagram protocol (UDP) packets. The method includes the electronic device detecting initiation of a maintenance activity on a virtual machine or its host associated with the stream distributor. The method includes the electronic device indicating a failure mode of the stream distributor, where the failure mode indication is to cause the load balancer to switch the unicast data flow to an alternate stream distributor. The method also includes the electronic device detecting a completion of the load balancer switching the unicast data flow to the alternate stream distributor, and halting the distribution of the unicast data flow.

Abstract: A system for establishing communication interfaces in an information technology infrastructure includes a database configured on a server and storing identifiers to each of a plurality of information reporting accounts corresponding to subscriber accounts maintained on a first remote server. The system includes a first interface to receive, via a first network, data about usage of each subscriber's account maintained by the first remote server, wherein the first interface is configured to store the data to the database. The server is configured to identify a second remote server to obtain data about credits to apply and responsive to a predetermined event, establish a connection with the second remote server via a second interface. The second interface is configured to receive, via a second network, for one or more of the information reporting accounts, data about rewards credited and maintained by the second remote server.

Abstract: Techniques for restricting the execution of algorithms contained in applications executing on virtual machines executing within a computer system are described herein. A first sampled set of computer executable instructions is gathered from a virtual machine by a controlling domain and compared against a reference set of computer executable instructions. If the first set is similar to the reference set, and if the execution of the algorithm corresponding to the reference set is restricted by one or more computer system polices, one or more operations limiting the execution of the restricted algorithm are performed, thus ensuring conformance with the computer system policies.

Abstract: A virtual application may be configured with several extension points within a host operating system. The virtual application may be configured with a private namespace in which various components, such as registry settings, dynamic linked libraries, and other components may reside. During configuration, links may be placed in the host operating system that may point to objects in the virtual application's private namespace so that the operating system and other applications may launch, control, or otherwise interact with the virtual application. The links may be located in a file system, registry, or other locations and may be available to other applications, including other virtual applications. A configuration routine may place the links into the host operating system at the time the application may be configured.

Abstract: A system (100) includes a portability manager (160) to provide portability instructions to specify a change in deployment of a given application (110) on a cloud infrastructure (130). A deployment manager (120) controls deployment or lifecycle management of the given application (110) on the cloud infrastructure (130) in response to the portability instructions and based on matching cloud infrastructure resources to application requirements for the given application (110).

Abstract: The present disclosure relates to methods and systems for generating an intermediation function and performing the intermediation function. The first method selects at least one command among a plurality of pre-defined commands stored at a configuration server, configures parameters of the at least one command, processes the at least one command to generate the intermediation function, transmits the intermediation function and the parameters to an intermediation platform, and stores the intermediation function and the parameters at the intermediation platform. The second method receives the intermediation function and parameters from the configuration server, stores the received intermediation function and the parameters at the intermediation platform, receives data from a user based on the parameters, processes the user data with the intermediation function based on the parameters, and transmits information generated by the processing of the user data to a database server.

Abstract: A communication system is adapted to provide access to application information on an application server utilizing a specific one of multiple radio access types. Access is provided via an access network using an access bearer. The capability of the specifically requested access bearer is sent to the application server to tailor the application information content according to the capability of the specific access bearer. The information content is then transmitted to the requesting device.

Abstract: Methods and systems are described for managing one-time access to an automation system. According to at least one embodiment, a computer-implemented method to grant a user access to an automation is described. The method may comprise receiving one or more access parameters to authorize one-time permission to the user to access the automation system. The method may further comprise granting one-time permission to the user to access the automation system based at least in part on the one or more access parameters. The method may additionally comprise generating a message comprising at least the one-time permission to access the automation system. The one or more access parameters may comprise at least one of a limited time frame, single use entry code, or a limited number of entries.

Abstract: A method of and apparatus for generating, storing and transmitting information relating to a session between an endpoint in an enterprise and an endpoint remote from the enterprise to enable the remote endpoint to contact the enterprise endpoint in a subsequent communications session. The information generated includes, at least, a session identifier identifying the session and the identity of the enterprise endpoint. Advantageously the remote endpoint is also provided with the enterprise communication identity or other means to enable the remote endpoint to associate the session identifier with the enterprise's communication identity.

Abstract: A generation identifier is employed with various systems and methods in order to identify situations where a workload has been reassigned to a new node and where a workload is still being processed by an old node during a failure between nodes. A master node may assign a workload to a worker node. The worker node sends a request to access target data. The request may be associated with a generation identifier and workload identifier that identifies the node and workload. At some point, a failure occurs between the master node and worker node. The master node reassigns the workload to another worker node. The new worker node accesses the target data with a different generation identifier, indicating to the storage system that the workload has been reassigned. The old worker node receives an indication from the storage system that the workload has been reassigned and stops processing the workload.