Abstract: Service endpoints that provide services to client devices send registration data to a service directory service. The registration data includes addresses that client devices can use to access the service endpoints along with descriptive data that describes the services that each endpoint provides, along with other information such as version numbers of applications that are supported by the service endpoints, and whether the service endpoints are running an experiment. Client devices request a manifest from the service directory service. Each request includes client metadata that describes the requesting client device. The service directory service uses the registration data and the client metadata to generate a manifest for the client device that identifies the services that the client may access and an address that the client may use to access each service.

Abstract: A computer system including that restricts access of an unauthorized. The computer system preferably includes: a system unit; an identification information storage unit storing user identification information about a user of the computer system; a communication unit communicating with a service server storing user authentication information about the user of the computer system; and a controller receiving the user authentication information corresponding to the user identification information through the communication unit and controlling the system unit to perform a selective operation on the basis of the user authentication information.

Abstract: A method for obtaining authentication credentials for attaching a wireless device to a foreign wireless domain in a 3rd Generation Partnership Project (3GPP) communication system, which includes: receiving an attach request message from the wireless device; and responsive to the attach request message, authenticating the wireless device and retrieving a set of authentication vectors, wherein the authentication vectors are for authenticating the wireless device to the foreign wireless domain. The method further includes encrypting the set of authentication vectors using a first security key of a home wireless domain of the wireless device. In addition, the method includes encrypting the first security key using a second security key of the foreign wireless domain and sending the encrypted set of authentication vectors and the encrypted first security key to the wireless device.

Abstract: A method for a data capturing and exchange system. The data capturing and exchange system has a plurality of devices in a sub-network and a network server connected to the sub-network. The method includes capturing an unstructured data record of a document on a device, collecting metadata associated with the unstructured data record; determining a recipient for the unstructured data record in a health information exchange, and composing a data message containing the unstructured data record. The method also includes obtaining the composed data message containing the unstructured data record, packing the composed data message into a packed message containing a structured data record corresponding to the unstructured data record, and sending the packed message to the recipient in the HIE can receive and recognize the document.

Abstract: Provided are techniques for the prevention of certain types of attacks on computing systems. The current disclosure, which describes one particular type of attack, is directed to the detection and prevention of an attack rather than the mechanics of the particular described attack. The claimed subject matter both detects and prevents an attack without exposing a network to denial-of-service (DoS) attacks by being too restrictive.

Abstract: Disclosed is a method and system for transmitting data on a data channel from a source to a destination. The data channel has a plurality of wavelength channels and a throughput. The system and method include a storage application for multicasting data on each of the plurality of wavelength channels, a storage protocol extension device using buffer credits to adjust the throughput during the multicasting, and an application optimization device for managing data channel latency to achieve asymmetric mirroring behavior at the same time as the multicasting.

Abstract: Provided are techniques for the prevention of certain types of attacks on computing systems. The current disclosure, which describes one particular type of attack, is directed to the detection and prevention of an attack rather than the mechanics of the particular described attack. The claimed subject matter both detects and prevents an attack without exposing a network to denial-of-service (DoS) attacks by being too restrictive.

Abstract: The present invention extends to methods, systems, and computer program products for group based allocation of terminal server network bandwidth. Output packets are classified into groups based on classification criteria. Output packets for each group are queue into a corresponding queue. During a queue flush cycle each queue containing data is flushed for an essentially equal amount of time. Flushing each queue essentially equally reduces the negative impact that can otherwise result when a subset of sessions (or even a single session) request(s) a disproportional share of terminal server network bandwidth. Responsiveness can be further increased by distributing the essentially equal amount for each queue across the queue flush cycle.

Abstract: The content-aware application switch and methods thereof intelligently switch client packets to one server among a group of servers in a server farm. The switch uses Layer 7 or application content parsed from a packet to help select the server and to schedule the transmitting of the packet to the server. This enables refined load-balancing and Quality of-Service control tailored to the application being switched. In an exemplary embodiment of the invention, a method includes maintaining a server load metric for each server in a group of servers; parsing application content from a packet; selecting a destination server from the group of servers, wherein selecting the destination server is dependent on the server load metric for each server, assigning a priority to the packet, the priority being dependent on the application content; and dropping the packet if the priority comprises at least one of a predetermined type.

Abstract: A computer-implemented method of alerting users to collaborative activity can include receiving a user input selecting at least one of a plurality of data types to be included within a notification, wherein the plurality of data types correspond to collaborative session data exchanged during a collaborative session among a plurality of users. The method can include buffering collaborative session data during the collaborative session and responsive to detecting an occurrence of an awareness triggering event, outputting the notification comprising at least a portion of the buffered collaborative session data corresponding to the selected at least one of a plurality of data types.

Abstract: Techniques to allocate virtual network addresses are described. An apparatus may include a virtual network address management module. The virtual network address management module may be capable of determining an approximate age for a virtual network address, referred to herein as a virtual network address age value. The virtual network address management module may include a virtual network address assignment module, a virtual network address age generator and a message filter module. The virtual network address assignment module may be arranged to assign a virtual network address to a device at a virtual network address assignment time. The virtual network address age generator may be arranged to receive a message arrival time for a message with the virtual network address, and determine a virtual network address age value for the virtual network address with the virtual network address assignment time and the message arrival time.

Abstract: In certain embodiments, performing a defensive procedure involves receiving at a first speaker of a first autonomous system a path advertisement from a second speaker of a second autonomous system. The path advertisement advertises a path from the second speaker of the second autonomous system. It is determined whether the second autonomous system is a stub autonomous system and whether a path length of the path is greater than one. If the second autonomous system is a stub and the path length is greater than one, a defensive measure is performed for the path. Otherwise, a default procedure is performed for the path.

Abstract: A method of building and assembling programs across computer networks that is dictated by the user to perform logical work without the user using a compiler. Users are able to assemble programs over a network by defining or re-defining which logical components are bound into the overall program without the use of a compiler. Logical components are called and bound into the program at run time, allowing dynamic programming which may be modified at any time without re-compiling the entire program. Each logical component can act independently of other logical components or work in concert with each other. This allows assembly of a program, even though some components may be created using totally different methodologies and/or are constructed by different programmers.

Abstract: A method of maintaining the integrity of software stored in memory, the method comprising: storing an indicator associated with the memory; calculating a reference value from the stored indicator; storing the reference value; modifying the indicator when the software in the memory is modified; storing the modified indicator; recalculating the reference value from the modified indicator; storing the recalculated reference value; and verifying the integrity of the software by: retrieving the modified indicator; calculating an expected value from the modified indicator; and comparing the expected value with the recalculated reference value. Preferably the integrity of the software is verified without calculating an expected value from the software. The reference and expected values are typically calculated in accordance with a secret key.

Abstract: A method of authentication and an image display apparatus incorporating the method are provided. The method of authentication includes determining whether or not an error is generated in an authentication with an externally-connected multimedia source, and upon determination that the authentication error is generated, changing a reset signal to re-attempt the authentication and output to the multimedia source. As a result, successful High Bandwidth Digital Content Protection (HDCP) authentication can be provided at all times.

Abstract: The invention provides a service providing apparatus and method and an information processing apparatus and method as well as a program storage medium by which a plurality of users can communicate with each other simultaneously. A plurality of client computers are connected to a shared server over a network and log in a common chat room of a chat system. If a user of one of those of the client computers which are in a group requests for reproduction of a predetermined tune, then the instruction is transmitted to the shared server over the network. The shared server receives the instruction transmitted thereto and reads out music data of the request stored in a music database therein, and transmits the music data to the client computers of the group.

Abstract: For custom message presentation, an identification module identifies an optical code as not communication ready. A message module generates a custom message indexed to the optical code in response to identifying the optical code as not communication ready. The message module further makes the optical code communication ready in response to generating the custom message. In addition, the message module communicates the custom message in response to receiving the optical code and identifying the optical code as communication ready.

Abstract: Methods and systems to manage users of a social network. The method includes receiving, at a server, a request to contact a user from another user of a social network based on a selected one of a plurality of associated identity resources of the user known by other users. The method also includes restricting views of other users for the identity of the user to the selected one of the plurality of associated identity resources.

Abstract: The present solution provides a variety of techniques for accelerating and optimizing network traffic, such as HTTP based network traffic. The solution described herein provides techniques in the areas of proxy caching, protocol acceleration, domain name resolution acceleration as well as compression improvements. In some cases, the present solution provides various prefetching and/or prefreshening techniques to improve intermediary or proxy caching, such as HTTP proxy caching. In other cases, the present solution provides techniques for accelerating a protocol by improving the efficiency of obtaining and servicing data from an originating server to server to clients. In another cases, the present solution accelerates domain name resolution more quickly. As every HTTP access starts with a URL that includes a hostname that must be resolved via domain name resolution into an IP address, the present solution helps accelerate HTTP access.

Abstract: A method of configuring an on-demand secure connection between a control site and a client network is described. The method involves establishing a first tunnel between the control site and the edge device of the client network. The method then involves automatically detecting a sub-network coupled to the edge device, and configuring the edge device to allow a second tunnel to be established within the first tunnel, where the second tunnel connects the control site to the detected sub-network.