Abstract: In a stream computing application, data may be transmitted between operators using tuples. However, the receiving operator may not evaluate these tuples as they arrive but instead wait to evaluate a group of tuples—i.e., a window. A window is typically triggered when a buffer associated with the receiving operator reaches a maximum window size or when a predetermined time period has expired. Additionally, a window may be triggered by a monitoring a tuple rate—i.e., the rate at which the operator receives the tuples. If the tuple rate exceeds or falls below a threshold, a window may be triggered. Further, the number of exceptions, or the rate at which an operator throws exceptions, may be monitored. If either of these parameters satisfies a threshold, a window may be triggered, thereby instructing an operator to evaluate the tuples contained within the window.

Abstract: A method for performing data analytics on outsourced data may include receiving, at a data analyst, cipher text representing data from a data owner such that the data remains hidden from the data analyst, generating a query token using a constant provided by the data analyst such that the constant remains hidden from the data owner, and analyzing the cipher text using the query token.

Abstract: Disclosed is an on-demand computing environment. The method embodiment relates to a method of managing resources between a local compute environment and an on-demand environment. The method includes detecting an event in a local compute environment and based on the detected event, automatically establishing communication with an on-demand compute environment, provisioning resources within the on-demand compute environment and transferring workload from the local compute environment transparently to the on-demand compute environment.

Abstract: Network flow records from various administrative domains are provided to a network monitoring entity. The network monitoring entity analyzes the network flow records in a way to locate a source of malicious network flow.

Abstract: A digital television receiver device supporting two or more different conditional access systems has a content receiver that obtains an encrypted content stream and a processor. A content stream decrypter decrypts an encrypted content stream for conditional access or copy protection from at least one of the following interfaces: an interface to a CableCARD, an interface to a Common Interface Module consumer replaceable module for use with conditional access key management and content stream conditional access decryption and content stream copy protection re-encryption, and at least one of the following interfaces: an interface to a USB2 compatible consumer replaceable module, an interface to an enhanced SIM consumer replaceable card. Other variations are disclosed. This abstract is not to be considered limiting, since other embodiments may deviate from the features described in this abstract.

Abstract: Methods and systems configured to interact with hardware components of a computer system are described. In some embodiments, the system includes a processor and a memory coupled with the processor, wherein the memory is configured to provide the processor with instructions for generating, by a software module executing on the system, an Intelligent Platform Management Interface (IPMI) request configured for a controller of the computer system; transmitting, by the software module, the IPMI request to a server separate from the computer system, wherein the server is configured to emulate the controller of the computer system; and receiving, by the software module, an IPMI response from the server, wherein the IPMI response is based on a simulated operating condition of a hardware component of the computer system at the server, thereby obviating a manual adjustment of the hardware component on the computer system.

Abstract: Embodiments include receiving a first synchronous communication message in a first modality from a first user device. The method may further include generating a first asynchronous communication message in a second modality, based at least in part on the first synchronous communication message in the first modality, wherein the first modality differs from the second modality. The method may also include receiving a second asynchronous communication message in the second modality from a second user device. The method may further include generating a second asynchronous communication message in the first modality based at least in part on the second synchronous communication message in the second modality. The method may also include providing for display to the first user device, the second asynchronous message in the first modality. The method may further include providing for display to the second user device, the first asynchronous message in the second modality.

Abstract: The invention relates to an access system for establishing a connection between a plurality of subscribers and a plurality of service providers, wherein the access system comprises a plurality of partitions each having a number of resources, each partition being suitable for allocation to one of said plurality of service providers and each partition comprising at least one subscriber port, at least one uplink and a forwarding means between said at least one subscriber port and said at least one uplink, wherein the access system is arranged to communicate with a managing operator for managing said plurality of partitions.

Abstract: Various embodiments of a system and method for a single request and single response authentication protocol are described. A client may send to an authentication server a request to authenticate the identity of a user attempting to access an electronic document protected by a rights management policy. The single request may be generated according to rights management configuration information included within the document. Such rights management information may include one or more parameters for requesting authentication from an authentication server. In response to the request, an authentication server may send a single response to the client. The single response may include information indicating that the identity is authenticated (e.g., a license to access the document, or an encryption key to decrypt the document). The client system may be configured to, in response to the single response, provide access to the document according to the rights management policy.

Abstract: The conferencing system is composed of computers, a moderator's computer, and a projector connected on a network. The moderator's computer receives image data from the computers, and generates synthesized image data therefrom, which is transmitted to the projector for display of the synthesized image. The moderator's computer has the capability to switch the image being projected by the projector from the synthesized image to an image handled by one of the computers or by the moderator's computer. With such an arrangement, utilizing existing hardware resources it will be possible to display in a single split-screen display the images handled by the terminals connected on the network. Additionally, it will be possible to switch smoothly between on-screen displays, and to reduce the burden on the on-screen display operator in a networked conferencing system.

Abstract: Various embodiments of a method and system for a content distribution mechanism. A content distribution mechanism is implemented to receive rights-protected content. Access to the rights-protected content is controlled according to a policy via a policy server. The distribution mechanism may receive an attempt to forward the rights-protected content to one or more recipients that do not currently have access to the rights-protected content. The distribution mechanism may hold the document and send a message requesting access rights to the rights-protected content for the recipient(s). In some embodiments, the distribution mechanism may send the message to a policy server. In other embodiments, the distribution mechanism may send the message to a policy administrator. Upon receiving acknowledgement that the recipient(s) have been granted access rights to the content, the distribution mechanism may forward the rights-protected content to the recipient(s).

Abstract: A system and method for synchronous and asynchronous monitoring of network resources is provided. In an example system, an asynchronous monitoring engine is in communication with the network resources and receives asynchronous data from a portion of the network resources. The asynchronous data is collected at an application layer or at an end-user application layer. A synchronous monitoring engine is also in communication with the network resources and accesses synchronous data in the application layer in response to receiving a request from the asynchronous monitoring engine. The system further identifies an anomaly corresponding to the asynchronous characteristic and the synchronous characteristic.

Abstract: A method for loading program modules into programmable network devices of a network comprises loading an ID-generator into each network device for generating a unique identification code for the network devices. Next the program modules are loaded into the network devices based on the identification codes. Thus selective programming of network devices within a network is possible.

Abstract: A stream data management method includes: storing in a sequence header of the top original moving image information a terminal ID indicating a terminal which generated original moving image information and date-and-time information which is guaranteed by a third party, storing in a sequence header of the next original moving image information a characteristic value of the last partial information of the preceding original moving image information, generating signature-related information of the original moving image information, generating cutout moving image information to which a sequence header is added, generating signature-related information of the cutout moving image information, and verifying originality and actual time of cutout stream data based on the cutout moving image information, the signature-related information of the cutout moving image information, and the signature-related information of the original moving image information.

Abstract: A management system facilitating deployment of customizations of an enterprise application, with the enterprise application containing software modules pre-installed on a set of servers. In an embodiment, the management system first receives a set of deployment units each containing data defining a manner of configuration affecting the operation of at least some of the software modules to attain the desired customizations, and an enterprise profile indicating the specific subset of deployment units to be deployed in each of the servers. Management system then orchestrates the configuration of the software modules installed on the set of servers according to the data specified in the set of deployment units and the enterprise profile.

Abstract: A system and method for negotiating a pairwise master key (“PMK”) in wireless mesh networks. The system includes a plurality of mesh points that are configured to perform an abbreviated handshake protocol in negotiating a PMK and establishing a secure connection. The method for establishing a negotiated PMK is based on selecting a PMK before transmitting any data, and arranging available PMKs in a predetermined list so that a PMK can be negotiated in a limited number of exchanges.

Abstract: Disclosed are a system and method of integrating an on-demand compute environment into a local compute environment. The method includes receiving a request from an administrator to integrate an on-demand compute environment into a local compute environment and, in response to the request, automatically integrating local compute environment information with on-demand compute environment information to make available resources from the on-demand compute environment to requestors of resources in the local compute environment.

Abstract: The present invention provides a system, method and computer-readable media for generating virtual private clusters out of a group of compute resources. Typically, the group of compute resources involves a group of clusters independently administered. The method provides for aggregating the group of compute resources, partitioning the aggregated group of compute resources and presenting to each user in an organization a partition representation the organization's virtual private cluster. The users transparently view their cluster and have control over its operation. The partitions may be static or dynamic.

Abstract: Systems, methods, and computer program products are provided for identifying affiliated domains. A method includes identifying a plurality of domains, where each domain is associated with a particular hostname and each domain includes one or more resources, identifying a set of one or more linked domains, designating one or more domains within the set of linked domains as being affiliated with the first domain, and storing the domain affiliation information. Linked domains are domains from the plurality of domains that are linked to the first domain, and a second domain is linked to the first domain if one of the first or the second domains includes resources containing navigation links to resources of the other domain.

Abstract: A cloud extension agent can be provided on a customer premise for interfacing, via an outbound secure connection, cloud based services. The cloud extension agent can reach the cloud based services through existing firewall infrastructure, thereby providing simple, secure deployment. Furthermore, the secure connection can enable substantially real-time communication with a cloud service to provide web-based, substantially real time control or management of resources on the customer premises via the cloud extension agent.