Abstract: A method, apparatus, and computer instructions for managing files in a data processing system. An attribute for a file is specified as having a special designation. The file with the attribute having the special designation is processed, by the operating system, in a different manner from other files when performing operations, such as, for example, copying the file to a removable media, printing the file, or sending the file over a network.

Abstract: A group administration organization device admits a user device to an authorized group by request and sends authority permission information to the user device. The user device holds the authority permission information received from the group administration organization device and, on access, sends authority proof information created from the authority permission information using a group signature scheme to a service provider device as requested by it. The service provider device, upon being accessed, requests the authority proof information and verifies the authority proof information received from the user device in accordance with the request on the basis of the group signature scheme. When the verification result indicates validity, the service provider device provides a service. Thus, there is no need for the service provider to manage personal information of the user because the user device proves to the service provider device using the group signature scheme that it belongs to the authorized group.

Abstract: A secure memory system binds an encrypted first data value stored in a memory with a state of the memory by selecting, at random, an address in the memory and mixing a second data value, stored at the address, with a hash value of the first data value to produce a split value. The address, split value and first data value are encrypted and stored in the memory. To detect tampering of the memory, the encrypted address is decrypted and the corresponding value read from the memory and used to recover a hash value from the decrypted split value. The recovered hash value is then compared with the original hash value.

Abstract: A gas discharge lamp is driven with a constant current square wave from a current transformer where the number of volt-microseconds are designed such that at the start of each square wave, the voltage rises to the required ionization potential for the lamp, while the plasma has not yet started to conduct. As soon as the lamp ionizes the gas within the lamp and current flows, the voltage drops and current flows at the desired level. The current level is set to prevent the input of excessive power pulses into the lamp, to reduce the creation of infrared photons. In addition, the plasma is driven at this current level almost continuously (with reversing polarity), which does not allow the plasma time to cool down. Consequently, the lamp becomes a more efficient light emitter, thereby requiring less energy to achieve the same light output.

Abstract: Described is a system and method by which an application program is evaluated for trustworthiness based on the permissions and/or privileges it requests relative to a program category. The program describes the permissions needed to operate, and identifies itself as belonging to a particular category. Security components compare the requested permission set against the permissions that programs of that category actually need in order to operate properly. Programs requesting more permissions than needed are deemed untrustworthy. For example, screen saver application programs need only a limited permission set to operate properly, including full screen access and the ability to read files, but do not need network access permissions or write access to files. Any screensaver application that requests only the needed permission set is deemed trustworthy, while others that request permissions beyond what is actually needed are not deemed trustworthy, and a user or automated policy process may then intervene.

Abstract: A method and system are provided such that a universal license may be used for authentication and authorization purposes and may include one or more cryptographic keys as well as assertions and related indications of authenticity. In an aspect of the invention, a license may be presented that includes access information, such that authentication and authorization decisions may be made based only on the access information. In other aspects of the invention, rights may be delegated and a trusted party may assert that another party can be trusted.

Abstract: Security keys for the provision of a secure service such as content provision are generated in an ancestral hierarchy, so that invalidation of a key in the hierarchy results in a need to reconfigure all other keys in the hierarchy to the extent they share common ancestry. When a user subscription to the service lapses, a decision on invalidation of their key is based in a determination of whether it's more costly to the subscriber to invalidate the key, or continue providing an unpaid-for service. Keys can be allocated to users from domains of the hierarchy on the basis of their economic value to the provider, with higher value users being allocated keys from domains which share fewer common ancestors with other users of other domains than those users share with each other, to minimise inconvenience to high value users of key reconfiguration.

Abstract: In a chopper circuit, output power is controllable with a direct current power source as a power source, and a smoothing capacitor is connected between output terminals of the chopper circuit. A polarity inversion circuit applies an alternating voltage to a high pressure discharge lamp with a voltage across the smoothing capacitor as a power source. The output power of the chopper circuit and an inversion frequency of the polarity inversion circuit are controlled by a control circuit based upon a terminal voltage of the smoothing capacitor, which is detected by a voltage detecting circuit. In the control circuit, a switch voltage is set for defining a range of voltages detected by the voltage detecting circuit, and the inversion frequency is changed in plural stages according to the magnitude relation between the detected voltage and the switch voltage.

Abstract: A plasma reactor including a plasma generating electrode which includes a plurality of unit electrodes hierarchically layered at specific intervals, a casing in which the plasma generating electrode is disposed, and a power supply which applies a voltage to the unit electrodes, generating plasma in a space formed between the unit electrodes by applying a pulse voltage between the unit electrodes from the power supply, and capable of processing exhaust gas introduced into the space through reaction, the plasma reactor further including a light-transmitting section formed in the casing for externally detecting light emitted by the plasma, light detection means capable of detecting light emitted by the plasma through the light-transmitting section, and control means for controlling electric energy applied to the unit electrodes depending on intensity of light detected by the light detection means.

Abstract: A communication device for performing cryptographically secured communication in a WLAN (Wireless Local Area Network) network is provided that comprises a security enhancement unit and a MAC (Medium Access Control) unit. The security enhancement unit is for encrypting plaintext data frames into encrypted data frames and/or decrypting encrypted data frames into plaintext data frames. The MAC unit is for managing communication between communication devices within the WLAN network by coordinating access to a shared wireless communication medium through which communication signals are transmitted. The security enhancement unit and the MAC unit are adapted to perform an on-the-fly encryption process and/or on-the-fly decryption process thereby exchanging the encrypted data frames without buffering the encrypted data frames after encryption or prior to decryption, respectively.

Abstract: A system and method for automatic key and certificate management is disclosed. In particular, a key store in a base computer contains both new and previously viewed cryptographic keys. When a mobile communications device is to be updated with the new keys, the new keys are automatically identified by comparing the keys stored in the base computer with a list of previously viewed keys to determine which new keys are to be marked for download. Upon marking the new keys, the user may be prompted to download the newly identified keys, or they may be downloaded automatically. Once the new keys have been marked, the list of previously viewed keys is updated to include those marked, so that the next time updating occurs, the previously viewed key list will be correct.

Abstract: A method of using a mobile device to authenticate a print medium before completing printing onto the print medium, the mobile device including processing means, a printhead and a sensor, the print medium comprising a substrate, the method comprising the steps of: using the sensor to sense coded data provided on a surface of the substrate; using the processing means to interpret the coded data to authenticate the print medium; and in the event the authentication step is successful, using the printhead to print onto the print medium.

Abstract: A security server distributes security polices to the client computers. Each security policy includes an identifier identifying the process to which the policy pertains, and security rules for use with that process. The identifier includes a version hash and a code hash. The version hash of a process is likely to remain unchanged if the process is modified by a legitimate agent, such as by a software update. The code hash of a process is likely to change if the process is modified by a malicious agent. When a process executing on the client computer requests access to a resource, the client computer generates a version hash of the process and uses it to identify the security policy pertaining to the process. If the version hash matches a version hash in a security policy, but the code hash does not match, the client computer declares the process potentially malicious.

Abstract: In a method of detecting arc discharge in a glow-discharge apparatus GD that has a high-frequency power source PS, a cutting pulse is output for time T1 to the high-frequency power source PS to stop a supply of power to the glow-discharge apparatus GD, when dVr/dt?dVf/dt increases over a first level, where Vf and Vr are a traveling-wave voltage and a reflected-wave voltage applied to the glow-discharge apparatus GD, respectively. Arc discharge is determined to have developed in the glow-discharge apparatus, when Vr/Vf increases to a second level or a higher level within a preset time To after the supply of power to the glow-discharge apparatus is stopped.

Abstract: An organic light emitting diode display device comprising a display panel, a plurality of light emitting diodes arranged on the display panel and having an optical amount varied according to a current amount, a sample/hold unit for supplying a current to the light emitting diodes, a D/A converter for controlling a current amount supplied to the light emitting diodes from the sample/hold unit by controlling a current amount supplied from the sample/hold unit according to image information, and a voltage controller for conducting or shielding a current between the D/A converter and the sample/hold unit by outputting a second bias voltage of which loss voltage has been compensated according to a characteristic of a transistor provided at the D/A converter to the D/A converter by receiving a first bias voltage.

Abstract: Light sources for illumination of liquids in a variety of environments. In one example, multi-color LED-based light sources are adapted to engage mechanically and electrically with various types of conventional light sockets, including light sockets conventionally found in a pool or spa environment. In another example, a light fixture for a pool or spa is particularly adapted to engage mechanically and electrically with a wedge type socket supported by a pool or spa. In another example, a light fixture for illumination of liquids includes an encapsulant to protect the light fixture from moisture, due to the characteristically humid environment encountered in liquid illumination applications.

Abstract: An object associated with a surface that has coded data disposed thereon or therein. The coded data includes a number of coded data portions, each of which encodes an identity of the object. In addition, each coded data portion encodes at least part of a signature that is a digital signature of at least part of the identity. This allows the coded data to be used to both identify and authenticate the object.

Abstract: A method and apparatus for storing and retrieving program material for subsequent replay is disclosed.

Abstract: Communication systems and methods transfer information between a client device and a vendor device through a firewall between the client device and the vendor device by using a communications protocol that will normally allows pass through the firewall and/or by e embedding the information in a file format that will normally pass through the firewall. The information can be transmitted using the hypertext transfer protocol, and/or is embedded in an HTTP document or in an e-mail message. If the client device is on a secure side of the firewall and the vendor device needs to initiate communication with the client device, the vendor device can send an e-mail message to the client device asking the client device to initiate the communication session. Because the client device has initiated the communication, the firewall should allow the response to the client device's request to pass through from the vendor device to the client device.

Abstract: The ionization chamber is defined by a removable block disposed in heat transfer relationship to a temperature controlled mounting block, preferably the removable block comprised of graphite, silicon carbide or aluminum. The ion source includes a mounting flange for joining the ion source to the housing of an ion implanter, the ionization chamber being located on the inside of the mounting flange and the vaporizer being removably mounted to the exterior of the mounting flange via at least one isolation valve which is separable from the mounting flange with the vaporizer, enabling the vaporizer charge volume to be isolated by the valve in closed position during handling, preferably there being two isolation valve in series, one unified with and transportable with a removed vaporizer unit, and one constructed to remain with and isolate the remainder of the ion source from the atmosphere.