Abstract: In one embodiment, a first one of a plurality of message processors receives a request with respect to a topic, and determines whether the first message processor itself is currently responsible for the topic. If so, then the first message processor services the request. If not, then the first message processor determines whether any of the other ones of the message processors is currently responsible for the topic. If so, then the request is redirected to another message processor to be serviced. If not, then the first message processor selects one of the message processors to be responsible for the topic and to service the request.

Abstract: In one embodiment, a first one of a plurality of message processors receives a request with respect to a topic, and determines whether the first message processor itself is currently responsible for the topic. If so, then the first message processor services the request. If not, then the first message processor determines whether any of the other ones of the message processors is currently responsible for the topic. If so, then the request is redirected to another message processor to be serviced. If not, then the first message processor selects one of the message processors to be responsible for the topic and to service the request.

Abstract: The present invention, in an example embodiment, provides a special-purpose formal language and translator for the parallel processing of large databases in a distributed system. The special-purpose language has features of both a declarative programming language and a procedural programming language and supports the co-grouping of tables, each with an arbitrary alignment function, and the specification of procedural operations to be performed on the resulting co-groups. The language's translator translates a program in the language into optimized structured calls to an application programming interface for implementations of functionality related to the parallel processing of tasks over a distributed system. In an example embodiment, the application programming interface includes interfaces for MapReduce functionality, whose implementations are supplemented by the embodiment.

Abstract: A system and method are provided to accessing a set of web pages within a context. The set of web pages may be represented using a graph comprising a set of nodes and a set of edges. First and second probability distributions may be generated over a set of nodes of the graph using a first algorithm to indicate a measure of closeness among the set of web pages. A characterization may be determined with respect to context for a web page from a second subset of web pages based on the first and second probability distributions. An indication of the characterization of the web page from the second subset of web pages may be outputted.

Abstract: The present invention provides a method and system of resolving at least one file-path for a change-record of a computer file-system object in a computer file-system in a computer system including a cache and an operating system, where the change-record includes a file-name of the file-system object, the file-id of the file-system object, and the file-id of the file-system container object containing the file-system object. The present invention provides a method and system of resolving at least one file-path for a change-record of a computer file-system object in a computer file-system in a computer system including an operating system, where the change-record includes a file-name of the file-system object, the file-id of the file-system object, and the file-id of the file-system container object containing the file-system object.

Abstract: An improved system and method for providing and using captchas for online advertising is provided. An advertisement may be received, embedded in a captcha and stored for use in online advertising. A question about the advertisement may also be stored along with a valid answer for use in verifying a user has received an impression of the advertisement. In response to a request received for sending a captcha with an embedded advertisement to a web browser operating on a client, a captcha with an embedded advertisement may be selected and sent to the web browser for display as part of a web page. Upon verifying the response to the question from the user is a valid answer, receipt of an impression of the advertisement may be recorded. Additionally, the awareness of an online advertisement may be measured for a target audience and reported to advertisers.

Abstract: An improved system and method for providing and using captchas for online advertising is provided. An advertisement may be received, embedded in a captcha and stored for use in online advertising. A question about the advertisement may also be stored along with a valid answer for use in verifying a user has received an impression of the advertisement. In response to a request received for sending a captcha with an embedded advertisement to a web browser operating on a client, a captcha with an embedded advertisement may be selected and sent to the web browser for display as part of a web page. Upon verifying the response to the question from the user is a valid answer, receipt of an impression of the advertisement may be recorded. Additionally, the awareness of an online advertisement may be measured for a target audience and reported to advertisers.

Abstract: The present invention, in an example embodiment, provides a special-purpose formal language and translator for the parallel processing of large databases in a distributed system. The special-purpose language has features of both a declarative programming language and a procedural programming language and supports the co-grouping of tables, each with an arbitrary alignment function, and the specification of procedural operations to be performed on the resulting co-groups. The language's translator translates a program in the language into optimized structured calls to an application programming interface for implementations of functionality related to the parallel processing of tasks over a distributed system. In an example embodiment, the application programming interface includes interfaces for MapReduce functionality, whose implementations are supplemented by the embodiment.

Abstract: An improved system and method is provided for characterizing a web page using multiple anchor sets of web pages. To do so, web pages in a collection of unknown web pages may be characterized using known anchor sets of web pages with different characterizations that may be linked to the collection of unknown web pages. A direction and method may be selected for propagating a probability distribution between vertices of a graph representing the collection of web pages and vertices of the anchor sets representing the anchor sets of web pages. Methods for propagating the probability distribution in a forward, backward or bidirectional direction are provided. Various quality measures of the characterization of the vertices are provided using the propagated probability distribution. These various quality measures may be paired and combined in different ways to provide a characterization of the vertices representing the unknown web pages.

Abstract: A method of providing a single system image in a clustered environment. An internet protocol (IP) address is assigned as a cluster IP address. The cluster IP address is bound to a node in a cluster. A client request directed to the cluster IP address is received in the node. The node multicasts the request to all nodes in the cluster. A dynamically adjustable workload distribution function filters the request, wherein the function is configured to allow a single node to process the client request. A response to the request is obtained. A cluster media access control (MAC) address is inserted into the response and the response is sent from the single node to the client.

Abstract: A multi-stage login procedure and system involves a first stage in which a login ID and a public key (encrypted) is transmitted from a client computer to a server computer and a key-exchange key (encrypted) is provided from the server computer to the client computer. In a second stage, a first split symmetric key and a server authentication string is generated and encrypted by the client computer and then transmitted to the server computer. In addition, the server computer generates a second split symmetric key and combines the same with the first split symmetric key to obtain a complete symmetric key for encrypting further communications from the server to the client computer. The server also generates a client authentication string, encrypts the same and transmits the encrypted string, the server authentication string (encrypted and incremented) and the second split symmetric key (encrypted) to the client computer.

Abstract: A method for network multiplexing and tunneling includes opening a single Transmission Control Protocol (TCP) connection between at least two endpoints in the network, establishing a Secure Sockets Layer (SSL) over the opened Transmission Control Protocol (TCP) connection, mutually authenticating each of the endpoints of the SSL TCP connection, and multiplexing other connections through the secure connection once both of the endpoints have been authenticated.

Abstract: A method of providing a single system image in a clustered environment. An internet protocol (IP) address is assigned as a cluster IP address. The cluster IP address is bound to a node in a cluster. A client request directed to the cluster IP address is received in the node. The node multicasts the request to all nodes in the cluster. A dynamically adjustable workload distribution function filters the request, wherein the function is configured to allow a single node to process the client request. A response to the request is obtained. A cluster media access control (MAC) address is inserted into the response and the response is sent from the single node to the client.

Abstract: A decentralized file system based on a network of remotely encrypted storage devices is disclosed. The file system includes a network to which a network client, a secure remotely encrypted storage device, a key manager, and a lock manager are attached. The system organizes data as files and directories. Files or directories are composed of one or more streams, which logically partition the data associated with the files or directories. The device serves as a repository of the system's data. The key manager controls data access keys while the lock manager handles consistency of the files. A network user may have read or write access to a file. Access is controlled using keys and access lists maintained by the key manager.

Abstract: A network computing device, known as a CyberHub, based on low-cost hardware and Java programming provides an architecture for extensible and inexpensive network connectivity and can be thought of as a combination of router and server in a box. The CyberHub provides all necessary functions with a small footprint and lightweight components, so that it can perform as an embedded device or thin server. The CyberHub can be employed in many different applications, ranging from an “instant office” to embedded network connectivity for remote devices.

Abstract: A multi-stage login procedure and system involves a first stage in which a login ID and a public key (encrypted) is transmitted from a client computer to a server computer and a key-exchange key (encrypted) is provided from the server computer to the client computer. In a second stage, a first split symmetric key and a server authentication string is generated and encrypted by the client computer and then transmitted to the server computer. In addition, the server computer generates a second split symmetric key and combines the same with the first split symmetric key to obtain a complete symmetric key for encrypting further communications from the server to the client computer. The server also generates a client authentication string, encrypts the same and transmits the encrypted string, the server authentication string (encrypted and incremented) and the second split symmetric key (encrypted) to the client computer.

Abstract: A multi-stage login procedure and system involves a first stage in which a login ID and a public key (encrypted) is transmitted from a client computer to a server computer and a key-exchange key (encrypted) is provided from the server computer to the client computer. In a second stage, a first split symmetric key and a server authentication string is generated and encrypted by the client computer and then transmitted to the server computer. In addition, the server computer generates a second split symmetric key and combines the same with the first split symmetric key to obtain a complete symmetric key for encrypting further communications from the server to the client computer. The server also generates a client authentication string, encrypts the same and transmits the encrypted string, the server authentication string (encrypted and incremented) and the second split symmetric key (encrypted) to the client computer.

Abstract: A method, apparatus, and article of manufacture for initial network address configuration using physical address resolution protocol. A device attempts a connection to the network, which causes address resolution (ARP) packets to be generated. The device monitors communications on the network for a specified number of unanswered ARP packets. Thereafter, the device adopt the network address in the unanswered ARP packets and responds to the unanswered ARP packets with the its' physical address.

Abstract: A method, apparatus, and article of manufacture for locating web pages from a network server. A count of retrievals of a web page is accumulated and the accumulated count and an address for the web page are stored in a record of a history log database at the network server. A multiple reference hotlist is formatted from the records in the history log database, wherein the multiple reference hotlist comprises a list of addresses for web pages retrieved from the records and the list is sorted by the accumulated counts retrieved from the records. The multiple reference hotlist is then displayed for a user.

Abstract: A network storage device is disclosed for use in a secure array of such devices to support a distributed file system. Each device is an independent repository of remotely encrypted data objects to be accessed by authorized network clients. All encryption is done by the clients, rather than by the devices. In order for the system to revoke access to an object on the device, the object must be re-encrypted. Each storage device has a device owner for controlling access to the device's data. All data requests from the clients and responses to them are authenticated using keys derived from the owner key and hashed message authentication codes.