Abstract: A method and apparatus for selectively enforcing network security policy using group identifiers are disclosed. One or more access controls are created and stored in a policy enforcement point that controls access to the network, wherein each of the access controls specifies that a named group is allowed access to a particular resource. A binding of a network address to an authenticated user of a client, for which the policy enforcement point controls access to the network, is created and stored. The named group is updated to include the network address of the authenticated user at the policy enforcement point. A packet flow originating from the network address is permitted to pass from the policy enforcement point into the network only if the network address is in the named group identified in one of the access controls that specifies that the named group is allowed access to the network.

Abstract: Our invention concerns a method for treating a well completed in a subterranean petroleum containing formation which will improve the rate at which steam can be injected into the formation for a steam push-pull or steam drive oil recovery method. This preconditioning process is applied to formations exhibiting very limited steam receptivity because the formation contains high oil viscosity and has high oil saturation and is completely liquid filled. The method involves injecting a heated non-condensable and oil soluble gas all in the gaseous phase into the formation at a controlled rate which will avoid permanently fracturing the formation and also avoid the immediate formation of an oil bank due to dissolution of the injected gaseous fluid into the oil. Ideally by controlling the injection rate, carbon dioxide first displaces water from the flow channels and then slowly dissolves in the oil. Steam injection can then be applied to the formation without the previously experienced loss in steam injectivity.