Abstract: A scalable access filter that is used together with others like it in a virtual private network to control access by users at clients in the network to information resources provided by servers in the network. Each access filter use a local copy of an access control database to determine whether an access request made by a user. Changes made by administrators in the local copies are propagated to all of the other local copies. Each user belongs to one or more user groups and each information resource belongs to one or more information sets. Access is permitted or denied according to of access policies which define access in terms of the user groups and information sets.

Abstract: A scalable access filter that is used together with others like it in a virtual private network to control access by users at clients in the network to information resources provided by servers in the network. Each access filter use a local copy of an access control database to determine whether an access request made by a user. Changes made by administrators in the local copies are propagated to all of the other local copies. Each user belongs to one or more user groups and each information resource belongs to one or more information sets. Access is permitted or denied according to of access policies which define access in terms of the user groups and information sets.

Abstract: A scalable access filter that is used together with others like it in a virtual private network to control access by users at clients in the network to information resources provided by servers in the network. Each access filter use a local copy of an access control database to determine whether an access request made by a user. Changes made by administrators in the local copies are propagated to all of the other local copies. Each user belongs to one or more user groups and each information resource belongs to one or more information sets. Access is permitted or denied according to of access policies which define access in terms of the user groups and information sets. Access is further permitted only if the trust levels of a mode of identification of the user and of the path in the network by which the access is made are sufficient for the sensitivity level of the information resource.

Abstract: A scalable access filter that is used together with others like it in a virtual private network to control access by users at clients in the network to information resources provided by servers in the network. Each access filter use a local copy of an access control database to determine whether an access request made by a user. Changes made by administrators in the local copies are propagated to all of the other local copies. Each user belongs to one or more user groups and each information resource belongs to one or more information sets. Access is permitted or denied according to of access policies which define access in terms of the user groups and information sets. The rights of administrators are similarly determined by administrative policies. Access is further permitted only if the trust levels of a mode of identification of the user and of the path in the network by which the access is made are sufficient for the sensitivity level of the information resource.

Abstract: A scalable access filter that is used together with others like it in a virtual private network to control access by users at clients in the network to information resources provided by servers in the network. Each access filter use a local copy of an access control database to determine whether an access request made by a user. Changes made by administrators in the local copies are propagated to all of the other local copies. Each user belongs to one or more user groups and each information resource belongs to one or more information sets. Access is permitted or denied according to of access policies which define access in terms of the user groups and information sets.

Abstract: There is disclosed a method for testing a stateful network communications device. A plurality of stateful and simulated stateless connections are established with the device under test. Packets are sent to the device under test, and responses are received from the device enter test, over the stateless and stateful connections. Measurements are obtained for at least one of the stateless and stateful connections.

Abstract: A policy system includes the policy server (2617); a policy database (2619) which located at policy decision point (2723); the access/response entity (2603); resource server (2711); policy message (2725) and policy enforcement point (2721). System connected through public network (2702) or internal network (103). The access filter (107, 203, 403) control access by use a local copy of an access control data base to determine whether an access request made by a user. Changes made by administrators in the local copies are propagated to all of the other local copies. Access is permitted or denied according to of access policies (307) which define access in terms of the user groups (FIGS. 9-12) and information sets (FIGS. 13A-18). The rights of administrators are similarly determined by administrative policies (FIGS. 23A-C). Access is further permitted only if the trust levels of the network by which is made by the sufficient access (FIGS. 25-29).

Abstract: Methods and systems for testing stateful network communications devices are disclosed. According to one test method, stateful and simulated stateless sessions are established with a device under test. Packets are sent to the device under test over the stateful and stateless connections. Information received on the stateful connections is used to alter test conditions on the stateless connections. As a result, a realistic mix of network traffic can be achieved with a reduced amount of hardware.

Abstract: Methods and systems for testing stateful network communications devices are disclosed. According to one test method, stateful and simulated stateless sessions are established with a device under test. Packets are sent to the device under test over the stateful and stateless connections. Information received on the stateful connections is used to alter test conditions on the stateless connections. As a result, a realistic mix of network traffic can be achieved with a reduced amount of hardware.

Abstract: The invention is a clamp. In detail, the clamp comprises a base having a vertical disposed first jaw rising from the base. A second jaw is movably mounted to the base, the second jaw being movable in a horizontal direction to and from the first jaw. An actuation system is mounted to the base and is coupled to the second jaw such that upon the application of a vertically directed actuation force the second jaw can be either moved toward or away from the first jaw.

Abstract: The invention is an anti-backlash gear assembly comprising a first gear rotatably mounted to a shaft incorporating a first slot partially therethrough which is aligned with the longitudinal axis of the shaft. A second gear is rotatably mounted to the shaft and has a second slot extending completely therethrough which is alignable with the first slot. First and second wedge members having contiguous bevelled side surfaces are mounted in the aligned first and second slots. The first wedge member is rigidly attached to the first gear, and the second wedge member is moveably attached thereto. The second wedge member is attached to the first gear by means of a fastener extending through an oversized hole therein and threadably engaging a second threaded hole in the back wall of the first slot. A Belleville spring washer is mounted between the second wedge member and a side wall of the second slot of the second gear.

Abstract: The invention is an anti-backlash gear assembly. The gear assembly comprises first and second gears mounted on a common shaft and rotatable with respect to one another about the axis of rotation. The first gear has a slot. A fastener having a threaded end extends from the far side of the second gear into the slot. A cam member located within the slot incorporates a cam surface thereon and is threaded to the fastener. Thus, rotation of the cam member varies the distance of the cam surface to the walls of the slot. A cam follower is included having first and second ends with the first end in slideable contact with the cam surface. A Belleville spring washer is mounted between the second end of the cam follower and a side wall. Thus, the gear assembly can be easily engaged with a mating gear such as a rack gear, because the teeth of the first and second gears need not be biased apart.

Abstract: The invention is a system to counterbalance the static torque produced by a weight mounted to a beam member which in turn is rotatably mounted to a frame member, the beam member rotatable about the axis of rotation which is substantially aligned with the longitudinal axis of the frame member. The system comprises a support member rotatively mounted to the frame member and coupled to the beam member for simultaneously rotation about the axis of rotation. A pressurizable power actuator having a first end pivotally mounted to the frame member and a second end having an output shaft for producing an output force proportional to the pressure level within the actuator. A coupling device is included connecting the output shaft to the support member. A pressure level control system is provided for maintaining the pressure level within the actuator to produce a torque sufficient to counterbalance the torque produced by the weight.