Abstract: A file server receives a request from a client to mount an encrypted file system. The file server informs the client that the requested file system is encrypted and, in turn, receives a session ticket from the client that includes a security protocol mounting selection. The file server decrypts the client's user's encrypted private key, and then decrypts the requested encrypted file system using the private key. In turn, the file server sends the decrypted file system to the client over a secure channel, which is based upon the security protocol mounting selection. In one embodiment, a key distribution center server receives a request from the client for the client's user to access the encrypted file system at the file server. The key distribution center server retrieves an intermediate key; includes the intermediate key in a session ticket; and sends the session ticket to the client.

Abstract: Disclosed is a computer implemented method and apparatus to retrieve authentication records required for user validation and creation of authentication credentials from an authentication server to be passed to the user. The method is comprised of the authentication server storing a first authentication record, then generating a first authentication credential based on the first authentication record. The authentication server associates the first authentication record with a first credential expiration time. The authentication server stores a second authentication record. The authentication server generates a second authentication credential based on the second authentication record, wherein the second authentication credential is associated with a second credential expiration time. Next, the authentication server associates the second authentication credential with a second credential expiration time.

Abstract: Systems and methods for authentication in a data management system are provided. In one embodiment, the method comprises identifying a plurality of data ciphers based on a pre-defined set of properties associated with a plurality of data sources; and generating an authentication response having at least a subset of the identified plurality of data ciphers, wherein the authentication response authenticates access to at least some data sources from among the plurality of data sources.

Abstract: One or more attributes of a user are determined. A given advertisement for an product or service, such as a product or a service, is selected from a number of advertisements for the product or service, based on the attributes of the user. The given advertisement for the product or service that is selected is then electronically displayed, for viewing by the user.

Abstract: A file server receives a request from a client to mount an encrypted file system. The file server informs the client that the requested file system is encrypted and, in turn, receives a session ticket from the client that includes a security protocol mounting selection. The file server decrypts the client's user's encrypted private key, and then decrypts the requested encrypted file system using the private key. In turn, the file server sends the decrypted file system to the client over a secure channel, which is based upon the security protocol mounting selection. In one embodiment, a key distribution center server receives a request from the client for the client's user to access the encrypted file system at the file server. The key distribution center server retrieves an intermediate key; includes the intermediate key in a session ticket; and sends the session ticket to the client.

Abstract: A method, system, and computer program product for providing products to a user via an automated product dispensing machine is provided. In once embodiment, an automatic product dispensing machine in a micronetwork of proximally located diverse automatic product dispensing machines receives a request for an item. Responsive to a determination that the item is unavailable at a current automatic product dispensing machine, the automatic product dispensing machine provides a user with an alternative redemption product, such as, for example, a coupon that may be redeemed at another automatic product dispensing machine or at a nearby store.

Abstract: An apparatus, system, and method for monitoring test question response time from a remote location are provided. More specifically, the present invention provides a mechanism by which tests may be proctored to users from a remote location as a test administration service and providing alert notifications to the users based on the amount of time that has elapsed during the test taking process as well as the amount of time remaining to take the test. With the present invention, test progress data is obtained from the user and forwarded to a proctor workstation. A proctor device may monitor the user's test progress to determine if expected progress on the test is being attained. The testing progress data may be recorded along with test input data from the user's client device for later use. Moreover, the administering of the test may be done by a third party as a test administration service to which a test developer may subscribe.

Abstract: A communication system, which facilitates distribution of electronic communications for a user account, includes an emergency auto-reply agent that scans each received communication addressed to the user account for a particular communication sent from at least one emergency address specified for the user account separate from the address of the user account. Responsive to the communication system detecting the particular communication sent from one of the emergency addresses, the emergency auto-reply agent parses the content of the particular communication to detect whether the particular communication comprises a required password. Responsive to detecting the required password within the content of the particular communication, the emergency auto-reply agent directs the communication system to compose and send auto-reply communications from the user account in reply to received communications addressed to the user account.

Abstract: A method, system, and computer program product for providing products to a user via an automated product dispensing machine is provided. In once embodiment, an automatic product dispensing machine in a micronetwork of proximally located diverse automatic product dispensing machines receives a request for an item. Responsive to a determination that the item is unavailable at a current automatic product dispensing machine, the automatic product dispensing machine provides a user with an alternative redemption product, such as, for example, a coupon that may be redeemed at another automatic product dispensing machine or at a nearby store.

Abstract: A technique for facilitating identification of a matching search term in one or more images includes selecting at least a portion of an image and creating search enriched metadata for a document that includes the image. The search enriched metadata includes a text portion that provides one or more search terms that are associated with the selected portion of the image and a location portion that provides a location of the selected portion of the image.

Abstract: The present invention provides a computer implemented method, data processing system and computer program product for limiting instances of a client-server program within a plurality of platforms in a restricted distributed network. The data processing system receives an invocation of the client-server program. The data processing system assigns a write file to the client-server program wherein the write file has a write file name and the write file is on a distributed file system accessible to the plurality of platforms. The data processing system determines whether the write file is available. Responsive to a determination that the write file is available, the data processing system opens the write file for writing wherein the write file is associated with the client-server program. The data processing system, responsive to a determination that the write file is available, forms an addressing file having addressing information of a first instance of the client-server program.

Abstract: A NAT data processing system is located behind a NAT enabled network with a NAT device as a gateway to the NAT enabled network. A client system located outside the NAT enabled network queries the NAT device for the address of the NAT data processing system located behind the NAT enabled network. The query is automatically routed through the NAT device to a DNS server. The DNS server then returns an address for the NAT data processing system and source routing for the NAT device. The NAT device forwards the address and source routing to the client system. Then, the client system sends packets to the NAT data processing system at the address with source routing through the NAT device, such that the NAT data processing system behind the NAT enabled network is directly accessed by the client system from outside the NAT enabled network.

Abstract: A method, system and apparatus for performing network protocol simulation using XML document are provided. Network data packets are used to generate an XML document. After analyzing the document, parts of the document are then changed to simulate changes to the data packets.

Abstract: The present invention provides a method and apparatus for handling reordered data packets. A method comprises receiving a data packet and determining if the data packet is received out of order. The method further comprises delaying transmission of an acknowledgement indicating that a data packet is missing in response to determining that the data packet is received out of order.

Abstract: Disclosed is a computer implemented method, computer program product, and apparatus to decorate visible attributes of a rendered avatar. A server may collect a first user profile of a first avatar, the first user profile having at least one interest of a user. Next, the server may receive a location of the first avatar, wherein the location is associated with a view to at least a second avatar. The server can identify the second avatar among a group of avatars visible with respect to the first avatar. Further, the server may read a target profile of the second avatar then determine whether the second user profile satisfies a criterion based on the first user profile and the target profile. In addition, the server may render a modified rendered avatar to a client, responsive to the determination that the target profile satisfies the criterion.

Abstract: A method and computer program for resetting the value of a coupon based on market information is provided. The program receives a request for valuation of a coupon from a retailer, accesses market demand information for a product corresponding to the coupon, determines a market demand value based on the market demand information, determines a coupon value based on the market demand value, and provides the coupon value to the retailer.

Abstract: In a method of reducing network congestion between a source computer and a destination computer, a receiving router receives a source quench message and determines whether originator of the source quench message is the destination computer or an intermediate router. If the receiving router determines the originator to be the destination computer, the receiving router forwards the source quench message to the source computer. If the receiving router determines the originator to be an intermediate router, the receiving computer determines if there is an alternative route from the receiving router to the destination computer. If the receiving router determines there is no alternative route from the receiving router to the destination computer, the receiving router forwards the source quench message to the source computer.

Abstract: Disclosed is a computer implemented method and computer program product for transmitting a resource record to a requesting computer. An authoritative domain name server receives a DNS query from a requesting computer at a name server. The authoritative domain name server looks up the resource record based on the DNS query, wherein the resource record is associated with an epochal time and a time to live. The authoritative domain name server transmits the resource record response based on the epochal time.

Abstract: A method, programmed medium and system are provided for enabling a user to choose a user-preferred encryption type from among a plurality of encryption types listed in a user's Kerberos configuration file. During the ticket granting process in a Kerberos system, a user is requested to select a preferred encryption type to be used in the Kerberos communication from among encryption types contained in the user's Kerberos configuration file. The user-selected encryption type is then implemented for use in encrypting a session ticket (as well as generating the session key of user requested encryption type) for use by the user machine in communicating securely with an Kerberized application server when being communicated by that particular user. Thus, the system allows different users to simultaneously communicate with the same Kerberized application server using a supported encryption type of the user's own choice.

Abstract: A memory registration abstraction layer includes decision logic for dynamic, efficient determination of memory copy versus registration. The exemplary embodiments apply to direct memory access environments. The memory registration abstraction layer also includes tracking logic for monitoring the usage history for certain ranges of memory registration requests. The registration logic chooses to copy memory or map memory based on training and observation of application behavior, taking the more efficient performance path without requiring changes to the application.