Abstract: In a class of embodiments, the invention is an open computing system (e.g., a PC) in which a protected, closed subsystem is embedded. The closed subsystem typically includes multiple parts that ensure that content protection keys and protected content are never revealed outside the closed subsystem. Content (e.g., high-definition digital video) that enters the closed subsystem (and is typically decrypted and re-encrypted within the closed subsystem) is afforded a similar level of protection within the open system as can be obtained in standalone closed systems. Other aspects of the invention are methods for protecting content within an open computing system, a closed system (or disk drive thereof) configured to be embedded in an open computing system, and circuitry configured to be embedded in an open computing system for combining the output of a closed subsystem with other output (e.g., graphics and/or audio output) of the open computing system.

Abstract: The invention provides a central office metaphor to computing, where features and functions are provided by a one or more servers and communicated to an appliance terminal through a network. Data providers are defined as “services” and are provided by one or more processing resources. The services communicate to display terminals through a network, such as Ethernet. The terminals are configured to display data, and to send keyboard, cursor, audio, and video data through the network to the processing server. Functionality is partitioned so that databases, server and graphical user interface functions are provided by the services, and human interface functionality is provided by the terminal. Communication with the terminals from various services is accomplished by converting disparate output to a common protocol. Appropriate drivers are provided for each service to allow protocol conversion. Multiple terminals are coupled to the network.

Abstract: A method and apparatus for clipping video information before scaling. In an embodiment of the invention, a transmitter obtains video information in the form of image data, as well as clipping information defining one or more display regions in which the image data is to be displayed. In accordance with the clipping information, the transmitter performs clipping operations on the image data, and transmits the clipped image data to a receiver. Prior to displaying the clipped image data, the receiver performs any needed scaling of the clipped image data to conform to the dimensions of the display regions. By performing clipping operations prior to transmission, and scaling operations subsequent to transmission, unnecessary image data is omitted and greater transmission efficiency is achieved.

Abstract: A communication system including two endpoints (transceivers or a transmitter and receiver) and a serial link between them. At least one endpoint is configured to generate encoded data in accordance with a line code and to transmit the encoded data over the link. The line code specifies a block code for encoding cells of application data and control bits, and typically also special characters that do not match bit sequences of encoded cells. Other aspects of the invention are methods for generating (and endpoint devices configured to generate and transmit, or receive and process) such encoded data, and methods for performing functions of multiple layers of a communication protocol in response to such encoded data. In accordance with the invention, multiple levels of communication protocol functionality can be efficiently incorporated within a line code.

Abstract: Methods and apparatus for data distribution among servers in a grouped server system. Each server in the group includes a device manager which is responsible for brokering devices to services. A service communicates to a device manager on the same server through an inter-process communication mechanism. A desktop unit, having persistent connections with a single device manager, switches to a peer (other device managers in the group) when the desktop unit is reset or when a device manager fails. At least one device is connected to the desktop unit. When the desktop unit is connected to the new device manager, ownership of the devices may change. The new device manager notifies its peers of any device status changes.

Abstract: A mechanism for the migration of open network connections is described herein. According to one or more embodiments of the present invention, an active computing environment called compute capsule is provided. Each capsule has a unique locator. Packets are used to send information between capsules using the locators. When a capsule migrates, any open network connections that existed before the migration may continue when the capsule finishes the migration.

Abstract: A method for grouping Human Interface Devices (HIDs) into a multi-head display is provided. The HIDs are identified as either “primary” or “secondaries”. A computational-service policy module is consulted when a new HID connects to the network. If the HID is identified as a secondary, the module consults all servers within a group to see if the primary presently has an active session connected to any of the servers. If the primary is being controlled by the same server to which the secondary is connected, the session connection information for the primary is augmented to indicate that the secondary is attached to the same session, and this information is disseminated to the interested software entities. The associated session may then provide multi-head outout to the secondary. If the primary is being controlled by another server in the group, the secondary re-attaches to the server that is hosting the primary.

Abstract: The present invention provides a method and apparatus for improving the utilization of a resource in a shared client computer environment. The invention overcomes the problem inherent in using traditional computer programs on a shared client, by monitoring the status of an application, determining when an application does not need a resource, and causing the application to stop consuming the resource. In one embodiment, resource consumption is not halted, but the application is caused to use less of the resource. The invention detects when a user has stopped interaction with an application. This can occur, for instance, when the user removes an identifier from the end user terminal. When the user interaction stops, the invention has a mechanism to stop a program from consuming resources (or to reduce its resource usage) and to restart it (or return it to its original state) later.

Abstract: The present invention provides a method and apparatus for buffering in multi-node data distribution architectures. One embodiment of the present invention groups data items into frames and stores the frames in a buffer. One embodiment allocates storage space for the buffer such that enough storage is available to accommodate one frame for every client wishing access to the data in addition to a fixed number of frames. One embodiment stores the buffer as a linked list of frames. In one embodiment, the head of the linked list is the oldest frame in the buffer and the tail of the linked list is the newest frame. When a new frame of data is added to a full buffer, the oldest frame not in use is removed and the new frame is added. One embodiment, allows multiple clients to access a single frame in the buffer simultaneously. The clients indicate when they are using a frame in the buffer so that the frame is not overwritten.

Abstract: The present invention provides a method and apparatus for configuration using a portable electronic configuration device. The portable device is attached to an unconfigured electronic device. The portable device causes the unconfigured device to send configuration data to a coupled device. The coupled device uses the data to configure the unconfigured device.

Abstract: The present invention is for multi-screen session mobility between terminal groups. The invention uses a set of screen groups and a set of terminal groups to perform a mapping of the screen groups onto the terminal groups. Both the screen groups and the terminal groups have a geometry, which in one embodiment is defined by columns and rows. In cases where the number of columns in the screen group is less then or equal to the number of columns in the terminal group and where the number of rows in the screen group is also less then or equal to the number of rows in the terminal group, a first mapping scheme is employed. In cases where the number of columns in the screen group exceeds the number of columns in the terminal group or the number of rows in the screen group exceeds the number of rows in the terminal group, a second mapping scheme is employed. In one embodiment, the first mapping scheme maps the screen group directly onto the terminal group.

Abstract: A method and apparatus for providing distributed clip-list management. In an embodiment, an application maintains a local clip-list that identifies those portions of a remote frame buffer that are unambiguously associated with the given application, as well as those portions of the remote frame buffer which are disputed between the given application and one or more other applications. Applications may enforce a dispute policy with respect to writing image data to disputed regions of the frame buffer. Applications are able to write to the frame buffer asynchronously, without the use of a frame buffer lock. A clip manager maintains a global clip-list, and responds to messages from the applications by updating the global clip-list and informing those other applications of relevant changes to their own respective local clip-lists.

Abstract: The invention is a method and apparatus for synchronizing firmware associated with a first computer device and a second computer device, such as a server and a client computer. In accordance with one embodiment of the invention, the method comprises the steps of providing information regarding a characteristic of the firmware associated with the first and second devices, comparing the provided firmware information to determine if the firmware is synchronized, and associating new firmware with the second device to synchronize the firmware if the firmware is found to not be synchronized in the comparing step. In one or more embodiments of the invention, the firmware associated with the second device is not modified unless the integrity of the firmware to be installed on the second device is verified using a digital signature.

Abstract: The present invention provides a method and apparatus for distributing load in a multiple server computer environment. In one embodiment, a group manager process on each server periodically determines the server's capacity and load (i.e., utilization) with respect to multiple resources. The capacity and load information is broadcast to the other servers in the group, so that each server has a global view of every server's capacity and current load. When a given terminal authenticates to a server to start or resume one or more sessions, the group manager process of that server first determines whether one of the servers in the group already is hosting a session for that user. If that is the case, one embodiment of the present invention redirects the desktop unit to that server and the load-balancing strategy is not employed. Otherwise, for each resource and server, the proper load balancing strategies are performed to identify which server is best able to handle that particular session.

Abstract: A method and apparatus for adaptably providing data to a virtual desktop system is described. The computational service provider is configured to prepare and transmit one or more data streams through a viable interconnection fabric to multiple HIDs. The data stream is configured by the computational service provider to adaptably meet the performance needs of the HID receiving the data stream. This enables multiple HIDs to receive variants of the same data stream that may differ in quantity, quality, and/or data format. In one embodiment of the invention, a decode module prepares data for transport by separating decoded data into individual processes. Before a HID may connect to a process the HID is authenticated. The processes are further adjusted by a resource optimization module to take into account the characteristics of each HID requesting access.

Abstract: A method for displaying color values in a plurality of images on a display screen in a computer graphics system, wherein the images correspond to a plurality of applications. The graphics system includes a primary frame buffer for pixel values to be displayed in the images, and a plurality of colormap tables related to the images for providing color values to be displayed in the images. A pseudo frame buffer is provided for the applications to store source pixel values for display in the corresponding images. To display the source pixel values in the pseudo frame buffer, for each source pixel the graphics system performs the steps of: identifying the image corresponding to the source pixel value; selecting a colormap table corresponding to the identified image; using the source pixel value as an index to select a color value from the selected colormap table; and storing the selected color value as a pixel value in the primary frame buffer to be displayed.

Abstract: Authentication and session management can be used with a system architecture that partitions functionality between a human interface device (HID) and a computational service provider such as a server. An authentication manager executing on a server interacts with the HID to validate the user when the user connects to the system via the HID. The authentication manager interacts with authentication modules. Each authentication module may be configured to authenticate a user based on a different authentication mechanism (e.g., using a smart card, using a login and password, using biometric data, etc.) and may be utilized in connection with one or more sessions. The authentication manager and authentication modules are also responsible for controlling access to services/sessions and may remove/revoke or augment such access. A session manager executing on a server manages services running on computers providing computational services (e.g., programs) on behalf of the user.

Abstract: A distributed settings control protocol. One or more embodiments of the invention provide the ability for an application running on a server across a network to modify various settings related to the terminals such as display resolution, audio output configuration (such as volume control or headphones v. speaker), and energy saver procedures. These abilities are provided by adhering to several protocol properties.

Abstract: A method and apparatus for adaptably providing data to a virtual desktop system is described. The computational service provider is configured to prepare and transmit one or more data streams through a viable interconnection fabric to multiple HIDs. The data stream is configured by the computational service provider to adaptably meet the performance needs of the HID receiving the data stream. This enables multiple HIDs to receive variants of the same data stream that may differ in quantity, quality, and/or data format. In one embodiment of the invention, a decode module prepares data for transport by separating decoded data into individual processes. Before a HID may connect to a process the HID is authenticated. The processes are further adjusted by a resource optimization module to take into account the characteristics of each HID requesting access.

Abstract: The invention is a method and apparatus for configuring a first device based on a code associated with a second device. In accordance an embodiment of the invention, the method comprises the steps of accepting with the first device an input from the second device, providing to the first device a code associated with the second device in association with the input, determining if a configuration of the first device corresponds to a configuration corresponding to the provided code and, if not, reconfiguring the first device to a configuration associated with the provided code if the first device. In one embodiment of the invention, the first device is a computer and the second device is a keyboard connected to the computer, the input comprises the typing of a key and the configuration comprises selecting a keyboard mapping function corresponding to a keyboard code.