Abstract: A method, a system and a computer program product are provided to auto configure a drive list. When information is received for a drive, the key manager compares the information to drive information on a drive list. If the drive is not on the drive list the drive list is auto configured by adding the drive to the drive list. By adding the drive to the drive list the drive is able to obtain keys from the key manager to perform encryption and decryption.

Abstract: A computer implemented method, data processing system, and computer program product for allowing limited access to a federation partner's audit logs in a secure, controlled manner, for the purposes of compliance demonstration. A request for audit data is received by a partner in the federated environment. The partner validates the request and requests a local report using local parameters against a local audit log store. The partner then builds a response based on the local report.

Abstract: Provided are techniques for filling a drive table. A key request including at least one of a drive serial number and a world wide node name is received from a data storage drive. It is determined whether the drive serial number or a world wide node name are in an entry in a drive table. In response to determining that the drive serial number or a world wide node name are not in an entry in a drive table, a new entry is automatically added in the drive table that includes the at least one of a drive serial number and a world wide node name.

Abstract: Provided are techniques for key generation and retrieval. Unique identifiers of two or more key servers are stored, wherein each key server is capable of generating keys for encryption of data and of returning keys for decryption of data. A key request is received. A technique for selecting one of the key servers to which the key request is to be forwarded is identified. One of the key servers is selected using the identified technique. The key request is sent to the identified key server.

Abstract: A method and system for authorizing access to resources requested by a first user. To begin the process, the first user submits an ID of the first user as an individual requesting access to one of the resources. The first user is also a member of a group comprising a plurality of individual users. A first table indicates at least one group of a plurality of individual users. A second table indicates which resources are accessible by which of the users and which resources are accessible by which of the groups. An authorization program compares the first user to entries in the first table to determine which group or groups the first user is a member. Next, the authorization program compares the first user and the group or groups in which the first user is a member to entries in the second table to determine which resources the first user is authorized to access.

Abstract: A method and apparatus for maximizing passive voltage contrast on the surface of a die and then using the maximized passive voltage contrast to identify electrical failures in the die. The method employs a primary electron beam to scan the surface of the die. In response, secondary electrons are emitted from the die and then captured by a secondary electron detector. The density of secondary electrons is further modulated by a passive voltage near the die surface. To enhance the passive voltage contrast on the die surface, the incident angle of the primary electron beam is adjusted with respect to the die, the passive voltage contrast reaching a maximum at an incident angle of about 75° or above. With such enhanced contrast, an image depicting the magnitude of the secondary electron current can be used to detect electrical failures in the die.

Abstract: An apparatus and method allow a system administrator to manage multiple user identities in multiple user registries in different processing environments. An identity mapping mechanism is provided that includes a directory service that includes entries that reference user identities in the multiple registries, and that reference identity mappings between those entries. The identity mapping mechanism includes an interface defined by a plurality of APIs that allow accessing and correlating the multiple user identities and the identity mappings. A programmer can generate an application or tool that uses the identity mapping mechanism by calling the APIs in the interface. In this manner, administration of user identities occurs with the user as the primary focus, rather than the platform. In addition, a common tool can be used to manage the user identities of different environments, making administration of user identities in a heterogenous network more efficient and cost-effective.

Abstract: Described is an improved process for producing chemically treated fillers by using a certain combination of functionalizing and hydrophobizing agents in an aqueous suspension of inorganic oxide having a pH of 2.5 or less and increasing the pH of the suspension after chemically treating the filler.

Abstract: Described is an improved process for producing chemically modified fillers by using a certain combination of functionalizing and hydrophobizing agents in an aqueous suspension of inorganic oxide having a pH of 2.5 or less and increasing the pH of the suspension after chemically treating the filler.

Abstract: Methods, systems and computer program products are provided which communicate between client applications and a transaction server by establishing a persistent secure connection between the transaction server and a Secure Socket Layer (SSL) proxy server. A first session specific SSL connection, different from the persistent secure connection, is also established between a first client application and the SSL proxy server. Communications between the first client application and the SSL proxy server transmitted over the first session specific SSL connection are then forwarded with the client's identity preserved to the transaction server over the persistent secure connection.

Abstract: A method and system for authorizing access to resources requested by a first user. To begin the process, the first user submits an ID of the first user as an individual requesting access to one of the resources. The first user is also a member of a group comprising a plurality of individual users. A first table indicates at least one group of a plurality of individual users. A second table indicates which resources are accessible by which of the users and which resources are accessible by which of the groups. An authorization program compares the first user to entries in the first table to determine which group or groups the first user is a member. Next, the authorization program compares the first user and the group or groups in which the first user is a member to entries in the second table to determine which resources the first user is authorized to access.

Abstract: An ESD protection device including a transistor structure with resistive regions located within active areas thereof. The transistor structure is formed of one or more MOS transistors, preferably N-type MOS transistors. The drain regions of the transistors are modified to reduce the conductivity of those resistive regions by preventing high carrier concentration implants in one or more sections of the drain regions. This is achieved by modifying an N LDD mask and the steps related thereto, as well as a silicide exclusion mask and the steps related thereto. The modifications result in the omission of N LDD dopant from the area immediately adjacent to the underlying channel. In addition, portions of a spacer oxide remain over the drain region to be formed. Subsequent implant and siliciding steps are effectively blocked by the spacer oxide that remains, leaving a low-density drain (LDD) charge carrier concentration in those regions, except where omitted.

Abstract: An apparatus for tensioning a hold down beam of a nuclear reactor jet pump inlet mixer is configured to be inserted in a confined annulus between a core shroud and a reactor vessel of a nuclear reactor. The hold down beam includes a beam body, a pair of opposed beam tabs and a pair of opposed beam trunnions extending outwardly from the beam body, and a threaded beam bolt received within a threaded channel extending through the beam body. The tensioning apparatus includes a housing having a lower base plate and an upper support plate positionable over the body of the hold down beam, rotatable trunnion engaging members for engaging the beam trunnions, reciprocating members coupled to the upper support plate and lower base plate for engaging the inlet mixer adjacent to the beam trunnions, and an actuator mounted between the upper support plate and lower base plate and extending through the lower base plate for selectively actuating the trunnion engaging members.

Abstract: A board game includes player pieces of at least two types and a game board. The game board has a center area and player piece positions disposed in rows extending radially from the center area. Concentric movement paths connect the player piece positions of different rows and include first designations to indicate that any type of player piece may move along the concentric movement paths between the player piece positions. Radial movement paths connect player piece positions of the same row and include second designations to indicate that only one type of player piece may move along the radial movement path between two player positions. The second designations alternately mark the radial movement path between player piece positions such that any one type of the player pieces may move between only two player piece positions along the radial movement path before moving along a concentric movement path.