Abstract: In general, the invention is directed to techniques for enabling single sign-on (SSO) for a client seeking access to multiple resources protected by a certificate-based authentication scheme. For example, as described herein, a secure gateway comprises a certificate repository to store a digital certificate as well as a policy that includes one or more policy rules. A network interface of the secure gateway receives a message from a client device, wherein the message comprises a request to access a protected resource and an identifier for the requesting agent. The secure gateway also comprises a resource authentication module to map the identifier and the protected resource to the digital certificate based on the policy. The resource authentication module retrieves the digital certificate from the certificate repository and sends the digital certificate to the protected resource to authenticate the secure gateway to the protected resource.

Abstract: An integrated, multi-service virtual private network (VPN) network client for cellular mobile devices is described. The multi-service network client can be deployed as a single software package on cellular mobile network devices to provide integrated services including secure enterprise VPN connectivity, acceleration, security management including monitored and enforced endpoint compliance, and collaboration services. The multi-service client integrates with an operating system of the device to provide a VPN handler to establish a VPN connection with a remote VPN security device. The VPN network client includes to data acceleration module exchange network packets with the VPN handler and apply at least one acceleration service to the network packets, and a VPN control application that provides a unified user interface that allows a user to configure both the VPN handler and the data acceleration module.

Abstract: A trim molding structure that uses at least one magnet to attach to a metal frame such as a metal door frame and a metal window frame is presented. At least one magnetic element is affixed to a trim member of a trim molding structure. The magnetic element can be affixed to the trim member using various means such as an adhesive material that loses adhesiveness when its temperature exceeds approximately its temperature limit. When the temperature of the adhesive material exceeds approximately its temperature limit, the adhesive material loses adhesiveness and releases the trim molding structure from the metal frame. An intumescent material that expands when its temperature exceeds approximately its activation temperature can be attached between a trim member and a metal frame. In case of fire, the intumescent material expands and pushes the trim molding structure away from the metal frame when the temperature of the intumescent material exceeds approximately its activation temperature.

Abstract: Systems and methods for the forming of user device groups are presented. In one example, a message including location information indicating a geographic location of a first user device is received from the first user device. Values representing logical connection strengths between the first user device and other user devices are calculated using the location information. A first device group is determined for the first user device based on the calculating of the values representing the logical connection strengths, the first device group including a plurality of the other user devices.

Abstract: Systems and methods for the forming of user device groups are presented. In one example, a message including location information indicating a geographic location of a first user device is received from the first user device. Values representing logical connection strengths between the first user device and other user devices are calculated using the location information. A first device group is determined for the first user device based on the calculating of the values representing the logical connection strengths, the first device group including a plurality of the other user devices.

Abstract: In one aspect, the present invention provides a method of screening a human subject for the presence of or risk of developing, an autistic spectrum disorder (ASD) comprising determining the amount of at least one porphyrin from a set of porphyrin biomarkers for ASD in a biological sample obtained from the subject.

Abstract: A system that incorporates teachings of the present disclosure may include, for example, a gateway comprising a controller to receive from a communication device a request for media content, receive a key and a record associated with the communications device from an interactive Television (iTV) system, wherein the record comprises a list of entitled media content, determine whether the requested media content is in the list of entitled media content, retrieve the requested media content from the iTV system when the requested media content is determined to be in the list of entitled media content, encrypt the retrieved media content utilizing the key, and transmit the encrypted media content to the communications device. Other embodiments are disclosed.

Abstract: An image forming apparatus is adapted to distinguish a presence between a full and a partially-full toner cassette. The image forming apparatus includes a load cell positioned in a developer station. The load cell is adapted to sense a mass of a toner cassette at least during an insertion of the toner cassette into the apparatus. A processor is adapted to determine a toner volume contained in the toner cassette based on a mass differential. A controller is adapted to drive or suspend a motor in the developer station to control an operation of the image forming apparatus. The controller controls the operation based on the toner volume.

Abstract: An integrated, multi-service network client for cellular mobile devices is described. The multi-service network client can be deployed as a single software package on cellular mobile network devices to provide integrated services including secure enterprise virtual private network (VPN) connectivity, acceleration, security management including monitored and enforced endpoint compliance, and collaboration services. Once installed on the cellular mobile device, the multi-service client establishes the VPN connection to concurrently include both a layer three (L3) tunnel that uses a first type of transport layer protocol of the operating system and a layer four (L4) tunnel that uses a second type of transport layer protocol of the operating system. The VPN handler determines whether network ports associated with the L3 tunnel are unblocked by an operating system and, when the network ports are unblocked, automatically transitions from the L4 tunnel to the L3 tunnel without terminating the VPN connection.

Abstract: An integrated, multi-service network client for cellular mobile devices is described. The multi-service network client can be deployed as a single software package on cellular mobile network devices to provide integrated services including secure enterprise virtual private network (VPN) connectivity, acceleration, security management including monitored and enforced endpoint compliance, and collaboration services. The VPN network client is programmed to receive a web-based home page from an enterprise VPN appliance, process the web-based home page to identify a bookmark embedded within the response that corresponds to an enterprise webmail for the user and dynamically construct a user interface to have an input control native to the cellular mobile device for launching a native email client of the cellular mobile device to access the email without launching a web browser.

Abstract: A virtual private network client for cellular mobile devices is described. The VPN network client establishes a secure VPN connection with a remote VPN security device. The VPN network client establishes a secure control channel with the secure VPN gateway and, upon a successful authentication, receives a session cookie with a unique identifier. In the event communication with the secure VPN gateway is subsequently temporarily lost, the VPN network client performs a fast reconnect without requiring re-authentication of the cellular mobile device by communicating the session cookie to the secure VPN gateway.

Abstract: A virtual private network (VPN) client for cellular mobile devices is described. The VPN network client processes network packets for securely tunneling the network packets between the cellular mobile device and the remote VPN security device. Upon establishing the VPN connection, the VPN network client receives a web-based home page from the secure VPN device via a secure response, dynamically parses bookmark links from the secure response and renders a bookmark window using input controls native to the cellular mobile device without invoking a web browser on the cellular mobile device. Each of the input controls corresponds to a different one of the bookmarks parsed from the secure response. Upon selection of one of the input controls, the VPN network client formulates and outputs an appropriate request to the secure VPN device as if a corresponding one of the bookmark links were selected by the user.

Abstract: A remote server is arranged to respond to a request from a user terminal for the download of a media file to cause a unique water-marked copy of a media file to be generated and sent to the user terminal. At the same time the remote server is arranged to access a seal server, which causes an electronically sealed record of the transaction to be generated and stored in a download database. Subsequently, if a suspect media file is identified the sealed record provides evidence of the original transaction which led to the water-marked copy of the media file being issued and hence the original source of the unauthorised copy of the file. Control of distributed media files can be enforced by imposing penalties in the event that unauthorised copies corresponding to the distributed water-marked media files are identified.

Abstract: Systems and methods for the storage and distribution of content for user device groups are presented. In one example, a device group including a plurality of user devices is defined based on logical relationships among the plurality of user devices. A group data structure corresponding to the device group is stored in a data storage device, the group data structure including a parent data structure. An item of content is received from a first user device of the device group and stored in the data storage device as a child data structure of the parent data structure. The item of content is transmitted to other user devices of the device group based on the item of content being stored in the group data structure.

Abstract: Systems and methods for the distribution of content among user devices of a device group are presented. In one example, logical relationship information describing logical relationships between user devices is accessed. Membership in a device group of a plurality of the user devices is determined based on the logical relationship information. Content from at least one of the user devices of the device group is received over a communication network. The received content is forwarded over the communication network to the other user devices of the device group.

Abstract: Systems and methods for the sharing of content among user devices of a device group are presented. In one example, content generated in a first user device is received from the first user device. A device group to which the first user device was associated when the first user device generated the content is determined. The device group, which includes a plurality of user devices, is determined based on at least one logical relationship between the first user device and the plurality of user devices. The received content is transmitted to the plurality of user devices of the device group.

Abstract: An image forming apparatus comprises a controller that stores instructions, which cause the image forming apparatus to determine a characteristic measurement in response to a toner cartridge being partially inserted into the image forming apparatus. A pair of spaced apart sensors included on the image forming apparatus each contact an outer cross-sectional surface of a film on a delivery aperture of the toner cartridge. The image forming apparatus further includes an auger having at least one sensor for conducting a characteristic measurement on the film. The characteristic measurement corresponds to criteria programmed in the image forming apparatus for determining if the toner cartridge has a full toner level or a partially full (or low) toner level.

Abstract: Adaptive failover occurs between a Layer Three (L3) based network tunnel and a Layer Four (L4) based network tunnel. An example of a L4 based network tunnel is a Secure Sockets Layer (SSL) tunnel and an example of a L3 based network tunnel is an Internet Protocol Security (IPSec) tunnel. SSL tunnels work through most firewalls and proxies, but may introduce latency and other performance problems. IPSec tunnels provide a more efficient performance, but may not work through some firewalls and proxies. The techniques include dynamically selecting a tunneling protocol in order to achieve a more efficient network tunnel performance when possible while maintaining consistent L3 connectivity from a variety of remote network environments.

Abstract: A method and apparatus for preventing premature or unnecessary replacement of a consumable used in an image production device is disclosed. The method may include sensing the removal of the consumable from the image production device, determining if the removed consumable's life span is greater than a predetermined threshold, the predetermined threshold relating to the consumable's expected life span, wherein if it is determined that the removed consumable's life span is not greater than the predetermined threshold, sending a notification to a user at a user interface for the user to enter an identification code, receiving an identification code at the user interface, determining if the correct identification code has been entered, wherein if it is determined that the correct identification code has been entered, permitting operation of the image production device, otherwise, preventing operation of the image production device.

Abstract: Systems and methods for the sharing of content among user devices of a device group are presented. In one example, content generated in a first user device is received from the first user device. A device group to which the first user device was associated when the first user device generated the content is determined. The device group, which includes a plurality of user devices, is determined based on at least one logical relationship between the first user device and the plurality of user devices. The received content is transmitted to the plurality of user devices of the device group.