Abstract: An access manager that detects a derivative work and automatically transfers digital access rights associated with an original work to the derivative work executes on a computing device. The access manager detects data to be written to a storage device and generates a new file signature for the data. The access manager compares the new file signature to existing file signatures, where the file signatures include piecewise signatures. When at least one of the piecewise signatures from the new file signature matches one of the piecewise signatures in the existing file signatures, the access manager determines that the new data to be written to the storage device is a derivative work generated from the existing file. The access rights associated with the existing file signature are copied to the new file such that the file access rights associated with the original work are passed on to the derivative work.

Abstract: An access manager that detects a derivative work and automatically transfers digital access rights associated with an original work to the derivative work executes on a computing device. The access manager detects data to be written to a storage device and generates a new file signature for the data. The access manager compares the new file signature to existing file signatures, where the file signatures include piecewise signatures. When at least one of the piecewise signatures from the new file signature matches one of the piecewise signatures in the existing file signatures, the access manager determines that the new data to be written to the storage device is a derivative work generated from the existing file. The access rights associated with the existing file signature are copied to the new file such that the file access rights associated with the original work are passed on to the derivative work.

Abstract: A virtual local file system for managing file access, such as read, write and execute, of files on local media is disclosed. An access manager, executable by the host operating system, is stored on each host device. The access manager interacts with the local file system to control file access permissions and how processes of the host operating system execute, view or modify files accessible to the local file system. The access manager may also dynamically control file access to files on the host operating system using a file attributes repository, which may be stored locally or remotely from the host device. Exemplary attributes for defining permission to access a file include but not are limited to, specific users, a time of day, a number of copies of a file, an allowed process, an IP address range, and a MAC address.

Abstract: A virtual local file system for managing file access, such as read, write and execute, of files on local media is disclosed. An access manager, executable by the host operating system, is stored on each host de ice The access manager interacts with the local file system to control file access permissions and how processes of the host operating system execute, view or modify files accessible to the local file system. The access manager may also dynamically control file access to files on the host operating system using a file attributes repository, which may be stored locally or remotely from the host device. Exemplary attributes for defining permission to access a file include but not are limited to specific users, a time of day, a number of copies of a file an allowed process, an IP address range, and a MAC address.

Abstract: Firewalls and network address translators (NAT) provide many advantages for client and the Internet itself, however, these devices break many existing transmission control protocol (TCP)/Internet Protocol (IP) applications, since they conceal the identity of IP clients (i.e., peers) and block transmission control protocol (TCP) call setup requests. Firewalls and NATs make it impossible for one TCP peer to discover another and establish a connection. Embodiments of this invention provides a system and a protocol to enable two TCP peers that exist behind one or more firewalls and NATs to automatically setup a true peer-to-peer TCP connection and exchange data without making changes to the firewall or NAT devices or existing TCP-based applications.

Abstract: In certain environments all or part of the TCP signaling traffic may be lost before reaching one or both TCP endpoints, leading to no connection establishment or slow page download times. Embodiments of this invention improve TCP performance over unreliable links and allow TCP connections to be set up when otherwise not possible. Embodiments of this invention include the use of out-of-band signaling for TCP to synchronizing and establishing a connection between two TCP endpoints without modification to the TCP/IP protocol suite. Embodiments of this invention provide a system that creates a control channel to enable out-of-band signaling for TCP connection establishment between two TCP endpoints.

Abstract: A method and framework for transaction synchronization. An embodiment of the present invention first involves “cloning” the middle tier business logic layer from a server onto a client. The framework allows the cloned business logic on the client and the business logic layer on the server to operate independently without a connection. Therefore, the server-side and client-side applications can fully operate without a connection. When a connection is established, the framework synchronizes (reconciles according to defined rules) transactions (i.e., execution of functions) so that transactions resulting from the execution of a function on the business logic layer on the client is equivalent to a transaction resulting from a execution of a function on the business logic layer on the server. Embodiments of the invention may also be used in peer-to-peer environments.

Abstract: A process and system for adapting an application created without regard to protocol or device to a particular protocol and device. An application developer may create content in an object oriented fashion using application programming interfaces (APIs) provided by the system. The resultant content may be protocol independent and device independent. When processed by the system, the system may first take the protocol independent and device independent content and render it to become protocol dependent and device independent using engines provided by the system. The system may then take the protocol dependent and device independent content and adapt it based on a resource descriptive framework (RDF) for a device to become protocol dependent and device dependent.