Abstract: The flow of information to or from an application on a host machine is regulated by a trusted agent operating in conjunction with at least one security element, such as a firewall or a policy server. When a communication to or from the application is detected by the trusted agent, the trusted agent gathers information about the attempted communication, and formulates and sends a message based upon the gathered information to at least one security element. The security element makes a decision to permit or block at least part of the attempted communication based upon the message received from the trusted agent.

Abstract: The flow of information to or from an application on a host machine is regulated by a trusted agent operating in conjunction with at least one security element, such as a firewall or a policy server. When a communication to or from the application is detected by the trusted agent, the trusted agent gathers information about the attempted communication, and formulates and sends a message based upon the gathered information to at least one security element. The security element makes a decision to permit or block at least part of the attempted communication based upon the message received from the trusted agent.

Abstract: The flow of information to or from an application on a host machine is regulated by a trusted agent operating in conjunction with at least one security element, such as a firewall or a policy server. When a communication to or from the application is detected by the trusted agent, the trusted agent gathers information about the attempted communication, and formulates and sends a message based upon the gathered information to at least one security element. The security element makes a decision to permit or block at least part of the attempted communication based upon the message received from the trusted agent.

Abstract: A communication system includes a first endpoint located behind a first connectivity barrier, such as a firewall or a consumer gateway, and a second endpoint. A service is arranged to respond to a request from the first endpoint to establish communications with the second endpoint by assigning a server to handle a session between the first endpoint and the service. A session initiated by the second endpoint is established with the service if the second endpoint is located behind a second connectivity barrier. If the second endpoint is not located behind a connectivity barrier, a transport level communications connection can be established with the second endpoint. In some cases, the service can instruct the first endpoint to establish a direct session with the second endpoint.

Abstract: A method and apparatus for supporting on-demand connectivity for network applications is disclosed. Specifically, the present invention discloses a method and apparatus for remotely triggering a connection from a first device to a network. Additionally, a method and apparatus for coordinating application connections is also disclosed. The method comprises the steps of establishing application connections on-demand and managing the application connections.

Abstract: An electronic device receives inputs using images of input devices and scanning sensors that detect user interaction with those images. For example, an image of a mouse may be projected and the user's interaction with that image may be scanned using digital video cameras. These user movement images may then be analyzed to determine, for example, the direction, extent and rate of movement of the user to provide pointer position command signals. Similarly the user's movement relative to a virtual keyboard image may be analyzed and converted into key actuation signals for responding to the actuated virtual keys.

Abstract: Detecting intrusions includes detecting a possible security problem at a client location, transmitting notice of the possible security problem across a network in real time to a home location remotely located from the client location, determining at the home location an anomaly based on at least the possible security problem, and transmitting notice of the anomaly in real time to the client location.

Abstract: A method and apparatus are described for preventing security vulnerabilities resulting from buffer overruns. According to one embodiment of the present invention, CALL is modified to place a return address on the stack, and then a random amount of space is added to the stack. This random value is placed in a known place on the stack, or kept in a non-accessible CPU register. The rest of the stack is built normally. When RET is called it finds the number of bytes added to the stack and finds the return address on the stack and returns as normal. This method allows a simple hardware solution that will not be visible to the software, yet provide a powerful deterrent to hackers looking to exploit buffer overrun vulnerabilities in software. Without any software modifications we would be able to deter a significant number of buffer overrun attacks. By affecting components lower on the environment it is possible to influence a larger set of software.

Abstract: A system for dynamically transcoding data transmitted between computers is implemented in an apparatus for use in transmitting data between a network server and a network client over a communications link. The apparatus includes a parser coupled to a transcode service provider. The parser is configured to selectively invoke the transcode service provider in response to a predetermined selection criterion.

Abstract: A system for handling incoming media events based on content and state information. An interface which receives events transmitted via a plurality of media forwards such incoming events into an attribute extractor. The attribute extractor extracts one or more attributes from the event and passes those attributes to a characteristic accumulator. The attribute extractor may, for example, read the header of an e-mail event to determine its source or, for example, employ caller ID in conjunction with voice recognition to determine the identity of a caller. The characteristic accumulator creates a characterization of an event on which a decision engine can base a decision of how the event should be handled. The characterization includes all extracted attributes as well as state information deemed relevant to such attributes. The decision engine will typically employ rule-based decision-making using the characterization as a starting point.

Abstract: A broadband data interface and a broadband digital interface couples broadband systems to digital client systems. The broadband digital interface is coupled to the digital client systems to transfer data to and from the digital client systems. The broadband digital interface is owned and controlled by the digital client systems. The broadband data interface interfaces broadband systems to the broadband digital interface. The broadband data interface is customized for the particular broadband system such that the broadband data interface is owned and controlled by the operator of the broadband system. The broadband data interface contains a broadband receiver and network access control to permit the broadband system operator to implement access control for data transmitted from the broadband system to the clients.

Abstract: A portable computer includes a display screen which is detachably connected to the remainder of the computer. When the screen is detached, communication may continue between the screen and the housing using one of a plurality of techniques, including infrared communications, radio frequency communications, or an extensible cable link. In this way, a display screen may be positioned at a more convenient location, for example for viewing by a plurality of viewers.

Abstract: The present invention manages multimedia data files in a computer network by receiving a request from a first unit on the network, processing the request to determine file attributes of the request and redirecting the request based on the file attributes of the request, to a second unit on the network. The invention further receives a response that includes data files streamed into separate data streams based on the file attributes of the response. The present invention also selects for use appropriate buffering protocol units and data transportation units, based on the file attributes of the data files in the separate data streams.

Abstract: A method and apparatus for protecting user privacy by providing an inaccurate measure of network systems automatically initiates one or more non-user requested accesses to one or more network systems. The data received from the host system corresponding to the one or more non-user requested accesses is then automatically ignored.

Abstract: A compressed natural gas cylinder mounting assembly is disclosed for supporting and coupling a compressed natural gas cylinder to the underside of a natural gas vehicle. The compressed natural gas cylinder mounting assembly has a pair of mounting bracket assemblies with one mounting bracket assembly coupled to each end of the compressed natural gas cylinder. Each of the mounting bracket assemblies has a pair of structural beams which are coupled to the underside of the vehicle and a pair of vertical mounting plates coupled to the ends of the structural beams and then attached to the underside of the vehicle. Each of the mounting brackets includes a cylinder brace with a pair of clamping bands for engaging and encircling the compressed natural gas cylinder. In an alternate embodiment, the structural beams are extendible.

Abstract: A method and apparatus for masquerading online is provided. A user supplies one or more transformation factors by selecting aspects of a stored user profile or by specifying desired attributes directly. The transformation factors are subsequently used to disguise the user's identity by generating suggested masqueraded output or by altering the user's input based upon the transformation factors. User input is received that is to be transmitted. The user input is then transformed into a masqueraded user output. The resulting masqueraded user output conforms to the transformation factors while maintaining the same basic meaning as the original user input. The masqueraded user output is then transmitted in place of the original user input.

Abstract: The present invention manages multimedia data files in a computer network by receiving a request from a first unit on the network, processing the request to determine file attributes of the request and redirecting the request based on the file attributes of the request, to a second unit on the network. The invention further receives a response that includes data files streamed into separate data streams based on the file attributes of the response. The present invention also selects for use appropriate buffering protocol units and data transportation units, based on the file attributes of the data files in the separate data streams.

Abstract: An applicator is mounted to a transverse boom carried by a tractor and moved through a field at such a height as to directly contact target vegetation above a selected level, and avoid application of treating liquid to any shorter, desirable vegetation. The applicator includes an outlet manifold, a plurality of receivers connected to an inlet manifold, a respective plurality of generally vertically oriented, transversally spaced non-porous applicator rods each extending between the outlet manifold and a respective receiver, an elevated reservoir for treating liquid, and a pump for recirculating back to the reservoir excess treating liquid which has flowed down outsides of the rods and into the receivers without having been brushed-off onto vegetation contacted by the rods. The outlet manifold and receivers are provided with filters, and each receiver is provided with a trash shield, all for preventing clogging and for facilitating clean-out of the treating liquid flow path.

Abstract: An applicator unit is moved through a field of growing vegetation, for instance as an implement mounted across the front of a farm tractor. The unit includes a horizontal, laterally extending outlet manifold ranked above a similarly arranged inlet manifold. Between each manifold a plurality of forwardly convex knee-like rod members are mounted. In use, a treatment liquid to be directly applied to vegetation is arranged to run out of the outlet manifold in a superficial sheet along the surface of each rod. As vegetation is grazed by the rods, some of the treatment liquid is wiped onto the vegetation. Any treatment liquid which is not thus wiped onto vegetation is collected from the lower ends of the rods into the inlet manifold and pumped back up to a reservoir from which it flows to the outlet manifold. By preference each knee-like rod is disposed at an incline as seen in front elevation in order to decrease the chance that a tall thin plant can pass untreated between two adjacent rods.

Abstract: A method of assembling, positioning, and making connections to a thermal printhead is disclosed. A substrate is provided upon which heating elements or mesas are mounted. Leads from these heating elements are continued on the same side of the substrate as the one on which the elements are located. The leads are brought to terminal pads where connections may be made to the logic circuit which selectively energizes the heating elements to form numerals or characters on heat sensitive paper. A flat flexible cable with conductor ends exposed is held in place so that the exposed conductor ends make contact with the terminal pads of one or more of such substrates. The substrates and cable are clamped together by two metal plates. This entire assembly is mounted on a spring-loaded pivot arrangement so as to hold the heating elements against the heat sensitive paper on an advancing platen. Connections may be made between the cable conductors and the printing logic to allow the heating elements to be energized.