Abstract: An apparatus and a method for an authentication protocol. A client generates a server unique identifier of a server prior to communicating with the server. An encrypted password generator module of the client calculates an encrypted password based on the server unique identifier, a username, and an unencrypted password. A communication request generator module of the client generates and sends a communication request to the server. The communication request includes a username, a client random string, a client timestamp, and a client MAC value. The client MAC value is computed over the username, the client random string, and the client timestamp, using the encrypted password as an encryption key.

Abstract: An apparatus and a method for versioning a file of a file system is described. A versioning module stores multiple versions of the file. The file is opened for write access. The versioning module identifies an file mapping structure of a block associated with the file, copies the content of the file mapping structure of the file to a new file mapping structure of the file, and allocates a new block to the file as represented by the file mapping structure.

Abstract: An apparatus and a method for suggesting a web site is described. In one embodiment, a user at a client enters a web address. A suggestion server receives the web address and generates one or more suggested web addresses for the user based on an analysis of captured aggregate online users behavior in relation to the web address. The suggestion server stores and organizes results of the analysis of the captured aggregate online users behavior. The results includes a list of two or more substantially related and relevant web addresses. The suggestion server compares the web address with the results of the analysis to generate the one or more suggested web addresses. The one or more suggested web addresses are sent to the client.

Abstract: A process of manufacturing an optical flexible circuit comprising: (a) disposing an adhesive layer on at least a portion of a carrier film, said adhesive layer having a downward adhesive face and an upward adhesive face, said downward adhesive face and said carrier film being configured such that said carrier film is removable from said downward adhesive face without disruption of said downward adhesive face; (b) routing one or more fibers on said upward adhesive layer; (c) coating said fibers to define an optical circuit; and (d) optionally parting said carrier film to separate said optical circuit from other optical circuits on said carrier film.

Abstract: A search engine tracks search queries from a user received at the search engine to generate a search query history. A prediction engine compares the search query history from the user with search query histories from other users on the search engine. A predicted search query for the user that the user is predicted to use to perform a next search in relation to other possible searches is generated in view of the comparison. Search query histories of the other users with greater similarities to the search query history of the user have a greater computation weight in generating the predicted search query than the search query histories of the other users with fewer similarities to the search query history of the user.

Abstract: A process and system for enciphering and deciphering Unicode characters that is compatible with scripting languages such as JAVASCRIPT®, JSCRIPT® and VBSCRIPT®. The process and system can encipher each character individually and maintain the size of the character. The enciphered character is deciphered at the application layer at the client to provide endpoint security.

Abstract: A system and method for suggesting search terms is described. The method includes receiving a search term from a client at a first time and generating one or more suggested search terms to the client based on the analysis of elapsed time data between the first time and a prior time of receiving a prior search terms. The method further includes sending the suggested search terms to the client.

Abstract: An apparatus and a method for validating requests to thwart cross-site attacks is described. A user identifier token, a request identifier token, and a timestamp, are generated at a web application of a server. A Message Authentication Code (MAC) value is formed based on the user identifier token, the request identifier token, and the timestamp using a secret key of the web application. The form is sent with the MAC value and the time stamp to a client. A completed form comprising a returned MAC value and a returned timestamp is received from the client. The completed form is validated at the server based on the returned MAC value and the returned timestamp.

Abstract: Cross-site request forgeries (“XSRF”) can be prevented using a client-side plugin on a client computer. The client computer accesses a content provided by a third party host via a network and generates a request to a web application as directed by the content. The client-side plugin determines whether the request is associated with suspicious activities based on the content, a source of the request and a list of approved hosts associated with the target host. In response to a determination that the request is associated with suspicious activities, the plugin removes authentication credentials from the request and sends the request to the web application.

Abstract: A method and apparatus for predicting search queries for a user on a search-based system is described. A search engine tracks search queries from a user received at the search engine. A prediction engine compares a search query history from the user with search query histories from other users on the search engine. The search query histories are stored in a storage device of the search-based system. A prediction of a search query for the user is generated based on the comparison. Search query histories from other users having greater similarities with the search query history from the user have a greater computation weight than search query histories from other users with less similarities with the search query history from the user.

Abstract: A computer-implemented method for managing a plurality of 401(k) accounts comprises the step of transmitting data configured to generate at least one graphical user interface comprising selectable options configured to facilitate a user to create an investment model for the plurality of 401(k) accounts, wherein the created investment model comprises a plurality of securities and, for each security of the plurality of securities, a target percentage. The method further includes the step of automatically initiating investments at predetermined intervals for each 401(k) account of the plurality of 401(k) accounts based at least partially on the investment model, wherein each investment is based at least partially on the target percentage of a corresponding security, such that an allocation of assets for each 401(k) account of the plurality of 401(k) accounts is rebalanced according to the target percentage for each security. A system for performing the method is also disclosed.

Abstract: Some embodiments of a multi-use application proxy have been presented. In one embodiment, an application proxy is executed as an intermediary a set of applications. The application proxy performs multiple functions between the set of applications. For example, the application proxy aggregates interactions between the applications and a client in one embodiment.

Abstract: An interface in an attribute calculation module external to an enterprise receives data from the enterprise. A processor performs one or more first calculations on the received data, wherein the first calculations comprise predetermined calculations to create attributes of the received data. The interface communicates the first calculated data to a database for storage, the database being external to the enterprise. The interface receives a request from a computer associated with the enterprise, wherein the request indicates criteria to conduct one or more second calculations on the first calculated data. The processor performs each of the second calculations on the first calculated data. The interface communicates the second calculated data to the computer associated with the enterprise.

Abstract: A processor in an attribute retrieval module determines retrievable customer attributes from a plurality of data locations, wherein at least one of the retrievable customer attributes is retrieved from a data location external to the enterprise. The interface receives a customer attribute request from a first computer, the request includes at least one customer identifier and requested customer attributes. The requested customer attributes is a subset of the retrievable customer attributes. The processor determines the data location of each requested customer attribute and generates an information call for each data location. The interface communicates the information call to each data location. The interface receives a data report in response to the information call from each data location. The processor generates a complete data report based on the data report received from each data location, and the interface communicates the complete data report to the first computer.

Abstract: An interface receives a report associated with a customer from a first computer. The report includes customer attributes associated with the customer. A processor determines a customer identifier associated with the customer. The processor associates the customer identifier and customer attributes of the report to a customer identifier in a cross-reference table. The cross-reference table is internal to an enterprise and comprises the customer identifier and a universal key. The interface receives a request for an anonymized report from a second computer. The request comprises at least one requested customer identifier and indicates requested customer attributes. The processor determines a universal key for each requested customer identifier and generates the anonymized report. The anonymized report comprises the universal key associated with the requested customer identifier and the requested customer attributes. The interface communicates the anonymized report to a computer.

Abstract: In one embodiment, a mechanism for broadcast stenography of data communications is disclosed. In one embodiment, a method includes creating a plurality of messages for transmission to one or more recipients, the plurality of messages including one or more real messages intended for one or more of the recipients and one or more bogus messages intended for none of the recipients. The method further includes for each intended recipient of the one or more real message, calculating a message authentication code (MAC) based on the message and a shared secret key kept between a broadcaster of the plurality of messages and the intended recipient, and for each of the plurality of messages, creating a plurality of unique pseudo-MACs that have an identical format to a real MAC.

Abstract: An apparatus and a method for searching one or more documents for several different strings is described. A finite state machine receives and processes one or more search strings with a tail-first search. A matching string machine forms states based on the characters in the search string with at least one state accepting a match. The states are annotated with a pattern that indicates what the state has matched and can match. Each position within the pattern is either a character that has been matched at that point or an indicator that it is unknown.

Abstract: An apparatus and a method for validating requests to thwart cross-site attacks is described. A user identifier token, a request identifier token, and a timestamp, are generated at a web application of a server. A Message Authentication Code (MAC) value is formed based on the user identifier token, the request identifier token, and the timestamp using a secret key of the web application. Names of the form elements are enciphered. Fake form elements can also be added to the dynamic form. The entire page also can be enciphered. The dynamic form is sent with the MAC value and the time stamp to a client. A completed form comprising a returned MAC value and a returned timestamp is received from the client. The completed form is validated at the server based on the returned MAC value and the returned timestamp.

Abstract: A tool for aligning fibers in a ferrule, the tool comprising a body portion having a register surface; and at least one alignment member at a certain angle from the register surface, the alignment member configured to cooperate with a corresponding alignment member of a ferrule, wherein the register surface is non-planar.

Abstract: The invention relates to a mating enclosure having a flange, wherein the flange has a forward face, a rearward face, and a first outer perimeter, a central opening, wherein the central opening has a second outer perimeter contained within the first outer perimeter, at least one protrusion protruding substantially perpendicularly from the forward face of the flange, wherein the protrusion has an inner surface facing the central opening, an outer surface facing away from the central opening, and a forward surface facing in the same direction as the forward face of the flange, and at least one locking element positioned on the outer surface of the protrusion, wherein the locking element is at rest such that a distance between the outer perimeter of the flange and the locking element is less than a distance between the outer perimeter of the flange and the outer surface of the protrusion.