Abstract: Provided are a data discard method for a file system and a memory management apparatus thereof. Specifically, the data discard method for a file system includes: unlinking an inode and a data block corresponding to a file stored in a storage from among inodes and data blocks in a file system when a kernel event of deleting the file occurs; updating state values for the unlinked inode and data block, respectively, to a bitmap block of the file system; checking bit values of all of inodes in an inode block including the updated inode from among inode blocks of the file system; and transmitting discard commands with respect to the inode block including the updated inode and the data block, respectively, to the storage if all of the inodes of the inode block are clean bits as a result of the check.

Abstract: Provided are storage apparatuses for a virtualized system and methods for operating the same. A method for operating a storage apparatus having a write buffer and a memory includes receiving a write request from a virtual machine, identifying a write pattern corresponding to the received write request by comparing a write data size indicated by the write request with a predetermined threshold, and allocating the received write request differently based on the identified write pattern.

Abstract: A method of operating a storage device including a non-volatile memory includes: the storage device receiving from a host a first write command; determining, based on the first write command, whether first write data for the first write command is sequential data required to be written according to a write request order; writing the first write data in the non-volatile memory; and when the first write data and second write data for a second write command are sequential data, sequentially updating first mapping data including a mapping relationship between a first logical address and a first physical address for the first write data, and updating second mapping data including a mapping relationship between a second logical address and a second physical address for the second write data, according to an order in which the first write command and the second write command are received.

Abstract: A method for user-based application grouping in a table-top multi-user environment where a plurality of users execute applications individually comprises collecting geometric information of each window of a plurality of applications displayed on a table-top display—each window of the plurality of applications has different geometric information according to the position at which each user uses the table-top display; and processing geometric information of each window of the plurality of applications through a clustering algorithm processing unit by using the collected geometric information as a criterion for classifying the plurality of applications and grouping the processed geometric information for each user. Through grouping of applications currently executed in a table-top environment for each user, a user-specific special function such as a user-specific application history may be provided.

Abstract: Methods and apparatus are provided for load-balancing in a portable terminal having a plurality of Central Processing Units (CPUs). A utilization is calculated for each of the plurality of CPUs, when a state of a task is changed. An average of the utilizations of the plurality of CPUs is calculated. It is determined whether the average exceeds a predetermined threshold. Load-balancing is performed when the average exceeds the predetermined threshold.

Abstract: Provided are a data discard method for a file system and a memory management apparatus thereof. Specifically, the data discard method for a file system includes: unlinking an inode and a data block corresponding to a file stored in a storage from among inodes and data blocks in a file system when a kernel event of deleting the file occurs; updating state values for the unlinked inode and data block, respectively, to a bitmap block of the file system; checking bit values of all of inodes in an inode block including the updated inode from among inode blocks of the file system; and transmitting discard commands with respect to the inode block including the updated inode and the data block, respectively, to the storage if all of the inodes of the inode block are clean bits as a result of the check.

Abstract: An electronic device, including an application configured to request a page allocation of a process, a cache management module configured to allocate a page in a page group including uninterrupted (or consecutive, or contiguous) pages to the process, and a page buffer configured to manage the at least one page group, is disclosed.

Abstract: A method and apparatus for managing a memory in a portable terminal including a main memory, a secondary memory, and a plurality virtual machines allocated by partitioning the main memory are provided. The method includes generating, by the virtual machines, monitoring information by monitoring access to the main memory and the secondary memory and swapping out with respect to the secondary memory; determining memory allocation amounts for each of the virtual machines by using the monitoring information; and allocating the main memory to the virtual machines in a partitioning scheme based on the determined memory allocation amounts.

Abstract: The present invention relates to a method of embodying a cooperation system between SEND and IPSec in an IPv6 environment. The cooperation system between SEND and IPSec in accordance with the present invention includes: receiving an authentication completion report message including a first IP address of a host whose authentication is completed by the SEND; generating new authentication information corresponding to the host and storing the new authentication information in a temporary storage area, if authentication information for the host is not present in the temporary storage area, wherein the authentication information includes the first IP address; and if an authentication check request message including a second IP address is received from the IPSec, checking whether the second IP address is present in the temporary storage area, and sending the result of checking to the IPSec.

Abstract: Methods and apparatus are provided for load-balancing in a portable terminal having a plurality of Central Processing Units (CPUs). A utilization is calculated for each of the plurality of CPUs, when a state of a task is changed. An average of the utilizations of the plurality of CPUs is calculated. It is determined whether the average exceeds a predetermined threshold. Load-balancing is performed when the average exceeds the predetermined threshold.

Abstract: A method and apparatus for managing a memory in a portable terminal including a main memory, a secondary memory, and a plurality virtual machines allocated by partitioning the main memory are provided. The method includes generating, by the virtual machines, monitoring information by monitoring access to the main memory and the secondary memory and swapping out with respect to the secondary memory; determining memory allocation amounts for each of the virtual machines by using the monitoring information; and allocating the main memory to the virtual machines in a partitioning scheme based on the determined memory allocation amounts.

Abstract: Disclosed is a method and system for controlling access for a mobile agent in a home network environment. The method includes the steps of: issuing a role ticket to the mobile agent; verifying access authority to service requested by the mobile agent through the role ticket; and granting the mobile agent access authority to the service. Accordingly, a table for managing access authority of a user is distributed to devices, so that it is possible to provide the mobile agent access control method and system capable of minimizing network traffic in the home network environment.

Abstract: A method and apparatus for controlling writing of data in a storage unit based on a NAND flash memory are provided. The method includes determining reference values for classifying dirty pages to be written in the storage unit into a plurality of groups; calculating, with respect to each of the dirty pages, a hotness indicating a possibility of a change of data; classifying the dirty pages into the groups corresponding to reference values most similar to the calculated hotness; determining whether sizes of the groups are greater than a size of a segment, where the segment is a unit for performing a write request in the storage unit; and requesting a write operation for each segment with respect to groups having a size at least equal to the size of the segment to the storage unit.

Abstract: A menu user interface providing device and a method thereof are disclosed. In accordance with an embodiment of the present invention, the method of providing a menu user interface by a portable apparatus, including determining whether a main menu icon displayed on a touch screen is selected; determining whether a menu mode is an activation mode or an inactivation mode if the main menu icon is selected; and changing the menu mode into the activation mode if the menu mode is determined as the inactivation mode and forming an expanded menu by radically arranging a submenu of n hierarchies, n being a natural number, corresponding to the main menu icon and displaying the formed expanded menu through a touch screen. Accordingly, with the present invention, a user interface capable of inputting various data with easy manipulation and minimized multi-points can be provided.

Abstract: A context-aware role-based access control system and a control method thereof. The context-aware role-based access control system includes: a context-aware user assignment manager (CAUAM) for performing a role assignment function, a role delegation function, or a role revocation function for a user according to a context of the user, based on a preset context request condition; a context-aware permission assignment manager (CAPAM) for performing a permission modification, a permission restoration, and a personalized permission modification for a permission, which the role has, according to changes in the context of the user; an information repository for storing a user profile and context information; and an access control manager (ACM) for controlling the context-aware user assignment manager, the context-aware permission assignment manager, and the information repository, and processing an access control request.

Abstract: An abnormal Internet Protocol Security (IPSec) packet control system and method utilizes IPSec configuration and session data to detect whether or not packets encrypted by an extended header are abnormal. The IPSec packet control system can include an extended header processing unit that receives an IPSec packet and extracts the data to be used in traffic control; check units for checking the packets in the stages of IPSec configuration and IPSec communication that receive the extracted data to determine whether or not the IPSec packet has passed; and a control unit that allows the IPSec to pass or to be blocked according to a determination result from the check units for checking the IPSec configuration and communication packets, where abnormal IPSec packets are blocked using the IPSec configuration and session tables without requiring them to be decrypted and encrypted.

Abstract: A method for distributing log block associativity in log buffer-based flash translation layer (FTL) includes, if write request on page p is generated, checking whether log block associated with corresponding data block that write request is generated exists or not by checking log block mapping table storing mapping information between data blocks and log blocks, wherein the associativity of each log block to data block is set to equal to or less than predetermined value K in advance, and K is a natural number, if log block associated with corresponding data block that write request is generated exists, checking whether associated log block is random log block or sequential log block, and if associated log block is random log block, writing data that write request is generated in first free page of random log block.

Abstract: A virtualization apparatus includes one or more guest machines each comprised of a guest kernel and a guest user process, a hypervisor module installed in a host kernel and handling a request of the guest machine with regard to the virtualization apparatus, and a virtual processor supporting the guest machine to serve as a host user process and handling an interrupt and a switching of the guest machine, wherein address spaces of the guest kernel and the guest user process are designed to be separated from each other.

Abstract: A method for distributing log block associativity in log buffer-based flash translation layer (FTL) includes, if write request on page p is generated, checking whether log block associated with corresponding data block that write request is generated exists or not by checking log block mapping table storing mapping information between data blocks and log blocks, wherein the associativity of each log block to data block is set to equal to or less than predetermined value K in advance, and K is a natural number, if log block associated with corresponding data block that write request is generated exists, checking whether associated log block is random log block or sequential log block, and if associated log block is random log block, writing data that write request is generated in first free page of random log block.

Abstract: A context-aware role-based access control system and a control method thereof. The context-aware role-based access control system includes: a context-aware user assignment manager (CAUAM) for performing a role assignment function, a role delegation function, or a role revocation function for a user according to a context of the user, based on a preset context request condition; a context-aware permission assignment manager (CAPAM) for performing a permission modification, a permission restoration, and a personalized permission modification for a permission, which the role has, according to changes in the context of the user; an information repository for storing a user profile and context information; and an access control manager (ACM) for controlling the context-aware user assignment manager, the context-aware permission assignment manager, and the information repository, and processing an access control request.