Abstract: A system and computer program product that off-loads the processing associated with responding to user status requests for software task execution queues or for queued software tasks that are managed by a software task manager. A software task manager is periodically queried for status and the results of that periodic query are stored in a file. User queries for the status of the software task manager are handled by a separate process on a separate computing node. Queries submitted by users for the status of queues or queued software tasks managed by the software task manager are satisfied by retrieving the status data that are stored in the file. Alternative embodiments distribute copies of the file to several computing nodes to further alleviate the processing bottleneck caused by responding to frequent task manager status queries from many users.

Abstract: A method, apparatus, and article of manufacture provide the ability to enable communication between disconnected applications in a computer system. A bridge object is created in a secondary application. Further, an interface for the bridge object enables communication with the secondary application through the bridge object. The interface for the bridge object is registered in a global interface table (GIT). A cookie is retrieved from the GIT in response to the registration. Such a cookie comprises information for utilizing the interface for the bridge object. The cookie is then stored in an environment variable. The environment variable is accessible to a disconnected application (e.g., ActiveX control) such that the cookie may be retrieved to enable use of the interface.

Abstract: A common handler framework can allow handlers for multiple different types of web services programming models to be used in a single handler chain.

Abstract: An optical disc apparatus including first to fourth disc guides. At the end of disc loading, the first one, in a fixed position, contacts a peripheral side face of the optical disc at a first point thereon to support the disc; the second one has a plane opposite to the peripheral side face which contacts the peripheral side face of the optical disc at a second point to support the disc while restrained from moving away from the side face; the third one contacts the peripheral side face of the optical disc at a third point to support the disc while biased by a spring; and the fourth one contacts the side face at a fourth point while biased by a spring to support the disc, and is restrained from moving against the resilience of the spring. The disc, supported by those disc guides, is chucked by a clamper.

Abstract: A method and system for providing an energy assisted magnetic recording (EAMR) disk drive are described. The EAMR disk drive includes a slider, at least one EAMR transducer on the slider, and at least one laser coupled with the slider. The slider has a slider back side, a trailing face, and an intersection. The trailing face and the slider back side meet at the intersection. The trailing face makes an angle different from ninety degrees with the slider back side at the intersection. The laser(s) have an optical axis and are optically coupled with the trailing face of the slider. The optical axis is substantially perpendicular to the intersection and parallel to the slider back side.

Abstract: A base of an optical pickup includes a first bearing portion through which one of two guide shafts disposed in parallel to each other is inserted and a second bearing portion through which the other guide shaft is inserted, and is slidable along the two guide shafts. Under the first guide shaft that is inserted through the first bearing portion, a nut hold portion for holding a nut that connects a member of a drive mechanism for driving the base and the base to each other is disposed on the base. The nut hold portion includes an insertion opening that allows the nut to be inserted along a direction substantially parallel to a longitudinal direction of the first guide shaft.

Abstract: The present invention provides a lift device of a slot-in disk drive, which includes two straight slots formed on a side of a sliding component, two sliding pins protruding from a side of base adjacent to the sliding component or protruding from a fixing plate of a casing, a cover covering with the sliding component, two guiding pins protruding from an inner surface of the cover corresponding to the two straight slots for inserting into the two straight slots respectively, an one-humped traverse slot with two ends of different heights formed on a lateral side of the cover adjacent to the sliding bolt whereinto the sliding bolt inserts, and two lifting slots separately formed on the other lateral side of the cover whereinto the two sliding pins insert.

Abstract: A turntable of a recording medium drive can include a coupler having an inner circumference to which a rotating shaft is fixed, and an outer circumference onto which a disk is inserted; a table extending outwardly from the outer circumference of the coupler and for mounting the disk thereon; and first and second claws elastically supporting the disk by making contact with a clamping region of the disk. In an embodiment, the distance from the center of the rotating shaft to an outer surface of the first claws making contact with the clamping region of the disk is longer than the distance from the center of the rotating shaft to an outer surface of the second claw making contact with the clamping region of the disk.

Abstract: A method for managing access to a signal representative of an event of a service provider by permitting a subscriber of the service provider to view an event for which the subscriber is not authorized for a specified time period; and transmitting at least one authorization code for the event to the subscriber during the specified time period.

Abstract: Television converter devices in accordance with present invention determine whether the programming is to be blocked or not, then inserts an appropriate V-code into the vertical blanking interval (VBI) of the programming before delivering the programming to one or more V-chip enabled TV where the V-chip blocks the programming as appropriate. Various methods of determining whether the programming is to be blocked are disclosed.

Abstract: To add new additional content to the reproduction schedule on the basis of reference content scheduled in a time slot in the reproduction schedule, a digital television in accordance with the present invention includes: an additional content extracting section for identifying, as the additional content, content associated with content information which meets conditions determined on the basis of content information of the reference content; and a placement position determining section for determining, based on time slot determining procedure information based on which a time slot is determined for the additional content related to the reference content, a time slot for the additional content identified by the additional content identifying means. The digital television therefore produces an optimal reproduction schedule to the user.

Abstract: While reviewing potential programs when using an interactive programming guide, a viewer can select to place information regarding specific programs in a list (in one embodiment, such entries are made on an automated basis). The viewer can then recall that list to make a final selection of a present program to view (or record). In some embodiments, this list can be automatically cleared in response to a predetermined trigger event.

Abstract: Intuitive user interfaces are disclosed for a TV showing a favorites channel pane that can transition to a channel history pane, etc. in response to remote control commands.

Abstract: A digital broadcast receiver capable of reducing time and labor to back-up contents recorded on one recording medium to another recording medium. A digital broadcast receiver extracts the contents recorded, out of order, on a first recording medium by an extracting unit according to the titles or genres recorded in a content list, and automatically rearranges the extracted contents using an arranging unit according to video-recording date-and-hour recorded in the content list, for recording as a content list onto a second recording medium (300).

Abstract: While a user uses one service in a digital multimedia broadcasting receiving terminal, there is implemented a function for suspending the service currently being used and enabling a different service to be used when the different service is provided. A function for enabling a call service to be used during a broadcast service is implemented. A call screen is displayed in a state in which a broadcast service connection is maintained, such that the user can use a new call service without stopping the broadcast service currently being used. In this concurrent service, switching between the call screen and a broadcast screen is possible. This display method can prevent images of the respective services from overlapping with each other and can provide one service without stopping another service.

Abstract: A frequency translation module for delivering satellite signals to Integrated Receiver Decoders (IRDs). The module comprises at least one input for receiving polarized satellite signals, wherein at least one input is coupled to at least one low noise block amplifier (LNB), at least one legacy output, the legacy output coupled to the input through a multiswitch, wherein each legacy output selects a polarization of a satellite signal based on a Legacy IRD command directly to the multiswitch, and at least one combined output, the combined output coupled to the multiswitch through an interface, wherein at least one new IRD selectively commands the frequency translation module such that each new IRD receives a portion of a satellite signal based on commands received from each IRD.

Abstract: There is provided video switching circuitry for use in a KVM switch and similar devices. Video signal switching circuitry can supply video signals from a one of a plurality of video sources connected to the circuit to a display device connected to the circuit. The high data signalling rate signals are converted into a greater number of lower data signalling rate signals for switching by a bus architecture. Also provided are video display systems in which analogue and digital video signals are switched synchronously to allow them to be displayed on common or separate display devices. Also described is a high-resolution monitor digital video data switching device.

Abstract: A method and apparatus for load sharing and increasing fault tolerance at a head-end of an interactive information distribution system during a subscriber's video session. A primary head-end controller processes video session data to manage the distribution of streamed video information to a subscriber. In the event of a failure at the primary head-end controller, a secondary head-end controller continues to process session-state data, with minimal interruption to the subscriber's video session.

Abstract: Methods and apparatus for selecting, purchasing and delivering content to users of a network so that the user has “virtual” ownership of and access to the content, thereby obviating the need for physical media (e.g., DVDs or CDs). In an exemplary embodiment, the network comprises a hybrid fiber coax (HFC) network, and on-demand (OD) sessions or broadcast modes are used to deliver the virtual content stored at the head-end (or hub site) to the requesting owner. The purchased content is associated with one or more users when stored, thereby providing the owner(s) unlimited access thereto, without the costs and effort associated with renting/purchasing and maintaining DVDs. The content may also comprise new release content, which would otherwise not be available over the network at that time but for the purchase and delivery mechanisms of the invention. Various other complementary features for enhancing the user's virtual ownership experience are also disclosed.

Abstract: A system is provided that allows a user to select a pay program for purchase from a program guide. The program guide determines whether the selected program is part of a package of pay programs. If the selected program is part of a package, information regarding the package is provided to the user so that the user may decide whether to purchase the package. If the selected program is part of several packages, information for all packages is provided. The system automatically sets reminders for packages containing repetitive programming. The system monitors whether the user has watched any of the programs in such packages. When the user watches a program from the package, the remaining reminders are cancelled. If a user does not watch any programs in a package of any type, purchase of the package is cancelled and the user is provided with the opportunity to reschedule.

Abstract: A method and apparatus for processing multimedia signals is disclosed. A system that incorporates teachings of the present disclosure may include, for example, an adjunct device coupled between a Set-Top Box (STB) and a media device. The adjunct device can have a controller element that receives a telephony signal from a communication system and an Internet Protocol Television (IPTV) multimedia signal supplied by the STB, monitors call origination activities in the telephony signal, and presents at the media device in whole or in part the telephony and the IPTV multimedia signal according to the call origination activities monitored. Additional embodiments are disclosed.

Abstract: A method for communicating media program information is provided. The method includes receiving a content-augmented broadcast signal at a conventional broadcast receiver, the content-augmented broadcast signal having a program content and a program cookie relating to the program content, demodulating the content-augmented broadcast signal, rendering the program content, recovering the program cookie from the demodulated content-augmented broadcast signal at substantially the same time the program content is rendered, determining whether the program cookie comprises information relating to a current media program a user is currently watching or listening to, or to an advertisement of a future media program, and sending the program cookie to an electronic device.

Abstract: A personal video service manager can store one or more personal video assets on a server. A personal video asset can include a recording of a broadcast stream of a broadcast asset or an asset that has been pre-authored in a personal video asset format. Upon receiving a request from a subscriber to receive the personal video asset, the personal video service manager can facilitate a connection between the server and the subscriber for distributing the personal video asset from the server to the subscriber.

Abstract: A method and apparatus for storing a compressed video stream or an uncompressed video stream is disclosed. The uncompressed video stream may be ZOOM VIDEO data. The compressed video stream may be a TRANSPORT STREAM data from a High Definition Television (HDTV) broadcast. A video graphics adapter is configured to properly receive one of the two types of video data. The received data and control signals are monitored to provide a second set of control of data signal which are used by a packer and an window control to provide data of a predetermined width and control to an address generator. The data is buffered within a graphics memory such as a frame buffer. The graphics memory can be written to system memory when full, or accessed by the system memory controller during the fill operation if a multi-ported memory is used.

Abstract: Frames of broadcast video received at a device are cropped to produce rendered frames on a display of the device, the cropping being based on both (a) a predetermined value indicating a location within each of at least some of the frames with respect to which the cropping is to be done and (b) a characteristic of the display.

Abstract: A system is provided that allows encrypted content to be distributed to users over a communications network. A policy enforcement service may use an identity-based encryption algorithm to generate public parameter information and private keys. Data content may be encrypted prior to distribution using an identity-based encryption engine. The encryption engine may use the public parameter information from the policy service and public key information to encrypt the data. The public key information may be based on policy information that specifies which types of users are allowed to access the data that is encrypted using that public key. A user may obtain a private key for unlocking particular encrypted data by providing a key request to the policy enforcement service that contains the public key. The policy enforcement service may enforce the policies given by the policy information and may provide private keys only to authorized users.

Abstract: Techniques for managing security contexts may be described. An apparatus may comprise a processor and a security management module. The security management module may form a merged security context for multiple concurrent threads, with one of the threads depending on more than one preceding operation from other threads. Other embodiments are described and claimed.

Abstract: A system and method for processing a request by a first control service using a first control specification language, and a second control service using a second control specification language includes steps of: receiving the request from a requestor; providing the request to the first and second control services; receiving a decision on the request from each of the first and second control services; and comparing the decisions. The first control specification language is an access control policy.

Abstract: In a large network, it can be difficult to pinpoint and track down the causes of breaches of established policies. A compliance policy server allows traversal of notifications according to breaches, organizes the breaches (vulnerabilities and violations) according to severity and recurrence, and identifies related rules and application services and network entities which may be related to the breach. An integrated graphical user interface (GUI) provides efficient, timely traversal and analysis of rule breaches across the network to allow quick, efficient identification of the underlying cause or condition of the rule breach, as well as identify impact on application services and network entities. A discoverer gathers configuration data including notifications of changes, alerts, and conditions in the network that are pertinent to the rule breaches. A compliance engine evaluates the configuration and topological data against the rules to identify breaches.

Abstract: A mechanism is provided to automatically retrieve zoning best practices from a centralized repository and to ensure that automatically generated zones do not violate these best practices. A user selects a set of hosts and storage controllers. The user also selects a guidance policy for creating the zone, and also selects a set of validation policies that must be enforced on the zone. If the user selects a guidance policy and a validation policy combination that is incompatible, the mechanism allows the user to change either the selected guidance policy or the set of validation policies. If the user has selected consistent-zoning as a guidance policy, then the mechanism automatically selects a guidance policy that does not violate the known validation policies.

Abstract: The present invention relates to a method for configuring a policy management protocol for a web crawler, the method further comprising the steps of determining a web space that is to be crawled by a web crawler, wherein the web space is comprised of an IP address and/or a range of IP addresses, and determining additional hostnames that are associated with the IP address and/range of IP addresses. The method further comprises the steps of configuring the web crawler to crawl the IP address and/range of IP addresses, and determine additional hostnames that are associated with the IP address or range of IP addresses, and performing a web crawling function upon the determined additional hostnames by the web crawler.

Abstract: A graphical password authentication method is based on sketches drawn by user. The method extracts a template edge orientation pattern from an initial sketch of the user and an input edge orientation pattern from an input sketch of the user, compares the similarity between the two edge orientation patterns, and makes an authentication decision based on the similarity. The edge orientations are quantized, and each edge orientation pattern includes a set of quantized orientation patterns each corresponding to one of the quantized edge orientations. The number of quantized edge orientations, as well as other parameters such as the dimension of the final orientation patterns and acceptance threshold, can be optimized either globally or user-specifically.

Abstract: A relay device includes a security information reception unit, a security information processing unit, and a security information transmission unit. The security information reception unit receives, from a terminal device, first security information containing a user ID and user authentication information of a user of the terminal device. The security information processing unit adds a relay device ID and relay device authentication information to the first security information to generate second security information. The security information transmission unit transmits the second security information to an authentication server.

Abstract: In one example, a system for authenticating domains operates by authenticating a first domain and the extensions that make up the URI of an initial or primary Internet network call. Thereafter, the system can enable the owner of the first domain to make assertions or statements about additional domains and URIs that make up the rest of the web page, session or application.

Abstract: A system of the invention comprises a design module, execution engine, and performance management module. A first computer hosts the design module which enables a user to define attributes, queries, and decision rules transmitted to the execution engine hosted on a second computer remote to the first computer. The second computer can be located at a credit bureau, credit reporting agency, or other data provider. The second computer runs the execution engine to query a data repository with the user-defined attributes and queries, and applies the user-defined decision rules to produce result data transmitted to a third computer hosting the performance management module for monitoring performance of a benefit or offering made with the result data and the corresponding attributes, queries, and decision rules that generated the result data.

Abstract: A solution for transparently verifying the authentication of a real user includes a monitor that receives network packets and a collector. The monitor identifies an authentication exchange packet from network traffic, extracts information from the packet and sends it to the collector, which obtains objects from a directory service and determines if the information includes a user name equivalent to a name attribute in an object. If so, authentication is deemed verified. For additional verification, the monitor extracts from the packet a destination address if it is an response packet, or a source address if it is a request packet. Monitor sends the extracted address to the collector, which uses the extracted address to obtain a hostname and determines whether a user account associated with the name attribute is active on a computing device having the hostname. If so, the authentication of the real user is deemed further verified.

Abstract: Configuration information is exchanged between a home entertainment system server and various wireless components by pushing a button on the server and a random button on a remote control device as it is pointed at the devices sought to be authenticated.

Abstract: The present invention automatically signs or logs a user in to access secured features within a software application without prompting manual intervention when a user starts the software application having secured features. When the software application is started and an automatic sign-in condition is enabled, the software application transitions to a signed-in or logged-in state as long as security criteria are met. As a result, unnecessary and repetitive steps are avoided when signing-in. The automatic sign-in condition may be enabled through initial system setup, from a prompt to enter a credential, or through a service options menu. The present invention improves network efficiency by limiting network transmissions to an as needed basis. The automatic sign-in condition is capable of roaming to other computers within a network, thereby following mobile users.

Abstract: Login credit is monitored over a credit time period. Continuous invalid login attempts decrease the login credit for the duration of the credit time period. Login credit accumulates with time. If the login credit is less than a credit threshold, login processing is precluded. A common invalid login notification for presentation to a user is generated if login processing is precluded or if login processing indicates that the login credentials are invalid.

Abstract: An agent architecture may be provided with base functionality that allows it to run without executing any applications. The base application need not have any modules. When functionality is desired, modules may be added. The agent may receive policies and procedures from a controller, and executes the modules based on the policies and procedures. It may then return and report information. This allows a system to be designed that doesn't have to be recompiled upon changes to individual tasks or applications, which greatly eases development of new tasks and applications.

Abstract: A method and system for allowing a user to access a peer from a remote system are described. The method and system include authenticating the user for the peer using an authentication server and providing a token for the peer and the user based on the authenticating. The user is authenticated from the remote system. The method and system also include allowing the user to access the peer from the remote system through a proxy server and using the token, if the user is authenticated.

Abstract: A method and data processing system for intercepting communication between a user and a service. An authentication component receives, from the user, a user request directed to the service. The authentication component adds a user-specific token to the user request to generate a tokenized request. The tokenized request includes the user request and the token. The token includes a unique user identifier that identifies the user. The authentication component sends the tokenized request to a proxy. The proxy sends the tokenized request to the service. The proxy invokes an interceptor plug-in that is plugged into the proxy. The interceptor plug-in ascertains that the unique user identifier in the tokenized request is present in an interception control list of unique user identifiers. The interception control list is accessible to the interceptor plug-in. The interceptor plug-in sends the tokenized request to an interceptor manager who stores the tokenized request.

Abstract: Provided is a method for intercepting a message between a requesting web service and a source web service, validating the message, logging the result of the validations, and adding a security profile to the message. The method may also include examining the message to determine whether a security profile is embedded therein. If the message is valid, access to the message by the requesting web service is permitted. If the message is not valid, access to the message by the requesting web service is prevented.

Abstract: One or more firewalls are used to perform firewall functionality on packets based on the entry and exit accesses of each of the one or more firewalls being applied to a packet. For example, when firewalls are included in a router, the interfaces of the router are typically mapped to virtual firewalls and access thereof. Based on the determined routing of a particular packet, the firewalls to apply and their corresponding entry and exit accesses are identified. In order to decouple the application by the firewall itself of the security policies from the network topology and routing architecture (e.g., the network routing address information which is typically relied upon by current firewalls), the firewall functionality is defined based on the identified entry and exit accesses of a firewall, rather than based on network defined addresses, for example.

Abstract: A method and apparatus for passing data from a first application at a first security level to a second application in a second security level higher than the first security level is disclosed. A backchannel communications link is established between the first application and the second application, and the backchannel link is used to transmit information such as an acknowledgement message from the second application to the first application.

Abstract: A communication apparatus comprises a storage unit for storing a first network list indicating plural networks; a receiving unit for receiving a second network list indicating plural networks from an outside by using a first authentication protocol; an operation unit for executing an AND operation by using the first network list and the second network list to create a transmission-use network list; and transmission unit for transmitting the transmission-use network list to the outside.

Abstract: A portable secured computing environment for performing online confidential transactions in an untrusted host computer. The secured computing environment may be loaded from a portable storage device, such as a USB stick, plugged into a peripheral port of the host computer. The secured computing environment may include a virtual machine running under a host operating system of the host computer. A secured operating system may be running in the virtual machine. An online application, such as a web browser in communication with an online service, may be run under the secured operating system. Operation of the online application may be restricted by a security profile. For example, the online application may only access network addresses specifically indicated in a whitelist of the security profile.

Abstract: One or more hints can be presented during the entry of protected information. Traditionally, for security reasons, the protected information is displayed as ambiguous characters, hindering the ability to determine if there was an error inputting the information. A hash can be calculated from some or all of the protected information already input, and the resulting hash value can be used to select a hint. The hints can be selected from a relatively small number of easily distinguishable hints, including visual, auditory and sensory hints, or any combination thereof. The hints are not a globally unique identifier of the protected information and can, instead, be used to detect a deviation from the correct entry of the protected information.

Abstract: Embodiments of the present invention comprise systems, methods and devices for imaging device credential submission wherein credentials are extracted by scanning graphical indicia on user documents using a primary document scanner.

Abstract: A password generator for use with a detector and a verifier in an encapsulated system is provided, as is a system for generating and verifying passwords. The password generator comprises a support, a sensor for detecting a signal from the detector, a data transmitter for transmitting binary data as pulses, a processor that is initialized by the verifier and that controls the data to be sent, a controller for activating the processor and a connector to releasably connect the password generator with the verifier. The system employs a mouse as the detector.