Abstract: Methods, apparatuses, and systems for network enhanced controls of software updates received via a computer-readable medium are described. A request for identification information of an image version may be sent from a first computer to a second computer. The first computer may receive identification information of the image version. The first computer may determine whether data representing the image version is stored on a removable computer-readable storage medium. Responsive to determining that data representing the image version is stored on the removable computer-readable storage medium, the first computer may load the data representing the image version from the removable computer-readable storage medium.

Abstract: Virtual machines can be pre-created in a grid environment. Pre-created machines can be of a tiny configuration to avoid consuming resources. A request for a virtual machine in the grid can be granted by ballooning a pre-created tiny virtual machine to a larger configuration. The tiny pre-created virtual machine can be advertised as being of a non-tiny configuration. Agents can work in concert to coordinate handing requests for a virtual machine in the grid. The virtual machine can be initialized before it is reduced to a tiny configuration. Ballooning the virtual machine can take considerably less time than creating it from scratch. Thus, high performance computing can be provided on virtual machines in a grid environment, enabling virtual machine technology to be applied in a wide variety of grid-based scenarios.

Abstract: An embodiment relates generally to a method of distributing virtual machines. The method includes specifying a set of requirements for a virtual machine and instantiating a virtual machine based on a lightweight reusable profile, based on the set of requirements as described in the profile. The method also includes importing the profile to a distribution server; and distributing the profile to at least one physical machine in response to a request. Software can be added to the at least one physical machine that can manage the deployment of the physical hosts as a farm to hosting the virtual images.

Abstract: Techniques for creating crash data in a virtualized environment are disclosed. In an embodiment of the present disclosure the techniques can be used when a guest operating system within a virtual machine may not have a sufficient mechanism for generating crash data.

Abstract: Method and system are provided for managing components of a storage operating environment having a plurality of virtual machines that can access a storage device managed by a storage system. The virtual machines are executed by a host platform that also executes a processor-executable host services module that interfaces with at least a processor-executable plug-in module for providing information regarding the virtual machines and assists in storage related services, for example, replicating the virtual machines.

Abstract: Methods of offering network performance guarantees in multi-tenant datacenters are described. In an embodiment, a request for resources received at a datacenter from a tenant comprises a number of virtual machines and a performance requirement, such as a bandwidth requirement, specified by the tenant. A network manager within the datacenter maps the request onto the datacenter topology and allocates virtual machines within the datacenter based on the available slots for virtual machines within the topology and such that the performance requirement is satisfied. Following allocation, stored residual capacity values for elements within the topology are updated according to the new allocation and this updated stored data is used in mapping subsequent requests onto the datacenter. The allocated virtual machines form part of a virtual network within the datacenter which is allocated in response to the request and two virtual network abstractions are described: virtual clusters and virtual oversubscribed clusters.

Abstract: A method, computer program product, and computing system for providing a graphical user interface including at least one selectable application in a scheduling entry in the multi-user scheduling system. An available application lockout may be activated on all available applications other than a selected application upon initialization of the scheduling entry.

Abstract: A scheduler device schedules executions of jobs using resources of a computational grid. The scheduler is configured for identifying an equilibrium threshold between resources and jobs. Below the equilibrium threshold, the scheduler schedules the execution of the jobs using the resources of the computational grid according to Pareto-optimal strategies. Above the equilibrium threshold, the scheduler schedules the execution of the jobs using the resources of the computational grid according to Nash-equilibrium strategies.

Abstract: A method for allocating threads to a user in a computer system is described. The method comprises queuing up work for a first user and permanently assigning a first thread to the first user, wherein the first thread performs the queued up work for the first user, and wherein each time work is subsequently queued up for the first user, the first thread performs the queued up work for the first user.

Abstract: Systems and methods are provided for scheduling the processing of a coprocessor whereby applications can submit tasks to a scheduler, and the scheduler can determine how much processing each application is entitled to as well as an order for processing. In connection with this process, tasks that require processing can be stored in physical memory or in virtual memory that is managed by a memory manager. The invention also provides various techniques of determining whether a particular task is ready for processing. A “run list” may be employed to ensure that the coprocessor does not waste time between tasks or after an interruption. The invention also provides techniques for ensuring the security of a computer system, by not allowing applications to modify portions of memory that are integral to maintaining the proper functioning of system operations.

Abstract: During performance of a specified computing task data concerning resource consumption regarding that specified computing task is gathered and stored. Upon completion of the specified computing task, the amount of carbon offset required to compensate for resource consumption associated with performance of the completed specified computing task is calculated based upon stored or known resource consumption data. The calculated amount of carbon offset information may be transmitted to a carbon offset function provider, and a carbon offset function provider implements the specified amount of carbon offset based upon the calculated amounts communicated for the completed specified computing task.

Abstract: A method of executing a dynamic clock and voltage scaling (DCVS) algorithm in a central processing unit (CPU) is disclosed and may include monitoring CPU activity and determining whether a workload is designated as a special workload when the workload is added to the CPU activity.

Abstract: Various embodiments are directed toward improving Virtual Machine performance by reducing the amount of communication protocol processing performed between co-resident Virtual Machine guest applications executing on the same physical machine. Overhead can be reduced by short-circuiting the full communication protocol stack when a plurality of Virtual Machine guest applications are hosted and executing on the same physical machine such as a data storage node or a compute accelerator node. Improvements may also be realized by enabling the sharing in virtual memory of physical memory pages between co-resident Virtual Machine guest applications, and employing a low latency high bandwidth network for enabling guest applications to communicate with each other that are located in different nodes in a data storage cluster.

Abstract: The present invention extends to methods, systems, and computer program products for persisting application state. Through decoupling an application host from an instance store, the application host can be used with many different persistence stores and persistence administration tools. Further, a given persistence store can be used with many different application hosts and application host extensions. Accordingly, applications can benefit from periodically persisting work to any of a variety of instance stores even if the applications are changed or are not natively configured for use with a particular instance store. Using persistence providers an application host can also more easily coordinate the persisted state with runtime state to ensure that a consistent checkpoint is created.

Abstract: When an application is launched, a framework scanning module scans a plurality of frameworks linked against by the application to generate a list of available services. When the application makes a request of a particular service, a service verification module compares the requested service to the list of available services and if the requested service is found in the list of available services, sends a signal to the application, the signal allowing access to the requested service for the application. Otherwise, access to the requested service is denied.

Abstract: Various technologies described herein pertain to developing a web application using a scripting language-based framework. A call can be received via an interface of the scripting language-based framework. The call can manage a control included in the scripting language-based framework. Further, the call can be provided by an application that references the scripting language based framework. Moreover, a user interface can be generated based on the control managed by the call, and backend cloud-based services provided by a distributed data store on a cloud platform can be accessed based on the control managed by the call.

Abstract: Embodiments of the invention provide techniques that improve resource management on a massively parallel computing system having a plurality of hybrid compute nodes. For example, a job scheduler may be provided which determines a library to link to an application based on system and user requirements. In one embodiment, the libraries may provide optimizations for job execution time, and also provide optimizations directed towards a specific processor architecture. Once the library is determined, the job scheduler may configure the environment of the application so that the application links with the optimized library during run-time. Doing so may improve overall system performance of the massively parallel computing system.

Abstract: A manufacturing method of an optical information recording medium includes forming a substrate which has a first main surface and a second main surface, forming a first information signal layer on the first main surface of the substrate, forming an intermediate layer on the first information signal layer, forming a second information signal layer on the intermediate layer, irradiating light from the second main surface side of the substrate and recording identification information on a first region out of the first region and a second region, and forming a barrier layer with regard to the second main surface in the second region which excludes the first region where the identification information is recorded before the recording of the identification information.

Abstract: There is provided a reproducing device in which a recording medium cartridge is directly inserted into a mechanical deck and placed on a chassis of the mechanical deck for reproduction. The mechanical deck includes an erroneous insertion-preventing portion which conforms to the curved shape of a front surface of the recording medium cartridge in the insertion direction thereof at the time of the insertion in a normal posture.

Abstract: Systems and methods according to the exemplary embodiments provide for bookmarking of content in IPTV systems. An IPTV control server can subscribe to receive notifications associated with the insertion of advertisements into other content. Upon receipt of a bookmark storing request, the IPTV control server can determine whether the bookmark storing request is associated with an advertisement or with the other content. A bookmark can then be stored by the IPTV control server including a content identifier based on the determination.

Abstract: Media system control and advertisement technology, in which input related to advertising preferences of a user of a media system that is connected to a content delivery network is received. An advertisement control policy is defined for the user of the media system based on the received input. During viewing, on the media system, of a channel provided by the content delivery network, the media system is controlled to deliver advertisements based on the defined advertisement policy.

Abstract: In accordance with one or more aspects, a consumer device obtains advertisement event data indicating a time when an advertisement is to be presented, and maintains the advertisement event data in a log. Advertisement data corresponding to the advertisement event data is presented at the indicated time if the advertisement event data corresponds to a subscriber group of which the consumer device is a member, otherwise the advertisement data is not presented. In accordance with one or more other aspects, program event data and advertisement event data are both obtained. Electronic program guide data is generated including both the program data and the advertisement event data, and is sent to one or more consumer devices.

Abstract: Ad insertion includes providing a multimedia applications gateway that is connected to an access gateway for an end user device and receiving, at the multimedia applications gateway via the access gateway, multimedia program content. The multimedia applications gateway converts the program content from a program media source into a first communication having an open standards protocol recognized by the end user device. The ad insertion also includes receiving directly, at the multimedia applications gateway from an advertising media source, multimedia advertising content. The multimedia applications gateway converts the multimedia advertising content into a second communication having the open standards protocol. The second communication is stored in a local memory of the multimedia applications gateway.

Abstract: A method and system whereby conventional television advertisements (i.e., those delivered to viewers while they watch television programming) can be delivered in conjunction with and correlated with advertisements that are presented to viewers in the Interactive Program Guide (IPG). Moreover, the invention described herein provides for delivering highly targeted ads to viewers in both conventional programming avails and in the IPG, and for linking the targeted ads in these two media to provide for enhanced and highly effective advertising campaigns.

Abstract: A method and apparatus for using a dynamic streaming server interface to enable the display of personal data in a cable box environment is disclosed. The system includes an interface to forward data to the server, an insertion tool to insert the display into the channel guide, and controls to enable the user to view the personal data using the cable box and interface.

Abstract: A method of aggregating video content receives video content data related to video content, evaluates and aggregates this information, and subsequently forwards the aggregated information to a viewing client where it can be viewed by a user. In one embodiment, the video content data contains a Universal Resource Indicator (URI) that specifies to the viewing client the location of the video content.

Abstract: A system and method for changing a user interface for added or removed content includes an external device, a display and a host device coupled to the display. The host device controlling the display to display a first user interface associated with the host device. The host device controlling the display to display a second user interface formed using the first interface with content corresponding to the external device.

Abstract: A system enables dynamic linking between a variety of video formats including television broadcasts, web pages, and video displays which are stored on magnetic or optical media. Each frame of the video information is identified together with a plurality of locations within that frame. The locations selected by the user for example using a pointing device is then used to access associated information either within the system itself or on an external system. Thus, in some embodiments of the present invention, any item on a given frame may be linked initially or thereafter to other information within or without the particular system containing that information.

Abstract: A system and method for providing communications service to individual units of a multiple dwelling unit (“MDU”) is disclosed. The system may comprise a communications service unit configured to distribute communications signal to at least one unit of a MDU via at least one cable, wherein the at least one cable are distributed along the exterior of the MDU, one or more network interface elements communicatively coupled to the at least one cable, wherein each of the one or more network interface elements are positioned near a window of the MDU, and an antenna communicatively coupled to each of the one or more network interface elements, wherein the antenna is configured to transmit the communications signal to one or more network elements in at least one unit of the MDU.

Abstract: An aircraft in-flight entertainment (IFE) system for an aircraft includes a radome to be carried by the aircraft, and a dual-beam satellite antenna and at least one positioner coupled thereto to be carried by the aircraft and protected by the radome. The dual-beam satellite antenna is to generate dual antenna beams for television programming and Internet data from respective spaced apart satellites. The dual-beam satellite antenna includes a first aperture for receiving the television programming, and a second aperture adjacent the first aperture for receiving the Internet data. A television programming distribution system is to be carried by the aircraft and coupled to the dual-beam satellite antenna to provide television programming within the aircraft. At least one access point is to be carried by the aircraft and coupled to the dual-beam satellite antenna to provide a wireless local area network (WLAN) within the aircraft for the Internet data.

Abstract: According to one implementation a method is provided that involves transmitting from a social network site to a television broadcasting site a stream of data for being broadcast to multiple end-user media devices and also transmitting via a unicast communication from the social network site non-broadcast content for the purposes of being incorporated, integrated or otherwise played in conjunction with the broadcast content in the end-user media devices.

Abstract: An approach is provided for supporting messaging services via a set-top box. A set-top box establishes communications with a user device. The set-top box receives a message from the user device, and stores the message for inclusion in a messaging log. The set-top box presents content of the messaging log via a display coupled to the set-top box. According to one embodiment, the set-top box receives network address information of the user device, maps the network address information to location information, and retrieves information from a data repository based on the location information. In another embodiment, the user device acquires information about a program being experience by a user via the set-top box, and generates a message to provide presence status information to a social network service based on the program information.

Abstract: The present invention relates to a method and system for providing a presentation virtualization service to a user terminal through a web based on system profile information received from a cloud device through a communication network in which the cloud device generates a list of candidate presentation virtualization technologies from the system profile information and provides a presentation virtualization service to the user terminal which uses a presentation virtualization technology based on a determination of the capability of processing each virtualization technology from the device load and outputs data related to the presentation virtualization service on a screen. The system comprises: a user terminal for transmitting system profile information to a cloud device which generates the list of candidate presentation virtualization technologies from the system profile information, and determines a device load to provide the presentation virtualization service.

Abstract: A dynamic service group discovery and mapping approach avoids manual assignment of stream channels for transporting video services to the client devices that provide the video services to an end user. Client devices, such as set-top boxes, receive video services such as video on demand (VOD), switched digital video (SDV), pay-per view (PPV) and other narrowcast types of video for selective transmission. Each client device scans for visible stream channels, and sends a report indicative of visible stream channels to a dynamic mapping server. The dynamic mapping server applies aggregation rules for determining, based on the reported stream channels, which client devices are in the same service group. By receiving reports from each client device, the dynamic mapping server identifies groupings of service groups by combining sets of client devices receiving common channels, and “builds” the service groups as additional reports indicate common stream channels visible to multiple set top boxes.

Abstract: In one embodiment, a system, comprising at least a first video source device, at least a first remote control device, a digital display device comprising logic to receive, in a digital display device, a signal to initiate an aggregation process, in response to the signal, enumerate at least a first video source device coupled to the digital display device, obtain, from the at least a first video source device, a first remote control code table, merge the first remote control table into a master remote control table, receive in the primary interface device manager, a user interface database from the secondary interface device manager, and store the master remote control table in memory.

Abstract: A method for enabling security on a mobile terminal having a communication link with a circuit switched network against suspicious activities is provided. Activities performed at the mobile terminal are performed according to a security policy provided from the circuit switched network. Detection of a suspicious activity is alerted to the circuit switched network when the suspicious activity is detected. A policy manager server of the circuit switched network changes the security policy to cure the suspicious activity on the mobile terminal. Call traffic delivered to/sent from the mobile terminal is filtered out, which causes the suspicious activity according to the security policy. The mobile terminal enforces a security measure on a suspicious activity according to the security policy.

Abstract: Architectures and techniques that allow a firmware agent to operate as a tamper-resistant agent on a host platform that may be used as a trusted policy enforcement point (PEP) on the host platform to enforce policies even when the host operating system is compromised. The PEP may be used to open access control and/or remediation channels on the host platform. The firmware agent may also act as a local policy decision point (PDP) on the host platform in accordance with an authorized enterprise PDP entity by providing policies if a host trust agent is non-responsive and may function as a passive agent when the host trust agent is functional.

Abstract: A method and nodes adapted to provide personalized multimedia services for users having registered a media player (300, 400, 401, 501, 502, 606) to a multimedia network, on the basis of the content (301, 500) read by a code reader (302, 405, 503), connected to or integrated with the media player. Content decoded from a code is used for creating or updating a user preference data record (700, 701) linked to by the identity with which the respective media player is registered. An application server (305, 402, 506, 600) being responsible for personalizing a requested service is interconnected with one or more preference databases (306, 407, 603), and one or more content databases (308, 408, 605) and/or dedicated servers (507). Upon receiving a service request, the application server, access relevant data from the mentioned nodes and assembles personalization instructions, adapted to trigger the requested personalized service in the requesting media player.

Abstract: Provided is a method of registering an unregistered device in an access point (AP) by using a registered device registered in the AP, the method including: transmitting a control signal for controlling the registered device to the registered device so as to transmit a mode change request, which requests the AP to change a mode to an authentication approval mode approving an authentication operation with the unregistered device, to the AP; transmitting a mode confirm request, which confirms whether an operation mode of the AP is the authentication approval mode, to the AP; receiving a mode confirm response as a response to the mode confirm request from the AP that receives the mode change request; and selectively performing an authentication operation with the AP, based on the received mode confirm response.

Abstract: Techniques are described for repairing some types of user account problems that interfere with granting a user access to a computer system and doing so during a process to authenticate the user in a way that does not require the user to re-enter authentication information or require the user to restart a communication session with the computer system. In response to a determination that a user's account has a problem during an authentication process, techniques are provided to enable a user to execute an appropriate process or processes to fix the user account, after which the authentication process continues. In this way, the correction to the user account may appear to be seamless to the user.

Abstract: A system and a method are described for presenting media content for users to view over the internet. Rights pertaining to said media to be viewed are uploaded to servers by users holding such rights to rent or resell such media content. Servers restrict the viewing of the content in accordance with the limitations of the uploaded rights such that copyright rules are respected at all times.

Abstract: A method for using multiple channels to access a resource, wherein an authenticated user requests a resource that requires a second authentication parameter over a first channel, a token value is transmitted to the user on the first channel, and the user transmits the token value and a second authentication parameter over a second channel. The token value is used to associate the first authentication parameter to the second authentication parameter, whereby the user is allowed access to the resource on the first or second channel.

Abstract: Machine implemented method and system for transferring replicated information from a first storage location managed by a storage operating system at a first storage system node and accessible to a client computing system to a second storage location managed by a second storage system node are provided. A resource pool having a plurality of tokens is maintained for authorizing a replication engine to transfer replicated information from the first storage location to the second storage location. The number of available tokens is increased when traffic due to client requests for accessing the first storage location is less than a first threshold level. The number of available tokens is decreased for reducing transfer of information via the replication engine, when latency in responding to the client requests reaches a second threshold value and the traffic due to client requests reaches the first threshold value.

Abstract: A method, a system, and a computer program product embodying computer readable code for configuring a rule file for a Web application firewall. The method includes: blocking a response created by a Web application; modifying the response by adding capturing code for capturing a regular expression and an associated parameter value embedded in the response while being executed; sending the modified response to the browser; receiving a request submitted by the browser and at least one regular expression and an associated parameter value captured by the capturing code; determining a parameter name and a regular expression associated with the same parameter value, and configuring the rule file of the firewall by use of the determined parameter name and regular expression associated with one another as a filtering rule.

Abstract: A local gateway device receives email across the internet from a sender of the email and forwards it across the internet to an email filtering system. The email filtering system analyzes the email to determine whether it is spam, phishing or contains a virus and sends it back to the local gateway device along with the filtered determination. The local gateway device forwards the received email and the filtered determination to a local junk store which handles the email appropriately. For example, if the email has been determined to be spam, phishing or containing a virus, the junk store can quarantine the email and if the email has been determined to be non-spun and/or not phishing and/or not containing a virus, the junk store can forward the email to a local mail server for delivery.

Abstract: A method for implementing a mandatory access control model in operating systems which natively use a discretionary access control scheme. A method for implementing mandatory access control for a plurality of computers, the system comprising information assets, stored as files on the computers, and a network communicatively connecting the computers, wherein each of the computers includes an operating system that uses a discretionary access control policy, and wherein each of a subset of computers includes a software agent component operable to intercept a request for a file operation on a file from a user of one of the computers including the software agent, determining whether the file is protected, if the file is protected, altering ownership of the file from the user to another owner, and providing access based on a mandatory access control policy.

Abstract: A computer-implemented method for identifying potential malware may include (1) identifying a file that is subject to a reputation evaluation, (2) identifying at least one client submission received from at least one computing system that identifies (a) an instance of the file created on the computing system and (b) at least one additional file created on the computing system at substantially the same time as the instance of the file and within the same file path as the instance of the file, (3) identifying a reputation associated with the additional file(s), and then (4) generating a reputation rating for the file based at least in part on the reputation associated with the additional file(s). Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Methods and systems for content filtering of remote file-system access protocols are provided. According to one embodiment, a first set of Server Message Block/Common Internet File System (SMB/CIFS) protocol requests originated by a first process running on a client and relating to a file associated with a share of a server and a second set of SMB/CIFS protocol requests originated by a second process running on the client and relating to the file are transparently proxied by a gateway device. The existence or non-existence of malicious, dangerous or unauthorized content contained within the file is determined by the gateway device by (i) buffering data being read from or written to the file as a result of the first and second set of SMB/CIFS protocol requests into a shared file buffer; and (ii) performing content filtering on the shared file buffer when a scanning condition is satisfied.

Abstract: Systems, methods, and other embodiments associated with preventing misuse of group keys in a wireless network are described. According to one embodiment, an apparatus is configured to determine a packet type for a packet and determine a key type for the packet. The packet is analyzed based, at least in part, on the packet type and the key type to detect a security risk.

Abstract: An apparatus and method for transferring a Rights Object (RO) for a content between devices via a server, wherein a sending device converts a first RO taken by itself to encode into a second RO, and sends an RO move request message including the second RO to the server, whereas the server converts the second RO included in the RO move request message into a third RO and transfers the third RO to a receiving device, whereby the receiving device receives the third RO from the server for installation, wherein the sending device deletes or modifies the first RO at an appropriate time point.