Abstract: When providing a user with native access to at least a portion of device hardware, the user can be prevented from modifying firmware and other configuration information by controlling the mechanisms used to update that information. In some embodiments, an asymmetric keying approach can be used to encrypt or sign the firmware. In other cases access can be controlled by enabling firmware updates only through a channel or port that is not exposed to the customer, or by mapping only those portions of the hardware that are to be accessible to the user. In other embodiments, the user can be prevented from modifying firmware by only provisioning the user on a machine after an initial mutability period wherein firmware can be modified, such that the user never has access to a device when firmware can be updated. Combinations and variations of the above also can be used.

Abstract: Approaches for detecting network intrusions, such as malware infection, Trojans, worms, or bot net mining activities includes: identifying one or more threat detections in session datasets, the session datasets corresponding to network traffic from a plurality of hosts; determining a layered detection score, the layered detection score corresponding to a certainty score and threat score; determining a layered host score, the layered host score corresponding to a certainty score and threat score; and generating alarm data comprising the layered detection score and the layered host score. In some embodiments, the network traffic may be received passively through a network switch; for example, by “tapping” the switch. Other additional objects, features, and advantages of the invention are described in the detailed description, figures and claims.

Abstract: Each node of a metric tree comprises a similarity hash of a member of a dataset of known message threats, calculated using a given similarity hashing algorithm. The nodes are organized into the tree, positioned such that the differences between the similarity hashes are represented as distances between the nodes. Messages are received and tested to determine whether they are malicious. When a message is received, a similarity hash of the message is calculated using the same similarity hashing algorithm that is used to calculate the hashes of the members of the dataset. The tree is searched for a hash of a known message threat that is within a threshold of distance to the hash of the received message. Searching the tree can take the form of traversal from the root node, to determine whether the tree contains a node within the similarity threshold.

Abstract: A session of network communications is processed between a client terminal and a server by intercepting a request generated from a network transport unit of the client terminal, generating an intermediate session ID for the client terminal, asking the server to establish a session, receiving a response sent from the server using a server session ID after the session is established, associating the server session ID with the intermediate session ID and sending the response to the network transport unit using the intermediate session ID.

Abstract: A method, system or computer usable program product for managing exchanges of sensitive data including utilizing a processor to request a service across a network from an application, the service requiring a disclosure of a first set of sensitive data by the application; providing a set of certified policy commitments regarding the first set of sensitive data to the application for a determination of acceptability; and upon a positive determination, receiving the service including the disclosure of the first set of sensitive data.

Abstract: Systems and methods for a secure mobile framework to securely connect applications running on mobile devices to services within an enterprise are provided. Various embodiments provide mechanisms of securitizing data and communication between mobile devices and end point services accessed from a gateway of responsible authorization, authentication, anomaly detection, fraud detection, and policy management. Some embodiments provide for the integration of server and client side security mechanisms, binding of a user/application/device to an endpoint service along with multiple encryption mechanisms. For example, the secure mobile framework provides a secure container on the mobile device, secure files, a virtual file system partition, a multiple level authentication approach (e.g., to access a secure container on the mobile device and to access enterprise services), and a server side fraud detection system.

Abstract: Methods and systems for protecting a secured network are presented. For example, one or more packet security gateways may be associated with a security policy management server. At each packet security gateway, a dynamic security policy may be received from the security policy management server, packets associated with a network protected by the packet security gateway may be received, and at least one of multiple packet transformation functions specified by the dynamic security policy may be performed on the packets.

Abstract: Technologies for securing an electronic device include trapping an attempt to access a secured system resource of the electronic device, determining a module associated with the attempt, determining a subsection of the module associated with the attempt, the subsection including a memory location associated with the attempt, accessing a security rule to determine whether to allow the attempted access based on the determination of the module and the determination of the subsection, and handling the attempt based on the security rule. The module includes a plurality of distinct subsections.

Abstract: Embodiments are disclosed that relate to enforcement of user policies in a multi-user interactive computing environment by end user review. For example, one disclosed embodiment provides, on a computing device, a method comprising receiving a notification of a current policy controversy, and sending information regarding the current policy controversy to each end user reviewer of a plurality of end user reviewers, each end user reviewer being a member of an enforcement federation of a plurality of enforcement federations. The method further comprises receiving enforcement decisions from one or more responding end user reviewers of the plurality of end user reviewers, and if the enforcement decisions received meet an enforcement threshold, then automatically enforcing a policy rule.

Abstract: A method includes receiving a first secured registration request message from user equipment at a registration server in an Internet Protocol multimedia subsystem network, the first secured registration request message being secured using a first security protocol, determining at the registration server that the first secured registration request message cannot be decoded using the first security protocol, sending a message from the registration server to the user equipment proposing a second security protocol, and receiving a second secured registration request message from the user equipment at the registration server, the second secured registration request message being secured using the second security protocol.

Abstract: The present invention discloses numerous implementations for IP-based call processing systems that can selectively control an outgoing call initiated by a source device to a destination device. The call processing system communicates with a Service Switching Point (SSP) associated with the source device and determines whether to effect control of the outgoing call. It could determine to effect control of the outgoing call for many reasons including to convey a media message to the source device, to implement a call feature or to manage call restrictions. Upon determining to effect control of the outgoing call, the call processing system causes the SSP to initiate a media connection between the source device and the call processing system. The call processing system can then utilize the media connection with the source device to perform functionality for the outgoing call prior to and/or during the outgoing call.

Abstract: A system performs client wake up for real-time communications (“RTC”). The system closes a connection between a gateway and an RTC application of a device. The RTC application enters a sleeping mode when the connection to the gateway is closed. After closing the connection, the system receives a message intended for the RTC application. The system requests a push notification server to wake up the RTC application, reconnects the gateway with the RTC application, and delivers the message to the RTC application.

Abstract: A multimedia collaboration system that facilitates more efficient, free-flowing collaboration sessions. In order to make addition of new participants, media components, and or network access device to a collaboration session more efficient, client devices associated with each participant can store endpoint address information that can be automatically obtained by the multimedia collaboration system. The endpoint address information can then be used to add the new participants, media components, and or network access device.

Abstract: Systems and methods for preventing fraud in an IP based telephony system include noting when an IP based telephony device sent to a new customer is not installed and registered with the system. If a new customer never attempts to register a device which was sent to the new customer, the system will assume that the new customer submitted false or erroneous address information. A new customer is prevented from taking any actions that would result in new charges until the new customer has registered an IP device sent to the new customer. Likewise, the system will act to prevent a phone verification service from reaching a new customer at his newly assigned telephone number until after the new customer has registered an IP based telephony device sent to the new customer.

Abstract: A communication management system that manages a plurality of communication terminals transmits, to a request communication terminal, one of operation state information indicating that an operation state of a candidate counterpart communication terminal is unknown or information indicating that a communications protocol of the candidate counterpart communication terminal is different from a communications protocol of the request communication terminal, when the communications protocol is different between the candidate counterpart communication terminal and the request communication terminal. The request communication terminal displays information to a user, which is generated based on the information received from the communication management system.

Abstract: Discussion of content between users of social networks is described. A request from a first user to discuss content with a recipient user in a first social network is received, wherein the recipient user has a first identifier in the first social network. A request from a second user to discuss content with the recipient user in a second social network is received, wherein the recipient user has a second identifier in the second social network. A discussion is initiated between the second user and the recipient user about the content in the second social network. The recipient user is tracked in view of the first identifier in the first social network and the second identifier in the second social network.

Abstract: In a mobile communications terminal 100, there is provided a gestural control application for associated operation with an image viewing application. The gestural control application is configured to receive user gestures inputted through a touch-sensitive display of the apparatus when one or more images is displayed by the image viewing application. The gestural control application is configured to identify a correspondence between a received gesture and one of a plurality of locally-stored reference gestures and to identify selection by means of the inputted gesture of one or more entities in the or each image. By means of this identification and selection, said application is configured to communicate and apply a function associated with the identified reference gesture to an external web site through which is accessed a predetermined social network application, the function being applied in relation to the selected one or more entities.

Abstract: Methods, systems, and media for presenting a customized user interface based on user actions are provided. In some implementations, a method for presenting a customized user interface based on user actions is provided, the method comprising: receiving a request for media content from an application comprising a user interface for presenting media content that includes a plurality of user interface elements that each initiate sharing on a different platform; determining that the request was sent from the user device as a result of the user selecting a link on a first platform; and causing the application to present an additional user interface element that initiates sharing of the media content item on the first platform in addition to the plurality of user interface elements in response to determining that the request was transmitted as a result of selection of the link on the first platform.

Abstract: A method includes receiving first input from a computing device, the first input corresponding to selection of a first media player associated with a first output stream format. In response to the first input, a first stream preview is sent to the computing device in accordance with the first output stream format. The method includes receiving second input from the computing device, where the second input corresponds to selection of a second media player associated with a second output stream format. In response to the second input, a second stream preview is sent to the computing device in accordance with the second output stream format.

Abstract: A system, computer-readable storage medium storing at least one program, and a computer-implemented method for creating video streams is provided. An indication is received that is related to a first video being received or requested. The first video includes attributes characterizing content of the first video. A second video stored in a database is selected in response to receiving the indication. The selection is based on at least one attribute of the first video. An order of the first video and the second video is determined by one or more processors. The order is based on the at least one attribute characterizing the content of the first video. A video stream is generated on a user display by providing the first video and the second video in the determined order and in a substantially seamless manner.

Abstract: A method for communicating an image stream, one embodiment comprising negotiating, between a server and client, an MTCC identifying: a window as a portion of a display of the client, and an occluded portion of the window defined by the client; generating, by the server, complying with the MTCC, a sequence of image frames each comprising pixel data in a portion of the frame identified by the occluded portion; transmitting an encoding of a first frame of the sequence not including an encoding of the pixel data in the portion of the first frame; identifying, by the server, an event associated with the sequence; and transmitting, before communication between the server and the client regarding the event, by the server, information of the event in conjunction with an encoding of a second frame of the sequence including an encoding of the pixel data in the portion of the second frame.

Abstract: Methods, apparatuses, systems, and software are described for providing content to a device comprising streaming content and sending content in a non-streaming manner (e.g., by downloading a file containing the content). In some aspects, switching between streaming and downloading may be performed in a dynamic manner during presentation of the content, and may be seamless to the user's viewing experience.

Abstract: A server receives an update image for transmission to a client and encodes and compresses the update image data using a progressive encoding scheme. In one embodiment, the image data is encoded using progressive JPEG encoding and then into a base64 text string. When insufficient network bandwidth is available to transmit all of the image data for the update image, the server transmits only a first portion of the encoded image data, which is sufficient to fully reproduce the original update image but at a lower quality. When more network bandwidth becomes available, an additional portion of the encoded image data is transmitted to the client. The client is able to append the additional portion to the first portion to refine the image represented at the client. This mechanism may be implemented using unmodified web browsers and servers to remote a computer graphical user interface display.

Abstract: A system for and method of media encapsulation is presented. The method may include receiving, via an audio digitizer, a plurality of packets of data and compressing, via a codec, the plurality of packets of data. The method may also include queuing the plurality of packets of data in a queue and encrypting, via a filter, payloads of at least two of the plurality of packets of data in the queue into a single payload. The method further include transmitting the single payload in a single encrypted data packet.

Abstract: Systems and methods are described for providing multiple voice service modes to a wireless device using data packet transmission through a wireless network. Application requirements including a signal level threshold for a wireless device may be determined. Signal level information for the wireless device may be received and transmitted among various network nodes. The received signal level may be compared with the signal level threshold for the wireless device. The wireless device and the access node may communicate wirelessly to provide voice services to the wireless device application. Data transmission may be converted between a first mode and a second mode depending upon a relative position of the received signal level with respect to the signal level threshold. The second mode of data transmission may be used where the first mode of data transmission cannot because the second mode may consume less network resources.

Abstract: Content items stored on a client device can be imported to a content management system. The client device can be configured to search on the client device for specified file extensions to identify content items to be imported. The search can be of the entire memory, or alternatively, locations known to likely include content items. For example, the search can be based on folders known to be used by content management applications to store content items. Upon identifying content items, an import interface can be presented to the user that enables the user to select whether to proceed with the import. Further, the import interface can enable the user to select import parameters such as the type of import and which content items to import. A user can be enabled to select a subset of content items based on a variety of gathered metadata associated with the content items.

Abstract: Methods for preloading content in one application for another application are provided. In one aspect, a method includes receiving a request by a first application from a second application to preload content in the first application, and loading the content in the first application in response to the request from the second application. The method also includes switching from a display of the second application to a display of the first application and providing the loaded content for display in the first application in response to a selection in the second application from a user to display the content. Systems and machine-readable media are also provided.

Abstract: Systems and methods of providing information via a computer network are provided. A data processing system can obtain, via the computer network, a query including an interest identifier provided to a content publisher computing device by an end user computing device during a communication session between the content publisher computing device and the end user computing device via the computer network. The data processing system can identify an affirmative request for content based on the interest identifier, and can select a content item responsive to the affirmative request for content, the content item having subject matter satisfying the query. The data processing system can provide, via the computer network, the content item for display by at least one of the end user computing device and a third party computing device.

Abstract: A method and system for providing flexible access to Internet sites is described. In one aspect, a method includes receiving, via a computing device, a request to access content associated with the URL. The method further includes transmitting a response to the request, the response indicating that access to the URL is restricted, receiving a second request to access the content associated with the URL, the second request acknowledging that access to the URL is restricted, logging the second request; and transmitting a second response to the second request, the second response allowing access to the requested content associated with the URL.

Abstract: A mechanism is provided for automatic genre determination of web content. For each type of web content genre, a set of relevant feature types are extracted from collected training material, where genre features and non-genre features are represented by tokens and an integer counts represents a frequency of appearance of the token in both a first type of training material and a second type of training material. In a classification process, fixed length tokens are extracted for relevant features types from different text and structural elements of web content. For each relevant feature type, a corresponding feature probability is calculated. The feature probabilities are combined to an overall genre probability that the web content belongs to a specific trained web content genre. A genre classification result is then output comprising at least one specific trained web content genre to which the web content belongs together with a corresponding genre probability.

Abstract: An information processing apparatus includes the following elements. An estimated processing time information obtaining unit obtains estimated processing time information indicating an estimated processing time which will be taken to execute processing specified by a request received from a terminal. An excess information creating unit creates excess information including information concerning the estimated processing time concerning the request if the estimated processing time exceeds a predetermined time. An excess response sending unit sends an excess response including the excess information. A processing result obtaining unit obtains a processing result of the processing specified by the request. A result response sending unit sends a result response including the processing result in response to a request for the processing result.

Abstract: A method for controlling an electronic apparatus, a handheld electronic apparatus, and a monitoring system are provided. An image within an image capturing range is displayed on a display unit by an image capturing unit. A digital stamp in the image is detected. The digital stamp corresponds to a single or multiple controllable devices. A control interface corresponding to the digital stamp is displayed on the image. An operation action a user executes on the control interface is detected so as to control the controllable device corresponding to the digital stamp.

Abstract: Aspects of the disclosed subject matter are directed to facilitating peer-to-peer data exchange in a common domain. In accordance with one embodiment, a method is provided for obtaining content from one or more peers that are connected to the domain. The method includes registering a peer with a super-peer when a connection to the domain is established. Then, the connecting peer obtains data that describes various network conditions and identifies chunks of content available from other peers. In downloading content from other peers, heuristics are applied to select between available chunks that are potentially encoded at different bitrates. The heuristics account for the network conditions between peers and balance the potential need to quickly access content with the desire to obtain high quality content.

Abstract: A server system stores media library associated with a user. The media library includes at least one media file. The server system determines whether the media file is stored on a second computing device that is able to send the media file to the first computing device across a local network connecting the first computing device and the second computing device. If the determination indicates that the media file is stored on a second computing device that is able to send the stored media file to the first computing device across a local network connecting the first computing device and the second computing device, the server system sends causes the second computing device to send the media file to the first computing device across the local network such that the first computing device is able to output the media file to the user.

Abstract: A control method and control apparatus for determining a relative location of a mobile terminal with respect to a display apparatus by using short range wireless communication. A method of controlling a display apparatus including a plurality of short range wireless communication modules, the method includes: performing short range wireless communication with a mobile terminal through a short range wireless communication module included in the display apparatus; identifying the short range wireless communication module performing the short range wireless communication with the mobile terminal from among the plurality of short range wireless communication modules; determining a relative location of the mobile terminal with respect to the display apparatus according to the result of identifying; and determining a location on a screen of the display apparatus to display data according to the relative location and displaying the data on the screen of the display apparatus according to the determined location.

Abstract: A method and system for transferring a file from a home network to Wide Area Network (WAN) user device using the Universal Plug and Play (UPnP) telephony service are provided. A request is received from a Telephony Control Point (TCP) to start a file transfer session. The request can include information associated with the file. The file transfer session is established using a messaging service based on the request and file information received in the request from the TCP. The file is fetched from the TCP and stored in the TS. An invite is sent to the WAN user device for initiating the file transfer session from the home network to the WAN user device. The file is transferred to the WAN user device when an acknowledgment of the invite is received from the WAN user device.

Abstract: A system and method of managing event tracking includes a tracking registry. The tracking registry includes a memory for storing tracking entries, a tracking entry hierarchy, and a registry interface configured to receive requests from a plurality of modules. The tracking registry opens a tracking entry based on a registry request received from a first module of the plurality of modules, and being associated with a first operation being handled by the first module and including a parent identifier of a parent tracking entry of the tracking entry, updates the tracking entry hierarchy based on the parent identifier, stores the first tracking entry in the memory, and closes the tracking entry based on an entry closing request received from a second module of the plurality of modules and being associated with completion of a second operation being handled by the second module. The second operation performs processing associated with completion of the first operation.

Abstract: Various embodiments provide methods and apparatus for operating a browser engine, and related browsers and terminals. When starting a browser, an operating environment of the browser can be obtained. The operating environment can include a CPU environment in a browser-installed-terminal. A matched operation mode of the browser engine can be selected according to the operating environment. The selected operation mode can be used to operate the browser engine. Exemplary apparatus for operating the browser engine can include an obtaining module, a selection module, and an operation module. Various embodiments also provide a browser including the disclosed apparatus, and a terminal including the disclosed browser.

Abstract: Time-based media is distributed and promoted in a social networking environment. Accounts of a social networking system author social media content items (SMCIs) from which a social networking system infers relevance of content to users of those accounts. Content distributors submit time-based media content to the social networking system, which creates distributor SMCIs containing the time-based media content. Accounts are identified to receive distributor SMCIs based on SMCIs previously authored by those accounts as well as identifying information and the subject of the SMCI. Content promoters may add promotional material to distributor SMCIs, which the social networking service sends to additional accounts.

Abstract: A system for synchronizing Custom Objects between an application and an External server includes an application interfacing to a server for synchronizing standard objects supported by the application; a plurality of Custom Objects stored on the External server, wherein the Custom Objects are not supported by the application, the application interfacing to the External server for synchronizing Custom Objects; the application storing a plurality of standard objects. The standard objects are converted to Custom Objects types supported by the Custom Object manager. The application includes a Custom Object manager for managing the Custom Objects. At least one of the Custom Object type has a workflow. The Custom Objects include a discussion with a hierarchy of comments.

Abstract: A method of sharing information in a social networking application includes at a computer server having one or more processors and memory storing programs configured for execution by the one or more processors, receiving a binding request from a first user to bind with at least a second user of a social networking application, the second user being a friend of the first user; generating a binding relationship between the first user and the second user; storing the binding relationship between the first user and the second user at the computer server; receiving information from the first user to be shared in a binding manner with the second user; retrieving a friend list of the second user; and sharing the information from the first user with at least one friend of the second user.

Abstract: A technique for assigning a user workload to an application server includes receiving a user request to initiate execution of a workload assigned to a user. An application server is selected, from among multiple application servers, to execute the workload based on compatibility between respective current states of the application servers and the workload.

Abstract: Various embodiments include at least one of systems, methods, software, and data structures for peer-to-peer exchange of at least a portion of networked collaboration session data. Client and server solutions allow for switching between peer-to-peer and server-centric modes of collaboration data sharing. Some embodiments also allow for sharing of data of a first type via a collaboration server and data of a second type via peer-to-peer connections.

Abstract: In various embodiments, methods and systems for transferring data using a storage medium are provided. A storage medium may be shipped by a customer to a datacenter such that the data on the storage medium is copied to a storage associated with the datacenter or data in the storage is copied to the storage medium. The datacenter may support a cloud computing infrastructure that provides a storage account to the customer that is associated with the data copied from or copied to the storage medium. The storage medium further corresponds to a data transfer manifest that includes at least in part data mapping between storage service infrastructure and data in the storage medium. It is contemplated that embodiments of the present invention may further be implemented with data transfer service components that support a client component, storage service component, and a data transfer management component.

Abstract: Data frames, such as Controller Access Network frames, that are to be programmed into a FLASH memory device, are sent from a programming station to a target device via a relatively high-speed bus and stored temporarily at the target device in numbered frame buffers. Each frame carries a payload. Before a frame is sent, an identifier is assigned to it, or an identifier is appended to the frame. The identifier identifies a particular buffer in the target device where the frame is to be stored in the target device until the target device is able to process the frame and write its payload into a FLASH memory device.

Abstract: A method includes encoding input data into a plurality of slices. The plurality of slices are sent to a first plurality of distributed storage and task execution units for storage, the first plurality of distributed storage and task execution units being located at a corresponding first plurality of sites. Write slice data is received from the first plurality of distributed storage and task execution units. The method determines when replication is to be applied to the plurality of slices. When replication is to be applied to the plurality of slices, a second plurality of distributed storage and task execution units are selected, a plurality of replicated slices corresponding to the plurality of slices are generated, and the plurality of replicated slices are sent to the second plurality of distributed storage and task execution units.

Abstract: There are provided a system and a computer program product for managing heterogeneous cloud data storage systems. A computing system defines rules that govern a plurality of heterogeneous cloud data storage systems. The computing system receives complete data from a user's computer. The computing system splits the complete data. The computing system stores the split data according to the defined rules into the plurality of heterogeneous cloud data storage systems.

Abstract: A distributed object store in a network storage system uses location-independent global object identifiers (IDs) for stored data objects. The global object ID enables a data object to be seamlessly moved from one location to another without affecting clients of the storage system, i.e., “transparent migration”. The global object ID can be part of a multilevel object handle, which also can include a location ID indicating the specific location at which the data object is stored, and a policy ID identifying a set of data management policies associated with the data object. The policy ID may be associated with the data object by a client of the storage system, for example when the client creates the object, thus allowing “inline” policy management. An object location subsystem (OLS) can be used to locate an object when a client request does not contain a valid location ID for the object.

Abstract: At an electronic accessory of a master electronic device, a connection attribute can be detected that is indicative of a presence or a characteristic of a connection between the electronic accessory and at least one other electronic accessory of the master electronic device. A connection-indicative signal can be generated at the electronic device that includes the connection attribute. The connection-indicative signal can be transmitted to the master electronic device.

Abstract: A method and apparatus for a connection manager have been disclosed. By providing for persistent connections with clients, the connection manager allows for servers to communicate with clients, which would otherwise be inaccessible.