Abstract: In order to validate a user to facilitate conducting a high-valued financial transaction via wireless communication between an electronic device (such as a smartphone) and another electronic device (such as a point-of-sale terminal), the electronic device may authenticate the user prior to the onset of the high-valued financial transaction. In particular, a secure enclave processor in a processor may provide local validation information that is specific to the electronic device to a secure element in the electronic device when received local authentication information that is specific to the electronic device (such as a biometric identifier of the user) matches stored authentication information. Moreover, an authentication applet in the secure element may provide the local validation information to an activated payment applet in the secure element. This may enable the payment applet to conduct the high-valued financial transaction via wireless communication, such as near-field communication.

Abstract: The invention relates to a platform and a method of connecting a blockchain engine to a traditional database. The platform according to the invention is implemented in the form of a network of nodes, said network of nodes being divided into at least two subnets: a security subnet and a data subnet, all nodes in the security subnet containing information on security keys user licenses, operating licenses, access policies, and other information related to the licensing, authentication, and authorization mechanism of users accessing the platform, and where nodes in at least one data subnet comprise a software component that uses a network computer, an API communication interface that allows interaction with the computer network and retrieval of information to be saved in the storage system, a GraphQL data query interface, a data processing engine, a blockchain engine, a connection interface between the data processing and blockchain engine, and a database.

Abstract: Systems and methods are disclosed for permitting users to select and implement data management services. Systems and methods receive a user selection from a user interface representation of a cloud marketplace. The user selection can include a use case specific instruction relating to the user selection representing a particular one of the plurality of cloud-enabled services. Systems and methods obtain service set up data from the user corresponding to particular aspects of the user selection. Based on the received user selection and the service set up data, a computer-executable file is created for a user identified computer, where the computer executable file, upon execution on the user identified computer, establishes a data path between a user data location and a cloud-enabled service corresponding to the user selection. Following commencement of the cloud-enabled service, the system and method provide data including usage and billing to users, cloud-enabled service providers and marketplaces.

Abstract: A policy can be consulted to determine an action to take when a disc image is mounted. The action to take can be based on the contents of an application program stored on the disc image. A notification can be received responsive to a user request to mount the disc image. Based on the determined action to take as specified by the policy, the application program can be installed using the privileges of the agent without changing the privileges of an account of a current user.

Abstract: A computer-readable medium, computer-implemented method, and system are provided. In one embodiment, a compensation pattern is defined for a step of an executable process, and the step of the executable process is executed. A change request is received, and, based on the change request, the compensation pattern is applied to the step of the executable process.

Abstract: Systems and methods for intelligently updating a software configuration of an appliance are provided. In particular, the systems and methods include features for performing software updates based on the unique identity or fingerprint of one or more control boards present in the appliance. Further, methods for tracking appliances with unknown software configurations are also provided.

Abstract: A platform for storing and reporting of data records associated with management of a population of managed devices is disclosed. Data records are injected into a hosted computing environment in which data processing services are arranged to store and generate analytics associated with a mobile device management (MDM) platform.

Abstract: A transparent network substrate system including at least one server module and at least one client module. The server module provides a selected functionality, such as moving an actuator, performing a mathematical operation, and receiving data from a sensor. Upon execution the server module's machine code writes information necessary to describe the selected functionality to memory. The information written to memory includes information necessary to invoke the server module functionality and may include types, members, and parameters. The client module searches the memory for the selected functionality; requests information from the server module; and invokes the functionality of the server module. Once invoked by the client the server module uses the information in memory for creating dynamic function calls.

Abstract: A client device includes a flash chip for storing firmware and a microcontroller for storing an image in read-only memory. The image corresponds to an accurate representation of firmware. When the client device is powered on but before the firmware is executed to boot the client device, the firmware stored on the flash chip is compared to the image. In the event that the firmware does not correspond to the image, the client device is not booted and the firmware is overwritten with the image. The client device may then be booted using the flashed firmware. To update the firmware, the client device may receive a new image from a server. The new image is stored in the read-only memory of the microcontroller. The firmware may then be re-flashed using the new image.

Abstract: Systems and methods of capturing and deploying the operating system of a computing device. The method comprising: creating a file that contains one or more settings of the operating system of a source computer and storing the file in storage on the source computer, copying an image of the operating system and the file containing one or more settings of the operating system, and deploying the image to one or more target computers.

Abstract: Example methods and apparatus to detect uninstallation of an on-device meter are disclosed. An example method includes identifying, at a second application on a mobile device, a first notification that the first application is to be uninstalled. A prompt is displayed asking whether the second application is to be uninstalled in response to the first notification. An uninstallation notification is transmitted to a remote data collector, the uninstallation notification including an identifier to identify at least one of the mobile device associated with the uninstallation or a user of the mobile device.

Abstract: Disclosed are method, system and article of manufacture for restricting use of a digital item stored in a client computer by sending an instruction from a server computer via a network. The server computer is configured to hold accounts for a plurality of users, each of which of the plurality of users may access the server computer via respective client computers. The server computer receives an instruction from a second client computer, and the server computer sends a message to the first client computer that the digital item should be restricted based on an identification parameter—such as type of the first client computer, user identifier, authorization key, an internet address, time of day, day of week, or an expiration date—received from the first client computer, whereupon the first client computer disables, deletes or locks a file on the first client computer.

Abstract: Disclosed herein is a system and method for providing Over-The-Air (OTA) service. The system according to the present invention includes an OTA server for, when OTA data is requested by a mobile terminal, encrypting the requested OTA data using a preset OTA key depending on the type of the requested OTA data, and creating a message for providing the encrypted OTA data; and a message center for receiving the created message, and sending the created message to the mobile terminal.

Abstract: A mechanism that allows firmware for a computing device to be updated in a secure manner by utilizing an update validation procedure included in a ROM image is discussed.

Abstract: A method and computer system are provided for distributing a plurality of data portions from a server system to one or more client systems. The method includes receiving one or more first requests at the server, each first request being submitted by a client system and including a portion identifier, wherein a portion identifier is assigned to each data portion; in response to receiving the first request(s), transmitting a list of chunk identifiers to the requesting client systems, wherein the list of chunk identifiers specifies the data chunks whose meta-data includes the portion identifier contained in the first request; and transmitting some or all data chunks of a data chunk library to each of the requesting client systems. At the requesting client system, the client specifically selects the data chunks of the transmitted data chunks which are specified by the received list of chunk identifiers.

Abstract: An intelligent messaging network provides multiple software development kits (SDKs) to assist, e.g., engineers in developing client and server applications. The SDKs can contain a consistent set of application program interfaces (APIs) and a set of platform specific libraries for all intelligent messaging network supported platforms and networks. In addition to the SDKs, the intelligent messaging network can provide developers a resource kit including a set of tools to assist the developers when designing, implementing, and testing their client and server applications. The intelligent messaging network can provide a mobile client and server SDK environment to assist engineers developing client applications and servers. The SDKs can provide an easy to use APIs and a set of platform specific libraries to perform, e.g., compression, network management services, server-to-server communication, server registration/de-registration, and reliable message transport services.

Abstract: In one embodiment, a method includes: receiving, by a first computer system, a data stream transmitted from a second computer system over a network connection between the first computer system and the second computer system, wherein the data stream comprises executable code of a software program; extracting, by the first computer system, the executable code of the software program from the data stream; allocating, by the first computer system, an amount of dynamic memory for the executable code of the software program; loading, by the first computer system, the executable code of the software program directly into the allocated dynamic memory; and executing, by the first computer system, the software program by launching the executable code of the software program loaded in the allocated dynamic memory.

Abstract: A method of configuring software on a computer is disclosed herein. The software comprises at least one module and the computer comprises a nonvolatile storage having at least one address. An embodiment of the method comprises loading a flag into the address; reading the flag using the software; and activating the module in the software depending on the state of the flag, wherein activating the module causes at least one program to be installed on the computer.

Abstract: A computer-implemented method for disaster recovery from binary large objects may include (1) identifying a volume of data to be protected, (2) identifying a binary large object storage system, (3) replicating the volume to the binary large object storage system by writing to a binary large object file on the binary large object storage system to be readable as a consumable virtual disk that may represent the volume and (4) mounting the consumable virtual disk directly from the binary large object file. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: While software in a relay device is being rewritten by an external diagnosis device, a processing unit of the relay device prohibits transfer processing of data from each ECU connected to CAN bus and allows transfer processing of data, which is transmitted from the external diagnosis device and which indicates at least either one of transmission prohibition of periodic transmission data and storage prohibition of a failure code into each ECU by not receiving the periodic transmission data in each ECU, to the CAN buses.

Abstract: A symbol resolution unit can be configured for resolving conflicting operating system symbols. A default symbol resolution data structure can be accessed to resolve a symbol associated with a client of an operating system. A first data entry that corresponds to the symbol is located in the default symbol resolution data structure. It is determined that the first data entry indicates that the symbol is marked special (e.g., as a conflicting operating system symbol). A secondary symbol resolution data structure is accessed in response to determining that the first data entry indicates that the symbol is marked special. A second data entry that corresponds to the symbol is located in the secondary symbol resolution data structure based, at least in part, on an identifier of the client. A memory location indicated in the second data entry that corresponds to the symbol is provided to the client.

Abstract: A computer implemented method, apparatus, and computer program product for managing aircraft software parts. An aircraft software part is received at a library. The received part is stored in the library with other aircraft software parts. A user interface is provided to manipulate the aircraft software parts. Responsive to receiving a user input from the user interface to uplink a selected aircraft software part to a target aircraft data processing system, a command is created to send the selected part to an aircraft in which the target aircraft data processing system is located. The uplink command is stored in a queue in the storage in the library. The uplink command is distributed to a proxy server application in response to a request for commands. Responsive to receiving a request from the proxy server application processing the stored uplink command, the selected part is sent to the proxy server application.

Abstract: In one embodiment, a user selects a primary component of a multimedia system to be configured in a configuration user interface of a mobile device. The configuration user interface of the mobile device displays a photo-realistic depiction of a back panel of the primary component. The photo-realistic depiction of a back panel includes photo-realistic depictions of connection ports located thereon. The user selects another component to be connected to the primary component. One or more classes of potential connections are determined between the another component and the primary component, and for each class of potential connection, the configuration user interface on the mobile device graphically guides the user to select a particular connection port on the photo-realistic depiction of the back panel of the primary component for the class of potential connection. Based on selections of particular connection ports from the user, a set of configuration data is generated.

Abstract: A method of debugging a computer program across a mixed computing environment is provided. The method includes attaching a first debug module to a first program module of the computer program, where the first program module is operating on a first node; attaching a second debug module to a second program module of the computer program, where the second program module operating a second node of a different computer architecture; and initiating debug functions of at least one of the first debug module and the second debug module through a distant linker.

Abstract: According to an example implementation, a computer-readable storage medium, computer-implemented method and a system are provided to receive a first class, the first class indirectly implementing a first interface, wherein the first class extends a second class that directly implements the first interface, identify one or more directly implemented methods within the first class, determine a method signature for one or more of the directly implemented methods, estimate that the first class indirectly implements the first interface based on the method signatures for the one or more directly implemented methods, and instrument the first class based on the estimating that the first class indirectly implements the first interface.

Abstract: Embodiments of the invention can provide systems and methods for providing an embedded service-oriented user interface integration bus. According to one embodiment, a system can be provided having a memory for storing computer executable instructions and a processor in communication with the memory via a computer interface. The processor can be adapted to execute computer executable instructions for receiving a user interface service request from an application module associated with a first platform. The processor can also be adapted to transform the user interface service request from the application module to a user interface service request for a host platform. The processor can also be adapted to match the transformed user interface service request to a platform service on the host platform and to transform the platform service for the host platform into a platform service for the client.

Abstract: Example systems and methods for trace replay and simulation are presented. The system creates a trace entry for each one of a plurality of transactions through the server interface for a client, A message type and message data are recorded into the trace entry for each one of the plurality of transactions. A collection of trace entries for an individual one of the plurality of clients is transferred to a trace player. A client identifier is replaced in the trace entry with an identifier associated with the trace player, An interaction between the server and the clients is replayed.

Abstract: A method to instrument program code for a virtual machine that comprises, in the course of loading a class to a virtual machine, adding code to the class to declare a field that corresponds to a field declared in a first bootstrap class.

Abstract: A synchronous script lazy loader generates a plurality of virtual functions. Each one of the plurality of virtual functions corresponds to one of a plurality of script modules. The plurality of script modules may be associated with a script. The synchronous script lazy loader loads each of the plurality of virtual functions into a storage space. The synchronous script lazy loader loads a desired one of the plurality of script modules into a memory from the storage space. The synchronous script lazy loader executes the desired script module from the memory when a corresponding one of the plurality of virtual functions is requested for initial execution.

Abstract: A system and method for application migration include matching an infrastructure of a source application with a plurality of multi-image work sets from a catalog by selecting a mapping of components of the infrastructure with components in the multi-image work sets to provide one or more selected multi-images. The source application is migrated to a target environment using the one or more selected multi-images.

Abstract: An integration and management apparatus is connected via a network to an information processing apparatus including at least one software program running thereon. The integration and management apparatus includes a storing part that stores a linkage software component for performing a function linkage process using a program interface provided by the software program running on the information processing apparatus, an analyzing part that analyzes the linkage software component to obtain a setting for the function linkage process, and obtains a linkage program corresponding to the setting from the linkage software component, and an executing part that executes the obtained linkage program to perform the function linkage process using the program interface.

Abstract: A field device management apparatus may include a plurality of COM in-process servers, each of which acquires and manages device data related to a corresponding one of field devices, and a launch-program COM in-process server that stores a launch-program, the launch-program activating an instance in each of the plurality of COM in-process servers, the launch-program preventing four different functions from being executed directly by an OS in the plurality of COM in-process servers. The plurality of COM in-process servers may be initialized on the Microsoft Windows operating system to generate COM objects in different memory spaces.

Abstract: A computer-implemented method, system, and medium is disclosed for implementing a hybrid application server. The server is configured to determine that a bundle deployed onto a dynamic module system defines a component that is manageable by an application server component container. In response to the determining, the application server deploys the component onto the component container and creates an instance of the component in the container so that the container can manage the component. Finally, the application server registers a proxy handle to the component as a service in the dynamic module system. Thereafter, the proxy handle is discoverable and invocable by another component.

Abstract: Class loader changes from at least one user-defined class loader to a bootstrap class loader are determined by a stack processing module during de-serialization of a serialized data object. A reference to each user-defined class loader is stored separately from a thread method frame stack in response to each determined change from the at least one user-defined class loader to the bootstrap class loader. For each user-defined class load operation of a user-defined class associated with the de-serialization of the serialized data object, a latest user-defined class loader (LUDCL) is identified using the stored reference and the user-defined class is loaded using the identified LUDCL.

Abstract: An image processing apparatus capable of being remotely controlled by an information processing apparatus via a network includes a request transmission unit configured to transmit a remote control request to the information processing apparatus via the network, a detection unit configured to receive changing information for changing a setting value for the image processing apparatus from the information processing apparatus via the network and detect a content of the change of the setting value based on the changing information, and a display unit configured to display a message for prompting an operator of the image processing apparatus to determine whether to permit changing of the setting value according to the content of the change of the setting value detected by the detection unit.

Abstract: An image processing apparatus capable of being remotely controlled by an information processing apparatus via a network includes a request transmission unit configured to transmit a remote control request to the information processing apparatus via the network, a detection unit configured to receive changing information for changing a setting value for the image processing apparatus from the information processing apparatus via the network and detect a content of the change of the setting value based on the changing information, and a display unit configured to display a message for prompting an operator of the image processing apparatus to determine whether to permit changing of the setting value according to the content of the change of the setting value detected by the detection unit.

Abstract: A system and method for discovering a set of possible iteration sequences for a given loop in a software program is described, to transform the loop representation. In a program containing a loop, the loop is partitioned into a plurality of portions based on splitting criteria. Labels are associated with the portions, and an initial loop automaton is constructed that represents the loop iterations as a regular language over the labels corresponding to the portions in the program. Subsequences of the labels are analyzed to determine infeasibility of the subsequences permitted in the automaton. The automaton is refined by removing all infeasible subsequences to discover a set of possible iteration sequences in the loop. The resulting loop automaton is used in a subsequent program verification or analysis technique to find violations of correctness properties in programs.

Abstract: The present invention relates to the operation and maintenance of radio base stations in mobile communication systems. An inventive radio base station, which can be upgraded remotely in a safe way. In one embodiment of the invention, the radio base station comprises a file system comprising different versions of files, so that an old version of a file can be reverted to should problems in the operation of the radio base station occur. In another embodiment of the invention, the radio base station comprises a back-up area in which a copy of the files of the file system are stored. The back-up area is independent of the file system, so that if problems with the files in the file system are detected, the contents of the back-up area can be stored in the file system.

Abstract: A method and apparatuses for verifying Cryptographically Generated Address (CGA) signature are provided. The method includes: receiving a message sent by a CGA address owner, wherein a RSA public key, a first RSA public key signature, a second public key, and a second public key signature are carried in the message, the first RSA public key binds one or more second public keys, and a part protected by the first public key signature includes the one or more second public keys; verifying the first RSA public key signature according to the message; extracting the second public key, and verifying the second public key signature. According to the method and apparatuses of the embodiment, the effect of supporting other public key can be achieved, the change of the IP address can be omitted, and public key deployment and computing resources are saved.

Abstract: A method for registering a network application with an application programming interface (API) framework. In operation, a registrar may send a registration message that associates a namespace with the network application to the API framework. In one implementation, the namespace associated with the network application may be a uniform resource identifier. In another implementation, the registration message may specify a format of the standardized clients, a security policy, and the application resources associated with the network application.

Abstract: Two threads may communicate via shared memory using two different modes. In a polling mode, a receiving thread may poll an indicator set by the sending thread to determine if a message is present. In a blocking mode, the receiving thread may wait until a synchronization object is set by the sending thread which may cause the receiving thread to return to the polling mode. The polling mode may have low latency buy may use processor activity of the receiving thread to repetitively check the indictor. The blocking mode may have a higher latency but may allow the receiving thread to enter a sleep mode or perform other activities.

Abstract: A computer-implemented method for creating transparent object adapters for replaced classes in an multi-subsystem application is provided. The method includes determining whether an original class of the original subsystem is referenced by at least one other of the multiple subsystems in response to substituting a new subsystem for an original one. If the original class is referenced by at least one other of the multiple subsystems, a pair of corresponding classes for the original class is generated. One of the generated classes defines an object adapter class having the same name and package as the original class, the other class defining a new class. The method further includes configuring the object adapter class to export methods referenced by at least one of the other subsystems and to transform data and/or handle references to adapter objects passed as parameters or returned values.

Abstract: A system and method for discovering a set of possible iteration sequences for a given loop in a software program is described, to transform the loop representation. In a program containing a loop, the loop is partitioned into a plurality of portions based on splitting criteria. Labels are associated with the portions, and an initial loop automaton is constructed that represents the loop iterations as a regular language over the labels corresponding to the portions in the program. Subsequences of the labels are analyzed to determine infeasibility of the subsequences permitted in the automaton. The automaton is refined by removing all infeasible subsequences to discover a set of possible iteration sequences in the loop. The resulting loop automaton is used in a subsequent program verification or analysis technique to find violations of correctness properties in programs.

Abstract: The present invention provides a process for generating a shared function binding arrangement comprising a first module and a shared module which includes a plurality of functions and having means for binding a function shared between the first module and the shared module. The process comprises a linking phase for creating the first module and the shared module, a preparation phase for preparing the first module for calling the shared module without exposing details of the call, and a loading phase for loading the modules and linking the first module to a respective function in the shared module without exposing details of the call. The invention also provides a method and system for binding a function shared between a first module and a shared module by means of a linking arrangement a linking arrangement that enables the first module to call a respective function in the shared module without exposing details of the call.

Abstract: Duplicative code found in modules of high level computer code can be eliminated at link-time. A compiler forms a plurality of object files from a software program in which each object file includes one or more functions associated with the software program. An analyzer examines each function to ascertain whether any of the plurality of object files include functional duplicates. In addition, call and caller routing references are determined for each of the object files and functions contained therein. Responsive to determining that a functional equivalence exists, the routing of duplicative functions is altered to reference a golden copy of the same function. Once the call and caller information has been re-routed, the duplicative function(s) is(are) deleted.

Abstract: A program verification mechanism includes an external call reference verification mechanism that verifies external call references in a computer program. The external call reference verification mechanism checks the computer program after the computer program has been loaded by a loader/linker. The loader/linker stores a list of trusted entry points that specifies a trusted entry point for each external call reference, along with a list of allowable caller code for each trusted entry point. The external call reference verification mechanism determines the entry point for each instruction that is an external call reference, determines whether the entry point is listed as the trusted entry point for the external call reference, and whether the external call reference instruction is in the list of allowable caller code for the trusted entry point. If so, the computer program is verified. If not, verification of the computer program fails.

Abstract: A computer implemented method, apparatus, and computer program product for managing aircraft software parts. An aircraft software part is received at a library. The received part is stored in the library with other aircraft software parts. A user interface is provided to manipulate the aircraft software parts. Responsive to receiving a user input from the user interface to uplink a selected aircraft software part to a target aircraft data processing system, a command is created to send the selected part to an aircraft in which the target aircraft data processing system is located. The uplink command is stored in a queue in the storage in the library. The uplink command is distributed to a proxy server application in response to a request for commands. Responsive to receiving a request from the proxy server application processing the stored uplink command, the selected part is sent to the proxy server application.

Abstract: A message directed to a first version of a service is received at a content based router in a distributed computing system. The message is transmitted to a second version of the service instead of the first version of the service if the message is compatible with the second version of the service. The message is transmitted to the first version of the service if the message is not compatible with the second version of the service.

Abstract: Exemplary apparatus, method, and system embodiments provide for processing an action script for a graphical image for visual display. An exemplary apparatus comprises: a first memory; first circuitry configured to convert a plurality of descriptive elements of the action script into a plurality of operational codes; and second circuitry configured to execute the plurality of operational codes using corresponding data stored in the first memory to generate pixel data for the graphical image. Exemplary embodiments may further include third circuitry configured to parse the action script into the plurality of descriptive elements and the corresponding data, and fourth circuitry configured to extract data from the action script and to store the extracted data in the first memory as a plurality of control words having the corresponding data in predetermined fields.

Abstract: A system and method for opening a file in a virtualization workspace of a host computer system. The host computer system includes a virtualization workspace including a virtualization agent and virtual software layers. The virtualization agent detects a request to open a file in the virtualization workspace. In response to detecting the request, the virtualization agent determines that the file includes embedded metadata. The virtualization agent uses the embedded metadata to identify a virtual software layer in which to open the file, activates the virtual software layer, and opens the file using an application that is included in the identified virtual software layer. The virtual software layer includes one or more applications and the embedded metadata includes a signature corresponding to one of the applications with which to open the file. The identified virtual software layer is installed on the host computer system subsequent to being identified.