Abstract: A method of downloading trusted content. The method comprises sending by a mobile device a request for a trusted content to a server, wherein the mobile device comprises a first mobile device trusted security zone and builds the request while executing in the first mobile device trusted security zone and wherein the server comprises a server trusted security zone and wherein the server handles the request for the trusted content at least partly in the server trusted security zone. The method comprises receiving the trusted content by the first mobile device trusted security zone, storing the trusted content in a second mobile device trusted security zone of the mobile device, inspecting the trusted content in the second mobile device trusted security zone, and when the trusted content passes inspection, at least one of executing or presenting a portion of the trusted content by the first mobile device trusted security zone.

Abstract: The present invention provides for network taps capable of connecting to a plurality of communication cables. The network taps provide one or more levels of multiplexers which allow network data signals from a particular communication cable to be delivered to an attached device in order to monitor the activity of the communication cable. The network taps also include integrated circuitry which control the various functions and components of the network tap.

Abstract: This invention has as its object to attain strong security and to implement network solutions with high convenience and simplicity with low cost upon providing Web services. To this end, an information processing apparatus according to this invention has the following arrangement.

Abstract: A management device (100) for use in an access network (10, 19, 20, 30, 40, 100) including a plurality of data connections (18, 19, 20) between end user devices (10) and an aggregation transceiver device (20) where the connections (18, 19, 20) are aggregated for onward connection through the access network (20, 30,40), the access network storing in association with each data connection a Dynamic Line Management, DLM, profile which specifies a set of values for a plurality of parameters associated with the respective data connection, together with a stability level specifying a desired level of stability for the data connection.

Abstract: A method, information system, and computer readable storage medium verify predefined connectivity for I/O devices. Current predefined logical connection data and actual physical connection data is gathered. The predefined logical connection data and the actual physical connection data are formatted into a plurality of sortable tables. At least a portion of the predefined logical connection data is formatted into a predefined channels table and at least a portion of the actual physical connection data is formatted into a node information table. The portion of the predefined logical connection data is compared with the portion of the actual physical connection data. The portion of the predefined logical connection data is determined to substantially match/not match the portion of the actual physical connection data. At least one predefined logical connection associated with the predefined logical connection data that fails to substantially match the actual physical connection data is displayed to a user.

Abstract: A method, system and computer program product for managing and deploying physical and virtual environments across multiple hardware platforms. A single unit, referred to herein as a cloud construction block, contains both the hardware and software components used to build a cloud computing environment. By having such a single unit contain both the hardware and software components needed to build a cloud computing environment, the user no longer needs to purchase and integrate different hardware and software components. Furthermore, the cloud construction block contains modular pieces of hardware, such as compute hardware, memory hardware, storage hardware and network hardware, that are integrated with management software configured to manage both the hardware and the cloud computing environment in a seamlessly integrated package. Since there is a single management system, the management software allows the user to manage the modular pieces of hardware via a single user interface.

Abstract: Systems and methods for calculating threat scores for individuals within an organization or domain are provided. Aspects of the invention relate to computer-implemented methods that form a predictive threat rating for user accounts. In one implementation, a first threat score representing a first time period may be calculated. The first threat score may be compared with aspects of the same user accounts for a second time period. Weighting schemes may be applied to certain activities, controls, and/or user accounts. Further aspects relate to apparatuses configured to execute methods for ranking individual user accounts. Certain embodiments may not block transmissions that violate predefine rules, however, indications of such improper transmission may be considered when constructing a threat rating. Blocked transmissions enforced upon a user account may also be received. Certain activity, such as accessing the internet, may be monitored for the presence of a security threat and/or an ethics threat.

Abstract: A system for providing access to a plurality of services from third party service providers to users at remote locations includes a plurality of resource managers having associated physical system resources for enabling a user to access a user selected service each resource manager including a processing platform with an operating system running thereon, a data store, including configuration information for each of the services available to a user through the resource manager, wherein there are multiple configurations associated with different ones of the predetermined services and one or more of the available physical system resources, and central processing center that communicates with each of the plurality of resource managers to enable or disable selected ones of the services on given ones of the resource managers based upon predetermined criteria and operates in conjunction with the resource managers to execute predetermined sequences of actions for accessing user selected ones of the services from the

Abstract: A tool for managing a computer network includes a gateway service module that identifies a gateway for a network and a network information service module. The network information service module identifies devices in the network, determines at least one property for each of the identified devices, and creates a network information data structure for storing device properties. A communication agent service module transmits at least one determined device property to other agent service modules associated with the network, receives at least one device property from another agent service module associated with the network, and provides the received at least one property device to the network information service module. A method of monitoring a computer network is also provided.

Abstract: Method, apparatus and computer program for providing access to identity services of users. A Discovery Service DS server (100) stores for a set of users references (RO1A,ROnB) of identity services (IDSRV-A,IDSRV-B) available for them and usable to contact respectively with the Service Providers SPs (120,130) hosting each of said identity services. For a given identity service not yet registered for a given user, the DS server selects a SP (140) that is able to provide it, and stores a new resource offering (RO2X) that corresponds to the registration of said identity service. For selecting the appropriate SP, the DS server can check a service capability storage (103-2,301) that comprises information about what identity service(s) can be provided by a given SP, and which can be dynamically updated from SPs with the identity services they respectively support. The DS server can contact the user to collect SP preferences and/or service data.

Abstract: A method and system for configuring elements of a distributed computing system based on evaluations of their value add and cost impact. The system and method for configuring elements of a distributed computing system comprises the steps of: determining one or more system metrics that relate to hardware and/or software elements of a configured distributed system; determining a system value in response to one or more system metrics, the value determined according to one or more value criteria; and, re-configuring elements of the distributed computing environment according to said determined system value.

Abstract: Automation objects are implemented in a client-server model to control operations on one or more client machines from a single machine automation control module, such as a test program. The machine automation control module instantiates machine automation server objects in a server process. The control module can then instruct the server objects to instantiate corresponding machine automation client objects on specified client machines via a connection mechanism. Object-oriented automation classes are provided in a library and may be extended to meet customized requirements of a given testing procedure. Examples of automation objects may include, without limitation, application objects, machine image objects, snapshot objects, file and registry access objects, reboot objects, autologon objects, and command execution objects. Automation objects allow the re-establishment of remote control after the loss of control resulting from a reboot, a relogon, or a disk image restoration, for example.

Abstract: A method, system and computer program product for assigning one or more conditions to a telephonic communication system to enable recording, replaying, and pausing of a telephone conversation. Recording of a telephone conversation may be manually or dynamically initiated during the telephone conversation. Dynamic replay of a telephone conversation is automatically initiated when a conversation experiences insufficient call quality, an interruption to the telephone service is detected, the user is distracted, a displacement of the user's phone is detected, or the user toggles between listening modes. A pause mode is automatically entered into during the telephone conversation when a section of the telephone conversation is replayed. An automated pause alert may be played during repeat of the telephone conversation to inform one or more parties that the user is temporarily unavailable. Real-time access to the telephone conversation is resumed when the replaying of the recorded telephone conversation has ended.

Abstract: A system for automatically implementing high-level instructions in a distributed application program, where the high-level instructions reflect the behavior of the distributed application program, includes at least a tools component. The tools component is used to write high-level instructions in the form of declarative models, and place them in a repository. An executive component then receives the declarative models from the repository and refines them (e.g., via progressive elaboration) until there are no ambiguities. A platform-specific driver then translates the commands from the executive component, effectively turning the declarative model instructions into a set of imperative actions to be implemented in one or more application containers. The platform-specific driver also relays one or more event streams to an analytics means, which can result in modifications to the declarative models and corresponding new sets of instructions coming through the platform-specific driver at a later point.

Abstract: A computationally implemented method includes, but is not limited to: acquiring objective occurrence data including data indicating occurrence of at least one objective occurrence; soliciting, in response to the acquisition of the objective occurrence data, subjective user state data including data indicating occurrence of at least one subjective user state associated with a user; acquiring the subjective user state data and correlating the subjective user state data with the objective occurrence data. In addition to the foregoing, other method aspects are described in the claims, drawings, and text forming a part of the present disclosure.

Abstract: A method for analysis of distributed device rule-sets for compliance with global policies includes enabling an administrator to specify a network topology with intercommunicating elements and parameters required to secure the intercommunication with access control elements of the network topology; establishing connections to the access controls elements to capture a snapshot configuration of device rule-sets of the access control elements; enabling the administrator to specify a set of global access constraints with reference to the access control elements; enabling the administrator to select between exhaustive analysis and statistical analysis; conducting the selected analysis to determine violations by the device rule-sets that fail to comply with the set of global access constraints, wherein statistical analysis quantitatively characterizes a level of compliance without conducting analysis of all potential network paths; and providing results of the selected analysis to the administrator through a graphic

Abstract: Techniques for detecting presence of a remote device at Layer 2 in response to an indication of an attempt to use the device and without maintaining a Layer 3 connection to the device. The techniques allow reducing power consumption without compromising the device's availability. A device that pairs with a remote wireless device may establish a Layer 3 connection to the remote device to provide services to a user. The Layer 3 connection and underlying Layer 2 connection (e.g., WI-FI, WI-FI DIRECT™ or BLUETOOTH®) may be terminated when the Layer 3 connection is not actively used. Once use of the remote device is desired, its presence may be detected using a Layer 2 device discovery mechanism and the Layer 2 and Layer 3 connections to the device may be reestablished. Services provided at Layer 3, such as steaming data, may then be performed over the reestablished Layer 3 connection.

Abstract: A method and system for providing system event notifications to clients such as applications. Clients register for notification of one or more types of events with a registration mechanism, and a System Event Notification Service, (SENS), receives system event information and fires event notifications in response thereto. A distribution mechanism selectively communicates the fired event to each client registered for notification thereof based on the type of event. Events include network events, for which the service monitors the connectivity state of the machine, including whether a connection is established or lost, the type of connection (LAN/WAN) and bandwidth information. To monitor a LAN state, the service caches outgoing and incoming network information including errors and packet counts and statistically evaluates this cached information against current information to determine whether the connection is established or lost.

Abstract: A method and apparatus for dynamic quality adjustment of digital media based on changing streaming constraints is provided. A digital media server sends a digital media stream according to a set of streaming constraints to a requesting client. Audio and visual information may be sent to a requesting client together in a single stream, or separately in multiple streams. A client sends a request over a control network to the digital media server indicating information of a particular type is no longer desired. In response to receiving the signal, the video server ceases transmission of that particular type of information to the signaling client, thus relaxing streaming constraints.

Abstract: Systems and methods for network service management, wherein the internet service management system includes one or more components which collectively enable an administrator to obtain a site-wide view of network activities on servers such as web servers, FTP servers, e-mail servers, domain name servers, etc. In addition to collecting information relating to web server latency and processing time, the internet service management system may collect actual user transaction information and system information from end users on client computers. The internet service management system may provide domain summary information for a domain, or it may provide management information organized by “categories” according to how a site manager wants to view and manage his business; e.g., byline of business (books, auctions, music, etc.), by site function (searches, shopping cart, support, quotes, sales automation), or most any other categorization customers may choose.