Abstract: A method and system for a communication network containing both trusted peers and untrusted hosts within the network. Trusted peers can collaborate with each other to observe and monitor the activity of the untrusted hosts. In addition, a trusted peer instantiated with a virtual machine can have an operating system kernel collaborate with a hypervisor to determine whether threats are present. A trusted peer that needs particular functionality installed can collaborate with other trusted peers and with an administrative console to have that functionality installed. An untrusted host can have a driver directly inserted into it by an administration console, which will facilitate in the collaboration process.

Abstract: A mechanism for virtual synchrony total order messaging for virtual machines is disclosed. A method of embodiments of the invention includes receiving a request to reserve a block of memory in a shared memory segment, reserving the block of memory, and providing a start address of the reserved block of memory to a virtual machine (VM) that sent the request in order for the VM to copy a message from an application of the VM into the reserved block of memory, wherein the application communicates with other applications on other VMs using virtual synchrony. The method may further include sending a new message available request to all of the other VMs, wherein the new message available request includes the start address of the reserved block of memory and a length of the message, and tracking the VMs that access the reserved block of memory.

Abstract: The present invention provides an improved single antenna system that allows reception of RF energy at multiple frequencies. In one embodiment, the antenna is implemented as a multi-beam, multi-feed antenna having a primary reflector fitted with a dual mode feed tube and a switchable LNB that supports both Ka band and Ku band reception. In another embodiment, the antenna is implemented as a multi-beam, multi-feed antenna having a primary reflector fitted with a feed horn and a LNB that is capable of providing movement such that the feed horn with the LNB is at a focal point with the primary reflector for both Ka and Ku band reception. In another embodiment, the antennae is implemented as a multi-beam, multi-feed antenna having a primary reflected fitted with a feed horn assembly and a switchable LNB that supports both Ka band and Ku band reception.

Abstract: A method and system for identifying a work in a data transfer. In accordance with this invention, a data transfer is received. The media content of a work is then read from the data transfer. The media content is then used to generate a fingerprint of the work. The fingerprint is then used to identify the work. A report including the identity of the work is then generated.

Abstract: A method and apparatus for ordering callbacks for server plug-ins of a Lightweight Directory Access Protocol (LDAP) directory server. Each plug-in registers with the LDAP server and has a designated priority and set of dependencies. The priority and dependency data are stored in an LDAP callback configuration entry or set of entries. The LDAP server analyzes the priority and dependencies to determine the order of each plug-in or individual callback relative to one another. This allows the LDAP directory server and LDAP operations to rely on the order of callbacks thereby improving the efficiency of the system.

Abstract: Embodiments of the present invention provide a method, a client and a token for providing a nonce during a login associated with the token in a multi-user computer system. A login process is activated after token insertion by a request to execute a user privileged operation made by a client application process. If a password provided to the login process by an access requester associated with authorized use of the token is validated in the token, a nonce is generated in the token. The password is passed to the token in a command and the nonce is passed to the client application process in a response to the command. The nonce is used by the client application process or any other additional processes during execution of the user privileged operation. Additional nonces, including those based on security level can be generated and passed to additional client application processes as execution of user privileged operations is requested.

Abstract: Embodiments of the present invention provide a mechanism for certifying the compatibility of a software product by identifying the interfaces (API or ABI) used by that product. The source code or object code of a component is analyzed by a tool that traces which interfaces and data structures of an ABI/API are being utilized. For example, an ISV or IHV may be required to run the tool on their respective components in order to have that component certified with a particular version of an operating system and submit the results to a certification service. The certification service may collect this API/ABI information into an integrated database. The certification service may then use this database to analyze the impact of changes to an operating system at the binary interface level, proactively notify vendors prior to these changes, test compatibility and emulation libraries, and certify components are compatible with an operating system without the need of significant testing.

Abstract: In one embodiment, a mechanism for improved integration of JSLEE and SIP Servlets in a JAVA virtual machine is disclosed. In one embodiment, a method includes sending an event received at a Session Initiation Protocol (SIP) Servlet to a Java™ APIs for Intelligent Networks Service Logic Execution Environment (JSLEE) container through a fireEvent method, wherein the SIP Servlet and the JSLEE container are integrated in a same JAVA virtual machine (JVM). The method further includes receiving at the SIP Servlet an object that includes a getResult method, processing by a JSLEE application in the JSLEE container the event to produce a result, returning by the JSLEE application the result through a setResult method, and obtaining by the SIP Servlet the result via the getResult method.

Abstract: In one embodiment, a mechanism for staged upgrades of a virtual machine system is disclosed. In one embodiment, a method includes determining a minimum number of virtual desktop servers (VDSs) necessary to host one or more VMs associated with the VDSs, migrating in a live manner the one or more VMs to the minimum number of VDSs, upgrading the non-upgraded VDSs that are not hosting any VMs, repeating the migrating and upgrading until all of the VDSs are upgraded, load balancing the VMs among the upgraded VDSs, and upgrading each of the VMs upon hosting of the VM by an upgraded VDS.

Abstract: A method and apparatus for generating a mail certificate is described. A client determines whether the client possesses a certificate. If a certificate is needed, the client sends a request to a certificate responder for a new certificate in response to the determination. The certificate responder generates and sends the new certificate back to the client.

Abstract: A mechanism for unioning file systems using fall-through directory entries is disclosed. A method of embodiments of the invention includes receiving a request to open a directory of a union file system, processing directory entries of the directory for whiteouts and duplicates, copying the processed directory entries to disk storage, and flagging the copied entries from a lower level file system as fall-through entries.

Abstract: Embodiments of the present invention provide a method and system for dynamically creating a view in a distributed processing system. The system can have nodes such as a service node and a directory with entries. An object class of a view can be defined as including an attribute type that accommodates a new attribute value. An attribute value associated with one of the nodes can be received at the service node whereupon it can be determined whether the attribute value is associated with the new attribute value. A new view can be created if the attribute value is associated with the new attribute value.

Abstract: A mechanism for live migration of virtual machines (VMs) with memory optimizations is disclosed. A method of embodiments of the invention includes receiving a hash value for each of one or more memory pages of a migrating VM from a source host machine, obtaining a hash value for each of one or more memory pages hosted by a target host machine, and comparing the received hash values with the obtained hash values for matches. The method further comprises for each of the received hash values that do not match any of the obtained hash values, sending a negative acknowledgment to the source host machine for that hash value, and for each of the received hash values that do match any of the obtained hash values, using a memory page associated with the matching hash value at the target host machine for the migrating VM.

Abstract: A mechanism for identifying invalid syllables in Devanagari script is disclosed. A method of embodiments of the invention includes receiving Devanagari text from an application of a computing device for parsing, determining a character type for a character of the Devanagari text, determining a new state associated with the character by referencing a Devanagari state machine with the determined character type and a current state of the Devanagari text, and transmitting an invalid syllable signal to the application for display on a display device to an end user of the application if the determined new state is invalid.

Abstract: A mechanism for virtual time stamp counter acceleration is disclosed. A method of embodiments of the invention includes setting a virtual machine (VM) time stamp counter (TSC) to a hyper-fast rate, receiving control of the VM due to a VM exit caused by the VM issuing an instruction that reads the VM TSC, and adjusting the VM TSC with a value of an offset counter associated with the VM.

Abstract: A provisioning server can manage network connections in the software provisioning environment. The provisioning server can maintain a network record of network configurations for the networks served by the provisioning server. The network record can include information describing the structure, hardware, software, and configuration of the networks served by the provisioning server. The provisioning server can manage and configure existing networks and instantiate new networks or sub-networks associated with the provisioning server. The network configuration module can retrieve the network configurations maintained in the network record to manage, configure, and instantiate existing or new networks.

Abstract: A method and apparatus for integrating aspect-oriented programming (AOP) into the deployment layer of an application server. In one embodiment, the method includes analyzing a structure of a deployment within an application server, and translating the deployment from a first form to a second form using results of the analyzing. The method further includes indicating in the deployment that a cross-cutting concern is to be resolved by aspects at runtime.

Abstract: Integrating information and performance controls for individual devices with environmental controls. Integrating the individual devices with general environmental control enables adaptive environmental control. For equipment housed in a bounded space such as a server room, information about the thermal environment within the bounded space can affect the performance of the equipment. Additionally, information about the performance conditions and/or thermal conditions about a piece of equipment can affect how the environmental control system for the bounded space operates. The equipment exchanges environmental event messages with a control node to affect the performance of the equipment and/or the environmental control system.

Abstract: A password management system and method for securing networked client terminals and mobile devices is provided. More specifically, the present invention provides a system and method for encrypting randomly generated administrator-level passwords and providing a means for decrypting the randomly generated passwords for single-use unrestricted access to a designated terminal or mobile device. When unrestricted access to the terminal or mobile device is required, the encrypted administrator-level password is decrypted using a shared symmetric key, which is generated during encryption of the administrator password, to reveal the administrator-level password for the terminal or mobile device. The administrator-level password is a single-use password, wherein upon use of the administrator-level password a new administrator-level password may be automatically generated for the corresponding terminal or mobile device.

Abstract: A method for communicating between an application and a database by using a lightweight stored procedure data-binding framework for applications written in object oriented programming languages such as JAVA, significantly reduces the coding effort required to communicate with a relational database. Once the developer specifies the needed tabular data, the inventive framework generates all needed data objects and stored procedures to accomplish the interaction with that database data. The automatically generated code is then used by the application via a run-time component. This means the developer need only make simple calls in a few lines of code for database interaction. The encapsulated data model deals only with persistence and retrieval issues and is therefore de-coupled from the business model.