System and method for enforcing security service level agreements
    1.
    发明授权
    System and method for enforcing security service level agreements 有权
    执行安全服务级别协议的系统和方法

    公开(公告)号:US07278156B2

    公开(公告)日:2007-10-02

    申请号:US10453951

    申请日:2003-06-04

    IPC分类号: G06F9/44 G06F17/00

    CPC分类号: H04L63/105 H04L63/20

    摘要: Systems and methods for providing e-business services based on security SLAs (service level agreements) in a hosted computing environment. More specifically, the systems and methods enable efficient enforcement of individualized security SLAs, wherein individualized SLA agreements are specified, mapped into security rules and continually monitored against system events via an efficient rule index to determine security violations and trigger proper actions.

    摘要翻译: 基于托管计算环境中的安全SLA(服务级别协议)提供电子商务服务的系统和方法。 更具体地说,系统和方法能够有效地实施个性化的安全SLA,其中指定了个性化SLA协议,映射到安全规则中,并通过有效的规则索引连续监视系统事件,以确定安全违规并触发适当的动作。

    Memory structure to minimize rounding/trunction errors for n-dimensional
image transformation
    5.
    发明授权
    Memory structure to minimize rounding/trunction errors for n-dimensional image transformation 失效
    存储器结构,用于最小化n维图像变换的舍入/整数误差

    公开(公告)号:US5428567A

    公开(公告)日:1995-06-27

    申请号:US239668

    申请日:1994-05-09

    IPC分类号: G06F17/14 G11C7/10 G06F7/38

    CPC分类号: G06F17/147 G11C7/1006

    摘要: A method for computing n-dimensional decomposable image transformation using the 1D approach with constrained transpose memory provides a minimized rounding/truncation error. The method minimizes transpose memory size required to fulfill a defined accuracy requirement for n-dimensional image transformation. A set of input data elements are stored. Then, a first transform, of the multiple dimension transform, is performed on the set of input data elements so as to form an array of transformed data elements, each of the transformed data elements having a larger number of bits than the input data elements. A common range of the transformed data elements is determined, and a minimum number of bits required to represent the common range without loss of information is then determined. The memory word size available for storage of the transformed data elements is compared with a minimum number of bits so as to determine an excess number of bits. Only the excess number of bits of the transformed data is truncated/rounded so as to form an output set of data elements. Finally, the output set of data elements is stored.

    摘要翻译: 使用具有约束转置存储器的1D方法来计算n维可分解图像变换的方法提供最小化舍入/截断误差。 该方法最小化了满足n维图像变换的定义精度要求所需的转置存储器大小。 存储一组输入数据元素。 然后,对该组输入数据元素执行多维变换的第一变换,以便形成变换数据元素的阵列,每个变换数据元素具有比输入数据元素更大的比特数。 确定经变换的数据元素的公共范围,然后确定在不丢失信息的情况下表示公共范围所需的最小比特数。 将可用于存储经变换的数据元素的存储器字大小与最小位数比较,以便确定过量的位数。 只有变换后的数据的比特数被截断/舍入才能形成数据元素的输出集合。 最后,存储数据元素的输出集。

    System and method for providing differentiated services on the web
    6.
    发明授权
    System and method for providing differentiated services on the web 有权
    在网络上提供差异化​​服务的系统和方法

    公开(公告)号:US06816907B1

    公开(公告)日:2004-11-09

    申请号:US09644915

    申请日:2000-08-24

    IPC分类号: G06F1516

    摘要: A data communications network includes network servers, clusters of network servers, as well as content providers and service providers, such as ISPs and ASPs, and further includes at least one data processor that operates under control of a stored program resident on a memory media. The stored program directs operation of the data processor to provide users with differentiated services by defining, for individual ones of the plurality of content providers, a plurality of levels of services for users, and for responding to service level tables received from individual ones of the plurality of content providers, where individual ones of users are assigned to one of the plurality of levels of service. There is also at least one resource requirement table for defining at least a minimum set of resources required for realizing individual ones of said plurality of service levels. The program further directs operation of the at least one data processor to merge the plurality of resource requirement tables into a merged resource requirement table for use by a particular one of the network servers. The particular one of the network servers assigns differentiated service levels to incoming user requests in accordance with the service level tables, and in accordance with the merged resource requirement tables and currently available resources. The resources can include one of numbers of available servers, available memory capacity, and available bandwidth. The program further controls operation of the at least one data processor to redirect an incoming user request to a network server having sufficient available resources to provide a specified level of service for the user request.

    摘要翻译: 数据通信网络包括网络服务器,网络服务器群集以及诸如ISP和ASP之类的内容提供商和服务提供商,并且还包括至少一个数据处理器,其在驻留在存储介质上的存储程序的控制下操作。 存储的程序指导数据处理器的操作,以向用户提供差异化​​服务,通过为多个内容提供商中的各个内容提供商定义用于用户的多个级别的服务,以及响应从 多个内容提供商,其中单个用户被分配到多个服务级别中的一个。 还存在至少一个用于定义用于实现所述多个服务级别中的各个的所需资源的至少一组资源的至少一个资源需求表。 该程序进一步指导至少一个数据处理器的操作,以将多个资源需求表合并成合并的资源需求表,供特定的一个网络服务器使用。 特定的一个网络服务器根据服务等级表,根据合并的资源需求表和当前可用的资源,将不同的服务级别分配给传入的用户请求。 资源可以包括可用服务器数量,可用内存容量和可用带宽之一。 该程序进一步控制至少一个数据处理器的操作,以将传入的用户请求重定向到具有足够可用资源的网络服务器,以提供用户请求的指定级别的服务。

    System and method for indexing queries, rules and subscriptions
    7.
    发明授权
    System and method for indexing queries, rules and subscriptions 有权
    索引查询,规则和订阅的系统和方法

    公开(公告)号:US07313554B2

    公开(公告)日:2007-12-25

    申请号:US10673651

    申请日:2003-09-29

    IPC分类号: G06F7/00 G06F17/30

    摘要: This invention introduces a new concept called virtual construct intervals (VCI), where each predicate interval is decomposed into one or more of these construct intervals. These VCIs strictly cover the predicate interval. Namely, every attribute value covered by the predicate interval is also covered by at least one of the decomposed VCIs, and vice versa. Each construct interval has a unique ID or interval coordinate and a set of endpoints. A construct interval is considered activated when a predicate interval using it in its decomposition is added to the system. The predicate ID is then inserted into the ID lists associated with the decomposed VCIs. To facilitate fast search, a bitmap vector is used to indicate the activation of VCIs that cover an event value. The challenge is to find an appropriate set of construct intervals to make predicate decomposition simple and, more importantly, to build efficient bitmap indexes. Because each construct interval covers only a small range of attribute values, the invention also uses bitmap clipping to cut unnecessary bitmap storage. To facilitate bitmap clipping, the invention introduce the covering segment concept. Bit positions outside a covering segment are pruned.

    摘要翻译: 本发明引入了称为虚拟构建间隔(VCI)的新概念,其中每个谓词间隔被分解成这些构建间隔中的一个或多个。 这些VCI严格覆盖谓词间隔。 即,由谓词间隔覆盖的每个属性值也被分解的VCI中的至少一个覆盖,反之亦然。 每个构造间隔具有唯一的ID或间隔坐标和一组端点。 当在其分解中使用它的谓词间隔被添加到系统时,构造间隔被认为被激活。 然后将谓词ID插入到与分解的VCI相关联的ID列表中。 为了便于快速搜索,使用位图向量来指示覆盖事件值的VCI的激活。 挑战是找到适当的构造间隔集,使谓词分解变得简单,更重要的是构建有效的位图索引。 因为每个构造间隔仅覆盖一小段属性值,本发明还使用位图限幅来减少不必要的位图存储。 为了便于位图剪辑,本发明引入了覆盖段概念。 修剪覆盖段外的位位置。