122results about How to "Reduce administrative overhead" patented technology

Reduction of administrative overhead in maintaining network information, rapid convergence on an optimal routing path through the data network, and utilization of only required network resources are realized by a novel method for establishing a call path between network users. The method is based upon deployment of a network information server that stores network topology information and that is addressable by each end user. In this method, the network information server receives a request to establish a call path. The request identifies at least the calling party. In response to the request, the network information server determines a network traversal between the calling party and a root network wherein the network traversal includes call path information about the sub-networks between the calling party and the root network. The request for establishing a call path can also identify the called party. Based on the calling and called party identification, the network information server also determines a second network traversal between the called party and the root network. The second network traversal is sent to either the calling party or the called party or to both the calling and called parties. The server can determine an intersection of the traversals and send the intersection information to the parties. The intersection information is known as a merge point and represents an optimal call path between the parties.

PCT No. PCT/EP95/03289 Sec. 371 Date Dec. 10, 1998 Sec. 102(e) Date Dec. 10, 1998 PCT Filed Aug. 18, 1995 PCT Pub. No. WO97/07472 PCT Pub. Date Feb. 27, 1997The inventive concept comprises a system platform for a synergistic, role modular work process environment. A work process object (WPO) (1001) is created, residing in a data base, and stored in a memory of the process and project management computer system (1030). All data concerning the process and project management are reported to said work process object (WPO) (1001) and said work process object (WPO) (1001) is used as a common data base. According to the inventive concept, each view must be supported by a specific workplace, represented by digital data and enforcing the rules for the specific role. A work process information model supports the dynamic definition and use of a data base object representing a work process, boch in its process and project planning modes and its execution. According to the inventive concept, one object supports simultaneously all modes delimited by dynamically moving boundaries. Workplace implementation enforces over-all rules for each role in the inventive system.

Different levels of security are provided in a security system so that users can decide the security level of their own communications. Users can choose a low level of security and maintain the security overhead as low as possible. Alternatively, they can choose higher levels of security with attendant increases in security overhead. The different levels of security are created by the use of one or more of two keys: an encryption key is used to encrypt plaintext data in a delta and a message authentication key is used to authenticate and insure integrity of the data. Two keys are used to avoid re-encrypting the encrypted data for each member of the telespace. In one embodiment, the security level is determined when a telespace is created and remains fixed through out the life of the telespace. For a telespace, the security level may range from no security at all to security between the members of the telespace and outsiders to security between pairs of members of the telespace. In another embodiment, subgroups called “tribes” can be formed within a telespace and each tribe adopts the security level of the telespace in which it resides.

A system of automated patient history intake including a retrieval system for retrieving pharmaceutical information specific to a patient, a display system for displaying the pharmaceutical information, and a reconciliation system for reconciling the pharmaceutical information using visual data. A system for automated patient check-in including a retrieval system for retrieving pharmaceutical information specific to a patient, a display system for displaying the pharmaceutical information, and a reconciliation system for reconciling the pharmaceutical information using visual data.

A cluster router architecture and methods for performing distributed routing are presented. The cluster router architecture includes off-the shelf Personal Computer (PC) hardware-based router cluster nodes interconnected in an intra-connection network in multiple dimensions. Each PC-based router cluster node is provided with the same routing functionality and a router-cluster-node-centric configuration enabling each router cluster node by itself or multiple router cluster nodes in the cluster router to provide routing responses for packets pending processing. Optimized packet processing in respect of specific functionality is provided via special purpose router cluster nodes not necessarily PC-based taking part as cluster nodes in the cluster router lattice. The method divides packet processing into entry packet processing and routing response processing; special processing; and exit processing. Entry packet processing and routing response processing is performed by router cluster nodes receiving packets from communication networks in which the cluster router participates. Exit packet processing is performed by router cluster nodes transmitting packets into communication networks in which the cluster router participates. Packet processing in accordance with the router-cluster-node-centric specification is interrupted on determining that special processing is required in respect of a packet, and the packet is handed over to a corresponding special purpose router cluster node. Advantages are derived from: a configurable, and scalable cluster router design providing a re-configurable high routing capacity using cost effective stock PC hardware; from the intra-connection network which provides a high degree of diversity ensuring resilience to equipment failure; from the use of a star topology with respect to management links which reduces management overheads in the intra-connection network; and from the ability to forward packets to designated special purpose router cluster nodes optimized to provide specific packet processing functionality.

The invention relates to an unmanned ship device and sampling method for automatic sampling of the water quality. The unmanned ship device comprises an unmanned ship body, an energy and control unit arranged in a bin of the unmanned ship body, and an automatic water quality sampling unit. The automatic water quality sampling unit comprises a sampling bottle, a supporting body mechanism for installation of the sampling bottle, a sampling pump arranged on the outer side of the unmanned ship body, a sample hose connected with the sampling pump, and an oscillating arm water-fetching mechanism forcontrolling the sampling hose to rotate. The oscillating arm water-fetching mechanism comprises a hollow pipe nested on the outer side of the tail section of the sampling hose, and a first stepping motor connected with the end, close to the sampling pump, of the hollow pipe. By means of the unmanned ship device and sampling method for automatic sampling of the water quality, water quality samplesof multiple sampling sites can be collected sequentially in a working cycle, the samples can be analyzed synchronously after being sent back, the sampling efficiency is further improved, and water quality samples of different areas or watersheds can be conveniently, quickly and automatically collected.

The invention provides a flow table conversion method and device and relates to the technical field of networks. According to the flow table conversion method and device, in the achievement process from software to hardware, a controller does not need to fit in with an issuing rule of the hardware, and therefore burden of the controller and management expense are reduced. The flow table conversion method includes the following steps of converting a software-type multistage flow table into a software-type single-stage flow table in network equipment architecture with detached control and transmission in an equivalent mode, wherein the single-stage flow table is single-table multi-domain, and dividing the single-stage flow table into corresponding multi-stage flow tables of a hardware type based on the multi-stage flow table achieved by the hardware. The flow table conversion method and device is applied to flow table conversion.

A method of restricting access to data maintained on a server computer by one or more authorized, networked client machines includes the step of installing a client-side software program on the client machine for generating a client machine-specific identifier determined by particular characteristics of the client machine. The machine-specific identifier is used by the server administrator to generate a unique password, which the user enters into the client-side software program. Server-side software is embedded on protected Web pages of the server computer that hosts the protected Web site. When a user desires access to protected content, the client-side software is prompted to re-generate its machine-specific identifier and valid client password list for comparison with the password previously entered by the user. Access is granted if they correspond, and denied if they do not. If the client machine is recognized as being authorized to access data on the protected Web site during a first access request, then the current session identifier is saved in a temporary storage table remote from the client machine for indicating current working sessions of authorized client machines. The client machine returns such session identifier with each additional request for access, and the temporary storage table is consulted to search for such session identifier before granting access.

The invention discloses a transparent computing method and transparent computing system based on the virtualization technology. Through the virtualization technology, physical differences between different hardware platforms of a client are shielded, wide support for different hardware devices is provided, the mobility requirement of a user is met, application service support across terminal devices and operating systems is provided for the user, and the user does not need to worry about management of computer hardware devices and systems. The scheme is achieved in the transparent computing system based on a wide area network, a request is started by the client in the transparent computing system, legality of the request is confirmed through a management client and a transparent main server of a software resource server, connection of resources is given, instance operating systems stored in the transparent software resource server are loaded remotely and run, needed service is acquired, and the task requirement of the user is completed. The transparent computing method and transparent computing system based on the virtualization technology can adapt to different hardware platforms and operating system platforms, can be started on the wide area network faster, and is higher in safety performance and practicability.

Systems and methods for managing appointments and, particularly, for managing appointments for patients in healthcare systems that include health care facilities and hospitals. Computer systems can detect geophysical positions of patient devices, such as their smart phones to update likelihood of patients being able to make appointment dates on time during the date of the appointments The computer systems can detect the patients travel locations before the appointment at one or more geo-fences associated with the location of the appointment for determining whether the geographical position is inside or outside the geo-fence to determine likelihood of patient making their appointment ontime, and if time permits registering the patient during their travels to the appointment, and/or sending reminders to the patient of the scheduled appointment time, or determining if the appointment needs to be rescheduled.

The invention relates to a cementing material of steel slag tailings and composite slag micro powder, which comprises the composite slag micro powder and the steel slag tailings, and the weight ratio of the composite slag micro powder to the steel slag tailings is between 1 to 1 and 1 to 3; the specific surface area of the composite slag micro powder is larger than 350 m/kg, the composite slag micro powder comprises a combined material and the slag micro powder, wherein the combined material accounts for 8 to 35 percent of the composite slag micro powder by weight, and the slag micro powder accounts for 65 to 92 percent of the composite slag micro powder by weight; and the combined material comprises gypsum. The cementing material has the advantages that: 1, the method is an effective method utilizing large amount of waste slag; 2, the raw material of the composite slag micro powder has wide source; 3, the steel slag tailings are natural-grade tailings after steel slag wet-type ball milling magnetic separation particles are toughened, and the settled tailings do not need to be dried and are directly used as an auxiliary material; and 4, the steel slag tailings account for large proportion, and can fully utilize waste slag resources.

A system and method for providing a secure computing environment to untrusted computer systems is described. A carrier media and an interface are provided, the interface being connectable to a computer to enable communication between the computer and the carrier media. The carrier media encodes a secure computing environment and a boot system, upon connection of the system via the interface to a computer system and booting of the computer system, the boot system is operative to take over the boot process of the computer system and to authenticate the user, wherein upon successful authentication, the boot system is arranged to load the secure computing environment on the computer system, the secure computing environment being configured to prevent predetermined interaction from outside the secure computing environment when it is running.

The invention provides a key reuse method and a multifunctional key. The key reuse method and the multifunctional key resolve the technical problem of shortage of management in the function management process of passive optical network terminal equipment. According to the technical scheme, a timer is arranged through the motion of the functional key, a plurality of different time lengths can be preset on the timer, and different preset functional operations are triggered according to the time length that the functional key keeps closed. The key reuse method and the multifunctional key strengthen the integrality and flexibility of function management of the passive optical network terminal equipment, and strengthen the practicability of the passive optical network terminal equipment, and provide friendlier user experience for users of the passive optical network terminal. Meanwhile, the key reuse method and the multifunctional key are also suitable for coordinated management on the passive optical network terminal equipment among the users of the passive optical network terminal or network administrators, and reduce the management consumption of network operators or the network administrators.

Provisioning and management resources are drawn from an overall pool of resources. Management and managed resources are then dynamically associated on the network to securely perform requested on-demand management functions. Since the managing system controls the networking between the devices that are managed or provisioned, the linkage of resources incurs a minimal amount of network overhead. Since provisioning resources are themselves dynamically built and automatically associated with the resources being managed, a dramatically reduced management overhead is achieved.

A centralized bandwidth broker (a special network server) functioning as a domain manager in an internet network having differentiated services architecture is responsible for receiving and replying to a large number of requests and for performing huge numbers of resource management tasks at the inter- and intra-domain level. Consequently, it can have scalability issues. According to the invention the bandwidth broker maintains an experience database in addition to information about other aspects of the network, and uses iterative learning for solving scalability issues by using information of previous good experiences to take future resource management decisions. Based on similarity with previous network and request conditions, the new decision can be taken without executing resource intensive algorithms. The database of experience is continuously updated for optimized iterative learning. Processing overhead is reduced, enabling a single bandwidth broker to manage big networks with large numbers of users.

The invention discloses a method and a device for realizing access control. The method comprises the following steps of: setting a shielding rule for the access authority of logical units aiming at a port of an initiator of a host; setting local logical unit numbers for the logical units, and establishing the mapping relationship between the local logical unit numbers and access logical unit numbers by combining the existing access logical unit numbers of the logical units; and according to the mapping relationship established for the logical unit numbers, accessing the logical units by using the set shielding rule through the an initiating port of the host. By adopting the method and the device of the invention, the access authority still can be limited and the access control is realized based on the access authority under the condition that a special hardware facility or special solidified application software does not need to be added in a network, so that the method and the device reduce management overhead without causing additional network burden; and because the settings of shielding and mapping have flexibility, the flexibility of the change of user requirements can be met, the work efficiency of a system is increased, and user satisfaction is improved.

The invention relates to the field of internet communication and particularly discloses a method for access control based on MAC address conversion in an IPv6 wireless router. The method comprises a first step of distributing a global IP address to a node of an intranet; a second step of performing communication between IPv6 users in a subnet, and enabling the communication process to be consistent with a communication mode in a normal IPv6 subnet; and a third step of performing communication between intranet IPv6 users and extranet IPv6 users. Compared with the prior art, the method has the advantages that an authentication technology based on IPv6 addresses can be achieved conveniently, various unsafety problems caused by NAT conversion in an IPv4 network are solved simultaneously, security event location and tracking based on the IPv6 addresses can be achieved conveniently, outside attack can be resisted effectively, intranetwork safety is guaranteed well, and an MTPF technology improves working efficiency of the wireless router.