255results about How to "Simplified management" patented technology

A unified policy management system for an organization including a central policy server and remotely situated policy enforcers. A central database and policy enforcer databases storing policy settings are configured as LDAP databases adhering to a hierarchical object oriented structure. Such structure allows the policy settings to be defined in an intuitive and extensible fashion. Changes in the policy settings made at the central policy server are automatically transferred to the policy enforcers for updating their respective databases. Each policy enforcer collects and transmits health and status information in a predefined log format and transmits it to the policy server for efficient monitoring by the policy server. For further efficiencies, the policy enforcement functionalities of the policy enforcers are effectively partitioned so as to be readily implemented in hardware. The system also provides for dynamically routed VPNs where VPN membership lists are automatically created and shared with the member policy enforcers. Updates to such membership lists are also automatically transferred to remote VPN clients. The system further provides for fine grain access control of the traffic in the VPN by allowing definition of firewall rules within the VPN. In addition, policy server and policy enforcers may be configured for high availability by maintaining a backup unit in addition to a primary unit. The backup unit becomes active upon failure of the primary unit.

Access Control Lists (ACLs) are used to describe the permitted actions (permissions) on protected network computer system resources or objects associated with an client or user identity. An identity may be an individual user or group of users. The actions are used to represent the different access methods available on a particular projected object or resource. A new action grouping mechanism is provided which tags each action with an action group name. The grouping of actions facilitates a larger permission set to be defined in an ACL, whereas action permission indicators can be reused for unique action definitions within various action groups. This effectively extends the finite total number of permissions available within a security system, allows a more descriptive and extensible permission mechanism in an Access Control List, as well as aiding in the simplification of management and definition of security policies.

The computer readable medium has embodied thereon a file management program for processing by a computer, the file management program comprising: a first code segment for, when an icon of a first folder displayed on a display apparatus is dragged and dropped onto another icon of a second folder displayed on the display apparatus, creating a third folder at the same level as the second folder; and a second code segment for copying a file stored in the first folder and a file stored in the second folder into the third folder.

A method of allocating regions of memory including the steps of allocating a corresponding plurality of portions of memory for use by the process and marking regions of memory that are allocated with markers. A start of a region is marked with one of the markers and an end of a region is marked with a further one of the markers, the further one of the markers having a later relative time indication and marking a next allocated region. In response to determining that a region of allocated memory bounded by two of the markers is no longer required by the process, deleting an older of the two markers; and in response to detecting deletion of an oldest one of the markers, deallocating the region of memory up to a new oldest pending marker.

A rotationally symmetrical anti-collision light (100, 200) for an aircraft utilizing light-emitting diodes (LEDs) is mounted to the fuselage of an aircraft. The LEDs (10, 10′, 20, 20′) may be configured in one or more concentric rings. The anti-collision light includes a reflector (30, 30′) configured to redirect the light emitted by at least one of the rings, so that the light pattern satisfies predetermined specifications.

A method and apparatus for converting thermal energy to mechanical energy which can use a wide range of fuels and perform with a high efficiency. Operating on a little utilized thermodynamic cycle of isentropic compression, isothermal expansion, isentropic expansion and finally constant pressure cooling and contraction. The external heat engine utilizes a heat exchanger carrying heat from the external energy source to the working parts of the engine. Pistons and cylinders are activated by appropriate means to adiabatically compress the working fluid, for example ambient air, to transfer the entire mass of the air through the heat exchanger to accomplish isothermal expansion followed by adiabatic expansion and, finally, exhaust the air to ambient to allow for constant pressure cooling and contraction. Valve pistons in conjunction with the cylinders form valves that allow for the exchange of working fluid with ambient. Energy is added to the engine during isothermal expansion, whereby the energy of compression is added by a flywheel or other appropriate energy storage means, said flywheel stores energy recovered during adiabatic expansion. The thermodynamic cycle described and the engine embodiments disclosed, when run in reverse, perform as a heat pump or refrigeration device.