505 results about "Rule processing" patented technology

A runtime adaptable search processor is disclosed. The search processor provides high speed content search capability to meet the performance need of network line rates growing to 1 Gbps, 10 Gbps and higher. he search processor provides a unique combination of NFA and DFA based search engines that can process incoming data in parallel to perform the search against the specific rules programmed in the search engines. The processor architecture also provides capabilities to transport and process Internet Protocol (IP) packets from Layer 2 through transport protocol layer and may also provide packet inspection through Layer 7. Further, a runtime adaptable processor is coupled to the protocol processing hardware and may be dynamically adapted to perform hardware tasks as per the needs of the network traffic being sent or received and/or the policies programmed or services or applications being supported. A set of engines may perform pass-through packet classification, policy processing and/or security processing enabling packet streaming through the architecture at nearly the full line rate. A high performance content search and rules processing security processor is disclosed which may be used for application layer and network layer security. scheduler schedules packets to packet processors for processing. An internal memory or local session database cache stores a session information database for a certain number of active sessions. The session information that is not in the internal memory is stored and retrieved to/from an additional memory. An application running on an initiator or target can in certain instantiations register a region of memory, which is made available to its peer(s) for access directly without substantial host intervention through RDMA data transfer. A security system is also disclosed that enables a new way of implementing security capabilities inside enterprise networks in a distributed manner using a protocol processing hardware with appropriate security features.

Embodiments of the present invention address deficiencies of the art in respect to privacy compliance assessment for computer software and provide a method, system and computer program product for a privacy model framework for software applications. In one embodiment, a privacy modeling data processing system can be provided. The privacy modeling data processing system can include a modeling framework configured for communicative coupling to a software application. The modeling framework can capture information flows from requests to and responses from a coupled software application, and can rules-based process the captured information flows for privacy rules to generate a privacy compliance report for the software application.

The system and method for streaming media to a viewer and managing the media comprises and an enhanced service routing processor (ESRP), a real time switch management system (RTSMS), a name routing processor (NRP), and a managed media switch (MMS). The RTSMS has a reservation system. The ESRP receives media from an owner, manages the media according to media rules and order rules defined by the owner, and distributes the media to one or more switches, such as the MMS, according to the media rules and the order rules. The RTSMS is configured to receive the media rules and to receive a viewer's media request via the reservation server. The reservation system of the RTSMS processes the media request according to the media rules and builds a reservation for the requested media. The RTSMS generates the reservation to the viewer and to the NRP. The NRP receives the reservation data from the viewer and from the RTSMS. The NRP processes the reservation data and locates an MMS that can stream the media to the viewer. The NRP transmits the IP address of the MMS to the viewer and transmits the reservation data to the MMS. The viewer initiates a session or connection with the MMS using the reservation number. If the reservation data from the viewer matches the reservation data from the NRP, the MMS streams the media to the viewer.

A method and system and computer readable medium for: (1) the creation and representation of business rule definitions, (2) the creation and representation of enforcing rule handlers, (3) the creation and representation of a framework to check the existence of rules then, apply the appropriate handler, (4) and the distribution of the rule definitions and handlers to clients. The present invention defines a rule language and provides a framework that separates the definition of the rules, the enforcing handler, the system at which rules are generated and the system at which rules are enforced. Further, in one embodiment, the present invention uses standard XML notations to define rules and standard XSL and XSLT processing instructions to enforce rules. Using standard XML, XSL and SXLT allows clients to use off-the-shelf XML parser and XSL processors in lieu of developed code or rule based engines.

The invention is a method and a system for the providing of service to user equipment (UE). A method of providing services to user equipment in accordance with the invention includes providing from a database (420) to a policy decision entity (405) subscriber information regarding permitted conditions for the users to obtain the services; providing service information from at least one network or server (100), regarding service offered by the at least one network or server to the user equipment, forming policy rules at the policy decision entity based upon the subscriber information and the service information. A requesting user equipment transmits a request for service to the communications network which is processed by the policy decision entity in accordance with the policy rules to determine if the service is to be allowed and if the service is allowed characteristics of the service to be provided to the requesting user equipment and the policy enforcement entity enforces at least one characteristic of an allowed service upon the communication network to insure that the allowed service obtained by the requesting user equipment has the at least one characteristic of the allowed service.

The invention provides improved computer network firewalls which include one or more features for increased processing efficiency. A firewall in accordance with the invention can support multiple security policies, multiple users or both, by applying any one of several distinct sets of access rules. The firewall can also be configured to utilize “stateful” packet filtering which involves caching rule processing results for one or more packets, and then utilizing the cached results to bypass rule processing for subsequent similar packets. To facilitate passage to a user, by a firewall, of a separate later transmission which is properly in response to an original transmission, a dependency mask can be set based on session data items such as source host address, destination host address, and type of service. The mask can be used to query a cache of active sessions being processed by the firewall, such that a rule can be selected based on the number of sessions that satisfy the query. Dynamic rules may be used in addition to pre-loaded access rules in order to simplify rule processing. To unburden the firewall of application proxies, the firewall can be enabled to redirect a network session to a separate server for processing.

In a communication apparatus processing a packet transmitted/received by a device connected to a network, an identifying/processing policy storing portion stores a basic identifying policy and processing policy for determining an identification and processing of a packet corresponding to transmitted information from a device, a transmitted information extractor extracts the transmitted information, and a controller determines a rule for identifying and processing a received packet based on the identifying policy and the processing policy corresponding to the transmitted information extracted and prepares an identifying rule/processing rule setting table which indicates the rule. A packet processing identifies the received packet based on the identifying rule and processes the identified packet based on the processing rule.

A gateway switch comprises: two or more transceiving modules, wherein each of the transceiving modules is capable of transmitting and receiving data, wherein the data is an analog signal or a digital signal, and wherein each of the transceiving modules provides a different network connection type; a system module for processing the received data in accordance with one or more rules; and a switching module for symmetrically switching the processed data from any one of the transceiving modules to a selected one of the transceiving modules for transmission of the processed data; wherein the system module selects one of the transceiving modules for the transmission of the processed data as a function of the rules.

The invention relates to a multiple QoS file system and methods of processing files at different QoS according to rules. The invention allocates multiple VLUNs at different qualities of service to the multiQoS file system. Using the rules, the file system chooses an initial QoS for a file when created. Thereafter, the file system moves files to different QoS using rules. Users of the file system see a single unified space of files, while administrators place files on storage with the new cost and performance according to attributes of the files. A multiQoS file system enhances the descriptive information for each file to contain the chosen QoS for the file.

A digital image signal is transformed in frequency, thereby providing partitioned frequency components. Characteristic information is calculated in accordance with a coefficient at a first frequency domain that is selected from among the partitioned frequency components. A coefficient at a second frequency domain is handled in accordance with predetermined rules, thereby embedding the characteristic information into the coefficient at the second frequency domain. The second frequency domain is selected from among areas that differ from the first frequency domain. The frequency coefficients that exhibit several frequency components are encoded in a predetermined manner, thereby producing compressed image data.

An apparatus (101) comprises a content item receiver (201) which receives a content item such as a digital photo or an audio or video clip. A user preference model (205) generates data indicative of user preferences for content item access. An access rule processor (203) determines a set of self-governance rules for the first content item in response to the user preference model. The self-governance rules are indicative of allowable actions for the first content item in other devices. A file processor (207) includes the set of self-governance rules with the content item and a network interface (209) transmits the content item to a second apparatus (103). The second apparatus (103) comprises functionality for restricting access to the content item in accordance with the set of self-governance rules. The invention may provide improved access rights management and in particular for personal content items.

A centralized rules repository maintains consistently expressed rules used to process patient claim data in supporting medical procedure eligibility verification, patient referrals, treatment authorization, data entry editing, electronic claim submission, claim status determination and electronic remittance processing. A system for managing rules used for processing claim data related to provision of healthcare to a patient includes an interface processor for acquiring data representing rules from a plurality of different sources. The system includes a rules repository for accumulating data representing acquired rules and a rules processor for initiating application of a selected rule derived from the repository to process claim data in response to a received message. A result processor processes a result being derived by the application of the selected rule to the claim data for output. The interface processor also transforms acquired rules to a common syntax suitable for storage in the rules repository.

A framework for combining a weather risk analysis with appropriate operational rules includes a data initialization component, a rules processing component, and one or more weather risk analysis and assessment tools to evaluate a flight condition. The framework applies current, historical, predicted and forecasted weather data to the one or more operational rules governing a mission, a payload, a flight plan, a craft type, and a location of the mission for aircraft such as an unmanned aerial vehicle or remotely-piloted vehicle, and generates advisories based on the evaluation of flight conditions such as a mission compliance status, instructions for operation of unmanned aircraft, and management advisories. The flight condition advisories include either a “fly” advisory or a “no-fly” advisory, and the framework may also provide a mission prioritization and optimization system.

The present invention captures streaming data and avoids continual retrieval. The invention only looks at data once, has a time dependency built into it, and data that is not consumed or relevant is discarded. The invention includes an engine processor that processes data according to stored information; stored rules that define engine operation, an input events module for receiving events which provides a plurality of events. Events are processed according to stored rules for generating a series of valid results when input events match the rules. Rule states that have been matched to an input event but have not produced a valid result are stored in state storage. The state of a rule as stored enables the engine to provide a valid result output upon a future reception of an input event necessary to complete the rule. Transaction log module monitors the operation of the engine for specified time period.

In some embodiments, a method may include establishing a set of distributed ledgers. Each distributed ledger (or blockchain) may include a unique root key that is specific to the client. A series of rules for data handling and/or manipulation may be produced, and the data is handled according to such rules. An entry may be added to the ledger for each transaction, and the ledger is distributed to those end point associated with the client. In the event of an invalid (or unauthorized) transaction, a “side branch” (or “fault branch”) may be added to the ledger, thus easily identifying the transaction as being invalid to the client.

A rule processor and method for using the same are disclosed. In one embodiment, the rule processor comprises a general purpose register file, an instruction sequencer to provide instructions, a decoder coupled to the general purpose register file to decode a set of instructions specified by the instruction sequencer, and a state machine unit coupled to the decoder and having state machine registers to store one or more state machines and state machine execution hardware coupled to the state machine registers to evaluate the one or more state machines in response to executing one or more of the set of instructions and based on information from one or both of the decoder and the general purpose register file.

A method and apparatus is disclosed herein for a rule processor for conducting contextual searches, the processor comprising a plurality of input payload search registers, search execution engine coupled to the plurality of search registers to perform one or more contextual searches on content in the search registers by via parallel pattern matching in response to executing rules specifying the one or more searches, and presenting one or more patterns to the content in the search registers.

A packet classification method through hierarchical rulebase partitioning. The packet classification method for searching for a rule having a highest priority and matching among a plurality of rules included in a specified rulebase with respect to a packet input from an external network and processing the packet according to the searched rule. The method includes: a preprocessing step of partitioning the rulebase into a plurality of independent sub-rulebases based on a specified condition and producing a hash table on the basis of the sub-rulebases; and a classification step of classifying the packet by searching the hash table using a hash key extracted from a packet header of the inputted packet and mapping the packet on the sub-rulebase corresponding to the packet.

A method and structure for a set of rules processed by combining a procedural rule engine and a pattern matching inference engine to compute and apply discounts to customer orders in an electronic commerce system. The rule processing occurs in multiple phases. First all applicable discounts are computed. Then all allowable subsets of discounts are computed. Finally, a set of discounts is selected, based on business policies, and the discounts are applied to the order line items.

Handling a packet according to a gateway rule in a network gateway device ensures security. Centrally controlling the gateway rule in an administration center eliminates the need for individual user's consciousness of operation such as a firewall, which makes a network gateway system easy to use. Also, under certain conditions, the packet is handled according to a gateway rule in the network gateway device to reduce a network load. The administration center that holds and creates a gateway rule is provided. The network gateway device holds the gateway rule. When receiving a packet, if a gateway rule corresponding to the packet exists, the received packet is handled according to the gateway rule. If no gateway rule corresponding to the packet exists, the packet is transferred to the administration center, and then the corresponding gateway rule is received from the administration center so that update is performed.