Xerox Corporation

Palo Alto Research Center Inc.

Trevor F Smith

Mark Webster Newman

Jana Zdislava Sedivy

Shahram Izadi

Warren Keith Edwards

Karen Marcelo

Jason I Hong

Diana Kathryn Smetters

W Keith Edwards

Dirk Balfanz

Ian E Smith

Mark A Howard

Nicolas B Ducheneaut

Paul J Stewart

Glenn Edward Durfee

Victoria M E Bellotti

Hao-Chi Wong

Jana Zdlslava Sedivy

Kyung-Hee Lee

A token has a memory, an interface allow connection to a host, and a processor. The processor, in response to user input for configuring a remote access connection, executes a first set of processing instructions to establish a trusted connection with the server host, exchanges credentials over the trusted connection to establish a secure connection with the server host over an untrusted connection, and defines configuration information for accessing user selected data or services. The processor, in response to user input received in a legacy environment, executes a second set of processing instructions that includes establishing, over an untrusted connection, a secure connection with the server host using the security credentials, configuring the secure connection for access to the data or services, making the data or services available in the legacy environment, and defends against attempted access to data or services available at the token other than the data or services made available in the legacy environment.

Wormhole devices for usable secure access to remote resource

A system and method for facilitating cognitive processing of simultaneous remote voice conversations is provided. A plurality of remote voice conversations participated in by distributed participants are provided over a shared communication channel. A main conversation between at least two of the distributed participants and one or more subconversations between at least two other of the distributed participants are identified from within the remote voice conversations. Segments of interest to one of the distributed participants are defined including a conversation excerpt having a lower attention activation threshold for the one distributed participant. Each of the subconversations is parsed into conversation excerpts. The conversation excerpts are compared to the segments of interest. One or more gaps between conversation flow in the main conversation are predicted. Segments of interest are selectively injected into the gaps of the main conversation as provided to the one distributed participant over the shared communications channel.

System and method for facilitating cognitive processing of simultaneous remote voice conversations

Spray bottle container

A system and method for providing self-installing software components for network service execution is presented. A basic communication framework is established with a service host system executing a network service software component to provide a network service. Availability of the network service software component is determined and prerequisites against a runtime environment are verified through the service host system. A code bundle providing the network service software component through the service host system logically grouped with installation instructions for the network service software component is executed.

Self-installing software components for network service execution

System and method for providing secure resource management. The system includes a first device that creates a secure, shared resource space and a corresponding root certificate for the shared space. The first device associates one or more resources that it can access with the shared space. The first device invites one or more other devices to join as members of the space, and establishes secure communication channels with the devices that accept this invitation. The first device generates a member certificate for each accepting device, and sends the root certificate and the generated member certificate to the device through the secure channel. These devices may then access resources associated with the shared space by presenting their member certificates. Further, members of the shared space may invite other device to join the space, and may create member certificates in the same manner as the first device.

System and method for providing secure resource management

A method of accessing a data resource identifies the data resource, the data resource accessible through a first device and associated with a resource locator, the first device configured to provide access to the data resource responsive to possession of a whitelisted credential. The method includes receiving a second-device credential from a second device by a personal domain controller, the personal domain controller and the first device within a first trusted relationship and provides, by the personal domain controller, the second-device credential to the first device for whitelisting subject to the first trusted relationship. The method uses, by the second device, the second-device credential to access the data resource responsive to the resource locator.

Personal domain controller

One embodiment of the present invention provides a system that facilitates dynamic delivery of service profiles to a client. During operation, the system performs a discovery operation to allow the client to discover new services on a network. If a new service is discovered for which the client does not possess a service profile, the client to obtains the service profile from the new service and subsequently installs it, thereby enabling the client to interact with the new service.

Method and apparatus for dynamically delivering service profiles to clients

Methods, apparatus and program products for using historical contextual data in a ubiquitous computing environment. The historical contextual data can be dispersed among components in an environment or logging services as well as stored on a particular component or logging service. The historical contextual data can be used to help create or re-create component configurations within the relevant environment through the use of abstract applications and abstract components. Abstract applications can be specified to create connections with specific components. Abstract applications can also be generalized so that they need not create connections with specific components, but can create component connections that perform a desired function by determining which components to use from the available components, and how to connect the selected components to perform the function.

Methods, apparatus, and program products for abstract applications/components in a ubiquitous computing environment

An Internet-scale file sharing system includes a client-side file sharing application that allows file-sharing users to identify files to share and transmit metadata corresponding to those files to a metadata repository. A server-side application operating on the metadata repository tracks metadata received from associated file-sharing users, as well as metadata from other affiliated metadata repositories. Each metadata repository acts as a search engine for any querying users and can provide search results based on locally stored metadata alone. Each metadata repository may additionally choose to locally-store popular files from an associated file-sharing user so as to alleviate transmission burdens on that file-sharing user. Associated metadata repositories each periodically synchronize their stored metadata so that all metadata repositories may generate similar search results. In such manner, file-sharing queries need only be performed by the metadata repository receiving the query, and not by all associated metadata repositories.

Multi-tiered structure for file sharing based on social roles

A system for enabling components on arbitrary networks to communicate includes a plurality of arbitrary components, such as computers, servers, laptops, facsimile machines, copier machines and cellular telephones, including applications operating on those components, such as word processing or data base applications, connected together by one or more networks that may use the same or different protocols. A method includes a first component, such as a computer, obtaining aggregate objects from other components, such as a laptop or server. Each of the aggregate objects are associated with discovered component objects of the other components, such as the laptop or server. The first component selects at least one of the components associated with the aggregate objects, and invokes universal interfaces associated with the selected arbitrary components to communicate with other arbitrary components.

System and method for enabling components on arbitrary networks to communicate

Methods, systems, apparatus and program products for gathering contextual history from components in an environment and applying an operation on the gathered history to assist a user in selecting which components to use in the environment.

Methods, apparatus, and program products for configuring components in networked computing environments

Methods and systems for enabling arbitrary components to control communications, such as data transfers, without having or requiring prior knowledge of each other. The system includes a component that creates controller objects for a communication, such as a data transfer involving several components. Further, the component associates the controller objects with a communication session object of the data transfer, such as a data transfer session object. One or more of the components involved in the data transfer obtain the controller objects through the data transfer session object and execute source-specific instructions included in the obtained controller objects to generate user interfaces. The user interfaces enable the components to control aspects of the communication, such as the data transfer.

System and method for controlling communication

A system and method for assessing component capability to accept and execute mobile code includes a first component coupled via a network to a second component. The first component uses a predicate object to determine whether the second component can accept mobile code, such as a data type handler object or an applet. The instructions included in the predicate object are executed in the environment of the second component, although they can be executed in the first component environment. The execution of these instructions in the second component environment causes the second component to respond to a series of basic tests, such as whether the second component has access to required libraries, software versions and/or peripherals. Additionally, a predicate object creation module is disclosed for generating predicate objects that are specific to the objects desired, such as a data type handler object or a controller object.

System and method for assessing component capabilities

System and method for enabling arbitrary components to control communications without having or requiring prior knowledge of each other. The system includes a first component that creates controller objects and provides the objects to other components. The controller objects include instructions which when executed by the other components enable the components to generate user interfaces for controlling the first component. Further, the controller objects are encrypted and are used to authenticate the senders or receivers of the objects.

System and method for securely controlling communications

Handling data at one of a plurality of components, wherein the plurality of components includes at least a sink component and a source component. The source component transfers data to the sink component, and the sink component accesses an obtained data type handler object to invoke an interface implemented by the handler object. The invoked type handler interface includes source-specific instructions that are executed by the sink component regardless of whether the data is a format that the sink natively understands.

Growing community of inventors

Seattle, WA, United States of America

Trevor F Smith