9497results about How to "Avoid spreading" patented technology

A method for processing communication traffic includes monitoring the communication traffic that is directed to a group of addresses on a network, and determining respective baseline characteristics of the communication traffic that is directed to each of the addresses in the group. Deviations from the respective baseline characteristics of the communication traffic directed to at least one of the addresses in the group are detected, as an indication that at least some of the communication traffic may be of malicious origin. Responsively to detecting the deviation, the communication traffic that is directed to all of the addresses in the group is filtered so as to remove at least some of the communication traffic that is of the malicious origin.

Malicious network activities do not make use of the Domain Name System (DNS) protocol to reach remote targets outside a local network. This DNS-based enforcement system for confinement and detection of network malicious activities requires that every connection toward a resource located outside the local network is blocked by default by the local enforcement box, e.g. a firewall or a proxy. Outbound connections are allowed to leave the local network only when authorized directly by an entity called the DNS Gatekeeper.

To decentralize concentration of clients of a wireless LAN to a service apparatus of the wireless LAN. When a service apparatus detects a predetermined state, the service apparatus selects one of plural client apparatuses connected to the own apparatus and selects a client apparatus to which connection should be cut when the predetermined state is detected. The service apparatus determines another service apparatus to be a redirection destination of the client through communication with other service apparatuses which are capable of establishing connection with the client. The service apparatus gives control information to the other service apparatuses and inhibits transmission of a response, which indicates that connection with the client is possible, corresponding to a probe request from the client apparatus for a given period of time. On the other hand, the determined another service apparatus responds to the probe request and the other services apparatuses inhibit transmission of a response, which indicates that connection with the client is possible, for a given period of time in response to the probe request.

The present invention provides methods and system for managing neurological disorders such as epilepsy. In one embodiment, the method comprises measuring one or more signals from a patient and processing the one or more signals to characterize a patient's propensity for a future seizure. The characterized propensity for the seizure is thereafter used to determine an appropriate action for managing or treating the predicted seizure; and a recommendation is communicated to the patient that is indicative of the appropriate action.

This invention relates to a spinal facet joint ligament.

This invention relates to methods for treating or preventing hepatitis C virus infections in mammals using Toll-Like Receptor (TLR)7 ligands and prodrugs thereof. More particularly, this invention relates to methods of orally administering a therapeutically effective amount of one or more prodrugs of TLR7 ligands for the treatment or prevention of hepatitis C viral infection. Oral administration of these TLR7 immunomodulating ligands and prodrugs thereof to a mammal provides therapeutically effective amounts and reduced undesirable side effects.

A plasma processing apparatus is provided that is configured to supply a gas into a chamber, generate a plasma from the gas using a power of an electromagnetic wave, and perform a predetermined plasma process on a substrate that is held by a mounting table. The plasma processing apparatus includes a dielectric window through which the electromagnetic wave that is output from an electromagnetic wave generator is propagated and transmitted into the chamber, a support member that supports the dielectric window, a partition member that separates a space where the support member is arranged from a plasma generation space and includes a protrusion abutting against the dielectric window, and a conductive member that is arranged between the partition member and the dielectric window and is protected from being exposed to the plasma generation space by the protrusion.

A semiconductor structure is provided that includes a V_t stabilization layer between a gate dielectric and a gate electrode. The V_t stabilization layer is capable of stabilizing the structure's threshold voltage and flatband voltage to a targeted value and comprises a nitrided metal oxide, or a nitrogen-free metal oxide, with the proviso that when the V_t stabilization layer comprises a nitrogen-free metal oxide, at least one of the semiconductor substrate or the gate dielectric includes nitrogen. The present invention also provides a method of fabricating such a structure.

The invention is directed to 3-β-D-ribofuranosylthiazolo[4,5-d]pyridimine nucleosides and pharmaceutical compositions containing such compounds that have immunomodulatory activity. The invention is also directed to the therapeutic or prophylactic use of such compounds and compositions, and to methods of treating diseases and disorders described herein, by administering effective amounts of such compounds.

A piezoelectric substrate is fixed to the movable plate or the support substrate directly or through a drive electrode of the piezoelectric substrate. When a pressure on an input operation surface is detected, a drive voltage is impressed on the drive electrodes of the piezoelectric substrate. In response, the piezoelectric substrate vibrates the movable plate or the support substrate, thereby providing tactile feedback to an operator. Because the movable plate or the support substrate directly vibrates without an independent vibrating source, there is no energy loss or transmission delay caused by transmitting the vibration, and finely control of the contraction and expansion of the piezoelectric substrate allows fine control of the vibration. In one embodiment, the drive voltage is modulated with signals dependent on the location of the pressure. In another embodiment, the drive voltage is modulated with audio frequencies to create a speaker.

The present invention is a computer system and a method for gathering, processing and analysis of network information resulting in presentation and visualization of packet networks in the form of individual virtual flows, sometimes also called connections or sessions, containing their statistical characteristics in a time-sampled dynamics. The system, deployed as a separate device or co-hosted with other network devices, collects and processes information from all valid packets in network, classifies and maps gathered statistics to the statistics of relevant virtual flows. The statistical information is further processed by the system to provide near-real presentation, as well as stored in a searchable database for future analyses. The invention to be used by network engineers and administrators as a tool for a near real-time control of network traffic, as an analytical tool for solving network bottlenecks, network performance optimization and troubleshooting analyses, cutting costs by optimizing network layout, appropriate organization of traffic and intelligent configuration of QoS, routers and other network devices.

A reprogrammable packet processing system for processing a stream of data is disclosed herein. A reprogrammable data processor is implemented with a programmable logic device (PLD), such as a field programmable gate array (FPGA), that is programmed to determine whether a stream of data applied thereto includes a string that matches a redefinable data pattern. If a matching string is found, the data processor performs a specified action in response thereto. The data processor is reprogrammable to search packets for the presence of different data patterns and/or perform different actions when a matching string is detected. A reconfiguration device receives input from a user specifying the data pattern and action, processes the input to generate the configuration information necessary to reprogram the PLD, and transmits the configuration information to the packet processor for reprogramming thereof.

A multi-application IC card may include a runtime environment for managing executions of a plurality of stored application. Each application may include a set of rules, to be satisfied by their execution, and a corresponding set of reactions, to be taken if the rules are not satisfied. The runtime environment may include security and reaction registers to reference, respectively, the set of rules and reactions associated with the applications. A security policy manager may initialize, for each application, a reference between the security registers and the rules set between the reactions register and the reactions set. Checking the rules set and/or an activation of the reactions set is controlled by the security policy manager through the security registers and reaction registers. The security policy manager may include a registration function for initializing the security and reaction registers. The registration function may be called from the applications or an administrative user.

On a semiconductor substrate a silicon oxide film is formed and provided with a recess. In the recess a reflector layer of copper is disposed as a blocking layer with a barrier metal posed therebetween. The reflector layer of copper is covered with a silicon oxide film and thereon a fuse region provided with a plurality of fuses is provided. The reflector layer of copper has a plane of reflection recessed downward to reflect a laser beam. The reflector layer of copper is arranged to overlap substantially the entirety of the fuse region, as seen in a plane. A laser beam radiated to blow the fuse can have a reduced effect on a vicinity of the fuse region. A semiconductor device reduced in size can be obtained.

A system, method and computer program for programming a medical device to administer a medication to a patient includes the medical device, a scanner that may be associated with a point of care (POC) system, and a medication management unit (MMU). A computer in the POC system can directly program the medical device with the permission of the MMU after a full “five rights” check or the “right patient” check can be delayed until after the pump program is downloaded. Other workflows are disclosed for programming the medical device in manual, semi-automatic and automatic modes, with safety checks incorporated at various points.

The invention in the preferred embodiment features a system (200) and method for automatically segregating harmful traffic from other traffic at a plurality of network nodes including switches and routers. In the preferred embodiment, the system (200) comprises an intrusion detection system (105) to determine the identity of an intruder and a server (130) adapted to automatically install an isolation rule on the one or more network nodes (114, 115, 116) to quarantine packets from the intruder. The isolation rule in the preferred embodiment is a virtual local area network (VLAN) rule or access control list (ACL) rule that causes the network node to route any packets from the intruder into a quarantine VLAN or otherwise isolate the traffic from other network traffic. In large networks, the isolation rule may be installed on a select plurality of network nodes under the gateway router (104) associated with the node at which the intruder first entered the network (100).

The present invention is generally directed to dermatological devices and methods in which one or more skin characteristics, such as the melanin index, are determined by analyzing radiation backscattered from a skin region illuminated by at least one, and preferably, two or more wavelengths, e.g., in a range of about 600 nm to about 900 nm. In many embodiments, the radiation is coupled to the skin via a waveguide, and an optical sensor is employed to ascertain contact between the waveguide (e.g., a waveguide surface adapted for contact with the skin) and the skin.

A radioterminal may include a transceiver, a hand-held interface coupled to the transceiver, and an interlock coupled to the transceiver. The transceiver may be configured to transmit and receive wireless communications, and the transceiver may be further configured to transmit high power communications at a high maximum power and/or EIRP and to transmit low power communications at a low maximum power and/or EIRP. The interlock may be configured to prevent the transceiver from transmitting high power communications at a power and/or EIRP that exceeds a threshold when the hand-held interface is activated. Related methods are also discussed.

A system, method and computer program for programming a medical device to administer a medication to a patient includes the medical device, a scanner that may be associated with a point of care (POC) system, and a medication management unit (MMU). A computer in the POC system can directly program the medical device with the permission of the MMU after a full “five rights” check or the “right patient” check can be delayed until after the pump program is downloaded. Other workflows are disclosed for programming the medical device in manual, semi-automatic and automatic modes, with safety checks incorporated at various points.

The present invention provides a treatment apparatus. The apparatus contains a reservoir or generator for a treatment solution, a mechanism for delivering the treatment solution to a wound site, and a mechanism for applying the solution to a wound, tissue, bone or surgical cavity for treatment. The apparatus may apply the solution (e.g., a solution containing hypohalous acid) with, for example, an occlusive wound dressing, pulsative lavage device, hydrotherapy, hydrosurgical device, and/or ultrasound. A waste container may be operably connected to the apparatus for collecting waste from the wound by run-off, or by applying negative pressure (e.g. a vacuum). Because the apparatus of the invention can optionally be portable or mobile, the invention is suitable for use in hospitals and nursing homes, as well as for home wound care. The invention also provides a method for treating a wound (or other area needing treatment), and/or for reducing wound bioburden, by supplying a hypochlorous acid solution to the site, such as a wound colonized or infected with drug resistant bacteria, before, during, or after negative pressure wound therapy.

Freeze wells may be used to isolate an area for soil remediation. Freeze wells may form a frozen barrier around a treatment area. The frozen barrier may inhibit fluid from entering into the treatment area. The frozen barrier may also inhibit migration of contamination out of the treatment area. The frozen barrier may be used to surround all of the perimeter of the treatment area. A frozen barrier may also be formed above or below a treatment area. Freeze wells may be activated in advance of soil remediation so that a frozen barrier is formed when soil remediation is begun. The soil remediation may be accomplished by any type of soil remediation system, including a thermal soil remediation system. Heaters of a thermal soil remediation system may be may be placed close to the frozen barrier without the barrier being broken through during remediation.

A system, method and computer program for programming a medical device to administer a medication to a patient includes the medical device, a scanner that may be associated with a point of care (POC) system, and a medication management unit (MMU). A computer in the POC system can directly program the medical device with the permission of the MMU after a full “five rights” check or the “right patient” check can be delayed until after the pump program is downloaded. Other workflows are disclosed for programming the medical device in manual, semi-automatic and automatic modes, with safety checks incorporated at various points.

Datacenter clusters often employ live virtual machine (VM) migration to efficiently utilize cluster-wide resources. Gang migration refers to the simultaneous live migration of multiple VMs from one set of physical machines to another in response to events such as load spikes and imminent failures. Gang migration generates a large volume of network traffic and can overload the core network links and switches in a data center. The present technology reduces the network overhead of gang migration using global deduplication (GMGD). GMGD identifies and eliminates the retransmission of duplicate memory pages among VMs running on multiple physical machines in the cluster. A prototype GMGD reduces the network traffic on core links by up to 51% and the total migration time of VMs by up to 39% when compared to the default migration technique in QEMU/KVM, with reduced adverse performance impact on network-bound applications.