text:
Filtering techniques for managing access to internet sites or other software applications
A method and system for providing flexible access resources or services related to particular software applications are described. The system includes a database of Internet sites that have been categorized so that the system determines the category of information that a user is accessing on the Internet. The system is also programmed so users are only allowed to access sites a limited number of times. The system is further programmed to limit a user's access to the Internet based on the network's current bandwidth usage. Moreover, users can requested a postponed access, wherein the resource or service they are requesting is stored to a server, and available to the user at a later time. In addition, if a user chooses to access a resource or service that is within certain predefined categories, they are presented with the option of retrieving the resource or service, but notified that their access will be logged to a file.
Hegli, Ronald Bjorn (San Diego, CA, US)
Hal Jr., Case Lonas (Carlsbad, CA, US)
Kester, Harold (Cardiff, CA, US)
HEGLI RONALD BJORN
LONAS HAL CASE
KESTER HAROLD
G06F13/00; G06F21/20; H04L29/06; H04L29/08; (IPC1-7): G06F15/173
20070118643 Method and system for network planning May, 2007 Mishra et al.
20070290831 Configuring actionable alerts December, 2007 Kalinichenko et al.
20010039592 Web address assignment process November, 2001 Carden
20070088791 Email Server Performing Email Job Processing for a Given User and Related Methods April, 2007 Clarke
20050039123 Method and system for importing, creating and/or manipulating biological diagrams February, 2005 Kuchinsky et al.
20100057908 CENTRALIZED CONTROL PLANE APPLIANCE FOR VIRTUAL INFRASTRUCTURE March, 2010 Smith et al.
20060271644 Generating web service without coding logic with a programming language November, 2006 Yamaizumi et al.
20090132633 DYNAMIC CONTENT PIPELINE May, 2009 Jaffe et al.
20060031367 Instant messaging and presence using virtual devices February, 2006 Buford et al.
20080152145 ASSET BRING-OUT MANAGEMENT SYSTEM, ASSET BRING-OUT MANAGEMENT METHOD, BROUGHT OUT ASSET, BROUGHT OUT ASSET CONTROL PROGRAM June, 2008 Fujioka
20060206616 Decentralized secure network login September, 2006 Brown
CALDWELL, ANDREW T
Schwegman Lundberg & Woessner / Forcepoint (Minneapolis, MN, US)
1. A system for controlling user access to categories of Internet sites between an area network and an Internet, comprising: a categorized database of Internet sites; a first module configured to reference the categorized database and determine the category of Internet site that is being requested by a user; a second module configured to determine a data transfer rate between the area network and the Internet; a categorized database of threshold values; and a third module configured to compare the data transfer rate to the categorized database of threshold values and, responsive to the comparison, blocking the user's further access to the site.
2. The system of claim 1, wherein the categorized database of threshold values includes an array of categories of Internet sites, each category including an associated threshold value.
3. The system of claim 2, wherein the array of categories of Internet sites includes threshold values associated with work hours and off work hours.
4. The system of claim 2, wherein the array of categories of Internet sites includes threshold values associated with the classification of the user.
5. The system of claim 2, wherein the array of categories of Internet sites includes threshold values associated with the identification of the user.
6. The system of claim 1, wherein the data transfer rate is indicative of a total data transfer rate between the area network and the Internet.
7. The system of claim 1, wherein the data transfer rate is indicative of the portion of a total data transfer rate between the area network and the Internet that is being used by the category of Internet site requested by the user.
8. The system of claim 1 further comprising a fourth module configured to determine whether the user has spent a preset amount of time on the Internet site within the category and, responsive to the determination, allowing the user's further access to the site.
9. The system of claim 1 further comprising a fourth module configured to determine whether the user requests a postponed access to the Internet site within the category, and responsive to the determination, storing pages from the requested the Internet site to a storage.
10. The system of claim 1 further comprising a fourth module configured to determine whether the user has accessed the Internet site within the category a predetermined number of times and, responsive to the determination, blocking the user's further access to the Internet site.
11. The system of claim 1 further comprising a fourth module configured to determine whether the user has accessed the Internet site within the category and thereafter notifying the user that any Internet access will be stored to a log file.
12. The system of claim 1, wherein the area network is a local area network.
13. The system of claim 1, wherein the area network is a wide area network.
14. The system of claim 13, wherein the wide area network includes a plurality of local area networks.
15. A method for controlling user access to categories of internet sites between an area network and an Internet, the method comprising: referencing a categorized database of Internet sites; determining the category of Internet site that is being requested by a user; determining a data transfer rate between the area network and the Internet; and comparing the data transfer rate to a categorized database of threshold values, and responsive to the comparison, blocking access to the site.
16. The method of claim 15 further comprising determining whether the user has spent a preset amount of time on the Internet site within the category and, responsive to the determination, blocking the user's further access to the site.
17. The method of claim 15 further comprising determining whether the user requests a postponed access to the Internet site within the category, and responsive to the determination, storing pages from the requested the Internet site to a storage.
18. The method of claim 15 further comprising determining whether the user has accessed the Internet site within the category a predetermined number of times and, responsive to the determination, blocking the user's further access to the site.
19. The method of claim 15 further comprising determining whether the user has accessed the Internet site within the category and thereafter notifying the user that any Internet access will be stored to a log file.
20. The method of claim 15, wherein the categorized database of threshold values includes an array of categories of Internet sites, each category including an associated threshold value.
21. The method of claim 20, wherein the array of categories of Internet sites includes threshold values associated with work hours and off work hours.
22. The method of claim 20, wherein the array of categories of Internet sites includes threshold values associated with the classification of the user.
23. The method of claim 20, wherein the array of categories of Internet sites includes threshold values associated with the identification of the user.
24. The method of claim 15, wherein the data transfer rate is indicative of a total data transfer rate between the area network and the Internet.
25. The method of claim 15, wherein the data transfer rate is indicative of the portion of a total data transfer rate between the area network and the Internet that is being used by the category of Internet site requested by the user.
26. The method of claim 15, wherein the area network is a local area network.
27. The method of claim 15, wherein the area network is a wide area network.
28. The method of claim 27, wherein the wide area network includes a plurality of local area networks.
29. An system for controlling user access to categories of internet sites between an area network and an Internet, the system comprising: means for referencing a categorized database of Internet sites; means for determining the category of Internet site that is being requested by a user; means for determining a data transfer rate between the area network and the Internet; and means for comparing the data transfer rate to a categorized database of threshold values, and responsive to the comparison, blocking access to the site.
30. A method for controlling user access to categories of internet sites between an area network and an Internet, the method comprising: receiving a request for an Internet site at a categorized site management module; referencing a categorized database of Internet sites; determining the responsiveness of the categorization database of Internet sites; referencing a user permissions module to determine whether the user is restricted from accessing particular categories of sites; and if the categorization database of Internet sites is not responsive, gradually degrading a level of service of the categorized site management module.
31. The method of claim 30, wherein degrading the level of service comprises: determining a data transfer rate between the area network and the Internet; selecting a default value from a categorized database of threshold values; and comparing the data transfer rate to the default value, and responsive to the comparison, blocking access to the site.
32. The method of claim 30, wherein degrading the level of service includes limiting the application of the categorization site management module to the request for an Internet site.
33. The method of claim 32, wherein limiting the application of the categorization site management module includes applying a default global policy for the request for an Internet site.
34. The method of claim 32, wherein limiting the application of the categorization site management module includes allowing a specific category of Internet sites.
35. A system for controlling user access to Internet sites between an area network and an Internet, comprising: a first module configured to determine a data transfer rate between a user and the Internet; a database of quota values including a limit associated with the user; and a second module configured to compare the data transfer rate to the limit associated with the user and, responsive to the comparison, blocking the user's further access to the site.
36. The system of claim 35, wherein the data transfer rate is a measure of bytes transferred per time period.
37. The system of claim 35, wherein the data transfer rate is a measure of number of hits per time period.
38. A system for controlling software application data traffic between an area network and an Internet, comprising: a database of software applications; a first module configured to reference the database of software applications and determine the software application data traffic type that is being requested by a user; a second module configured to determine a data transfer rate between the area network and the Internet; a software database of threshold values; and a third module configured to compare the data transfer rate to the software database of threshold values and, responsive to the comparison, blocking the user's further requests for the software application data traffic type.
39. The system of claim 38, wherein the software database of threshold values includes an array of software application data traffic types, each type including an associated threshold value.
40. The system of claim 39 further comprising a fourth module configured to determine whether the user has received a pre-selected number of resources associated with the software application data traffic type and, responsive to the determination, allowing the user's further access to resources associated with the software application data traffic type.
41. A method for controlling user access to software application data traffic between an area network and an Internet, the method comprising: requesting a resource or service from an Internet; referencing a database of software applications; determining a software data traffic type that is associated with data packets captured from the area network; determining a data transfer rate between the area network and the Internet; and comparing the data transfer rate to a software database of threshold values, and responsive to the comparison, blocking access to the resource or service.
42. The method of claim 41, wherein the software database of threshold values includes an array of software application data traffic types, each type including an associated threshold values.
43. The method of claim 42 further comprising determining whether the user has received a pre-selected number of resources associated with the software application data traffic type and, responsive to the determination, blocking access to the resource or service.
[0002] This invention relates to systems and methods for managing use of a network, such as accessing Internet websites via a web browser or the use of other applications.
[0003] 2. Description of the Related Art
[0004] The Internet is a global system of computers that are linked together so that the various computers can communicate seamlessly with one another. Internet users access server computers in order to download and display informational pages. Once a server has been connected to the Internet, its informational pages can be displayed by virtually anyone having access to the Internet.
[0005] The easy access and inexpensive cost of retrieving Internet pages has led to several problems for controlling access to inappropriate information, such as pornography. Several solutions to this problem have been proposed, including rating systems similar to that used for rating movies so that a parent or employer could control access to Internet servers, or pages, that have a particular rating. Unfortunately, this mechanism requires each person running an Internet server to voluntarily rate their site. Because of the free-wheeling nature of the Internet, this type of voluntary rating scheme is unlikely to be very efficient for preventing access to sites, such as those containing pornography, that most parents or businesses desire to block.
[0006] In addition to a rating scheme, others have developed databases that contain the uniform resource locator (URL) address of sites to be blocked. These databases are integrated into network computer systems and Internet firewalls so that a person wishing access to the Internet first has their URL request matched against the database of blocked sites. The user cannot access any URL found in the database. One such system is described in U.S. Pat. No. 5,678,041 to Baker et al. Unfortunately, such systems rely on the database of accessed sites to be complete. Because new servers are being added to the Internet on a daily basis, as well as current servers being updated with new information, these databases do not provide a complete list of sites that should be blocked.
[0007] In addition, current systems do not provide a user with any flexibility once they have requested a site that is within the blocked database. Thus, users that have a legitimate reason for reviewing such sites are still denied access.
[0008] The systems and methods have several features, no single one of which is solely responsible for its desirable attributes. Without limiting the scope as expressed by the claims which follow, its more prominent features will now be discussed briefly. After considering this discussion, and particularly after reading the section entitled "Detailed Description" one will understand how the features of the system and methods provide several advantages over traditional filter systems.
[0009] One aspect of the invention is a system for controlling user access to categories of Internet sites between a local area network and a wide area network. The system includes a categorized database of Internet sites, a first module configured to reference the categorized database and determine the category of Internet site that is being requested by a user, and a second module configured to determine a data transfer rate between the local area network and the wide area network. The system further includes a categorized database of threshold values and a third module configured to compare the data transfer rate to the categorized database of threshold values and, responsive to the comparison, blocking the user's further access to the site.
[0010] Another aspect is a method for controlling user access to categories of Internet sites between a local area network and a wide area network. This method comprises referencing a categorized database of Internet sites, determining the category of Internet site that is being requested by a user, and determining a data transfer rate between the local area network and the wide area network. The method further comprises comparing the data transfer rate to a categorized database of threshold values and responsive to the comparison, blocking access to the site.
[0011] FIG. 1 is a block diagram of a system for controlling access to a network.
[0012] FIG. 2 is a block diagram of a system for providing flexible filtering of network-based software application transactions.
[0013] FIG. 3 is a representation of four alternate embodiments of a network threshold database.
[0014] FIG. 4 is a representation of four alternate embodiments of a category threshold database.
[0015] FIG. 5 is a flow diagram illustrating a process for determining the current network load for a category of Internet sites, and blocking access to that category once a predetermined threshold has been reached.
[0016] FIG. 6 is a flow diagram illustrating a reduction of service process that reduces the level of service provided by the categorization system for a requested Internet site/page.
[0017] The following detailed description is directed to certain specific embodiments of the invention. However, the invention can be embodied in a multitude of different systems and methods. In this description, reference is made to the drawings wherein like parts are designated with like numerals throughout.
[0018] FIG. 1 is a block diagram of a system 10 for controlling access to a network. In the system shown in FIG. 1, the system is configured to control data flow between a network and the Internet. This flow can include data related to software applications. For example, data types that are related to software applications include data related to a website uniform resource locator (URL), instant messages, e-mails, audio files, video files, File Transfer Protocol (FTP), streaming audio, and streaming video. For ease of description, the systems and methods described below generally refer to controlling access to website URL related data. However, as explained above, the systems and methods described are not so limited.
[0019] When the system is configured to control data flow related to Internet sites, the system 10 does not simply allow or deny access to the Internet sites. A user can be provided with several options, or flexible filters, for accessing sites that are found within the categorized database. Examples of filtering techniques that can be used with the methods and systems disclosed herein are disclosed in U.S. patent application Ser. No. 09/494,315, filed Jan. 28, 2000, and entitled SYSTEM AND METHOD FOR CONTROLLING ACCESS TO INTERNET SITES, which is hereby incorporated by reference in its entirety. These filtering techniques can also be applied when the system is configured to control data flow associated with software applications.
[0020] As shown, a plurality of workstations 12A-C are connected through a local area network 15 to an Internet gateway system 20. The systems and methods described herein can be applied to systems that provide Internet connections. Generally, these types of systems have one or more Internet gateways that are shared by more than one workstation, machine, or user. For example, multiple LANs can be connected together to form a wide area network (WAN). The WAN would then connect to the Internet gateway system 20. In cases where the LAN's bandwidth is greater than the WAN's bandwidth connection to the Internet, the systems and methods described herein would be applied to the WAN's connection as it is the limiting connection to the Internet. For ease of description, the following describes systems and methods for controlling access from a LAN to the Internet where the LAN connection is the limiting connection. However, as explained above, the systems and methods described are not so limited.
[0021] The workstations 12A-C can be personal computers operating, for example, under the Microsoft Windows Operating System. However, other computers, such as those manufactured by Apple, IBM, Compaq, Dell, Sun Microsystems or other system, can be used.
[0022] The local area network 15 can be an Ethernet 10baseT topology, or based on any networking protocol, including wireless networks, token ring network, and the like. The local area network 15 communicates with the Internet Gateway system 20 in order to provide the workstations 12A-C with communication, for example TCP/IP to sites on a wide area network, for example, an Internet 35. Such gateways are well known in the art and normally communicate through routers or other data packet switching technology for translating Internet TCP/IP protocols into the proper protocols for communicating across the local area network 15.
[0023] Within the Internet gateway system 20 is an Internet firewall module 24 that monitors data packets flowing to and from the Internet 35. The firewall module 24 controls access between the workstations 12A-C and the Internet so that unauthorized users cannot gain access to computer resources on the local area network 15. Thus, all communications between the Internet and the local area network 15 first pass through the firewall 24. The firewall module 24 can be one of the many firewall software programs commercially available, such as Firewall-1 (Check Point software, Redwood City, Calif.). However, it should be realized that while the embodiment described in FIG. 1 relies on a firewall to control access of data packets between the Internet and the workstations 12A-C, other similar access control systems are available and can be used. For example, the Microsoft proxy server (Microsoft Corp., Redmond, Wash.), Netscape proxy server (Netscape Corp) and the Cisco PIX Firewall (Cisco Corp.) are currently available and can be implemented in place of the firewall 24. Alternatively, a caching device can be utilized to provide access control. For example, the Inktomi Traffic Server (Inktomi Corp.) and the Network Appliance NetCache (Network Appliance Inc.) can be used.
[0024] The term "module," as used herein, means, but is not limited to, a software or hardware component, such as a FPGA or ASIC, which performs certain tasks. A module may advantageously be configured to reside on the addressable storage medium and configured to execute on one or more processors. Thus, a module may include, by way of example, components, such as software components, object-oriented software components, class components and task components, processes, functions, attributes, procedures, subroutines, segments of program code, drivers, firmware, microcode, circuitry, data, databases, data structures, tables, arrays, and variables. The functionality provided for in the components and modules may be combined into fewer components and modules or further separated into additional components and modules. Additionally, the components and modules may advantageously be implemented to execute on one or more computers.
[0025] Within the Internet gateway system 20, and communicating with the firewall 24, is a categorized site management module 26 that analyzes Internet site requests from the workstations 12A-C and then compares those Internet site requests with a categorized site/page database 30. The URL for the source page of the requested Internet site is categorized into one or more of several categories. A URL is the address of a computer or a document on the Internet that consists of a communications protocol followed by a colon and two slashes (as http://), the identifier of a computer (as www.m-w.com) and usually a path through a directory to a file. If the requested page is found within the database 30, it will either be blocked or allowed depending on the access rights granted to the user within the categorized site management module 26. As illustrated, the categorized site management module 26 communicates with the firewall 24 to allow or control access to the Internet 35.
[0026] Alternatively, the categorization site management module can analyze content or other aspects of a communication in determining whether to block or allow a user's access to the communication. For example, the categorization site management module can monitor the textual or graphical content of an e-mail message and accordingly screen the message from being accessed by the intended recipient.
[0027] Alternatively, the categorization site management module analyzes requests from the workstations 12A-C for data files that are associated with specific software applications. The categorization site management module detects the use of a particular software application by the presence of its associated protocol on the network and analyzes the protocol data to determine what data, resources, or other services are being requested via the network. Resources can include, for example, any file, image, data stream, or other data accessible via the network or locally. Services are any function performed on behalf of a requester, for example, retrieval of a file, transfer of video data, transmission of messages, or other data manipulation. The use of the application itself, or access to the requested data resources or services is then allowed or denied based on access rights granted to the user within the categorization site management module 26.
[0028] Also located within the Internet gateway system 20 is a network load monitor module 28. The network load monitor module 28 monitors data packets flowing between the local area network 15 and the Internet 35. The network load monitor module can access the system 10 at a location where all of the packets are funneled through in order to monitor packet flow. In FIG. 1, the network load monitor module accesses the system 10 at the Internet firewall 24. In a system with more than one Internet gateway or access point to the Internet, network load monitor modules can be located at each access point within the system 10 such that the total packet flow observed by the multiple network load monitor modules collectively represents the total load between the local area network and the Internet. The network load monitor module can be configured to monitor traffic within a local area network.
[0029] In one embodiment, the network load monitor module categorizes the data packets flowing between the local area network and the Internet based on the content of the data packets. This categorization can be performed in conjunction with the categorized site/page database 30 described above. Once categorized, the network load monitor module determines the portion of the entire network load that is attributable to each category.
[0030] The network load monitor module can use passive techniques to provide visibility into the network traffic by capturing and identifying packets. Common terms for such passive techniques include non-obtrusive, packet capture, packet sniffing, and promiscuous-mode packet capture. These passive techniques detect the use of various software applications on the network by monitoring data traffic in the form of, for example, packets generated by the software applications. The network load module identifies a specific software application by recognizing the network protocol that the software application employs to send its data through the network. For example, each instant messaging software application uses an application specific communications protocols that is identified by the network load module. While observing all of the network packets traversing the network, the system uses counters (not shown) to measure the bandwidth utilization of the software applications.
[0031] Alternatively, a network activity client (not shown) can provide the bandwidth usage to the network load monitor module 28. The network load monitor module 28 can also access a network load management system (not shown), via the local area network 15, to obtain information on bandwidth usage. The network load management system can be, for example, a server with access to the firewall 24 to measure the bandwidth usage of the local area network 15.
[0032] The network's bandwidth usage is a single value or, alternatively, can be multiple values corresponding to various subsets of the network's bandwidth usage. For example, the network load monitor module can determine the current bandwidth usage for each of one or more categories of Internet pages/sites. Additional subsets include bandwidth usage per employee classification and bandwidth usage per individual employee. The network load monitor can determine bandwidth usage for network traffic associated with a specific software application. The network load and the subsets can each be in the form of, for example, a percentage of the network's maximum throughput. The usage values can also be measured as bit rates.
[0033] Also connected to the Internet 35 is a categorization system 40 that categorizes websites and pages in order to create the categorized site database 30. Once sites on the Internet have been categorized by the categorization system 40, a database update system 42 thereafter routinely copies the updated database from the categorization system 40 to the Internet gateway system 20. As can be imagined, the system can include thousands of gateway systems, each of which is updated regularly by the database update system 42 to provide an updated database of blocked Internet sites. Moreover, the database update system 42 transfer portions of the database to the gateway system 20 so that the entire database does not need to be transmitted.
[0034] Also communicating with the Internet 35 is a postponement management system 44 that manages Internet sites and communication data related to software applications that have been saved for postponed access by users. As will be explained, the system provides users with the ability to store desired Internet site URLs for review at a later time. Users can also store other communication data that is associated with software applications. The postponement management system 44 can reside on the local area network 15.
[0035] Also located within the Internet gateway system 20 is a delay monitor module 46. The delay monitor module 46 monitors the responsiveness of the categorization site management module 26 in determining whether to block or allow a user's request for a site/page. A delay in accessing a requested site/page can occur due to, for example, whether sufficient computer related resources are available to timely process the user's request or whether there is an existing backlog of site/page requests to the categorization site management module. These conditions can reduce a user's satisfaction by delaying access to their requested site. Moreover, a local area network 15 could become bogged down with a plethora of simultaneous user requests whereby the network's stability could be compromised.
[0036] Once a user's request for a website is received by the firewall, the firewall forwards the request to the categorization site management module. The firewall waits until the categorization site management module determines whether to allow access to the requested site/page. Based on the categorization site management module's determination, access to the requested site/page may or may not be allowed. Thus, the user's request "passes-through" the categorization site management module and the firewall.
[0037] Alternatively, when the categorization site management module is unable to determine whether the requested page/site is associated with a category within a predetermined time, the delay monitor module 46 limits the operation or service level of the categorization site management module. By limiting the service level, the responsiveness of the categorization site management module can be improved. Alternatively, the delay monitor module 46 gradually degrades the level of service as the response time of the categorization management module increases. Additional features of the categorization site management module could be bypassed if its responsiveness continues to degrade. For example, the application of rules associated with individual users or group of users could be bypassed. The categorization site management module could then fall back on a default global policy that is applied irrespective of user. Additional reductions in the level of service can include certain categories of sites/pages being allowed or limiting the options available to the categorization site management module. For example, the option for postponing access could be deactivated while keeping the block or allow options available to the categorization site management module. The delay monitor module could limit the use of certain high-bandwidth applications. For example, the use of streaming video or audio could be controlled.
[0038] In one embodiment, the delay monitor module defaults and allows the user access to the page. In this embodiment, the requested page/site "bypasses" the categorization process. The categorization process can then continue in parallel or after the access is granted whereby the system's transparent nature to the user is maintained. Alternatively, the delay monitor module 46 applies the network load module (see FIG. 2) when the categorization process is not completed. For example, the network load module uses the network threshold value associated with the category labeled "no category" in FIG. 3. A log of when a request exceeds the predetermined delay can be made to allow the system administrator to dynamically evaluate their resources. The process for determining whether a user's request "passes-through" or "bypasses" the categorization site management module is illustrated in detail in FIG. 6.
[0039] FIG. 2 is a block diagram of a system for providing flexible filtering of network-based software application transactions. The system can also provide flexible filtering for requests for resources or services associated with any software application, including requests for Internet sites via a web browser. The categorized site management module 26 includes a postponement module 250 that includes instructions for providing the system with its ability to postpone access to specific sites on the Internet. For example, in one embodiment, the user is presented with the option of postponing access to the desired site until another time of the day. If the user chooses to postpone access, a copy of the requested URL, and, in some cases, pages, are copied to a database, for example, residing on an Internet server. Users can store references to resources or services that are associated with specific software applications. The user is then allowed access to the database at a later time of the day. This system grants employers the ability to provide users with access to, for example, sport sites or instant messaging, but only during lunch or after work.
[0040] Also within the categorized site management module 26 is a quota module 254. The quota module 254 includes instructions and commands for determining whether a user has exceeded a particular quota. In one embodiment, the quota module 254 limits user access to categories of Internet sites. For example, if a user spends more than the predetermined amount of time on a particular site, they will be barred from accessing that site, or category of sites, for the rest of the day. Of course, the time schedule can be set to any combination of time that is preferred by the employer. In addition, a maximum number of times that the user visits a site that is within a particular category can also be controlled. Thus, a user might be allowed only 10 visits to a sports site within any 24-hour period.
[0041] Alternatively, the quota module limits access to Internet sites independent of the category of the requested Internet site. For example, the quota module can limit user access to the Internet based on a maximum bandwidth limit associated with each user. In another embodiment, the quota module limits access to Internet sites based on a maximum number of hits per time period for each user. The quota module can also provide data traffic limits for a particular software application. Examples of quota limits associated with software applications include number of instant messages, number of files transferred, number of songs, or other quantum of information associated with the software application.
[0042] The particular quota limit can be based on, for example, a predetermined amount of time, total number of bytes transferred by the user, bit rate, and number of hits per time period. The quota limit can also be limited by, for example, the category associated with the requested site/page and/or the software application associated with a received or transmitted data packet.
[0043] Time dependent quota limits can utilize a timer module 256. The quota module 254 can also include a data storage 258 configured to record the number of times a particular user has accessed a particular category of Internet sites, or the amount of time a user has spent reviewing that particular category.
[0044] The management module 26 also includes a user permissions module 260. The user permissions module 260 determines whether a particular user is restricted from accessing particular categories of sites. The user permissions module 260 also determines whether a user is subject to the requirements of the postponement module 250, the quota module 254, and/or the network load module 252. The user permissions module 260 can also determine whether the user is restricted from using a particular software application.
[0045] The user permissions module can notify the user that their access to the chosen site will be logged for review. If the user has a legitimate reason for accessing the site, they will not be blocked. However, users without legitimate reasons for accessing the desired site will be allowed to cancel their site request and not be logged as having requested the site.
[0046] Also within the categorized site management module 26 is a network load module 252. The network load module 252 determines whether a predetermined network load threshold value associated with a user's request has been exceeded. The user's request can be in the form of a uniform resource locator ("URL") or other identifier associated with the information requested by the user. The network load threshold module 252 can also determine whether a predetermined network load threshold value associated with a software application type has been exceeded.
[0047] The network load threshold values can vary during the day, and may also vary for different categories of users. For example, the network load threshold values for a company's Communications Department may be higher for Internet pages/sites in a "Politics" category. Further embodiments vary the network load threshold values for each specific user thereby allowing a system administrator to customize the bandwidth available to each user in each category.
[0048] Communicating with the management module 26 is the postponement management system 44. This system 44 is normally running within a server attached to the Internet 35. The postponement management system 44 postpones access to Internet sites. The postponement management system 44 can also postpone access to resources or services related to software applications requested by particular users. Within the postponement management system 44 is a cookie analysis module 270 that provides instructions for determining the identity of the user currently accessing the system. As is known, "cookies" are data strings stored on a user's computer that can include specific user identification numbers. These unique user identification numbers allow the postponement management system 44 to know the identity of the user currently accessing the system. The unique user identification numbers are accessed by the network load module to determine the identity of the user currently accessing the system.
[0049] In communication with the cookie analysis module 270 is a registration module 272 that is provided to allow new users to register within the postponement management system. Thus, if a cookie is not found on the user's computer, the user is directed towards the registration module 272 in order to register for access to the postponement management system 44.
[0050] The postponement management system 44 also provides a management module 276 that oversees user's access to postponed sites within the system 44. Thus, when a user attempts to access their stored site, the management module 276 determines the appropriate stored sites and directs the user to those stored pages. As illustrated, the management module 276 communicates with a storage 280 which holds the actual pages that were postponed from a previous viewing attempt by the user.
[0051] To request access to an Internet page or site, a user utilizes an Internet browser on a workstation computer 12A-C. Well-known browsers include Microsoft Explorer and Netscape Navigator. The browser request is normally made after a user has entered a desired URL into their browser software. The user's request is then sent across the local area network 15 to the Internet Gateway system 20. The requested Internet address is matched against the categorized database 30. It should be noted that the address could be a single page within an Internet site, or the default address of the site (e.g.: www.company.com).
[0052] The categorized site management module determines whether an address match has been made with any address stored in the categorized database. If no match was found within the categorized database 30, the requested page is retrieved from the Internet. However, if an address match between the requested address and the categorized database is found, the categorization site management module determines whether the current user has restricted access rights to specific categories of Internet pages. This determination can be made by reference to a list of network users, and an associated permissions table for each category found within the categorized database. Thus, a particular user may be restricted from access to all Sports and Pornography categories but not restricted from Internet Commerce or Travel categories. If the user has restricted categories, the categorized site management module determines which categories have been blocked for this particular user by referencing the permissions list associated with the user.
[0053] The categorized site management module determines whether the requested page is within any of the restricted categories for this particular user. If the requested page is not within one of the user's restricted categories, the requested page is retrieved. If the requested page is within one of the user's restricted categories, access to the page is blocked. This blocking can occur by returning a pre-defined block page to the user's browser explaining that the request is not allowed and why. Alternatively, the categorized site management module simply closes the connection that was requested by the Internet browser to the requested page.
[0054] The network load module 252 receives a current network load associated with the data flowing between the local area network and the Internet from the network load monitor module. The network load module 252 can poll the network load monitor module 28 for the current network load. Alternatively, the network load monitor module periodically sends the current network load to the network load module.
[0055] The network load module 252 also selects a network threshold value from a network threshold database 284. The selected network threshold value is associated with the category of the user's requested site/page. Alternatively, the selected network threshold value is associated with the software application type of the user's requested resource or service. The network threshold database 284 permits a network administrator to select threshold limits which, as the network utilizes more and more of its bandwidth, ensure that unused bandwidth will be available for, for example, work related activity. The network threshold database 284 includes predetermined values associated with network load limits for each Internet site/page category. These network threshold values can vary, for example, between zero and 100 percent of the network's capacity. For each Internet site/page request, the network load module 252 retrieves a value associated with the category of the requested page/site from the network threshold database.
[0056] The network load module compares the value associated with the requested Internet site/page with the current network load to determine whether to allow the user access to the requested Internet site/page. If the current network load exceeds the network threshold value associated with the category requested by the user, the user's request will be denied. The process for determining whether a user's request will exceed a predetermined network threshold value is illustrated in detail in FIG. 5.
[0057] Alternatively, the network load module 252 includes a category threshold database (not shown). The category threshold values represent a portion of the network's bandwidth that has been pre-allocated to an individual category or group of categories. For each Internet site/page request, the network load module 252 retrieves a value associated with the requested Internet page/site from the network threshold database. The network load module retrieves a current network load attributed to the requested category from the network load monitor module (see FIG. 1). The network load module compares the value associated with the requested Internet page/site with the current network load to determine whether to allow the user access to the requested Internet site/page. The category threshold database permits a network administrator to select threshold limits which, as the network utilizes more and more of its bandwidth, ensure that a maximum portion of the network's bandwidth will be used for each category of Internet site/pages.
[0058] Alternatively, the network load module 252 includes the network load monitor module 28. By locating the network load monitor module within the categorized site management module 26, the system's integration is enhanced. However, such a configuration is not required.
[0059] FIG. 3 is a representation of four alternate embodiments of a network threshold database. Each embodiment includes a two-dimensional data array of network threshold values. For example, network threshold database 284(a) includes the network threshold values 0, 25, 50, and 80. Each of these network threshold values corresponds to a group or groups of Internet page/site categories. For example, network threshold database 284(a) lists the categories of sports, games, hacking, and all non-business access along with their corresponding network threshold values, 0, 25, 50, and 80, respectively. The network threshold value 25 corresponds to a combination of a games group with a sports group. Together, each network threshold value and its corresponding Internet page/site category represent a predetermined limit on additional usage of the network's bandwidth for that Internet page/site category. The threshold values are shown in percentages but can be in the form of, for example, bit rates.
[0060] Applying the network threshold database 284(a), once the network is at 50 percent of its capacity, future user requests for Internet sites/pages that are categorized as either games, sports, or hacking will be blocked. Once the network reaches 80 percent capacity, all non-business access will be blocked. In other words, the system will maintain at least 20% of the network's bandwidth for work related business regardless of how the initial 80% of the network's bandwidth is being used.
[0061] The alternate threshold database 284(b) includes network threshold values which are used by the network load monitor to deny or allow access to sites/pages based on whether the request is made during or after work hours. For example, network threshold database 284(b) includes a time of day subset, whereby the system is able to vary the network threshold values for work hours as opposed to off work hours. In this example, during work hours, once 5 percent of the local area network's bandwidth is used, requests for Internet sites/pages categorized within the category of games will be blocked. The network threshold value for the category of games is raised to 90 percent after work hours. Thus, until 90 percent of the network's bandwidth is being utilized after work hours, requests to the system for access to sites/pages that are categorized as games will be allowed.
[0062] The alternate threshold database 284(c) includes network threshold values that are used by the network load monitor to deny or allow access to sites/pages based on the requester's employee classification. For example, to limit impact on the network due to game playing by users that are classified as accountants, the system denies access to requests for such sites once the network's bandwidth usage reaches 6 percent during the day. Continuing with this example, the engineers are able to access game sites during work hours until the network's bandwidth usage reaches 60 percent. During off work hours, the accountants are allowed to access Internet sites/pages that are categorized under gaming as long as the network's bandwidth usage is below 80 percent.
[0063] The alternate threshold database 284(d) includes network threshold values that are used by the network load monitor to deny or allow access to sites/pages based on the identity of the user. Thus, in this example, Bob is banned from accessing Internet pages/sites that are categorized under politics during work hours. The system does allow Bob to access such pages/sites until the network's bandwidth usage reaches 1.25 percent during off work hours. Numerous other subsets and combinations of subsets can be used. This process of determining access to a requested Internet site/page based on network load and network thresholds values will be explained more completely below with reference to FIG. 5.
[0064] FIG. 4 is a representation of four alternate embodiments of a category threshold database. Each category threshold database 286(a)-(d) includes a two-dimensional data array. Each data array further includes category threshold values which represent a portion of the network's bandwidth that has been pre-allocated to a specific category. These values are shown in percentages but can be in the form of, for example, bit rates. Each data array lists the applicable categories along with their corresponding threshold values. For example, data array 286(a) lists the categories of games, hacking, politics, and "no category" along with their corresponding category threshold values, 35%, 5%, 50%, and 10%, respectively. For example, the value 35% indicates that a maximum of 35% of the local area network's bandwidth or the wide area network's bandwidth can be used for accessing Internet sites/pages that are categorized by the categorization site management module 26 to be within the game category.
[0065] The alternate threshold database 286(b) includes category threshold values which are used by the network load monitor to deny or allow access to sites/pages based on whether the request is made during or after work hours. For example, data array 286(b) includes a time of day subset, whereby the system is able to vary the category threshold values for work hours as opposed to off work hours. In this example, during work hours, 15% of the local area network's bandwidth or the wide area network's bandwidth is allocated for Internet sites/pages that are categorized as games. To allow users to immerse themselves into an online battle as a team against the forces of evil, additional bandwidth is allocated for games after work hours.
[0066] The alternate threshold database 286(c) includes category threshold values that are used by the network load monitor to deny or allow access to sites/pages based on the requester's employee classification. For example, to limit users that are classified as accountants in their game playing at work, the system sets the maximum amount of bandwidth available for such activity to 6% during the day. At the same time, the engineers are able to indulge themselves up to a maximum threshold value of 9%. Recognizing the importance of gaming, the accountants are allowed to access Internet sites/pages that are categorized under gaming for up to 76% of the network's entire bandwidth during non-work hours. However, if the accountants are using 76% of the network's bandwidth for games, any additional requests by the accountants for Internet site/pages categorized as games will be denied.
[0067] The alternate threshold database 286(d) includes category threshold values that are used by the network load monitor to deny or allow access to sites/pages based on the identity of the user. Thus, in this example, Bob is banned from accessing Internet pages/sites that are categorized under politics during work hours. Bob has a proclivity for such sites. By limiting Bob's access during work hours to such sites, Bob has improved his productivity. While recognizing that Bob's inclination to view such sites during work hours could be detrimental to his career, the systems does allow Bob to use up to 1.25% of the network's entire bandwidth during off work hours to quench his thirst for the body politic. Thus, the category threshold database permits a network administrator to select portions of the available network's bandwidth and allocate such portions for individual categories. Numerous other subsets and combinations of subsets can be used beyond the embodiments described herein.
[0068] FIG. 5 is a flow diagram illustrating a Network Load Process 1100 performed by the categorization site management module for determining the current network load for a category of Internet sites, and blocking access to that category once a predetermined threshold has been reached. The network load process 1100 begins at a start state 1102 and then moves to a state 1104 wherein the categorized site management module receives a request for an Internet page or site. The categorized site management module determines the category of the page or site at a state 1106 by reference to the categorized database 30. In cases where a user's request is not associated with a category, the current network load is compared to a default maximum network threshold value. For example, the system can deny access to a page/site if such access would result in falling below a minimum amount of network bandwidth margin. The minimum bandwidth margin could be, for example, 10%.
[0069] The process 1100 then moves to a state 1108 wherein a user's identification is determined by the categorization site management module 26. The user's identification can be in the form of an Internet Protocol address. The Internet protocol address is assigned to the workstation 12A-C from where the user's request originated and is included with the request for the Internet site/page. The Internet protocol address is associated with a user's name. An employee's classification is then determined from the user name.
[0070] A determination is made at a state 1110 by the categorization site management module 26 as to the time of day that the Internet page/site request was made. The process continues to a state 1112 where the network load module retrieves the current network load from the network load monitor module 28. The current network load is in the form of a percentage of the entire network's bandwidth. Alternatively, the network load is in the form of a data bit rate.
[0071] The process continues to a state 1114 where the network load module selects the applicable network threshold value in reference to the network threshold database 284. The applicable network threshold value depends on, for example, the determination of the category in state 1106, the user's identification in state 1108, and the time of day in state 1110. A few or all of these factors may be used in selecting the applicable network threshold value. If the network threshold database 284(c) includes network threshold values that differentiate between work and off work requests, the time of day determined at state 1110 is used to select the applicable network threshold value. If the network threshold database 284(c) further differentiates between classifications of employees, the classification determined at state 1108 is used to select the applicable network threshold value. For example, based on a request from an accountant for an Internet site that is categorized under politics made during work hours, the network threshold module would select 95 as the applicable network threshold value.
[0072] Alternatively, the network load module 252 determines whether a user's request for an Internet page/site will exceed the predetermined threshold values for accessing pages/sites on the Internet. The system evaluates the potential load on the network due to the user's request for the Internet site/page.
[0073] Instead of receiving request for websites/pages, the network load monitor module can use passive techniques to provide visibility into the network traffic by capturing and identifying network packets associated with software application protocols. These passive techniques detect the use of various software applications on the network by monitoring data traffic in the form of, for example, packets generated by the software applications. The network load module identifies a specific software application by recognizing the network protocol that the software application employs to send its data through the network. For example, each instant messaging software application uses an application specific communications protocols that is identified by the network load module. When analyzing resources or services, the network load module compares a protocol associated with the requested resource or service to a database of software applications (not shown). If the requested resource or service's protocol is found within the database of software applications, the network load module selects a network threshold value at state 114 that is associated with the software application type of the user's requested resource or service. Access to the resource or service will be either blocked at state 1118 or allowed at state 1122 depending on the access rights granted to the user.
[0074] The process 1100 then moves to a decision state 1116 wherein the network threshold module compares the current network load determined at state 1112 with the selected network threshold value determined at state 1114.
[0075] If a determination is made at decision state 1116 that the current network load exceeds the selected network threshold value, the process continues to a state 1118 where access to the requested Internet site/page is blocked. The process then continues to an end state 1120.
[0076] Returning to the decision state 1116, if the current network load does not exceed the selected network threshold value, the process moves to a state 1122 where one or more flexible filtering techniques are applied. Alternatively, the network threshold process retrieves the requested Internet page/site for the user. The process proceeds to a state 1126 where the network load monitor module updates the current network load. Flow then proceeds to the end state 1120.
[0077] It should be noted that if the network load module includes a category threshold database instead of a network load database 284, the network load process 1100 follows similar states except for 1112, 1114, and 1116. At state 1112, the network load module retrieves a current category network load for the requested category. The current category network load represents a portion of local area network's bandwidth that is being used to access the requested category. This is in contrast to a current network load which is the total bandwidth that is being used by the local area network in accessing the Internet. At state 1114, the network load module retrieves an applicable category threshold value from the category threshold database. The values determined at states 1112 and 1114 are then compared at state 1116.
[0078] FIG. 6 is a flow diagram illustrating a reduction of service process 1000 that reduces the level of service provided by the categorization system in response to a request for an Internet site/page. The process 1000 gradually bypasses the categorization analysis for a requested Internet site/page to increase the system's responsiveness. The process 1000 begins at a start state 1002 and then moves to a state 1004 wherein the categorization site management module receives a request for an Internet page or site. The delay monitor module determines at a decision state 1006 whether the categorization site management module is available for determining which category is related to the requested Internet page or site. Alternatively, the delay monitor module measures the response time of the categorization site management module.
[0079] If a determination is made that the categorization module is available, the process 1000 then moves to a state 1010 wherein one or more flexible filtering techniques are applied. Examples of flexible filtering techniques include the network load process 1100 described above as well as the filtering techniques described in already incorporated U.S. patent application Ser. No. 09/494,315, filed Jan. 28, 2000, and entitled SYSTEM AND METHOD FOR CONTROLLING ACCESS TO INTERNET SITES. The process terminates at an end state 1012.
[0080] If the delay monitor module determines, at decision state 1006, that the categorization site management module is unavailable or will not timely respond, the process proceeds to a state 1014 where the categorization process is gradually bypassed. The delay monitor module 46 gradually degrades the level of service as the response time of the categorization management module decreases. For example, additional features of the categorization site management module could be bypassed if its responsiveness continues to degrade. For example, the application of rules associated with individual users or group of users could be bypassed. The categorization site management module could then fall back on a default global policy that is applied irrespective of user. Additional reductions in the level of service can include certain categories of sites/pages being allowed or limiting the options available to the categorization site management module. Thus, if the categorized database 30 is unavailable or will not respond in a timely manner in determining the category of the requested Internet page/site due to, for example, concurrent requests from multiple users, the user does not have to wait until the categorized database is available. This provides a mechanism for increasing the responsiveness of the system. The categorization process can then continue in parallel, whereby the system's transparent nature to the user is maintained.
[0081] The process continues to a state 1016 where the user's site request, user name, date and time is recorded to a database via a logging module (not shown), or written to a log file. The process then moves to a state 1018 where a network load process is applied to the requested site/page. The network load module uses the network threshold value associated with the category labeled "no category" in FIG. 3. The Bypass Process 1000 then terminates at the end state 1012.
[0082] While the above detailed description has shown, described, and pointed out novel features of the invention as applied to various embodiments, it will be understood that various omissions, substitutions, and changes in the form and details of the device or process illustrated may be made by those skilled in the art without departing from the spirit of the invention. The scope of the invention is indicated by the appended claims rather than by the foregoing description. All changes which come within the meaning and range of equivalency of the claims are to be embraced within their scope.
Previous Patent: Impersonation in an access system
Next Patent: Network services broker system and method


rass sent in news about QUT offering two free online courses this year, Introduction to Robotics, and Robotic vision.
There's an interesting write-up on Regin spyware on TweakTown. The latest high-profile discovery of malware announced in recent weeks was Regin, a nasty piece of malware designed for a rather complex and sinister purpose.
Been over 10 years since I last went to QGL, but apparently LAN parties are still going strong. Chris sat down with a few LAN admins, organizers and CEOs to chat about the issues they face in today's climate.
A team from MIT have created an electrochemical cell which uses different temperatures to convert heat to electricity. The cell only needs low-grade waste heat – less than 100C – to charge batteries, and is a significant step forward compared to similar devices which either require an external circuit for charging or high temperature heat sources (300C).
Australia has dropped to 44th in the world for average internet connection speed. Only 66 per cent of Australia had between the 10 to 20 Mbps required for 4K (or "ultra HD") video used by streaming services.
The digital policy group representing giants such as Google, Yahoo7, Facebook, and eBay in Australia have slammed the Australian government's use of the Telecommunications Act to compel ISPs to block websites. Full article here on ZDNet.
Some amazing GIF's here show the future of Body Scanning. General Electric released images on Wednesday from its first clinical trial of a next generation body scanner that captures bones, blood vessels and organs in high-definition.
WIRED's Top Picks From CES 2015 on Wired.


text:
Q: Creating an identical copy of a React Component right behind the original Component (the new copy should be immune to resizes, page updates etc) I'm trying to implement a text highlighting system that works by duplicating the Nodes in a Range, positioning them right behind where they were, and styling the new background clone to look like highlighting (make it have a yellow background, etc).
Skip this paragraph if you don't care about the justification/thought process I went through to come up with this goal. My past considerations: 1. I considered using <mark> tags, but when we use a Selection object to try and change highlighting and the Selection's Range contains a <mark> tag, there is no simple way to undo any of the previous highlighting or <mark> tags in the selection. I've thought and experimented a lot with developer tools like rangy, and they just won't work for this, but it's a feature I need. 2. I also considered putting Range.getClientRects() behind the text, but that method returns ALL client rects without any control, so if the selection is over a <div>, the return value includes a massive box for the div. If I need to worry about positioning uncontrollable Range.getClientRects() vs positioning the highlighted Node itself, I'd rather pick the latter, ie my current goal.
What would go into making sure that the cloned Node's positions, widths, and heights are all the same as the original's at all times? Is it enough to just set its position to the old one's?

redpajama_set_name: RedPajamaStackExchange


Your Mortgage Girl! "Mortgage Options . . . NOT . . . Restrictions!: Why do I need a separation agreement to get a mortgage?
Why do I need a separation agreement to get a mortgage?
Why do Banks Want to See a Mortgage Qualification Separation Agreement?
Mortgage qualification separation agreements establish better financial certainty after separation. Your lender will most likely want to know what child or spousal support obligations you have as well as assessing the property and debts you will be taking on. If you hope to claim support payments you receive as part of your mortgage application, then a mortgage qualification separation agreement can help. This will give the bank a better picture of your financial situation and help them determine whether you qualify for a new mortgage Although you may have a verbal agreement with your spouse, a mortgage qualification separation agreement gives the bank the assurance that it is a binding agreement.
What is Included in a These Agreements?
Generally, separation agreements for mortgage qualification will normally set out the property that each person will keep and the debts that each party will be responsible for. If you have children together it will likely also deal with custody, access and support arrangements for your children. Additionally, spousal support is commonly addressed, whether there is an obligation for one party to pay support or not. Mortgage qualification separation agreements are still binding agreements. If you decide to proceed with a divorce, the terms of the separation agreement will often form part of the divorce order.


All valuations performed by Equity Valuation Associates are in accordance to the standards, guidelines, methods, and procedures outlined in the IRS Revenue Ruling 59-60 and/or the Financial Accounting Standards Board (FAS) 157.
The purpose of this Revenue Ruling is to outline and review in general the approach, methods and factors to be considered in valuing shares of the capital stock of closely held corporations for estate tax and gift tax purposes.
IRS Revenue Ruling 59-60 determines the basis of fair market value and states that fair market value is, "The amount at which the property would change hands between a willing buyer and willing seller, when the former is not under any compulsion to buy, and the latter is not under any compulsion to sell, both parties having reasonable knowledge of relevant facts."
To learn more about IRS Revenue Ruling 59-60, please click here.
FAS 157 is a Financial Accounting Standards Board (FASB) Statement that requires all publicly-traded companies in the U.S. to classify their assets based on the certainty with which fair values can be calculated. This statement created three asset categories: Level 1, Level 2 and Level 3. Level 1 assets are the easiest to value accurately based on standard market-based prices and Level 3 are the most difficult.
FAS 157 was passed to help investors and regulators understand how accurate a given company's asset estimates truly were. Many firms (including some of the largest in terms of assets) had to write down billions of dollars in hard-to-value Level 3 assets following the subprime meltdown and related credit crisis, which began in late 2006. By making companies report to investors the breakdown of assets, they allow investors to potentially see what percentage of the balance sheet could be open to revaluation or susceptible to sudden write-downs.
Fore more information on FAS 157, please click here.


text:
"Be not angry that you cannot make others as you wish them to be, since you cannot make yourself as you wish to be."
— Thomas von Kempen, buch Nachfolge Christi
Book I, ch. 16.
Quelle: The Imitation of Christ (c. 1418)
Letzte Aktualisierung 24. Mai 2020. Geschichte
Thomas von Kempen8
Augustinermönch und Mystiker 1380 - 1471
Ähnliche Zitate
"So, Damocles, since this life delights you, do you wish to taste it yourself and make trial of my fortune?"
Help us translate this quote
— Dionysius I of Syracuse Sicilian tyrant -430 - -367 v.Chr
As quoted by Cicero, in Tusculan disputations 5.61 as translated by Gavin Betts http://www.livius.org/sh-si/sicily/sicily_t11.html
"You can't make your kids do anything. All you can do is make them wish they had. And then, they will make you wish you hadn't made them wish they had."
— Marshall B. Rosenberg American psychologist 1934 - 2015
"Whatever you wish for others, is what you wish for yourself."
— Ralph Smart
"[Malipiero's advice to Casanova. ] If you wish your audience to cry, you must shed tears yourself, but if you wish to make them laugh you must contrive to look as serious as a judge."
— Giacomo Casanova Italian adventurer and author from the Republic of Venice 1725 - 1798
Memoirs (trans. Machen 1894), book 1 (Venetian Years), chap. 14 http://etext.library.adelaide.edu.au/c/casanova/c33m/chapter14.html
"Some things you cannot wish away or think away. They become part of you when you remember them."
— Alice Hoffman Novelist, young-adult writer, children's writer 1952
Quelle: Incantation
"You cannot provoke. You cannot insult the faith of others. You cannot make fun of the faith of others. … There are so many people who speak badly about religions or other religions, who make fun of them, who make a game out of the religions of others. They are provocateurs."
— Papa Francesco 266th Pope of the Catholic Church 1936
Statements on his official plane traveling from Sri Lanka to the Philippines, reported in "Pope Francis: 'You cannot make fun of the faith of others (15 January 2015) https://www.youtube.com/watch?v=hSV-GD9gA-U
2010s, 2015
Kontext: Not only does each person have the freedom and the right to say what they think for the common good, they have a duty to do so. Because while it is true that is wrong to react with violence, If my good friend Mr Gasparri says a curse word against my mother, he can expect a punch in the nose. … It's normal. You cannot provoke. You cannot insult the faith of others. You cannot make fun of the faith of others. … There are so many people who speak badly about religions or other religions, who make fun of them, who make a game out of the religions of others. They are provocateurs. And what happens to them is what would happen to Mr Gasparri if he says a curse word against my mother. There is a limit. … One cannot make war… kill in the name of one's own religion, that is, in the name of God.
"You cannot make yourself feel something you do not feel, but you can make yourself do right in spite of your feelings."
— Pearl S. Buck American writer 1892 - 1973
"My Neighbor's Son"
To My Daughters, With Love (1967)
"Do yourself what you wish others to do."
— Ramakrishna Indian mystic and religious preacher 1836 - 1886
p. 1021
"When you are angry, it means you, yourself are unhappy. Even if you are wronged, you are still making yourself unhappy if you feel anger."
— Michio Kushi Japanese educator 1926 - 2014
"Drying up in conversation,
You will be the one who cannot talk,
All your insides fall to pieces,
You just sit there wishing you could still make love."
— Thom Yorke English musician, philanthropist and singer-songwriter 1968
Lyrics, The Bends (1995)
"You cannot enjoy others until you
enjoy yourself because you cannot give to others what you do not have."
— John C. Maxwell American author, speaker and pastor 1947
Quelle: 25 Ways to Win with People: How to Make Others Feel Like a Million Bucks
"Peace is not something you wish for; It's something you make, Something you do, Something you are, And something you give away"
— John Lennon English singer and songwriter 1940 - 1980
"Peace is not something you wish for, it is something you make, something you	are, something you do, and something you give away."
— Robert Fulghum American writer 1937
"You cannot make a pair of croak-voiced Daleks appear benevolent, even if you dress one of them in an Armani suit and call the other Marmaduke."
— Dennis Potter English television dramatist, screenwriter and journalist 1935 - 1994
"Occupying Powers," The Guardian (28 August 1993); the quote is from the James MacTaggart Memorial Lecture at the Edinburgh Television Festival (27 August 1993) and refers to John Birt and Marmaduke Hussey, who were then Director-General and Chairman of the BBC.
"You cannot buy the Revolution. You cannot make the Revolution. You can only be the Revolution. It is in your spirit or, it is nowhere."
— Ursula K. Le Guin, Hainish Cycle
Quelle: Hainish Cycle, (1974), Chapter 9 (p. 301)
"If you wish me to weep, you yourself
Must first feel grief."
— Horace, Ars Poetica
Original: (la) Si vis me flere, dolendum est
primum ipsi tibi.
Quelle: Ars Poetica, or The Epistle to the Pisones (c. 18 BC), Line 102
"… even a mirror will not show you yourself, if you do not wish to see."
— Roger Zelazny, Lord of Light
Quelle: Lord of Light
"The truth shall make you free, but first it shall make you angry."
— Robert G. Ingersoll Union United States Army officer 1833 - 1899
"If you are never alone, you cannot know yourself."
— Paulo Coelho, buch Manuscript Found in Accra
Quelle: Manuscript Found in Accra (2012), Uselessness
"You know, don't you, that no amount of wishing that this were not the case can make it not the case. No amount of praying that you are not transgendered will make you something other than what you are. No amount of love from anyone will make you fit inside a body that does not match your spirit."
— Jennifer Finney Boylan American author 1958
She's Not There (2003)

redpajama_set_name: RedPajamaCommonCrawl


text:
About Us | AirMail Shipping & Return Policy | 100% Money Back Guarantee
Vikings & Barbarians
Moskvitch 400-420A SLON Soviet Sedan USSR 1947 Year 1/43 Scale Diecast Model Car
Theme: USSR
Era : 1946-1959
Material : Diecast
Series: Auto Legends USSR
Recommended Age Range: 12 Years & Up
Decrease quantity for Moskvitch 400-420A SLON Soviet Sedan USSR 1947 Year 1/43 Scale Diecast Model Car
Increase quantity for Moskvitch 400-420A SLON Soviet Sedan USSR 1947 Year 1/43 Scale Diecast Model Car
The Moskvitch 400-420 was a car introduced in 1947 by the Soviet manufacturer Moskvitch.
In 1940 and 1941 500 units of the KIM 10-50, the first Soviet compact car, were produced. It was inspired by the similar-sized four-door Ford Prefect and despite its low price equipped with such features as a mechanical clock and indicators of the level of oil and the temperature of water in the radiator, but national priorities changed with the German invasion in Summer 1941, and the production of the new car was not resumed after the war. It was Joseph Stalin who personally chose in June 1945 a four-door Opel Kadett to become a first mass-produced popular Soviet car, so plans and tooling of a four-door version had to be reconstructed with help of German engineers, who worked upon them in a Soviet occupation zone. The Soviet Union was not the only country to adopt the design at that time: the Kadett had impressed Louis Renault and heavily inspired his Renault Juvaquatre produced in 1937-1960.
Development began in 1944, following a prewar plan to produce a domestically built car able to be used and maintained by citizens living outside major cities. The KIM factory was selected to build the car, with the prewar KIM 10-52 (not built due to the Second World War) as a basis, with production approved in May 1945 and prototypes intended to be ready in December; by the end of May, however, these plans had faltered.
© 2023, drachko.inc Powered by Shopify


What will happen in Merseyside, as it did in Manchester all those years ago, is you will be walking down the street and people will be saying 'I think we can do it, go on let's do it this year'. You can be walking down the street, having a break and relaxing, and then all of a sudden your mind gets thrown back to the title and you can't get away from it. It just hits you every minute of every day.
"Winning the title is obviously about performance, but the mental side is huge. Our first title at Manchester United I never looked forward to it, I struggled with it, and so did other young players. We were dragged over the line by Eric Cantona, Peter Schmeichel, Roy Keane, those characters who had the experience to understand what it was about.
"It was a bit of a struggle for Tottenham against Leicester on Sunday. They got the late goal which flattered them a bit, but with the injuries they have got and the challenges they have got it's such an outstanding performance from the players and Mauricio Pochettino to be where they are.


2/16/1922 Camden, New Jersey 3 Master Victor 45307 10-in.
2/16/1922 Camden, New Jersey 3 Master Gramophone 2-3650 10-in.
2/16/1922 Camden, New Jersey 3 Master Gramophone B-4576 10-in.
Discography of American Historical Recordings, s.v. "Victor matrix B-26124. Rockin' in de win' / Olive Kline," accessed April 20, 2019, https://adp.library.ucsb.edu/index.php/matrix/detail/800000005/B-26124-Rockin_in_de_win.
Victor matrix B-26124. Rockin' in de win' / Olive Kline. (2019). In Discography of American Historical Recordings. Retrieved April 20, 2019, from https://adp.library.ucsb.edu/index.php/matrix/detail/800000005/B-26124-Rockin_in_de_win.
"Victor matrix B-26124. Rockin' in de win' / Olive Kline." Discography of American Historical Recordings. UC Santa Barbara Library, 2019. Web. 20 April 2019.


This paper discusses the assertion that Stalin deceived FDR at the Yalta conference of 1945. The author provides background info on Stalin and references specific occurrences demonstrating how FDR and other political figures were manipulated by Stalin. This five page paper has four sources listed in the bibliography.
Title: "FDR and Stalin At the 1945 Yalta Conference"


"It occurred to me that just as vibrating objects produce sound waves, the relational vibration that an organization sends out to its key constituents—employees, customers and investors—via its marketing efforts, essentially produces its success."
Are you sending out good marketing vibes for your business?
Chip Conley shares 5 central practices to employ in marketing your yoga studio over on the Yogi Times site.
Create a meaningful dialog with your students by creating helpful marketing materials for your yoga studio.


Lost In The Wilderness Of Love from Kyle Clark's The Good Man's Plight. Photo by Frank Bicking.
Just Sole Street Dance Theater Company. Photo by Marcus Branch.
Bringing together some of hip-hop's most influential pioneers, dancer and choreographer Kyle "JustSole" Clark will present what he calls his "physical autobiography" in a dance-theater performance blending street dance techniques with spoken word narration and video. The Life of a Just Sole will explore themes of identity, family, self-expression, and the guiding force of art in an individual's life, as it introduces audiences to the history of hip-hop culture. Performers will include house dancers Caleaf "Big Leaf" Sellers, Tony "Sekou Heru" Williams, and Tony McGregor; lockers Alain "Hurrikane" Lauture and Omar "Firelock" Thomas; as well as B-boys Ivan "HeatRock" Cofield, Tony "Ynot" Dinero, and Brian "Hannibal" Newby. Together, these performers will survey a variety of dance styles through a combination of choreographed segments and improvised dance battles. Langston "DJ Foxx Boogie" Clement will accompany the dancers live on stage, spinning a spectrum of musical genres—from jazz to electronic dance music.


All is not well in the Land of the Rising Sun. Japan, a country whose gross government debt as a proportion of GDP rose to 253 per cent in 2017, faces the dual challenge of an ageing populace and dwindling births.
If left unsolved, these twin issues will squeeze Japan's shrinking workforce with the burden of paying for the old and young. Combined with a low fertility rate of around 1.4, which represents the number of children that an average Japanese woman will have in her lifetime – a sustainable rate is 2.1 – Japan's rising costs will have to be paid by an ever-smaller proportion of workers.
According to Dr Jones, if fertility rates do not improve, Japan can expect its population to fall from around 128 million at present to 98 million by 2050. As that happens, the proportion of elderly people aged over 65 will increase from about 26 per cent now to 45 per cent at the mid-point of the century.
As a result of the country's rapidly ageing population, April saw credit rating agency Moody's warn of near-term and long-term credit challenges, as well as slower GDP growth, caused by lower household savings, a narrower tax base and rising welfare costs.
Aware that time is of the essence, prime minister Shinzo Abe has focused considerable effort on persuading Japanese families to up their game when it comes to baby-making. While Japan has seen its fertility rate grow since a low of 1.3 in 2005, Mr Abe is going to have to hope he can persuade his citizens to get on board if the country is going to meet his fertility rate target of 1.8.
To facilitate this, Japan's government has tried a number of different initiatives. Examples include the Plus One Proposal, which has tried to encourage Japanese families to grow by "plus one", as well as the Angel Plan and the New Angel Plan, which were used to make having children easier and more attractive. Incentives included boosting the number of childcare places available throughout the country, with free childcare for infants aged three to five years old.
Japan has also doled out cash payments for new mothers. However, this can't be extended to paying women to take care of their own children, as Japan still needs to address its impending labour shortage.
Another thing that needs to be tackled to kickstart a baby boom is Japan's culture of workaholism, which is so severe that karoshi – literally death by overwork – is now an infamous phenomenon. Dr Jones says the government is currently considering legislation that would cap the total amount of overtime a worker could do at 100 hours a month, limited to 720 hours a year. By reducing the number of hours that people can work, Japan is trying to improve work-life balance and free people up to spend more time with their families.
So far, initiatives to boost Japan's fertility rate have had limited success, at least according to a case study published by the Centre for Public Impact. The organisation says that while Japan's fertility rate has increased, it continues to lag behind the OECD average of 1.7.
What's more, despite even limited success in growing fertility rates, the Centre for Public Impact also found that the number of women of child-bearing age leaving the labour force has increased; the exact opposite of what the Japanese government is hoping to achieve. With day-care waiting lists in the 20,000s, it is unlikely that returning to work for many young mothers will be an option any time soon.
Whatever Japan's future, the country is not alone in facing such problems. Low fertility rates, coupled with ageing populations, are testing nations across the Far East, including Taiwan and South Korea.


It summarizes the advantages and disadvantages of felt with six months to "soap toothpaste"
As a toothpaste that does not use a synthetic surfactant, attention "soap toothpaste". Because actually was worrisome, it uses from about six months ago. So and it was felt, I would like to write To Tsuratsura that I thought about, such as chemicals that you are using.
When I first began to use, "exhilaration" and "polished feel" like a thing is absolutely no obtained when I brushed my teeth, enough to refurbish the "Aquafresh" after I brushed my teeth in the "soap toothpaste". In fact, using about one week, we return to the "Aquafresh" that has been used previously.
Still, that does not use the "synthetic surfactant", it is attracted to the one point, the challenge to again "soap toothpaste".
Again, and it does not foam, "exhilaration" in that there is no stimulation, but I did not at all, there was little change.
And get up in the morning, discomfort was bad breath and Nebatto is worrisome, but I was as soon as brushing teeth, there was a peculiar of nausea. It is no longer. Of course, If you think, to wake up in the morning, once it came those that foam stimulation strongly well into sudden mouth, and deny the body.
Also there was a change in the subsequent breakfast.
That taste of food after the toothpaste is, I had changed it's before, which came to nearly ingredients of taste, the food original taste enjoy. Immediately and bad breath in the morning, without feeling the discomfort, the delicious breakfast is eaten, now expire well very mood of the start of the day. Morning coffee remains also delicious.
Roughly, when I was just one month. Feeling that I felt in the beginning was time, "there is no sense of exhilaration," "there is no feeling that polished" is no longer.
"Polished feeling" is, I feel that was better than before perhaps. Because, now polish up every corner because it does not so much foam. Also, that was whether the time is also previously polish 1 minute, looks like time spent in one-time toothpaste is 3 minutes polish, because actually a long time brushing. Also with respect to its effervescent, but is insanely fine foam, you can realize that you are properly foaming.
For the "exhilaration", although there is there is more of the previous things, this also is not worried now at all. By familiar, it refreshing feeling after brushing can be obtained.
I mean toothpaste of taste, because the smell is also "soap toothpaste" is using the natural peppermint flavor, the taste of soap does not at all.
There is no immediate discomfort happening, breakfast also makes delicious, nor Ezuku.Disadvantages felt initially use also, I feel the benefits in the current. I just got used.
And the little foam, sometimes called low-stimulation, without reluctant even in children, it does not might be toothpaste.
Change of pace "Auroshikha incense" at home all day long.
Putting the cart before the horse sake of insect:Over thirties drunk's ballade.


You take one step inside, immediately whip off your bra and put on the comfiest sweats you own before settling in front of the TV and ordering takeout? #Same. All of my grand plans for getting ahead of work, doing a load of laundry, and cooking a magnificent Instagram-worthy dinner that would make Betty Crocker cry seem to fly out the window on the commute home.
The solution? Overhaul your after-work routine. If you've got your mornings and evenings down pat, it's time to look at the 5-7pm range to maximize your time and lead a less stressful life.
It takes the same amount of effort to hang up your keys and place your bag in a designated spot as it does to toss them on the floor. Avoid morning can't-find-my-keys panic by putting everything in the proper place as soon as you get home.
No matter how many healthy dinner recipes I pin on Pinterest, when I come home from work, I'm tired, ravenous, and will scarf down an amount of Doritos that would put any teenage boy to shame. During your weekly grocery shop, pick up a few healthy snacks that you'll look forward to munching on to hold you over until dinner. Sprinkle cinnamon on apple slices or grab a granola bar with as much protein as possible.
If you come home from a stressful day and want to have a productive night, you need to take some time to decompress. Catch up with your roommates, take your dogs for a long walk, or spend a few minutes with your journal to blow off some steam. The goal is to unwind without a full bedtime routine, just enough to recharge your batteries.
If I had a dollar for every time I ran out the door with my shoes and jewelry in hand because I didn't plan my morning routine, I wouldn't have to rush to a job every day! Take the 10 minutes every night to pick out your clothes for the next day, pack your lunch/work bag, and set your alarm for the real time you need to get up (not the if-I-hit-snooze-five-times time).
What's your go-to afternoon routine? Let us know in the comments.
Shop Fashion Jewelry, Leather Watches, White Tank Tops, Tan Coats and more. Get this widget.


Do We Already Have to Nuance ObamaCare?
The Affordable Care Act (Obamacare) is just about the worst piece of legislation imaginable, passed by the barest of margins against strong public opposition. Nearly two years after passage, it's growing more and more unpopular. So is now the time to equivocate on whether it's bad, really bad, or just slightly a little less than not that bad?
As Ace of Spades points out, the nomination of Mitt Romney by Republicans would probably mean just that. Romney has repeatedly expressed support for parts of Obamacare. Romney even supports its most unpopular feature, the individual mandate to buy health insurance, when undertaken at the state level.
While it may be true that a mandate to purchase a product is within the boundaries of the authority of states, that does not mean that forcing people to buy something is a good use of state power — or a good precedent for the people to allow.
But the main point here is that Romney is going to be forced to fall back to states' rights or utilitarian arguments, rather than being able to boldly proclaim that the government doesn't have the authority to tell Americans what to do, only the far weaker ability to tell them what they may not.
Mitt Romney still thinks the individual mandate is conservative.
See more at Ace of Spades HQ.


text:
2011 NHL Stanley Cup Finals Game 6 - Boston 5, Vancouver 2 – Series tied, 3-3
And then there was one.
A single game will decide the 2011 Stanley Cup champion, because after six games of this home-sweet-home series, neither the Vancouver Canucks or the Boston Bruins have been able to figure out how to win a road game.
Sure, Boston has outscored Vancouver 19-8 over these six games after Monday night's decisive three-goal romp at TD Garden in Beantown, but the margin of victory really doesn't mean much of anything. The ability to dig out one-goal wins is central to success in hockey's postseason, and that's what Vancouver has done three times on home ice against Boston. The Bruins, to their credit, have responded in New England on three must-win occasions, but at the end of the day, Boston's blowouts don't change the only piece of arithmetic that matters: the number of games won. It's three for each side, meaning that on Wednesday night in the province of British Columbia, Lord Stanley's coveted trophy will be given to one team while the other will have to absorb the sting of coming so close and so far without touching the most revered piece of hardware in North American team sports.
How did Boston even up the series for the second and last time on Monday? It's really quite simple: This was a wash, rinse, repeat cycle, a virtual carbon copy of Games 3 and 4. Much as Vancouver won three nail-biters at home, Boston completed a troika of devastating takedowns in its own building. Game 3 was an 8-1 laugher, Game 4 a 4-0 wipeout. This one-sided affair was little different. The Bruins poured on the pressure from the start, outworking the Canucks left and right. Vancouver goalie Roberto Luongo, an Olympic gold medalist who has played in just about every pressure situation imaginable, has been lights-out at home in this series, but in Boston, he's been a ghost. Luongo let in one soft goal after another in the first 10 minutes of play and was promptly yanked by coach Alain Vigneault well before the first period ended… wait, that's not even terribly accurate. Luongo was pulled 8:35 into the game after allowing his third goal on just eight shots. Cory Schneider played the rest of the game for the Canucks, performing serviceably but still allowing two goals as Boston built a late 5-1 lead and coasted to the finish line. Five different Bruins scored in what was another thorough performance for the Bs at home. However, as strong as Boston played yet again in New England, the Bruins have to win on the West Coast if they want to sip from the Cup.
Both teams must get on the big bird one more time and fly to Vancouver for Game 7. All that's left is to rest, recharge, and let it ride in the final hockey game of the 2011 season.


A few of our engineers from UgCS team recently built a project in their off-time that we thought some of you might be interested in seeing.
Since kids having lots of Lego bricks can cause somewhat of a chaos, the guys from our team have built an automated lego sorter to deal with this problem. It uses a vibratory bowl feeder and an artificial neural network (ANN) to feed the bricks up a path, identify them and sort. Currently, in the prototype version, it's only working with maximum brick sizes of 4x2, but with some modifications it can be made to accept a wider range of Lego bricks.
We're curious to hear your thoughts on it and maybe some ideas on where it could be used or how it can be improved.
Great project guys!, but why is the seperation time so slow?
At my University I saw a similar project but with much faster seperation time.
It was based on a color sensor based on RGB values and reflection coefficent based on color reflection. not based on a standard camera. The processing was made using ARM Cortex M4, and the major components such as motor, gear, solonoid etc. was modelled and used a MPC (model predictve control) for high accuracy and fast response.
Also using a neuralnetwork might be overkill for this purpose?
But after all the mechanical part looks good.
It's the first prototype built to have all components connected and working. As you can see on the video we have implemented a simple linear common control algorithm. We think that we can reach a performance of 2-5 bricks per second.
A neural network is of course an overkill for sorting same bricks by color :).
Just kidding, my son, which I shared the post with, is already excited! Great project!
$375 would buy a vibratory bowel feeder or a new lego set. But it does have the words "neural network" in it.