Author: claimsbot

1-8. (canceled)
9. A pharmaceutical composition comprising a particulate form of 5-4-2-(N-methyl-N-(2-pyridyl)amino)ethoxybenzylthiazolidine-2,4-dione, or a pharmaceutically acceptable form thereof and a pharmaceutically acceptable carrier therefor, wherein said particulate form is comprised of particles having a volume mean diameter with a median value within the range 500 nm to 5 micrometres.
10. The pharmaceutical composition according to claim 9, wherein the median value of the volume mean diameter of the particles is less than 1 micrometre.
11. The pharmaceutical composition according to claim 9, wherein the median value of the volume mean diameter of the particles is in the range of from 500 nm to 1000 nm.
12. The pharmaceutical composition according to claim 9, comprising a particulate form of 5-4-2-(N-methyl-N-(2-pyridyl)amino)ethoxybenzylthiazolidine-2,4-dione maleate.
13. The pharmaceutical composition according to claim 9, comprising a particulate form of 5-4-2-(N-methyl-N-(2-pyridyl)amino)ethoxybenzylthiazolidine-2,4-dione.
14. A controlled release pharmaceutical composition comprising a particulate form of 5-4-2-(N-methyl-N-(2-pyridyl)amino)ethoxybenzylthiazolidine-2,4-dione, or a pharmaceutically acceptable form thereof and a pharmaceutically acceptable carrier therefor, wherein said particulate form is comprised of particles having a volume mean diameter with a median value within the range 500 nm to 5 micrometres and wherein the carrier is selected to provide a controlled release of 5-4-2-(N-methyl-N-(2-pyridyl)amino)ethoxybenzylthiazolidine-2,4-dione, or pharmaceutically acceptable form thereof.
15. The controlled release pharmaceutical composition according to claim 14, wherein the median value of the volume mean diameter of the particles is less than 1 micrometre.
16. The controlled release pharmaceutical composition according to claim 14, wherein the median value of the volume mean diameter of the particles is in the range of from 500 nm to 1000 nm.
17. The controlled release pharmaceutical composition according to claim 14, comprising a particulate form of 5-4-2-(N-methyl-N-(2-pyridyl)amino)ethoxybenzylthiazolidine-2,4-dione maleate.
18. The controlled release pharmaceutical composition according to claim 14, comprising a particulate form of 5-4-2-(N-methyl-N-(2-pyridyl)amino)ethoxybenzylthiazolidine-2,4-dione.
modified release include delayed, pulsed, and sustained release, either alone or in any combination.
19. The controlled release pharmaceutical composition according to claim 14, wherein the carrier provides a delayed release of 5-4-2-(N-methyl-N-(2-pyridyl)amino)ethoxybenzylthiazolidine-2,4-dione, or pharmaceutically acceptable form thereof.
20. The controlled release pharmaceutical composition according to claim 19, comprising a gastric resistant polymer selected from methacrylates, cellulose acetate phthalate, polyvinyl acetate phthalate, hydroxypropyl methylcellulose phthalate.
21. The controlled release pharmaceutical composition according to claim 14, wherein the carrier provides a sustained release of 5-4-2-(N-methyl-N-(2-pyridyl)amino)ethoxybenzylthiazolidine-2,4-dione, or pharmaceutically acceptable form thereof.
22. The controlled release pharmaceutical composition according to claim 21, wherein the carrier comprises a disintegrating, non-disintegrating or eroding polymer selected from methacrylates, cellulose acetates, hydroxypropyl methylcellulose phthalate, and ethylcellulose.

The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.

1. A computer system, comprising:
an authentication server;
a client in remote communication with the authentication server; and
at least one secure resource in communication with the client;
wherein the client is configured to store on the client a first authenticated credential received from the authentication server in response to a successful user authentication by utilizing a security method to prevent tampering with the credential; and
wherein the client is configured to use the stored first authenticated credential to access the at least one secure resource without further authenticating the first credential with the server or other authenticating entity while the authentication server is not in operative communication with the client.
2. The computer system of claim 1, further comprising a secure gateway machine connected between the authentication server and the client;
wherein the gateway machine is configured to store a second authenticated credential on the gateway received from the authentication server in response to a successful user authentication by utilizing a security method to prevent tampering with the second credential; and
wherein the client is further configured to use the second authenticated credential to access the at least one secure resource without further authenticating the second credential with the server or other authenticating entity while the authentication server is not in operative communication with the gateway.
3. The computer system of claim 2, wherein at least one of the client security method and the gateway security method is encryption, and wherein the client is further configured to decrypt the first credential or the second credential, determine whether the decrypted credential has been tampered with, and fail a user authentication request if decrypted credential has been tampered with.
4. The computer system of claim 3, wherein at least one of the client security method and the gateway security method is Public Key Infrastructure, and wherein the client is further configured to decrypt the first credential or the second credential with a key stored on the client, determine whether the decrypted credential has been tampered with, and fail a user authentication request if decrypted credential has been tampered with.
5. The computer system of claim 3, wherein the client is further configured to use the second authenticated credential prior to using the first authenticated credential in accessing the at least one secure resource without further authenticating either first or second credential with the server or other authenticating entity while the authentication server is not in operative communication with the gateway.
6. The computer system of claim 3 wherein the authenticated user credential is a light-weight directory access protocol.
7. A method for providing access to at least one secure resource, comprising the steps of
storing a first authenticated credential received from an authentication server in remote communication via a secure gateway with a client on the client in response to a successful user authentication by utilizing a security method to prevent tampering with the first credential;
submitting a user authentication request to the authentication server; and
in response to the user authentication request, the client using the stored first authenticated credential to access the at least one secure resource without further authenticating the first credential with the server or other authenticating entity while the authentication server is not in operative communication with the client.
8. The method of claim 7, further comprising the steps of:
providing a secure gateway machine connected between the authentication server and the client;
the gateway machine storing a second authenticated credential on the gateway received from the authentication server in response to a successful user authentication by utilizing a security method to prevent tampering with the second credential; and
the client using the second authenticated credential to access the at least one secure resource without either the client or the gateway further authenticating the second credential with the server or other authenticating entity while the authentication server is not in operative communication with the gateway.
9. The method of claim 8, wherein at least one of the client security method and the gateway security method is encryption, further comprising the steps of:
decrypting the first credential or the second credential;
determining whether the decrypted first or second credential has been tampered with; and
failing a user authentication request if the decrypted first or second credential has been tampered with.
10. The method of claim 9, wherein at least one of the client security method and the gateway security method is Public Key Infrastructure, further comprising the step of decrypting the first credential or the second credential with a key stored on the client.
11. The method of claim 10, wherein the step of using the second authenticated credential to access the at least one secure resource without further authenticating said second credential while the authentication server is not in operative communication occurs prior to the step of using the first authenticated credential to access the at least one secure resource without further authenticating said first credential while the authentication server is not in operative communication.
12. The method of claim 12 wherein the authenticated user credential is a light-weight directory access protocol.
13. A method for providing access to at least one secure resource, comprising the steps of:
submitting a user authentication request to an authentication server in remote communication via a secure gateway with a client in use by said user;
in response to a successful user authentication of the user authentication request, receiving an authenticated user credential which is unique to said user, storing said authenticated credential on said client utilizing a client security method, storing said authenticated credential on said gateway utilizing a gateway security method, and using said authenticated credential to access said at least one secure resource;
in response to an unsuccessful user authentication of the user authentication request, determining whether said authentication server is in operative communication with said client;
in response to a determination that said authentication server is in operative communication with said client, erasing from the client any authenticated credential corresponding to said user, erasing from the gateway any authenticated credential corresponding to said user, and failing the user authentication request;
in response to a determination that said authentication server is not in operative communication with said client; determining whether said gateway is in operative communication with said client, and:
in response to a determination that said gateway is in operative communication with said client, searching the gateway for an authenticated credential corresponding to said user, and:
in response to finding an authenticated credential corresponding to said user on the gateway, using said authenticated credential to access said at least one secure resource without further authenticating the credential with the server or gateway or other authenticating entity; or
in response to not finding an authenticated credential corresponding to said user on the gateway, failing the user authentication request; or

in response to a determination that said gateway is not in operative communication with said client, searching the client for an authenticated credential corresponding to said user; and
in response to finding an authenticated credential corresponding to said user, using said authenticated credential to access said at least one secure resource without further authenticating the credential with the server or the gateway or another authenticating entity while said gateway is not in operative communication with said client; or
in response to not finding an authenticated credential corresponding to said user, failing the user authentication request.
14. The method of claim 13, wherein at least one of said gateway and client security methods is encryption of the credential, further comprising the steps of:
decrypting the credential;
determining whether the decrypted credential has been tampered with; and
failing the user authentication request in response to a determination that the decrypted credential has been tampered with.
15. The method of claim 14 wherein the authenticated user credential is a light-weight directory access protocol.
16. The method of claim 14, the wherein at least one of the steps of using said authenticated credential to access said at least one secure resource further comprises the steps of:
determining an elapsed time since a previous remote server authorization;
comparing the elapsed time to a threshold time; and
in response to the elapsed time exceeding the threshold time, failing the user authentication request.
17. The method of claim 14 further comprising the steps of:
assigning a high sensitivity level or a low sensitivity level to the at least one secure resource; and
failing the user authentication request if the at least one secure resource sensitivity level is the high sensitivity level unless the authenticated credential is found on either the server or the gateway.
18. The method of claim 14 wherein at least one of said gateway and client security methods is Public Key Infrastructure, further comprising the steps of:
decrypting the credential with a key stored on the client;
determining whether the decrypted credential has been tampered with; and
failing the user authentication request in response to a determination that the decrypted credential has been tampered with.
19. The method of claim 18 wherein said Public Key Infrastructure is hardware-based.

What is claimed is:

1. A control apparatus of a storage unit, the control apparatus having a first communication port for conducting communication with a computer, a first processor that controls the first communication port, a first storage device that stores a first queue for storing a command for conducting the communication sent from the computer to the first communication port, a first memory that the first processor accesses, a second communication port for conducting communication with the computer, a second processor that controls the second communication port, and a second storage device that stores a second queue for storing a command for conducting communication sent from the computer to the second communication port, the first processor executing the command stored in the first queue to thereby control the communication with the computer, the second processor executing the command stored in the second queue to thereby control the communication with the computer,
the control apparatus comprising:
a unit causing the second processor to implement execution of the command stored in the first queue; and
a unit changing data stored in the first memory while the second processor is being caused to implement execution of the command stored in the first queue.
2. A control apparatus of a storage unit according to claim 1, wherein the unit causing the second processor to manage execution of the command stored in the first queue is a unit allowing the first processor to transfer the command stored in the first queue to the second queue and allowing the second processor to read the command for execution from the second queue.
3. A control apparatus of a storage unit according to claim 1, wherein the unit causing the second processor to manage execution of the command stored in the first queue is a unit allowing the second processor to read the command for execution from the first queue.
4. A control apparatus of a storage unit according to claim 1, wherein the unit changing data stored in the first memory is a unit allowing the first processor to write data inputted from the outside over data stored in the first memory.
5. A method of controlling a control apparatus of a storage unit, the control apparatus having a first communication port for conducting communication with a computer, a first processor that controls the first communication port, a first storage device that stores a first queue for storing a command for conducting communication sent from the computer to the first communication port, a first nonvolatile memory that the first processor accesses, a second communication port for conducting communication with the computer, a second processor that controls the second communication port, and a second storage device that stores a second queue for storing a command for conducting communication sent from the computer to the second communication port, the first processor executing the command stored in the first queue to thereby control the communication with the computer, the second processor executing the command stored in the second queue to thereby control the communication with the computer,
the method comprising the steps of:
causing the second processor to implement execution of the command stored in the first queue; and
changing data stored in the first nonvolatile memory while the second processor is being caused to implement the execution of the command stored in the first queue.

The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.

1. A method for determining sleep periods within a communications device, comprising:
analyzing at least one of two or more data fields related to a data unit; and
determining device sleep periods based upon the analysis.
2. The method of claim 1, further comprising determining whether data will be available in a subsequent data unit based on the analysis.
3. The method of claim 2, wherein the sleep periods are consecutive sleep periods.
4. The method of claim 3, wherein the sleep periods are separated by awake periods.
5. The method of claim 1, wherein the communicating is based upon orthogonal frequency division multiplexed principles.
6. The method of claim 1, wherein the analyzing occurs within a physical layer of the network.
7. A method for determining sleep periods within a communications device configured to communicate via a network, comprising:
analyzing a data field related to presence of a data unit; and
determining whether data will be available in an ensuing data unit based on the analysis.
8. An apparatus for determining sleep periods within a communications device configured to communicate via a network, comprising:
means for analyzing at least one of two or more data fields related to a data unit; and
means for determining device sleep periods based upon the analysis.
9. The apparatus of claim 8, further comprising means for determining whether data will be available in a subsequent data unit based on the analysis.
10. The apparatus of claim 9, wherein the sleep periods are consecutive sleep periods.
11. The method of claim 10, wherein the sleep periods are separated by awake periods.
12. The method of claim 8, wherein the communicating is based upon orthogonal frequency division multiplexed principles.
13. The method of claim 8, wherein the analyzing occurs within a physical layer of the network.
14. A transceiver configured to determine sleep periods associated with communicating via a network, comprising:
a processor configured to analyze at least one of two or more data fields related to a data unit; and
a timer for determining device sleep periods based upon the analysis.
15. A computer readable medium carrying one or more sequences of one or more instructions for execution by one or more processors to perform a method of determining sleep periods within a communications device, the instructions when executed by the one or more processors, cause the one or more processors to perform the steps of:
analyzing at least one of two or more data fields related to a data unit; and
determining device sleep periods based upon the analysis.
16. The computer readable medium of claim 15, carrying the one of more instructions, further causing the one or more processors to determine whether data will be available in a subsequent data unit based on the analysis.
17. The computer readable medium of claim 15, wherein the sleep periods are consecutive sleep periods.
18. The computer readable medium of claim 17, wherein the sleep periods are separated by awake periods.
19. The computer readable medium of claim 18, wherein the communicating is based upon orthogonal frequency division multiplexed principles.
20. The computer readable medium of claim 15, wherein the analyzing occurs within a physical layer of the network.