Author: claimsbot

What is Claimed is:
1. A network system providing integration, comprising:
a client computer;
a server;
a server-side cryptographic function providing cryptographic services located on the server;
a PKI-Bridge providing an interface between the server and the server-side cryptographic function;
a remote access switch providing an interface between the client computer and the server;
a client-side cryptographic function providing cryptographic services located on the client computer;
a dial-up client providing dialing services to access the remote access switch; and
a custom script dynamically linked library providing an interface between the dial-up client and the client-side cryptographic function.

2. The network system of claim 1, further comprising:
a security device holding authentication information; and
a security device reader attached to the client computer for reading the security device.

3. The network system of claim 2, wherein a certificate is stored on the security device.

4. The network system of claim 2, wherein the security device is a smart card.

5. The network system of claim 1, further comprising:
a directory service accessed by the server-side cryptographic function.

6. The network system of claim 5, wherein the directory service is lightweight directory access protocol compliant.

7. The network system of claim 1, wherein the client-side cryptographic function and the server-side cryptographic function employ the same cryptographic scheme.

8. The network system of claim 1, wherein the server-side cryptographic function uses a random number generator to generate a challenge string.

9. The network system of claim 1, wherein a client-side cryptographic function uses a random number generator to generate a response string.

10. The network system of claim 1, wherein the client-side cryptographic function generates a signed response string.

11. The network system of claim 1, wherein the server-side cryptographic function generates a challenge string.

12. The network system of claim 1, wherein the server-side cryptographic function verifies the signed response string.

13. The network system of claim 1, wherein the dial-up client operates in terminal mode.

14. A network system providing integration, comprising:
a client computer;
a server;
a server-side cryptographic function providing cryptographic services located on the server;
a PKI-Bridge providing an interface between the server and the server-side cryptographic function;
a remote access switch providing an interface between the client computer and the server;
a client-side cryptographic function providing cryptographic services located on the client computer;
a dial-up client providing dialing services to access the remote access switch;
a custom script dynamically linked library providing an interface between the dial-up client and the client-side cryptographic function;
a security device holding authentication information;
a security device reader attached to the client computer for reading the security device; and
a directory service accessed by the server-side cryptographic function.

15. A client computer comprising:
a dial-up client providing dialing services to the client computer;
a client-side cryptographic function providing cryptographic services located on the client computer; and
a custom script dynamically linked library providing an interface between the dial-up client and the client-side cryptographic function.

16. The client computer of claim 15, further comprising:
a security device reader attached to the client computer for reading a security device.

17. The client computer of claim 15, wherein a security device is a smart card.

18. The client computer of claim 15, wherein the custom script dynamically linked library comprises a SDLogin component and a SDSetupDial component.

19. The client computer of claim 15, wherein the dial-up client automates the authentication process using a hidden terminal operating in terminal mode.

20. A client computer comprising:
a dial-up client providing dialing services to the client computer;
a client-side cryptographic function providing cryptographic services located on the client computer;
a custom script dynamically linked library providing an interface between the dial-up client and the client-side cryptographic function; and
a security device reader attached to the client computer for reading a security device.

21. A server comprising:
a server-side cryptographic function providing cryptographic services located on the server; and
a PKI-Bridge providing an interface between the server and the server-side cryptographic function.

22. The server of claim 21, further comprising:
a directory service accessed by the server-side cryptographic function.

23. A server comprising:
a server-side cryptographic function providing cryptographic services located on the server;
a PKI-Bridge providing an interface between the server and the server-side cryptographic function; and
a directory service accessed by the server-side cryptographic function.

24. A method of integrating via a dial-up interface, comprising:
sending session initiation information from a dial-up client to a PKI-Bridge;
checking session initiation information by the PKI-Bridge;
generating a challenge string by a server-side cryptographic function;
forwarding the challenge string to a custom script dynamically linked library;
forwarding the challenge string to a client-side cryptographic function from the custom script dynamically linked library;
utilizing a private key from a security device;
generating a response string;
signing the response string with the private key of a dial-in user;
forwarding a signed response string to the custom script dynamically linked library;
dividing the signed response string into packets;
forwarding packets to the PKI-Bridge;
reconstructing the signed response string from packets;
forwarding a reconstructed signed response string to the server-side cryptographic function;
obtaining a public key of the dial-in user; and
verifying the reconstructed signed response string using the server-side cryptographic function.

25. The method of claim 24, further comprising:
reading the security device by a security device reader.

26. The method of claim 24, further comprising:
encoding the signed response string.

27. The method of claim 24, further comprising:
decoding the signed response string.

28. The method of claim 24, further comprising:
forwarding the challenge string to the dial-up client; and
forwarding the challenge string to the PKI-Bridge.

29. The method of claim 24, further comprising:
forwarding packets from the custom script dynamically linked library.

30. The method of claim 24, wherein the security device is a smart card.

31. The method of claim 24, wherein the session initiation information comprises version information and a distinguished name.

32. The method of claim 24, wherein the public key is stored on a directory service.

33. The method of claim 32, wherein the directory service is lightweight directory access protocol compliant.

34. A method of integrating via a dial-up interface, comprising:
sending session initiation information from a dial-up client to a PKI-Bridge;
checking session initiation information by the PKI-Bridge;
generating a challenge string by a server-side cryptographic function;
forwarding the challenge string to a custom script dynamically linked library;
forwarding the challenge string to a client-side cryptographic function from the custom script dynamically linked library;
utilizing a private key from a security device;
generating a response string;
signing the response string with the private key of a dial-in user;
forwarding a signed response string to the custom script dynamically linked library;
dividing the signed response string into packets;
forwarding packets to the PKI-Bridge;
reconstructing the signed response string from packets;
forwarding a reconstructed signed response string to the server-side cryptographic function;
obtaining a public key of the dial-in user;
verifying the reconstructed signed response string using the server-side cryptographic function;
reading the security device by a security device reader;
encoding the signed response string;
decoding the signed response string;
forwarding the challenge string to the dial-up client;
forwarding the challenge string to the PKI-Bridge; and
forwarding packets from the custom script dynamically linked library.

35. An apparatus of integrating via a dial-up interface, comprising:
means for sending session initiation information from a dial-up client to a PKI-Bridge;
means for checking session initiation information by the PKI-Bridge;
means for generating a challenge string by a server-side cryptographic function;
means for forwarding the challenge string to a custom script dynamically linked library;
means for forwarding the challenge string to a client-side cryptographic function from the custom script dynamically linked library;
means for utilizing a private key from a security device;
means for generating a response string;
means for signing the response string with the private key of a dial-in user;
means for forwarding a signed response string to the custom script dynamically linked library;
means for dividing the signed response string into packets;
means for forwarding packets to the PKI-Bridge;
means for reconstructing the signed response string from packets;
means for forwarding a reconstructed signed response string to the server-side cryptographic function;
means for obtaining a public key of the dial-in user; and
means for verifying the reconstructed signed response string using the server-side cryptographic function.

The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.

1. Fragrance diffusion device (20; 70), which comprises:
two opposing walls (30, 32; 72, 74) spaced apart from one another along a vertical longitudinal axis (L) so as to define between them a cavity (C) which extends transversally as far as a peripheral wall (40) provided with at least one opening (42) for diffusing fragrance to outside the device, said at least one opening placing the cavity in communication with the outside of the device,
several openings (O1, O2; O\u20321, O\u20322) formed in each of the two opposing walls and which pass through the relevant wall in such a way as to allow, in the case of a first (30) of the two walls which is situated above the second wall (32), the passage of the liquid fragrance from a first zone (Z1) into the cavity so that said fragrance can be diffused to outside the device via said at least one diffusion opening, the first zone being adjacent to said first wall, above the latter and separated from the cavity by this first wall and, in the case of the second (32) of the two walls, the passage of the liquid fragrance from the cavity to a second zone (Z2) which is adjacent to said second wall, underneath the latter and separated from the cavity by this second wall,
at least one duct (44, 46) which passes through each of the two opposing walls and extends into the zone adjacent to the relevant wall so as to place each zone adjacent to each wall in communication with the cavity, said at least one duct formed in the first wall (30) being an air intake duct (44) which directly takes in air from the outside of the device via said at least one opening (42) and the cavity, whereas said at least one duct (46) formed in the second wall (32) is a flow duct for the liquid fragrance coming from the cavity.
2. Device according to claim 1, wherein said at least one air intake duct (44) extends in the first zone (Z1) over a height suited to the open end (44a) of said at least one air intake duct being at a position above the level of liquid fragrance contained in the first zone (Z1).
3. Device according to claim 1, wherein at least certain openings formed in the two opposing walls are each extended by a neck which projects into the cavity with respect to the relevant wall.
4. Device according to claim 1, wherein the openings (O1, O2; O\u20321, O\u20322) of one of the two opposing walls are geometrically offset in relation to the openings of the other wall.
5. Device according to claim 1, further comprising several liquid-fragrance flow-retarding elements (76; 102, 104, 106, 108) each comprising a body of elongate overall shape, the bodies extending into the cavity so as each to connect two respective openings of the two opposing walls, thus allowing the liquid fragrance to be guided via each flow-retarding element from an opening in the first wall (30) to an opening in the second wall (32).
6. Device according to claim 5, wherein the bodies of the fragrance flow-retarding elements are formed of several tubes (76) which extend into the cavity in such a way that each tube connects together two respective openings of the two opposing walls, thus allowing the liquid fragrance to be guided via each tube from an opening in the first wall to an opening in the second wall.
7. Device according to claim 1, wherein each of the two opposing walls (30, 32; 72, 74) has a concave overall shape with the concave side facing towards the cavity and comprises a central region.
8. Device according to claim 1, wherein said at least one duct (44, 46) is situated in the central region.
9. Device according to claim 5, wherein the at least one duct (44, 46) is situated in the central region, and the liquid-fragrance flow-retarding elements (76; 102, 104, 106, 108) are arranged around said at least one duct.
10. Device according to claim 1, further comprising one or more elements (112, 114) made of absorbent material, which are formed on each of the two opposing walls (30, 32).
11. Fragrance diffusion system (10; 60), which comprises:
a diffusion device (20; 70) according to claim 1,
an upper first bottle (12) having a first neck (12a) the opening of which is positioned facing the first (30; 72) of the two opposing walls referred to as the upper wall; a lower second bottle (14) having a second neck (14a) the opening of which is positioned facing the second wall referred to as the lower wall (32; 74), the upper first bottle comprising the liquid fragrance which, by flowing drop by drop through the openings (O1, O2; O\u20321, O\u20322) on the one hand causes the fragrance to diffuse into the cavity (C) and to outside of the device via the said at least one opening (42), and on the other hand causes dripping drop by drop into the lower second bottle.
12. Method for diffusing a fragrance in a fragrance diffusion device (20; 70), wherein the device comprises:
two opposing walls (30, 32; 72, 74) spaced apart from one another along a vertical longitudinal axis (L) so as to define between them a cavity (C) which extends transversally as far as a peripheral wall (40) provided with at least one opening (42) for diffusing fragrance to outside the device, said at least one opening placing the cavity in communication with the outside of the device,
several openings (O1, O2; O\u20321, O\u20322) formed in each of the two opposing walls and which pass through the relevant wall in such a way as to allow, in the case of a first (30) of the two walls which is situated above the second wall (32), the passage of the liquid fragrance from a first zone (Z1) into the cavity so that said fragrance can be diffused to outside the device via said at least one diffusion opening, the first zone being adjacent to said first wall, above the latter and separated from the cavity by this first wall and, in the case of the second (32) of the two walls, the passage of the liquid fragrance from the cavity to a second zone (Z2) which is adjacent to said second wall, underneath the latter and separated from the cavity by this second wall,
at least one duct (44, 46) which passes through each of the two opposing walls and extends into the zone adjacent to the relevant wall so as to place each zone adjacent to each wall in communication with the cavity, said at least one duct formed in the first wall (30) being an air intake duct (44) whereas said at least one duct (46) formed in the second wall (32) is a flow duct for the fragrance coming from the cavity, according to the method, the liquid fragrance contained in the first zone (Z1) flows through the openings (O1; O\u20321) in the first wall (30) so that, on the one hand, the fragrance diffuses into the cavity (C) and to outside the device via said at least one opening (42) and, on the other hand, the remaining liquid fragrance that has not diffused flows into the second zone (Z2) via said at least one duct (46), the flow of liquid fragrance through the openings in the first wall (30) being permitted as a result of the intake of external air via said at least one opening (42), the cavity (C) and said at least one air intake duct (44).
13. Method according to claim 12, wherein the flow of liquid fragrance from the first zone (Z1) through the openings (O1; O\u20321) in the first wall (30) is diverted, as it passes into the cavity, from a direct path in order to reach the second wall (32) so as to increase the time for which said flow is present in said cavity.
14. Method according to claim 13, wherein the flow of liquid fragrance is diverted by encountering a number of obstacles (76; 102; 104; 106; 108) present in the cavity (C).
15. Method according to claim 12, characterized in that the diffusion of fragrance takes place in a fragrance diffusion system (10; 60) comprising:
a fragrance diffusion device (20; 70),
an upper first bottle (12) having a first neck (12a) the opening of which is positioned facing the first (30; 72) of the two opposing walls referred to as the upper wall; a lower second bottle (14) having a second neck (14a) the opening of which is positioned facing the second wall referred to as the lower wall (32; 74), the upper first bottle comprising the fragrance.
16. Device according to claim 2, wherein at least certain openings formed in the two opposing walls are each extended by a neck which projects into the cavity with respect to the relevant wall.
17. Device according to claim 2, wherein the openings (O1, O2; O\u20321, O\u20322) of one of the two opposing walls are geometrically offset in relation to the openings of the other wall.
18. Device according to claim 2, further comprising several liquid-fragrance flow-retarding elements (76; 102, 104, 106, 108) each comprising a body of elongate overall shape, the bodies extending into the cavity so as each to connect two respective openings of the two opposing walls, thus allowing the liquid fragrance to be guided via each flow-retarding element from an opening in the first wall (30) to an opening in the second wall (32).

1. An adjustable wireway assembly comprising:
a panel structured to form a portion of an electrical enclosure, the panel having a first aperture defined therein; and
a plate member selectively coupled to the panel about a portion of the first aperture in at least one of a first position and a second position in a manner that blocks at least a portion of the first aperture and thereby defines a second aperture formed from a portion of the first aperture,
wherein when coupled in the first position the second aperture is of a first area and when coupled in the second position the second aperture is of a second area different than the first area.
2. The wireway assembly of claim 1 wherein the plate member includes a number of apertures formed therein; and wherein when the plate member is disposed in either of the first or second positions the plate member is coupled to the panel via a number of threaded fasteners, each protruding through a respective one of the apertures.
3. The wireway assembly of claim 2 wherein each aperture of the number of apertures formed in the plate member is formed as a slot and wherein the plate member is slidable among a number of positions between the first position and the second position.
4. The wireway assembly of claim 3 wherein the plate member is selectively coupled to the panel in any of the number of positions between the first position and the second position.
5. The wireway assembly of claim 1 wherein the plate member is a first plate member; wherein the wireway assembly comprises a second plate member selectively coupled to the panel about another portion of the first aperture on a side opposite the first plate member, the second plate member being selectively coupled to the panel so as to be moveable generally toward or way from the first plate member in at least one of a first position and a second position in a manner that blocks another portion of the first aperture and thereby, along with the first plate member, defines a third aperture formed from a portion of the first aperture, wherein when the second plate member is coupled in the first position the third aperture is of a first area and when coupled in the second position the third aperture is of a second area different than the first area.
6. The wireway assembly of claim 5 wherein the second plate member includes a number of apertures formed therein; and wherein when the second plate member is disposed in either of the first or second positions the second plate member is coupled to the panel via a number of threaded fasteners, each protruding through a respective one of the apertures.
7. The wireway assembly of claim 6 wherein each aperture of the number of apertures formed in the second plate member is formed as a slot and wherein the second plate member is slidable among a number of positions between the first position and the second position.
8. The wireway assembly of claim 7 wherein the second plate member is selectively coupled to the panel in any of the number of positions between the first position and the second position.
9. An electrical enclosure comprising:
a housing formed from a number of panels; and
an adjustable wireway assembly comprising:
one of the panels forming housing, the panel having a first aperture defined therein; and
a plate member selectively coupled to the panel about a portion of the first aperture in at least one of a first position and a second position in a manner that blocks at least a portion of the first aperture and thereby defines a second aperture formed from a portion of the first aperture,

wherein when coupled in the first position the second aperture is of a first area and when coupled in the second position the second aperture is of a second area different than the first area.
10. The electrical enclosure of claim 9 wherein the plate member includes a number of apertures formed therein; and wherein when the plate member is disposed in either of the first or second positions the plate member is coupled to the panel via a number of threaded fasteners, each protruding through a respective one of the apertures.
11. The electrical enclosure of claim 10 wherein each aperture of the number of apertures formed in the plate member is formed as a slot and wherein the plate member is slidable among a number of positions between the first position and the second position.
12. The electrical enclosure of claim 11 wherein the plate member is selectively coupled to the panel in any of the number of positions between the first position and the second position.
13. The electrical enclosure of claim 9 wherein the plate member is a first plate member; wherein the wireway assembly comprises a second plate member selectively coupled to the panel about another portion of the first aperture on a side opposite the first plate member, the second plate member being selectively coupled to the panel so as to be moveable generally toward or way from the first plate member in at least one of a first position and a second position in a manner that blocks another portion of the first aperture and thereby, along with the first plate member, defines a third aperture formed from a portion of the first aperture, wherein when the second plate member is coupled in the first position the third aperture is of a first area and when coupled in the second position the third aperture is of a second area different than the first area.
14. The electrical enclosure of claim 13 wherein the second plate member includes a number of apertures formed therein; and wherein when the second plate member is disposed in either of the first or second positions the second plate member is coupled to the panel via a number of threaded fasteners, each protruding through a respective one of the apertures.
15. The electrical enclosure of claim 14 wherein each aperture of the number of apertures formed in the second plate member is formed as a slot and wherein the second plate member is slidable among a number of positions between the first position and the second position.
16. The electrical enclosure of claim 15 wherein the second plate member is selectively coupled to the panel in any of the number of positions between the first position and the second position.
17. A method of assembling a sealed wireway assembly in an electrical enclosure, the method comprising:
passing a number of wires through an aperture formed in a panel of the electrical enclosure;
generally centering a gasket material disposed about the number of wires in the aperture; and
adjusting the position, with respect to the panel, of a first plate member disposed about the aperture such that a snug fit is produced between at least a portion of the first plate member and the gasket material and between at least a portion of the aperture and the gasket material.
18. The method of claim 17 wherein adjusting the position, with respect to the panel, of the first plate member comprises sliding the first plate member with respect to the panel and coupling the first plate member to the panel.
19. The method of claim 17 further comprising:
adjusting the position, with respect to the panel, of a second plate member disposed about the aperture such that a snug fit is produced between at least a portion of the second plate member and the gasket material and between at least a portion of the first plate member and the gasket material.
20. The method of claim 19 wherein adjusting the position, with respect to the panel, of the second plate member comprises sliding the second plate member with respect to the panel and coupling the second plate member to the panel.

The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.

1. A network relay device, comprising:
a communication unit for sending and receiving communication data,
an authentication processing unit for creating first information specifying an authenticated terminal device according to a result of web authentication that determines whether or not a connection to a specified network by a terminal device connected to the network relay device is permissible, and for managing whether or not relay of communication data between a terminal device and a node on the specified network by the communication unit is permissible based on the first information,
a DHCP snooping processing unit for executing snooping of DHCP communication data relayed by the communication unit between a terminal device and a DHCP server, and for creating second information specifying a layer 3 address allocated to each terminal device based on the DHCP communication data, and
a terminal search processing unit that specifies a terminal device that has already been authenticated based on the first information, specifies a layer 3 address allocated to the specified authenticated terminal device based on the second information, and causes the communication unit to send, to the specified layer 3 address, confirmation communication data for confirming whether or not the specified authenticated terminal is connected to the specified network.
2. A network relay device according to claim 1, wherein
the terminal search processing unit causes the authentication processing unit to cancel authentication for the specified authenticated terminal device when there is no response to the confirmation communication data sent a predetermined number of times from the specified authenticated terminal device.
3. A network relay device according to claim 1, wherein
the terminal search processing unit creates third information specifying a layer 3 address allocated for each authenticated terminal device based on the first information and the second information, and selects authenticated terminal devices registered in the third information in sequence as a subject of confirmation of whether it is connected to the specified network.
4. A network relay device according to claim 3, wherein
the terminal search processing unit registers in the third information an authenticated terminal device when a terminal device is authenticated through the web authentication, and registers in the third information a layer 3 address that is registered in the second information in cases when a layer 3 address is not registered in the third information for the authenticated terminal device selected as the confirmation subject, or when a layer 3 address registered in the third information is not identical with the layer 3 address registered in the second information.
5. A network relay device according to claim 4, wherein
the terminal search processing unit, for an authenticated terminal device selected as the confirmation subject, determines that the selected authenticated terminal device has been reconnected after being detached once from the specified network, when a same correlation as a correlation of the authenticated terminal device and a layer 3 address registered in the third information is not registered in the second information, and a correlation of the authenticated terminal device and another layer 3 address is registered in the second information.
6. A network relay device according to claim 1, further comprising:
a VLAN setting unit for setting a VLAN to a terminal device so that a VLAN before authentication and a VLAN after authentication do not necessarily match.
7. A network relay device according to claim 1, wherein
the first information, the second information, and the third information specify a terminal device using a layer 2 address.
8. A network relay method, comprising:
creating first information specifying an authenticated terminal device according to a result of web authentication that determines whether or not a connection to a specified network by a terminal device is permissible, and managing whether or not relay of communication data between a terminal device and a node on the specified network is permissible based on the first information,
executing snooping of DHCP communication data relayed between a terminal device and a DHCP server, and creating second information specifying a layer 3 address allocated to each terminal device based on the DHCP communication data, and
specifying a terminal device that has already been authenticated based on the first information, specifying a layer 3 address allocated to the specified authenticated terminal device based on the second information, and sending, to the specified layer 3 address, confirmation communication data for confirming whether or not the specified authenticated terminal is connected to the specified network.