Abstract: In accordance with the present invention, a portion of a packetized data stream is copied from a data network without interfering with the flow of the data in the network. A known test signal is then substituted for the information contained in each copied packet to prepare a pseudo-media packet stream. The known test signal is encoded and packetized using the same methods used for the copied data stream. The pseudo-media signal is then recovered from the pseudo-media stream using the same depacketizing and decoding methods to be used on the copied packetized data stream. The recovered signal is an accurate representation of the state of the media stream since it has gone through the same packetization/depacketization and encoding/decoding procedures and includes all of the same faults of the copied data stream. The subjective quality of the recovered signal is then measured providing an accurate measure of the subjective quality of the copied media stream.

Abstract: An apparatus and method are provided for estimating the grade of service (52) and offered traffic (51) for voice over internet protocol calls at a gateway (2) bridging calls between a public switched telephone network (3) and an internet protocol network (4), the gateway (2) having a dial-control management information base. The method comprises the steps of periodically polling the dial-control management information base for dial peer traffic statistics (44), storing the polled data, estimating the carried traffic using the polled data (501), estimating the grade of service (52) by utilizing the Erlang-B formula in an inverse manner (502), operating on the estimated carried traffic obtained in the first estimating step (501), and estimating the offered traffic (51) using the estimated values for the carried traffic and the grade of service (52) obtained in the previous estimation steps (503). In a second embodiment of the invention, a system (FIG.

Abstract: A method and system for estimating the location of an injection point of foreign signals in a network comprises the steps of measuring signal samples at two points along the cable network distribution system, correlating the two signal samples to estimate propagation delay differences between the measurement locations and the source, and calculating the location and magnitude of the ingress. The propagation delay, or time correlation, is proportional to the offset of the injection point from the midpoint between the measurement sites, where the two parameters are related by the velocity of propagation in the cable. The amplitude of the correlation peaks represent the magnitude of the ingress at that location. Sensitivity may be increased by time-averaging the output of the correlation step. Multiple sources and/or ingress and egress sites may be measured simultaneously.

Abstract: A system facilitates the visualization of a network having multiple nodes. The system collects information from at least one of the nodes (510). The information describes network operation over a period of time. The system then reconstructs the network operation for the time period from the collected information (520) and presents the reconstructed network operation to an operator (530-550).

Abstract: A method and apparatus is disclosed for improving the security of computer networks by providing a means operating passively on the network for detecting, reporting and responding to intruders. The system is comprised of a plurality of intruder sensor client computers and associated event correlation engines. Resident in the memory of the client computer and operating in the background is a Tactical Internet Device Protection (TIDP) component consisting of a passive intruder detector and a security Management Information Base (MIB). The passive intruder detector component of the TIDP passively monitors operations performed on the client computer and emits a Simple Network Management Protocol (SNMP) trap to an event correlation engine when it identifies a suspected intruder. The event correlation engine, through the use of a behavior model loaded in its memory, determines whether the user's activities are innocent or those of a perspective intruder.

Abstract: A portal switch is provided that controls participation of merchants in on-line aggregators, such as portals, used for buying and selling goods and services. Merchants may enable or disable participation in an aggregator site by turning on or off software settings. When participation is enabled, the merchant's site makes its catalog entries and merchant profile available to the aggregator. By enabling or disabling the switch, the merchant actively expresses a willingness to participate in (or, conversely, a desire to be excluded from) the aggregator.

Abstract: An integrated highly adaptive method is presented to perform scheduling, routing and access control in a network. The network is made up of a plurality of nodes interconnected by links between at least some of the nodes wherein at least one path interconnects all of the plurality of nodes. The nodes are organized into at least one of a cluster and a clique and the network has a network-wide capacity to send data packets in slots delineating time frames on the network between the nodes on the network defined by the links. The plurality of nodes can be configured to process at least one flow comprising at least a portion of a transmitted and received data packet for which the plurality of nodes must manage to get the data packets to a desired node on the network.

Abstract: Methods and systems are provided for processing information. In one embodiment, there is provided a method, providing a frame key based on a master key and a frame number of a frame of information to a keystream generator as an initial fill for one or more registers of the keystream generator such that the initial fill establishes a state for the one or more registers of the keystream generator; and generating, at the keystream generator, a keystream sequence based on the state established by the initial fill, wherein the keystream sequence includes a modulo-2 sum of a lagged-Fibonacci sequence and a pseudo-random sequence produced by a filter generator.

Abstract: The present invention relates to a system and method for dynamically limiting the power of all users of a CDMA digital data link to maximize throughput and reduce interference among users of the link. In the operation of the data link, the maximum power available from each user of the link is determined along with the minimum power needed from each user to meet its link service requirement, that is, quality of service and frame error rate requirements. The maximum to minimum power ratio is derived for each user and the lowest power ratio, that is, the power ratio closest to unity is selected and used to scale upward the minimum power levels of all users of the data link. The resulting power level establishes the interference margin or slack available for all users of the data link and the interference slack available for new users to be admitted to the data link.

Abstract: A method is provided for monitoring transmission signal interference in a bi-directional transmission/reception system in which a modulated signal received at a receiver location is subjected at the receiver location to analog to digital (A/D) conversion by an A/D converter 3, an output of which is routed to an input of a digital demodulator 6 for demodulation. The method includes the steps of accessing the output of the A/D converter 3 before the output is subjected to demodulation by the demodulator 6 and storing the accessed data in a storage buffer 7. The data stored in the storage buffer 7 is available for inspection to assist in determining the presence of signal interference.

Abstract: A network device configured to detect a framing pattern includes a data scanner and a frame detector. The data scanner examines parallel bytes of data and detects portions of a framing pattern in the parallel bytes of data, identifies the phase of the framing pattern and outputs alignment information and phase information when a framing pattern has been detected. The frame detector receives the alignment information and phase information and determines whether framing patterns having the same phase relationship have been detected within a predetermined number of frames.

Abstract: The systems and methods described herein relate to secure extranets which utilize certificate authentication to mediate access, transactions, and user tracking. Such extranets may be employed to provide an interface accessible over a network, such as the Internet, capable of authenticating and recording transactions for business, medical, or other purposes.

Abstract: A system monitors performance in a network (130) having several routers (210). The system determines a roundtrip path in the network (130) between a source and a destination, identifies routers (210) located on the path, collects performance data from the identified routers (210), and compares the performance data to at least one performance criteria to determine compliance with a service-level guarantee.

Abstract: A method is provided for estimating a number of digital subscriber line nodes (220, 230) required to supply, from a line supply source (200), a geographically distributed network of substantially sequentially numbered twisted pair lines with digital subscriber line service. The method comprises the steps of: storing, in number order, data entries for every twisted pair line of the network, each data entry comprising a pair number and a line length of the respective twisted pair line in relation to the line supply source (200); sorting the entries stored in the database by line length; isolating those sorted entries whose twisted pair lines have a line length greater than a predetermined maximum line length in relation to the line supply source (200); sorting the isolated entries by number; and discriminating, from the sorted isolated entries, the presence of discrete groupings of substantially contiguous entries.

Abstract: A method and system for administering calls on a voice network allows a user to selectively determine which calls will be accepted and assists the user in placing calls to other users on the network. The user may establish a list of users whose calls will be accepted and may also establish a list of users whose calls will not be accepted. The method and system may provide unwanted callers with an option to speak with the user for a fee. The method and system may also display phone or other messages to the user on a video display.

Abstract: A system facilitates configuration of at least one of multiple network devices (130) of different types. The system includes a configuration database (310), a policies database (320), a configuration generator (330), and a protocol engine (340). The configuration database (310) stores data that defines a configuration for the network device (130). The policies database (320) stores rules for configuring the network device (130). The configuration generator (330) generates a deployable configuration from the data in the configuration database (310) and the rules in the policies database (320). The protocol engine (340) deploys the deployable configuration to the network device (130).

Abstract: A method and system for controlling congestion in an ATM network comprises the steps of pre-allocating, for a pre-determined interval of time, a set of burst access parameters to a set of pre-allocated virtual paths between a set of source node and destination node pairs in the ATM network, and controlling, at the burst level, the traffic at each source node based on the pre-allocated set of burst access parameters and without communicating with other nodes in the ATM network. Specifically, the network, for a pre-determined interval of time, pre-allocates a set of virtual paths between each source-destination node pair in the network, pre-allocates a set of maximum permitted rates to the pre-allocated set of virtual paths, respectively, and pre-assigns a set of burst access thresholds to a set of service classes, respectively, in the pre-allocated virtual paths, where the pre-assigned burst access thresholds are less than or equal to the corresponding pre-allocated maximum permitted rates.

Abstract: A system monitors performance in a network that includes several network resources. The system obtains a list of targets in the network. The targets include selected ones of the resources. The system sends a request to the targets, receives responses from the targets, and determines a status of the targets based on the received responses or a lack of responses from the targets. The system then analyzes the status of the targets to determine compliance with the service-level guarantee.

Abstract: A multi-line telephony system and method deliver multiple concurrent telephone conversations to a customer premise via a single traditional twisted-pair communications connection, and support telephone services via a traditional dial-up connection. Improved packet-based communications are performed using the multi-line telephony system and method with better transmission characteristics, such as transmission speed, over traditional twisted-pair wire connections to provide H.

Abstract: The present invention provides a method and system for processing and collecting, at a telephone network central office, information for a call directed to a call center prior to the call being received at the call center. A call is received for processing at a telephone network central office that is local to the call origination location. At the central office, a determination is made as to whether the destination number of the call is identified in a selected database. In response to the call destination number being identified in the selected database, the central office solicits the caller to provide requested information. An indication of the requested information received from the caller is included in a data packet associated with the telephone call before the call is transferred from the central office. The call, including the indication of the requested information, is routed to the call center.