Abstract: An intelligent network address translation system and methods for intelligent network address translation. The invention analyzes all data packets being communicated between the private address realm and the public address realm and performs a predefined mode of network address translation based on the packet type. By analyzing every packet that the network encounters and adjusting the network address translation mode based on the packet type, the system and method of the present invention is able to adjust the mode of network address translation dynamically during a network user's ongoing network session. Additionally, by basing which mode of translation will be employed based on packet type the translation method of the present invention insures that IP addresses are distributed efficiently and distribution of the amount of addresses is minimized.

Abstract: A subscriber bandwidth management process and device that allows users/subscribers in a communications network to dynamically alter bandwidth limits independently in both the uplink and downlink data transmission paths. This is accomplished by providing for a single queue in the uplink transmission path and a single queue in the downlink transmission path. Thus, the user/subscriber can efficiently manage their network access according to the specific activity on the network. The network manager benefits from being able structure bandwidth allocation on a per subscriber basis so that overall data transmission is made more efficient. In addition, the bandwidth manager provides active management of the delivery of data (also known as and referred to herein as traffic shaping) to increase throughput from a gateway device onto the network.

Abstract: Systems and methods for selectably controlling and customizing source access to a network, where the source is associated with a source computer, and wherein the source computer has transparent access to the network via a gateway device and no configuration software need be installed on the source computer to access the network. A user may be prevented access from a particular destination or site based upon the user's authorization while being permitted to access to other sites that the method and system deems accessible. The method and system can identify a source without that source's knowledge, and can access customizable access rights corresponding to that source in a source profile database. The source profile database can be a remote authentication dial-in user service (RADIUS) or a lightweight directory access protocol (LDAP) database. The method and system use source profiles within the source profile database to dynamically authorize source access to networks and destinations via networks.

Abstract: A subscriber bandwidth management process and device that allows users/subscribers in a communications network to dynamically alter bandwidth limits independently in both the uplink and downlink data transmission paths. This is accomplished by providing for a single queue in the uplink transmission path and a single queue in the downlink transmission path. Thus, the user/subscriber can efficiently manage their network access according to the specific activity on the network. The network manager benefits from being able structure bandwidth allocation on a per subscriber basis so that overall data transmission is made more efficient. In addition, the bandwidth manager provides active management of the delivery of data (also known as and referred to herein as traffic shaping) to increase throughput from a gateway device onto the network.

Abstract: Systems and methods for selectably controlling and customizing source access to a network, where the source is associated with a source computer, and wherein the source computer has transparent access to the network via a gateway device and no configuration software need be installed on the source computer to access the network. A user may be prevented access from a particular destination or site based upon the user's authorization while being permitted to access to other sites that the method and system deems accessible. The method and system can identify a source without that source's knowledge, and can access customizable access rights corresponding to that source in a source profile database. The source profile database can be a remote authentication dial-in user service (RADIUS) or a lightweight directory access protocol (LDAP) database. The method and system use source profiles within the source profile database to dynamically authorize source access to networks and destinations via networks.

Abstract: A subscriber bandwidth management process and device that allows users/subscribers in a communications network to dynamically alter bandwidth limits independently in both the uplink and downlink data transmission paths. This is accomplished by providing for a single queue in the uplink transmission path and a single queue in the downlink transmission path. Thus, the user/subscriber can efficiently manage their network access according to the specific activity on the network. The network manager benefits from being able structure bandwidth allocation on a per subscriber basis so that overall data transmission is made more efficient. In addition, the bandwidth manager provides active management of the delivery of data (also known as and referred to herein as traffic shaping) to increase throughput from a gateway device onto the network.

Abstract: A system and method for connecting a user device to a network where the user device settings, the network settings, or both are unknown include intercepting packets transmitted by the user device and modifying the packets to be compatible with the network. The system and method are particularly suited for use by mobile computers, such as laptop computers, which are connected to various foreign networks. Depending upon the particular application, a device may be carried with the mobile computer, or attached as a node on the network. The device automatically determines the network settings of the user device and/or the network and modifies packets appropriately so that the user device can communicate over the network without having to reconfigure the user device with appropriate settings for each network it may encounter. Communication settings such as network address, gateway, proxy address, etc. are automatically determined using various techniques.

Abstract: A portable router for enabling a data communication terminal to be location and device transparent includes: a first module for storing a digital communication address of a user; a second module for detecting a data communication network location to which the terminal is connected; a third module for detecting communication devices that are connected to the terminal; a fourth module for establishing data communication between the terminal and the network such that the communication address of the location from the second module is automatically converted to the communication address of the user from the first module; and a fifth module for automatically selecting a communication device which was detected by the third module for use by the fourth module.

Abstract: A system and method of interfacing includes a mobile web information exchange device. Information about a user is recorded on a mobile web recording medium. Information terminals are provided at locations which receive the mobile web recording medium. Information is stored on the Internet or terminals relating to the specific location. The mobile web recording medium, such as any media storage device, is connected to the terminals. A control is provided, either on the storage media or in the terminals for the interaction of the mobile web recording medium with the terminals. Thus information is exchanged by supplying the information about the user to the terminal and by recording selective information data from the terminal and/or Internet to the mobile web recording medium. Such exchange may be effected by inputting commands with a mouse or keyboard or touch screen connected to the terminals. The media storage device is then removed from the terminal and used at as many terminals as desired.

Abstract: A method and apparatus for implementing location-based identification in a communication network. The method comprises establishing a network connection between a host and a network, transmitting network data packets from the host through a connection port, transmitting data packets from the host through a location-specific connection port and identifying the port at an access concentrator in the form of a port identifier. The port identifier is then communicated to a network device, typically a gateway device, and stored in a database in communication with the network device. The method may include tagging the network packets at the access concentrator with a port identifier that corresponds to a media access control (MAC) address. The access concentrator and the network device will tag and communicate port numbers by assigning VLAN (Virtual Local Area Network) identifiers to the ports.

Abstract: Systems and methods for selectably controlling and customizing source access to a network, where the source is associated with a source computer, and wherein the source computer has transparent access to the network via a gateway device and no configuration software need be installed on the source computer to access the network. A user may be prevented access from a particular destination or site based upon the user's authorization while being permitted to access to other sites that the method and system deems accessible. The method and system can identify a source without that source's knowledge, and can access customizable access rights corresponding to that source in a source profile database. The source profile database can be a remote authentication dial-in user service (RADIUS) or a lightweight directory access protocol (LDAP) database. The method and system use source profiles within the source profile database to dynamically authorize source access to networks and destinations via networks.

Abstract: A method and apparatus for implementing dynamic tunnel access sessions at a network device within a communications network. The tunnel access sessions are created between a network device, typically a gateway device and a network service, such as the Internet or a corporate intranet. The dynamic tunnel access sessions provide for subscriber-transparent tunneling. The present invention does not require special client-side software to be loaded on the remote host of the subscriber, and does not require any manual configuration of the remote host. A subscriber is capable of establishing more than one tunnel access session to more than one network service during a network session. Additionally, more than one subscriber who accesses the communication network via the network device is able to establish a communication link with a pre-existing tunnel.

Abstract: A system and method for connecting a user device to a network where the user device settings, the network settings, or both are unknown include intercepting packets transmitted by the user device and modifying the packets to be compatible with the network. The system and method are particularly suited for use by mobile computers, such as laptop computers, which are connected to various foreign networks. Depending upon the particular application, a device may be carried with the mobile computer, or attached as a node on the network. The device automatically determines the network settings of the user device and/or the network and modifies packets appropriately so that the user device can communicate over the network without having to reconfigure the user device with appropriate settings for each network it may encounter. Communication settings such as network address, gateway, proxy address, etc. are automatically determined using various techniques.

Abstract: A network usage monitoring module is provided for monitoring network usage at a network access point, i.e. network traffic aggregation point, typically at a gateway device or a similar network interface device. As such, the network usage monitoring module can monitor the usage of a number of network users who are attempting to access various network services provided via the gateway device. Thus, the usage information collected by the usage monitoring module is considerably more robust than that offered by conventional monitoring techniques. As such, the information is considerably more valuable to network service providers, network users, network beneficiaries and the like. In addition, the usage monitoring method and apparatus offers a number of particular features to improve the monitoring process as well as the value of the usage information that is collected.

Abstract: A system and method for connecting a user device to a network where the user device settings, the network settings, or both are unknown include intercepting packets transmitted by the user device and modifying the packets to be compatible with the network. The system and method are particularly suited for use by mobile computers, such as laptop computers, which are connected to various foreign networks. Depending upon the particular application, a device may be carried with the mobile computer, or attached as a node on the network. The device automatically determines the network settings of the user device and/or the network and modifies packets appropriately so that the user device can communicate over the network without having to reconfigure the user device with appropriate settings for each network it may encounter. Communication settings such as network address, gateway, proxy address, etc. are automatically determined using various techniques.

Abstract: Systems and methods enabling a management system to communicate with a network gateway device to automatically manage a user accessing a computer network, such as a local network. The system includes a computer, and a network gateway device in communication with the computer for connecting the computer to a computer network, wherein the network gateway device maintains data representative of the user's access to the computer network and wherein the network gateway device reconfigures the data. The system also includes a management system connected to said network gateway device for automatically billing the user based upon usage of the computer network, wherein the management system is configured to communicate according to at least one compatible protocol.

Abstract: A system and method for providing connectivity to a foreign network for a device configured for communication over a home network without reconfiguring the device include intercepting packets transmitted by the device, selectively modifying intercepted packets which are incompatible with the foreign network to be compatible with network settings of the foreign network, and selectively providing network services for the device corresponding to network services available on the home network to reduce the delay associated with accessing the network services from the foreign network, or to provide network services otherwise inaccessible from the foreign network. Network services are provided by or through a configuration adapter connected to the device or to the foreign network.

Abstract: Integrated Bandwidth Latency Scheduler apparatus, method and system (collectively, IBLS) combines Fair Queuing and Priority Schedulers in a single stage to provide bandwidth fairness guarantees as well as latency prioritization. The IBLS includes a scheduler and process that dequeues packets from multiple queues in an order based upon an algorithm of the IBLS that arranges and dequeues those queues having the highest priority based on content therein. The IBLS also utilizes quotas and deficit counters to ensure that packets from each source receive their fair portion of the outgoing link bandwidth. To determine which first in first out queue an incoming data packet is placed, the enqueue agent utilized by the present invention classifies incoming packets based on the type of data included within the data packet, the source of the packet, the type of data flow, or another attribute of the packet, such as a header associated with the packet.

Abstract: Users call ONE telephone number from their computer communication link-up. The call goes into a computer which has a large database of the many providers' access numbers. The computer identifies where the user is calling from via any identifying feature included in the invention. The computer figures out the most appropriate (e.g. cheapest/proximal/etc.) number the user should use to connect to the “Net”, which includes cost of the phone call and of the services provided by service providers. The computer then transmits this number back to the remote user, and electronically dials the local (and probably free) number to connect the user to the Net. The user may set up an account, or purchases one temporarily and gets charged for the service provided to him. Users are connected to information networks by providing a central processing station with a database including an index of network access numbers and associated charges for using the numbers.

Abstract: A method for communicating to a host information during an existing networking session. The method comprises the steps of establishing computer network access to a user's host through a gateway interface, creating information and control console packets at the gateway interface, sending the information and control console packets to the user's host, and generating an information and control console on the monitor of the user's host that comprises data. The data will typically comprise user-specific data based upon a user's profile, the chosen billing scheme, the chosen service level or the location from which the user desires access. The gateway interface is capable of transparently connecting the user/subscriber to multiple networks without the need to reconfigure the user's host computer. The information and control console allows the gateway administrator to provide information to the user/subscriber.