Abstract: A method and apparatus for measurement-based conformance testing of service level agreements in networks. The method includes first collecting quality of service information from network traffic over a plurality of network nodes. Then, the collected quality of service information is compared to a plurality of specified quality of service levels. A plurality of possible virtual quality of service pathways through a plurality of network nodes is provided, based on the compared quality of service information. One embodiment of the method includes the additional step of creating a virtual connection using the compared quality of service information. In another embodiment of the method, the step of collecting quality of service information from network traffic over a plurality of network nodes includes first transmitting test traffic from a source to a destination over a plurality of network nodes.

Abstract: A system for dynamically jitter buffering a sequence of packets based on substantially synchronized time signals maintained at the transmitting and receiving ends of a communication system. The time signals may be synchronized, for instance, by equipping both the transmitting and receiving ends with global positioning system receivers. The transmitting end may mark each outgoing packet with a sender-time based on the time signal at the transmitting end. Dynamic jitter buffering may then be provided by scheduling delayed play-out of each packet. For instance, the jitter buffer at the receiving end may be configured to delay play-out of each packet until the time signal at the receiving end indicates a time that is substantially a predetermined end-to-end delay period after the sender-time for the packet.

Abstract: A method and protocol for Distributed Network Address Translation (“DNAT”) is provided. DNAT is used to overcome the limited address 32-bit address space used for versions of the Internet Protocol (“IP”). DNAT is used with small office or home office networks or other legacy local network that have multiple network devices using a common external network address to communicate with an external network. The protocol includes a port allocation protocol to allocate globally unique ports to network devices on a local computer network. The globally unique ports are used in a combination network address with a common external network address such as an IP address, to identify multiple network devices on a local network to an external network such as the Internet, an intranet, or a public switched telephone network.

Abstract: Systems and methods for implementing security with RSIP are disclosed. In a first security system and method, authentication is provided with a combination of a userid and HMAC parameters. The userid parameter identifies the sender and the HMAC parameters are used with a shared key that only the sender and recipient know. Integrity is also provided by the HMAC parameters. Replay protection is provided by a replay counter, and reflection attacks are prevented by the fact that in the RSIP protocol, each entity plays the role of either a host or a gateway, and each RSIP control message can be sent by either a host or a gateway, but not both. Liveness is provided by a combination of the replay counters, userids, host and gateway cookies, and the shared key. The use of cookies allows the shared key to be used between two different sessions, even if the replay counter is reset.

Abstract: A toll saving method and apparatus for a remote access system is provided. A first communication device receives a connection request from a second communication device. The first communication device then decodes caller identification information from the connection request to determine a user identity, without completing the connection request. The first communication device determines whether an event associated with the user identity has occurred. If the event associated with the user identity has not occurred, the connection request is not completed. In a preferred embodiment, the toll saving method and apparatus allows an email user to call an ISP to determine whether unaccessed email is present in the user's account. If no email is present in the user's account, the call is never answered and no toll charges are incurred.

Abstract: A protocol and methods for peer network device discovery is presented. The peer discovery protocol includes a peer discovery marker than can be used with an existing networking protocol such as Transmission Control Protocol (“TCP”) to discover peer network devices. The peer discovery protocol also includes a peer discovery table to record network addresses of peer network devices and their associated host network devices. The peer discovery method allows a first peer network device such as an edge router, to send out a peer discovery request with the peer discovery protocol to other peer network devices as the peer network device is sending data packets for a host network device. Once a second peer network device receives a peer discovery request, the second peer network device attempts to establish a two-way, peer-to-peer data-flow to the first peer network device that sent the peer discovery requests.

Abstract: A method for improving perception of electronic content from a computer network such as the Internet or an intranet. Network latencies and the type of electronic content such as text, graphical images, animation, voice, video and other electronic content interact to influence user perception of the quality of information provided. As network latency increases and becomes more variable, users typically become less satisfied. The method dynamically adjusts the amount of electronic content presented to user based on a determined network latency. The amount of electronic content is also adjusted progressively and underlying transport protocol such as Transmission Control Protocol (“TCP”) and User Datagram Protocol (“UDP”) are adaptively adjusted based on the type of electronic content requested (e.g., TCP for text, UDP for graphical images, etc.).

Abstract: Methods and system for locating network services with distributed network address translation. Digital certificates are created that allow an external network device on an external network, such as the Internet, to request a service from an internal network device on an internal distributed network address translation network, such as a stub local area network. The digital certificates include information obtained with a Port Allocation Protocol used for distributed network address translation. The digital certificates are published on the internal network so they are accessible to external network devices. An external network device retrieves a digital certificate, extracts appropriate information, and sends a service request packet to an internal network device on an internal distributed network address translation network. The external network device is able to locate and request a service from an internal network device.