Abstract: The invention is directed to providing cloud-based services using dynamic network virtualization. Embodiments of the invention provide a cloud-based service over a system that has a dynamic network virtualization architecture. The architecture includes a set of distributed forwarding elements with centralized control, and at least one virtual machine that is bound to one of the forwarding elements. These features enable the virtual machine to be migrated across a wide area network while maintaining its original IP address and service continuity.

Abstract: An active session mobility solution for radio link protocol (RLP) in accordance with the present invention defines two RLP migrations states. A first state is defined as a forward-link RLP state and depicts the communication of data from a home agent to an access terminal in an IP network. A second state is defined as a reverse-link RLP state and depicts the communication of data from the access terminal to the home agent in the IP network. In one embodiment of the seamless active session mobility solution for RLP in accordance with the present invention, a two-stage RLP transfer process for the migration of the two defined states from a source to a target is implemented. In a first stage, the forward-link RLP state is transferred from a source to a target. In a second stage, frame selection and the reverse-link RLP are transferred from the source to the target.

Abstract: In one embodiment, a scheme for the display of targeted and personalized advertisements in a packet-based media-delivery system, such as an Internet Protocol Television (IPTV) service. An Internet keyword-based advertisement-bidding model is used to place the most-appropriate IPTV advertisements for viewers depending on their interests as determined through the users' Internet activities, while maximizing advertising revenue for the IPTV service provider. One method for scheduling an advertisement for rendering in one or more time slots in packet-based media programming comprises: (a) obtaining at least one keyword from one or more Internet sessions corresponding to at least one user; (b) receiving a plurality of bid amounts corresponding to a plurality of available advertisements for the one or more time slots; and (c) scheduling, based on the at least one keyword and at least one of the bid amounts, the advertisement to be rendered to the at least one user in the one or more time slots.

Abstract: The Fair-Order Service of the present invention delivers action messages to the server as soon as it is feasible. Because action messages from different players exhibit different reaction times with respect to an update message, the Fair-Ordering Service executed at the server dynamically enforces a sufficient waiting period on each action message to guarantee the fair processing of all action messages. In reality, the waiting period at the server is bounded because of the real-time nature of interactive games. The algorithms that offer Fair Ordering Service take into consideration delayed and out-of-order action messages. When action messages corresponding to multiple update messages are interleaved, the Fair-Ordering Service matches the action message to the appropriate update message. It accomplishes this by maintaining a window of update messages and using the reaction times for an action message for each of the update messages in the window.

Abstract: A method and virtual private network (VPN) system for providing bandwidth guaranteed provisioning in network-based mobile VPN services. The method and system include identifying a set of VPN customers, at least one mobile access point (MAP) and at least one customer premise equipment (CPE) associated with each VPN customer, and at least one Internet Protocol (IP) service gateway (IPSG) for facilitating VPN tunneling between a MAP and a CPE, wherein each MAP is geographically remote from each IPSG. A subset of IPSGs is selected to maximize total profit resulting from provisioning a subset of VPN customers on the selected IPSGs. Total profit from all the customers includes the sum of profits from each customer, where for each customer, the customer profit equals weighted revenue less cost, wherein the cost per customer includes a total tunnel bandwidth cost from the MAP to the CPE, and a cost of provisioning an IPSG node.

Abstract: Embodiments of the present invention are methods for selecting, out of a lineup of IPTV channels, a subset of channels for caching. The methods take into account viewers' tendency to walk through the channels that lie between their current channel and their desired channel if that walking distance is short, and, alternatively, viewers' tendency to jump to a distant channel. Accordingly, embodiments of the present invention include any channel selection method which selects for caching any number of channels less than the entire lineup, and where at least two of those channels form a segment of adjacent channels. Other embodiments include methods which rely upon specific extrinsic data, e.g., IGMP and EPG information, for selecting a subset of channels to be cached.

Abstract: The invention comprises a method and apparatus for providing multimedia content to a calling party device. Specifically, the method comprises receiving a connection establishment request from a calling party device where the connection establishment request is operable for establishing a connection between the calling party device and a called party device in an Internet Protocol (IP) Multimedia Subsystem (IMS) network, obtaining multimedia content information in response to the connection establishment request where the multimedia content information is operable for establishing at least one multimedia session with the calling party device, and transmitting at least a portion of the multimedia content information towards the calling party device contemporaneously with establishment of the connection.

Abstract: The Fair-Order Service of the present invention delivers action messages to the server as soon as it is feasible. Because action messages from different players exhibit different reaction times with respect to an update message, the Fair-Ordering Service executed at the server dynamically enforces a sufficient waiting period on each action message to guarantee the fair processing of all action messages. In reality, the waiting period at the server is bounded because of the real-time nature of interactive games. The algorithms that offer Fair Ordering Service take into consideration delayed and out-of-order action messages. When action messages corresponding to multiple update messages are interleaved, the Fair-Ordering Service matches the action message to the appropriate update message. It accomplishes this by maintaining a window of update messages and using the reaction times for an action message for each of the update messages in the window.

Abstract: The Fair-Order Service of the present invention delivers action messages to the server as soon as it is feasible. Because action messages from different players exhibit different reaction times with respect to an update message, the Fair-Ordering Service executed at the server dynamically enforces a sufficient waiting period on each action message to guarantee the fair processing of all action messages. In reality, the waiting period at the server is bounded because of the real-time nature of interactive games. The algorithms that offer Fair Ordering Service take into consideration delayed and out-of-order action messages. When action messages corresponding to multiple update messages are interleaved, the Fair-Ordering Service matches the action message to the appropriate update message. It accomplishes this by maintaining a window of update messages and using the reaction times for an action message for each of the update messages in the window.

Abstract: A method and apparatus for providing at least two virtual private network VPN tunnels from a client device in a VPN network having an enterprise gateway and a network VPN gateway. The method and apparatus includes a client device having an Internet Key Exchange (IKE) module for establishing the at least two tunnels using an IKE protocol wherein a first tunnel is an end-to-end VPN tunnel to the enterprise gateway, and a second tunnel is a network-based tunnel to the network VPN gateway. An IPsec Network Driver Interface interfaces with the IKE module, which includes a security authentication database (SADB) that stores downloaded enterprise security policies respectively for each of the at least two tunnels. A routing table stores IP addresses of local presences and hosts respectively associated with the at least two tunnels, whereby packets are routed over the at least two tunnels based on the downloaded policies.

Abstract: A method and apparatus for providing user orientated wireless data services over a wireless communications network to a plurality of mobile nodes. The wireless communications network includes a plurality of packet data servicing nodes (PDSN's), a plurality of packet control functions (PCFs), and a PCF-PDSN routing controller (PPRC). The PPRC acts as a single PDSN, as well as a surrogate PCF from the perspective of the PDSNs in the private IP network of the service provider. The PPRC serves to provide user oriented wireless services, as opposed to device orientated services. The method includes receiving a data session request from a mobile node, and initiating a point-to-point connection between a PCF receiving the data session request and a PPRC. The PPRC selects one of the PDSNs, and initiates a point-to-point connection between the PPRC and the selected PDSN.

Abstract: An “always-on” network and associated systems enable customers to compare and select products and services offered by one or more providers faster than previously thought possible. In addition, communication connections may be established between customers and providers in real-time.

Abstract: A method for providing peer-to-peer virtual private network (P2P-VPN) services over a network. The method includes identifying subnet and host addresses for each user device requesting participation in a virtual private network (VPN) session. Once the subnet and host addresses are identified, a virtual private host (VPH) is initiated for each user device, where each VPH communicates with each user device via a respective tunnel through the network, thereby enabling secure communications between the user devices.

Abstract: A method and apparatus for identifying virtual private networks (VPNs) in a network of a service provider. The method and apparatus includes generating a VPN routing forwarding—route target (VRF-RT) table for the network. From the VRF-RT table, at least one of a VRF-VRF table and a VRF connectivity graph is generated. From the VRF-RT table, a set of atomic full-mesh components are identified, and from the at least one of a VRF-VRF table and a VRF connectivity graph, at least one set of other types of VPN components are identified, such as atomic single hub-and-spoke components, molecular multi-hub-and-spoke components, composite full-mesh components, composite single hub-and-spoke components, and/or composite multi hub-and-spoke components.

Abstract: A network comprises agents which act as proxies on behalf of devices, such as wireless game devices, phones and personal digital assistants. Each agent collects information concerning a “presence status” of a device. An agent determines whether to forward messages on to a device depending on the collected presence status (e.g., active/inactive) of the device. For example, if the presence status indicates the device is active then messages will be forwarded. If, however, the status indicates the device is inactive the message will not be forwarded. Instead, the agent may act as a proxy for the device while it is inactive. By only forwarding messages when a device is active, valuable airlink time and/or bandwidth can be conserved.

Abstract: Components of an “always-on” network exchange messages to, among other things, allow an agent to monitor the “presence status” of an associated user. By monitoring the presence status of the user, the agent may act as a proxy for the user when the user becomes inactive.

Abstract: Intuitive indicators are presented to the user of a communications device in order to reduce the time it takes the user to launch an application and carry out a communication session, such as an on-line game. Each indicator may be updated by an agent that acts as a proxy for the device even when the device is inactive. Some examples of the indicators presented are: those individuals presently available to play a specific game with the user; the games that are played most often by the user; and those individuals that the user plays games with most often.

Abstract: Sessions, such as on-line gaming sessions, are maintained by proxy agents on behalf of users even when the users are inactive. The agents, along with other components, form a novel “always-on” architecture that greatly reduces the time it takes to initiate and carry out sessions.

Abstract: The invention includes a method and apparatus for attempting to synchronize delivery of information at a plurality of receiving systems. The method includes generating, at a sending system, a plurality of current messages adapted for rendering an asset within an application space of a respective plurality of receiving systems, determining an accumulated export error for each of the receiving systems, transmitting the current messages toward the respective receiving systems in a manner adapted to reduce the accumulated export errors. The accumulated export error for a receiving system includes an estimated current message export error for a current message generated by the sending system for the receiving system and an accumulated previous message export error for at least one previous message generated by the sending system for the receiving system.

Abstract: A logical tree structure and method for managing membership in a multicast group provides scalability and security from internal attacks. The structure defines key groups and subgroups, with each subgroup having a subgroup manager. Dual encryption allows the sender of the multicast data to manage distribution of a first set of encryption keys whereas the individual subgroup managers manage the distribution of a second set of encryption keys. The two key sets allow the sender to delegate much of the group management responsibilities without compromising security because a key from each set is required to access the multicast data. Security is further maintained via a method in which subgroup managers can be either member subgroup managers or participant subgroup managers. Access to both keys is provided to member subgroup managers whereas access to only one key is provided to participant subgroup managers.