Abstract: An example method involves for a first virtual private network (VPN) installed on a candidate hub router, selecting a first spoke-to-hub assignment solution having a first least memory utilization cost to assign the candidate hub router a quantity of first virtual private edge (VPE) routers serving the first VPN; for a second VPN installed on the candidate hub router, selecting a second spoke-to-hub assignment solution having a second least memory utilization cost to assign the candidate hub router a quantity of second VPE routers serving the second VPN; determining third least memory utilization costs to assign the candidate hub router to a quantity of the first VPE routers, and fourth least memory utilization costs to assign the candidate hub router to a quantity of the second VPE routers; and selecting the first or second spoke-to-hub assignment solution for the candidate hub router based on the least memory utilization costs.

Abstract: A networking system comprising a plurality of content routers coupled to each other and to a plurality of providers and configured to route and cache content data, wherein the content routers are further configured to locate and route requested content to a user node coupled to the content routers, wherein the providers are configured to publish content and the content routers are further configured to receive and cache the content data in response to an interest request for content and to flood a content identifier for the content data to a plurality of neighboring content routers within a specified radius, wherein the content identifier enables the plurality of neighboring content routers to determine a nearest location from which to obtain the content data to enable efficient content routing.

Abstract: Disclosed is a periodic broadcasting of data packets in an ad hoc network formed by a plurality of mobile nodes that can move along traffic lanes forming junctions and can be located. A data packet is broadcast by a broadcaster node elected from a set of candidate nodes at each junction. The broadcaster node is elected in a decentralized manner at each candidate node by comparing the estimated travel time to reach the center of the junction with a particular reference time period between two successive broadcasts.

Abstract: Digital certificate public information is extracted using a processor from at least one digital certificate stored within at least one digital certificate storage repository. The extracted digital certificate public information is stored to at least one dynamically-created certificate public information directory. At least a portion of the digital certificate public information stored within the at least one dynamically-created certificate public information directory is provided in response to a digital certificate public information request.

Abstract: A router residing in a network comprises at least one ingress port, at least one egress port, and a processor programmed to compare at least two label switch paths, determine potential conflicts between the at least two label switch paths based on the ingress ports and egress ports utilized by the label switch paths, and determine a selected identifier to be assigned relative to each label switch path. The processor is configured to assign a common identifier if no conflict exists. A storage medium is operatively coupled to the processor for storing the selected identifiers related to the label switch paths. The processor may be configured to determine that a conflict exists between two label switch paths if they utilize the same ingress port on the router and different egress ports on the router.

Abstract: A method, apparatus, and system are described for a route server that connects network users to network providers. The route server may connect to network elements, including routers, from a plurality of Internet network service providers (ISP) to the network elements of a plurality of users through the route server. The route server also may make routing decisions for the plurality of users and the plurality of ISPs and is programmed to maintain multiple views of the routing table as well as implement multiple BGP instances, each instance representing different autonomous systems, in a single instance of the route server. The route server also may match a first user to one or more of the ISPs based on criteria including not only the best possible routes of each ISP but a full listing of all possible routes to a destination address from each ISP matching the user's criteria in order to construct a route table to get IP packets of a user to a destination address.

Abstract: Provided is a method for localizing peer-to-peer traffic. The method includes transmitting, by a first node of a peer-to-peer network, a first message to one or more other nodes associated with the peer-to-peer network. The message includes a request for content and a deadline for when the content is to be received by the first node.

Abstract: Implementations for network resource modification for enabling higher network connection concurrence are disclosed. An example method includes receiving a request from a client for a network resource having references to objects, and retrieving the network resource from one or more servers. The method further includes modifying the network resource to cause the client to open a greater number of concurrent TCP connections to the network appliance than otherwise would have been opened had the network resource not been modified due to a browser program imposed limit on a number of concurrent TCP connections. The method further includes sending the modified network resource to the client, receiving a plurality requests for the objects from the client over the greater number of concurrent TCP connections, and replying to the plurality of requests for the objects by sending the objects to the client over the greater number of concurrent TCP connections.

Abstract: A system and method for automatically redirecting a job in a community of networked devices. A peer-based device community can be created by connecting at least two networked devices utilizing a manual/self-discovery approach based on a set of rules and policies in order to interact and publish a device capability within the device community. A self-assessment approach can be employed to monitor and track the status and consumables of each networked device. A device can perform a self-assessment based on particular criteria and then determine, based on such criteria, whether to request assistance. Such a request is broadcast by the device and includes job ticket data and data indicating why such a request is being made. Devices receiving the request then perform a self-assessment in relation to the specific job and determine if they can provide better service.

Abstract: A method, in accordance with particular embodiments, includes receiving a configuration message for configuring a first node with an IP address. The configuration message comprises a subnet portion associated with a group of nodes and a host portion associated with the first node. The method also includes detecting a second node in a routing table maintained by the first node. The method further includes determining that the second node has an IP address comprising a subnet portion matching the subnet portion of the IP address associated with the first node. The method additionally includes determining that the second node is a member of the group of nodes based on the matching subnet portion of the IP address of the second node. The method also includes transmitting a message to at least the second node identifying a service supported by the first node for the group of nodes.

Abstract: Systems and methods for managing and providing content and services on a network system. Aspects of the invention include location-based determination of network content and services that may be provided to client computers. Other aspects of the invention include authorization and authentication components that determine access rights of client computers. Additional aspects include systems and methods for redirecting client computers to different network content. The disclosed systems and methods may be used in numerous network system applications.

Abstract: In a network of wireless communications apparatuses connected by a plurality of routes, a wireless communications apparatus includes a packet generating unit that generates a packet for each of the plurality of routes in the network; an operating unit that generates power consumption information for each of the routes, the power consumption information indicating power consumption for transmitting the packets; an attaching unit that attaches the power consumption information to the packets; and a transmit unit that transmits the packets to which the power consumption information is attached via the corresponding routes.

Abstract: Access control methods include receiving an access authorization message from an authentication server computer at a blocking device that connects a first network to a second network, modifying access criteria of a transparent firewall at the blocking device responsive to the received access authorization message and operating the transparent firewall according to the modified access criteria to control transfer of messages between the first and second networks. The invention may also be implemented as apparatus and computer readable media.

Abstract: A supervisor entity comprises an entity status module for maintaining status of its subordinate entities and updating the supervisor entity with status updates for itself and the subordinate entities. The entity status module comprises an entity status controller for receiving a status message from a first subordinate entity, a subordinate determination module for determining a second subordinate entity that is subordinate to the first subordinate entity, a status update module for updating the status of the second subordinate entity based on the received status message from the first subordinate entity, a status reporting module for reporting the updated status of the second subordinate entity to a supervisor entity and a status storage for storing the status of the second subordinate entity.

Abstract: In one embodiment, a reactive routing computer network may be partitioned into diverse logical topologies, and a source node may transmit route request (RREQ) messages toward a destination node on each logical topology. In response, the source node may receive route reply (RREP) messages indicating routes to the destination node in each logical topology. The source node may thus select a route for each logical topology to reach the destination node, accordingly. In another embodiment, if partitioned logical topologies do not produce two or more routes or as a standalone embodiment, the source node may transmit RREQ messages toward the destination node without any corresponding logical topology. The destination node receives RREQ messages, and two or more routes from the source node to the destination node may be determined (e.g., by the destination or source node) based on the received RREQ messages at the destination node and path selection criteria.

Abstract: Methods, systems, and computer readable media for providing dynamic origination-based routing key registration in a DIAMETER network are disclosed. According to one method, origin-based routing information is received, at a first DIAMETER node, from a second DIAMETER node. The origin-based routing information specifies one or more sources such that traffic originating from one of the one or more sources should be routed to the second DIAMETER node. A routing rule is automatically generated, at he first DIAMETER node, based on the received origin-based routing information.

Abstract: A system and method for providing a device profile using a device identifier are disclosed. The system for providing a device profile using a device identifier includes: a mobile terminal that provides a device identifier having information regarding a hierarchical structure of a server and a model name; a plurality of servers that analyze the device identifier to recognize the lowermost server when the device identifier is queried, acquire a device profile corresponding to the device identifier through the lowermost server, and provide the acquired device profile; and an application server that connects to one of the plurality of servers, queries the device identifier, and is provided with a device profile corresponding to the device identifier. Device description of various mobile terminals can be more effectively managed and used in a mobile environment.

Abstract: Various example embodiments are disclosed. According to an example embodiment, an apparatus may include a plurality of search engine pipeline stages, each of the plurality of search engine pipeline stages being configured to submit a particular search request to a plurality of search engines. The apparatus may also include the plurality of search engines, each of said plurality of search engines being configured to provide search results to one or more of the plurality of search engine pipeline stages.

Abstract: Systems and methods of the present invention for maintaining network data distribution are provided. Network data may be distributed in such as manner as to allow a network session to weather interrupted communications between host and clients without significant loss of data. Embodiments of the present invention provide for one or more clients to serve as backup host(s) for the network session, such determinations including the use of NAT profile information. When the other clients transmit data to the host, they may also transmit the data to one or more backup hosts if there are any indications of interrupted communication.

Abstract: A method and apparatus selectively resetting a control plane in a network element is described. One embodiment of the invention is a network element with a selective reset controller that can reset the control plane of the network element without interrupting the data traffic processing of the data plane of the network element.

Abstract: Techniques for classifying and managing network flows associated with a network service using application classification information and active signaling relay are described. A network device, for example, includes a signaling interceptor and a network flow interface. The signaling interceptor monitors a communication between a customer device and an application server, and identifies a network flow associated with a network service provided to the customer device by the application server. The network flow interface applies a policy to the identified network flow. An active signaling relay module communicates with the application server using data injected within the signaling communications, and utilizes the injected data to further control the network flows and the delivery of the network service.

Abstract: Systems, methods, and apparatus for facilitating utility meter communication are provided. One or more communications to be transmitted by a utility meter may be identified by the utility meter. A cost associated with the transmission of the one or more communications may be determined by the utility meter, and a determination may be made as to whether the cost satisfies one or more cost parameters. If it is determined that the cost satisfies the one or more cost parameters, the one or more communications may be transmitted by the utility meter. If, however, it is determined that the cost does not satisfy the one or more cost parameters, the one or more communications may be stored by the utility meter for subsequent transmission.

Abstract: A method includes receiving network distance information, receiving a request from a client for an identity of a peer providing content, and identifying a first peer and a second peer providing the content. The network distance information includes a compilation of network distance information provided by a plurality of service providers. The method further includes determining that a network distance between the first peer and the client is less than a network distance between the second peer and the client based on the network distance information, and providing the identity of the first peer to the client.

Abstract: In communications networks, network elements require knowledge of other network elements such as when they are added to or deleted from the network configuration and the resources they have available. The protocol allows network elements to communicate resource information dynamically and directly. The protocol also allows direct exchange of network configuration information between network elements for determining wireless communications network paging areas.

Abstract: A method of broadcasting a data packet (D) in an ad hoc network comprising a plurality of groups of mobile nodes traveling along traffic lanes in a road network. The data packet (D) is broadcast within a group (G) during an intragroup broadcasting phase during which the data packet (D) propagates simultaneously in two opposing directions of movement (A1, A2), such that the packet (D) is received by peripheral nodes (B1, B2) of the group (G). During an intergroup broadcasting phase, a peripheral node (B) transmits the data packet (D) to another group.

Abstract: A ROADM device generates link information including a virtual link in which a first link that is used by a node apparatus for transmitting a signal and a second link of a ROADM device that is capable of branching a signal transmitted via the first link when the signal is transmitted via a WDM network are virtually connected each other, and transmits the generated link information.

Abstract: Conventional multi-hop routing of ad hoc wireless networks involves considerations such as costs, connection quality, distances, and numbers of hops. A conventional wireless routing algorithm may fail when a destructive event takes place and is rapidly expanding in area, as the route discoveries may perpetually lag behind the rate of expansion of the destructive area. As typically embodied, the present invention's wireless routing algorithm detects a destructive event early, assumes rapid expansion of the destruction area, establishes “subnets” of nodes, and predetermines one or more routes that circumvent the rapidly expanding destruction area by exiting from and returning to the subnet in which the destructive event originates. Typical inventive practice avails itself of the architectural character of the physical setting for the wireless network, for instance by establishing subnets corresponding to compartments formed by wall-like structures (e.g.

Abstract: A method for data security policy enforcement including inspecting incoming and outgoing data packets from a server computing device for attributes in accordance with a data security policy, processing the data packets in accordance with the security policy based on the inspected attributes, and routing the data packets in accordance with the security policy based on the inspected attributes, wherein incoming and outgoing data from the server computing device composed of the data packets is processed and routed in accordance with the security policy on a per-packet basis. A system and computer program product is also provided.

Abstract: Systems and methods to forward data frames are described. A particular method may include receiving a data frame at a switch of a plurality of networked switches coupled to a plurality of server computers. The data frame may be forwarded from a controlling bridge coupled to the plurality of networked switches. The data frame may be determined to include management data, and an operating parameter of the switch may be modified.

Abstract: A variety of mechanisms are used to determine a user's task orientation. Rich presence detection could be used to identify whether a person is at home, at work, traveling, or the like. Temporal factors can also be considered to determine a user's probable persona such as working, personal time, traveling (business or personal), and the like. Entries in a user's calendar application and/or to-do-list reminders can be searched to add information about a user's task orientation and up-coming deliverables. Activity monitors on phones, computers, and the like, can be used to determine files be accessed, applications being used, out-bound communications being sent, in-bound communications, up-coming meetings, and the like, to further refine the nature of a user's tasks. A program evaluates all of these information sources to determine a user's focus and presents topically relevant communications and filters the rest to keep the user from being interrupted.

Abstract: A system and method for the management of client computing device DNS queries and subsequent resource requests within a content delivery network service provider domain are provided. The management of the DNS queries can include the selection of computing devices corresponding to various Point of Presence locations for processing DNS queries. Additionally, the management of the content requests can include the selection of computing devices corresponding to resource cache components corresponding to various Point of Presence locations for providing requested content. The selection of the computing devices can incorporate logic related to geographic criteria, performance threshold criteria, testing criteria, and the like.

Abstract: A network including a hierarchical structure of nodes is described. The structure of nodes includes n layers including n?1 layers of switch nodes and 1 layer of computational nodes. Each layer in the structure can include mn-L nodes grouped into units, where m represents a number of nodes in a unit and L represents a layer in the structure, where L=0 represents a lowest layer and L=n?1 represents a highest layer. Each node in a layer other than the computational layer can include a switch node for a unit in a next lower layer. For each unit, each node can be connected to each other node by a point to point link and to a local switch node for the unit by a point to point link. Each node can be connected to each other node and to the local switch node by a local broadcast network for the unit.

Abstract: A technique for enforcing a database relationship is disclosed. The technique includes specifying within a database schema a reference type that associates two structures and specifies the relationship between the two structures, and automatically generating code that checks the relationship between the two structures based on the specified reference in the database schema.

Abstract: A routing system utilizes a layer 2 switch interconnecting several routers to intelligently forward multicast packets throughout an internet exchange carrying multicast content. The layer 2 switch performs protocol snooping to extract a lookup key that is based on network layer protocol information. The lookup key is uniquely formulated to support either shared or explicit source distribution trees. The lookup key is used to query a forwarding memory that returns an outgoing port index. The outgoing port index points to one or more outgoing ports that are eligible to receive the multicast packet. The outgoing ports are also connected to the neighboring device(s) that are designated to receive the multicast packet. The routing system also supports real time maintenance and updating of the forwarding memory based on the periodic exchange of control messages. The routing system is configured to support PIM routers operating in PIM SM or PIM SSM modes.

Abstract: The present disclosure generally pertains to systems and methods for updating script images in wireless sensor networks. In one exemplary embodiment, a system has logic that is configured to display a list of nodes of a wireless sensor network. The logic is further configured to display a script source of a first script image stored at one of the nodes in response to a selection of the one node from the displayed list of nodes. The logic is also configured to modify the script source based on user input and to convert the modified script source to a second script image. The logic is configured to transmit at least one remote procedure call through the wireless sensor network to the one node. The one node is configured to write the second script image in memory of the one node in response to the at least one remote procedure call.

Abstract: A first forwarding instance is provided that includes a first set of routes. A second forwarding instance is provided that includes a second set of routes comprising a subset of the first set of routes. The first routing instance and the second routing instance are associated with a same virtual private routed network (VPRN).

Abstract: A software application in a multi-processor data router in which a forwarding information base for the router is maintained is provided with a server module and one or more client modules, each client module associated with one or more communication interfaces of the data router. The application is characterized in that the server module sends to each client module only that portion of the forwarding information base specific to the communication interfaces associated with the client module.

Abstract: Systems and methods that provide for joining a node to a federation. A link component facilitates joining such node thru three phases of join, introduce and advise. A plurality of messages and replies are exchanged between nodes in form of introduce, advise, and response messages. Such messages contain the sending node's full neighborhood.

Abstract: A communication system, method and client program for communicating via a first network. The system comprises a first network and a router coupling the second network to the first network, the router comprising an address translator configured to map second-network addresses to a lesser number of first-network addresses identifying the second user nodes collectively to the first network. Each of the second user nodes is installed with a communication client configured so as when executed on the second user nodes to: compare the first-network addresses of two of the user nodes, and, if their first-network addresses match such that both are nodes of the second network, communicate an availability status of one of the two user nodes between the two user nodes directly over the second network without routing via the first network.

Abstract: A mechanism is provided to enhance the scalability of network caching capabilities. All network client applications running on a partition in a virtualized environment are configured to query information from a single virtual input/output server (VIOS) network caching daemon. Thus, the illustrative embodiments provide a 1:n model where a VIOS partition has a network caching daemon, and each of the n partitions uses the network caching daemon of the VIOS partition. The mechanism of the illustrative embodiments only requires the system administrator to control one copy of the local files on the VIOS server. The system administrator does not need to monitor all of these local files on each individual partition. The system administrator consolidates the entries used by the different individual partitions into one single file on the VIOS server side.

Abstract: A method and system is provided for a scalable clustered system. The method and system may handle asynchronous traffic as well as session backup. In the method and system, a home cluster member having ownership of a local session predicts designation of a an other cluster member to receive a packet associated with the local session and sends appropriate state information or forwarding instruction to the other network member.

Abstract: A method and system for establishing a delivery context for channel subscription in a mobile network comprising the steps of: establishing, from a mobile device in the mobile network, a subscription with a content provider; and passing a delivery context to a delivery server.

Abstract: A recommendation apparatus for determining, for a user, a set of one or more recommended paths through an information space in response to receiving from the user a path request message. Advantageously, in some embodiments, the path recommender apparatus determines a recommended path by analyzing a set of paths, where each path in the set was traversed by a person who is in a “social graph” belonging to the user (e.g., each path in the set was traversed by one of the user's Facebook friends). In this way, paths can be recommended to the user based on paths that are popular with the user's friends.

Abstract: Methods and apparatus for implementing peer-to-peer relay. In one implementation, a peer-to-peer relay network includes: a plurality of N peer systems; wherein each peer system is connected to a number of other peer systems that is less than or equal to a connection limit, said connection limit is greater than or equal to 2, said connection limit is less than or equal to N-2, and each peer system is configured to relay data to peer systems connected to that peer system according to a set of one or more relay rules.

Abstract: A low rate DoS attack detection algorithm is used, which relies on a characteristic of the low rate DoS attack in introducing high rate traffic for short periods, and then uses a proactive test based differentiation technique to filter the attack packets. The proactive test defends against DDoS attacks and low rate DoS attacks which tend to ignore the normal operation of network protocols, but it also differentiates legitimate traffic from low rate DoS attack traffic instigated by botnets. It leverages on the conformity of legitimate flows, which obey the network protocols. It also differentiates legitimate connections by checking their responses to the proactive tests which include puzzles for distinguishing botnets from human users.

Abstract: Methods, systems, and apparatuses for providing layer-2 connectivity through a non-routed ground segment network, are described. A system includes a satellite configured to transmit data packets. The system further includes a non-autonomous gateway in communication with the satellite. The non-autonomous gateway is configured to receive the data packets from the satellite at layer-1 (L1) of the OSI-model, generate a plurality of virtual tagging tuples within the layer-2 packet headers of the plurality of data packets. The non-autonomous gateway is further configured to transmit, at layer-2 (L2) of the OSI-model, the virtually tagged data packets. Each of the packets including a virtual tagging tuple and an entity destination. The system further includes a L2 switch in communication with the non-autonomous gateway. The L2 switch configured to receive the data packets and transmit the data packets to the entity based on the virtual tuples associated with each of the data packets.

Abstract: System and method for recording communication sessions in a peer-to-peer communication networks. End-devices of the peer to peer communication network may register with a selected super-node that may fork media to a recording system for recording. Communication sessions arriving at a call center may be transferred between the external end-device and the target agent end-device via a recorder and the communication session media may be recorded. Alternatively, a conference call may be established between an external end-device, a target agent end-device of a call center and a recorder over a peer-to-peer communication network. After the conference call is established, the recorder may receive media transferred between the external end-device and the target agent end-device and record that media.

Abstract: Web server information management in a service-oriented architecture application comprises intercepting a service request message issued by a Web service requester for a Web service in response to executing the service-oriented architecture application on the Web service requester side, adding a tracing header in the service request message for requesting the detailed runtime information of the Web service and sending the message to the Web service provider side, intercepting the service request message coming from the Web service requester on the Web service provider side, tracing detailed runtime information based on the tracing header for requesting the detailed runtime information in the message during the execution of the Web service with respect of the service request message, and adding an acknowledgement tracing header containing the traced detailed runtime information into the response message to be returned to the Web service requester by the Web service provider and returning the message to the Web

Abstract: A method to organize nodes into an overlay network and to disseminate multicast messages within this overlay both through an efficient tree embedded in the overlay and through gossips exchanged between overlay neighbors. Regardless of the size of the system, this invention incurs a constant low overhead on each node.

Abstract: Systems, methods, and apparatus for providing end-to-end L2 connectivity, are described. The system includes satellites configured to transmit data packets. The system further includes a first non-autonomous gateway in communication with the satellites. The first non-autonomous gateway is configured to receive the data packets from the satellites at L1, generate virtual tagging tuples within L2 packet headers of the data packets, and transmit the data packets each including a virtual tagging tuple. The system further includes a L2 switch in communication with the first non-autonomous gateway. The L2 switch is configured to receive the virtually tagged data packets and transmit the virtually tagged data packets. Further, the system includes a second non-autonomous gateway in communication with the L2 switch.