Abstract: Methods and apparatus for merging peer-to-peer overlay networks. A method includes receiving an advertisement from a second overlay network, determining a size of the second overlay network, performing a self search on the second overlay network based on a persistent node identifier, if the size of the second overlay network is greater than the size of a first overlay network, and joining the second overlay network if the persistent node identifier is not part of the second overlay network. An apparatus includes a transceiver to receive an advertisement from a second overlay network, and a processor coupled to the transceiver to determine a size of the second overlay network, perform a self search on the second overlay network based on a persistent node identifier, and join the second overlay network if the persistent node identifier is not part of the second overlay network.

Abstract: A system for maintaining an address book, wherein the address book includes a plurality of entries with each entry containing contact information and wherein address book updates are transmitted over a wireless network. The system includes a gateway for storing the address book and transmitting the address book updates to a wireless device.

Abstract: Techniques for using an Advanced Metering Infrastructure (AMI) system for Utility Automation (UA) purposes in a utility distribution system are disclosed herein. In an AMI system, a metering node often includes a communications option board for connecting to a wide area network (WAN), which can be shared between the AMI system and a UA system. The metering node may be near other devices that can be controlled by a utility company to monitor and control components of the utility distribution system. A data packet is received in a communication device. The communication device determines whether the received data packet is formatted according to a first protocol employed by the AMI system. If so, then the data packet is forwarded to a first device in communication with the AMI system. If not, then the data packet is forwarded to a second device in communication with the UA system.

Abstract: A videoconference system includes a camera at each several user locations, a computer at each user location linked to the camera at each location, and one or more bridges linking the computers to one another. A video encoding program stored on each computer causes each computer to encode video data received from the camera at the user location. A decode information set request monitoring program stored on at least one of the computers causes the computer to monitor the bridges for reception of a decode information set request message; and respond to the decode information set request message by querying the request message for an ID. If the ID of the request message matches an ID assigned to the computer, the computer generates a decode information set based on video data received from the camera, and communicates the decode information set to all of the other computers.

Abstract: A network device control unit and method are provided in which, not all MIB objects under the control of the network management software are simultaneously acquired during startup of the network management software so the almost simultaneous flow of a large volume of SNMP packets in the LAN will not occur and along with a simultaneous reduction in the load on communications lines, the load on devices such as the printer and network board processing their SNMP packets will also become small. To accomplish this, windows allocated to individual network peripheral devices on a one to one basis and controlling the network device are utilized as device windows, and information to be displayed on the initial screen of the device window is acquired as the initial sheet and displayed. Device windows also acquire and display different sheet information on the device window when determined an entry has been made by the user requesting display of a different type of sheet information.

Abstract: A computer executed method is disclosed for sorting a plurality of internet protocol (IP) addresses. The method includes dividing the range of IP addresses into a plurality of clusters representing a plurality of contiguous sub-ranges, assigning each IP address to the cluster associated with the sub-range that includes that IP address, and assigning the IP addresses in each cluster to one of a plurality of pages. If one of the pages has a size less than a page size limit, the method includes duplicating on that page at least one of the IP addresses assigned to that page. For each page, the IP addresses assigned to that page are ordered by numeric value. A network appliance incorporating aspects of the method is also disclosed.

Abstract: A method for secure electronic transaction over a computer network, comprising: at a trusted relationship profile server computer: storing a unique identity of a trusted computing unit; generating a confirmation message regarding the unique identity of the trusted computing unit in response to a request from the trusted computing unit; at a security proxy server computer: storing real credentials and local credentials of a customer in a secure vault; receiving the confirmation message and permitting a login process to be performed with the security proxy server using the local credentials, provided the confirmation message is valid; and replacing the local credentials submitted in the login process with the real credentials. A corresponding system for secure electronic transactions is also provided.

Abstract: In general, techniques are described for utilizing anonymous cookies within computer networks to protect customer identities. In particular, a network device is configured to communicate with an edge router of a service provider network that provides access to a public network having network destinations. The network device includes a control unit and an interface. The control unit executes a content delivery layer and a privacy services layer. The content delivery layer receives a network communication sent from one of the customer devices to the public network. The privacy services layer replaces a destination-specified cookie within the network communication with an anonymous cookie, each of which conform to an application layer protocol. The anonymous cookie also specifies a pseudonym for the one of the customer devices that originated the network communication. The at least one interface then forwards the network communication including the anonymous cookie to the network destination.

Abstract: In order to carry out actions such as setting up a call from an entity in the address realm of one middlebox to an entity in the address realm of another middlebox, then a middlebox control node such as a call server is used. Previously, the middlebox control node has needed to have pre-configured information about all the middleboxes and which address realms they are associated with. The present invention provides one or more middlebox-identity-providing nodes which are separate from the middlebox control node, and which are more directly connected to the end users of the service than the middlebox control node. This provides greater flexibility in network design and removes the need for middlebox information to be pre-configured at the middlebox control node. Instead, this information is sent to the middlebox control node, as part of signalling messages, from middlebox-identity-providing nodes.

Abstract: A computer-implemented platform server and method is provided for energy management operations in a Smart Grid environment. The platform server includes an application module configured to operate any of a plurality of Smart Grid Applications. A consumer-side module is configured for bi-directional communication with a plurality of consumer-side intelligent appliances. An Operations Technology (OT) module is configured for communication with an electrical grid Energy Management System (EMS). A translation module is coupled to, and configured to translate data received from, the application, consumer-side, and OT modules, so that the platform is configured to selectively receive, translate, and transmit data from and among any of said application, consumer-side, and OT modules, to facilitate automated energy management operations in a Smart Grid environment.

Abstract: A method and device for transmitting a control message based on a multi-ring Ethernet are provided, wherein the method comprises the following steps: control virtual local area networks of a main ring and a sub-ring are configured (S1002); and a main ring node receives a sub-ring control message from the sub-ring, forwards the sub-ring control massage to the other main ring nodes on the main ring via a data plane, and synchronously realizes the blocking or opening of the sub-ring control message and a data message in the data plane (S1004). The present disclosure solves the problem that the time for the main ring node to process the sub-ring control message is too long during existing control message transmission process, avoids the control message loop situation caused by the transmission of the sub-ring control message over the main ring, and improves the network performance.

Abstract: Systems, methods and apparatus for tunneling in a cloud based security system. In an aspect, tunnel session data describing authentication and unauthenticated sessions, and location data describing tunnel identifiers for tunnels, locations, and security policies specific to the locations are accessed. Tunnel packets are received, and for each tunnel packet it is determined, from the tunnel identifier associated with the packet, whether a session entry in the session data exists for the tunnel identified by the tunnel identifier. In response to determining that a session entry does not exist in the session data, then a session entry is created for the tunnel identifier, an authentication process to determine a location to be associated with the session entry is performed, and an entry in the location data for the location is associated with the session entry.

Abstract: The described embodiments of the present invention include a method for controlling authorization of a multimedia service requested by a user device. In one embodiment, the method includes examining an identity of an access network associated with the user device and an identity of the service requested to determine whether the service is supported; authorizing resources in the access network required by the service if the service is supported; rejecting the service if the service is not supported and if a policy associated with the access network requires unsupported services to be rejected; and authorizing a default level of resources in the access network if the service is not supported and if the policy associated with the access network does not require unsupported services to be rejected.

Abstract: Device for connecting a wireless network to at least one other network comprising a bridge module for managing a plurality of ports for connecting to respective networks, the device comprising a wireless network management module for managing associations, with an access point of a centralized wireless network, of devices of networks (connected to the bridge device other than the wireless network; wherein the bridge device is adapted to be a station of the wireless network.

Abstract: A first base station wirelessly transmits media to a first communication device for a communication session. The first base station hands off the communication session to a second base station. The second base station wirelessly transmits the media to the first communication device for the communication session. In response to the hand-off, the second base station selects a second communication device based on the type of media and transmits a prompt to the first communication device to transfer the communication session to the second communication device. In response to a user instruction, the second base station transmits the media to the second communication device for the communication session.

Abstract: Systems and methods to perform a register access are described. A particular method includes receiving a data frame at a bridge element of a plurality of bridge elements in communication with a plurality of server computers. The data frame may include a register access request and may be forwarded from a controlling bridge in communication with the plurality of bridge elements. A register may be accessed and execution of the register access request may be initiated in response to receiving the data frame.

Abstract: A method, apparatus, and system for providing layer concurrency connecting two or more master Intellectual Property cores to a Network on a Chip (NoC) for an integrated circuit is provided. An embodiment includes two masters connected using a common tightly coupled protocol to a first interface of an NoC. A protocol conversion unit can be coupled between the two or more masters and the NoC to convert a request in the tightly coupled protocol to a decoupled protocol that decouples request phasing from response phasing and then passes the request in the decoupled protocol format onto the NoC. The system also provides for arbitration amongst the two or more masters. Requests from the masters are still in the common tightly coupled protocol and are translated by the protocol conversion unit into a request in a decoupled protocol to enable out of order return of responses.

Abstract: An apparatus, program product and method associates a timeout used by a client computer sending a work request with a maximum amount of time that the server computer should spend processing the work request. The server computer dynamically reacts to diverse, incoming client load requirements without using a static processing timeout on the server computer side. Resources may be made available for other work.

Abstract: A VPN server encapsulates a packet P2 upon receiving the packet and distributes packets P (2-1) and P (2-2) to wireless terminals MN1 and MN2 respectively. The wireless terminal MN1 decapsulates the packet P (2-1) (as packet P2-1) upon receiving the packet and transmits the packet P2-1 to a wireless terminal MN3. Thus, the packet is transmitted by a communication path: file server 102—VPN server 101—wireless terminal MN1—wireless terminal MN3. The wireless terminal MN2 decapsulates the packet P (2-2) (as P2-2) upon receiving the packet and transmits the packet P2-2 to the wireless terminal MN3. The packet P2-2 is transmitted by a communication path: file server 102—VPN server 101—wireless terminal MN2—wireless terminals MN3.

Abstract: Platforms, systems, software, and methods for deploying and maintaining distributed computing, networking and storage comprising a configuration of dedicated service meshes. The invention further comprising a module for dynamically managing physical nodes; a module for dynamically managing nodes on physical nodes; a module for dynamically managing services/workers on nodes; a module for governing communication within the system and with the system; a plurality of communication endpoints; a plurality of services, wherein each service is associated with one or more endpoints, wherein services communicate by message exchange via their endpoints; a module for grouping nodes into clusters; a module for grouping endpoints into meshes such that all member services of a mesh can be addressed as a whole or as pertinent subsets thereof; and a module for dynamically effecting topology changes.

Abstract: A method of redirecting content requests among content distribution network peers. In operation, a client sends a request for content to a content distribution network (CDN). When this CDN does not currently have the capacity to deliver the content, the CDN refers to one or more content distribution tables to see if the neighbor peers are able to provide this content. The content distribution table is populated at the time of distribution of the content. When the neighbor peer has this content, the request is redirected to the neighbor peer. In redirecting request, an address of the neighbor peer is appending to the previous address such that each peer receiving the request knows where the request came from and where it has been previously.

Abstract: A system and method provides gaming related and player/gaming attendant related services to a plurality EGM. Each EGM has an associated multipurpose EGM/player tracking device. Each multipurpose EMG/player tracking device has first and second ports. The first port couples the respective multipurpose EGM/player tracking device to the respective EGM using a communications link. The first port of one of the multipurpose EGM/player tracking devices may utilize a different communications protocol than another one of the advance player tracking device. A server computer is coupled the multipurpose EGM/player tracking devices using a system communications protocol through system communications links. The server computer provides gaming and player/gaming attendant services to users of the EGMs.

Abstract: Logical partitions in an information processing apparatus share an IP address and are assigned different MAC addresses. A representative logical partition communicates with an external entity on behalf of the other logical partitions. A driver is provided with a virtual interface and a physical interface. Internal communication between the logical partitions is done via the virtual interface and communication with an external entity is done via the physical interface. If a packet received from an external destination is destined to one of the other logical partitions, the protocol stack of the representative logical partition replaces the destination MAC address by the MAC address of the destination logical partition. The protocol stack provides the packet in which the destination MAC address has been replaced to the virtual interface. The virtual interface transfers the packet provided by the protocol stack to the destination logical partition.

Abstract: User operates a selection switch to instruct temporary activation of an application. For the application of which the temporary activation has been instructed, a CPU of a console allocates resources necessary for signal processing by a DSP of an engine and for a parameter editing function of the console. In the DSP, a bypass parameter is set to ON. Thus, there is provided a state capable of accepting various parameter setting operation related to the application, but the signal processing based on the application program is prevented from being started in a substantive manner. In response to a full activation instruction of an application via a full activation instruction switch, the bypass parameter is set to OFF, so that audio signal processing based on the application can be started. In this way, preparatory work for setting parameters related to the application can be performed efficiently.

Abstract: A control device includes a communication unit which has a switch function of switching the control device into an energy saving mode, the communication unit communicating with an upper terminal via a first network; and a mode control unit which controls switching the communication unit into the power saving mode, the control being made using a network control library which is generated by a programming language.

Abstract: The inventive system includes a host, a network including a security gateway, and a public application. Established are an access session between the network and the host and an application session between the public application and the network. An application session record is created for the application session, and includes the user's public user identity used to access the public application, the user's private user identity used to access the network, a host identity, and an application session time. To determine the private user identity for the application session, the security gateway sends a query with the host identity and the application session time. These are compared with the host identity and access session time in an access session record. If they match, then the private user identity in the access session record is returned, and it is stored as the private user identity in the application session record.

Abstract: A network system adopting a first IP protocol is provided. The network system includes an address allocating server and a communication terminal supporting both the first IP protocol and a second IP protocol, wherein the address allocating server dynamically allocates an address of the second IP protocol to the communication terminal.

Abstract: Systems and methods that provide a unified infrastructure over Ethernet are provided. In one embodiment, a method of communicating between an Ethernet-based system and a non-Ethernet-based network may include, for example, one or more of the following: generating an Ethernet frame that comprises a proxy payload, a proxy association header and an Ethernet header, the Ethernet header relating to a control proxy element; sending the Ethernet frame over an Ethernet-based network to the control proxy element; generating a non-Ethernet frame that comprises the proxy payload and a proxy header; and sending the non-Ethernet frame over a non-Ethernet-based network.

Abstract: A communication system, method and client program for communicating via a first network. The system comprises a first network and a router coupling the second network to the first network, the router comprising an address translator configured to map second-network addresses to a lesser number of first-network addresses identifying the second user nodes collectively to the first network. Each of the second user nodes is installed with a communication client configured so as when executed on the second user nodes to: compare the first-network addresses of two of the user nodes, and, if their first-network addresses match such that both are nodes of the second network, communicate an availability status of one of the two user nodes between the two user nodes directly over the second network without routing via the first network.

Abstract: In a method for controlling the data flow on a radio link between a WLAN base station and a WLAN mobile station, the data rate on the radio link is reduced for in each case one time period (36, 37) at time intervals (35). One preferred field of application for the method is to restrict general or unauthorized transmission of a telephone call via the Internet.

Abstract: Systems, methods and computer storage media for utilizing IPv6 addressing for globally unique identification of network endpoints when communications from or to an IPv4 compatible application. An IPv4 packet of data that is from and/or directed to an IPv4 endpoint is encapsulated in an IPv6 packet of data. An IPv6 compatible address is identified for a destination of the IPv6 packet of data. The IPv6 address is a globally unique identifier that is comprised of an IPv4 identifier that represents an IPv4 address of the encapsulated IPv4 packet. The IPv6 packet of data is communicated to the destination identified by the IPv6 address. A 4 to 6 stack may intercept the incoming IPv6 packet of data before the destination to strip the IPv6 header information revealing the IPv4 packet of data.

Abstract: Described in an example embodiment herein is a Mobility Service Engine (MSE) cluster comprising an MSE Cluster Master and at least one MSE Cluster Slave. The MSE Master is configured to define Network Service Segments. The MSE Master of the cluster distributes the Network Service Segments to slaves within the cluster. The network is configured to forward data to the correct Network Service Segment.

Abstract: Systems and methods for roaming between a mobile node and at least one serving node connected to a network are disclosed. The present application provides a method for roaming between. In the system and method, a first communication is established between the mobile node and one of the serving nodes through a control server, when an Ethernet transceiver is used by the mobile node. Ethernet is used for communications between the mobile node and the control server, and a wireless communication technology for communications between the control server and the serving node. The control server also translates communications between Ethernet and the wireless communication technology. In the system and method, a second communication is established between the mobile node and one of the serving nodes with the wireless communication technology, when a wireless communication technology transceiver is used by the mobile node.

Abstract: A connection accepting system, an accepting server, and a connection-acceptance managing method, for reducing the processing load of a server and allowing connection to the server in the order of arrival of connection requests. An accepting server accepts a connection request to an application server made from a client terminal through a network. The accepting server issues a reference number to the client terminal at the time of receiving a first connection request, and manages a connection priority for connection to the application server, based on the reference number. The accepting server transmits a program for automatically executing a connection request again after a predetermined time period, at the time of issuing the reference number to the client terminal.

Abstract: The invention provides, in one aspect, an improved system for data access comprising a file server that is coupled to a client device or application executing thereon via one or more networks. The server comprises static storage that is organized in one or more directories, each containing, zero, one or more files. The server also comprises a file system operable, in cooperation with a file system on the client device, to provide authorized applications executing on the client device access to those directories and/or files. Fast file server (FFS) software or other functionality executing on or in connection with the server responds to requests received from the client by transferring requested data to the client device over multiple network pathways. That data can comprise, for example, directory trees, files (or portions thereof), and so forth.

Abstract: In one embodiment, a plurality of network interfaces of a network device that are configured to communicate with other network devices in a first computer network are identified as network-to-network interfaces (NNIs). Also, one or more network interfaces of the network device that are configured to provide access to the first computer network to user devices are identified as user-to-network interfaces (UNIs). One or more NNIs of the plurality of NNIs are selected to forward traffic from the network device to an aggregation device of the first network that couples the first computer network to a second computer network. Also, one or more NNIs of the plurality of NNIs that have not been selected to forward traffic from the device to the aggregation device are designated as network-to-network interface alternates (NNI-ALTs). The one or more NNI-ALTs are treated as UNIs for user data traffic forwarding decisions.

Abstract: The present invention relates to a method for generating a space-related traffic database for a radio network which comprises a plurality of radio cells which can each be assigned to a group of radio cells, with a region to be mapped being subdivided into area elements by a grid and each of the area elements being allocated a respective assignment probability for each of the radio cells which supply the area element and a land-use class from amongst a finite group of land-use classes by generation being achieved by a minimization process in which the distance between the measured traffic of a radio cell and the predicted traffic of the radio cell is minimized for each radio cell, with the traffic, which is to be predicted, of a respective radio cell being set equal to the sum of area elements which are weighted by land use class-specific and group-specific coefficients, which area elements of the respective radio cell for a respective land-use class and for a respective group of radio cells are produced from

Abstract: The present invention is an apparatus, system, and method for the improved tracking of a data state. The present invention allows session states to be maintained by sites that run on multiple, load-balanced servers. The present invention removes a single point of failure in a system, thus preventing all active sessions from being lost by providing persistent session data distributable across one or more machines over a communications network.

Abstract: Methods, systems and computer program products to synchronize timing of data transmissions between wireless and wired networks using a combined wireless gateway and cable modem are provided herein. The method includes the step of generating an indicator prior to a look-ahead time period and transmitting a poll to a wireless device upon sending the indicator. The look-ahead time period is a time period from transmitting the indicator to transmitting the DOCSIS frame. The method further includes the step of receiving data from the wireless device and encapsulating the data in a DOCSIS format to generate a DOCSIS frame. The method also includes transmitting the DOCSIS frame at a start of a next transmit opportunity to a cable modem termination system (CMTS).

Abstract: The technology described in this application provides a wide-area radio access information transmission scheme where the wide-area radio access information transmitter shares its radio resources with local radio access information transmitters. The radio resources may be divided for example in one or more of the time, frequency, space, and/or code domains. The wide-area radio access information transmitter sets aside and does not use some portions or “chunks” of its radio resources and allocates those unused portions or chunks for use by local radio access information transmitters to transmit local radio access information signals. In one non-limiting example embodiment, the radio resources include time slots, and during those time slots allocated to the local radio access information transmitters, the wide-area radio access information transmitter does not transmit, and thus, is quiet.

Abstract: Control of collaborative devices, including providing at least two collaborative devices, wherein each collaborative device comprises a client device and an embedded Java server, providing a registry service to which the collaborative devices are coupled for data communications, and providing at least one registry table, wherein the registry table includes registry records, wherein the registry records include registry records representing capabilities of collaborative devices, wherein the registry records representing capabilities of collaborative devices include data elements describing, for each collaborative device, capabilities, tertiary relationships, and network connectivities. The method further includes providing a service bundle of OSGI-compliant Java servlets comprising at least one predetermined algorithm for controlling the collaborative devices, and controlling the collaborative devices in accordance with the predetermined algorithm.

Abstract: A gateway device is disclosed for deployment at user premises, which offers applications services similar to those of a server from the premises, albeit managed by a service management center via the network. For each application service, gateway programming provides application server communication with a client functionality of an endpoint device, for the respective service, communicated on top of network layer communications within the premises and through the wide area network. The application service logic in the gateway device also enforces authorization, authentication, configuration, or use of the service via the endpoint device. Management of the application service is responsive to communications with the service management center via the wide area network. A gateway device of this type, for example, may offer PC or TV type user interfaces. The gateway also may establish peer-to-peer communications with other similar devices.

Abstract: A capability is provided for providing transparent cloud computing with a virtualized network infrastructure. A method for enabling use of a resource of a data center as an extension of a customer network includes receiving, at a forwarding element (FE), a packet intended for a virtual machine hosted at an edge domain of the data center, determining a VLAN ID of the VLAN for the customer network in the edge domain, updating the packet to include the VLAN ID of the VLAN for the customer network in the edge domain, and propagating the updated packet from the FE toward virtual machine. The edge domain supports a plurality of VLANs for a respective plurality of customer networks. The packet includes an identifier of the customer network and a MAC address of the virtual machine. The VLAN ID of the VLAN for the customer network in the edge domain is determined using the identifier of the customer network and the MAC address of the virtual machine.

Abstract: A trusted zone protector in exemplary embodiments of an electronic system helps reduce unwanted attempts to use a consumer machine in a trusted zone to address a network resource that lies inside the trusted zone on behalf of a website that lies outside of the trusted zone. An address manager in the electronic system is arranged to provide an indication whether an element retrieved by a network-enabled application executing on the consumer machine is arranged to address a network resource that lies inside the trusted zone. The trusted zone protector is arranged to generate a protective action in response to the indication that the element retrieved by the network-enabled application is arranged to address the network resource that lies inside the trusted zone.

Abstract: A network content service apparatus includes a set of compute elements adapted to perform a set of network services; and a switching fabric coupling compute elements in said set of compute elements. The set of network services includes firewall protection, Network Address Translation, Internet Protocol forwarding, bandwidth management, Secure Sockets Layer operations, Web caching, Web switching, and virtual private networking. Code operable on the compute elements enables the network services, and the compute elements are provided on blades which further include at least one input/output port.

Abstract: Systems and methods for dynamic electronic-mail filtering for mobile devices are provided. Incoming e-mail messages are received and provided to an e-mail inbox associated with the intended recipient. Those e-mail messages are evaluated to determine whether they may be desirable to the recipient. Desirability of an e-mail may be determined by such factors as the e-mail address of origin or key words in subject line. E-mail messages determined to be desirable are provided to a mobile device associated with the recipient. The recipient may then be notified concerning the desirable messages.

Abstract: A communications system may include a plurality of source message servers for storing messages for delivery to a user, a target message server having a target message box associated therewith, and an aggregation server for periodically aggregating the messages from the source message servers to the target message box for retrieval by the user. The target message server may provide a delivery failure message to the aggregation server based upon a failure to deliver a message to the target message box. As such, the aggregation server may increase a period of sending messages to the target message box based upon a delivery failure message therefrom, and thereafter decrease the period of sending messages to the target message box based upon a successful delivery of a message thereto.

Abstract: Disclosed is a scalable, hierarchical, distributed network architecture and processes for the delivery of high-performance, end-to-end online multimedia services, including Internet services such as World Wide Web access. The network architecture connects a high-speed private backbone to multiple network access points of the Internet, to a network operation center, to a back office system, and to multiple regional servers in regional data centers. Each of the regional servers connects to several caching servers in modified head-ends, which in turn connect via fiber optics to many neighborhood nodes. Finally, each node connects via coaxial cable to multiple end-user systems. The processes include those for replicating and caching frequently-accessed content, and multicasting content customized per region or locality.

Abstract: Methods, systems, apparatuses and program products are disclosed for managing connections to telecommunications networks, especially networks that deploy Internet Protocols and the like. Provision is made for colligating a connectivity ruleset, interconverting status data to form a dataset of candidate communication links, and supplicating a network connection. Also for forming physical location profiles and selecting a network on that basis and upon a basis of a present physical location of the respective computer.

Abstract: The present invention facilitates identification and control of peer-to-peer sessions via an access concentration point (ACP). The ACP will monitor packets routed therethrough and detect access messages intended for known peer-to-peer access services. The access messages sent from a communication client to the peer-to-peer access service, which will respond by sending an access reply message back to the communication client. The ACP will monitor the packets being routed to identify the access reply message, which will include routing addresses that may be associated with potential remote communication clients. With these addresses, the ACP can monitor packets to identify when an attempt to initiate a peer-to-peer communication session is being made to or through an entity associated with one or more of these addresses. Upon detecting a session initiation message to or through an identified address, the ACP may take any number of actions, depending on how the ACP is configured.