Abstract: Paths may be advertised on a network implementing a link state routing protocol by using path state advertisement that are distributed in the same manner as link state advertisements. The path state advertisements contain path entries, each of which includes a globally unique path ID and path information such as a series of nodes or links that defines the path through the network. When a path state advertisement is received by a network element, the network element will evaluate the path entries in the path state advertisement to determine if the path state advertisement is relevant and, if necessary, install forwarding state for the relevant path entries. Path state advertisements not relevant to a network element are not used to affect forwarding state on the network element. Label based forwarding may then be used by the network elements to forward data along the path, in which the globally unique path ID is used as the label for the data.

Abstract: A system for maintaining a large number of Handheld Electronic Devices is implemented as a carrying case having circuitry configured to connect to the Handheld Electronic Devices to enable the HEDs to be charged and synchronized. The carrying case has a central area configured to hold the circuitry for charging and synchronizing the HEDs, and a pair of divider structures on either side of the central area to hold the HEDs in a protective manner while stored in the carrying case. A grounded protective coating is applied to the interior of the carrying case to dissipate electromagnetic radiation generated by the circuitry and/or HEDs within the carrying case.

Abstract: A system for maintaining a large number of Handheld Electronic Devices (HEDs) includes a drawer having a divider structure configured to define compartments that are sized to hold the HEDs while the HEDs are stored in the drawer. A 20 port USB hub is provided in the drawer so that 20 HEDs may be connected to the USB hub while stored in the drawer. The USB hub allows the HEDs to be charged at a low rate while being synchronized with a computer and at a high rate when not being synchronized. The USB hub is designed using a tree structure of available USB hub chips to enable a larger number of USB ports. A microcontroller is provided to control the manner in which the computer is allowed to recognize the HEDs connected to the USB ports.

Abstract: A system, device, and method for sending keep-alive messages in a communication network involves determining a reliability factor for communicating with a neighbor and setting the frequency for sending keep-alive messages to the neighbor based upon the reliability factor. The reliability factor is determined based upon the reliability of the neighbor as well as the reliability of the communication link to the neighbor. The frequency for sending keep-alive messages to the neighbor is relatively high if the reliability factor is low. The frequency for sending keep-alive messages to the neighbor is relatively low if the reliability factor is high. The frequency for sending keep-alive messages to the neighbor is dynamically adjusted based upon an updated reliability factor.

Abstract: A distributed hash table is implemented to store routing information on a network. Node IDs exchanged in connection with implementation of a link state routing protocol are used as keys in the distributed hash table, and routes are stored at one or more nodes on the network. When a route is learned, the route is processed against the set of keys to determine which nodes should store the route. When a route is needed, the route is processed against the set of keys to determine which nodes should have the route information. The manner in which the route is processed against the set of keys is the same in both instances, so that the DHT may be used to store and retrieve route information on the network. The DHT may be implemented to store MAC addresses, IP addresses, MPLS labels, or other information of interest to enable routes to be stored and learned by network elements on the network.

Abstract: Multiple non-conflicting actions associated with filter rules may be located and applied to a packet using a single ACL lookup by causing action records to be created from ACEs in the ACL, and then causing the ACL lookup to return the action record rather than any one particular ACE. Radix tables may be created to enable a search engine to quickly locate the appropriate action record based on a particular set of attributes associated with the incoming packet. The action record can contain multiple actions taken from multiple ACEs that apply to the particular packet. By grouping all the actions into an action record, and then searching for an action record that applies to the packet, it is possible to apply all non-conflicting actions to the packet regardless of the number of ACEs that are used to specify those actions. Since all the actions are located together, the actions of all ACEs may be applied to a packet using a single ACL lookup.

Abstract: A distributed firewall system is used to implement a network firewall with enhanced control over network traffic to allow policy to be implemented on a per-user basis, a per-application basis, a per-user and application basis, and to allow ports to be dynamically opened and closed as needed by the applications. The distributed firewall system may include application identifiers associated with applications running on a network element, one or more firewall agents instantiated on the network element hosting the applications, and a firewall configured to interface with the firewall agents. Communications between the distributed components are secured to allow the firewall to detect if an agent has been compromised, and to allow the firewall agent to determine if the application has been compromised. The distributed firewall system may work in a VPN environment, such as in connection with a VPN server, to implement firewall policy at the point where VPN traffic enters the protected network.

Abstract: To allow seamless interworking between an 802.1ah service instance (ISID) and a VPLS service instance, the AGI value used to signal the setup of the pseudowire portion of the VPLS may carry the ISID value of an associated 802.1ah service instance. This allows the service instance to be identified end-to-end across the Ethernet and VPLS networks using the same value without modifying how the MPLS network operates. The VPLS network will use AGI/AII signaling to set up pseudowires on the MPLS network, but instead of using an AGI value assigned by the MPLS network, the AGI value that is assigned will be taken from the ISID value of the Ethernet frame or from ISIDs registered by the Ethernet network. The AGI message may be given a new type value indicating that the AGI message carries a value that corresponds to the ISID value on an attached Ethernet network.

Abstract: A microfluidic bubble fuse is formed from a hermetically sealed reservoir containing an electrically conductive liquid. The reservoir is interposed between a pair of electrodes such that each electrode is in electrical contact with the fluid within the reservoir, and such that the fluid within the reservoir provides electrical interconnectivity between the electrodes. The reservoir may be implemented on a substrate, in a tube, or in another manner. When the current or voltage across the electrodes increases beyond a threshold, the excess current or voltage will cause a bubble to be created within the fluid to reduce or inhibit the flow of electricity between the electrodes. When the current/voltage is reduced, the bubble will collapse to restore the flow of electricity between the electrodes.

Abstract: A high capacity distributed switching system comprises electronic edge nodes connected to a balanced bufferless switch which may be electronic or optical. The balanced bufferless switch comprises a balanced connector and a switch fabric. The balanced connector comprises an array of temporally cyclic rotator units having graduated rotation shifts and each having a prime number of output ports. The switch fabric may be a mesh interconnection of switch modules. Due to the use of the balanced connector, establishing a path through the switch fabric requires at most a second-order time-slot matching process for a high proportion of connection requests with a much reduced need for a third-order time-slot matching process required in a conventional mesh structure.

Abstract: A computer network has a plurality of routers that deliver data packets to the network via a plurality of links. At least one router provides automatic protection switching in the event of a link failure. The at least one router includes a plurality of data interfaces for streams of data packets to enter and exit the at least one router; and a backup controller. The backup controller includes a backup path manager, a link monitor, and a backup packet processor. For at least one link of the routing node, the backup path manager identifies a backup routing path for forwarding affected data packets in the event of a failure of the at least one link. The link monitor monitors the plurality of links to determine when a link fails. When a link which has a backup routing path fails, the backup packet processor attaches backup routing path instructions to affected data packets routed over the failed link, and forwards the affected data packets via the backup routing path.

Abstract: A centralized password repository (CPR) provides network users with a password portal through which the user can manage password access to domains and applications on the network. A subset of the domains and applications on the network may be required, by design, to maintain a separate password infrastructure. For these systems, the CPR establishes a secure and authenticated communication channel and software on the system interfaces with the password infrastructure to synchronize the password in the system password infrastructure with the password in the CPR. For other systems not required to maintain a separate password infrastructure, the CPR performs password services by responding to requests from those systems seeking to validate user IDs and passwords. The CPR enables an administrator to modify network privileges and enables a user to alter passwords on the network through a single interface.

Abstract: Algorithms and data structure are described for constructing and maintaining a clock distribution tree (“CDT”) for timing loop avoidance. The CDT algorithms and data structure allows a node to make an automated and unattended path switch to the most desirable clock source in the network. In response to a network topology change, a clock root node distributes new clock paths to all nodes in the network. In particular, the root node calculates a new clock path for each affected node by building a clock source topology tree, and identifying from that tree a path to the network node from a clock source of higher or equal stratum relative to that network node. The root node then sends a network message to each node indicating the new path that the node should use. Each node receives the message and compares the new path with the existing path. If the paths are different then the node acquires the new path just received in the message. If the paths are the same then the node does nothing and discards the message.

Abstract: Time-varying conditions in a wireless network are simulated using an architecture that includes an enclosure for shielding a wireless device under test (“DUT”) from electro-magnetic interference, including other wireless devices; and at least one of: (1) a communications traffic generating device operable to generate communications traffic having selected characteristics; and (2) at least one dynamically adjustable attenuator in communication with the wireless device and the traffic generator. Embodiments of the architecture include wireless test equipment for testing operating range, roaming and capacity. The attenuator is used to adjustably attenuate signals between the device and the traffic generator over time during a test, whereby motion of the device is simulated. By connecting multiple access points, each associated with a dynamically adjustable attenuator, it is possible to force the DUT to roam between access points.

Abstract: The rate at which a particular wireless client may be PINGed may depend on many factors, including the accuracy with which the location of the wireless client is required to be known, how accurate the system has historically been able to locate other previous clients in the same general area; the speed with which the client is moving, the amount of other data being transmitted by the client, the needs of other clients being serviced by the access point that will need to PING the client, the current battery life of the client, and the priority of obtaining an accurate location for a particular wireless user verses other uses of the network bandwidth. Based on the multiple factors considered by the system, the rate at which the client will be PINGed is adjusted to optimize the amount of bandwidth used to determine the client's location.

Abstract: Mid-call services may be added to a communication session such as a telephone call (call session) by a wireless device on a mobile telephone network by causing the wireless device associated with the communication session to invoke a second call session directed to a vertical service code. The second call session is established on the wireless communication network and terminated on the PSTN to an application server associated with the vertical service code. The application server on the PSTN instantiates the service and matches the service associated with the vertical service code on the second call session with the first call session. The application server then applies the mid-call service associated with the vertical service code to the first call session to thus enable mid-call services to be applied to the first call session by the wireless device.

Abstract: MP-BGP VPN infrastructure based on IETF RFC 4364/2547 is used to configure a layer 2 VPN on an IP network. VRFs for the VPN are configured on Ethernet switches and service IP addresses are associated with each configured VRF. The service IP addresses are exchanged to enable VPN traffic to be encapsulated for transport over the IP network. To enable a L2 VPN to be established on the network, a VPN-VLAN ID will be configured for the L2 VPN and import/export route targets for the VPN-VLAN will be set in each VRF and UNI-VLAN that is part of the VPN. The VPN-VLAN will be announced to all PEs using MP-iBGP with export route targets set for this VPN-VLAN. The PE's control plane learns the VPN-VLAN on a logical port if the import RT matches the export RT received by the MP-iBGP control plane. Once the VPN-VLAN is learned on a logical port, the PE will perform MAC learning on that logical port and treat the logical port as if it were part of the L2 VLAN.

Abstract: A method and apparatus is disclosed by which IGMP Host messaging is translated to PIM messaging for the purposes of efficiently and accurately maintaining group membership data in a multicast network.

Abstract: An authentication system is configured to weight multiple available network supplied and user supplied authentication factors to determine whether a user should be provided with access to an Emergency Communication Network (ECN). The multiple factors may include the location of the user, MIN, short PIN, token, biometric information, and other information. The level of access to be provided to the user may be tiered based on the authentication level achieved during the weighting process. Authentication information may be shared between groups of individuals, so that the authentication requirements for group members may be reduced as other members of the group supply authentication information to the ECN. Group authentication may be used to enable group services such as conferencing and push-to-talk to be set up automatically for the group.