Abstract: In one implementation, a method for providing access to a secure facility includes authenticating the user; generating a card credential, transmitting the card credential to an access card carried by of the user, and transmitting the card key to the access card in a form that is usable by the access card. The generating the card credential includes encrypting the card key using a server encryption key. The card key is usable for a challenge-response interaction during subsequent access requests by the user.

Abstract: Detection and proper deduplication of a re-started data stream in a segmentation analysis-based deduplication system are provided by retaining information about a previous data stream and using that information when performing segmentation of the re-started data stream. Information such as a segment size associated with a last data object received in the previous data stream and a record of how much data was present in the last segment associated with the previous data stream is retained. The retained segment size information is used to set a first data object segment size of the re-started data stream, and the size of last segment information is used to determine how much information should be put in the first segment associated with the re-started data stream in order to maintain proper alignment of the remainder of the segments for the first data object in the re-started data stream for deduplication.

Abstract: Methods and devices are described for creating and printing holographic stereograms and holographic optical elements using computer rendered images or using computer processed images. Various embodiments of the system may utilize interchangeable band-limited diffusers and reference-beam masking plates.

Abstract: A method and system for defining and generating forecasts. The forecast system receives a forecast definition from a user, generates a forecast in accordance with the forecast definition, stores a forecast snapshot of the generated forecast, and presents to users forecast information derived from the forecast snapshots. A forecast definition specifies the participants to be included in a forecast and when to generate the forecast. At the scheduled time, the forecast system automatically generates the forecast and stores the forecast snapshot.

Abstract: A method and apparatus for providing a competitive bid from a provider comprising receiving billing data from a user, the billing data including provider information, location, and total bill amount. The method further comprising calculating a complex usage pattern based on the billing data and statistical data for the location. The method additionally comprising calculating a competitive bid for the user, based on the complex usage pattern and a pricing structure of the provider.

Abstract: A method for using network address translation in switches and routers to define a virtual host as the source of a multicast channel within a single-source multicast model and to translate packet addresses from different multicast sources so that the packets appear to be originating from the virtual host. Address-translated packets are thus forwarded through a single-source multicast channel and received by the subscribing host(s)/clients as though the packets came from a single “virtual” source. This methodology can be used to map two or more sources simultaneously onto the same multicast channel. Such a mapping is useful, for example, to present multiple views of a sporting event video broadcast, provide advertisement insertion capability, or to support transparent fail-over to a backup video source in a critical multicast application. Subscribing client hosts in the multicast reception group simply subscribe to the single virtual host as the source of a multicast channel.

Abstract: A method and apparatus for automating device recovery using device configuration information is described. In one embodiment, a method for restoring a configuration of a source device includes accessing device configuration information from memory associated with a plurality of devices to identify using at least one processor a configuration associated with a source device of the plurality of devices, determining using at least one processor a common configuration between the configuration associated with the source device and a configuration associated with a target device and applying, using the at least one processor, the common configuration to the target device.

Abstract: A method and apparatus for achieving high availability for applications and optimizing power consumption within a datacenter is provided. In one embodiment, a method for providing high availability and optimizing power consumption within a datacenter comprises upon execution of an application at a target node amongst a plurality of nodes in a datacenter, selecting a failover target node amongst the plurality of nodes for the application, and reserving a failover capacity of at least one resource of the selected failover target node.

Abstract: A method for restoring a virtual path, provisioned between a source and a target node, in a mesh zoned optical network is described. The method, in one embodiment, broadcasts or floods restore path requests in the network to expedite the identification of an alternate route and minimize the service disruption for failed virtual path. The flooding of requests is controlled to ensure efficient performance of the network yet guaranteeing minimum restoration time to allow critical telecommunication related traffic to flow through the network with virtually no interruption. The constant update of nodal topology by each node allows a fast identification of alternate physical path for failed virtual path.

Abstract: An apparatus or method for upstream label allocation on LANs for multipoint (MP) label switched paths (LSPs). In one embodiment of the method, a first router receives a first incoming labeled data packet, wherein the first incoming labeled data packet comprises a first data packet and one or more first labels. The first router creates a first outgoing labeled data packet, wherein creating the first outgoing labeled data packet includes the step of swapping the one or more first labels of the first incoming labeled data packet with a context label and a forwarding label, wherein the first outgoing labeled data packet comprises the first data packet, the context label, and the forwarding label. Ultimately, the first router transmits the first outgoing labeled data packet to second and third routers via a LAN.

Abstract: The present invention provides a mechanism to selectively restore portions of a monolithically backed up database, while maintaining hierarchical relationships and other metadata relationships of the restored portions of the database. Embodiments of the present invention provide a method, system and computer-readable storage medium that provides for receiving a request to restore a selected object from among a plurality of backed up objects in a database backup, locating information associated with the selected object in the database backup, and restoring the object-to-restore using the information associated with the selected object in a target area. Database table metadata is gathered from the backed up database at the time the backup was created in order to locate the information associated with the selected object.

Abstract: A method and apparatus for providing dynamic multi-pathing for an asymmetrical logical unit access (ALUA) based storage system. The method comprises identifying a first processor within a storage system as providing an optimized path to a disk array, identifying a second processor within a storage system as providing an unoptimized path to the disk array and, in response to failure of the optimized path, immediately switching from the optimized path to the unoptimized path.

Abstract: Various methods and systems for detecting whether a network device supports a protocol, which defines a supplemental header, are disclosed. One method involves detecting a value within a preamble generated by a sending device and verifying that a header format of a header, also generated by the sending device, conforms to a header format definition of a protocol. The header format definition of the protocol defines a supplemental header. The preamble can be an Ethernet preamble. In one embodiment, the preamble is a converged data link (CDL) preamble or other type of preamble that is used to convey operation, administration and management (OAM) information.

Abstract: A system and method for efficiently accessing replicas of a storage object. A first node may perform a find operation to determine a plurality of nodes that each store a replica of a first storage object. For each node in the plurality of nodes, the first node may establish a direct connection to the node. The first node may then access the replicas of the first storage object using the respective direct connections to the plurality of nodes. In one embodiment, the nodes may be nodes in a peer-to-peer network. Establishing a direct connection to each storage object replica may enable the first node to communicate with each node in a single hop without having to pass messages via intermediate nodes in the peer-to-peer network.

Abstract: Various methods and systems for using email to convey backup and restore data are disclosed. One method involves: receiving a request to perform a backup system operation; generating an email that includes data and metadata (which is associated with the data); and sending the email to an email address associated with a backup system component. The request can be a backup request, in which case the data includes data to be backed up, and the backup system component is a backup server. Alternatively, the request can be receiving a restore request. In this scenario, the data includes data to be restored, and the backup system component is a backup client.

Abstract: A mechanism to selectively restore portions of a monolithically backed up database, while maintaining security relationships associated with the restored portions of the database is provided. Embodiments of the present invention provide a method, system and computer-readable storage medium for receiving a request to restore a selected object from among a plurality of backed up objects in a database backup, accessing security-related information associated with the selected object in the database backup, restoring the selected object using the information associated with the selected object in a target area, and associating elements of the security-related information with the restored selected object.

Abstract: A method and apparatus for providing single instance restoration of data files is provided. In one embodiment, a method for using a signature database to provide a single instance data restoration solution includes processing a restore request for a data file, wherein the data file is associated with a signature and examining a signature database using the signature to identify at least one locally available data file having at least one signature that matches the signature associated with the data file.

Abstract: In some ring protocols, control messages are exchanged among ring nodes in order to implement certain behaviors, such as loop-free behavior and/or failure recovery, within the ring. A segment of a ring can be replaced by another network, effectively turning the ring into a daisy chain. If the intervening network does not allow transmission of the control messages used by the ring protocol, certain control messages may be blocked, causing the ring to operate in undesirable ways. Reflector ports can be implemented at each end of the daisy chain in order to prevent these control messages from being blocked.

Abstract: A method and apparatus for utilizing a semiconductor memory of a node as disk cache is described. In one embodiment, a method of utilizing a semiconductor memory of a second server for a first server, comprising generating a storage access request at a first server, routing the storage access request through a communication link to a second server and performing the storage access request using a semiconductor memory of the second server.

Abstract: A method and apparatus for generating computer configuration rules comprising receiving configuration data regarding a plurality of computers, analyzing the configuration data to determine associations within the configuration data, and generating configuration rules from a result of the analysis.