Abstract: Methods and systems are provided for hardware-accelerated packet multicasting in a virtual routing system. According to one embodiment, a multicast packet is received at an ingress system of a packet-forwarding engine (PFE). The ingress system identifies flow classification indices for the multicast packet. Then, for each instance of multicasting, the ingress system sends a single copy of the multicast packet and the flow classification indices to an egress system of the PFE. The single copy of the multicast packet is buffered in a memory accessible by the egress system. The egress system prepares the multicast packet for transmission by for each flow classification index, identifying corresponding transform control instructions based on the flow classification index, reading the single copy of the multicast packet from the memory, causing the multicast packet to be transformed in accordance with the identified transform control instructions and outputting the transformed multicast packet.

Abstract: Methods and systems for facilitating fault tolerance in a non-hot-standby configuration of a network routing system are provided. According to one embodiment, a failover method is provided. A fault manager executing on a control blade of multiple server blades of a network routing system actively monitors an active processing engine of multiple processing engines within the network routing system. Responsive to detecting a fault associated with the active processing engine, the active processing engine is dynamically replaced with a non-hot-standby processing engine of the multiple processing engines by (i) determining one or more software contexts that were associated with the active processing engine prior to detection of the fault, and (ii) creating one or more replacement software contexts within the non-hot-standby processing engine corresponding to the one or more software contexts.

Abstract: Systems and methods for managing interworking protocols are provided. According to one embodiment, a policy-based provisioning methodology is used by a service management system (SMS) to provision subscriber interfaces of service processing switches based upon parameters of a predefined policy. The subscriber interfaces communicate data in accordance with a first protocol. The parameters include a window size, a window timeout, a number of allowed bad events, an event window size and/or a keep-alive interval. Transport network interfaces, which communicate in accordance with a second protocol, are provisioned to provide a transport between the subscriber interfaces. A first-protocol-over-second-protocol (FPoSP) Virtual Private Network (VPN) is created through which the subscriber sites securely exchange data by establishing a virtual router (VR) corresponding to each subscriber interface.

Abstract: A digital current-mode controller for a DC-DC converter is disclosed. The controller comprises a digital current reference; and a current loop compensator adapted to receive a digital current error signal derived from a digital current sample sensed from the DC-DC converter and the digital current reference and to generate a duty-cycle command, wherein the current loop compensator comprises a low-pass filter that is used in generating the duty-cycle command. A DC-DC regulator comprising a digital current-mode controller and a method of controlling a DC-DC converter are also disclosed.

Abstract: Adservers with the ability to access advertiser cookies and vice versa when both are serving from the advertiser's domain are provided, thereby avoiding the overhead and delay in backend cookie synchronization efforts. Further, advertising cookie data can be gathered regardless of whether a user is browsing a publisher's web site with an advertisement served by an adserver, or browsing the advertiser's web site, because the cookies were previously set when the user visited the advertiser's web site in the context of a first-party cookie. Even if the user has configured his or her browser to limit the setting of third-party cookies, the cookies can still be read by the adserver. By making cookie and advertising data immediately available in real time to both the advertiser and the adserver, the solution also provides for instantaneous and accurate targeting of web advertising to allow an educated ad selection process by either party.

Abstract: The present invention relates to active bactericidal, antibacterial, anti-infective, antimicrobial, sporicidal, disinfectant, antifungal and antiviral compounds and compositions and to new uses of these compositions in therapy. This specification also describes methods of use for the new compounds and compositions. The specification further describes methods for preparing these compounds.

Abstract: The present invention provides a method for detecting probe-target substrate binding. In particular, the present invention provides a method for detecting a surface bound target complex by detecting the redox reaction of a redox transition metal complex that is catalyzed by a redox-catalyst complex.

Abstract: Methods are provided for determining a master node on a ring network. According to one embodiment, a first node on the ring network initiates circulation of an arbitration token by (i) determining an arbitration token timeout period has elapsed and (ii) transmitting the arbitration token to a neighboring node. Upon receipt of the arbitration token by a node, it determines its relative priority by comparing its ID to an ID field of the arbitration token, initialized by the first node. If the node is determined to be higher priority, then it overwrites the ID field and retransmits the arbitration token onto the ring network. If the node is determined to be lower priority, then the node retransmits the arbitration token without overwriting the ID field. If the node is determined to be of equal priority and the node is the first node, then it assumes the master node role.

Abstract: Methods and systems are provided for provisioning and managing network-based virtual private networks (VPNs). According to one embodiment, virtual routers (VRs) distributed among service processing switches are provisioned by a service management system (SMS) to support network-based customer virtual private networks (VPNs) by generating a routing configuration based on (i) site reachability information for the service processing switches and (ii) a global customer routing profile for at least one customer. A custom routing profile is received by the SMS from a customer network management system (CNMS), the custom routing profile identifies one or more routing protocols to be used for one or more segments of a network-based customer VPN. The network-based customer VPN is reconfigured by the SMS generating appropriate routing configurations for VRs partitioned to the customer based on a subset of the site reachability information associated with sites of the customer and the custom routing profile.

Abstract: Methods, apparatus and data structures are provided for managing multicast IP flows. According to one embodiment, a memory of a router has stored therein a data structure, which includes information relating to multicast sessions being handled by the router and including a first pointer for each multicast session, at least one chain of blocks of second pointers and one or more TCBs. Each first pointer points to a chain of blocks of second pointers. Each second pointer corresponds to an OIF of the router participating in the multicast session defined by the first pointer and defines how many times packets associated with the multicast session are to be replicated. The TCBs are configured to store control information relevant to processing or routing packets. Each second pointer points to a TCB and each TCB identifies the OIF out which packets of the multicast session are transmitted from the router.

Abstract: Methods are provided for managing hierarchically organized subscriber profiles. According to one embodiment, subscriber services are modified without requiring a change to the subscriber's first-level profile identifier and without requiring the subscriber to reestablish a connection with the service provider. A database of hierarchically organized profile identifiers, including multiple lower-level profile identifiers, explicitly defining subscriber services, and multiple first-level profile identifiers, defining service contexts representing combinations of services available to subscribers by (i) explicitly defining the subscriber services or (ii) referring to one or more of the lower-level profile identifiers, are maintained within a virtual router operable within a telecommunications system of the service provider. Updated service profile information, representing a change to the subscriber's service context, is received.

Abstract: Methods and systems are provided for increasing application performance and accelerating data communications in a WAN environment. According to one embodiment, a method is provided for securely accelerating network traffic. One or more tunnels are established between a first wide area network (WAN) acceleration device, interposed between a public network and a first local area network (LAN), and a second WAN acceleration device, interposed between a second LAN and the public network. Thereafter, network traffic exchanged between the first LAN and the second LAN is securely accelerated by (i) multiplexing multiple data communication sessions between the first LAN and the second LAN onto the one or more tunnels, (ii) performing one or more of application acceleration, transport acceleration and network acceleration on the data communication sessions and (iii) performing one or more security functions on the data communication sessions.

Abstract: Systems and methods for a contextual data platform are provided. According to one embodiment, a request is received from a client at a server. Responsive to the request, the client is caused to display a customized menu structure by transmitting to the client contextual menu information based in part on a resource associated with the request. According to another embodiment, an augmented HyperText Transport Protocol (HTTP) request is received from a client application. The augmented HTTP request identifies a resource and indicates a desired action to be performed on the resource. Personalization information is identified and extracted from HTTP header fields associated with the request. The personalization information includes one or more of personal and preference information, device information and location information. Then, the content associated with the resource and/or a format in which the content is delivered to the client application is customized based on the personalization information.

Abstract: Apparatus are provided for managing hierarchically organized subscriber profiles. According to one embodiment, a router includes a subscriber manager, a database and a virtual interface. The subscriber manager is operable to receive a connection request from a subscriber of a service provider. The database has stored therein hierarchically organized profile identifiers, including multiple lower-level profile identifiers, which explicitly define subscriber services, and multiple first-level profile identifiers, which define service contexts representing combinations of services available to subscribers when connected to the service provider by (i) explicitly defining the subscriber services or (ii) referring to one or more of the plurality of lower-level profile identifiers.

Abstract: Systems and methods for allowing authorized code to execute on a computer system are provided. According to one embodiment, a method is provided for locking down a computer system. A customized, local whitelist database is stored with a memory of the computer system. The whitelist database forms a part of an authentication system operable within the computer system and contains therein cryptographic hash values of code modules expressly approved for execution by the computer system. A kernel mode driver of the authentication system intercepts a request to create a process associated with a code module. The authentication system determines whether to authorize the request by causing a cryptographic hash value of the code module to be authenticated against the whitelist database. The authentication system allows the code module to be loaded and executed within the computer system if the cryptographic hash value matches one of the cryptographic hash values.

Abstract: The invention provides compounds that are useful as linkers for solid phase synthesis and as protecting groups, and methods for producing and using the same.

Abstract: Various embodiments of the present invention provide circuits and methods for improved virus processing. As one example, a method for virus processing is disclosed that includes providing a first memory that includes a first set of virus signatures, and a second memory that includes a second set of virus signatures. In addition, a virus co-processor and a general purpose processor are provided. The virus co-processor is communicably coupled to the first memory, and the general purpose processor is communicably coupled to the virus co-processor and to the second memory. A subset of the second set of virus signatures that is not included in the first set of virus signatures is determined. The subset of the second set of virus signatures is processed on the general processor, and the first set of the virus signatures is processed on the virus co-processor.

Abstract: The present invention relates to active bactericidal, antibacterial, anti-infective, antimicrobial, sporicidal, disinfectant, antifungal and antiviral compounds and compositions and to new uses of these compositions in therapy. This specification also describes methods of use for the new compounds and compositions. The specification further describes methods for preparing these compounds. FIG. 1: A dual chamber apparatus for the preparation of NNDCT on site.

Abstract: Apparatus are provided for managing hierarchically organized subscriber profiles. According to one embodiment, a router includes multiple virtual interfaces and a policy engine. The virtual interfaces define connections between the router and corresponding subscribers of a service provider. A first virtual interface is operable to receive packets from a first subscriber and to process the packets in accordance with a first-level profile identifier. The policy engine is coupled with the virtual interfaces and operable to de-reference subscriber profiles of the subscribers on behalf of the virtual interfaces based on a database of hierarchically organized profile identifiers.

Abstract: This invention provides pH buffered plant nutrient compositions, methods for fertilizing a plant growing or a seed germinating in a hydroponics system, methods for growing a plant in a hydroponics system, and methods for making a pH buffered plant nutrient composition. The compositions and methods of this invention are useful with distilled water, deionized water, filtered water, and United States municipal tap water. The compositions and methods of this invention are useful with most of the municipal water supplies in the United States. pH buffering agents useful in the practice of this invention include phosphate buffers, aquarium buffers, 2-[N-morpholino]ethanesulfonic acid, and mixtures thereof.