Abstract: The invention generally relates to methods and apparatus for routing data in networks, in particular packet data routing in TCP/IP (Transmission Control Protocol/Internet Protocol). Application of the invention include routing of peer-to-peer (P2P) network data. A method of controlling traffic on a data network, said traffic comprising payload data and associated signaling data, the method comprising reading a portion of said payload data for a communications session between a first entity and a second entity communicating over said network; determining whether said portion of payload data identifies a type of traffic to be controlled; storing, responsive to said determining, signaling data associated with said portion of payload data; reading said signaling data to identify an attempt to begin a further communications session of said identified traffic type or to resume said communication session; and controlling traffic of said further or resumed communications session responsive to said identification.

Abstract: Techniques to ascertain physical cabling connections of electronic systems are provided for situations where there are numerous systems interconnected by a very large number of electrical or optical cables. A cable identifying code is inserted into a message sent from a local endpoint system to remote endpoint system over the identified cable. Each intermediate system that is in the interconnection path between the two endpoint systems of interest appends its code for the cable connected to the I/O port from which the message will egress that system and be sent to the next system along the path. The remote endpoint system receives the message which now contains codes for all the cables transited along the path, extract the codes, and thereby determines the exact cabling used in the interconnection of the two endpoint systems.

Abstract: This invention provides a tool for generating ACLs in an environment where a set of network elements or servers (e.g. web servers, IPTV servers, application servers . . . ) need to be secure. The tool also performs ACL validation to ensure that the filtering rules are correct before they are deployed in a network. The system enables a central view of the security configuration concerning the filtering rules in the network. Furthermore, it allows end-to-end configuration of the ACL rules, from the definition of the flows between the servers to the deployment of the rules on the network elements.

Abstract: An egress traffic management system for a data communication system is disclosed. The egress traffic management system makes use of a hierarchical queue ID header paradigm that enables data packets to be directed for egress traffic management to either one of a plurality of assignable queues in a main egress queue module or to one of a plurality of distributed queue modules via a common queue of the main egress queue module. This behavior enables egress traffic management functionality and scale to be varied independently and in a cost-effective manner to meet evolving requirements of a data communications system.

Abstract: A method of non-service affecting APS protection for MLPPP bundles on routing systems, and associated mechanism, including one or more of the following: specifying a working MLPPP bundle and a protection MLPPP bundle; specifying MLPPP parameters; associating the working MLPPP bundle and the protection MLPPP bundle with an APS circuit; bringing up an MLPPP session; changing an operational status of the working MLPPP bundle; synchronizing MLPPP state information between the working MLPPP bundle and the protection MLPPP bundle; and driving an operational status of the protection MLPPP bundle based on said changing the operational status of the working MLPPP bundle.

Abstract: Various exemplary embodiments are a method and apparatus for selecting an access solution in a Grid network including one or more of the following: receiving an application request, the application request having an associated application cost; identifying a plurality of Grid endpoints for which the application cost is not more than an amount of available resources at each of the plurality of Grid endpoints; computing, for each of the plurality of Grid endpoints, a lowest cost path to access the Grid endpoint; and selecting, as the access solution, a first Grid endpoint of the plurality of Grid endpoints. Various exemplary embodiments are a method of selecting aback-up access solution in a Grid network including one or more of the following: ordering a first plurality of couples according to one or more metrics; determining a strategy; and calculating a share of resource load for each couple in the strategy.

Abstract: Various exemplary embodiments relate to a method and related network node including one or more of the following: establishing a plurality of flows; assigning a context identifier to each flow, wherein a length of each context identifier for a first subset of the flows is a first number of bits and a length of each context identifier for a second subset of the flows is a second number of bits greater than the first number of bits; receiving a packet associated with a new flow, wherein a value of a context identifier assigned to the new flow must fit within the first number of bits; determining that the context identifiers for the plurality of flows have occupied all values within the first number of bits; assigning a context identifier of an existing flow to the new flow; and assigning a new context identifier to the existing flow.

Abstract: A comprehensive network map for a graphical user interface (GUI) of a communication network, illustrates all outside links to network devices external to said map. To this end, the connections between a network device on the map and all groups of network devices outside of the map are illustrated using an interactive multiple link connector icon associated to the network device. The connector icon comprises a button for enabling display of a multiple link connector (MLC) list. Each row of the MLC list comprises an outside link widget associated with a group identification widget. A list with all connection between the network device and an associated group of outside network devices is displayed on the map upon selection of the outside link widget on the MLC list. Furthermore, a sub-map of a group is displayed upon selection of the respective group identification widget.

Abstract: Systems and methods of providing secure signaling for voice communications over a public switched voice network (PSTN) are described. The call signaling is received at a first secure voice signaling gateway (SVSG) in which it is encrypted utilizing a security key. The encrypted payload is tunneled from the first SVSG to a second SVSG at a destination network element. The destination SVSG decrypts the payload and passes it on to the destination. According to the invention the communication can be either masqueraded in which the address of the first SVSG is given as the origin or non-masqueraded in which the actual original of the voice communication is retained.

Abstract: A method for monitoring a point-to-multipoint unidirectional multicast connection via exchange of OAM messages is presented. The method includes retrieving the connection record of the multicast connection from a network management system repository and determining common parent path points between the root and a selected path branch endpoint. In turning on content conveyance monitoring for a termination other than the root, the termination specific uncommon portion of the transport path is segmented if necessary, OAM compliant managed path segments are identified, and OAM configuration commands to turn on OAM functionality are issued only to uncommon path segment endpoints.

Abstract: Various exemplary embodiments relate to a method and related network node including one or more of the following: maintaining a line card activity number at each line card in the node; receiving a first packet belonging to a flow; storing, at each line card, a flow record in a line card context identifier storage, wherein the flow record contains a flow activity number being initially set equal to a current value of the line card activity number; detecting, by the second line card, a change in designation to active and changing the value of the line card activity number maintained by the second line card; receiving a second packet belonging to the flow; and transmitting, to the decompressor node, an update packet including the flow context identifier and the flow identifying information, upon determining that the flow activity number is not equal to the updated line card activity number.

Abstract: A system and related method for targeted content delivery based on RSS feed analysis, including one or more of the following: a behavior analyzer that formulates a behavioral profile of a user of a terminal device who requests an RSS feed and receives same through the terminal device; an infrastructure that establishes behavioral profile data regarding the user and delivers targeted content to the user; and a network in communication with the terminal device, the network matching one or more flows of the RSS feed to known protocol signatures, collecting summary descriptive information embedded in the one or more flows of the RSS feed, and correlating the collected information with a subsequent content request.

Abstract: A method for policy-based routing of calls between nodes in a network, comprising: entering policy constraint indices for selected addresses in respective entries of an address translation table, the address translation table for accessing by a first node of the network to selectively translate attributes of calls based on respective addresses prior to transmission over the network to a second node, the policy constraint indices pointing to respective policy constraints for routing calls between the first and second nodes; receiving a call at the first node, the call including an address; accessing the address translation table using the address to determine whether the call requires assignment of a policy constraint by presence of an entry for the address in the address translation table and by presence of a policy constraint index in the entry; and, if the call requires assignment of a policy constraint, identifying a policy constraint with the policy constraint index, assigning the policy constraint to the

Abstract: This invention provides the ability to load balance calls in a communications network using a certain criterion, such as a user-specified call priority, or the call class of service. The method is applied when selecting a route for a new call or for re-balancing the calls across a network. When the user-specified call priority is used, the aggregated number of calls with the same priority or class of service is calculated for all possible routes the new call may use. The aggregated number of calls is then divided by the number of hops in the respective routes; the route with the smallest ratio is selected for the new call. Re-balancing is performed by re-routing the calls in such a way as to obtain a similar number of calls of the same priority, or class of service, along all possible routes.

Abstract: A mechanism and method for efficient endpoint discriminator allocation for APS protected MLPPP bundles on distributed routing systems, including one or more of the following: specifying working and protection MLPPP bundles; retrieving an endpoint discriminator for the working bundle and updating an endpoint discriminator of the protection bundle based on same; specifying MLPPP operating parameters for the bundles; associating the bundles with an APS circuit; adding links and corresponding discriminators in an LCP between a near end bundle and a far end bundle; bringing up an MLPPP session; and adding links between bundles upon an APS switchover.

Abstract: The present invention relates to a method of detecting and monitoring genomic instability in a cell using three-dimensional analysis to assess telomeric and/or chromosomal organization. In addition, the invention relates to a method and system for characterizing the 3D organization of telomeres and/or chromosomes. The system includes an input module for inputting image data of the 3D organization of telomeres and/or chromosomes and a characteristic module for finding a parameter of the 3D organization. The invention also relates to the use of the three-dimensional analysis to detect, diagnose or monitor disease, particularly proliferative diseases such as cancer.

Abstract: Publish-subscribe XML multicast service within a VPN service is described. A backbone such as an IP/MPLS backbone connects multiple subscriber sites using VPN technology and VPN edge routers. XML publish-subscribe modules are addressable within the VPN and form an overlay network between the edge routers participating in the VPN. The XML publish-subscribe modules may perform either topic-based multicast or content-based multicast services. The multicast service is self-managed.

Abstract: A Session Admission Control (SAC) for negotiating admission control in a multi-services communications network including multicast services is described. The module distributes the admission process between a centralized decision function (SAC-PDP) and a distributed decision function (SAC-M) in a fashion that solves admission control scaling problems. The mechanism for interaction between the SAC-PDP and SAC-M is defined. Mechanisms are defined for the SAC-PDP to discover or learn the network capacity against which the admission control decisions will be made. Systems are also described for incorporating SAC-M in multicast replication points in the network, allowing multicast replication points to participate in the admission control process.

Abstract: A system and method are provided for providing a shared RAM cache of a database, accessible by multiple processes. By sharing a single cache rather than local copies of the database, memory is saved and synchronization of data accessed by different processes is assured. Synchronization between the database and the shared cache is assured by using a unidirectional notification mechanism between the database and the shared cache. Client APIs within the processes search the data within the shared cache directly, rather than by making a request to a database server. Therefore server load is not affected by the number of requesting applications and data fetch time is not affected by Inter-Process Communication delay or by additional context switching. A new synchronization scheme allows multiple processes to be used in building and maintaining the cache, greatly reducing start up time.

Abstract: Mechanisms and methods for providing a mobile/wireless device with protection against false access-point/base-station attacks using MAC address protection are presented. The mobile/wireless device known as mobile client (MC) gains access to wireless network by discovering and selectively associating with an access point (AP). The MAC addresses of both the AP and the MC are protected during all communications between the AP and MC during the discovery phase. This protection mitigates MAC address spoofing type attacks on both the AP and the MC.