Abstract: Embodiments of the present invention provide structures for microelectromechanical systems (MEMS) that can be sensed, activated, controlled or otherwise addressed or made to respond by the application of forcing functions. In particular, an optical shutter structure suitable for use in an optical switch arrangement is disclosed. In one embodiment, an optical shutter or switch can be scaled and/or arranged to form arbitrary switch, multiplexer and/or demultiplexer configurations. In another embodiment of the present invention, an optical switch can include: a shutter; and a flexure coupled to the shutter, whereupon a vibration transmitted to the flexure when in the presence of a resonant frequency causes the shutter to move across an opening for the passage of an optical signal.

Abstract: Particular embodiments provide an optimal allocation of a bearer manager or home agent. In one embodiment, a message is received from a mobile node requesting access to a visiting network that is different from a home network for the mobile node. An authentication request is sent to the home network requesting authentication for access. The authentication request indicates that a home agent has not been assigned. The home AAA server then sends a response that indicates the visiting AAA server can assign a home agent for the mobile node. The visiting AAA server then assigns a home agent that is optimally determined. The visiting home agent is different from a home agent that is found in the mobile node's home network. When a registration request is received, an IP gateway may send the registration request to the visiting home agent, which may not be sent back to the home network.

Abstract: A data center provides secure handling of HTTPS traffic using backend SSL decryption and encryption in combination with a load balancer such as a content switch. The load balancer detects HTTPS traffic and redirects it to an SSL offloading device for decryption and return to the load balancer. The load balancer then uses the clear text traffic for load balancing purposes before it redirects the traffic back to the SSL offloading device for re-encryption. Thereafter, the re-encrypted traffic is sent to the destination servers in the data center. In one embodiment, the combination with the back-end SSL with an intrusion detection system improves security by performing intrusion detection on the decrypted HTTPS traffic.

Abstract: In one embodiment, a method can include: (i) receiving a packet in a switch, where the packet includes a plurality of fields that forms a binding; (ii) performing a first lookup of a first table using a first lookup key, where the first lookup key includes a first subset of the plurality of fields; (iii) performing a second lookup of a second table using a second lookup key, where the second lookup key includes a result of the first lookup and a second subset of the plurality of fields; and (iv) indicating a check of the binding by using a result of the second lookup. The plurality of fields can include a media access control (MAC) source address, an internet protocol (IP) address, a receive port, and a receive virtual local area network (VLAN), while the result of the first lookup can include a layer-2 source index, for example.

Abstract: In one embodiment, a method for determining crosslinking between netlists is provided. The first netlist and second netlist may have nets that have different net names but may be the same net. It is also possible that the content of individual nets in one list may need to be split or combined to accurately match the other list. Complete results will not be obtained if only 1 to 1 content matches are considered. The method determines an exploded list of one of the netlists, such as the second netlist, where the netlist is reversed such that the pins of the netlist are used as keys to an associated net name. A pin in the first netlist is then determined. The pin may be associated with a first net name in the first netlist. The pin is looked up in the exploded list using it as a key to determine a second net name for the pin. The process continues using each pin in the first netlist to determine the net name associated with the pin in the second netlist.

Abstract: A method, a system, a machine-readable medium, and an apparatus for managing storage on a shared storage space, for example, on an email server, are provided. A plurality of emails is compared. If the content of each of the plurality of emails is the same, then a single copy is stored on the email server. Further, each recipient of the plurality of emails is enabled access to the stored email via a link to the single copy. Additionally, one or more attachments of the plurality of emails are compared. If an attachment is the same in each of the plurality of emails, then it is stored as a single copy. Further, a link is inserted in each of the plurality of emails, enabling access to the attachment from the single copy.

Abstract: A data-center network architecture. The data-center network architecture incorporates a front end having an aggregation layer exhibiting integrated service-module intelligence. A server farm connects the front end with a storage network. In a specific embodiment, the aggregation layer includes plural interconnected multilayer switches incorporating service-module intelligence implemented via one or more service modules. Plural layer-2 switches communicate with the plural multilayer switches. The server farm includes one or more servers that are dual homed or multihomed with the plural layer-2 switches. The storage network includes plural interconnected multilayer directors and one or more Fibre Channel hosts using Host Bus Adapters (HBAs) that interface one or more data-storage devices to the server farm.

Abstract: A method and apparatus for managing communication of router information in a network is disclosed. Consumers of the router information are determined on an interface in the network. The interface is set as a passive interface if no consumers are present on the interface. A passive interface is an interface on which the communication of router information is disallowed.

Abstract: Techniques and systems for server farm load balancing and resource allocation are disclosed. In one embodiment, a method of load balancing can include: arranging servers into service groups; receiving an access request with information related to a differentiation between the service groups; selecting one of the service groups based on a mapping comparison to the information; and selecting one of the servers within the selected service group based on a hardware utilization comparison. The servers can include GPRS (General Packet Radio Service) Gateway Support Node (GGSN) or Remote Authentication Dial In User Service (RADIUS) servers, for example. The information can include an Access Point Name (APN) or Calling Station ID, for example.

Abstract: In one embodiment, an optimizing device is used to suppress transmission of redundant data over networks. The first optimizing device receives information regarding associated optimizing devices associated with a second optimizing device. The information regarding the associated optimizing devices is received from the second optimizing device. Moreover, the first optimizing device receives information regarding indices identifying redundant data. The redundant data comprises data transmitted by the second optimizing device to the associated optimizing devices. The information regarding the indices identifying the redundant data is received from the second optimizing device.

Abstract: A system for resolving address conflicts in a network. In an illustrative embodiment, the system includes an address-configuration module that is adapted to assign addresses to one or more devices. The one or more devices are connected to the network via device interfaces. An interface-monitoring module communicates with the address-configuration module. The interface-monitoring module is adapted to determine when an address conflict involving plural addresses occurs and to provide a signal in response thereto. A conflict-resolution module is adapted to selectively terminate one or more device interfaces associated with the plural addresses in response to the signal and based on the addresses and one or more predetermined precedence rules. In a more specific embodiment, the system further employs a user interface for facilitating selectively adjusting the precedence rules.

Abstract: A route convergence monitoring system and method provide for determining routing changes or affected devices that may cause detrimental or other quality conditions to occur in an endpoint device. In one embodiment, ongoing endpoint quality monitoring of quality conditions and convergence occurrence monitoring of successive route changes that may occur are initiated. An endpoint quality monitor provides for determining an endpoint quality condition and transferring an indicator of the condition (e.g., endpoint device and timing) to a network manager. The network manager may add one or more information indicators and provides the indicators to an end-to-end convergence monitor. The convergence monitor, receives the indicators and determines one or more of a second endpoint device, routing changes in at least a portion of the network and a correlation of routing changes that may have caused the indicated or other quality conditions to occur.

Abstract: A double-sided exchange may be an exchange wherein both buyers and sellers provide bids for matching via the exchange. A first interface receives buy bids from buyers and a second interface receives sell bids from sellers. A controller matches the sell bids with the buy bids, yielding matched buy bids and matched sell bids in response thereto so that allocations of the matched buy bids and the matched sell bids maximize a surplus of the exchange. An allocation that substantially maximizes an auctioneer's profit and/or announces payments based on sell bids is provided. The announced allocations and prices can be shown to be a substantially competitive equilibrium in some applications.

Abstract: A system for presenting keywords obtained from users in a review process. The keywords are displayed along with a use value that reflects the number of times users have voted or selected the keyword as being relevant or effective in a review of a product. The keywords can be used to assist consumers in deciding whether to purchase a product or a service, in determining a brand's reputation, or for other purposes. Keywords can be ranked according to usage criteria such as the frequency of use of the keyword in reviews, the reputation of a user/reviewer who created or used the keyword, etc. Rankings can be dynamically updated when keyword usage changes. Such as when a keyword declines in popularity, when words change in meaning or become obsolete or irrelevant with respect to their original intent, etc. Keywords can be used as filters for product searches.

Abstract: A method and apparatus for validation of structured documents are provided. The method includes searching a fast parser for an instance of a structured document. Further, the method includes parsing the instance by using the fast parser, if the fast parser is available. If no fast parser is available, the method includes parsing the instance by using a generic parser, and generating the fast parser for the structured document, in parallel. The generation of the fast parsers is based on the structure of the structured documents.

Abstract: In one embodiment, techniques provide quality of service (QoS) for services using a gateway. The techniques include receiving one or more control signaling messages from a subscriber station at the gateway. The gateway is in a signaling path for the subscriber station where the subscriber station communicates through a wireless network. The gateway determines a policy to apply for the service based on the one or more control signaling messages. QoS parameters may be determined for the service based on the policy. For example, QoS parameters are determined for a session that is created for a media stream. The media stream may flow from the subscriber station to a base station to the gateway, and vice versa. The gateway may communicate the QoS parameters to the base station to cause the base station to reserve resources in the wireless network. Accordingly, a session for the subscriber station is created and resources are reserved to provide a QoS for a media stream.

Abstract: Enhanced tunnel communication mode creation, management and tuning in a network that includes wireless access points (APs) and user authentication. Tunnels can be dynamically managed to adapt to the changing topology of a network with APs. User devices such as mobile phones, laptop computers, personal digital assistants, or other devices can be added or dropped from an assigned AP. APs, routers, switches or other devices can also be added, removed, or modified in their network characteristics. Special control is also provided for IP multicast, Dynamic Host Configuration Protocol (DHCP), Address Resolution Protocol (ARP) and other network features.

Abstract: An intrusion detection system (IDS) is capable of identifying the source of traffic, filtering the traffic to classify it as either safe or suspect and then applying sophisticated detection techniques such as stateful pattern recognition, protocol parsing, heuristic detection or anomaly detection either singularly or in combination based on the traffic type. In a network environment, each traffic source is provided with at least one IDS sensor that is dedicated to monitoring a specific type of traffic such as RPC, HTTP, SMTP, DNS, or others. Traffic from each traffic source is filtered to remove known safe traffic to improve efficiency and increase accuracy by keeping each IDS sensor focused on a specific traffic type.

Abstract: A method, system and apparatus are provided for dynamically pre-positioning content from servers located in a network, which may be a content distribution network. The content is pre-positioned on a proxy server, and the pre-positioning is triggered by at least one of the scheduling of an event and the presence of a user. Users commuting between different locations of a company can quickly and easily access the pre-positioned content. This content may be prioritized and pre-positioned, based on a user requiring a specific content at a particular time.