Abstract: A wireless communication network includes a network device and a terminal device. The network device sends a first message indicating a data compression algorithm supported by the network device, receives a second message identifying a data compression algorithm supported by the terminal device, and sends a third message to the terminal device upon receiving the second message, the third message identifying a negotiated data compression algorithm.

Abstract: A method and device for processing source role information in which a source role tag is inserted into a packet as an inner VLAN tag of the packet and used to perform role based access control processing for the packet.

Abstract: Embodiments of the present invention disclose a method for configuring and managing access points AP and an access controller AC. The method includes: creating at least one virtual radio interface, each of which is assigned a standard Management Information Base (MIB) interface index, wherein each of the at least one virtual radio interface corresponds to at least one physical radio interface of at least one AP; determining a physical radio interface to which a virtual radio interface corresponds and sending configuration information on the virtual radio interface to the determined physical radio interface when there is a need to send the configuration information to the physical radio interface. By using embodiments of the present invention, a standard MIB can be re-used for operating APs, thereby costs for managing the APs are reduced.

Abstract: An apparatus and method for ensuring distributed packet transmission security are provided. In an embodiment of the present invention, a main control board allocates SA information to multiple processing boards according to a pre-defined criterion, so that each processing board which receives and stores the SA information may implement IPSec processing. As such, the IPSec processing is shared by the multiple processing boards. Accordingly, when there are a large number of IPSec tunnels on one interface, the IPSec processing to the packets passing the IPSec tunnels will not completely rely on only the processing board where the interface is located. Instead, the IPSec processing is allocated to different processing boards. Therefore, the multiple processing boards effectively share the IPSec processing corresponding to multiple SAs. The efficiency of the IPSec processing is increased.

Abstract: The present invention provides a method and apparatus for packet transmission in the network. When the network device receives data packets from the first user, the network device extracts and saves the data encapsulated in the data packets and then forwards the packets according to the destination addresses of the data packets. When it receives the request from a second user for the data mentioned above, it encapsulates the saved data in data packets and sends the data packets to the second user. With the present invention deployed, the uploaded data packets are saved on network devices and can be directly transmitted to users requesting them. In this way, the present invention avoids repeated traffic upload, reduces upload traffic in the network, decreases network bandwidth occupied by traffic, and thus improves the overall network performance.

Abstract: The present invention relates to a method for data output control, which comprises: obtaining the length of idle bits in the cache queue of a data output interface, and if the idle-bit length is equal to or longer than the length of the data to be sent on the interface, putting the data into the cache queue of the interface. In addition, this present invention discloses another data output control method, and two types of data output control apparatuses. Using this invention can avoid flow interruption.

Abstract: A system and method for a transaction between a person using a mobile device and an enterprise is disclosed. A computing system, application program interface, and data storage, and network connectivity is provided. Data files can be presented to the mobile device. A system and method for conducting a transaction structured between a merchant and a customer with a mobile device involving the interchange of information is also disclosed. Data is presented to the mobile device of the customer by a push notification, messaging, text messaging, SMS, multimedia messaging, MMS, internet communication, mobile web communication, mWeb, application program communication, mobile application program, mApp, electronic mail and/or e-mail. The transaction may comprise a session; session data is available for a specified use or time. Information may comprise personally-identifiable information (PH), private health-care information (PHI), private credit information (PCI) and/or enterprise secure data (ESD).

Abstract: The present invention discloses a method of multi-active detection and a stack member device. Each member device in a stack is configured with a detection interface that is assigned an IP address, wherein the IP address of the detection interface on the designated active device is activated. Each member devices is also configured with an active device election rule, and with a correspondence between the IP address of the detection interface on each member device and the active device election parameter of the member device. Upon detection that the stack has become split, each designated standby device transitions to become an active device and activates the IP address of its detection interface.

Abstract: The present invention discloses a method, an apparatus, and a system for IKE negotiation. One method comprises: upon receiving a data packet, selecting one of multiple service cards according to a pre-configured policy and triggering the service card to send an IKE negotiation packet; and saving the mapping between the IKE negotiation packet and the service card. The other method comprises: upon receiving an IKE negotiation packet, selecting one of multiple service cards according to a pre-configured policy, triggering the service card to perform IKE negotiation, and saving the mapping between of the IKE negotiation packet and the service card. The solution enables a network node a node to distribute IKE negotiations to different service cards to perform IKE negotiation at the same time, improving IKE negotiation speed.

Abstract: A method for manufacturing a Micro-Electro-Mechanical System pressure sensor. The method includes forming a gauge wafer including a diaphragm and a pedestal region. The method includes forming an electrical insulation layer disposed on a second surface of the diaphragm region and forming a plurality of sensing elements patterned on the electrical insulation layer disposed on the second surface in the diaphragm region. The method includes forming a cap wafer with a central recess in an inner surface and a plurality of through-wafer embedded vias made of an electrically conductive material in the cap wafer. The method includes creating a sealed cavity by coupling the inner recessed surface of the cap wafer to the gauge wafer, such that electrical connections from the sensing elements come out to an outer surface of the cap wafer through the vias. The method includes attaching a spacer wafer with a central aperture to the pedestal region with the central aperture aligned to the diaphragm region.

Abstract: Embodiments of the present invention provide method for implementing security-related processing on packet and a network security device. Through establishing a relationship between stream attribute information of an initial packet of a stream and security-related processing information implemented on the initial packet, when a succeeding packet of the stream is received, the previously stored relationship is acquired according to stream attribute information of the succeeding packet, the security-related processing is implemented on the succeeding packet according to the security-related processing information in the relationship.

Abstract: The present invention discloses a method for implementing load sharing among Access Points (AP), the method is applied in a wireless network including at least one Load Sharing Service (LSS), and each LSS includes at least two APs, the method includes: when receiving from a mobile Station (STA) an LSS message including information of at least one AP belonging to the same LSS and being available for the STA to access, by an AP: selecting at least one AP to be accessed by the STA from the at least one AP belonging to the same LSS and being available for the STA to access according to a predefined strategy for load sharing and load status of each AP belonging to the same LSS. The present invention further provides an AP and STA. The effect of load sharing among APs can be improved adopting the present invention.

Abstract: Embodiments of the present invention provide a data transmission method, a Coaxial-Cable Network Unit (CNU) and a Coaxial-cable Line Terminal (CLT). The method is applied to a point-to-multipoint Coaxial-cable Network, wherein the point-to-multipoint Coaxial-cable Network includes a Coaxial-cable Line Terminal, CLT, and a plurality of Coaxial-Cable Network Units, CNUs; the CLT shares transmission medium with the CNUs. The method includes: obtaining, by the CLT, an uplink receiving scrambling code, and decrypting, by the CLT, with the obtained uplink receiving scrambling code, data sent from a CNU after being encrypted with an uplink transmission scrambling code; and obtaining, by the CNU, a downlink receiving scrambling code, and decrypting, by the CNU, data received by the CNU with the obtained downlink receiving scrambling code; wherein the uplink receiving scrambling code is different from the downlink receiving scrambling code.

Abstract: The present invention discloses a method for data synchronization and the transmit (Tx) and receive (Rx) ends used. The data synchronization method applies to distributed systems that comprise a Tx end and at least one Rx end, wherein the Tx end (i) uses one or more bulk data channels to transmit bulk data and a real-time data channel to transmit real-time data, (ii) before a continuous bulk data transfer, sends a message through the real-time data channel to instruct the Rx end(s) to switch to the bulk data channel(s), and (iii) after a continuous bulk data transfer, sends a message through the bulk data channel(s) to instruct the Rx end(s) to switch to the real-time data channel. This invention can guarantee data synchronization for distributed systems with a simple implementation.

Abstract: A method for determining Quality of Service (QoS) level is provided. The method includes: assigning, by a Coaxial-cable Line Terminal (CLT), a QoS level for a user terminal; sending, by the CLT, relevant information of the assigned QoS level to a Coaxial-cable Network Unit (CNU); and determining, by the CNU, a QoS level for a packet sent by the user terminal according to the relevant information of the assigned QoS level. A system for determining QoS level is provided. The system includes: a CLT and a CNU. A CLT and a CNU are also provided. The solution enables a coaxial-cable network unit to satisfy the QoS requirements of user terminals, and reduces the producing cost of the coaxial-cable network unit.

Abstract: Schedules which include reciprocal events, such as schedules for youth hockey leagues, can be created using a system in which users can invite one another to schedule games based on information selected through an interface and reciprocal dates which are automatically identified by a suitably programmed computer. Information related to games and schedules can be stored in a database which can be accessed and modified by different users depending on their roles and the permissions associated with those roles.

Abstract: A method, system and gateway for remotely accessing an MPLS VPN are provided. In the method, multiple virtual interfaces are established in an SSL VPN gateway, one virtual interface is bound with one VPN, different VPN users are differentiated according to authentication and authorization information of users, and the authentication and authorization information of the users is respectively bound with corresponding VPNs. When the SSL VPN gateway receives a packet sent by a user, an inner label and an outer label are added to the packet according to a VPN instance bound with the user; when receiving a response packet from a resource server, the SSL VPN gateway searches for a VPN instance according to the VPN label, and forwards the response packet to the user through the SSL connection according to the found VPN instance.

Abstract: The present invention discloses a packet processing method, which applies to a high-performance and scalable flow processing system architecture. The service board performs security processing for packets received from external devices by using the firewall function before sending them to the main CPU; similarly, the service board also performs security processing for packets sent from the main CPU by using the firewall function before the main CPU sends them to external devices. The methods of the present invention utilize high performance and good scalability of the new architecture. In a network with heavy and high-speed traffic, the service board performs security processing for packets by using the firewall function and then transmits the valid packets to the main CPU. Thus, the main CPU is protected by the firewall function against attack packets.

Abstract: The present invention discloses a method for implementing centralized control plane and distributed data plane and that comprises the following steps: the main control unit of the main board generates control information and delivers it to the adaptation layer of the main board; the adaptation layer of the main board transmits the control information to the adaptation layer of the service board(s); the adaptation layer of the service board(s) delivers the control information to the data plane and hardware engine of the service board(s). The present discloses a program and system for implementing centralized control plane and distributed data plane. The present invention provides a software architecture using an adaptation layer to implement centralized control plane and distributed data plane to ensure high performance and good scalability of the new architecture, reduce system complexity, and keep system simplicity and efficiency.

Abstract: The invention provides a stacking system and a method for traffic switching in the stacking system, comprising: when newly joined devices in the stacking system make the daisy chain topology change to ring topology, block a stack port of one of the newly joined devices; after the devices in the stacking system perform another topology convergence process, the master restores the configuration of the newly joined devices; after the configuration of the newly joined device one of whose stack ports is blocked is restored, it sets its blocked stack port to the forwarding state, calculates the shortest path based on the ring topology, and sends first notification packets for topology change from daisy chain type to ring type through its two stack ports; each device that receives the first notification packets re-calculates its shortest forwarding path respectively and switches the traffic, and then forwards the first notification packets.