Abstract: Embodiments of the invention provide a system and method for automatically managing a network port based on a calendar function. In one embodiment, a discovery protocol is provided for automatically discovering at least one port of at least one switch in a network. Furthermore, a management protocol is provided. The management protocol is configured to automatically manage the at least one port of the at least one switch in the network based on a programmable calendar function. In addition, a reconfiguration protocol is also provided. The reconfiguration protocol is configured to reconfigure the calendar function of the automatic management of the at least one port of the at least one switch in the network.

Abstract: A rules engine for the examination of selected fields in an addressed data packet has an access control list table of which the entries each define an access control list rule, an action and a chain identifier. The access control list rule may be a basic rule which refers to network addresses and transport layer port numbers. The rules engine also has an extension rule table of which the entries each define an extension rule, a respective action and a respective rule identifier. The extension rule may refer to a particular TCP flag. When a packet arrives, the engine searches both tables. This search is made independently of the ordinary network layer or link layer address lookup. If there is a match in both tables, and the chain identifier matches the extension rule identifier, the rules engine prescribes the action associated with the extension rule.

Abstract: A method and apparatus for implementing a presence based universal camp-on feature in packet-based telephony systems are disclosed. A first packet-based device is subscribed to a line status of a second packet-based device. A first notification is received into the first packet-based device from the second packet-based device when the line status of the second packet-based device is in a busy state. A second notification is received into the first packet-based device from the second packet-based device when the line status of the second packet-based device is in an idle state. A user of the first packet-based device is prompted with an option to establish a communication session with the second packet-based device upon receiving the second notification into the first packet-based device. A communication session is established between the first packet-based device and the second packet-based device in response to receiving an accept-call command into the first packet-based device.

Abstract: A content addressable memory stores entries each comprising a rule and as part of the entry a mask identifying all the entities to which the rule is applicable. A search pattern of data and a bit mask identifying the actual entity (or entities) associated with the data is applied as a search word along with a comparison mask that excludes all the other entities from the comparison of the search word with the entry. The CAM can thereby store efficiently in a single entry a rule that may be applicable to some but not all of a multiplicity of entities such as possible ingress ports of a network unit.

Abstract: A method and system for using a key lease in a secondary authentication protocol after a primary authentication protocol has been performed is described. In one embodiment, the primary authentication protocol comprises a strong, secure, computationally complex authentication protocol. Moreover, the secondary authentication protocol comprises a less complex (compared to the primary authentication protocol) and less secure (compared to the primary authentication protocol) authentication protocol which can be performed in a length of time that is shorter than a length of time required to perform the primary authentication protocol. In an embodiment, the key lease includes context information.

Abstract: A method and system for providing directory based services is provided. The directory service may process an ambiguous destination identifier from a call-session request to multiple database entries in a directory server, and return an appropriately constructed response that can be interpreted by a user as a prompt for additional input to refine the destination identifier. The possible matches could be sent as a list of possible choices. The user can then select the desired match from the list and send a follow-on request including the selection to the directory server. Based on the selection, the directory server will then either send additional possible matches to the user or obtain a contact address corresponding to the selection. After resolving the ambiguous match to a unique destination identifier, a call can then be established.

Abstract: Providing enhanced emergency services (E-911) to an IP Telephony-based PBX or similar system, by utilizing aspects of the intelligence of end-user SIP client devices to address challenges and difficulties associated with E-911-like services in LAN-based telephony environments.

Abstract: A stack of network routers is composed of at least one (elected) master unit and one or more slave units each capable of running a routing protocol. Only the master unit runs the entire routing protocol at a given time. It forwards direct update messages via a transmission control protocol to each of the slave units. These direct update messages may include specific packet formats for the protocol state machinery where such machinery is required by the routing protocol, e.g. the interface state machine and the neighbor state machine for the OSPF protocol, and for the net databases, e.g. the link state databases for the OSPF protocol, in each of the slave units. Each slave unit may run its protocol state machinery (where provided) based purely on the direct update messages received from the master. The synchronization of the net databases may be based on snooping net update packets and a comparison of the information received thereby with verification data messages sent from the master unit.

Abstract: A flexible data outlet includes a housing configured for placement in an operating area of a user, such as on a wall adjacent to a user's work space. User interface circuitry in the housing provides an interface to user equipment located in the user operating area, including a user telephone device and a user data device such as a personal computer. The user interface circuitry includes a link-layer interface to the user data device. Both wired and wireless user connections are supported. Premises interface circuitry in the housing provides an interface to premises equipment located generally outside the user operating area. The premises equipment includes data processing equipment and telephone communications equipment providing access to a public telephone network. Bridge circuitry in the housing provides communications connections between the user interface circuitry and the premises interface circuitry in a flexible manner, enabling the provision of a variety of information services to the user.

Abstract: Systems and methods for controlling features and services in packet-based networks are disclosed. The present application provides systems and methods that include sending a first message to a network core device, and identifying a profile from user account information stored on the network core device. The profile specifies which features and services may or may not be implemented by an end device. In the systems and methods of the present application, the profile is added to a second message that is sent from the network core device to the end device. Alternatively, a single message or multiple messages containing the profile, regardless and/or independent of any prior message sent from an end device, may be sent from the network core device to the end device. These systems and methods may also use the session initiation protocol for their communications, with the end devices being session initiation protocol phones and the network core device being a session initiation server.

Abstract: A method and system for network based call-pickup is provided. In one embodiment a first user agent communicates in a communication session with a second user agent in a network telephony system. The second user agent may request that a third user agent replace the second user agent in the communication. The third user agent may be a park server, and when it replaces the second user agent, the communication session may thereby be parked at the park server. A fourth user agent may then request that the third user agent (e.g., park server) initiate a communication session between the first user agent and the fourth user agent. The third user agent may then instruct the first user agent to communicate with the fourth user agent. The parked communication session may thereby be picked up by the fourth user agent.

Abstract: A system and method for multicasting announcements in a communication network. An address is established in a memory. Announcements are formed. The announcements are broadcast on the address.

Abstract: A statistical switching method is described. The method involving computing tags from a packet to identify the flow a packet belongs to, looking up the tag in a table to provide switching information and using the switching information to switch the packet without analyzing the whole packet. If there is no entry for the flow based on the tag generated from the packet, the packet is sent to a router for further analysis. When the analysis is complete the switching information is provided to the table. If a packet which computes the same tag arrives at the switch before the router has finished analyzing the first packet of the flow, the new packet is dropped. The statistical switch has a non-zero probability of misdirecting a packet due to the possibility that two packets belonging to different flows may produce the same tag. The statistical switch provides high-speed switching and routing capabilities at low cost.

Abstract: Gateway routers for real-time networks have the ability to collect delay, loss, and jitter statistics on a per-connection basis. It is possible to use this information not only to monitor the quality of individual voice calls and other real-time connections, but also to evaluate the overall performance of the underlying network. This paper describes a method for monitoring and managing the performance of a real-time data network that supports voice, video and other real-time services. In the described embodiments, the RTCP mechanisms of RTP for sender and receiver reporting be used to relay performance information to one or more network monitoring sites for analysis and interpretation. In addition, gateway routers are organized and managed within a hierarchy that allows the monitoring function to localize it view of network conditions within the hierarchy; and the monitoring of network performance can occur on various time scales.

Abstract: A method and system for introducing controlled delay of packet processing at a network entity using multiple delay loop paths (DLPs). For each packet received at the network entity, a determination will be made as to whether or not processing should be delayed. If delay is necessary, one of a plurality of DLPs will be selected according to a desired delay for the packet and a path delay determined for each DLP. Upon completion of a DLP delay, a packet will be returned for processing, an additional delay, or some other action. Multiple DLPs may be enabled with packet queues, and may be used advantageously by security devices, such as Intrusion Prevention Systems (and other packet processing platforms) for which in-order processing of packets may be desired or required.

Abstract: A network unit for use in a switching fabric includes multiple units collectively constituting a single network entity, each having ports for the reception and forwarding of data packets. The network unit has at least one fabric port for connection to a partner port on another one of the units by at least one link. The network unit is organized to send and receive via the at least one fabric port protocol packets which contain information on the path costs between said units in the fabric and to perform an algorithm to determine, on the basis of said information, routes for data packets within the fabric to other units of the fabric.

Abstract: A public telephone and Internet access system that comprises Personal Digital Assistants (PDA) that are connected to an Ethernet or other Local Area Network by a network cradle, and a number of Ethernet telephones connected to the same Local Area Network. The PDAs store encrypted information about their owners, including the owner's name, their phone forwarding preferences, access permissions to the network, and charging/billing information. When a PDA is attached to a network cradle, this information is automatically transferred to the gatekeeper, which is a server that performs management tasks for the Ethernet phone network. These tasks include deciding whether or not a user is allowed to sign up and use a public Ethernet phone, maintaining billing and charging information, and forwarding incoming calls for a given user to the Ethernet phone at the user's current location. This invention provides a secure method for the PDA and the gatekeeper to exchange authentication information.

Abstract: A method to support the assignment of a globally unique network public address and, optionally, a number of locally unique ports to a first private network subdevice having a private network address on a network access system from a second private network subdevice having a public network address using Realm Specific Internet Protocol, wherein the public network address is used by the first private network device to communicate with network devices on an external network.

Abstract: Methods and systems are provided for efficiently selectively updating multiple-region flexible displays. In an embodiment, multiple regions of a display material each have a common conductor along a first surface and a patterned set of conductors along a second surface. A control circuit includes a separate conductive trace to each common conductor, such that the control circuit can selectively apply known voltages to the common conductors, as well as a single set of driver lines to all of the patterned sets of conductors, such that any sets of signals sent to any of the patterned sets of conductors are received by all of the patterned sets of conductors. The control circuit is used to selectively apply electric fields between the common conductor and the patterned set of conductors of a subset of the regions, so as to selectively update an appearance of the subset of the regions.

Abstract: One embodiment of the invention includes a method of managing network communications in a network device. The network device includes software components and modules. Some of the components control the interaction between modules, while other components perform specific functions for associated modules. A module manager component controls the creation and destruction of modules as well as their interactions. A communications manager component manages network communications in the network device. The network communications is supported by creating a number of modules that are associated with components that implement different parts of a network protocol. As a result of the use of the modules, a component need not know which other component(s) it depends upon, nor need it know which other component(s) depend upon it. This allows components to be used together very easily in many different configurations. The modules also allow the same component to be used by multiple modules.