Abstract: The present invention relates to methods and devices that support mobility of a client across a campus, particularly mobility across VLANs and subnets, while preserving the client's assigned IP address. Both layer 2 and layer 3 packets are supported. Mobility support most clearly applies to wireless clients, but could apply to other kinds of mobile connections, even to wired connections. A smart server is adapted to support multiple VLANs and to modify and redirect packets in sessions with a client that moves from one VLAN to another, preserving the client's assigned IP address. Two or more smart servers, in cooperation with a smart manger, modify packets and tunnel them between smart servers when a client that moves from one VLAN to another and from one smart server to another, again preserving the client's assigned IP address.

Abstract: Methods, systems and apparatus for suppressing redundancy in data transmission over networks are provided. Data segments are transmitted from a transmitting DPU to a receiving DPU. Initially, only signatures of the transmitted data segments are stored in a cache at the transmitting DPU. A data segment is stored in the cache only if it satisfies a redundancy-suppressing admission policy. Such a data segment is referred to as a redundant data segment. The redundant data segment is also stored in a cache at the receiving DPU. The transmitting DPU transmits the signatures of the redundant data segments to the receiving DPU, which then extracts the redundant data segments from its cache. Therefore, transmission of the redundant data segments is suppressed.

Abstract: A method is disclosed for authorizing a prepaid network service in a data network. A network end station issues a request for a prepaid network service. At a network node, such as a router serving as a gateway for selecting services, a determination is made about whether a user associated with the end station is authorized to access the prepaid network service. Network traffic from the end station is forwarded to a service provider only when the user is authorized to use the prepaid network service. Specific embodiments provide message flows among a mobile station, gateway support node, router, and authentication server that support providing prepaid services in a packet-switched network for mobile communication. In certain embodiments, a connection is held open for an end station while a prepaid quota value is refreshed at a portal, thereby reducing overhead and precluding the need to repeat user logon steps.

Abstract: In a host within a group, a method for ensuring secure communications is provided. The method involves (a) determining if a group security policy is in place for secure communication between hosts within the group, (b) if the group security policy is in place, advertising routing information to another host within the group, and (c) if the group security policy is not in place, refraining from advertising routing information to the other host. Corresponding apparatus and computer program product embodiments are also provided.

Abstract: Methods and apparatus for enabling internal circuitry associated with a device to be efficiently replaced in an operating environment for the device are disclosed. According to one aspect of the present invention, a device includes an enclosure that defines an interior of the device, and a circuit arrangement that is located in the interior. A data port interface is located in the interior, and the device also includes a receptacle and a protection circuitry arrangement. The receptacle is coupled to the circuit arrangement, and the protection circuitry arrangement provides protection to the circuit arrangement. The protection circuitry arrangement has an interface that is removably coupled to the receptacle such that at least a portion of the protection circuitry arrangement is contained in the interior of the device.

Abstract: A method of suppressing the number of PIM messages from extranet receivers is disclosed. Each receiver, before sending a PIM message, first searches for any other receivers other than itself. If there are no other receivers, then the PIM message is sent; otherwise, the receiver suppresses sending the PIM message. PIM Join, triggered Join, and Prune messages may be suppressed. If there are multiple receivers, the PIM messages are sent by a source Extranet receiver located in a provider edge router, for example. The receiver sends the PIM messages for the rest of the Extranet receivers in the provider edge router, and also maintains a counter, ensuring that only one PIM message is sent within a specified time period. As a result, the number of PIM messages traversing core elements of a service provider network may be greatly reduced.

Abstract: A call authorization system moves state maintenance for authorization based phone calls from a central authorization server to different gateways in a packet switched network. A simple authorization session protocol is used between the authorization server and the gateways to minimize network traffic. The authorization session protocol releases the authorization server from having to maintain states for open authorization based phone calls.

Abstract: Methods and apparatus for processing a service request received from a client are disclosed. When a service request is received, a plurality of packets are transmitted, where each of the plurality of packets identify a different type of service via which to send the corresponding packet. In addition, a mapping of each different type of service to an IP address is preferably maintained, thereby enabling the service request to be processed via an IP address associated with a type of service identified in a first one of the plurality of packets to be received.

Abstract: In one embodiment, a remote access session may be established between a first computer and a second computer. In response to detecting a device in low-level local communication with the first computer via a first local communication port of the first computer, the low-level local communication at the first local communication port may be intercepted and transmitted to the second computer via the remote access session. Then, the low-level local communication may be injected to a second local communication port of the second computer, wherein the second computer responds to the low-level local communication as though the device were located at the second local communication port of the second computer. For example, the device may be configured to autoconnect with the second computer via the remote access session when the device is connected to the first computer.

Abstract: A computer-implemented system, method and apparatus for operating a reference monitor simulator is operable to recreate the operations performed by a reference monitor on a computer system. In one configuration, the system defines at least one security rule specifying whether to allow or deny a request to access at least one resource under a given set of circumstances and supplies at least one request to access a resource. The system further applies the at least one security rule in response to the at least one request to access a resource to determine whether to allow or prevent the at least one request.

Abstract: A method and a system for providing a service in a network, is provided. In one embodiment, a first modem with a first address, which is identical to a second address of a second modem, requests for services in the network. A modem termination system (MTS) checks whether the first modem is a clone of the second modem. If the first modem is identified to be the clone of the second modem, then, the first modem is restricted from obtaining the requested service. However, the second modem is continuously provided services.

Abstract: Disclosed are systems and methods for persisting management information indexes across multiple network elements. In particular, methods of detecting and curing potential collisions among a peer group of network elements by use of a hashing function can be provided in accordance with embodiments. For example, a method for maintaining persistence across network elements can include: (i) configuring one of the network elements, and providing a configuration string therefrom; (ii) performing a hashing algorithm on the configuration string to provide a hash value; (iii) determining if any collisions exists between the hash value and corresponding values from among a peer group of network elements; and (iv) assigning the hash value as a management table index when no collision is found, or assigning a new value for the management table index when a collision is found.

Abstract: A method, and computer program product for providing dynamically tunneling over an unreliable protocol or a reliable protocol based on network conditions is presented. A connection between a source device and a destination device is established using a reliable protocol. An attempt is then made to utilize an unreliable protocol to communicate between the source device and the destination device. When the attempt to utilize an unreliable protocol is successful, then the unreliable protocol is used to transmit data between the source device and the destination device. When the attempt to utilize the unreliable protocol is unsuccessful, then the reliable protocol connection is used to transmit data between the source device and the destination device.

Abstract: Methods and systems for culling a litigation discovery file set are described. A directory of the litigation discovery file set is traversed. A hashcode corresponding to a file in the directory is computed. The hashcode is compared to a database and if the hashcode matches an entry in the database, then the file is removed.

Abstract: Redundancy for Virtual Private Network (VPN) service with an Ethernet access network is provided by a full-mesh of dedicated pseudowires connected among the network-facing provider edge (n-PE) devices, each of which is associated with the same Ethernet access network. A provider Bridge Protocol Data Unit (BPDU) generated by a provider bridge node in the Ethernet access network and received at an input interface of one n-PE device is relayed (without being processed) to all other n-PEs associated with that access network over the full-mesh of dedicated pseudowires. It is emphasized that this abstract is provided to comply with the rules requiring an abstract that will allow a searcher or other reader to quickly ascertain the subject matter of the technical disclosure. It is submitted with the understanding that it will not be used to interpret or limit the scope or meaning of the claims.

Abstract: Methods and systems thereof for processing Extensible Markup Language (XML) documents are described. In one embodiment, an XML document comprising content in an XML format is parsed. The content is converted into pcodes according to a conversion key; that is, an XML tag is converted into a pcode can be converted back to XML using the conversion key. A pcode file including the parsed XML document, converted into pcode, is thereby generated. The pcode file is smaller than the original XML document and the content is already parsed, so the time needed to process the pcode file is significantly less than the time needed to process an XML document. Memory usage and the time needed to send and receive information are also improved.

Abstract: A method is disclosed for reducing client-server messages. A first request to open a file is received. The first request includes first information that indicates a first access mode for opening the file. The first information is modified to indicate a most extended access mode for opening the file. The first request with the modified first information is sent to a file server that manages access to the file. A first response is received. The first response comprises second information which indicates a specific access mode for opening the file that is granted by the file server. The second information is stored in a cache. In response to a second request to close the file, the closing of the file is delayed.

Abstract: A backplane having a switch card interface and an adapter card interface where the switch card interface has input/outputs in an arrangement that functionally mate to a networking layer system switch card and a physical layer system switch card. The adapter card interface is coupled to the switch card interface. The adapter card interface has input/outputs in an arrangement that functionally mates to a networking layer system adapter card and a physical layer system adapter card. A method that involves forming a first and second backplane according to a manufacturing process, integrating the first backplane into a networking layer system switch, and integrating the second backplane into a physical layer system switch.

Abstract: A system for user authentication includes a gateway operable to receive a user authentication request in an Internet Protocol format from a server. The gateway communicates the user authentication request in a Signaling System 7 protocol to a user registry. The gateway is also operable to receive a user authentication response in the Signaling System 7 protocol from the user registry. The gateway communicates the user authentication response in the Internet Protocol format to the server.

Abstract: Method and devices are provided for to simplify, for the user of a home network, the sharing of content with remote users. Some such implementations allow remote users who have logged into the home network to have access to devices and services within the home network. Some implementations of the invention provide solutions for sharing multiple devices within the home network in a grouping to a particular remote user who logs into the home network in a secure fashion. Some methods of the present invention are implemented in part by controlling a gateway of the home network. As such, the necessary hardware and/or software for implementing the invention can be located in a gateway of the home network. In alternative implementations, aspects of the invention may be implemented via a portal service offered by a service provider who also controls the gateway, or by a device in the home network.