Abstract: An electronic document is received that represents serial data that contains content of the document and defines an order in which respective portions of the content are to be performed. The serial data of the electronic document is analyzed. Reorganization information is generated for use in delivering the portions of the content, the reorganization information enabling performance in an order different from the order defined by the serial data.

Abstract: The present invention relates to a method and system for implementing link level protocol redundancy in a router. In particular, the invention relates to providing redundancy of the Open Shortest Path First (OSPF) routing protocol. An active processor provides OSPF operations. In the present invention, a standby processor is coupled to the active processor. During an initial synchronization, all network link protocol information from the active processor is forwarded to the standby processor. The network link information can include OSPF state information, OSPF configuration information, OSPF adjacencies information, OSPF interface information and OSPF global protocol information. Thereafter, any updates of network link protocol information are immediately forwarded to the standby processor. Upon failure of the active processor, the router is switched to the standby processor and all OSPF protocol operations are performed on the standby processor.

Abstract: A system and method for using a service discovery device to enable communication between devices within a home network and a remote device. An IP address is provided to each device located within the home network. After the service discovery device makes at least one HTTP request to each of the IP addresses, the service discovery device receives information from a HTML page on each of the devices. A web page is then generated that contains the received information. The generated web page is accessible from the remote device, and the generated web page includes a list of links to device web pages for each of the devices located within the home network.

Abstract: An apparatus and method is provided for facilitating the seamless handoff of IP connections between access routers in an IP network. The mobile IP network includes two or more access routers each serving a different geographic service area. When a mobile terminal moves from the first service area to the second service area, the mobile terminal transmits to the second access router the IP address of the previous access router. The second access router uses this information to learn capabilities of the first access router (e.g., bandwidths supported, security schemes, and the like) for use in future handoff decisions, and exchanges capability information with the first access router. The assumption is made based on the exchanged information that the access routers are geographically proximate.

Abstract: A system and method are directed towards enabling and/or disabling a selection of a version of a network management protocol, such as SNMP. When a networking system is configured using an earlier version of SNMP, such as version 1 or 2, and is to be reconfigured to employ a later version such as version 3, certain options are to be reconfigured. Such options for example, include usage of a community string. When the networking system is to be configured back to the earlier version, the options are again reconfigured. The present invention enables an administrator of the computing system to manage such changes, in part, by abstracting the switching details, without the need to track a progression of events. Moreover, a state of the versions is tracked, such that if the networking system is switched back to version 1 or 2, the last configured community string value is restored.

Abstract: Systems and methods are disclosed for marking a packet with a precedence value in a TCP-friendly way. One system and method marks packets with a precedence value based on a probability function. Another system and method marks packets with one of three precedence values based on network traffic but enables interleaving of differently marked packets when a certain number of packets have been successively marked with a low or medium precedence value.

Abstract: A mobile or other device connects to a server via a publicly accessible network such as the Internet. After installation upon the device, a virtual private network (VPN) client connects to the server and downloads a VPN profile. In one embodiment the device creates public/private key pairs and requests enrollment of a digital certificate. In another embodiment a digital certificate and public/private key pairs are provided. The device also receives a digital certificate from the server and verifies the server certificate by requesting the user to supply a portion of a fingerprint for the certificate. The invention further includes an automatic content updating (ACU) client that downloads a user profile for the VPN, requests certificate enrollment, and updates the VPN client and other applications when new content is available. A security service manager (SSM) server includes, or is in communication with, a Web server, multiple databases, an enrollment gateway and an internal certification authority (CA).

Abstract: A system for multicasting a data packet in a multicast group includes a network entity, and a plurality of members of the multicast group. A member can notify the network entity of a rogue member of the group claiming an identity of a spoofed member of the group. In response to being notified, the network entity can distribute, to at least the members of the group other than the spoofed member, different versions of a symmetric key associated with the spoofed member. The member notifying the network entity of the rogue member can then receive a next data packet and a code for the next data packet, the code having been generated at the rogue member using a version of the symmetric key associated with the spoofed member such that the rogue member can be identified based upon the version of the symmetric key.

Abstract: Multiple devices within a data communication network can be configured according to a single configuration profile. Configuration profile data is stored in a configuration file. Connections are made to individual devices, and the data in the configuration file is transformed into device-specific commands.

Abstract: A router and routing protocol redundancy are disclosed to reduce service outage or degradation for a network device and thus to increase service availability on a network due to software and hardware failures of the network device. A network device such as router includes a redundancy platform having an active controller system and a standby controller system. A routing protocol state change is received or generated by the active controller system. The received or generated routing protocol state change is replicated to the standby controller system. By replicating the routing protocol state change, the standby controller system can maintain the routing protocol sessions for the network device if a failure occurs in the active controller system. Furthermore, the routing protocol states are maintained in realtime to handle the dynamic changes created by routing protocols.

Abstract: An email gateway diagnostic, tool, system, and method are provided for automated troubleshooting of email gateway functionality. Troubleshooting can occur in multiple modes of operation including: full diagnostic, interactive, and undeliverable mail status information. Based upon a set of rules and conditional statements, network and email gateway configurations, and user responses, an automated troubleshooting tool performs necessary testing to the email and network systems to interpret the available information and present the user with the source of the problem or suggest solutions and make recommendations as to why the email gateway may not be functioning properly.

Abstract: Enabling control over multiple forms of communication to a recipient, such as email, instant messages, cell phone calls, conventional phone calls, faxes, and the like. The recipient defines rules for authenticating senders and for determining when, where, and how communication from the senders is transmitted to the recipient's preferred receiving device(s). The rules are stored in a database of a central service. The central service applies the rules to incoming email, instant messages, calls, faxes, etc. The central service screens unauthentic senders according the recipients rules associated with each form of communication, requiring the sender to provide some proof of identification. If authenticated, the central service enables a sender to communicate with the recipient via the recipient's currently preferred receiving device.

Abstract: A mail transfer agent adapted for determining the disposition of incoming e-mail from a sender includes a penalty count filter module (20 which functions on the basis of current communication system resource usage, such as the number of concurrent TCP connections being maintained, and penalty counts assigned for cumulative undesirable sender activity such as sending large e-mail files. The penalty count filter module can operate in a selective-rejection state accepting e-mail from senders without a penalty count and randomly accepting other e-mail, and in a random-rejection state rejecting all e-mail from senders with a penalty count and randomly rejecting other e-mail. The rejection rates can be increased or decreased in response to a detected increase or decrease in the usage of system resources.

Abstract: A mail transfer agent adapted for determining the disposition of incoming e-mail from a sender includes a penalty count filter module which functions on the basis of current communication system resource usage, such as the number of concurrent TCP connections being maintained, and penalty counts assigned for cumulative undesirable sender activity such as sending large e-mail files. The penalty count filter module can operate in a selective-rejection state accepting e-mail from senders without a penalty count and randomly accepting other e-mail, and in a random-rejection state rejecting all e-mail from senders with a penalty count and randomly rejecting other e-mail. The rejection rates can be increased or decreased in response to a detected increase or decrease in the usage of system resources.

Abstract: An apparatus and method is provided for facilitating the seamless handoff of IP connections between access routers in an IP network. The mobile IP network includes two or more access routers each serving a different geographic service area. When a mobile terminal moves from the first service area to the second service area, the mobile terminal transmits to the second access router the IP address of the previous access router. The second access router uses this information to learn capabilities of the first access router (e.g., bandwidths supported, security schemes, and the like) for use in future handoff decisions, and exchanges capability information with the first access router. The assumption is made based on the exchanged information that the access routers are geographically proximate.

Abstract: Methods and systems are provided for delivering content from a website to a computer device. The website and computer device negotiate terms for use of a cache memory coupled to the computer device. The computer device requests content, such as web page objects, from the website. In addition to transmitting the requested content, the website transmits non-requested content to the computer device. The non-requested content is stored in the cache memory for later retrieval by the computer device.

Abstract: A security key distribution and authentication protocol in AAA for Mobile IP has been described. In order to guarantee the secure protocol, messages between the MN, FA, AAAF, AAAH, and HA are encrypted and signed using public/private keys. IPSEC or PKI infrastructure is not required to support the AAA secure key distribution. This protocol enhances the security, flexible, scalability of AAA, and aids in protecting the Diffie-Hellman algorithm from man-in-the-middle attacks. Through this protocol, it is easy to set up a secure registration path in AAA for Mobile IP. This secure registration path provides a secretive and secure key distribution function for AAA.

Abstract: An apparatus for a multi-domain computer system includes multiple virtual system domains, each having an associated, independent routing instance. A virtual switch is created to forward packets between the domains. The virtual switch is configured to operate substantially as if it were a physical layer-2 switch. The virtual switch and the virtual domains are connected together by virtual interfaces, where the virtual switch, the virtual domains, and the virtual interfaces are all created in software. Further, protocols such as ARP, IP, and/or IPv6 operate over the virtual interfaces in substantially the same way that they would over Ethernet. Also, each domain has a software driver that behaves like an Ethernet driver, and has a 48-bit Ethernet-like address that is used for the physical address.

Abstract: A micro-programmable controller is disclosed for parsing a packet and encapsulating data to form a packet. The micro-programmable controller loads an instruction within the micro-controller. The instruction word has a plurality of instruction fields. The micro-controller processes the plurality of instruction fields in parallel. Each instruction field is related to a specific operation for parsing a packet or encapsulating data to form a packet. The programmable micro-controller can be programmed to handle packets to support new types of protocols by programming a template to string specific routines together based on an instruction set specific for parsing and encapsulating.

Abstract: A method and system for authenticating messages received from users across multiple remote devices are provided. A residential gateway authenticates a user using a modified digest authentication scheme by storing a sequence number in the nonce field. Access encryption keys and sequence number spaces may be assigned based on user or on user/remote device pairs. When sequence number spaces are assigned based on user, and the user uses multiple remote devices to access the residential gateway, the sequence number space may be divided into mini-sequence number spaces for each of the multiple remote devices. Access encryption may be two-tiered, such that a secondary key is generated based on a user's primary key, and the secondary key is only valid for a limited amount of time before it expires and a new secondary key must be generated.