Abstract: Methods and systems are provided for delivering content from a website to a computer device. The website and computer device negotiate terms for use of a cache memory coupled to the computer device. The computer device requests content, such as web page objects, from the website. In addition to transmitting the requested content, the website transmits non-requested content to the computer device. The non-requested content is stored in the cache memory for later retrieval by the computer device.

Abstract: Methods and systems are directed to managing a protocol network failure in a network clustering system. A cluster master and each client member in the cluster are configured to determine a primary protocol network, a secondary protocol network, and the like, for exchanging a cluster protocol message. Each client member in the cluster determines its ‘active protocol network’ from at least the primary protocol network, and the secondary protocol network when it joins the cluster. Each client member tests its connectivity to the cluster master through the primary protocol network. If a client member detects a failure on the primary protocol network, it dynamically fails over to the secondary protocol network, or the like, without leaving the cluster. If connectivity to the primary protocol network is restored, the client member dynamically resumes the protocol message exchange on the primary protocol network without leaving the cluster.

Abstract: A system and method is directed to synchronizing a standby route distributor in a distributed routing platform. A route distributor is configured to operate as an active route distributor. Another route distributor is configured to operate as a standby route distributor. The standby and active route distributor may reside in the same or a different distributed routing platform. A slave route distributor communicates a route to the active route distributor. The active route distributor may update its routing tables with the route. The active route distributor forwards the route to the standby route distributor to enable their routing tables to be substantially synchronized. The standby route distributor distributes the route to the slave route distributors, where the route enables an update to another routing table. In the event of a switchover, the standby route distributor resynchronizes its routing tables and may distribute route information to each slave route distributor.

Abstract: A method and system for managing electronic mail (email) based on a user oriented penalty count (PC) random rejection. The invention determines a threshold for a specific user and assesses a cumulative PC for usage of a resource that exceeds the user specific threshold. Different operating states are determined based on a status associated with the resource. In a normal operating state, virtually all sent email is processed. In a selective-rejection state, sent email from a user with a cumulative PC is rejected randomly, while others are processed. In a random-rejection state, sent email from a user without a cumulative PC is randomly rejected based on a resource usage factor and an adjustment multiplier, while sent email from a user with a cumulative PC is completely rejected. The user may be assigned an exempt status that enables processing of virtually all email from the user independent of user's PC.

Abstract: A method for establishing a service tunnel for private internet protocol services over a connectionless network. The private internet protocol services are transported over the service tunnel in accordance with selected respective private internet protocol services.

Abstract: The present invention is directed to a system and method for protecting a network appliance against a security breach. The network appliance is protected by an appliance protector component that resides within the network appliance. The appliance protector protects the network appliance by monitoring processes for a valid signature and terminating processes with an invalid signature.

Abstract: Admitting a new node into a network without collisions and providing collision-free transmission of packets into a channel, such that: an upper bound can be enforced for the time elapsed between two consecutive time slots assigned to the same node; no collision-avoidance handshake is required for each packet transmission, and no pre-assignment of transmission times (slots), channels, or codes are required. Time is divided into frames consisting of a known number of time slots, and frames can be further organized into epochs.

Abstract: A communication protocol that provides link-level and media access control (MAC) level functions for wireless (e.g., ad-hoc) networks and is robust to mobility or other dynamics, and for scaling to dense networks. In a mobile or otherwise dynamic network, any control-packet collisions will be only temporary and fair. In a dense network, the network performance degrades gracefully, ensuring that only a certain percentage of the common channel is consumed with control packets. The integrated protocol allows packets (e.g., data scheduling control packets) to be scheduled in a collision-free and predictable manner (known to all neighbors), multicast packets can be reliably scheduled, as well as streams of delay- or delay-jitter-sensitive traffic. Further, using an optional network code, the scheduling of control packets can appear to observers to be randomized.

Abstract: A keyboard event server (KES) allows an end user to remotely control a computer. The KES accepts a uniform resource locator having a query string that specifies one or more keyboard events to be simulated. The query string may include mnemonics corresponding to one or more keyboard-key presses that can be simulated one after another and/or simultaneously. An end user can use a wireless-access browser running on a wireless-client device to remotely control a target computer through a wireless-access gateway.

Abstract: A jitter buffer receives a plurality of data packets comprising a circuit emulation service over internet protocol (CESIP), buffers the plurality of data packets, and plays data from the plurality of data packets at a constant bit rate corresponding to the CESIP.

Abstract: The present invention relates to a method and system for implementing link level protocol redundancy in a router. In particular, the invention relates to providing redundancy of the Intermediate System Intra-domain Routing Information Exchange Protocol (IS-IS) routing protocol. An active processor provides IS-IS operations. In the present invention, a standby processor is coupled to the active processor. During the initial synchronization, all protocol information from the active processor is forwarded to the standby processor. The protocol information can include IS-IS global protocol information, IS-IS configuration information, IS-IS adjacencies information, IS-IS interface information and link state packet information. Thereafter, any updates of protocol information are immediately forwarded to the standby processor in an orderly and controlled manner.

Abstract: A system and method is directed at providing collision-free transmission of packets into a channel, such that: an upper bound can be enforced for the time elapsed between two consecutive time slots assigned to the same node; no collision-avoidance handshake is required for each packet transmission, and no pre-assignment of transmission times (slots), channels, or codes are required. Time is divided into frames consisting of a known number of time slots, and frames can be further organized into epochs.

Abstract: A method and system for providing protection from exploits to devices connected to a network. The system and method include a component for determining whether an encapsulation has been applied to an attachment and unencapsulating such encapsulated attachments, a component that performs at least one decompression of the attachment when the attachment is compressed, a component that determines whether a header, body, and/or attachment of a message includes an exploit, and a component that holds and optionally cleans messages that include exploits. A device that receives messages that are directed to the network employs the components above to provide exploit protection for at least one of the messages.

Abstract: A system and method for efficient QoS signaling for mobile IP using RSVP framework in which mobile nodes are connected to correspondent nodes via plurality of intermediate nodes. The method has the steps of: programming in the mobile node for data packets propagating upstream data from a mobile node to correspondent node via intermediate nodes; initiating in the mobile node a first PATH message for upstream data; sending the first PATH message from the mobile node to the correspondent node via the intermediate nodes; programming in the correspondent node for data packets propagating downstream data from the correspondent node to the mobile node via the intermediate nodes; initiating in the correspondent node a first RSVP message for downstream data; sending the first RSVP message from the correspondent node to the mobile node via the intermediate nodes; and thereafter sending REFRESH messages only between intermediate nodes.

Abstract: Methods and systems for selectively capturing content and delivering the captured content to mobile communications devices via wireless communications are disclosed. In some embodiments, a mobile unit sends a request for content to a nearby content server, to which the content server may respond with a list of available content items. The mobile unit may send a second, refined request for a specific content item. The content server may send the requested content item to the mobile unit, or the content server may send a pointer to the mobile unit, which indicates a network location from which a user may later retrieve the actual content item. In another embodiment, a mobile unit sends a request to a content server for presently displayed content. The content server may capture a screen image and send the captured image to the mobile unit. Alternatively, the content server may send the file in a native file format of the file from which the displayed content was generated.

Abstract: A system and method for fast GPRS for IPv6 may improve data transfer efficiency in mobile networks, for example, in networks that relay on the GPRS infrastructure as defined and standardized in the European Telecommunications Standards Institute (ETSI), and on mobile IPv6 as standardized in the IETF. Mobile IPv6 techniques may be applied in the context of GPRS to transform mobility management into a routing problem, for example, by translating the routing area identifier into a part of the routing prefix in IPv6. Similar mobile IPv6 techniques also may provide an evolution path toward internetworking using native mobile IPv6.

Abstract: An apparatus for enabling communication between components in a network device includes a network processor providing data signals based on a PLx format; a multiport I/O controller having an IX bus interface and a plurality of MAC layer interfaces; and a bridge for bi-directionally converting the streaming data from the network processor to the I/O controller.

Abstract: A method and system for preventing stack buffer overflow attacks in a computer system are disclosed. A computer system can prevent stack buffer overflow attacks by encrypting return addresses prior to pushing them onto the runtime stack. When an encrypted return address is popped off the runtime stack, the computer system decrypts the encrypted return address to determine the actual return address. A random encryption key can be used, which can be generated from the CPU's clock cycle counter. Multitasking environments can add a seed register to the task state so that each task can use a unique seed to encrypt the return addresses.

Abstract: Multiple devices within a data communication network can be configured according to a single configuration profile. Configuration profile data is stored in a configuration file. Connections are made to individual devices, and the data in the configuration file is transformed into device-specific commands.

Abstract: A method for providing a filtering service to a front-end processing daemon (FD) in a messaging system independently of the FD. A front-end filtering daemon (FFD) is configured to accept filtering requests from at least one FD through a front-end filtering client (FFC) residing the at each FD, and send back results after executing the requests. Pre-formatted requests and replies are employed between the FFC and the FD. Requests are classified in pre-defined categories and prioritized according to their category. The FFD may reside at another device and support a plug-in architecture enabling an administrator to modify a plurality of filtering plug-ins. Each plug-in may include at least one filtering function. A handler list maintained by the FFD is employed to sort incoming requests and direct to the appropriate plug-ins. Negative results from plug-ins are then reported to the FD as a rejection along with an error code.

Abstract: A vehicle creep control system which has: a speed transducer arrangement coupled to the vehicle's speedometer cable or the like, which provides an active output whenever the vehicle stops; an accelerator switch connected to the accelerator pedal, which has an active output whenever the driver's foot depresses the accelerator pedal; a latching circuit with a set input connected to the speed transducer arrangement and a clear input connected to the accelerator switch; a first delay circuit connected to the output of the latching circuit, such that when the latching circuit is set due to the vehicle slowing down to the given low speed value, a first set signal is connected to the delay circuit, which in turn produces a delayed output, after a given first delay time, so that the brakes are actuated and hold the vehicle.