Abstract: A Virtual Path Group (VPG) technique that utilizes network elements (NEs), i.e., nodes, that are visible to ATM specific defects, and allows for fast ATM virtual connection/restoration with a minimum of processing. This is realized by employing a Virtual Path Group transport architecture comprises at least one (1) working route, one (1) protection route, and VPG bridge and selector functions at each end of the routes. It is applicable to 1+1, mesh and ring protection switching and is extensible to any virtual connection segment or end-to-end network (cross-subnetwork) virtual connections, and extensible to 1:1 and M:N protection switching. Additionally, the protection switching arrangement of the invention includes an architecture for the Virtual Path Group (VPG) concept in which the associations among individual ATM virtual channels (VP/VCs) and VPGs are maintained entirely within the network element management function.

Abstract: A method and apparatus are provided for receiving a packet stream having fixed length packets. Data carried in the packet stream is selectively processed for output to a computer. A packet identifier filter selects particular packets from the recovered packet stream. A computer disk controller receives the packets selected by the filter and manages the transfer of packet data from the packets to and from a buffer. A data bus is coupled to the disk controller for communicating the packet data from the buffer to the computer. A data compression stage prior to the disk controller compresses packets from the recovered packet stream in order to provide a gap between data carried by successive packets to be provided by the disk controller. In this manner, a low cost disk controller chip can be used to control the buffering of data in a cable or satellite television modem that provides, e.g., Internet access.

Abstract: The present invention discloses a novel system for controlling the inbound and outbound data packet flow in a computer network. By controlling the packet flow in a computer network, private networks can be secured from outside attacks in addition to controlling the flow of packets from within the private network to the outside world. A user generates a rule base which is then converted into a set of filter language instruction. Each rule in the rule base includes a source, destination, service, whether to accept or reject the packet and whether to log the event. The set of filter language instructions are installed and execute on inspection engines which are placed on computers acting as firewalls. The firewalls are positioned in the computer network such that all traffic to and from the network to be protected is forced to pass through the firewall. Thus, packets are filtered as they flow into and out of the network in accordance with the rules comprising the rule base.

Abstract: An Online Brokering Service provides user authentication and billing services to allow users to anonymously and securely purchase online services from Service Providers (SP) sites (e.g., World Wide Web sites) over a distributed public network, which may be an untrusted public network such as the Internet. Users and SP sites initially register with the Brokering Service, and are provided with respective client and server software components for using the Brokering Service. In one embodiment, when a user initially connects to an SP site, the SP site transmits a challenge message over the public network to the user computer, and the user computer generates and returns and cryptographic response message (preferably generated using a password of the user). The SP site then passes the response message to the Brokering Service, which in-turn looks up the user's password and authenticates the response message.