Abstract: The Access Tester allows an administrator, or any other authorized user, to determine who or what entities have access to a resource, whether a particular individual or set of individuals have access to a resource under certain conditions and whether the authorization rules associated with a resource operate as intended. In one embodiment, an administrator uses a graphical user interface to enter access information. Exemplar access information includes one or more URLs identifying the resource(s), one or more request methods, one or more IP addresses, date and time restrictions, and an identification of one or more users. The Access Tester determines whether the identified users are authorized to access the resource(s) associated with the URL(s) using the request methods, during the date and time provided.

Abstract: The classification system of a network device includes a cache in which a mapping between predefined characteristics of TCP/IP packets and associated actions are stored in response to the first “Frequent Flyer” packet in of a session. Selected characteristics from subsequent received packets of that session are correlated with the predefined characteristics and the stored actions are applied to the received packets if the selected characteristics and the predefined characteristics match, thus reducing the processing required for subsequent packets. The packets selected for caching may be data packets. For mismatched characteristics, the full packet search of the classification system is used to determine the action to apply to the received packet.

Abstract: Process data to a client is provided for process data to a client from a server in an Industrial Automation System. An incompletely determined and/or extensible request for process data from the client by the server is received. The structure and kind of process data to be sent to the client by a server application is determined. An XML type message of meta data being descriptive on structure and kind of the process data and the process data are generated. The XML type message is then sent to the client.

Abstract: A process is disclosed for applying an audio-visual addressing scheme to locate fragments of audio-visual content. The process comprises a definition sub-process, an encoding sub-process, and a decoding sub-process. The definition sub-process defines a logical model for a class of audio-visual media. The logical model is used in the encoding sub-process for encoding an address for an audio-visual resource fragment belonging to the class of audio-visual media. The logical model is also used for locating the audio-visual resource fragment that is associated with the address.

Abstract: According to one aspect of the present invention, a method is provided in which a request submitted by a user via a user-interface is sent from a client to a server for processing. Upon being notified by the server that the request may take a long time to process, inform the user of the status of the request. The user is informed of the progress of the request based upon progress information received from the server.

Abstract: HTTP/HTML is enhanced to provide information to a server about the current usage level of the continuous data that is being sent to the client. With this information, the server is able to tailor the data being sent to the client based on the current usage level. If the usage level changes in the client system, the server receives information about the changed level and the amount of data being sent is adjusted (up or down) accordingly. The client (browser) is enhanced to determine and send the current usage status and the server is enhanced with the intelligence to tailor the data it sends based on the current usage status received from the client.

Abstract: Exemplary embodiments of the present invention include a method for administering devices in a network. The method includes creating a user metric vector comprising a plurality of disparate user metrics, creating a user metric space comprising a plurality of metric ranges and determining whether the user metric vector is outside the user metric space. If the user metric vector is outside a user metric space, identifying an action in dependence upon the user metric vector the method includes determining whether the action is allowed. If the action is allowed, the method includes executing the action. Many embodiments include receiving an allowed action list, such as for example, receiving an allowed action list from a moderator DML.

Abstract: A storage area network (SAN) has a plurality of components including digital data processors, e.g., hosts, coupled to a plurality of storage device. Common, platform-independent processes execute on the hosts, which can be of varied platform types, e.g., Unix™, Windows™, Solaris, and so forth. Those processes utilizes the command line interface of the host operating system to invoke platform-dependent processes on the respective hosts. The platform-dependent processes return data to the platform-independent processes, e.g., via Standard Output or Standard Error of the host operating system command line interface.

Abstract: A system, device, and method for receiver access control in a multicast communication network treats each subscriber location as a separate subnetwork having one and only one multicast receiver. An access device is situated at each subscriber location. Each access device connects to a separate port of a multicast distribution device. Each subscriber device accesses the multicast network through the access device that is situated at its subscriber location. Each access device acts as a proxy for its respective subscriber devices by joining and leaving multicast groups on behalf of the subscriber devices and acting as the sole multicast receiver for the subscriber location. The access devices run a multicast group management protocol for joining and leaving various multicast groups, and therefore the access devices appear to the multicast distribution device as the ultimate multicast receivers for multicast information.

Abstract: A monitoring program contains a method for detecting a load imbalance in a group of servers and providing notification so that corrections can be made. An embodiment of the invention reads from the address resolution protocol (ARP) cache to determine which server addresses are present, then clears the ARP cache. The address resolution protocol will repopulate the cache from traffic it snoops and from new requests. By performing this query and clear operation periodically, the tracking program can form a picture of the activity levels of the servers. When a significant imbalance exists, the program notifies a control console for human intervention to solve the problem. The tracking program will periodically write its results to a log file, allowing reports for various time periods to be produced as needed. By this mechanism, not only can an imbalance be quickly detected, but underutilization can be picked up by comparing known capability of a resource to its actual usage.

Abstract: In one embodiment, a technique is provided to share resources among data flows. An apparatus receives a request for a new data flow where the new data flow is associated with a session group (ID). The apparatus determines that the session group ID of the new data flow matches a session group ID of one or more existing data flows, and that the one or more existing data flows are not already sharing resources with another data flow that has a session group ID different from the first session group ID. Provided this is true, the apparatus shares resources reserved for the one or more existing data flows with the new data flow.

Abstract: A method, system, and apparatus for a management station to manage a node cluster in a computer network. Regardless which node in the node cluster receives a management command from the management station to the master node, the management command is sent to the master node. The master node prepares a command response and sends the response back to the original node that received the management command. The original node, in turn, forwards the command response to the management station. The invention utilizes management agents executing on a master node and servant nodes to create and process the command response.

Abstract: An OPC redirection manager maintains the information necessary for taking appropriate action when the target OPC server fails and for ensuring that no bad status is returned to the client. Any existing OPC client needing seamless failover between target OPC data access and/or alarm and event servers will connect to a uniquely configured instance of the redirection manager instead of connecting to the primary server. The client application continues to perform OPC related tasks as usual. Because each client connection is unique, the redirection manager itself is not a single point of failure. Each configured redirection manager instance monitors the health of the target server mode and the target server itself by subscribing to failure events.

Abstract: A system and method for accessing complex computer based systems initiates a trace and debug session via IP causing the resulting output to be stored in a designated remote server on the Internet which can accept large amounts of information. The trace and debug information subsequently can be accessed from any engineering workstation or personal computer from any other location via the Internet. The invention permits the trace sessions to run independent of any local access and permits several technical people in different locations to access the remote storage server simultaneously or independently.

Abstract: A system for temporary aliasing is provided. A representative system includes a database system operable to store a plurality of network profiles, each network profile being associated with a user. The database system being further operable to provide a first user with a temporary alias to allow addition of the temporary alias to a network profile associated with a second user. The system further includes a service manager coupled to the database system and operable to remove the temporary alias from the network profile of the second user. Methods and other systems for temporary aliasing are also provided.

Abstract: A method and apparatus for policy management in a network intermediary device. One embodiment of the invention, includes establishing a session between a client and an intermediary device on a network to enable processing of a communication between the client and the intermediary device. Then, the communication is processed by the intermediary device while maintaining a consistent version of policy throughout the communication. Finally, after the communication is complete, the intermediary terminates the communication. The intermediary device may maintain consistent policy by utilizing a policy ticket upon which transactional information is stored and that references the version of policy that was current when the communication first began.

Abstract: A system and method for multi-telecommunication over a local IP network are provided. The multi-telecommunication system includes an IP network, a local IP network, a plurality of terminals connected to the local IP network, for conducting a voice call or a video call over the local IP network, a home gateway connected to the IP network and the local IP network, for interfacing between the IP network and the plurality of terminals, assigning an ID and a port to each terminal to differentiate terminals sharing one IP address in processing an incoming call and an outgoing call, and converting IP and port information in the header and payload of a received or transmitted packet according to an assigned ID and port number, and a gatekeeper connected to the IP network, for performing registration and call connection admission and managing the state of the IP network.

Abstract: A home network integrates a television to enable a user to use the television to conduct an Internet video conference by leveraging the Internet video conferencing functionality provided by a home computer connected to the Internet. The television is connected to the home network via a TV client module, and a video camera co-located with the television is also connected to the TV client. The TV client presents on the television an Internet conferencing option selectable by a user to invoke the video conferencing functionality of the personal computer. During the video conference, video and audio data captured by the video camera are transmitted by the TV client over the home network to the personal computer fro forwarding onto the conferencing parties on the Internet, and user interface data representing video/audio streams received from the Internet are transmitted by the personal computer to the TV client for display on the television.

Abstract: A home network integrates a television to enable a user to use the television to conduct an Internet video conference by leveraging the Internet video conferencing functionality provided by a home computer connected to the Internet. The television is connected to the home network via a TV client module, and a video camera co-located with the television is also connected to the TV client. The TV client presents on the television an Internet conferencing option selectable by a user to invoke the video conferencing functionality of the personal computer. During the video conference, video and audio data captured by the video camera are transmitted by the TV client over the home network to the personal computer fro forwarding onto the conferencing parties on the Internet, and user interface data representing video/audio streams received from the Internet are transmitted by the personal computer to the TV client for display on the television.

Abstract: A computerized file system is accessible over the Internet or other type of network, in which certain “triggering events” pertaining to the operation of the file system automatically generate a notification message to users. Once a user has been authenticated, this user's access rights are determined. An Automatic Notification function checks to see if any “triggering” events have occurred when a user performs a particular task. The Automatic Notification function defines what type of event will become a triggering event, and also defines what will be the triggering action, once the triggering event occurs, and stores this information in a database. The Auto-notification function can comprise programs that are launched to perform certain tasks. The precise type of auto-notification message is fully configurable for each component in the file system.