Abstract: The server side Transfer Control Protocol is modified so that the server returns a SYNACK message with the window size equal to zero if the server is busy. When a client sends a TCP connection request and receives a synchronization acknowledgement message with the window size equal to zero, the client knows that the server received the connection request and that the server is busy. The client may then send an acknowledgement message to complete the three-way synchronization handshake, thus successfully completing the connection. Thereafter, the client side TCP may probe the server side TCP until a window update message is received from the server. When the server sends a window update message to set the window size to a non-zero size, the client knows that the server is no longer busy and the client application may then use the TCP connection.

Abstract: An access control system (200) enables a computer network (1) to prevent execution of computer code that may contain computer viruses. An access control console (201) generates an access control message (260) including control parameters such as a time limit (255). Said time limit (255) is disseminated to computers (2, 3) on the network (1). Said computers (2, 3) use the time limit (255) to determine the executability of computer code. Access control system (200) also enables blocking data communications with suspicious or susceptible programs in network (1) during virus outbreaks.

Abstract: A cluster router architecture and methods for performing distributed routing are presented. The cluster router architecture includes off-the shelf Personal Computer (PC) hardware-based router cluster nodes interconnected in an intra-connection network in multiple dimensions. Each PC-based router cluster node is provided with the same routing functionality and a router-cluster-node-centric configuration enabling each router cluster node to provide routing responses for packets pending processing. Packet processing is divided into entry packet processing and routing response processing; special processing; and exit processing. Exit packet processing is performed by router cluster nodes transmitting packets into communication networks in which the cluster router participates. Packet processing is interrupted on determining that special processing is required in respect of a packet, and the packet is handed over to a corresponding special purpose router cluster node.

Abstract: A routing module resolves the conflict of IP addresses among at least two devices connected over a network. The routing module assigns a global IP address to a device based on the addressing configuration of the device. The outbound packets are sent with this global IP address. A record of the global IP address assigned to the device, the local IP address and MAC address are maintained by an information module. Where the local IP address of two or more devices is the same, the MAC address is used to determine the appropriate destination device. Routing module determines the entry in the information module that corresponds to the global IP address included within the IP header of inbound packets. The inbound packets are sent to the local IP address and MAC address of the appropriate destination-device that is derived from the entry that corresponds to the global IP address.

Abstract: A method of managing communications in a packet switching network, the method including: associating a connection protocol and an application name with connection information from an IP datagram, the connection information including an IP address of a computer originating the IP datagram, a port number in the computer originating the IP datagram, an IP address of a remote computer, and a port number in the remote computer; storing communication session data in a file storage of the computer originating the IP datagram, the communication session data indicating the connection protocol, the application name, and the connection information; storing the communication session data in a file storage of a packet transmission device; storing a policy statement in the file storage of the packet transmission device; and applying the policy statement to a plurality of TCP/IP packets including the connection information to manage communication of the plurality of TCP/IP packets.

Abstract: A method of enforcing network bandwidth limitation includes receiving a request from a client for transmission of a server's feed data and receiving a client timestamp from the client. The method further includes determining if feed data in a previous transmission from the server to the client has been lost, and if so, reimbursing the client for the lost data. The method further includes determining if the client is eligible to receive the requested feed data transmission from the server, and if the client is eligible, then immediately transmitting of the most recent available requested feed data from the server to the client, but if the client is not eligible, then preventing the transmission and withholding the feed data from the client without prolonging the duration of any network connection from the server to the client.

Abstract: Improvements to a system for enhancing the quality of group interaction, group activities, and group environments over computer networks. New features include the capacity for participants to form subgroups within a larger group, as well as to move about a virtual environment, interacting with other participants they come across in the environment as desired. Unique methods for creating and distributing structured group programs for use on the system, for playing computerized board games or card games on the system, and for building virtual social environments using the system are also disclosed. The system creates improved virtual environments for high-tech business meetings, on-line classrooms, conferences, group counseling sessions, internet trade shows, and private meeting places where family and friends can spend quality time together.

Abstract: An ordering system has a server device and client device communicably connected via a network, with the server receiving orders from the client device. The server device comprises a receiving unit for receiving the order information from the client device and writing to memory, an order model managing unit for managing order information as an order model, and a sending unit for automatically sending the order model managed by the order model managing unit to the client device. The client device comprises a receiving unit for receiving the order model, an order model saving unit for saving the order model, an order information editing unit for editing the order information written to the order model saved at the order model saving unit, and a sending unit for sending the order model with order information edited by the order information editing unit to the server device.

Abstract: Managing a plurality of network devices on a network by detecting the presence of at least one of the plurality of network devices on the network by using a first communication protocol, obtaining, by using the first communication protocol, an information block from each of the detected network devices, wherein the information block contains information related to the corresponding network device, formatting each information block into a directory entry, and sending each directory entry to a directory server via a second communication protocol.

Abstract: A method for displaying an access path between a virtual volume of a storage controller that has an external storage connecting function, and an external volume of an external storage system. By this method, port connection information about an access path defined between the virtual volume and the external volume is collected. A first network address for identifying an access port of the storage controller on the access path is collected. Also, a second network address for identifying an access port of the external storage system on the access path is collected. Moreover, identification information for identifying the external volume is collected. Finally, the network topology between the virtual volume and the external volume is displayed based on the port connection information, the first network address, the second network address, and the identification information.

Abstract: One or more networking apparatuses are employed to practice a networking method that improves a first networking device's likelihood in meeting its service level goals/commitments for a first group of network traffic serviced by the first networking device. Determination is made, away from the networking device, on whether the first network device is meeting the service level goals/commitments for the first group of network traffic. Determination may include monitoring the first group of network traffic at or away from the networking device. If the service level goals/commitments are not being met, a second group of network traffic (also serviced by the first networking device) is regulated. Regulation may be made at the networking device or away from the network device. Additionally, if the condition for regulation is no longer presents, regulation may be moderated or removed. Further, the service level goals/commitments may include reliability and/or performance goals/commitments.

Abstract: A Method and System for Parallel Operation and Control of Legacy Computer Clusters is disclosed. Also disclosed is a system that permits the creation of a cluster computer using the legacy operating systems already existing on the computing devices. The system is further be able to seamlessly operate over a standard wide are network, such as the “Internet,” as well as over local area networks. The system further permits the individual computers to operate either as part of the cluster, or on local operations, without any need for modification to the other computers involved in the cluster. Still further, the system utilizes standard TCP/IP format for all internodal messaging. Also, the system maintains performance “grades” for each cluster node, either by node self-grading, or by node reporting, such that the user can select which nodes to participate in a particular parallel application.

Abstract: A collaborative computer telephony system, comprising a communication network; a plurality of integrated computer telephony devices connected to the network and identified by unique IP addresses, at least two of the integrated computer telephony devices supporting collaboration application programs; an indicator on at least one of the integrated computer telephony devices; and a collaborate control program associated with each of the integrated computer telephony devices for detecting commonly supported ones of the collaboration application programs and in response activating the indicator.

Abstract: The exemplary embodiments describe methods and systems for managing the communications and information resources of a user. When a request for data is received, a message log is queried for the data. The message log tracks both wireline communications and electronic communications sent to and received by the user. A result of the query is then communicated.

Abstract: A method for displaying content of a time-sensitive e-mail message to a recipient, wherein the content displayed is based on when the recipient opens the time-sensitive e-mail message. A sender of the time-sensitive e-mail message establishes content and a rule set for delivering the e-mail message. The rule set contains a predefined time limit for allowing the recipient of the time-sensitive e-mail message to open it. If the recipient opens the time-sensitive e-mail message within the predefined time limit, the content within the e-mail is delivered to the recipient. If, however, the recipient fails to open the time-sensitive e-mail message within the predefined time limit, then the time-sensitive e-mail message is either deleted from the recipient's mailbox or an alternative message is displayed.

Abstract: Described is a system and method that protect certain classes of sensitive data traveling across an accessible transmission medium, such as an internal bus in a device, from automated attacks. The protection is particularly useful for resource-constrained and/or security constrained components. Automated attacks depend on analyzing data characteristics such as bit pattern signatures and/or frequency distributions to succeed. To preclude such automated attacks, various alternatives of the present invention internally alter the sensitive data at a data source prior to transmission, in a synchronized way such that the altered data is internally reversible at the destination resource. Data alteration includes interspersing random data into a data stream (e.g., bitstream or stream of packets), and interspersing data of varying length on the bus.

Abstract: A digital object delivery/management system includes a library of stored digital objects and a shared database containing web server access codes and a mapping indicating which users are authorized to access which stored digital objects. The shared database is coupled to a file transfer protocol (FTP) server and a web server. The FTP server is additionally coupled to the library. The web server presents at least one web page providing instructions for users seeking access to digital objects contained in the library, authenticates users according to the web server access codes, generates temporary FTP access codes for use by authenticated users in accessing authorized objects at the FTP server, and redirects authenticated users to the FTP server. The FTP server authenticates users according to the temporary FTP access codes, and, upon successful authentication, makes digital objects contained in the library available to requesting users pursuant to the mapping.

Abstract: A server includes a host running an operating system kernel. Isolated virtual private servers (VPSs) are supported within the kernel. At least one application is available to users of the VPS. A plurality of interfaces give the users access to the application. Each VPS has its own set of addresses. Each object of each VPS has a unique identifier in a context of the operating system kernel. Each VPS is isolated from objects and processes of another VPS. Each VPS includes isolation of address space of each user from address space of a user on any other VPS, isolation of server resources for each VPS, and failure isolation.

Abstract: A content intelligent network recognition system and method for use in analyzing and evaluating data from a network are provided. The content intelligent network recognition system includes an input interface, a buffer, a rule/policy database, a network processing unit that includes a plurality of processing elements, a state machine, and an output buffer. The input interface receives data from the network and the buffer stores the data. The rule/policy database is configured to store various rules and policies for use analyzing and evaluating the data. The network processing unit includes a plurality of processing elements that may receive a copy of portions of corresponding data stored in the buffer. The processing units use the rule/policy database to analyze the protocol data units to determine an appropriate action. The state machine may initiate action determined by a processing element for portions of the data.

Abstract: A data processing system for resending a previously sent email message. A new recipient for the previously sent email message is selected. The new recipient of the previously sent email message is added in response to selecting the new recipient, wherein the previously sent email message is directed to the new recipient and a previous recipient. An indicator to the previously sent email message is added in response to selecting the new recipient, wherein the indicator indicates that the new recipient has been added to a form a new version of the previously sent email message. The new version of the previously sent email message is sent in response to adding the indicator, wherein the indicator causes the new version of the previously sent email message to replace the previously sent email message at an email program of the previous recipient.