Abstract: A method and system for managing at least one service level of a service provided by a service provider to a customer of the service provider under a service level agreement. The service level agreement is a contract between the service provider and the customer. Measurement data and at least one adjudication element associated with a service level of the at least one service level are adjudicated in accordance with the at least one adjudication element such that the adjudication generates a respective adjudicated data point for each data point of the measurement data. The measurement data includes at least one data point measured on a respective resource that provides the service. A modification history chain is generated by: initially establishing the modification history chain as being empty; and adding an identification of each adjudicated element applied to each data point of the measurement data to the modification history chain.

Abstract: A method and system for managing at least one service level of a service provided by a service provider to a customer of the service provider under a service level agreement. The service level agreement is a contract between the service provider and the customer. Measurement data and at least one adjudication element associated with a service level of the at least one service level are adjudicated in accordance with the at least one adjudication element such that the adjudication generates a respective adjudicated data point for each data point of the measurement data. The measurement data includes at least one data point measured on a respective resource that provides the service. A modification history chain is generated by: initially establishing the modification history chain as being empty; and adding an identification of each adjudicated element applied to each data point of the measurement data to the modification history chain.

Abstract: A method and system for managing at least one service level of a service provided by a service provider to a customer of the service provider under a service level agreement. The service level agreement is a contract between the service provider and the customer. Measurement data and at least one adjudication element associated with a service level of the at least one service level are retrieved in an electronic format. The measurement data and the at least one adjudication element are stored in a datastore. The measurement data includes at least one data point measured on a respective resource that provides the service. The retrieved measurement data are adjudicated for the service level in accordance with the at least one adjudication element such that the adjudication generates a respective adjudicated data point for each data point of the measurement data.

Abstract: A method and system for managing at least one service level of a service provided by a service provider to a customer of the service provider under a service level agreement. The service level agreement is a contract between the service provider and the customer. Measurement data and at least one adjudication element associated with a service level of the at least one service level are retrieved in an electronic format. The measurement data and the at least one adjudication element are stored in a datastore. The measurement data includes at least one data point measured on a respective resource that provides the service. The retrieved measurement data are adjudicated for the service level in accordance with the at least one adjudication element such that the adjudication generates a respective adjudicated data point for each data point of the measurement data.

Abstract: An identity management method and system is disclosed. The method includes identity context management (ICM) clients monitoring access to Internet resources using dedicated Virtual Machines (VM). An ICM server monitors associations between Internet resource identifiers (IDs) and the Internet resources accessed by the VMs. The VMs register context for the ICM clients with the ICM server. An ICM client enables access to Internet resources and presentation of Webpages and Internet contents associated with the Internet resources within the associated Virtual Machine context.

Abstract: An identity management method and system is disclosed. The method includes identity context management (ICM) clients monitoring access to Internet resources using dedicated Virtual Machines (VM). An ICM server monitors associations between Internet resource identifiers (IDs) and the Internet resources accessed by the VMs. The VMs register context for the ICM clients with the ICM server. An ICM client enables access to Internet resources and presentation of Webpages and Internet contents associated with the Internet resources within the associated Virtual Machine context.

Abstract: An identity management method and system is disclosed. The method includes identity context management (ICM) clients monitoring access to Internet resources using dedicated Virtual Machines (VM). An ICM server monitors associations between Internet resource identifiers (IDs) and the Internet resources accessed by the VMs. The VMs register context for the ICM clients with the ICM server. An ICM client enables access to Internet resources and presentation of Webpages and Internet contents associated with the Internet resources within the associated Virtual Machine context.

Abstract: A method and system for managing a service level of a service provided by a service provider to a customer under a service level agreement. The actual measurement data is adjudicated to correct the measurement data in accordance with at least one adjudication element that provides information relating to how to correct the measurement data. The adjudicated measurement data is transformed into operational data by being reorganized into one or more groups of data. The operational data is evaluated by applying a formula to the operational data, resulting in the operational data being configured for being subsequently qualified. The operational data is qualified by comparing the evaluated operational data with specified service level targets for at least one service level period and identifying operational data points meeting and/or not meeting the specified service level targets.

Abstract: An identity management method and system is disclosed. The method includes identity context management (ICM) clients monitoring access to Internet resources using dedicated Virtual Machines (VM). An ICM server monitors associations between Internet resource identifiers (IDs) and the Internet resources accessed by the VMs. The VMs register context for the ICM clients with the ICM server. An ICM client enables access to Internet resources and presentation of Webpages and Internet contents associated with the Internet resources within the associated Virtual Machine context.

Abstract: A method of synchronizing firewalls in a communication system comprising a server farm wherein any user connected to the Internet can access customer servers, and at least two firewalls using a Virtual Router Redundancy Protocol (VRRP) to set up as primary interface firewall the firewall which owns the primary interface of the VRRP group of interfaces to at least one customer server. The method includes initializing, in a secondary interface firewall, a synchronization message exchange with the primary firewall after receiving a packet for a connection having a state which is incompatible with the received packet or after the standard firewall processing of a packet corresponding to a new connection, and registering in a common connection table the state of any connection if the connection is new or if the connection state has changed.

Abstract: The invention provides a system and method for providing a high availability application at low cost for a wide range of solution architectures. A user runs a simplistic web-based wizard to install the high availability application. Then, a user designs the high availability application's logic for an individual process or process-group using a finite state table. Next, a standard UNIX init process spawner subsystem is extended to implement the high availability application as a property of a process. Finally, the logic from the finite state table is used to make each process or process-group highly available.

Abstract: A datagram with a destination network address is received at a router. The router identifies a next hop router en route to or associated with the destination network address. The router determines whether or not transmission of the datagram on a link to the next hop router would result in a bandwidth usage exceeding a bandwidth threshold associated with the next hop router. If not, the router updates the bandwidth usage associated with the next hop router to account for the datagram, and transmits the datagram to the next hop router. If so, the router selects among other possible next hop routers en route to or associated with the destination address, another next hop router for which transmission of the datagram on a link to the other next hop router would not result in a bandwidth usage exceeding a bandwidth threshold associated with the other next hop router.

Abstract: A method and system for managing a service level of a service provided by a service provider to a customer under a service level agreement. The measurement data is transformed into operational data. The operational data is evaluated through use of a formula represented as a tree, resulting in the evaluated operational data populating the nodes of the tree as the tree is traversed from the root node to leaf nodes. The evaluated operational data at the nodes includes a top result and intermediate results. The top result is qualified by being compared with specified service level targets for at least one service level period during which the service has been performed. The intermediate results are qualified by being compared with generated new service level targets.

Abstract: A method of preserving symmetrical routing in a communication system comprising a server farm connected to the Internet through an Internet access router. The server farm includes at least two customer cabinets with at least a WEB server and at least two firewalls. The firewalls use a Virtual Router Redundancy Protocol (VRRP) to set up one firewall as being the primary firewall. The method includes checking in each firewall whether there is a change of the VRRP state from primary to secondary or reciprocally. Such a change indicates that a link between the primary firewall and one of the customer cabinets has failed. The link is disabled from the network to the firewall the state of which has changed from primary to secondary or the link is enabled from the Internet network to the firewall the state of which has changed from secondary to primary.

Abstract: A method of preserving symmetrical routing in a communication system comprising a server farm connected to the Internet through an Internet access router. The server farm includes at least two customer cabinets with at least a WEB server and at least two firewalls. The firewalls use a Virtual Router Redundancy Protocol (VRRP) to set up one firewall as being the primary firewall. The method includes checking in each firewall whether there is a change of the VRRP state from primary to secondary or reciprocally. Such a change indicates that a link between the primary firewall and one of the customer cabinets has failed. The link is disabled from the network to the firewall the state of which has changed from primary to secondary or the link is enabled from the Internet network to the firewall the state of which has changed from secondary to primary.

Abstract: A method of preserving symmetrical routing in a communication system comprising a server farm connected to the Internet through an Internet access router. The server farm includes at least two customer cabinets with at least a WEB server and at least two firewalls. The firewalls use a Virtual Router Redundancy Protocol (VRRP) to set up one firewall as being the primary firewall. The method includes checking in each firewall whether there is a change of the VRRP state from primary to secondary or reciprocally. Such a change indicates that a link between the primary firewall and one of the customer cabinets has failed. The link is disabled from the network to the firewall the state of which has changed from primary to secondary or the link is enabled from the Internet network to the firewall the state of which has changed from secondary to primary.

Abstract: A security system for a communication system that includes an IP network and groups of servers in a farm, wherein each group is associated with a customer. A user connected to the network can access information provided by a customer from a server within the group of servers associated with this customer through a dispatching device. The security system comprises setting means in each of the switches which are located between the dispatching device and the customer servers for setting a field of bits in the IP header of potentially irregular packets transmitted from a customer server and the dispatching device, means in the dispatching device for identifying any packet wherein the field of bits has been set to the predefined value, and means for deleting or logging the potentially irregular packet when the destination of the packet is not the dispatching device.

Abstract: The invention provides a system and method for providing a high availability application at low cost for a wide range of solution architectures. A user runs a simplistic web-based wizard to install the high availability application. Then, a user designs the high availability application's logic for an individual process or process-group using a finite state table. Next, a standard UNIX init process spawner subsystem is extended to implement the high availability application as a property of a process. Finally, the logic from the finite state table is used to make each process or process-group highly available.

Abstract: A method of preserving symmetrical routing in a communication system comprising a server farm connected to the Internet by an Internet access router IAR. The server farm includes at least two customer cabinets each having a WEB server, and at least two firewalls. The firewalls use Virtual Router Redundancy Protocol (VRRP) to set up a primary firewall that supports communication between a customer server and an Internet user. The IAR selects the firewall to be used as being the firewall corresponding to the interface having the lowest weight in a routing table. The cost assigned to each interface associated with a firewall is automatically generated, at the initial time, according to the priority assigned by the VRRP protocol to said interface associated with said firewall.

Abstract: A method and system for managing a service level of a service provided by a service provider to a customer under a service level agreement. The measurement data is adjudicated to correct the measurement data in accordance with at least one adjudication element that identifies a rule specifying how to correct the measurement data. The adjudicated measurement data is transformed into operational data by merging the adjudicated measurement data using a logic specified in the service level agreement. The operational data is evaluated by applying a formula to the operational data, resulting in the operational data being configured for being subsequently qualified. The operational data is qualified by comparing the evaluated operational data with specified service level targets for at least one service level period and identifying operational data points meeting and/or not meeting the specified service level targets.