Abstract: A method is provided in one example and includes receiving video data captured by a camera at a location; comparing a portion of the video data to security information characteristics stored in a policy; and identifying a violation of the policy when the portion of the video data does not match at least one of the security information characteristics stored in the policy. In more particular instances, the method can include triggering an alert when the violation of the policy is identified.

Abstract: A system includes a multi-stack subscriber, a gateway, and a web portal. The web portal determines whether the subscriber is authenticated to access the Internet using a first Internet Protocol by receiving logon information from the subscriber. The subscriber requests to access the Internet using a second Internet Protocol. The gateway and/or the web portal determine whether the subscriber is authenticated to access the Internet using the second Internet Protocol without sending a second logon to the subscriber.

Abstract: An apparatus includes a processor, an interface, and a memory. The interface is operable to receive a request from a subscriber to access network services, wherein the request includes a subscriber address from the set comprising: an IP address and a media access control (MAC) address. The processor is operable to generate a query requesting an address associated with the subscriber address. The interface is further operable to communicate the query to the subscriber address, and receive a response to the query, wherein the response includes an address associated with the subscriber address, wherein the associated address is from the set comprising: an IP address and a MAC address. The memory is operable to store the subscriber address and the received associated address.

Abstract: A system includes a multi-stack subscriber, a gateway, and a web portal. The web portal determines whether the subscriber is authenticated to access the Internet using a first Internet Protocol by receiving logon information from the subscriber. The subscriber requests to access the Internet using a second Internet Protocol. The gateway and/or the web portal determine whether the subscriber is authenticated to access the Internet using the second Internet Protocol without sending a second logon to the subscriber.

Abstract: An apparatus includes a processor, an interface, and a memory. The interface is operable to receive a request from a subscriber to access network services, wherein the request includes a subscriber address from the set comprising: an IP address and a media access control (MAC) address. The processor is operable to generate a query requesting an address associated with the subscriber address. The interface is further operable to communicate the query to the subscriber address, and receive a response to the query, wherein the response includes an address associated with the subscriber address, wherein the associated address is from the set comprising: an IP address and a MAC address. The memory is operable to store the subscriber address and the received associated address.

Abstract: A method is provided in one example and includes receiving video data captured by a camera at a location; comparing a portion of the video data to security information characteristics stored in a policy; and identifying a violation of the policy when the portion of the video data does not match at least one of the security information characteristics stored in the policy. In more particular instances, the method can include triggering an alert when the violation of the policy is identified.

Abstract: In an example embodiment, a method is provided to receive a request message. A client that transmitted the request message then is identified. Here, the client is associated with a client identifier. The client identifier is inserted into a response message, and this response message includes a redirect to a portal. The response message then is transmitted.

Abstract: Embodiments of this invention can establish a communications path through a network device in a network for a stream of data served by a server. A host can request to receive the stream of data by sending a request through the network to the server. In response, the server creates a data distribution message and sends it onto the network towards the host. Each network device equipped with the invention receives the data distribution message via unicast communications, acknowledges the data distribution message, and creates a path table for the stream of data, and forwards the data distribution message to the next network device on route to the host. A network device that receives an acknowledgment of the data distribution message establishes at least one path through the network device in the path table for payload distribution messages that carry a stream of data. The stream of data can thus be propagated through a network with only one copy of portions (e.g.

Abstract: Mechanisms and techniques provide a system that operates in a data communications device such as a switch or a router to provide a technique for inserting data into packets associated with a communications session between a first and second computerized devices. The technique comprises receiving a first packet containing data being propagated from the first computerized device to the second computerized device in the communications session and inserting a first amount of extra data into the first packet to alter the size of the first packet and forwarding the first packet including the first amount of extra data to the second computerized device. By monitoring and adjusting sequence and acknowledgement information from with in the data communications device, data can be inserted into packets without disrupting connection state information maintained by and expected by each computerized device.

Abstract: A method and system for preventing the detection of an operating system by an intruder, the operating system installed on a host in a network, is provided. The intruder transmits a network probe for operating system detection. The network probe is identified and a response is generated to the network probe, generated by the operating system, is modified. The modified response provides the intruder with false information related to the operating system, thereby misleading the intruder about the type of operating system.

Abstract: In an example embodiment, a method is provided to receive a request message. A client that transmitted the request message then is identified. Here, the client is associated with a client identifier. The client identifier is inserted into a response message, and this response message includes a redirect to a portal. The response message then is transmitted.

Abstract: Techniques for providing reliable transport of data across a network between a server on a server device and a client on a client device include a process on the client device which determines a number of packets to be sent by the server device without an acknowledgement message from the client device. The number of packets is based on considerations of network problems. A data packet sent to a server device includes a first field holding data indicating the number of packets to be sent by the server device without an acknowledgement message from the client device. Accordingly, a transport layer process on a client device to download large amounts of content from a stateless transport layer process on a server device, substantially reducing the computational resources consumed by the server device in serving thousands of clients.

Abstract: A method of communicating an encrypted data broadcast to a plurality of virtual private network receivers is disclosed. A first communication channel is established between a first one of the receivers and a network node. A private data stream is communicated to the first receiver on the first channel. A request is received from the first receiver to join a broadcast data stream that is directed to a plurality of receivers by a broadcast server. A second encrypted communication channel is established between the first receiver and the network node for purposes of carrying the broadcast data stream. Decryption information, which the first receiver can use to decrypt information that is sent on the second channel, is sent to the first receiver through the first channel. The broadcast data stream is then communicated to the first receiver on the second channel.

Abstract: Mechanisms and techniques provide a system that operates in a data communications device to provide automatic authentication of a client device to a server device. The mechanisms and techniques (i.e., the system) operate to detect a requirement for authentication of a request for data sent from a client device to a server device. In response, the system creates an authentication response in response to detecting the requirement for authentication. The authentication response contains authentication information required by the server device to allow the client device to access data via the server device. The system then automatically inserts the authentication response into the data communications session between the client device and the server device. The authentication response authenticates, to the server device, access to the data by the client device.

Abstract: Mechanisms and techniques provide a system that operates in a data communications device such as a switch or a router to provide a technique for load balancing packets between computer systems based on extra data inserted in the packets. The system receives a message containing extra data. The extra data was inserted into the message by a second data communications device existing in a network coupling the first data communications device to a first computerized device that originated the message. The system identifies, based on the extra data inserted into the message, a second computerized device that is to process the message and forwards the message to the second computerized device for processing. The extra data can include demographic data that can be used to select a demographic server, and for selection of a specific server from a group of servers associated with the demographic server.

Abstract: A method and system for preventing the detection of an operating system by an intruder, the operating system installed on a host in a network, is provided. The intruder transmits a network probe for operating system detection. The network probe is identified and a response is generated to the network probe, generated by the operating system, is modified. The modified response provides the intruder with false information related to the operating system, thereby misleading the intruder about the type of operating system.

Abstract: A URL re-writing system and method in a network examines and modifies HTML data and its embedded URLs. The re-writing system can be implemented in a router and can replace URLs found in the HTML data in order to accomplish more efficient routing for example to a close mirror site or for content routing. The re-writing system can also use URL replacement to insert important or emergency information to data received by users on a Web-based network.

Abstract: In a computerized device, a technique for communicating with an external transmission control protocol device involves operating in a stateless manner. In particular, the technique includes providing an acknowledgment message to the external transmission control protocol device in response to a synchronization message from the external transmission control protocol device, receiving a request message for content from the external transmission control protocol device, and sending, to the external transmission control protocol device, a reply message having at least a portion of the content, regardless of whether the computerized device received an acknowledgment message from the external transmission control protocol device in response to the acknowledgment message provided by the computerized device to the external transmission control protocol device.

Abstract: Mechanisms and techniques provide a system that operates in a data communications device such as a switch or a router to provide a technique for inserting data into packets associated with a communications session between a first and second computerized devices. The technique comprises receiving a first packet containing data being propagated from the first computerized device to the second computerized device in the communications session and inserting a first amount of extra data into the first packet to alter the size of the first packet and forwarding the first packet including the first amount of extra data to the second computerized device. By monitoring and adjusting sequence and acknowledgement information from with in the data communications device, data can be inserted into packets without disrupting connection state information maintained by and expected by each computerized device.