Abstract: NAPT services are provided, preferably inline on the “fast path” on bundled links. One of the member links is selected as “anchor.” When uplink traffic arrives on the any of the member links, the link's forwarding path looks to the NAPT binding entry in its forwarding path. If a binding entry is found, NAPT is performed in an inline manner (without requiring any other device), and the traffic is forwarded. If a binding entry is not found, the received traffic is forwarded to the anchor. The anchor allocates the port and creates a NAPT binding on all the member links. Downlink traffic performs lookup for reverse NAPT binding entry in the link's forwarding path. If a matching entry is found, the forwarding path of the link performs NAPT. If there is no matching binding entry, the downlink traffic is dropped. Stale binding entries are “aged out”, enabling dynamic NAPT.

Abstract: Systems, methods and computer program products for bookkeeping of download stamps are described herein. An embodiment includes augmenting database table (or mobile business object) metadata with a synchronization (“sync”) key and assigning a unique identifier to each sync key. A sync key is assigned to one or more rows (or records) in the database table and a download timestamp is associated with each sync key. The embodiment further includes identifying a sync key associated with each row in the database table. Links between rows occurring in different database tables are maintained using sync keys. In this way, embodiments of the invention allow a server to record a download timestamp of database table subsets, where such subsets may include one or more rows in the database tables. This allows data to be downloaded by a client at subset granularity.

Abstract: A solution for scalable key archival includes, at a network device, determining whether a key management device that is not part of a current key management device configuration has been newly added to a network. The method also includes, if the key management device has been newly added to the network, determining whether the network device has a first application program interface (API) or device driver for communicating with the key management device. The method also includes, if the network device does not have the first API, obtaining the API. The method also includes creating a binding between a virtual device driver of the network device and the key management device via the first API, the network device having a second API for communications between the virtual device driver and a security processor of the network device. The security processor communicates with the key management device using the second API.

Abstract: A technique for using a key repository to store data encryption keys provides a way to access key records in the key repository using a key identifier constructed from a media identifier associated with a data storage medium on which encrypted data is or will be stored. The media identifier is hashed and added to a counter value to produce the key identifier. In some embodiments, the technique is implemented in an encryption switch that provides data-at-rest encryption for a storage access network, but in other embodiments, the technique may be implemented in other devices, including data storage devices and hosts.

Abstract: Systems, methods and computer program products for bookkeeping of download stamps are described herein. An embodiment includes augmenting database table (or mobile business object) metadata with a synchronization (“sync”) key and assigning a unique identifier to each sync key. A sync key is assigned to one or more rows (or records) in the database table and a download timestamp is associated with each sync key. The embodiment further includes identifying a sync key associated with each row in the database table. Links between rows occurring in different database tables are maintained using sync keys. In this way, embodiments of the invention allow a server to record a download timestamp of database table subsets, where such subsets may include one or more rows in the database tables. This allows data to be downloaded by a client at subset granularity.

Abstract: A technique for using a key repository to store data encryption keys provides a way to access key records in the key repository using a key identifier constructed from a media identifier associated with a data storage medium on which encrypted data is or will be stored. The media identifier is hashed and added to a counter value to produce the key identifier. In some embodiments, the technique is implemented in an encryption switch that provides data-at-rest encryption for a storage access network, but in other embodiments, the technique may be implemented in other devices, including data storage devices and hosts.

Abstract: A solution for scalable key archival includes, at a network device, determining whether a key management device that is not part of a current key management device configuration has been newly added to a network. The method also includes, if the key management device has been newly added to the network, determining whether the network device has a first application program interface (API) or device driver for communicating with the key management device. The method also includes, if the network device does not have the first API, obtaining the API. The method also includes creating a binding between a virtual device driver of the network device and the key management device via the first API, the network device having a second API for communications between the virtual device driver and a security processor of the network device. The security processor communicates with the key management device using the second API.

Abstract: A monitoring system within a computing system is set out. The monitoring system monitors components within the computing system. The monitoring system includes a plurality of monitoring devices, a dedicated bus and a controller. The dedicated bus is dedicated for use by the monitoring devices. Each monitoring device is connected to the dedicated bus. The controller is also connected to the dedicated bus. The controller assigns addresses to each monitoring device, stores exception events, and reports the exception events to system software for the computing system.