Abstract: The invention relates to a method for selectively configuring a container that contains an application, wherein user-authentication data are received by a container management component and forwarded via a container applicant to an authorisation server. This server transmits an authorisation response, on the basis of which a decision is made as to whether the application is allowed to be run in the container.

Abstract: The invention is related to a method for resilient multi-path connections between edge devices of a communication network. First are determined connection-specific traffic distribution functions for the multi-paths depending on a plausible failure pattern of active and inactive paths of the multi-path of this connection. Further is selected the traffic distribution function for a multi-path depending on the current failure pattern of active and an inactive paths of the multi-path of this connection and is distributed the traffic of the connection onto the path of the corresponding multi-path pursuant to the selected traffic distribution function. An essential advantage of the invention is a significant decrease of network capacity for resilient multi-path connections. Another advantage of the invention is the short reaction time in case of an outage of one or more paths of the multi-path connections.

Abstract: The invention relates to a method for determining limits for the access control of traffic that is to be transmitted via a communication network. The limits are fixed in such a way that no overload situation can occur in the network; the probability of rejection of traffic flows is, wherever possible, is independent from the point of entry into said network; and resources are used as efficiently as possible. On the basis of limits wherein no overload situation occurs, the limits for the traffic control are raised in such a way that the blocking probability for traffic transmitted between pairs of marginal modes is lowered at the same time. The lowereing of said blocking probability is maintained if an overload situation were to occur in the network.

Abstract: The invention relates to a method for access control to a packet-oriented network. An admissibility check for a group of packets is carried out by means of a threshold value for the traffic volume between the network input node and the network output node for the flow. The transmission of the groups of data packets is not permitted when an authorization of the transmission would lead to traffic volume exceeding the threshold value. A relationship between the threshold values and the traffic volume in partials stretches or links may be formulated by means of the proportional traffic volume over the individual partial stretches. Using the capacities of the links the threshold values for pairs of input and output nodes can be fixed such that no overload occurs on the individual links. Within the above method a flexible reaction to the drop-out of links can be achieved by means of a resetting of the threshold values.

Abstract: The invention is related to a method for resilient multi-path connections between edge devices of a communication network. First are determined connection-specific traffic distribution functions for the multi-paths depending on a plausible failure pattern of active and inactive paths of the multi-path of this connection. Further is selected the traffic distribution function for a multi-path depending on the current failure pattern of active an inactive paths of the multi-path of this connection and is distributed the traffic of the connection onto the path of the corresponding multi-path pursuant to the selected traffic distribution function. An essential advantage of the invention is a significant decrease of network capacity for resilient multi-path connections. Another advantage of the invention is the short reaction time in case of an outage of one or more paths of the multi-path connections.

Abstract: In one aspect, a communications network, wherein capacitor tunnels for particular services, for example for a quality of service are arranged on the link paths between the network nodes is provided. For preventing the capacity blocking or underused, the tunnel capacities are adapted according to a time-variable communication matrix. In a particular embodiment, a stock of transmission capacity common for a number of link paths is maintained, wherein a capacitor tunnel takes the data transmission capacity from the stock, when a top traffic threshold is exceeded or returns the data transmission capacity in the stock when the lower traffic threshold is under permissible level, respectively.

Abstract: The invention relates to a method for access control to a packet-oriented network. An admissibility check for a group of packets is carried out by means of a threshold value for the traffic volume between the network input node and the network output node for the flow. The transmission of the groups of data packets is not permitted when an authorisation of the transmission would lead to traffic volume exceeding the threshold value. A relationship between the threshold values and the traffic volume in partials stretches or links may be formulated by means of the proportional traffic volume over the individual partial stretches. Using the capacities of the links the threshold values for pairs of input and output nodes can be fixed such that no overload occurs on the individual links. Within the above method a flexible reaction to the drop-out of links can be achieved by means of a resetting of the threshold values.

Abstract: The invention is related to a method for resilient multi-paths connections between edge devices of a communication network. First are determined connection-specific traffic distribution functions for the multi-paths depending on a plausible failure pattern of active and inactive paths of the multi-path of this connection. Further is selected the traffic distribution function for a multi-path depending on the current failure pattern of active an inactive paths of the multi-path of this connection and is distributed the traffic of the connection onto the path of the corresponding multi-path pursuant to the selected traffic distribution function. An essential advantage of the invention is a significant decrease of network capacity for resilient multi-path connections. Another advantage of the invention is the short reaction time in case of an outage of one or more path of the multi-path connections.

Abstract: Disclosed is a method for allocating transmission capacity to a threshold value based on an expected volume of traffic, said threshold value being used for restricting traffic in a communication network featuring threshold—based access controls. According to the inventive method, a portion of transmission capacity is allocated to the threshold value that is least likely to be blocked according to the expected volume of traffic if an amount of free capacity which corresponds to said portion of transmission capacity is available on the links used for transmitting traffic authorized based on the access control, thus allowing for the most balanced or fair allocation of free transmission capacity to threshold value or access controls. Further embodiments of the invention relate to the optimization of the value of the portion of transmission capacity as well as to taking into account disturbance scenarios.

Abstract: An overbooking according to the ratios of the measuring values of transferred aggregated traffic is determined according to the face values of aggregated transferred traffic. The ratios of measuring values in relation to face values are weighted according to the variable of either the measuring value or the face value such that with smaller measuring values and/or face values the ratios thereof have a slightly lower effect on the determination of overbooking than the ratios of greater measuring values and face values in relation to each other. Systematic access for the improved use of wave bands is provided. Representative situations, wherein a high charge of the wave band is predominant, are taken into account to a greater extent during the determination of the overbooking factor than by phases characterized by a small load.

Abstract: The invention relates to a method for providing resources for adapting the routing process in response to the failure of a network element in a packet-oriented network. Barring checks that use thresholds are provided to control the volume of traffic in the network. Data packets are barred if their routing would otherwise mean the crossing of a threshold. According to the invention, the thresholds are defined by taking into account failure topologies or possible malfunction scenarios, to ensure that a corresponding malfunction does not lead to an overload in the network. Said definition of the thresholds allows resources to be provided or reserved to all intents and purposes for intercepting malfunctions. The advantage of the invention is that quality criteria can be upheld and quality of service features guaranteed, even during the malfunctions.

Abstract: The invention relates to a method for access control to a packet-oriented network. An admissibility check for a group of packets is carried out by means of a threshold value for the traffic volume between the network input node and the network output node for the flow. The transmission of the groups of data packets is not permitted when an authorisation of the transmission would lead to traffic volume exceeding the threshold value. A relationship between the threshold values and the traffic volume in partials stretches or links may be formulated by means of the proportional traffic volume over the individual partial stretches. Using the capacities of the links the threshold values for pairs of input and output nodes can be fixed such that no overload occurs on the individual links. Within the above method a flexible reaction to the drop-out of links can be achieved by means of a resetting of the threshold values.

Abstract: The invention relates to a method for determining limits for the access control of traffic that is to be transmitted via a communication network. The limits are fixed in such a way that no overload situation can occur in the network; the probability of rejection of traffic flows is, wherever possible, is independent from the point of entry into said network; and resources are used as efficiently as possible. On the basis of limits wherein no overload situation occurs, the limits for the traffic control are raised in such a way that the blocking probability for traffic transmitted between pairs of marginal modes is lowered at the same time. The lowereing of said blocking probability is maintained if an overload situation were to occur in the network.

Abstract: The invention relates to a method for controlling the access to a packet-oriented network. An authorization check is carried out for a group of packets by means of a limited value affecting a partial section of the network, the limiting value representing a boundary for all traffic which circulates over the partial section and passes over the input nodes or the output nodes of the network. The transmission of the group of data packets is not authorized if an authorization of transmission would lead to traffic exceeding the limiting value. The access control can be carried out for all partial sections over which the packets of the flow are to be transmitted. Overload and blockage situations in the partial section concerned can be avoided by the access control. The inventive access control can be combined with other access controls in order to achieve an optimized use of the network.

Abstract: According to said method, routing information or a list of routing information is inserted or modified in the packet header of data packets, in response to a malfunction of the packet network, in order to avoid defective nodes or links. The data packets with modified headers are routed using the inserted routing information to avoid the network node that is not available. The routing information inserted in the packet header can be determined via the packet network with the aid of topological information. The invention allows a rapid response to malfunctions. Packet losses and delays in data transmission can thus be avoided immediately after the determination of the malfunction by routers adjoining the malfunction area, whereas in conventional packet networks, a problem-free data transmission can only be restored after the convergence of the modified topological information in the packet network.

Abstract: The invention relates to a method for access control to a packet-oriented network. Two admissibility checks for a group of packets are carried out by means of threshold values for the traffic transmitted via the network input node and the network output node for the flow. The transmission of the groups of data packets is not permitted when an authorization of the transmission would lead to traffic volume exceeding one of the threshold values. A relationship between the threshold values and the traffic volume in partial stretches or links may be formulated by means of the proportional traffic volume over the individual partial stretches. Using the capacities of the links the threshold values for pairs of input and output nodes can be fixed such that no overload occurs on the individual links. Within the above method a flexible reaction to the drop-out of links can be achieved by means of a resetting of the threshold values.

Abstract: The invention relates to a method for determining an allocation time (NS) in a scheduler (9) with a fixed number (K) of allocation times, whereby a defined allocation time of the number of allocation times is determined for a time to be allocated using a hash function, and whereby the actual progression of time is represented on this fixed number (K) of allocation times also using the hash function. A method for determining a sending time (TST) for a data cell (13) over an output line (3) of a packet oriented transmission system, particularly in accordance with the ATM standard, is advantageous when a determined sending time (TST) is entered into a scheduler (9) as the time to be allocated for the data cell (13). This advantageously ensues by using the above-mentioned method. Additional areas of application are schedulers in machine installations, switching systems in, in particular, packet-oriented communications systems or multiplexers for multiplexing data.