Abstract: Each mobile ad hoc node has an assigned hierarchy position within an identified tree-based aggregation group. Each ad hoc node is configured for selectively attaching to one of a plurality of available ad hoc nodes based on identifying a best match, for the assigned hierarchy position within the identified aggregation group, from among identifiable hierarchy positions of identifiable aggregation groups. Each ad hoc node also is configured for selectively attaching to any available ad hoc node based on a determined absence of any available ad hoc node advertising the identified aggregation group of the ad hoc node, or an aggregation group containing the identified aggregation group. Hence, a root node of an aggregation group can filter group-specific routing information from packets destined toward a network clusterhead, resulting in a scalable routing protocol that is not adversely affected by added nodes.

Abstract: In one embodiment, a method includes generating by a mobile router a home test message that includes a prefix option field specifying at least one mobile network prefix claimed to be owned by the mobile router. The method also includes outputting the home test message by the mobile router to a correspondent node via a prescribed home agent assigned to the mobile router, for initiation of a reverse routability test between the mobile router and the correspondent node that verifies the mobile router owns the at least one mobile network prefix. In another embodiment, the home agent is configured for forwarding a route optimization message, for example the home test message, to the correspondent node if the home agent determines that the at least one mobile network prefix is owned by the mobile router.

Abstract: The invention prevents robots from browsing a Web site beyond a welcome page. When an initial request from an undefined originator is received, the Web site responds to it with a welcome page including a challenge. Then, on receiving a further request from the undefined originator, the Web site can check whether the challenge is fulfilled or not. If fulfilled, the undefined originator is assumed to be a human being and authorized to go on. If the challenge is not fulfilled, the undefined originator is assumed to be a robot, in which case site access is further denied. The invention prevents Web site contents from being investigated by robots while not requiring users to have to log on.

Abstract: A method and system for remotely configuring and/or provisioning a device that is nonoperational is provided. The device may be, in general, any electronic device that includes at least one setting (“device setting”) that can be programmatically or otherwise established or adjusted to configure and/or provision the device for its operation. The method includes detecting, via a radio frequency identification (“RFID”) tag, a state of a device that is communicatively coupled to the RFID tag; and providing the device setting via the RFID tag when the state signifies that the device is nonoperational.

Abstract: Gateways providing connectivity for respective private IPv4 networks to an IPv6 network establish communications between IPv4 nodes in the private network. Network address translation-protocol translation (NAT-PT) state entries are created by gateway pairs enabling translation of IPv4 packets between first and second IPv4 nodes in respective first and second IPv4 private networks into IPv6 packets for transmission via the IPv6 network. Each NAT-PT state entry specifies the IPv6 addresses for the first and second IPv4 nodes, and the IPv4 addresses used to identify the first and second IPv4 nodes in the corresponding private IPv4 network. Each gateway is configured for generating the IPv6 address for each local IPv4 node based on prepending its corresponding assigned private IPv4 address with a corresponding prescribed IPv6 prefix assigned to the gateway.

Abstract: In one embodiment, a method includes, in each of a plurality of mesh access points, connecting to one of a plurality of mesh controllers in a mesh network and passing connection information to the one mesh controller. The mesh access points include a wired mesh access point having a wired connection to the one mesh controller, and wireless mesh access points having a wireless connection to the one mesh controller via the wired mesh access point. The method also includes generating, in each mesh controller, a corresponding link state table based on the passed connection information from each corresponding connected mesh access point. The method also includes generating in at least one of the mesh controllers a mesh table, identifying all of the connecting links for the mesh access points connected among the mesh controllers, based on the mesh controllers sharing the respective link state tables.

Abstract: In one embodiment, a received data packet is delivered by a routing resource to a tunnel interface resource in response to determining that the received data packet specifies a destination address starting with a prescribed aggregation prefix. The tunnel interface resource computes a home address for a mobile router based on a second address prefix from a start of the destination address, the second address prefix within the prescribed aggregation prefix and having been assigned as reachable by the mobile router, at least a portion of the second address prefix applied to a prescribed mapping function. The tunnel interface resource determines a care-of address for reaching the mobile router based on the corresponding home address calculated by the tunnel interface resource, and encapsulates the received data packet into an encapsulated packet having a destination address field specifying the care-of address, for output of the encapsulated packet toward the mobile router.

Abstract: The invention prevents robots from browsing a Web site beyond a welcome page. When an initial request from an undefined originator is received, the Web site responds to it with a welcome page including a challenge. Then, on receiving a further request from the undefined originator, the Web site can check whether the challenge is fulfilled or not. If fulfilled, the undefined originator is assumed to be a human being and authorized to go on. If the challenge is not fulfilled, the undefined originator is assumed to be a robot, in which case site access is further denied. The invention prevents Web site contents from being investigated by robots while not requiring users to have to log on.

Abstract: Mobile routers in a tree-based network topology with a single clusterhead in an ad hoc network establish connectivity based on each attached mobile router sending a neighbor advertisement message to an attachment mobile router via a corresponding egress interface. Any neighbor advertisement message received by a mobile router is used to identify specified network prefixes that are reachable via the source of the neighbor advertisement message. Each attached mobile router outputs to its attachment router another neighbor advertisement message that specifies the network prefix used by the mobile router, and the specified network prefixes from its attached mobile routers. The mobile router also identifies peer mobile routers having the same depth, and selectively shares limited routing information with the peer routers, enabling the mobile router to bypass the clusterhead and reach remote prefixes via the peer routers without burdening the tree.

Abstract: Packets may be forwarded between realms employing private unregistered addresses without the use of network address translation and/or application level gateways. Nodes within privately addressed realms are identified by a combination of their locally significant address and a globally significant realm address. The globally significant addresses are reserved in all realms for use as realm identifiers or inter-realm routing. To send a packet to a node within a distinct private realm, the packet is given an inner IP header designating the locally significant destination IP address of the target node within the remote realm and an encapsulation IP header indicating the globally significant address advertised by the gateway of the target node's realm. The globally significant address is used for forwarding outside the realm of the destination node. Once the packet reaches the destination realm, the locally significant address is used for forwarding.

Abstract: A system for providing a tree topology for a network having an interior gateway protocol. A first router receives a hello message from all connected routers in the network. The hello messages include tree topology information. The first router then uses the tree topology information to determine a parent of the router. The first router then establishes connections with directly connected routers at the same level in the tree topology. The first router also generates link messages that include all of the prefixes for children of the first router and broadcasts the link messages.

Abstract: One embodiment includes tracking utilization of the backhaul wireless bandwidth of a mesh network related to time sensitive packet data, receiving a call admission request for a call from a client station of a first mesh access point of the mesh, ascertaining using the tracked utilization whether to approve the call admission request using a backhaul call admission control method, and approving the call by sending a positive call admission response if the backhaul call admission control method approves the call and if an access level call admission control method ascertains to approve the call admission request at the access level.

Abstract: In one embodiment, a node (e.g., a router) performs reservations for data flows, each on a corresponding selected (reserved) path having adequate reservation availability. Also, the node forwards data from data flows, each over a corresponding selected (forwarded) path having adequate load availability, wherein forwarded paths are decoupled from reserved paths for the data flows.

Abstract: In one embodiment, a method includes receiving an inbound data packet over a wireless link at a wireless intermediate network node. The inbound data packet indicates the packet was transmitted by a node at an edge of the mesh. The inbound data packet is associated with a low priority minimum wait interval and a low priority maximum wait interval for reducing contention on the wireless link. An outbound data packet based on the first data packet is transmitted over the wireless link after a wait time. The wait time is based on a high priority minimum wait interval and a high priority maximum wait interval for reducing contention. The low priority minimum wait interval is greater than the high priority minimum wait interval. These techniques allow long packet queues at the edge but quickly clear packets already forwarded by the mesh.

Abstract: A mobile router is configured for generating a local router prefix (i.e., a null or invalid address prefix that is not reachable via a wide area network) for use by mobile nodes that attempt to attach to the mobile router. The mobile router attaches to an attachment router using a care-of address with an attachment router address prefix, and outputs a router advertisement message that specifies the null address prefix. Upon receiving a message from a mobile host that includes a source address field specifying a mobile host care-of address that includes the null address prefix, the mobile router adds the mobile host care-of address to a reverse routing header and inserts its own care-of address into the source address field. The message is output to its destination with the reverse routing header, ensuring the IPv6 address of the mobile router remains anonymous in the wide area network.

Abstract: According to various aspects of the present invention, a technique is described for improving load balancing of traffic in a data network using source-side related information embedded into the destination IP address field of packets received at a load balancing device. One aspect of the present invention relates to assigning more than one virtual IP address to a server cluster in order to enable different clients to select a virtual cluster address which corresponds to each clients' respective rights and/or profiles, and to use the selected virtual cluster address to access a desired site or service. Another aspect of the present invention relates to a mechanism which allows for load balancing operations to be implemented using source-side information which is embedded into the destination IP address of a packet header. In this way, load balancing decisions may be quickly performed at initial or early stages of a connection flow.

Abstract: A computer-readable carrier medium in wireless station for wireless network. Encoded in the carrier medium are instructions that when executed carry out a method operating at the link layer (L2) in the wireless station. The method includes, prior to the station being associated with a wireless network, wirelessly receiving L2 frames transmitted from one or more wireless access point of one or more wireless networks that the station can hear. The method further includes gathering information about the received L2 frames, including L2 information and L3 information. The L3 information includes whether an access point is sending an IP packet from a mobility agent, such that the station may associate with a wireless network that is in communication with the mobility agent. The method further includes storing information about the wireless networks that the station can hear in a database.

Abstract: A multihomed site includes in-site network nodes, and first and second gateways configured for providing access outside of the multihomed site. The network nodes and the gateways are configured for utilizing in-site addresses having an in-site address prefix that is not advertised outside of the prescribed site. Each gateway is configured for outputting an advertisement message into the multihomed site that specifies that the gateway is a home agent for a corresponding extra-site address prefix reachable inside and outside the multihomed site. Each in-site network node includes a mobile IP module configured for acquiring extra-site addresses from each of the advertised extra-site address prefixes, and creating mobile IP tunnels with the first and second gateways, enabling the corresponding extra-site address to be reachable via the in-site address. Each node also includes a selection resource for outputting a packet on a selected mobile IP tunnel, based on preference information.

Abstract: A clusterhead of a tree-based, mobile ad hoc network includes a mobile IP proxy resource for registering a received binding update request from a mobile ad hoc router within the network, creating a first mobile IP tunnel with the mobile ad hoc router, sending a second binding update request to a remote home agent of the mobile ad hoc router, and initiating a second mobile IP tunnel between the clusterhead and the home agent. If a packet received from the mobile ad hoc router specifies a destination determined as reachable within the mobile ad hoc network, use of the second mobile IP tunnel is minimized by outputting the packet toward the destination according to the mobile ad hoc routing protocol. If the packet is not reachable within the mobile ad hoc network, the packet is forwarded via the second mobile IP tunnel to ensure packet transmission is topologically correct.

Abstract: A system and method of organizing a front-end load balancing function for implementing an Internet site so the transmission control protocol (TCP) connections, established between the front-end load balancing function and end-users, are spread over more than one individual load balancer (ILB). Each ILB consistently self-asserts a primary ILB owner for each one of the TCP connections. Hence, each ILB, for each delegated TCP connection can process each TCP connection on behalf of the load balancing function while handing off the other TCP connections to the corresponding ILB owners. Also, each ILB consistently self-asserts a backup ILB owner for each one of the TCP connections so the designated back up ILB owner takes over the processing of an ILB owned TCP connection should the ILB owner become incapable of processing the delegated TCP connection.