Abstract: A downloadable software package incorporating license management software is disclosed. The software package may include a client software application and an associated licensing module for managing use of the client software application. In preferred embodiments, the licensing module is configured to detect the use of the client software application and automatically send a license validity inquiry request to a license server over a public network. The client software application is operated in accordance with the contents of a response message received from the license server. The downloadable software package may comprise a single compiled executable application downloaded by a user onto a computer over the public network.

Abstract: Method and apparatus are disclosed for facilitating the purchase of a software license over a public network. In one disclosed embodiment, a license server may receive a license validity inquiry request from a client module over public network. The inquiry request may contain information regarding a client software application associated with the client module. Responsive to the inquiry request, the license server may initiate a license purchase session to facilitate the purchase of a license for the client software application. The server may then process credit card information received from the user for the purchase of a license. The server may then form a response message containing an indication therein enabling the client software application for use responsive to a successful license purchase session. The response message may then be sent to the client module over public network.

Abstract: Methods and apparatus for managing multiple entries contained in an on-line database are disclosed. In one disclosed embodiment, a web-accessible database server is provided that is configured to verify the identity of a user desiring to access the database. After verifying the user's identity, Transaction IDs associated with the user are retrieved. Entries contained in the database associated with each of the plurality of Transaction IDs are then retrieved. The results are then presented to the user in a Hypertext Markup Language (HTML) formatted page containing a list of entries owned by the user. The list may be presented as a list of hyperlinks, with each of the hyperlinks corresponding to a full page entry associated with each of the retrieved Transaction IDs. The user may then update entries, or add new entries to the database.

Abstract: Systems and methods for providing a virtual private network connection between a first private network and a second private network through a public network are disclosed. The system may include a first gateway device and a second gateway device, the first gateway device being disposed between a first private network and a public network, and the second gateway device being disposed between a second private network and the public network. Associations are provided between the first and second gateway devices, between names hosted by the first gateway device and addresses of network elements residing on the first private network, and between names hosted by the second gateway device and addresses of network elements residing on the second private network. A secure connection is then provided between elements residing on the first and second private networks through the public network.

Abstract: A multi-homed web server is disclosed including web server software configured to provide a plurality of virtual hosts. A configuration sub-file derived from a master configuration file is provided and associated with each of the virtual hosts. The web server software processes incoming connection requests according to rules contained in the master configuration file.

Abstract: A multi-homed web server is disclosed including a plurality of virtual hosts operable in a web server. A master configuration file associated with each of said plurality of virtual hosts is provided. A plurality of modules are available for processing particular types of incoming connection requests. Associations are maintained in the master configuration file for determining which of the plurality of modules is appropriate for a particular incoming connection request.

Abstract: A firewall device is disclosed that includes a proxy agent configured to examine a packet received from a source host machine destined for a private network element over an IP-compliant network. The firewall is configured to determine whether the packet is inherently secure and directly connect said source host machine to the private network element if the packet is inherently secure.

Abstract: A multi-homed web server is disclosed including a plurality of virtual hosts therein. A master configuration file associated with each of said plurality of virtual hosts is provided that includes an association between at least one of a IP address or name and each of the virtual hosts.

Abstract: A multi-homed Web server is disclosed. The Web server may be embodied within a single physical machine that is configured to host a plurality of virtual hosts, where each of said virtual hosts appears as a distinct host to users of the Internet. The single physical machine may further include a corresponding configuration sub-file associated with each of the virtual hosts. Each of the configuration sub-files is linked to a master configuration file.

Abstract: A computer gateway system is disclosed. The system may include a multi-homing gateway with at least one interface connected to an IP compliant network. The gateway is to allow an IP address to be mapped to at least one virtual host. A virtual host configuration table is coupled to the multi-homing gateway and includes an association between the virtual hosts and IP addresses. The virtual hosts are in communication with the virtual host configuration table and can obtain the association between virtual hosts and IP addresses.

Abstract: A system for updating a licensing cache memory is disclosed. A licensing cache memory is providing that is associated with a client device for the storage and retrieval of licensing records. A request generator generates a licensing request responsive to a licensing event and receives license information responsive to the request over an IP-compliant network. Licensing information is stored in the licensing cache memory and the client is operated accordingly.

Abstract: A license server is disclosed that may operate oven an IP-compliant network. The license server includes a database for storing and retrieving license records associated with a client software application. The license server may be configured to receive a license validity inquiry request from a client module over the IP-compliant connection that includes information regarding a client software application associated with the client module. The server may then query the database to determine whether a valid license exists for the client software application. Responsive to the query, the license server may form a response message containing the results of the query and send a response message to the client module over the IP-compliant network.

Abstract: A licensing module for licensing protected software is disclosed. The licensing module may be operatively disposed on a gateway device that is operating between a computer and an IP-compliant network. In disclosed embodiments, the licensing module may be configured to detect the use of a protected software application residing on the computer and send a license validity inquiry request to a license server over the IP-compliant network. The licensing module may then operate the protected software application in accordance with the contents of a response message received from the license server.

Abstract: A licensing system is disclosed for performing synchronous encryption with a client over an IP-compliant network. In disclosed embodiments, the system includes a licensing agent configured to pass a data structure unencrypted in an initial communication between the licensing agent/client pair and pass a first key to said client responsive to an initial communication. The licensing agent then receives the data structure from the client having designated fields encrypted according to the first key. The licensing agent then sends a second key to the client for use in subsequent communications.

Abstract: Method and apparatus for determining whether a client software application is licensed are disclosed. In one disclosed embodiment, a computer for operating a licensed client software application is provided that includes a client module associated with the client software application. The client module is configured to detect the use of the client software application. Upon a detection, the client module then sends a license validity inquiry request regarding the client software application to a license server over an IP-compliant connection. The client software application is then operated in accordance with the contents of a response message received from the license server.

Abstract: Methods and apparatus for evaluating software freely distributed over the Internet are disclosed. In one disclosed embodiment, licensing system code is inserted into software to be distributed. The code includes a client module associated with the distributed software. A computer operating the software may then by caused to form a connection to a license server over an IP-compliant network responsive to detection by the client module of use of the distributed software on a client computer. The client computer may also be directed to a Web site associated with the distributed software and the user prompted to either purchase the distributed software or evaluate the distributed software for a demonstration period.

Abstract: Methods and apparatus are dislosed for controlling access to a web server operating on an IP-compliant network. Disclosed embodiments include a network device disposed between the IP-compliant network and the web server and including at least one proxy agent configured to receive an access request from a user seeking to access the web server. The disclosed network device may then determine whether said user is authorized to access said web server, and make a connection if the user is so authorized.

Abstract: Methods and apparatus for transparently forming a connection to an element of a private network over an IP-compliant network are disclosed. In disclosed embodiments, network devices such as firewalls are disclosed that are configured to receive an access request from an external user over the IP-compliant network to access the private network element and assign a proxy agent process said access request. The proxy agent then determines whether the external user is authorized to access the private network element. If the user is authorized, then the proxy agent forms a connection to the private network element on behalf of the external user such that the network device appears as the source of the connection to the external user.

Abstract: Methods and apparatus for resisting a denial-of-service attack of a private network element are disclosed. In one embodiment, a network device is configured to receive a packet destined for a private network element over an IP-compliant network. A proxy is assigned to examine the packet based on the destination port of the packet. The proxy agent then determines whether the packet is suspect and should be discarded. If the packet is suspect, it is discarded without shutting down said port.

Abstract: A firewall device for preventing unwanted access to information on a computer is disclosed. In disclosed embodiments, the firewall device is managing traffic between a computer and an IP-compliant network. The computer may have a bundled application and associated information stored thereon. The firewall system includes a proxy agent cofigured to intercept incoming messages destined for the computer, and discard any incoming messages containing nested executable commands associated with the bundled application.