Abstract: Disclosed is a method for routing data packets, as is a data packet router (10) that operates in accordance with the invention. The method includes establishing an ingress filter (20) in individual ones of a plurality of line cards (14) installed within a router and automatically maintaining a content of an ingress filter table (20A) of each ingress filter in each line card at least partially in accordance with data packets passing through individual ones of the line cards, where the content includes an identification of source addresses of hosts (16) coupled to the router. The method further compares a source address of an incoming packet to a line card to the content of the ingress filter table of that line card, and is thus enabled to detect the presence of an IP packet containing a spoofed IP host address. For a first occurrence of a packet having an IP source address that is not found in the ingress filter table, the packet is forwarded to a route processor (12) for analysis.

Abstract: A solution for supporting relocation of an IP session of a mobile node during a network layer handover in a mobile communication system. In the method, from the application context information on the mobile node is detected a first set of capabilities of a network node that that facilitate maintaining the IP session. This first set of capabilities is queried from one or more potential next network node. Applicability of the potential next network node to the relocation of the IP session is determined by the capability information on the first set of capabilities.

Abstract: A method and system for transferring contexts from a previous access router (PR) to a new access router (NR) that is subsequently associated with a Mobile Node (MN). For example, transferred contexts may include, but are not limited to, Security, Quality of Service (QOS), Header Compression, and Buffers. A context is transferred from the PR to the NR. Any change in an element of the context is conveyed by the NR to the MN in a secure fashion, even though a Security Association does not yet exist between the NR and MN. The NR provides an authenticated security context update to the MN, e.g., advising when the type of encryption has changed from Triple Data Encryption Standard (DES) to DES. The NR utilizes the Security Association between the PR and the MN, to provide such an authenticated security context update to the MN over a RAN or a wireless LAN.

Abstract: A method and system for adding and monitoring a server to an existing server pool are disclosed. A joining server registers with a server within the server pool. The joining server is authenticated by a server within the server pool. When the joining server receives the list of all active servers within the server pool, the joining computes a new identification for itself, assigns that identification to itself, and then determines a caretaker server to monitor the joining server. Once the registration is successful, the newly joined server can communicate within the server pool and keep current of all events and changing conditions of the server pool.

Abstract: A method for designing an electronic component includes receiving a device criteria (e.g., a parametric value, procurement value, etc.) from a designer, querying a database for devices corresponding to the device criteria, querying the database for procurement data and/or engineering data associated with the corresponding devices, presenting the devices to the designer based on the procurement data, and receiving input from the designer identifying one of the presented devices as a selected device. In a particular method, the returned devices are sorted based on one or more procurement values (e.g., manufacturer, price, availability, manufacturer status, etc.), and presented to the designer in a ranked list. Objects representative of the selected devices are then entered into a design file, and the objects are associated with the device's engineering and/or procurement data. In a particular embodiment, the objects are associated with the engineering data by embedding the engineering data in the file object.

Abstract: A method and system for preventing stack buffer overflow attacks in a computer system are disclosed. A computer system can prevent stack buffer overflow attacks by encrypting return addresses prior to pushing them onto the runtime stack. When an encrypted return address is popped off the runtime stack, the computer system decrypts the encrypted return address to determine the actual return address. A random encryption key can be used, which can be generated from the CPU's clock cycle counter. Multitasking environments can add a seed register to the task state so that each task can use a unique seed to encrypt the return addresses.

Abstract: In mobile IP networks, when a mobile node (MN) moves from one cell to another, handover occurs. The result of the handover is that the MN connects to the network through a new access router (AR). The handover may occur between access routers of the same or different administrative domains. In all cases, the information related to the mobile node has to be transferred from the old AR to the new AR in order to minimize the effect of the change of access routers. This is the so-called context transfer.

Abstract: A system and method are disclosed for load-sharing in reliable server pools which provide access to legacy servers. A proxy pool element provides an interface between a name server and a legacy server pool, the proxy pool element monitoring legacy application status to effect load sharing and to provide access for an application client via the name server and aggregate server access protocol.

Abstract: In mobile IP networks, when a mobile node (MN) moves from one cell to another, handover occurs. The result of the handover is that the MN connects to the network through a new access router (AR). The handover may occur between access routers of the same or different administrative domains. In all cases, the information related to the mobile node has to be transferred from the old AR to the new AR in order to minimize the effect of the change of access routers.

Abstract: An apparatus and method is provided for facilitating the handoff of a mobile terminal from a first access device in a first network to a second access device in a second network. Prior to performing a handoff operation, the first access device inquires as to whether the mobile terminal is authorized to be handed off to the second access device and, in response thereto, completes the handoff. If the mobile terminal is not authorized to be handed off to the second access device, the handoff operation is inhibited, preferably without using any radio frequency resources of the second access device.

Abstract: A process for purifying and concentrating a gluconic acid derivative, such as 2-keto-L-gulonic acid, comprising introducing a non-viable and/or acidified fermentation medium or an in-vitro reactor medium comprising at least the gluconic acid derivative and/or salt thereof to electrodialysis thereby purifying and concentrating the gluconic acid derivative.

Abstract: The present disclosure provides a method for the identification of nucleotide sequences which encode selenoproteins. Nucleotide sequences are translated in all potential reading frames, those with a relatively large number of UGA or TGA codons are noted, and frameshift-dependent open reading frames and SECIS elements are identified as associated with selenoprotein coding sequences, especially those within or overlapping known open reading frames. Further provided are selenoprotein coding sequences which are associated with certain viruses (e.g., HIV and Ebola), cancer-related genes and coding sequences related to normal functioning of the immune system.

Abstract: A process for purifying and concentrating a gluconic acid derivative, such as 2-keto-L-gulonic acid, comprising introducing a non-viable and/or acidified fermentation medium or an in-vitro reactor medium comprising at least the gluconic acid derivative and/or salt thereof to electrodialysis thereby purifying and concentrating the gluconic acid derivative.

Abstract: This invention relates to novel electrocatalyst coated electrodes and to a method for the preparation thereof for use in electrochemical cells, particularly those employing alkaline electrolytes in the anolyte compartment of the cell. The electrodes disclosed are coated with the oxides of cobalt and tungsten and are particularly suitable as anodes since the electrocatalyst coatings resist destruction by oxygen.