Abstract: A method and apparatus for performing client-sensitive DNS translations includes the steps of receiving a translation request by a DNS server. The DNS server examines the translation request to determine if a record exists within the DNS server that associates the symbolic name included in the translation request with an IP record. If such a record exists, the IP address is returned as the translation. If not, the DNS server determines whether reflective client-sensitive translation is required. In the affirmative case, the request is reflected to back to the client where client-sensitive translation is performed and returned to the DNS server. If client-sensitive translation is not required, the DNS server determines whether non-reflective client-sensitive translation is required. If so, the requested translation is forwarded to a special DNS server, along with information that identifies the client system requesting translation.

Abstract: A system and method for many-to-many failover and load balancing establishes a plurality of service groups for providing desired computing services. Each service group comprises a plurality of hosts, and each host within the service group is available to perform the computing services for which that group as a whole is responsible. Each host may belong to a plurality of service groups. Each operational host within a service group transmits periodic messages to each other host within the service group advising of the status of the transmitting host. A leader host evaluates the periodic messages and, where appropriate, dynamicall reassigns responsibility for particular computing services to a host within the group. The reassignment can be due either to failover or load balancing.

Abstract: A preferred embodiment of the present invention includes a method and apparatus for routing an IP packets in a network of client systems. The router forwards IP packets between the client systems and the server systems. More specifically, the router can be pre-configured to include one or more "routes." Each route is a mapping between an IP address and a client system. The router may also learn route from other routers and by analysis of IP packets. Preferably, the routes known by the router are included in a route table. The router also monitors DHCP assignment of IP addresses to client systems within the network. When the DHCP assignment of an IP address is detected, the router creates a new route that associates the newly assigned IP address and the corresponding client system. The new route is marked so that it may only be overwritten by a subsequent DHCP assignment.

Abstract: A preferred embodiment of the present invention includes a method and apparatus for allocating and using IP addresses in a network of client systems. More specifically, the present invention includes a DHCP server that leases IP addresses to the client systems. The DHCP server works in combination with a secure DHCP relay agent and a secure IP relay agent. Broadcast DHCPREQUEST messages are forwarded to the DHCP server by the secure DHCP relay agent. Before forwarding, the secure DHCP relay agent embeds in each DHCPREQUEST message. The trusted identifier is an unforgeable object specifically associated with the client system sending the DHCPREQUEST message. When the DHCP server receives a DHCPREQUEST message, the DHCP server extracts the trusted identifier. The trusted identifier is then used by the DHCP server to prevent client systems from accessing the IP address leases of other client systems. The DHCP server also counts the number of IP addresses leases assigned to each trusted identifier.

Abstract: The present invention includes a method and apparatus for filtering IP packets based on events within a computer network. More specifically, the present invention includes a services management system, or SMS. The SMS manages network connections between a series of client systems and a router. An access network control server (ANCS) manages the configuration of the router. The SMS monitors activities or events that occur within the network. In response to these events, the SMS dynamically downloads filtering profiles to the ANCS. The ANCS then uses the downloaded filtering profiles to reconfigure the router. The router then uses the filtering rules to selectively discard or forward IP packets received from the client systems.

Abstract: A method and apparatus for controlling access to services within a computer network is provided. More specifically, the present invention includes a services management system, or SMS. The SMS manages network connections between a series of client systems and a router. An access network control server (ANCS) manages the configuration of the router. For each network user, the SMS maintains a profile of filtering rules. When the user accesses the network, the SMS downloads the user's filtering profiles to the ANCS. The ANCS then uses the downloaded filtering profiles to reconfigure the router. The router then uses the filtering rules to selectively forward IP packets originating from the user's host system and directed at the network services.

Abstract: The invention provides solutions to the problems which are encountered by object oriented systems designers when attempting to implement schemes for object invocation and for argument passing in distributed systems wherein the arguments may be objects, and wherein the system supports a multiplicity of ORB-specific data formats, in ways which do not lock the object oriented base system into methods which may be difficult to change at a later time.

Abstract: An extensible set of auxiliary services for objects in an object-oriented system. Every object in an object-oriented system is implemented by an associated object manager. Each object manager in the present invention has an associated object manager identifier that identifies the object manager. Each object manager in the system can optionally provide various auxiliary services for objects that the object manager implements. These auxiliary services are objects implemented by the object manager itself, or by another object manager. For a particular type of auxiliary service, different object managers may provide different auxiliary services. For example, two object managers may provide two different freeze-melt services. For each type of auxiliary service type, there is a well-known context in which auxiliary services of that type are associated with names. For each type of auxiliary service, there is also a well-known function that transforms an object manager identifier into a name.

Abstract: A secure naming model for objects in an object-oriented system, wherein names are bound to objects within context objects. The context objects are implemented by name servers, and clients request that a context object "resolve" the name for the object. The name server that implements the context returns a duplicate of the desired object. If a name resolution involves more than one name server, an assurance of security is provided by the first name server to the second name server.