Abstract: A method and apparatus for optimizing a distributed polling system in a network comprising a plurality of nodes. The method includes identifying bandwidth constraints on polling traffic for each of the plurality of nodes. Selecting, from a plurality of unpolled nodes within the plurality of nodes, at least one poller node according to a maximum number of unpolled nodes assignable to each of the at least one poller node without violating bandwidth constraints, and respectively assigning the unpolled nodes as pollee nodes to the at least one poller node. The apparatus includes a central manager and a plurality of pollee nodes coupled to at least one poller node via at least one routing path. At least one aggregating node is coupled to the at least one poller nodes, where the aggregating node is further coupled to the central manager.

Abstract: A method and apparatus for providing at least two virtual private network VPN tunnels from a client device in a VPN network having an enterprise gateway and a network VPN gateway. The method and apparatus includes a client device having an Internet Key Exchange (IKE) module for establishing the at least two tunnels using an IKE protocol wherein a first tunnel is an end-to-end VPN tunnel to the enterprise gateway, and a second tunnel is a network-based tunnel to the network VPN gateway. An IPsec Network Driver Interface interfaces with the IKE module, which includes a security authentication database (SADB) that stores downloaded enterprise security policies respectively for each of the at least two tunnels. A routing table stores IP addresses of local presences and hosts respectively associated with the at least two tunnels, whereby packets are routed over the at least two tunnels based on the downloaded policies.

Abstract: A method and apparatus for providing user orientated wireless data services over a wireless communications network to a plurality of mobile nodes. The wireless communications network includes a plurality of packet data servicing nodes (PDSN's), a plurality of packet control functions (PCFs), and a PCF-PDSN routing controller (PPRC). The PPRC acts as a single PDSN, as well as a surrogate PCF from the perspective of the PDSNs in the private IP network of the service provider. The PPRC serves to provide user oriented wireless services, as opposed to device orientated services. The method includes receiving a data session request from a mobile node, and initiating a point-to-point connection between a PCF receiving the data session request and a PPRC. The PPRC selects one of the PDSNs, and initiates a point-to-point connection between the PPRC and the selected PDSN.

Abstract: A method for providing peer-to-peer virtual private network (P2P-VPN) services over a network. The method includes identifying subnet and host addresses for each user device requesting participation in a virtual private network (VPN) session. Once the subnet and host addresses are identified, a virtual private host (VPH) is initiated for each user device, where each VPH communicates with each user device via a respective tunnel through the network, thereby enabling secure communications between the user devices.

Abstract: An apparatus and method to enhance existing caches in a network to better support streaming media storage and distribution. Helper machines are used inside the network to implement several methods which support streaming media including segmentation of streaming media objects into smaller units, cooperation of Helper machines, and novel placement and replacement policies for segments of media objects.

Abstract: Communication networks and associated methods are disclosed that provide an advertisement or other type of informational message to a calling party before providing ringback tones. A communication network described herein receives a call from the calling party to the called party, and temporarily interrupts call processing for the call. The communication network then selects an advertisement for the call, and initiates delivery of the advertisement to the calling party. After the advertisement is delivered to the calling party, the communication network resumes call processing for the call. In resuming call processing, the communication network provides ringback tones to the calling party and attempts to connect the call to the called party.

Abstract: An apparatus and method to enhance existing caches in a network to better support streaming media storage and distribution. Helper machines are used inside the network to implement several methods which support streaming media including segmentation of streaming media objects into smaller units, cooperation of Helper machines, and novel placement and replacement policies for segments of media objects.

Abstract: In one embodiment, a call setup message for a call from a calling party device to a called party device is received. At least one calling party parameter for the calling party device is determined. A user message is selected based on the at least one calling party parameter. Delivery of the user message to the calling party device is initiated in parallel with a call setup for the call from the calling party device to the called party device.

Abstract: The present invention provides a network support mechanism, called Sync-VPN, that is transparent to real-time, multi-user distributed applications, such as online multi-player games in which the order of player actions is critical to the outcome. The invention uses a client/server application model, where a server coordinates state updates based on action messages sent by clients. The invention builds on bandwidth-quaranteed VPN service to ensure predictable packet delay and loss characteristics, thereby providing predictable packet service, state update fairness, and player action fairness. A Sync-out mechanism synchronizes delivery of state updates to all players enabling them to react to the same update fairly. A Sync-in mechanism processes action messages from all players in a fair order based on real-time occurrence. Sync-VPN employs a round-trip time estimation algorithm essential to message latency estimation in the Sync-out and Sync-in mechanisms.

Abstract: A method and apparatus for seamless roaming support for wireless networks is disclosed. The method includes broadcasting a request for a physical address of a default router related to a mobile unit; receiving the request at the default router; replying to the mobile unit; and creating an initial entry in a location table.

Abstract: The invention comprises a method and apparatus for establishing a persistent connection between a user device and a service gateway. Specifically, the method comprises obtaining state information in response to a connection request, establishing a connection between the user device and the service gateway using the state information, and maintaining the state information associated with the connection such that the connection is persistent through at least one network state change.

Abstract: A method and apparatus for accessing a CDMA2000 network translate Internet (IP) addresses of wired and wireless out-of-network users in a source IP address of a single CDMA2000 account that is used for data communications with users of the CDMA2000 network by a group of the out-of-network users.

Abstract: The Fair-Order Service of the present invention delivers action messages to the server as soon as it is feasible. Because action messages from different players exhibit different reaction times with respect to an update message, the Fair-Ordering Service executed at the server dynamically enforces a sufficient waiting period on each action message to guarantee the fair processing of all action messages. In reality, the waiting period at the server is bounded because of the real-time nature of interactive games. The algorithms that offer Fair Ordering Service take into consideration delayed and out-of-order action messages. When action messages corresponding to multiple update messages are interleaved, the Fair-Ordering Service matches the action message to the appropriate update message. It accomplishes this by maintaining a window of update messages and using the reaction times for an action message for each of the update messages in the window.

Abstract: A method and apparatus for providing at least two virtual private network VPN tunnels from a client device in a VPN network having an enterprise gateway and a network VPN gateway. The method and apparatus includes a client device having an Internet Key Exchange (IKE) module for establishing the at least two tunnels using an IKE protocol wherein a first tunnel is an end-to-end VPN tunnel to the enterprise gateway, and a second tunnel is a network-based tunnel to the network VPN gateway. An IPsec Network Driver Interface interfaces with the IKE module, which includes a security authentication database (SADB) that stores downloaded enterprise security policies respectively for each of the at least two tunnels. A routing table stores IP addresses of local presences and hosts respectively associated with the at least two tunnels, whereby packets are routed over the at least two tunnels based on the downloaded policies.

Abstract: A method and virtual private network (VPN) system for providing bandwidth guaranteed provisioning in network-based mobile VPN services. The method and system include identifying a set of VPN customers, at least one mobile access point (MAP) and at least one customer premise equipment (CPE) associated with each VPN customer, and at least one IP service gateway (IPSG) for facilitating VPN tunneling between a MAP and a CPE, wherein each MAP is geographically remote from each IPSG. A subset of IPSGs is selected to maximize total profit resulting from provisioning a subset of VPN customers on the selected IPSGs. Total profit from all the customers includes the sum of profits from each customer, where for each customer, the customer profit equals weighted revenue less cost, wherein the cost per customer includes a total tunnel bandwidth cost from the MAP to the CPE, and a cost of provisioning an IPSG node.

Abstract: A method and apparatus for optimally provisioning connectivity for network-based mobile virtual private network (VPN) services. The method and apparatus includes provisioning each of a plurality of IP service gateways (IPSGs) to support virtual private network (VPN) tunneling between customer premise equipment of a subset of VPN customers and at least one mobile access point (MAP). Each MAP is geographically remote from the plurality of IPSGs, and supports VPN tunneling to mobile nodes of the subset of VPN customers.

Abstract: A method and for establishing a virtual private network (VPN) session for a priority request. The method and apparatus includes identifying a priority request from a plurality of VPN session request classes. Reserved bandwidth is allocated to the priority request if a nominally allocated bandwidth is insufficient to satisfy the priority request. Once the allocated bandwidth is assigned, admission control is applied to the priority request.

Abstract: A method and apparatus for optimizing a distributed polling system in a network comprising a plurality of nodes. The method includes identifying bandwidth constraints on polling traffic for each of the plurality of nodes. Selecting, from a plurality of unpolled nodes within the plurality of nodes, at least one poller node according to a maximum number of unpolled nodes assignable to each of the at least one poller node without violating bandwidth constraints, and respectively assigning the unpolled nodes as pollee nodes to the at least one poller node. The apparatus includes a central manager and a plurality of pollee nodes coupled to at least one poller node via at least one routing path. At least one aggregating node is coupled to the at least one poller nodes, where the aggregating node is further coupled to the central manager.

Abstract: A method and apparatus for providing user orientated wireless data services over a wireless communications network to a plurality of mobile nodes. The wireless communications network includes a plurality of packet data servicing nodes (PDSN's), a plurality of packet control functions (PCFs), and a PCF-PDSN routing controller (PPRC). The PPRC acts as a single PDSN, as well as a surrogate PCF from the perspective of the PDSNs in the private IP network of the service provider. The PPRC serves to provide user oriented wireless services, as opposed to device orientated services. The method includes receiving a data session request from a mobile node, and initiating a point-to-point connection between a PCF receiving the data session request and a PPRC. The PPRC selects one of the PDSNs, and initiates a point-to-point connection between the PPRC and the selected PDSN.

Abstract: A system and method of cache replacement for streaming multimedia is provided. A network system includes a content provider connected to local service providers via an interactive distribution network, such as the Internet. The local service providers facilitate delivery of the content from the content provider to multiple subscribers. For each of the data blocks which make up the multimedia stream requested by a subscriber, the local service provider receiving the request determines whether the request can be serviced locally or whether the requested data blocks must be retrieved from the content provider. In the case where the portion of the requested stream must be retrieved from the content provider, the local service provider attempts to cache the requested blocks in its local cache in addition to streaming the data blocks to the requesting subscriber.