Abstract: Provided is a network equipment and an authentication and key management method for the same. The network equipment generates a Network Key (NK); the network equipment performs authentication protocol interaction with opposite communication equipment, and calculates a Basic Session Key (BSK) according to parameters for the authentication protocol interaction and the NK; and the network equipment calculates link Encryption Keys (EKs) used respectively for Media Access Control (MAC) and Physical (PHY) layers using various access technologies according to the BSK, and provides the EKs for respective MAC and PHY layer function modules. With the disclosure, the legality of the equipment is verified by performing an authentication process on the heterogeneous network equipments in one pass, and keys in various MAC layer technologies are managed in a unified way.

Abstract: A system for securely moving data from one location to another exchanges key material between the locations. The system enables cryptosystems to use key material distributed over a quantum channel.

Abstract: Embodiments of the invention provide methods for key fob to control unit verification, retention, and revocation. After an initial pairing between a key fob and a control unit, the devices share a secret operation key (OpKey). For verification, the key fob sends the 8 lowest-order bits of a 128-bit counter and some bits of an AES-128, OpKey encrypted value of the counter to the control unit. For key revocation and retention, the control unit is prompted to enter an OpKey retention and revocation mode. Subsequently, each of the remaining or new key fobs is prompted by the user to send a verification message to the control unit. When the control unit is prompted to exit the OpKey retention and revocation mode, it retains the OpKeys of only the key fobs that sent a valid verification message immediately before entering and exiting the OpKey retention and revocation mode.

Abstract: Methods and systems are provided for power management and security for wireless modules in “Machine-to-Machine” communications. A wireless module operating in a wireless network and with access to the Internet can efficiently and securely communicate with a server. The wireless network can be a public land mobile network (PLMN) that supports wireless wide area network technology including 3rd generation (3G) and 4th generation (4G) networks, and future generations as well. The wireless module can (i) utilize sleep and active states to monitor a monitored unit with a sensor and (ii) communicate with wireless network by utilizing a radio. The wireless module can include power control steps to reduce the energy consumed after sending sensor data by minimizing a tail period of a radio resource control (RRC) connected state.

Abstract: Embodiments of the present invention disclose a method, system, and computer program product for bluesalt security. A computer receives a confidential data configuration wherein specific sensor are assigned to specific confidential information. The assigned sensors are measured for values as a system administrator enters a password corresponding to the confidential information. The measured values are converted into a salt and concatenated with the password to generate a primary key. The primary key is used to encrypt the confidential information, then the primary key is encrypted using a secondary key comprised of a second password with a second set of sensor information as the salt. The encrypted key is saved securely while the secondary key is destroyed. In order to decrypt the confidential information, a user must replicate the password and sensor values to generate the primary or secondary key.

Abstract: An apparatus for enabling removal or disabling of weak algorithms may include a processor and memory storing executable computer program code that cause the apparatus to at least perform operations including receiving an indication of one or more algorithms utilized by a communication device. The computer program code may further cause the apparatus to determine whether one or more of the algorithms are identified as a weak algorithm. The computer program code may further cause the apparatus to enable provision of a message to the communication device instructing the communication device to remove, disable, or assign at least one condition to at least one detected weak algorithm among the algorithms. Corresponding methods and computer program products are also provided.

Abstract: In a decryption apparatus according to an embodiment, a holding device pre-holds a verification formula. A determination device performs a calculation based on the verification formula read from the holding device by substituting, into the verification formula, the part of the re-encrypted data received from a re-encryption apparatus and the public key of a re-encryption key generation apparatus and the private key of the decryption apparatus, to determine whether or not the verification formula holds true. An output device outputs verification success when a result of the determination indicates that the verification formula holds true.

Abstract: A method in a first entity for authenticating itself to a second entity by proving to the second entity that it is in possession of a full secret without sending the full secret to the second entity, the method comprising: receiving in the first entity an input from a user, the full secret having been divided into at least a first factor and a second factor and the input relating to the second factor of the full secret; reconstructing in the first entity the full secret from at least the first factor and the input; and carrying out a calculation in the first entity using the reconstructed full secret and sending the results of the calculation to the second entity, wherein the results provide an input to a pairing calculation in the second entity.

Abstract: In a general aspect, shared secrets for lattice-based cryptographic protocols are generated. In some aspects, a public parameter (a) is obtained, where the public parameter is an array defined for a lattice-based cryptography system. A first secret value (s) and a second secret value (b) are obtained. The first secret value is a second array defined for the lattice-based cryptography system, and is generated based on sampling an error distribution. The second secret value is a third array defined for the lattice-based cryptography system, and is a product of the first and second arrays (b?as). A public key ({circumflex over (b)}) is then generated by applying a compression function to the second secret value (b), and the public key is sent to an entity. A shared secret (?) is then generated based on information received from the entity in response to the public key.

Abstract: A system and methods for location authentication are presented. An estimated server signal is estimated based on a generated known code signal, and a client received satellite signal is received from a client device. The client received satellite signal is compared to the estimated server signal to provide a comparison result.

Abstract: A security control platform receives a virtual machine starting request message that is from user equipment and forwarded by a management platform, where the virtual machine starting request message includes an identifier of a virtual machine that needs to be enabled and user information; invokes a third-party trusted platform to determine that the virtual machine starting request message is initiated by the user equipment according to an instruction of an authorized user; and performs authentication on the user information, and based on successful authentication, invokes the third-party trusted platform to decapsulate the virtual machine that needs to be enabled. It is ensured that other user equipment (including the management platform) cannot obtain a key of the third-party trusted platform, which enhances security of management control on the virtual machine, and thereby enhances security of a cloud computing platform.

Abstract: Embodiments of an invention for feature licensing in a secure processing environment are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive an instruction to initialize a secure enclave. The execution unit is to execute the instruction. Execution of the instruction includes determining whether a requested feature is licensed for use in the secure enclave.

Abstract: Very strong, complex, unforgettable passwords unique to each web site are created for a user's Web site authentication by altering all or part of the web site address using, in a preferred embodiment, a predetermined encoding dictionary with more a single code for each entry and unique to each user. The entries in this preferred embodiment are single characters including characters used for words, punctuation, symbols and numerals; each single entry character appears more than once in the dictionary. The codes are of various character lengths and can be comprised of the same characters used in the entries. In a Web site authentication embodiment as well as for embodiments not used for Web site authentication, including pass-protecting files, the string of characters altered by encoding can be a private word or group of words. In another embodiment the password created by encoding is pseudo-randomly scrambled by using a seed unique to the user in order to create the password actually used.

Abstract: The systems, methods and apparatuses described herein provide a computing device that is configured to attest itself to a communication partner. In one aspect, the computing device may comprise a communication port configured to receive an attestation request from the communication partner, and an application-specific integrated circuit (ASIC). The ASIC may be configured to receive the attestation request, which may include a nonce. The ASIC may be further configured to generate a verification value, capture data representing a state of computation of the ASIC when the verification value is being generated, and send the verification value and captured data to the communication port to be transmitted back to the communication partner. The verification value may be a computation result of a predefined function taking the nonce as an initial value. In another aspect, the communication partner may be configured to attest the computing device using speed of computation attestation.

Abstract: There is disclosed a method of signing an electronic document. The method comprises: receiving via an encrypted connection a signature generation request file; receiving the AD information (such as dynamic autographic signature of the user) associated with a user. The method further comprises generating a first control sum based on the electronic document and a second control sum based on the AD information. The method further comprises generating a single numeric sequence based on the first and second control sums and encrypting the single numeric sequence using the private key to generate a digital signature. The method further comprises generating a final signature confirmation file including a hyperlink to the electronic document to be signed and to the AD information associated with the user; and transmitting, to the electronic address associated with the user, a file containing the digital signature, only in response to a conformation response from the user.

Abstract: Methods, systems, and computer programs for producing hash values are disclosed. A prefix-free value is obtained based on input data. The prefix-free value can be based on an implicit certificate, a message to be signed, a message to be verified, or other suitable information. A hash value is obtained by applying a hash function to the prefix-free value. The hash value is used in a cryptographic scheme. In some instances, a public key or a private key is generated based on the hash value. In some instances, a digital signature is generated based on the hash value, or a digital signature is verified based on the hash value, as appropriate.

Abstract: Systems, methods and transitory computer-readable storage media for detecting one or more loops in a multicast tree. The method includes calculating a multicast tree radius for a first multicast tree, the multicast tree radius representing a maximum number of hops from a root node to a furthest edge node in the first multicast tree, forwarding, by the root node, a first packet to each edge node within the first multicast tree, the first packet having a time-to-live (TTL) value equal to twice the first multicast tree radius, receiving, at the root node, a copy of the forwarded first packet, and determining an existence of a loop in the first multicast tree based at least upon receiving the copy of the forwarded first packet.

Abstract: An information handling system is provided. The information handling system includes a first hypervisor running on a first host and a second hypervisor running on a second host. The first hypervisor managing a first virtual switch, and the second hypervisor managing a second virtual switch. The information handling system also includes a plurality of virtual machines (VMs), including a first VM, which is part of a first tenant, running on the first host, and a second VM, part of a second tenant, running on the second host. The first virtual switch has a mapping in memory that maps a customer-specific multicast IP address, used by the plurality of VMs to indicate a multicast group that includes VMs on the first and second tenants, to a global multicast IP address used by the first and second hosts.

Abstract: Information is acquired from a geographically-distributed sensor network using a scalable wireless geocast protocol. Geographically distributed networks of unattended sensors are placed at desired locations to collect various types of information, such as, for example, environmental parameters, temperature, humidity, rainfall, heat signatures, video, audio, seismic activity, and/or wind conditions. To acquire information, a query is provided to the geographic area at which the sensors are located utilizing the geocast protocol. Delivery of the query is based on a physical location of a region in which a sensor network is located, the type of information being queried, and/or temporal conditions. Each sensor that receives a query determines if all requirements/conditions are satisfied. If so, the query is accepted and processed by the recipient sensor, and responded to accordingly. Responses to queries are provided via the geocast protocol.

Abstract: An end-user device can aggregate information as pertains to a variety of appliances that otherwise utilize incompatible communication protocols to present a shared opportunity to accommodate current information regarding those appliances. This information can include status information regarding such appliances as well as, or in lieu of, instructions to be acted upon by those appliances. Gateways can serve to provide a communications interface between such appliances and, for example, an internet. By one approach one or more middleware platform intermediaries can interface between one or more of those gateways and the end-user device.

Abstract: Provided is a method and apparatus for controlling home devices forming a home network at a time by using a mobile terminal in a home network system. In particular, the present disclosure provides a method and apparatus for controlling home devices at a time, depending on a type of contents. A method for playing contents in a Home GateWay (HGW) in a home network system includes receiving from a mobile terminal a control command requesting continuous playback of contents that are currently played in the mobile terminal and controlling at least one home devices in response to the control command.

Abstract: Natural language controlled devices may be configured to activate command recognition in response to one or more wake words. Techniques are provided to enable a voice controlled system to detect or receive an indication of a secondary device available to be controlled. The voice controlled system communicates with the secondary device to obtain information related to the secondary device. The voice controlled system may output of an audio query requesting audio input data related to controlling the secondary device from a user and generate, based on the requested audio input data, recognition data utilized to recognize of at least part of one or more commands to issue one or more controls to the secondary device.

Abstract: Aspects of a method and system for utilizing a 10/100/1 G/10 GBase-T PHY device for single channel and shared channel networks are provided. In this regard, at least one switching element may be utilized to configure an Ethernet over twisted pair PHY device for communication over a single and/or shared channel. The switching element may enable switching between a transmitter being coupled to a shared channel and a receiver being coupled to a shared channel. Additionally, the switching elements may be based on whether the transmitter is connected to a standard 10/100/1 G/10 GBase-T network, or to a single and/or shared channel network, for example. In this manner, the configured PHY device may remain compatible with existing Ethernet networks. The PHY device may be configured externally and/or internally. The polarity of transmitted and/or received data may be configured based on a polarity of data received from a shared channel.

Abstract: One embodiment of the present invention provides a switch. The switch includes a virtual network module and a forwarding module. The virtual network module includes a global virtual local area network (VLAN) tag in a packet. The global VLAN tag is mapped to an edge VLAN tag in the packet and is associated with a datacenter domain. The datacenter domain indicates a set of ports associated with a datacenter. The forwarding module identifies an egress edge port for the packet based on the global VLAN tag.

Abstract: The web-enabled system provides an electronic document exchange environment where transactional information is received by the system in one format, translated to a second format, and sent. The system allows its users to bypass the costs involved in owning or accessing an EDI translator or a value-added network and generates and sends an electronic receipt for auditing purposes. In addition to the translation of information, the system creates the functional acknowledgment message (the electronic receipt), associates it with the transactional information, and sends it to the intended recipient. The functional acknowledgement message is then returned to the system by that recipient. The system may translate the functional acknowledgement to the first format or may not. Once received, the system then sends the acknowledgement to the original provider of the transactional information. This loop allows the originator to determine whether its transactional information was received.

Abstract: A method of dynamically allocating network resources in an access network and a customer network includes: determining, by a control unit, positions of all users of the customer network; bringing, by the control unit, the customer network and/or a component of the customer network into a first predefined state, based on determining that no user of the customer network is checked in to the customer network; and reallocating, by the control unit, an access port of an access multiplexer assigned to the customer network to an access network resource pool, based on determining that no user of the customer network is checked in to the customer network.

Abstract: The present disclosure provides a relay application configured to send decoded barcode image data to an intermediary device as text via a TCP/IP connection. The relay application is executed by a processor of a mobile device that is in communication with the barcode sled reader. The barcode sled reader includes a barcode reader that generates image data of a barcode and a decoding processor that decodes the image data.

Abstract: An echo discriminating method capable of discriminating whether an echo occurs in a communication channel is provided. The echo discriminating device includes: a channel estimation unit, that receives a baseband signal and generates a plurality of estimated channel responses according to a plurality of subcarriers of the baseband signal; a transforming unit, that transforms the estimated channel responses to generate a plurality of estimated channel frequency responses; a calculating unit, that calculates a representative value of each of the subcarriers to generate a plurality of representative values; a characteristic value generating unit, that generates a characteristic value according to the representative values; and a determining module, that determines whether the echo occurs according to the characteristic value and the representative values to obtain a determination result.

Abstract: A method of selecting filter patterns is provided. The method may include measuring an average sign value of aggregate inter-symbol interference (ISI) for a data sequence using multiple filter pattern combinations of multiple filter patterns; estimating a first analog level of aggregate ISI for a first filter pattern based on a first average sign value, and a second analog level of aggregate ISI for a second filter pattern based on a second average sign value; estimating an analog level of individual ISI of the first filter pattern pair based on the first analog level and the second analog level; estimating, for each possible filter pattern combination, an analog level of aggregate ISI for the first filter pattern pair; and selecting a filter pattern combination for the first filter pattern pair that reduces the analog level of aggregate ISI.

Abstract: Circuits, devices, methods for decision feedback equalization are described. A decision feedback circuit can include a plurality of decision feedback equalizer (DFE) branches, each DFE branch including: a pre-computation stage for generating a set of tap-adjusted inputs, each tap-adjusted input corresponding to a possible value of a previous output for the same DFE branch; and a decision feedback stage including a multiplexer circuit for selecting at least one output from the set of tap-adjusted inputs based on tap-adjusted inputs from other DFE branches. For at least a first DFE branch of the plurality of DFE branches, at least one selection line for the multiplexer circuit in the decision feedback stage of at least the first DFE branch of the plurality of DFE branches is an intermediate value from a multiplexer circuit for a second DFE branch of the plurality of DFE branches.

Abstract: The present disclosure relates to a pre-5th-Generation (5G) or 5G communication system for supporting higher data rates beyond 4th-Generation (4G) communication system such as Long Term Evolution (LTE). A performance of the existing sliding-window superposition coding (SWSC) is degraded when a wireless channel state is changed due to a large scale fading and a small scale fading. In addition, the performance of the existing SWSC is degraded when channel state information at a receiver is different from that of the real channel. To resolve these problems, a transmitter applies an accurate data transmission rate suitable for a channel state. Therefore, a receiver applies an adaptive SWSC and to reduce a block error rate (BLER) and a hybrid automatic repeat request (HARQ) overhead of the receiver. In addition, to resolve wireless channel state change due to large and small scale fading, the transmitter may use the adaptive transmission method.

Abstract: A four-level pulse amplitude modulation receiver has a four-level pulse amplitude modulation mode and a non-return-to-zero modulation mode. First, second, and third four-level pulse amplitude modulation samplers are coupled to an input. Each of the samplers has a corresponding output in turn including a corresponding binary decision of the first, second, and third samplers. A four-level pulse amplitude modulation decoder circuit has inputs coupled to the outputs of the samplers. The four-level pulse amplitude modulation decoder circuit is active in the four-level pulse amplitude modulation mode. The receiver also includes a non-return-to-zero majority voting circuit coupled to the outputs of the samplers. The non-return-to-zero majority voting circuit has an output and is configured to output a majority decision of the corresponding binary decisions of the samplers, and is active in the non-return-to-zero modulation mode.

Abstract: A wireless communication apparatus includes a generating unit, a detecting unit, and a suppressing unit. The generating unit generates, using signals at multiple carrier frequencies that are different from each other, a replica signal for passive inter modulation distortion that occurs in a reception signal from a terminal due to the transmission of a multicarrier signal that includes the signals at the multiple carrier frequencies. The detecting unit detects the correlation value between the replica signal for the passive inter modulation distortion and the reception signal. The suppressing unit suppresses the peak of the multicarrier signal when the correlation value is equal to or more than the threshold.

Abstract: A device includes a frequency offset (FO) estimation circuit and a frequency offset compensation circuit coupled with the frequency offset estimation circuit. The frequency offset compensation circuit is configured to (i) receive a continuous phase modulation (CPM) signal, (ii) receive, from the FO estimation circuit, an uncompensated frequency offset for a wth sampling window of the CPM signal, (iii) generate a frequency offset compensation value for a w+1st sampling window of the CPM signal based on the uncompensated frequency offset for the wth sampling window, (iv) adjust the CPM signal in the w+1st sampling window based on the frequency offset compensation value, and (v) provide the adjusted CPM signal to a filter.

Abstract: An apparatus for transmitting a broadcast signal includes an input formatting module configured to de-multiplex an input stream into at least one Data Pipe (DP); a BICM module configured to perform error correction processing on data of the at least one DP; a signal frame building module configured to map the data of the DP to symbols within a signal frame; and an OFDM generation module configured to generate a transmission broadcast signal by inserting a preamble into the signal frame and performing OFDM modulation. The OFDM generation module includes a pilot signal insertion module configured to insert a pilot signal including Continual Pilots (CP) and Scattered Pilots (SP) into the transmission broadcast signal, and the CPs are inserted into every symbol of the signal frame, and location and number of the CPs are determined based on a Fast Fourier Transform (FFT) size.

Abstract: Transceiver device and method therein, for baseband processing of signals associated with TDD communication over wire lines. The method involves use of a single burst I/O N-point complex FFT kernel for baseband processing of receive and transmit signal blocks, where the processing involves simultaneously performing a respective FFT or IFFT of two N-sample signal blocks.

Abstract: This disclosure is directed towards techniques and methods of suppressing the effect of modulated clock jitter in a digital to analog conversion (DAC) circuit of a polar modulator in a transceiver. A phase locked loop (PLL) in a modulator circuit may introduce a deterministic jitter in DAC generated pulses which may lead to amplitude variations in the DAC generated pulses. The clock jitter may change the duty cycle of the input amplitude to the DAC which may result in a variation of the output of the DAC generated pulse. A digital pre-distortion or digital multiplier circuit may be introduced before the DAC circuit to increase or decrease the DAC amplitude to compensate for the pulse width modulation.

Abstract: A digital audio gateway device for use in a wireless network of digital audio playback devices. The gateway device is wirelessly linked to one or more digital audio playback devices to provide a gateway to the Internet for the digital audio playback devices. In addition to functioning as a gateway, the device provides additional functionality and may act as a cache of digital audio data for the various digital audio players connected in the wireless network and may also act to automatically update digital audio content on the audio players, synchronize digital audio content and playlists between the digital audio players and continue automatically or upon user request a particular playlist as the user moves from one digital audio player to another.

Abstract: Disclosed are a sign-in method and system. The method includes: obtaining, by using a location-based service (LBS) of a mobile terminal, geographical information of a current location of a person who signs in; binding the geographical information of the current location with identity information of the person who signs in and time information, using the geographical information of the current location, the identity information of the person who signs in, and the time information as sign-in information, and sending the sign-in information to a sign-in server; verifying, by the sign-in server, the sent sign-in information; and recording the sign-in information if the verification succeeds. The present disclosure not only can save costs of labor, material, and money, but also can enable several people to sign in simultaneously, thereby greatly improving sign-in efficiency.

Abstract: A storage client and a quorum-based distributed storage system may implement dynamic utilization of bandwidth for a quorum-based distributed storage system. An update at a storage client may be received, and storage nodes of a protection group may be sent a write request indicating the update. In some embodiment, storage nodes that receive the write request may determine whether other storage nodes have not received the update and send the write request to be completed at those other storage nodes. In some embodiments, if a latency threshold is exceeded other storage nodes in the protection group not previously sent the write request may be identified and sent the write request. Based on acknowledgements received from storage nodes in the distributed storage system, it may be determined whether a write quorum requirement is met for a write request.

Abstract: A communication terminal reads, from a removable memory, user-specific application information indicating one or more of the plurality of applications that are allowed for use by a specific user, and transmits a request for address information that includes application identification information of each one of one or more applications that are allowed for use by the specific user at the communication terminal to obtain address information associated with the application identification information.

Abstract: One or more techniques and/or systems are provided for displaying related content associated with browsing a website. For example, a user may access a website to view content provided by the website. As opposed to the user manually searching for interesting content through trial and error, related content that may be interesting to the user may be identified and surfaced to the user. For example, a user profile specifying user interests of the user may be used to identify related content assigned topics corresponding to the user interests (e.g., content provided by the website or other web source). In this way, the related content may be displayed to the user through a content recommendation reader interface. In an example, the content recommendation reader interface may be provided by a web browser so that related content may be identified and/or provided to users of any website from any device.

Abstract: A component aware maintenance alarm monitoring system for one or more cellular sites is disclosed. The system comprises an alarm database, an integrated inventory database, a maintenance activity, and a monitoring server comprising a monitoring application. The monitoring application receives alarms during a maintenance period. The maintenance period is associated with maintenance of one or more radio access network (RAN) components at a cellular site. The monitoring application evaluates the alarms based on accessing RAN component alarm information from the alarm database, RAN component inventory information from the integrated inventory database, and maintenance information from the maintenance activity database. During the maintenance period, the monitoring application selectively suppresses a subset of the alarms and takes a different action on at least one alarm not included in the subset based on the evaluation of the alarms.

Abstract: For performing link adaptation in an Ethernet ring protection system, a link management controller (180) determines a ring protection state of an Ethernet protection ring. Further, the link management controller (180) adapts bandwidth of a link (25) of the Ethernet protection ring. Depending on the adapted bandwidth and the determined ring protection state, the link management controller (180) deactivates the link of the Ethernet protection ring. In particular, if the adapted bandwidth is below a threshold value and the ring protection state indicates that there is no link failure in the Ethernet protection ring, the link management controller (180) may deactivate the link (25).

Abstract: An apparatus includes a first controller having at least one interface and at least one processing device. The at least one interface is configured to communicate with a second controller and with a controlled network having multiple EtherNet/IP-compatible input/output (I/O) modules and multiple EtherNet/IP-compatible controlled devices. The at least one processing device is configured to detect a fault associated with the second controller while the second controller is in communication with at least one of the I/O modules and at least one of the controlled devices. The at least one processing device is also configured, upon detection of the fault associated with the second controller, to resume the communication with the at least one I/O module and the at least one controlled device without the at least one I/O module updating the at least one controlled device to a failsafe condition.

Abstract: In accordance with some embodiments of the present disclosure, a method for initializing a network interface comprises monitoring a stream of data sent to a network interface and determining that a provisioning update for the network interface is complete. The method may further comprise sending provisioning data to a local file of the network interface, storing the provisioning data in the local file, and initializing an interface control module of the network interface based on the provisioning data stored in the local file.

Abstract: Disclosed are various embodiments for facilitating anticipatory distribution of applications to a network of remote hosts. A demand for each of the applications is calculated. Based on criteria within the demand and computing resources available, remote hosts are selected to receive the applications. Transmissions of the applications to the selected remote hosts are scheduled and monitored for completion according to the schedule.

Abstract: A system and method are described for managing a plurality of sever nodes. In one embodiment, the sever nodes are organized into groups referred to as “instances.” Each instance includes a group of redundant sever nodes and a dispatcher for distributing service requests to each of the sever nodes. In addition, a central message passing architecture is defined which allows the various instances to communicate with one another. In one embodiment, a hierarchical configuration data object is stored within a database and is centrally accessible by all of the servers from all of the instances. The hierarchical configuration data object organizes configuration data and binary data in a logical hierarchy which simplifies sever node management in an enterprise network.

Abstract: There is provided a distributed processing system including: a data store server for storing data; a data store part for storing data in the data store server; a data acquisition part for obtaining data from the data store server; and an operation manager part for performing configuration change on the whole system. The distributed processing system has a function of managing the configuration content and the configuration order for each device according to the change content, to determine the target and order to be configured based on the managed information by the operation manager part. Further, the distributed processing system has a function of performing a configuration change process on the data store part, the data acquisition part, and the data store server by the operation manager part.

Abstract: Techniques are provided for bifurcating database information that might otherwise be replicated on each switch in a switched fabric of a Storage Area Network (SAN). The database is divided into a control plane database that comprises mostly switch specific data and a central management database that comprises user device configurations and device profiles. The control plane database includes information such as name server and zone server information, for those devices that may locally log into the switched fabric via a given switch, and those remote devices that are zoned with those local devices and that may log into the switched fabric via another switch. The central management database includes global information for the switched fabric and device profile information (e.g., login interface, Virtual SAN membership, device aliasing, etc.) for devices that have access to the switched fabric and that can also be requested by the various switches in the switched fabric.