Abstract: Systems and methods for enhanced device discovery to support multiple clients and high data bandwidth are disclosed herein. An example method includes a method for discovering networked devices on a network having a client application executing on a client device communicatively coupled to the networked devices, the method comprising: transmitting a first inquiry over the network; receiving a first list of devices corresponding to the first inquiry; transmitting a second inquiry over the network; receiving a second list of devices corresponding to the second inquiry; aggregating the first list and the second list to form an aggregate list, the aggregate list including a list of networked devices of interest; and, for at least one of the networked devices of interest, establishing a publisher/subscriber relationship between the at least one of the networked devices and the client application.

Abstract: Among four secure computation nodes holding first to third shares of data in a secret-shared form, first and second secure computation nodes are selected as resharing nodes, and third and fourth secure computation nodes are selected as receiving nodes. The first and second secure computation nodes perform a mini-shuffle for resharing the shares they each hold by using a permutation that third and fourth receiving nodes do not know. Next, the third and fourth secure computation nodes perform a mini-shuffle for resharing the shares they each hold by using a permutation that first and second receiving nodes do not know.

Abstract: Among four secure computation nodes, one secure computation node is selected as a receiving node. Two of three remaining secure computation nodes among the four secure computation nodes are operated as resharing nodes, and a remaining secure computation node is operated as a verifying node. The resharing node(s) performs a mini-shuffle for resharing share(s) held therein by using a permutation that the receiving node does not know and transmits a result(s) of the mini-shuffle to the receiving node. The verifying node computes data to verify the result(s) of the mini-shuffle performed by the resharing node(s) by using a permutation that the receiving node does not know and transmits the data to the receiving node. Shuffling of shares is achieved by repeatedly performing a round as described above so that each of the four secure computation nodes is selected as the receiving node at least once.

Abstract: A method is performed at a router on a multicast configured to forward a multicast flow. The method comprises: in response to receiving, from a controller connected to the multicast path or the multicast path, an enable command to enable statistics tracing for the multicast flow, determining whether the router has sufficient resources to perform statistics tracing; and when the router has the sufficient resources: responsive to the enable command, enabling statistics tracing to collect statistics for the multicast flow; generating a first request to include the enable command and the statistics; and forwarding the first request towards the controller.

Abstract: Systems and methods for capturing and distributing a live audio stream of a live event in real-time to a plurality of mobile computing devices are described. The system comprises at least one memory configured to store computer-executable instructions and processing device(s) coupled to the at least one memory and at least one audio input device configured to receive the live audio stream. Upon receipt of the live audio stream, the processing device(s) generate, in real-time, a plurality of discrete audio data packets from the live audio stream, and transmit that respective discrete audio data packet over a first network for receipt by the mobile computing devices. In respect of each one of the discrete audio data packets, a copy of the discrete audio data packet is transmitted for receipt by each one of the mobile computing devices prior to transmitting another one of the discrete audio data packets.

Abstract: Examples described herein relate to configuring a target network interface to recognize packets that are to be written directly from the network interface to multiple memory destinations. A packet can include an identifier that a portion of the packet is to be written to multiple memory devices at specific addresses. The packet is validated to determine if the target network interface is permitted to directly copy the portion of the packet to memory of the target. The target network interface can perform a direct copy to multiple memory locations of a portion of the packet.

Abstract: A device of a service coordinating entity includes communications circuitry to communicate with a plurality of access networks via a corresponding plurality of network function virtualization (NFV) instances, processing circuitry, and a memory device. The processing circuitry is to perform operations to monitor stored performance metrics for the plurality of NFV instances. Each of the NFV instances is instantiated by a corresponding scheduler of a plurality of schedulers on a virtualization infrastructure of the service coordinating entity. A plurality of stored threshold metrics is retrieved, indicating a desired level for each of the plurality of performance metrics. A threshold condition is detected for at least one of the performance metrics for an NF V instance of the plurality of NFV instances, based on the retrieved plurality of threshold metrics. A hardware resource used by the NFV instance to communicate with an access network is adjusted based on the detected threshold condition.

Abstract: A method for facilitating communications between client devices in geographically separated networks is described. First, message monitoring is conducted by each of a plurality of virtual appliances within a local network to detect a message of a first message type. Responsive to failing to locate a Media Access Control (MAC) address of a destination for the message within a prescribed table by a default gateway, one of the plurality of virtual appliances is selected for handling a forwarding of the message to a plurality of remote networks, and the message via the selected virtual appliance is forwarded to a plurality of gateways associated with a plurality of remote networks. Responsive to locating the MAC address of the destination within the table, the virtual appliance previously handling communications with the destination to forward the message to the destination.

Abstract: Systems, methods, and computer-readable media for identifying bogon addresses. A system can obtain an indication of address spaces in a network. The indication can be based on route advertisements transmitted by routers associated with the network. The system can receive a report generated by a capturing agent deployed on a host. The report can identify a flow captured by the capturing agent at the host. The system can identify a network address associated with the flow and, based on the indication of address spaces, the system can determine whether the network address is within the address spaces in the network. When the network address is not within the address spaces in the network, the system can determine that the network address is a bogon address. When the network address is within the address spaces in the network, the system can determine that the network address is not a bogon address.

Abstract: In accordance with one example embodiment, a system configured for programming a network layer multicast address entry in a routing table of an ingress line card module is disclosed. The network layer multicast address entry includes a network layer address associated with at least one egress line card. The system is further configured for programming a data link layer multicast routing address entry in a routing table of a fabric card module in which the data link layer multicast routing address entry corresponds to the network layer multicast address entry.

Abstract: A system includes a processor, safety devices including a door-related safety device, and environmental condition detection sensors. The processor is configured to receive environmental condition sensor data from the at least one environmental condition detection sensor. An imminent occurrence of a threat event tis detected that would cause the damage a building. A risk analysis model analyzes threat event related environmental condition sensor data to predict a risk value that the at least one threat event would cause the damage to the at least one building and to generate risk mitigation actions that at least reduces the damage during the actual occurrence of the threat event. Prior to the actual occurrence of the threat event, respective risk mitigation instructions are transmitted to actuators that cause an operational state change of safety devices so as to at least reduce the damage to the building from the threat event.

Abstract: In an embodiment, the present disclosure discloses a method and a module for controlling data transfer in a manufacturing plant. The IoT module is configured to receive a request for a plurality of parameters from a second application from one or more applications. The request is made by a first application from the one or more applications. The IoT module determines status of the requested parameters. The status indicates if the requested parameters are authorized for sharing. Further, the IoT module transfers only the authorized parameters to the first module based on the status. Thus, the present disclosure provides a method and a IoT module for sharing data securely within the manufacturing plant.

Abstract: Techniques are disclosed for session-based routing of multipoint Open Systems Interconnection (OSI) Model Layer-2 (L2) frames of an L2 network extended over Layer-3 (L3) networks. In one example, L2 networks connect a source device to an ingress router and receiver devices to egress routers. An L3 network connects the ingress and egress routers. The ingress router receives, from the source device, a multipoint L2 frame destined for the receiver devices. The ingress router forms, for each egress router that is connected to at least one multipoint receiver device, a unicast L3 packet for the L2 frame and forwards the unicast L3 packet to the egress router. Each egress router generates, in response to receiving the unicast L3 packet, the multipoint L2 frame and forwards, to the receiver devices, the multipoint L2 frame.

Abstract: Techniques are disclosed for session-based routing of multipoint Open Systems Interconnection (OSI) Model Layer-2 (L2) frames of an L2 network extended over Layer-3 (L3) networks. In one example, L2 networks connect a source device to an ingress router and receiver devices to egress routers. An L3 network connects the ingress and egress routers. The ingress router receives, from the source device, a multipoint L2 frame destined for the receiver devices. The ingress router forms, for each egress router that is connected to at least one multipoint receiver device, a unicast L3 packet for the L2 frame and forwards the unicast L3 packet to the egress router. Each egress router generates, in response to receiving the unicast L3 packet, the multipoint L2 frame and forwards, to the receiver devices, the multipoint L2 frame.

Abstract: A cardinality query associated with a specific attribute is received. One or more in-scope attribute cardinality partitions is enforced on session record analytics. Vertical data compression is performed to eliminate a time dimension. Horizontal data compression is performed to eliminate one or more out-of-scope attributes. One or more like in-scope session records is aggregated. Magnitudes of each in-scope attribute of each enforced cardinality partition are summed. The sum is returned as a response to the cardinality query.

Abstract: A device is provided that includes a persistent memory, a microcontroller and a power source configured to generate power in response to energy harvesting. The power is transferred to a power storage of the device such that when the power storage has an amount of power the microcontroller performs processing of a part of a task resulting in state data related to the task stored to the persistent memory in response to a first cycle of energy harvesting. In response to one or more additional cycles of energy harvesting, the device continues performance of the task by retrieving the state data for the part of the task from the persistent memory and resulting in assembly of a payload that comprises an update to software running on the device.

Abstract: Disclosed are a method and apparatus for retrieving and enumerating object metadata in a distributed storage system. The method includes: defining and configuring metadata of objects, and counting the number N of types of the metadata; constructing a metadata retrieval tree according to the metadata and the number N of the types of the metadata, each Mth node being associated with an Mth linked list; configuring objects in the Mth linked lists, the objects conforms to all metadata in metadata arrays in the Mth nodes; and configuring an index based on the metadata, pointing to a specified target node via the metadata retrieval tree according to the index, determining a target linked list according to the target node, and providing enumerated objects by the target linked list.

Abstract: A wireless communication method includes receiving, by a first user plane function (UPF) entity, a first message sent by a session management function (SMF) entity, where the first message includes a multicast address of a group and session information of at least one second terminal, and duplicating, by the first UPF entity, received first service data to obtain N copies of first service data, and sending the duplicated first service data to each second terminal based on the multicast address and the session information of the at least one second terminal, where the first service data is data that is from a first terminal and whose destination address is the multicast address, and N is a total quantity of the at least one second terminal.

Abstract: Techniques and mechanisms for a control plane approach for dense topologies that focusses on discovering shared ECMP groups in the control plane independent of per-prefix learning and then learning prefixes via these shared ECMP groups instead of learning prefixes via one next-hop at a time. In dense topologies, this approach helps minimize BGP path scale, corresponding signaling and enables control plane scaling that is an order of magnitude higher than a traditional eBGP control plane. During link and node topology changes, the described control plane approach enables control plane signaling that is prefix independent and an order of magnitude lower. A control plane approach to path-list sharing and prefix independent signaling on link and node topology changes enables prefix independent convergence (PIC) in scenarios that would not be possible otherwise with traditional FIB driven path-list sharing and PIC.

Abstract: The disclosed technology is generally directed to communications in an IoT environment. For example, such technology is usable for IoT data control. In one example of the technology, a declarative data request is received. The declarative data request is a request for data from multiple IoT devices. The declarative data request is translated into a plurality of individual requests. Destination IoT devices associated with the plurality of individual requests are identified. The plurality of individual requests to the destination IoT devices are sent. IoT data is received from the destination IoT devices based on the plurality of individual requests. The declarative data request is responded to based on the received IoT data.

Abstract: A system and method for dynamically optimizing content delivery in a wireless communication network. The method comprises receiving, at a transceiver [208A], a request for delivery of a content from at least one user device [202]. A manifest module [208B] determines one or more first parameters for the at least one user device [202] and compares one or more parameters of the at least one user device [202] with one or more second parameters of the at least one cohort. The manifest module [208B] dynamically identifies (or generates) a virtual manifest associated with the at least one cohort (or the at least one user device [202]) based on the comparison. A segmenter module [208C] automatically extracts a stream of data associated with the virtual manifest. The transceiver [208A] delivers the content to the at least one user device [202] based on the extracted stream of data.

Abstract: Disclosed by the present application is a direct connection communication method, an AMF, an access network functional entity and a terminal.

Abstract: Exemplary methods, apparatuses, and systems maintain network membership information for a host when it is disconnected from a controller. When the host detects a loss of connectivity with the network controller, the host identifies and selects one or more hosts that are members of a control logical network. The control logical network includes hosts configured to run data compute nodes that are members of the overlay network, regardless of whether or not each of the hosts is currently running a data compute node that is a member of the overlay network. The host then sends any broadcast, unknown destination, or multicast (BUM) data packet(s) to the selected one or more hosts.

Abstract: Methods, systems, and devices for wireless communications are described in which sidelink communications between devices may be retransmitted using one or more nodes. A first user equipment (UE) may transmit a broadcast, multicast, or groupcast communication to a set of other UEs using sidelink resources. A node may monitor the communications and store the first UE transmission. UEs of the set of other UEs may transmit feedback reports to the node that indicate one or more missing packets of the first UE transmission. The node may retransmit one or more of the stored packets to the set of other UEs based on the feedback reports. In some cases, the sidelink communications may be encoded using a network coding algorithm, and the node may retransmit network coded packets based on the feedback reports, may transmit newly encoded packets based on the feedback reports, or combinations thereof.

Abstract: This application provides a communications method and a communications apparatus, to reduce storage resources required by an access network device to store a context of a terminal device. The method includes: The access network device gathers terminal devices that have a same attribute in a group, where a context of each terminal device is divided into two parts: a common context and a dedicated context, the common context is shared by all the terminal devices in the group, and the dedicated context is a context specific to the terminal device. The access network device stores one common context for each group and stores a dedicated context of each terminal device in the group, to maintain the context of each terminal device.

Abstract: This application provides a BIER packet sending method. The method includes: receiving a BIER packet that is encapsulated using an IPv6 protocol and that is sent by a second forwarding device, where the BIER packet includes an IPv6 basic header and a BIER header, a destination address field in the IPv6 basic header is a first IPv6 address of the first forwarding device; determining, based on an identifier corresponding to a first IPv6 address in a forwarding table, to perform BIER forwarding on the BIER packet, where the identifier is used to indicate that the first IPv6 address is a destination address for BIER forwarding. In the technical solution provided in this application, a node may determine, based on the identifier of the first IPv6 address, to perform BIER forwarding on the BIER packet.

Abstract: A method implemented by a network node in a Bit Index Explicit Replication Traffic/Tree Engineering (BIER-TE) domain is used to avoid duplicate packets. The method includes generating an improved bit index forwarding table (BIFT) containing a forwarding entry for a local area network (LAN)-connected adjacency from the network node to a pseudo node; and a secondary BIFT including a forwarding entry for a forward connected adjacency from the pseudo node to each of the pseudo node's next hop nodes except the network node; sending a packet containing a point to multipoint (P2MP) path with a bit position for the LAN-connected adjacency to the pseudo node according to the forwarding entry for the LAN-connected adjacency in the improved BIFT; and sending the packet to each of the pseudo node's next hop nodes on the P2MP path based on the secondary BIFT.

Abstract: A controller assigns variable length addresses to addressable elements that are connected to a network. The variable length addresses are determined based on probabilities that packets are addressed to the corresponding addressable element. The controller transmits, to the addressable elements via the network, a routing table indicating the variable length addresses assigned to the addressable elements. Routers or addressable elements receive the routing table and route one or more packets over the network to an addressable element using variable length addresses included in a header of the one or more packets.

Abstract: System and method provide wireless distributed lighting control systems implementing a secure peer-to-peer, self-organizing and self-healing mesh network of actuators and system inputs. The system and method can be designed specifically for indoor and outdoor lighting where actuators include in-fixture, on-fixture and circuit control modules with ON/OFF and full range dimming capabilities, and system inputs include occupancy/vacancy sensors, daylight sensors and switches. A unique messaging protocol facilitates wireless and wired communication between actuators and system inputs, and provides web-based commissioning and monitoring of the lighting control system using a wireless access point accessible from a local network or Internet which can provide an intuitive and easy to use Graphical User Interface (GUI).

Abstract: In an embodiment, a computer-implemented method for highly-scalable, in-network multicasting of statistics data is disclosed. In an embodiment, a method comprises: receiving, from an underlay controller, a match-and-action table that is indexed using one or more multicast (“MC”) group identifiers and includes one or more special MC headers; detecting a packet carrying statistics data; determining whether the packet includes an MC group identifier; in response to determining that the packet includes the MC group identifier: using the MC group identifier, retrieving a special MC header, of the one or more special MC headers, from the match-and-action table; generating an encapsulated packet by encapsulating the packet with the special MC header; and providing the encapsulated packet to an interface controller for transmitting the encapsulated packet to one or more physical switches.

Abstract: A method for execution by a processor of a host having an external interface for connection to at least one other network element of a packet-based data network, the host storing a routing table and implementing a container connected to a bridge, the container being addressable by an internal address on a bridge network associated with the bridge. The method includes obtaining an indication of a request for the container to join a multicast group. In response to the obtaining, a request is sent via the external interface for the host to join the multicast group. The routing table may be modified so as to make the bridge a next hop for future packets obtained from the external interface and destined for the multicast group. The routing table may also be modified so as to make the external interface a next hop for future packets that are obtained from the bridge, whose source address is the internal address of the container and that are destined for the multicast group.

Abstract: A non-transitory computer-readable medium whose contents, when executed by a computing system of an in-home security device, cause the computing system to perform operations to provide security for an in-home network, including receiving home network internet datagrams from a modem at the in-home security device to provide received home network data packets, the received home network internet datagrams being all data packets received by the modem directed to the in-home network from outside, analyzing the received home network internet datagrams using an artificial intelligence service to identify a type of security threat included in the received home network internet datagrams, selecting a security application from among a plurality of security applications included in an in-home network security application suite based on the type of security threat identified in the received home network internet datagrams by the artificial intelligence service to provide a selected security application, using the selecte

Abstract: Embodiments of this application provide a bit-forwarding ingress router, a bit-forwarding router, and an OAM test method, and pertain to the field of multicast networks. A first BFR receives an OAM request packet from a BFIR; the first BFR determines, according to the OAM request packet, that a destination BFR corresponding to the OAM request packet is the first BFR; and the first BFR obtains a first OAM response packet according to an ID of the BFIR, and sends the first OAM response packet to the BFIR. According to the method and the apparatus that are provided in the embodiments of this application, a problem that a BFIR cannot diagnose or handle a transmission fault when the fault occurs during transmission of a multicast packet can be resolved, which helps implement connectivity testing by using an OAM packet and enables testing of multiple BFERs.

Abstract: A system for coordinated management of Internet of Things (IoT) devices to minimize power consumption and network congestion is provided. A mobile device designated as local group management device (LGMD) identifies a group of IoT devices that are configured to access a network. The mobile device receives information regarding an upcoming event involving the group of IoT devices. The mobile device generates usage knowledge specifying the group of IoT devices, a location, and a time associated with the upcoming event. The mobile device receives configuration update data that are generated based on the usage knowledge for scheduling operations of the group IoT devices. The mobile device delivers the configuration update data to the group of IoT devices.

Abstract: Embodiments of the present invention are drawn to electronic systems capable of transmitting a group addressed frame that identifies an MLD according to an MLD MAC address. The group addressed frame can include an ARP request, for example, and can be transmitted by an AP MLD responsive to an individually addressed frame transmitted by a non-AP STA MLD associated with the AP MLD. The AP MLD can provide a proxy ARP service for associated non-AP STA MLDs.

Abstract: The present disclosure is intended to enable efficient content forwarding in an HTTP-based web distribution system while maintaining HTTP, which is unicast. In the present disclosure, a unicast-multicast conversion device and a multicast-unicast conversion device that are connected, by using a multicast communication network, with a network between a content server and a terminal that perform web distribution are provided. The unicast-multicast conversion device and the multicast-unicast conversion device execute, in both multicast and unicast, forwarding of a content group into which a plurality of contents are grouped.

Abstract: Hybrid mode multicast routing may be provided. A switching device may receive a first join. Next, in response to receiving the first join, states for a first protocol mode (e.g., (S, G)) that is source aware and state for a second protocol mode (e.g., (*, G)) that is not source aware may be programed. Then a second join may be sent based on the states associated with the second protocol mode (e.g., (*, G)).

Abstract: This application provides a BIER multicast traffic statistics collection method, a device, and a system. The method includes: A first network device obtains a first BIER packet. The first network device performs traffic statistics collection on the first BIER packet based on multicast flow information, to obtain a traffic statistics collection result of the first BIER packet, where the multicast flow information is used to identify a multicast flow to which the first BIER packet belongs. The first network device sends the multicast flow information and the traffic statistics collection result of the first BIER packet to a controller.

Abstract: Systems and methods provide for enabling multicast-based performance routing and policy controls for software-defined networking in a wide area network deployment including a multicast application-route policy based on sources, groups, receivers, dynamic application-route policy path selection from multicast replicators, and application-route SLA switchover across paths and multicast replicators based on SD-WAN multicast routing architecture; and dynamically selecting SD-WAN multicast replicators based on policies for replication including allowed multicast groups, geographic location, bandwidth indications, system load, and performance, and switching over dynamically across multicast replicators based real-time multicast replicator status updates.

Abstract: Adjusting communication channels used by camera to communicate with a base station are described. In one aspect, characteristics of communication channels can be determined and the operation of the camera can be adjusted to use a communication channel based on a comparison of the characteristics of multiple communication channels.

Abstract: A method for transmitting a message via an access network to a group of terminals is provided. The access network transmits the message to the group of terminals over a broadcast channel. The access network receives a request for retransmission of the message transmitted from a terminal that has not correctly received the message. The access network evaluates a predetermined broadcast retransmission criterion and retransmits the message over a point-to-point link or over a broadcast channel according to the predetermined broadcast retransmission criterion.

Abstract: The present technology is directed to generating a common Border Gateway Protocol (BGP) attribute, for example, BGP-Slice Identifier (ID) for a specific network slice and stitching the network slice across one or more domains to realize end-to-end slicing. The present technology can generate BGP ID for a specific network slice spanning a plurality of domains and map domain-specific attributes associated with sub-slices of the specific network slice in different domains of the plurality of domains to the BGP ID. The present technology can further facilitate distribution of the mapping of the domain-specific attributes to the BGP ID across the plurality of domains for stitching the sub-slices together from the domain-specific attributes based on the BGP ID to stitch the specific network slice across the plurality of domains.

Abstract: An IoT hub comprising one or more servers and databases is configured to automatically assign Internet of Things (IoT) enabled devices to IoT solutions based on a subnet to which the IoT devices are connected. A user interface is configured to enable a user to define subnets within the customer's network environment and assign each subnet to an IoT solution. Upon the user setting up an IoT device's network connection to a network device, such as a router, the IoT device transmits its network information to the IoT hub. The IoT hub can then automatically assign the IoT device to a specific IoT solution without further user input or predict which IoT solution to utilize for that IoT device based on known parameters.

Abstract: A method is provided that includes receiving, from a first cluster, data intended for a second cluster and routing the data to the second cluster, thereby forming an indirect connection between a first cluster and the second cluster. A network usage of the indirect connection may be monitored and in response to determining that the network usage of the indirect connection exceeds a network usage threshold, a respective remote agent of each of the first and second clusters may be instructed to form a direct connection between the first and second clusters. The network usage of the direct connection may be monitored and in response to determining that the network usage of the direct connection is below the network usage threshold, the respective remote agent of each of the first and second clusters may be instructed to remove the direct connection.

Abstract: An electronic device of a content producer generates a chunk of data, associates a location-independent name with the chunk of data, generates a signature for the chunk of data, attaches the signature to the chunk of data, and transmits the chunk of data, with the signature attached, to one or more user devices in response to respective requests. The signature is generated based on the data in the chunk, using a private key of the electronic device. The electronic device also stores information, including a specification of a public key associated with the private key, in a first ledger entry of a blockchain, to provide the one or more user devices with access to the public key. A user device may obtain the public key and use it to verify the chunk of data.

Abstract: The subject technology addresses a need for improving utilization of network bandwidth in a multicast network environment. More specifically, the disclosed technology provides solutions for extending multipathing to tenant multicast traffic in an overlay network, which enables greater bandwidth utilization for multicast traffic. In some aspects, nodes in the overlay network can be connected by virtual or logical links, each of which corresponds to a path, perhaps through many physical links, in the underlying network.

Abstract: Some embodiments provide a method for configuring a set of MFEs to implement a distributed multicast logical router and multiple logical switches to process the multicast data messages. The method sends, from a managed forwarding element (MFE) implementing the distributed multicast logical router, a multicast group query to a set of data compute nodes (DCNs) that are logically connected to one of several logical switches and that execute on the same host machine as the managed forwarding element. The method receives multicast group reports from a subset of the set of DCNs and at least one of the multicast group reports specifies a multicast group of interest. The method distributes, to a set of MFEs executing on other host machines, a summarized multicast group report specifying a set of multicast groups of interest to the first MFE (i.e., multicast groups that the first MFE participates in).

Abstract: Method, devices, programs and system for the realization of an encrypted protocol for the transmission of encrypted data packets, called “Transport Encrypted Protocol” (TEP), intended for communication, characterized by a particular methodology of data encrypted encapsulation according to the blockchain paradigm including the following steps: the establishment of a distributed ledger which generate sender and recipient addresses to establish a communication characterized by the encryption of both the content and the transport channels; the verification of the integrity of the message and the correct correspondence of the address by the receiving node (hash), which decrypts each layer of encapsulation and hence decrypting the message itself; and the submission of an encrypted notification of receipt to the sender node and the subsequent preparation of the receiving node to the next state, either the break in communication or the modification of its status from recipient to sender.

Abstract: A method for creating a secure network is provided. The method comprises establishing an overlay domain to control routing between overlay edge routers based on an underlying transport network, wherein said establishing comprises running an overlay management protocol to exchange information within the overlay domain; in accordance with the overlay management protocol defining service routes that exist exclusively within the overlay domain wherein each overlay route includes information on at least service availability within the overlay domain; and selectively using the service routes to control routing between the overlay edge routers; wherein the said routing is through the underlying transport network in a manner in which said overlay routes is shared with the overlay edge routers but not with the underlying transport network via the overlay management protocol.

Abstract: A method for creating a secure network is provided. The method comprises establishing an overlay domain to control routing between overlay edge routers based on an underlying transport network, wherein said establishing comprises running an overlay management protocol to exchange information within the overlay domain; in accordance with the overlay management protocol defining service routes that exist exclusively within the overlay domain wherein each overlay route includes information on at least service availability within the overlay domain; and selectively using the service routes to control routing between the overlay edge routers; wherein the said routing is through the underlying transport network in a manner in which said overlay routes is shared with the overlay edge routers but not with the underlying transport network via the overlay management protocol.