Abstract: A method of avoiding cache corruption when establishing a network connection includes the steps of transmitting a request to a computing device, where the request includes a masquerade layer-3 address, and receiving a reply transmitted by the computing device in response to the request, where the reply includes a MAC address associated with the computing device. Since the masquerade layer-3 address is unique relative to the computer network, computing devices within the network do no overwrite existing layer-3-to-MAC relationships in their respective caches with the layer-3-to-MAC relationship reflected in the request. Thus, the method enables a network connection to be initiated between two computing devices in the same computer network while avoiding neighbor cache pollution on other computing devices in that network.

Abstract: A method for establishing a network connection between two computing devices within the same computer network includes the steps of generating a masquerade IP address request, where the masquerade IP address request includes a masquerade MAC address, transmitting the masquerade IP address request to a DHCP server, and receiving a masquerade IP address from the DHCP server. The masquerade IP address is then used as the sender's IP address in an ARP broadcast request transmitted to set up the network connection. Since the masquerade IP address is unique relative to the computer network, computing devices within the network do no overwrite existing IP-to-MAC relationships in their respective ARP caches with the IP-to-MAC relationship reflected in the ARP broadcast request. Thus, the method enables a network connection to be initiated between two computing devices in the same computer network while avoiding ARP cache pollution on other computing devices in that network.

Abstract: The present invention provides methods and apparatus for controlling cellular access to data services from a mobile device such as a cellular telephone or PDA. The wireless network monitors IP traffic to and from the mobile device. Attempts to access an data service are checked to determine whether the requested access is authorized. Access to the data service is granted subject to the authorization. Access to the mobile device from external sources is also restricted.

Abstract: An address resolution system is provided where network devices are arranged to share a common public network address in a public network environment. The address resolution system includes: an address resolution table residing at a router and configured to store a public network address and a source port assigned to each network device registered with the router in connection with a hardware address that uniquely identifies each of the registered network devices; a port management agent residing on a given network device that is configured to receive a request to assign a source port to an application residing on the given network device and transmit the assignment request to the router; and an address resolution service residing at the router that is configured to query the address resolution table in response to the assignment request from the agent and transmit a reply to the agent based on results from the query of the address resolution table.

Abstract: A local network connecting system includes a first local network, a second local network, a mobile terminal. The first local network is connected with a gateway and a first server assigned with a first local address. The second local network is connected with a second server. The mobile terminal VPN “Virtual Private Network”-connect to the second server through the first local network. The gateway provide mapping of local address for a terminal connected to the first local network. When a packet is sent to the first server from mobile terminal, the mobile terminal assigns a second local address unused over the VPN-connection to a destination address of the packet instead of the first local address, and transmits the packet to the gateway. The gateway translate the second local address into the first local address as destination address of the packet, and transmits the packet to the first server based on the translated destination.

Abstract: An information messaging and collaboration system is described. In one embodiment, for example, a method is described for interactive content retrieval and display, the method comprises steps of: providing a plurality of portlets for retrieval of content for display in a user interface; mapping a message action to a first portlet to create a messaging portlet for sending a message in response to user interaction with the messaging portlet; creating a listener portlet by registering a second portlet to receive messages from the messaging portlet; and in response to user interaction with the messaging portlet, retrieving particular content for display in the user interface based on the message received by the listener portlet from the messaging portlet.

Abstract: A method for avoiding the IP address conflict includes the following steps. First, once the router obtains an IP address as its WAN IP address, the network bits of the WAN IP address and the network bits of an IP pool of the router are retrieved. Then, it follows to determine whether the network bits of the WAN IP address is identical to that of the IP pool, and if yes, modify the network bits of the IP pool together with a LAN IP address of the router to be different from that of the WAN IP address. After that, an instruction is transmitted to the client terminals associated with the router. Upon reception of the instruction, the client terminals replace the old IP addresses with the new IP addresses assigned from the router in accordance with Dynamic Host Configuration Protocol.

Abstract: A system and method are provided for implementing a web server on a mobile station. A first mobile station may include a database of information. A network address for the first mobile station may be transmitted to a second mobile station to enable the second mobile station to communicate with the first mobile station directly over a wireless network. The second mobile station may then be provided access to the database of information by communicating directly over the wireless network with the first mobile station, wherein the first mobile station operates as the wireless server for the second mobile station.

Abstract: A network switch automatically detects undesired network traffic and mirrors the undesired traffic to a security management device. The security management device determines the source of the undesired traffic and redirects traffic from the source to itself. The security management device also automatically sends a policy to a switch to block traffic from the source.

Abstract: An approach provides interdomain traversal to support packetized voice transmissions. A request is received and specifies a directory number for establishing a communication session from a first endpoint to a second endpoint. The first endpoint is behind a first network address translator of a first domain, and the second endpoint is within a second domain. A service provider network is accessed to determine a network address for communicating with the second endpoint based on the directory number, to determine existence of a second network address translator within the second domain, and to establish, if the network address can be determined, a media path between the first endpoint and the second endpoint based on the network address to support the communication session. An encrypted session is established with a proxy server according to a cryptographic protocol to support the media path. The proxy server resides within the second domain.

Abstract: A frame switching device includes a plurality of ports sending a sending frame and receiving a receiving frame; an address entry memory storing an address entry; a flooding processor executing flooding process; a flooding determination unit determining whether the flooding occurrence for the address satisfies a predetermined condition; a notification transmitting unit transmitting a searching frame; a notification receiving unit for receiving a predetermined notification for the address entry related to the address in flooding occurrence from an other frame switching device; and an address entry registration unit registering the address entry in the address entry memory.

Abstract: Disclosed is a method for configuring a bitmap in a mobile communication system employing a block ACK scheme, which faithfully performs its intrinsic function of acknowledging a reception result, and yet can reduce transmission delay and the overall system load due to retransmission in the case where packet loss is relatively less important than transmission delay time, such as in the case of voice communication. To this end, a recipient compares a PER of a received packet signal with a threshold value. If the PER is higher than the threshold value, the recipient operates in the block ACK scheme, and if the PER is lower than the threshold value, the recipient determines a bitmap configuration scheme on the assumption that an erroneous frame has been successfully received. Also, using the determined bitmap configuration scheme, the recipient transmits a reception result for each received packet.

Abstract: Systems and methods are disclosed for enabling an embedded media terminal adapter (EMTA) with included MIB objects to redirect a received telephone call. Based on the MIB objects, the EMTA communicates with a cable modem termination system (CMTS) to set up two service flows where one flow is set up between two EMTAs and one flow is set up between the endpoint EMTA and the NOC.

Abstract: A management apparatus instructs a wireless terminal wirelessly connecting to a first base station to switch wireless connection to a second base station. After the wireless terminal switches the wireless connection to the second base station as instructed, the wireless terminal transmits a message for updating information used for determining a forwarding destination of the message received by the relay apparatus. The relay apparatus updates the information used for determining the forwarding destination of the received message based on the message transmitted from the wireless terminal.

Abstract: Techniques are described for providing managed virtual computer networks that have a configured logical network topology with virtual networking devices, such as by a network-accessible configurable network service, with corresponding networking functionality provided for communications between multiple computing nodes of the virtual computer network by emulating functionality that would be provided by the virtual networking devices if they were physically present.

Abstract: Embodiments of the invention provide a method and a system for obtaining home agent information of a mobile node. The method includes: when a DHCPv6 server receives a request message from a mobile node, it obtains the home agent information of the mobile node; the DHCPv6 server includes the home agent information into the response message, and sends the response to the mobile node. With embodiments of the present invention, a mobile node may obtain its home agent information (such as its home agent address information) simultaneously when it requests related information. When the request message is a home address request message or a care-of address request message, the invention provides a clearly defined process for a mobile node to obtain home agent information when it is started up on a home link or foreign link. The invention avoids a special message interaction procedure to obtain home agent information.

Abstract: A network switch includes a look-up engine for obtaining associated data in response to a header portion of a packet and an interlinked network processor such as a RISC for performing a processing function on the header portion or the associated data. Both look-up engine and the network processor may modify a destination port bitmask. The network processor may implement additional packet header processing required for replication or server load balancing.

Abstract: The present invention provides a LAN device 20 having an internal function of controlling communication. A management representative of the LAN device 20 sets a protocol applicable for communication with regard to each of MAC addresses or IP addresses allocated to transmitter terminals and each of IP addresses allocated to receiver terminals. The LAN device transmits data in the case of the protocol applicable for communication, while not transmitting data in the case of any protocol inapplicable for communication.

Abstract: MIP forwarding methods are described that use additional access link-layer identifiers and redirecting data packet identifiers to provide unambiguous forwarding through the MIP Foreign Agent when the Mobile Node has multiple Home Addresses, and/or when the Home Agent, or some intermediate MIP node between the Foreign Agent and the Home Agent, supports multiple pools of home addresses from overlapping address spaces. New identifiers are used to ensure that sufficient forwarding information exists in conjunction with the information in transmitted packets, to uniquely identify each packet flow. Each packet flow is a globally unique quartet of the MN identity, the HA, the HA address pool and the HoA.

Abstract: The present invention provides a method and system for assuring H.323 alias address portability to an H.323 user in real-time H.323 multimedia communications where the H.323 user is registered with a home gatekeeper for the home zone of the H.323 user. Alias address portability may be obtained using a central database that is known to the administrative zones and is used for alias address mapping, or alternatively, may be obtained by using a distributed database. The method may be implemented by: sending, by the H.323 user, a message with a called H.323 entity's alias address, to the home gatekeeper to originate a call to the called H.323 entity; confirming that the alias address, services, and service providers are portable; converting the alias address to a called routable alias address for the called H.323 entity and sending the alias address to the H.323 user; and placing the call to the called H.323 entity.

Abstract: An approach provides interdomain traversal to support packetized voice transmissions. A request is received and specifies a directory number for establishing a communication session from a first endpoint to a second endpoint. The first endpoint is behind a first network address translator of a first domain, and the second endpoint is within a second domain. A service provider network is accessed to determine a network address for communicating with the second endpoint based on the directory number, to determine existence of a second network address translator within the second domain, and to establish, if the network address can be determined, a media path between the first endpoint and the second endpoint based on the network address to support the communication session. An encrypted session is established with a proxy server according to a cryptographic protocol to support the media path. The proxy server resides within the second domain.

Abstract: The present invention filters packets and reduces traffic when communication is performed with a device on a network utilizing the IPv6 protocol. To achieve this, a printer driver operating in a personal computer correlates and stores the name of the communicating party and an address for which communication actually succeeded from among addresses that have undergone name resolution, and uses the stored address in communicating with the same communicating party from then onward.

Abstract: A method for discovering computers connected to a computer network, including receiving a packet containing address information of a computer connected to the computer network that sent the packet, extracting the address information from the packet, and adding the address information to a database of discovered computers connected to the computer network.

Abstract: An ENUM system includes a Web server and an ENUM server. The Web server stores first NAPTR records corresponding to an ENUM client and another ENUM client on an IP network. The ENUM server stores second NAPTR records in which first URIs are associated with predetermined information for being linked to the Web server. In the ENUM system, the ENUM client transmits, to the ENUM server, a query for the second NAPTR record of the another ENUM client. The ENUM client then transmits, to the Web server, a request for access to the first URI included in the received second NAPTR record, and obtains the first NAPTR record corresponding to the another ENUM client.

Abstract: Methods and apparatus for communicating between an access terminal (AT) and an Access Point (AP) are described. For communications over the air link, between an AP and an AT a PN (Pseudo-random Noise) code based address is used as an AP identifier, e.g., address. The PN code based address may be based on Pilot PN code based signals received from an AP. Thus, the PN based AP address may be determined from pilot signals received from an AP. The PN based AP address may be a shortened version of a PN code corresponding to an AP, a full PN code corresponding to an AP, or a value which can be derived in a known manner from a PN code corresponding to an AP.

Abstract: Methods and systems for shielding layer two host addresses (e.g., MAC addresses) from a network are provided. According to one embodiment, a border component of a network of switches receives a first packet intended for a first host having a first L2 address and a first L3 address associated therewith. The first packet includes the first L3 address and a substitute L2 address as destination addresses. The substitute L2 address is associated with a communication channel of the border component. A data structure including information regarding an association between the first L3 address and the first L2 address is accessed by the border component. A determination is made that the destination L2 address for the first packet should be the first L2 address. A first updated packet is derived from the first packet by replacing the substitute L2 address with the first L2 address and sent to the first host.

Abstract: In an example embodiment, a method is provided. In this method, a network address query is received. A first network address of a known apparatus is retrieved from a routing table, in response to the network address query. A second network address may be determined based upon the network address query, the second network address having a smaller bit length than the first network address. An aggregate value may be advertised that represents a range of reachable network addresses, the range of reachable network addresses including the second network address.

Abstract: An identity management system provides for a computationally efficient approach to monitor group changes, or events, on a directory service. Group events are monitored by use of a domain crawler process launched by an event monitoring process of the identity management system that gathers group event data and reports the collected and consolidated changes to the identity management system.

Abstract: An MPOA system for establishing communication by using layer 3 protocol on an ATM network, in which data about the layer 3 address of a source of data packets is added to an address resolution request packet which is transmitted in order to establish a shortcut VCC toward a destination of the data packets in each communication node and hence transmitted to the destination, and in the case of accepting the address resolution request packets to be transmitted in order to establish the respective shortcut VCCs toward the destination of the data packets, as for the same communication, from a plurality of the communication nodes, a shortcut VCC is established only between the destination and the communication node remotest from the destination on the network.

Abstract: An access node comprises an application server, a logical access port coupled to the application server and a redirection filter module coupled to the logical access port. The redirection filter module includes a data redirection filter and an Address Resolution Protocol (ARP) redirection filter. The data redirection filter facilitates a data packet received on the access port being directed to the application server when a destination Media Access Control (MAC) address of the data packet corresponds to a MAC address of the application server or when a destination Internet Protocol (IP) address of the data packet corresponds to an IP address of the application server. The ARP redirection filter facilitates an ARP reply message being issued when a target IP address of an ARP request message received on the access port corresponds to the IP address of the application server.

Abstract: A method is provided for forming a multi-media communication path between at least first, second and third communication devices coupled to a multi-media provider system during post answer call redirecting and/or teleconferencing. The method includes receiving and processing a first call request at a circuit-based portion of the multi-media provider system for forming a first communication link between the first and second communication devices. Thereafter, predetermined attributes of the first communication link may be sent to an IP-based portion of the multi-media provider system for configuring the IP-based portion of the multi-media provider system to process a subsequent request to execute post answer call redirecting and/or teleconferencing.

Abstract: Methods and systems for multicast group address translation are disclosed. A method includes receiving a request for data source content from a multicast group data source content requester and retrieving the data source content from the data source, where the data source content that is retrieved has associated destination addresses. Moreover, the method includes providing access to the data source content for translation of the destination addresses associated with the data source content, where the destination addresses fall within a first range of multicast group addresses. The method further includes receiving packets that have translated destination addresses that prior to translation fall within the first range of multicast addresses. The translated destination addresses fall within a second range of multicast group addresses.

Abstract: A method for service binding includes: identifying a service provider identifier of a terminal and binding the terminal into a corresponding tunnel dependent upon the identified service provider identifier. The present invention implements dynamic binding of a terminal with a service through identifying a service provider identifier of the terminal, which offers more flexible selection of a service by a user, a reduced operation and maintenance cost of an operator, good extensibility of a network service and facilitated deployment of the service.

Abstract: Disclosed is an apparatus and method of client device roaming from a home subnet to a foreign subnet of a network. The method includes the client device accessing the network through a first access node of the home subnet, and the client device roaming to a second access node of the foreign subnet, the client device accessing the network through the second access node, the client device maintaining a fixed client IP address, default gateway IP address and IP subnet attachment as the client device roams from the first access node to the second access node.

Abstract: Methods and apparatus for supporting the management of mobility and addresses by a Customer Premises Edge (CPE) router in a Mobile IP environment are disclosed. When a network prefix is allocated by a DHCP router to the CPE router, the CPE router divides the network prefix among its interfaces, and allocates home addresses to Mobile Nodes connected to its interfaces, as appropriate. The CPE router also assists in performing Duplicate Address Detection (DAD) to ensure that a home address that has been allocated has not already been assigned to another node. Upon completion of registration of a Mobile Node that is connected to one of the interfaces of the CPE router with its Home Agent, the CPE router assists in routing traffic to the Mobile Node. In addition, the CPE router assists in notifying nodes when one of the Mobile Nodes has moved, as well as when one of the Mobile Nodes has de-registered with the Home Agent.

Abstract: An OSGi-based home gateway apparatus and a device register method includes a device detecting unit which detects at least one legacy device which does not load a controllable middleware from a plurality of home devices connected to the home network; an outside network interface which receives drive information of the detected legacy device through the outside network; a bundle creating unit which creates a legacy bundle by combining the input drive information and a predetermined network protocol which can be used in the home network; and a device registering unit which registers the created legacy bundle to the OSGi framework.

Abstract: A method, information processing system, and computer readable medium manage a plurality of network interfaces. A data packet is accepted at a pseudo network interface. The pseudo network interface manages a plurality of underlying physical network interfaces. The pseudo network interface selects selected physical network interface from the plurality of physical network interfaces for outputting the data packet. The data packet is modified to include a hardware address associated with the selected physical network interface in response to the selecting. The data packet that has been modified is forwarded to the physical network interface that has been selected.

Abstract: A portable router for enabling a data communication terminal to be location and device transparent includes: a first module for storing a digital communication address of a user; a second module for detecting a data communication network location to which the terminal is connected; a third module for detecting communication devices that are connected to the terminal; a fourth module for establishing data communication between the terminal and the network such that the communication address of the location from the second module is automatically converted to the communication address of the user from the first module; and a fifth module for automatically selecting a communication device which was detected by the third module for use by the fourth module.

Abstract: A network switch that has a plurality of input ports that receive data packets. An external interface is connected to the plurality of input ports. The external interface externally transmits the data packets for processing, and receives the data packets after processing. A memory management unit is connected to the external interface and a plurality of output ports are connected to the memory management unit.

Abstract: Surveillance of IP telephony may be performed through the use of conventional telephone equipment, according to principles of the invention while preventing giving indication to the monitored phone by alerting the user of the monitoring phone to such surveillance use prior to pick up by an agent for engagement of the monitoring phone in response to the alert. Such alerts may assume many forms such as ringing, visual indicators, data readouts, activating ancillary equipment, various flags, etc. This alert prior to surveillance is distinct from alerts used for normal non-surveillance calls, which the monitoring phone is capable of receiving.

Abstract: To connect arbitrary network communication apparatuses by selecting an appropriate route or identifying an IP address in an environment which includes a network using plural NAT routers, which is hierachically connected through plural NAT routers for distributing private IPs. A network communication apparatus includes: a direct search unit which transmits a direct search request to another network communication apparatus; a route information obtaining unit which obtains route information of the network communication apparatus from a server which holds the route information of the network communication apparatus; and a communication control unit which performs, when the information regarding the other network communication apparatus is obtained upon the direct search request, communication with the other network communication apparatus based on the information, and which performs, when the information is not obtained, communication with the other network communication apparatus, based on the route information.

Abstract: A voice communication system configured over an IP phone system, with which users could establish voice calls between analog telephone devices and IP phones through an IP phone system without changing their conventional usage method is provided. To allow analog telephone devices to be able to login to the IP phone system, the communication mediation device is required to replace an analog telephone device by be an IP phone user in the IP phone system, and to process voice communications by using analog-digital signal conversion. Using the pre-established registration information, thus allowing the IP phone upon only determining the destination telephone number, it is then capable of automatic converting the telephone number to the corresponding IP phone account so as to proceed with a call through the IP phone system.

Abstract: A method and apparatus that operates two bridging protocols in a hybrid bridging node is described. The operation of the two bridging protocols in the hybrid node allows for an incremental transition of a provider bridging network from operating a legacy bridging protocol that shares MAC addresses to a bridging network that operates VPLS and/or PBB bridging protocols. The hybrid bridging node selectively broadcasts unicast packets with unknown MAC addresses from the nodes operating VPLS and/or PBB to nodes operating a legacy bridging protocol.

Abstract: A framework capable of providing transparent handling of network traffic in close proximity networks such as home networks is provided. A single virtual network interface is exposed to users/applications on connected devices. A virtual network interface manager determines available physical network interfaces and switches to a different physical network interface or a different configuration on the same physical network interface in a transparent manner to the communicating application(s). This enables the framework to optimize network communications for the communicating applications, devices, and users based on predefined criteria, application requirements such as different data throughput, or changing environment conditions such as interference. Network communication operations are also simplified for users since they are no longer required to have the necessary knowledge for configuring physical network interfaces manually in response to changing conditions.

Abstract: The invention is directed to providing NDP mediation over an IP interworking VLL. ICMPv6 Neighbor Discovery and Inverse Neighbor Discovery messages are intercepted by provider edge (PE) devices to learn both IPv6 interface addresses and link-layer addresses of customer edge (CE) devices before forwarding the messages to the CE devices, and in some cases after altering the messages to make them more meaningful to the receiving CE devices. In this manner, the CE device interface addresses do not need to be communicated over the LDP control link, as in IPv4 ARP Mediation.

Abstract: A network interworking facility (24) advantageously interworks Ethernet and ATM networks (22, 26) having different protocols to permit the data from in one network to pass to the other and vice versa without the need for the source in to account for the protocol of the destination. Upon receipt of an information frame from the source, the interworking facility forms a second frame of a format compatible with the destination network and including the information payload from the first frame. The interworking facility also maps the destination address incorporated in the origin frame to a corresponding destination address of a format compatible with the destination network to facilitate forwarding of the second frame to the destination.

Abstract: The present invention defines a new protocol for communicating with an offload engine that provides Transmission Control Protocol (“TCP”) termination over a Fibre Channel (“FC”) fabric. The offload engine terminates all protocols up to and including TCP and performs the processing associated with those layers. The offload protocol guarantees delivery and is encapsulated within FCP-formatted frames. Thus, the TCP streams are reliably passed to the host. Additionally, using this scheme, the offload engine can provide parsing of the TCP stream to further assist the host. The present invention also provides network devices (and components thereof) that are configured to perform the foregoing methods. The invention further defines how network attached storage (“NAS”) protocol data units (“PDUs”) are parsed and delivered.

Abstract: A system and method for processing a plurality of requests for multi-media services received at a call control element (CCE) defined on the system from a plurality of IP-communication devices. The system includes at least one Network Routing Element (NRE), a Service Broker (SB), a media sever, a plurality of application servers (ASs) and a plurality of border elements, all of which are coupled to the CCE. The CCE is adapted to receive requests for multi-media services and to generate subsequent requests for the multi-media services, which are communicated to the SB for processing. The subsequent requests can each include a Session Initiation Protocol (SIP) message including a message identifier portion having at least a first predetermined information field and a second predetermined information field. The message identifier portion of the SIP message declares the content and format of the SIP message to a recipient device defined on the system.

Abstract: A method and apparatus that operates two bridging protocols in a hybrid bridging node is described. The operation of the two bridging protocols in the hybrid node allows for an incremental transition of a provider bridging network from operating a legacy bridging protocol that shares MAC addresses to a bridging network that operates VPLS and/or PBB bridging protocols. The hybrid bridging node selectively broadcasts address resolution packets and unicast packets with unknown MAC addresses from the nodes operating VPLS and/or PBB to nodes operating a legacy bridging protocol.

Abstract: A mobile node using Mobile IP is served by a network access server (NAS), wherein the NAS has allocated a care-of address for the mobile node and a home agent has a mobility binding that associates the care-of address with the mobile node's home address. When the mobile node's care-of address is no longer valid, an intermediary server receives a notification messages from a first network element (e.g., the NAS or home agent) and sends a resource management message to a second network element (e.g., the home agent or NAS). In response to the resource management message, the second network element clears at least one resource associated with the mobile node. For example, the NAS may de-allocate the care-of address and the home agent may clear the mobility binding.