Abstract: A method includes encapsulating, by a first virtual switch, a packet from a first virtual machine (VM) into a tunneled packet by appending the packet with a tunnel header that is addressed for a second virtual switch, wherein the packet includes a first destination address for a virtual default gateway. The first virtual switch forwards an inner packet of the encapsulated packet to a second VM. The first virtual switch acts as a virtual default gateway based on replacement of a first destination address for the virtual default gateway with a second destination address for the second VM.

Abstract: Techniques are describe for establishing an overall label switched path (LSP) for dynamic load balancing of network traffic being sent across a network using the a resource reservation protocol such as Resource Reservation Protocol with Traffic Engineering (RSVP-TE). The tunnel may be a single RSVP-TE Label Switched Path (LSP) that is configured to automatically and dynamically load balance network traffic across different sub-paths of the RSVP-TE LSP over the network. The ingress device of the overall multi-path LSP can analyze traffic statistics to determine when a network traffic demand differs from a currently reserved bandwidth of the overall multi-path LSP by at least a threshold amount, and can automatically add or remove a sub-path from the overall multi-path LSP to adjust capacity of the overall multi-path LSP to correspond to the currently reserved bandwidth.

Abstract: A method is provided in one embodiment and includes receiving at a network element an encapsulated packet and determining whether both an ECMP/LAG Existing (“ele”) flag and an Entropy Label Capability (“elc”) flag are set for an egress node of the packet in a Label Distribution Protocol (“LDP”) database of the network element. If both the ele and elc flags are set for the egress node of the packet in the LDP database, the method further includes determining whether the network element is an ingress node for the packet and, if the network element is the ingress node for the packet, pushing an Entropy Label (“EL”) and an Entropy Label Indicator (“ELI”) onto an MPLS stack of the packet.

Abstract: A system and methodology for adaptive selection of multiple modalities for authentication in different operating environments, thereby making authentication strategy unpredictable so to significantly reduce the risk of exploitation by authentication-guessing attacks. The system calculates trustworthiness values of different authentication factors under various environmental settings, and combines a trust-based adaptive, robust and scalable software-hardware framework for the selection of authentication factors for continuous and triggered authentication with optimal algorithms to determine the security parameters of each of the authentication factors. A subset of authentication factors thus are determined for application at triggering events on-the-fly, thereby leaving no exploitable a priori pattern or clue for hackers to exploit.

Abstract: A method for handling transmission of error indication messages in a communication network is provided. A destination computer associated with a destination address receives a user data packet from a source computer associated with a source address. A determination is made as to whether a destination identifier included in the user data packet is known. If it is determined that the destination identifier is known, then the user data packet is transmitted to a destination associated with the destination identifier. Else, the transmission of the first error indication message is delayed and the transmission of subsequent error indication messages is paced if subsequent user data packets received from the source computer include the unknown destination identifier.

Abstract: A distributed data warehouse system maintains data blocks on behalf of clients, and stores primary and secondary copies of data blocks on different disks or nodes in a cluster. The data warehouse system may back up data blocks in a key-value backup storage system. In response to a query targeting a data block previously stored in the cluster, the data warehouse system may determine whether a consistent, uncorrupted copy of the data block is available in the cluster (e.g., by applying a consistency check). If not (e.g., if a disk or node failed), the data warehouse system may automatically initiate an operation to restore the data block from the backup storage system, using a unique identifier of the data block to access a backup copy. The target data may be returned in a query response prior to restoring primary and secondary copies of the data block in the cluster.

Abstract: A HEMS (200) connects to a plurality of devices furnished to a consumer's residence, and performs control relating to power management of the plurality of devices. The HEMS (200) is provided with a controller (240) for transmitting control information for the purpose of respective control of the plurality of devices, respectively to the plurality of devices on the basis of a predetermined cycle. The controller (240) classifies the plurality of devices into a plurality of groups, transmitting the control information to devices respectively classified into the plurality of groups, at different timing for each group.

Abstract: A method of simplifying the implementation of Synchronous Ethernet on an Ethernet device having a first port and a second port device using a predetermined protocol and signaling, comprises delivering a master clock from a Synchronous Ethernet system to the first port of the Ethernet device; transmitting the delivered master clock to the second port of the Ethernet device independently of the protocol and signaling of the Ethernet device; and transmitting the master clock from the second port of the Ethernet device to a downstream device that supports Synchronous Ethernet. In one implementation, the Ethernet device has a local clock, and the method synchronizes the local clock to the master clock. In another implementation, the Ethernet device does not have a local clock, and the master clock is transmitted from the second port of the Ethernet device to the downstream device without any synchronizing operation at the Ethernet device.

Abstract: A request is received from a consumer of services to consult with a service provider having a service provider profile that satisfies at least some attributes in a set of attributes that define a suitable service provider; an available service provider satisfying at least some of the attributes in the set of attributes is identified; and a communication channel is provided to establish a communication between the consumer of services and the identified service provider.

Abstract: Decode and forward buffer aided relay selection and transmission power allocation systems and method are provided for cognitive radio network that is equipped with multiple-input-multiple-output (MIMO). A low complexity MIMO-based relay selection scheme that maximizes the single-hop normalized sum rate of the primary network (PN) and secondary network (SN) is proposed including a sub-optimal antenna transmission power allocation scheme that maximizes the single-hop normalized sum rate of the PN and the SN is proposed. For power optimization, first, optimal expressions for the transmission power per antenna of both the PN and SN nodes are derived separately. The derived expressions are then used in an iterative algorithm to produce a near-optimum solution that maximizes the normalized sum rate per time slot.

Abstract: A human-machine interface system is disclosed. The system includes a user interface configured to receive a user input wherein the user input includes network access credentials and a processing system configured to determine a total number of bytes to represent the wireless network access credentials, wherein the determining is based on the length of the wireless network access credentials, and wherein the processing system is further configured to determine a total number of a user datagram (UDP) packets based on the total number of bytes. The system further includes a machine interface configured to program the total number of UDP packets, wherein at least a portion of each of the UDP packets is based on the wireless network access credentials.

Abstract: A system, method, and computer program product are provided for planning distribution of one or more network resources in a Network Function Virtualization based (NFV-based) communication network. In use, at least one Virtual Network Function (VNF) instance of a VNF is migrated between processing units in a NFV-based communication network, according to a change of load. Further, a lack of at least one network resource associated with at least one network node is reported for planning distribution of one or more network resources in the NFV-based communication network, the missing network resource at least partially limiting migration of one or more VNF instances.

Abstract: Methods and systems for supporting efficient load balancing among a plurality of switches and a plurality of end nodes arranged in a tree topology in a network environment. The methods and systems can sort the plurality of end nodes, wherein the plurality of end nodes are sorted in a decreasing order of a receive weight. The method and system may further route, in the decreasing order of receive weights, the plurality of end nodes, wherein the routing comprises selecting at least one down-going port and at least one up-going port. Further, the method and system can increase an accumulated downward weight on each selected down-going port by the receive weight of the routed end node, and increase an accumulated upward weight on each selected up-going port by the receive weight of the routed end node.

Abstract: In one embodiment, a method includes: receiving, in a first device of a first segment of a first network, a root seed from a second device; generating a pseudo-random seed tree using the root seed; according to a predetermined schedule, accessing at a first time a random number at a level of the pseudo-random seed tree associated with the first time; generating a rendezvous point record to enable communication with a third device in a second segment of the first network, the rendezvous point record including a rendezvous point name based on the random number; and encrypting and sending a message to the third device via an exchange server identified using the rendezvous point record, where the rendezvous point record does not include connection metadata and the exchange server has an anonymous network location.

Abstract: A DMX512 network may include two gateway devices or two ports of a single gateway device, which are connected to a number of DMX512 devices. Under normal operating conditions, one gateway device or one port transmits and the other gateway device or the other port receives DMX512 frames. If there is a connection failure, then both gateway devices or both ports may transmit DMX512 frames. Once the connection is restored, the system may detect the restoration and one of the gateway devices or one of the ports ceases to transmit DMX512 frames.

Abstract: Identifying suspicious activity in utilizing a load testing service can include establishing an amount of domain calls to a domain, modifying the amount, and blocking domain calls exceeding the amount.

Abstract: An information exchange system includes a mobile electronic device and a stationary electronic device. The mobile electronic device generates a transient or mobile information cloud around the user and includes a range selector module associated that receives input from the user regarding a physical range to extend the mobile information cloud around the user. The stationary electronic device generates a stationary information cloud. At an intersection of the mobile information cloud and the stationary information cloud, information is exchanged between the mobile electronic device and the stationary electronic device.

Abstract: Techniques are described for providing robust control plane asserts in a network using Protocol Independent Multicast (PIM) or other routing protocols for controlling delivery of multicast traffic. In one example, a router includes a control unit having a hardware-based processor executing a Protocol Independent Multicast (PIM) protocol. The control unit, when executing the PIM protocol, initiates an election process for selecting, from a plurality of routers, a forwarding router to forward multicast traffic to a shared media computer network. In addition, the control unit determines whether the multicast traffic has been received by the router and outputs, in association with the election process, a PIM assert message that includes an indication as to whether the router has successfully received the multicast traffic.

Abstract: Systems and methods for controlling a plurality of devices in a home automation system may include providing a device proxy for a device connected to the home automation system and setting a new value in a value box of the device proxy, whereby the value box corresponds to at least one of a sensor, control, and metadata of the device. The systems and methods may further include determining one or more rules associated with the device proxy and running the determined one or more rules, whereby the determined one or more rules are indicative of interactive relationships between the device proxy and one or more other device proxies corresponding to one or more other devices connected to the home automation system.

Abstract: Systems and methods for configuring security policies based on security parameters stored in a public or private cloud infrastructure are provided. According to one embodiment, security parameters associated with a first network appliance of an enterprise, physically located at a first site, are shared by the first network appliance with multiple network appliances of the enterprise by logging into an shared enterprise cloud account. The shared parameters are retrieved by a second network appliance of the enterprise, physically located at a second site, by logging into the shared enterprise cloud account. A VPN client configuration is automatically created by the second network appliance that controls a VPN connection between the first and second network appliances based on the shared parameters. The VPN connection is dynamically established based on the shared parameters when the VPN client configuration permits network traffic to be exchanged between the first and second network appliances.

Abstract: Disclosed herein are methods and devices for sharing a packet data protocol (PDP) context among a plurality of devices. For example, a method or sharing a PDP context among a plurality of devices may include a wireless transmit/receive unit (WTRU) sending a request to establish or modify a PDP context. The request to establish or modify the PDP context may include an indication that the WTRU is a member of shared context group. The method may also include the WTRU receiving a response indicating that the request to establish or modify the PDP context was accepted. The method may also include the WTRU acting as a gateway for at least one other device in the shared context group. The request to establish or modify the PDP context may be an attach request. The indication that the WTRU is a member of shared context group may be a group identifier (ID).

Abstract: An example method for simultaneously supporting, on a single VIC adapter (i.e. on a single network interface), RDMA transport according to multiple RoCE versions is disclosed. The method includes providing the VIC adapter with an indication of a RoCE version used for a particular RDMA connection between two compute nodes identified by a certain QP identifier, and then automatically configuring Egress (EG) packet classifier and flow table of the VIC adapter to encapsulate outgoing RDMA commands and automatically configuring Ingress (IG) packet classifier and flow table of the VIC adapter to decapsulate incoming RoCE packets for that RDMA connection according to the indicated RoCE version. Automatic encapsulation and decapsulation according to any one of the multiple RoCE versions that may be used for a particular RDMA connection, i.e. on a per-QP basis, advantageously allows co-existence of routable (i.e. RoCEv2) and non-routable (i.e. RoCEv1) RDMA solutions on a single network interface.

Abstract: A method for actuating loads connected to a bus system, in particular lamp operating devices, by at least one command generator which is likewise connected to the bus system. The actuation is carried out by the transmission of data packets, wherein the command generator fills a data packet region assigned to the command generator after the data packet transmission is initiated by a central clock generator.

Abstract: Provided are a method and a device for transmitting an acknowledgement/not-acknowledgement (ACK/NACK) of a terminal which is set with a plurality of serving cells. The method comprises the steps of: receiving data in a subframe n of a second serving cell; and transmitting an ACK/NACK signal for the data in a subframe n+kSCC(n) of a first serving cell connected to the subframe n of the second serving cell, wherein the first serving cell is a primary cell for the terminal to execute an initial connection establishment procedure or a connection reestablishment procedure, and uses a frequency division duplex (FDD) wireless frame, the second serving cell is a secondary cell allocated to the terminal in addition to the primary cell, and uses a time division duplex (TDD) wireless frame, and the kSCC(n) is a previously determined value.

Abstract: In some embodiments, a method comprises displaying a pre-registration invitation on a first digital device connected to a wireless network, determining one or more wireless network identifiers associated with the wireless network, generating a pre-registration code request, the request including the one or more wireless network identifiers, providing the pre-registration code request to a virtual network server, the server generating a pre-registration code in response to the pre-registration code request, the pre-registration code associated with the one or more wireless network identifiers, receiving the pre-registration code, providing a registration request from a second digital device, the registration request comprising the pre-registration code, and provisioning an account based on the registration request and the wireless network identifiers, the wireless network identifiers identified based on the pre-registration code.

Abstract: A system and method are described for calibrating a clock used in data transmission. In one example, dynamic phase adjustment circuitry can be used for any of a variety of different protocols to shift the clock phase with respect to a data signal. In the most typical example, the clock phase is shifted 90 degrees relative to a transmission data signal. The dynamic phase adjustment circuitry can use two cascaded programmable delay lines coupled in series. Each programmable delay line represents a half phase delay of 90 degrees. A controller can monitor an output of the programmable delay lines and incrementally add or subtract programmable delay line elements until a 180 degree phase is detected relative to a data transmission. An output clock can then be used by applying the result of the calibration delay element to the clock under discussion.

Abstract: A control apparatus, includes a first unit configured to be capable of specifying an identification rule to identify a packet based on a user of a virtual network including a plurality of virtual nodes; and a second unit configured to be capable of sending an instruction to a physical node corresponding to each of the virtual nodes of the virtual network, wherein each of the virtual nodes includes a predetermined network function being capable of providing a first packet operation to the packet, wherein the instruction includes that the physical node provides a second packet operation to the packet so as to emulate the first packet operation.

Abstract: A method is provided in one particular example and may include obtaining routing information for a plurality of Internet Protocol (IP) addresses in a first network that natively supports a first Internet protocol, the routing information for the plurality of IP addresses in the first network further comprising an additional IP address in the first network and an indication that the additional IP address in the first network is to be used as a tunnel endpoint within the first network for receiving data destined to any of the plurality of IP addresses in the first network; and sending data destined to any one of the plurality of IP addresses in the first network to the additional IP address in the first network.

Abstract: In various systems and methods, there can be received a request for a network service. A query for the network service can be formulated based on the request. A remote access device can be instructed to interrogate remote devices coupled to the remote network access device for the network service. Access parameters related to the network service can be received in response to the interrogation. The user device can be configured to access the network service based on the access parameters.

Abstract: Disclosed are a multi-connection system (MCS) and method for a service using an Internet protocol.

Abstract: An apparatus is provided for implementation of a system for assessing traffic through a multiple stage switch network. The apparatus may receive an indication of traffic to be routed through a multiple stage switch network configured to route the traffic from one or more input ports to one or more output ports according to a type of the traffic. The apparatus may calculate a network resource requirement of the traffic based on the input port(s), output port(s) and type of the traffic. Here, the network resource requirement may be calculated according to an algorithm specific to the type of the traffic, but generalized to any specific route of the traffic through the multiple stage switch network. And the apparatus may assess the traffic based on a comparison of a capacity of the multiple stage switch network, and the network resource requirement of the traffic.

Abstract: A first communication unit communicates with a first communication terminal device by using a first communication scheme. A second communication unit communicates with a second communication terminal device by using a second communication scheme capable of communication over a longer distance than the first communication scheme. A search instruction communicating unit communicates a search instruction to the second communication terminal device via the second communication unit, the search instruction including an identifier identifying a first communication terminal device, and instructing the second communication terminal device to search for the first communication terminal device by using the first communication scheme.

Abstract: Systems, methods, and non-transitory computer-readable storage media for forwarding tables for virtual networking devices. The system first identifies local virtual machines hosted on a local host connected to the system, the system having virtual tunneling capabilities. The system then generates a forwarding table for the system. Next, the system populates the forwarding table with local entries including bindings for the local virtual machines hosted on the local host and adds a default route in the forwarding table pointing to a default forwarder function, wherein the default route is configured to handle all non-local traffic relative to the system and the local host.

Abstract: An apparatus and method for providing minipacket flow control. A device includes a traffic manager interface (TMI) circuit that receives a minipacket, communicates the minipacket to a physical layer circuit, and communicates a minipacket flow control signal to a scheduler circuit that controls if another minipacket is to be sent to the TMI circuit. In one example, upon receiving a minipacket the TMI circuit updates a current credit value, compares the current credit value with a credit limit value, and outputs a minipacket flow control signal that is a function of the comparison. In another example, upon receiving a minipacket the TMI circuit updates a current credit value, compares the current credit value with a credit limit value, reads and compares a credit pool value with a credit pool limit value, and outputs a minipacket flow control signal that is a function of both of the comparisons.

Abstract: In a system and method for accessing messages in a data store in a gateway, a data frame request, which is a structured SQL query, is received at the gateway. The received data frame request is applied to the gateway data store, which stores messages. A data frame is generated that comprises messages from the data store that are responsive to the received data frame request, the data frame having a format that is readable by a character editor.

Abstract: Provided are a method and device for negotiating a traffic path in an LAG, wherein the method includes that an aggregation port acquires indication information, wherein the indication information is used for indicating one or more groups of services or sessions needing to be borne by the aggregation ports, each group of the services or sessions includes one or more services or sessions; the aggregation port determines multiple groups of services or sessions to be borne, and/or services or sessions currently being borne by the aggregation port; an aggregation group portal to which the aggregation port belongs, performs traffic distribution according to services or sessions currently being borne by each aggregation port which belongs to the aggregation group portal. It is solved the problem in the related art that the same service or session cannot be transmitted bi-directionally on the same path, thus implementing the protection on the interconnect interface.

Abstract: A heterogeneous network system, network apparatus, and rendezvous path selection method thereof are provided. The heterogeneous network system includes partner network apparatuses and a network apparatus. The transceiving interfaces of the network apparatus and the partner network apparatuses are not all the same. The network apparatus measures at least one first transmission parameter and receives a plurality of second transmission parameters. Each of the at least one first transmission parameter is associated with transmission from the network apparatus to one of its neighboring network apparatuses. Each of the second transmission parameters is associated with transmission between two network apparatuses neighboring each other. The network apparatus enumerates a plurality of paths from itself to a target network apparatus and calculates a path cost for each of the paths according to at least a portion of a combination of the at least one first transmission parameter and the second transmission parameters.

Abstract: In one embodiment, a router located at an exit edge of an autonomous system (AS) receives a data packet in a data plane, and determines a destination of the data packet and an associated AS-path information to the destination. The router may then insert the AS-path information into the data packet, and forwards the data packet with the AS-path information toward the destination, such that a receiving device in a destination AS can validate whether the data packet was routed through a path that was secure from a control plane perspective based on a collection of one or more insertions of AS-path information.

Abstract: A communication system contains a control apparatus and switch(es). The control apparatus transmits, to a switch, two or more flow entries having an identical match condition but having different processing content to be applied, and a condition for changing application priorities of the two or more flow entries. The switch holds the two or more flow entries, and switches the application priorities in accordance with the condition specified by the control apparatus, to process received packet(s).

Abstract: A plurality of network nodes, under the control of a network controller, are configured to perform a method to direct packets in a packet flow from a source to a destination. In one embodiment, the network controller transmits an instruction to a first node in a network instructing the first node to transmit a first packet in the packet flow along a first route from the source to the destination, the first route having a first delay. The network controller also transmits an instruction to a node in the network to transmit a second packet in the packet flow along a second route different from the first route, the second route having a second delay, the second delay having a duration less than a duration of the first delay. The network controller further transmits an instruction to a node in the second route to delay the second packet in order to delay arrival of the second packet at the destination.

Abstract: The present invention relates to wireless communications. More especially it relates to wireless packet data communications. Particularly it relates to latency reduction by distinguishing connection initiation of circuit switched and packet switched connections, respectively.

Abstract: A packet processing block. The block comprises an input for receiving data in a packet header vector, the vector comprising data values representing information for a packet. The block also comprises circuitry for performing packet match operations in response to at least a portion of the packet header vector and data stored in a match table, and circuitry for performing one or more actions in response to a match detected by the circuitry for performing packet match operations and according to information stored in an action table. Each of said match table and said action table comprise one or more memories selected from a pool of unit memories, wherein each memory in the pool of unit memories is configurable to operate as either a match memory or an action memory.

Abstract: In a mesh network composed of multiple-radio nodes, we assign each radio to one of a plurality of channels, and treat a plurality of links between a pair of nodes as one logical link (bonded link). In some embodiments, the routing protocol is adapted to view each bonded link as one link having a combination of at least some of the properties of the constituent physical links. Traffic sent along a path is dynamically load balanced between the interfaces at each intermediate node based on the current utilization of each interface. In at least some embodiments, route discovery packets record the metrics of each component link of the bonded links leaving a node, but only one route discovery packet per pair of nodes is forwarded, reducing the route discovery packet traffic compared to if each route discovery packet were forwarded over each component link between the pair of nodes.

Abstract: Various exemplary embodiments relate to a method and related network node including one or more of the following: receiving, at the network node, a packet including a destination address of the packet; resolving the destination address of the packet to a first address of a first receiving node; identifying a second address of a second receiving node as being associated with the first address; and transmitting the packet to both the first address and the second address.

Abstract: Some embodiments provide a managed network for implementing a logical switching element. The managed network includes several managed edge switching elements that are each for (1) receiving packets for forwarding through the logical switching element and (2) forwarding packets that are known to the managed edge switching element to other managed edge switching elements in the several managed edge switching elements. The managed network includes a set of managed non-edge switching elements for (1) receiving packets from the several managed edge switching elements that are unknown to a particular managed edge switching element in the several managed edge switching elements and (2) forwarding packets to the several managed edge switching elements that are unknown to the several managed edge switching elements.

Abstract: Method and system for providing distributed domains in a fiber channel fabric including determining a domain configuration of a resource, retrieving one or more current domain configuration parameters, determining a list of domains in a fiber channel fabric, and generating an updated domain list for the resource in the fabric is disclosed.

Abstract: Methods and systems for providing quality of service over IP networks are disclosed. In one aspect, a flow label field of a header may be divided into first and second portions. The first portion defines a quality of service. The second portion identifies a message flow. Once the first portion defining the quality of service is established by the sending node, no nodes in the transmission path may change the quality of service value. Each node may route packets based on the quality of service field, or may modify the traffic class field of the header based on the quality of service and then route the packet based on the traffic class field. The QoS field can be used to complement a DSCP/traffic class field and provide a better mechanism for end-to-end QoS using IPv6. A service provider can use DSCP within its own administrative domain(s), and end users can set and maintain QoS using the methods described herein, thereby providing a framework for end-to-end QoS using IP packets.

Abstract: Systems and methods are disclosed for securing a network, for admitting new nodes into an existing network, and/or for securely forming a new network. As a non-limiting example, an existing node may be triggered by a user, in response to which the existing node communicates with a network coordinator node. Thereafter, if a new node attempts to enter the network, and also for example has been triggered by a user, the network coordinator may determine, based at least in part on parameters within the new node and the network coordinator, whether the new node can enter the network.

Abstract: A system for efficient routing of an OAM) frame in an Ethernet switch receives an OAM frame at a first port; building a first classification key dependent on an OAM frame header; classifies in a context of the first port to create a first classification; resolves action dependent on the first classification; modifies the first classification key to create a second classification key; classifies the frame in a context of the second port to create a second classification; sends the second classification key to an OAM engine coupled to the Ethernet switch for modification into a third classification key; receives the third classification key from the OAM engine; modifies the third classification key into a final classification key; modifies the header of the OAM frame with the final classification key; and sends the modified OAM frame to a switching fabric of the Ethernet switch.

Abstract: A method and system for communicating between a first item of equipment and one or more other items of destination equipment implemented through a communication network, each item of equipment being identified on the communication network via an identifier based on its geographical coordinates. The method includes dispatching a message via the first item of equipment to each destination item of equipment, the message being in accordance with a determined communication protocol and including a first item of information defining a zone of influence corresponding to a determined geographical zone with respect to which each item of destination equipment determines whether the message is relevant to it.