Abstract: A device for securely controlling communications among or within computers, computer systems, or computer networks, comprising: (a) a primary access port to which an “owner” computer program, computer, computer system, or computer network is connectable to access shared computer resources; (b) a secondary access port to which a non-owner computer program, computer, computer system, or computer network is connectable to access the shared computer resources; (c) a transfer port to which a shared computer resource is connectable to provide controlled access to that computer resource from computer programs, computers, computer systems, or computer networks connected to the access ports; and (d) a separate physical communication path to and from each access port and each transfer port, where access permissions and restrictions for each communication path are set by the owner of the device through the primary access port.

Abstract: A virtualization infrastructure that allows multiple guest partitions to run within a host hardware partition. The host system is divided into distinct logical or virtual partitions and special infrastructure partitions are implemented to control resource management and to control physical I/O device drivers that are, in turn, used by operating systems in other distinct logical or virtual guest partitions. Host hardware resource management runs as a tracking application in a resource management “ultravisor” partition, while host resource management decisions are performed in a higher level command partition based on policies maintained in a separate operations partition. Host hardware I/O management is implemented in special redundant I/O partitions. Operating systems in other logical or virtual partitions communicate with the I/O partitions via memory channels established by the ultravisor partion.

Abstract: The present invention extends to methods, systems, and computer program products for arbitrating an appropriate back-end server to receive channels of a client connection. Each front-end server in a server farm specifies a back-end server in the server farm that it deems appropriate for receiving channels of a client connection. Each specified back-end server is represented by an arbitration order, for example, a universally unique identifier. A relevant set of potential back-end servers that can receive channels of a client connection is selected according to function configured to minimize performance impact. A load balancing service compares arbitration orders for different back-end servers in the set of potential back-end servers to determine an appropriate back-end server for receiving channels of the client connection.

Abstract: Disclosed is a method of compressing and decompressing an executable file in a mobile communication terminal capable of improving a compression mode of an executable file necessary for an operation of the mobile communication terminal to reduce a booting time of the terminal and to smoothly carrying out a wireless upgrade service. The method of the invention divides storage spaces in which executable files are stored into plural areas depending on properties of the executable files using a scatter loading file and selectively compressing each of the areas.

Abstract: A multiple computer system with hybrid replicated shared memory is disclosed. The local memory (10, 20, . . . 80) of each of the multiple computers M1, M2, . . . Mn is partitioned into a first part (11, 21, . . . 81) and a second part (12, 22, . . . 82). Each of the first parts are identical and each of the second parts are independent. The total memory available to the system is the first memory part plus n times the second memory part, n being the total number of application running multiple computers.

Abstract: A method, system and program product for equitable sharing of a CAM (Content Addressable Memory) table among multiple users of a switch. The method includes reserving buffers in the table to be shared, the remaining buffers being allocated to each user. The method further includes establishing whether or not an address contained in a packet from a user is listed in a buffer in the table, if the address is listed, updating a time-to-live value for the buffer for forwarding the packet and, if the address is not listed, determining whether or not the user has exceeded its allocated buffers and whether or not the reserved buffers have been exhausted, such that, if the user has exceeded its allocated buffers and the reserved buffers have been exhausted, the address is not added to the table and the user is precluded from using any additional buffers in the network switch.

Abstract: An apparatus, system, and method are disclosed for suspending a data access request during serialization reinitialization of a file server. The apparatus includes a request recognition module, an availability module, and a suspension module. The request recognition module recognizes a request to be processed by a file server. The availability module determines if the file server is available. The suspension module suspends the data access request if the file server is not available due to serialization reinitialization. In one embodiment, the suspension module implements a hardware interrupt delay loop to suspend an interruptible data access request, such as an application request. In another embodiment, the suspension module queues a non-interruptible data access request and notifies the operating system, for example, that the non-interruptible request has been initiated.

Abstract: A network device includes one or more processing units and an external memory. Each of the one or more processing units includes a centralized counter configured to perform accounting for the respective processing unit. The external memory is associated with at least one of the one or more processing units and is configured to store a group of count values for the at least one processing unit.

Abstract: A processor communication register (PCR) contained in each processor within a multiprocessor system provides enhanced processor communication. Each PCR stores identical processor communication information that is useful in pipelined or parallel multi-processing. Each processor has exclusive rights to store to a sector within each PCR and has continuous access to read the contents of its own PCR. Each processor updates its exclusive sector within all of the PCRs, instantly allowing all of the other processors to see the change within the PCR data, and bypassing the cache subsystem. Efficiency is enhanced within the multiprocessor system by providing processor communications to be immediately transferred into all processors without momentarily restricting access to the information or forcing all the processors to be continually contending for the same cache line, and thereby overwhelming the interconnect and memory system with an endless stream of load, store and invalidate commands.

Abstract: An architecture, system and method for operating on encrypted and/or hidden information (e.g., code and/or data). The invention enables creators, owners and/or distributors of proprietary code to keep such code inaccessible to users and user-controlled software programs. A memory architecture includes first and second protected memory spaces, respectively storing operating system instructions and a decrypted version of the encrypted information. The first protected memory space may further store a table linking the locations of the encrypted and/or hidden, decrypted information with a decryption and/or authorization key. The system includes the memory architecture and a processor for executing instructions, and the method loads, stores and operates on the encrypted and/or hidden information according to the memory architecture functionality and/or constraints.

Abstract: Data context techniques are described. In an implementation, a method includes determining, by each of a plurality of nodes, whether an item of data contained in a respective node matches one or more items referenced by a context that is broadcast to the plurality of nodes. When the determining results in a match, an indication is emitted by the respective node that identifies a particular one of the items reference by the context.

Abstract: Disclosed is a mechanism and method for object linking. According to an aspect of one embodiment of the invention, name linking information is co-located with the storage object, rather than being stored only at a computer node. By maintaining name liking information with a storage object, that name linking information can still be used to correctly associate an alternate name with that storage object, regardless of configuration changes that move or delete storage objects in the system and regardless of any changes to internal identifiers for that storage object.

Abstract: A method and system for implementing a global name space service. The method may include receiving a file system unique identifier corresponding to a particular file and a human-readable name corresponding to the same file. The method may further include binding the human-readable name to the file system unique identifier, thereby creating a mapping between the human-readable name and the file system unique identifier. The system may include a processor coupled to a memory and to a global name space service manager. The global name space service manager may be configured to receive a file system unique identifier corresponding to a particular file and a human-readable name corresponding to the same file. The global name space service manager may be further configured to bind the human-readable name to the file system unique identifier, thereby creating a mapping between the human-readable name and the file system unique identifier.

Abstract: A system for sharing listeners monitoring events occurring in objects shared by multiple applications each running inside its own virtual machine in a computer system.

Abstract: A cache module (26) at a client computer (12) controls a cache portion (28) on a storage device (24). The cache module communicates with other cache modules at other clients to form a cache community (15). The cache modules store World Wide Web or other content in the cache portions for retrieval in response to requests (32) for content from browsers (30) in the cache community. When the requested content is not available in the cache community, the requested content may be retrieved from an origin server (19) using the Internet.

Abstract: A network switching device, and corresponding method and computer program, comprising an ingress module adapted to receive frames of data from a channel, wherein each frame of data has one of a plurality of classes of service, and to store the data in one or more buffers; and an egress module adapted to exercise flow control on the channel for each of the classes of service when the number of the buffers storing frames of data received from the channel and having the class of service but not yet transmitted from the network switching device exceeds a predetermined threshold for the class of service.

Abstract: A method for locating a free resource involves maintaining an address space containing a plurality of regions, wherein each of the plurality of regions is mapped with a server to obtain a mapping, transmitting a request for the free resource from a client to a request address that belongs to one of the plurality of regions, determining a selected server using the mapping, and directing the request for the free resource to the selected server.

Abstract: An electronic control apparatus such as an ECU of a motor vehicle contains first and second microcomputers, with the first microcomputer having a substantially higher data receiving performance than the second microcomputer. Data for updating a ROM of the second microcomputer, transmitted to the first microcomputer from an external apparatus at a relatively high data rate, are temporarily stored in RAM by the first microcomputer and then transmitted to the second microcomputer at a rate which is appropriate for the receiving performance of the second microcomputer.

Abstract: A management software approach to automatic and dynamic migration of applications running within virtualized process collections while retaining state during the migration operation. Performance metrics are received for a virtualized process collection running in a first logical partition. A threshold value is calculated for the performance metrics. A performance state analysis of the performance metrics is executed to determine whether the calculated threshold value of the performance metrics exceed a maximum or minimum threshold specified in a stack tier policy for the virtualized process collection. A stack tier analysis of the performance metrics is executed to identify any trigger violations and determine a migration action to be taken for the virtualized process collection. Responsive to a determination that the number of identified trigger violations exceeds a trigger violation count, a migration event is generated to migrate the virtualized process collection to a second logical partition.

Abstract: A method for configuration of an Auxiliary Processing Unit (APU) of multiprocessor system is presented. The multiprocessor system has at least a Main Processing Unit (MPU) coupled to the APU via a communication link. The APU has at least a first memory and a second memory. The method includes a plurality of steps. At step the first memory is divided into an application sector, a boot sector and a common sector. At another step interrupts of the APU except interrupt/s that is/are being received via the communication link are disabled. At a further step interrupt vector/s pertaining to the communication link is/are mapped to the boot sector of the first memory. At another step a configuration code is received selectively into the application sector of the first memory and into the second memory. At a further step the interrupt/s that is/are being received via the communication link are disabled. At a further step the common sector of the first memory is updated from the second memory.

Abstract: Method and system for an adapter operationally coupled to a host system and a network is provided. The adapter includes an internal memory that can be configured in a first mode to operate as a dedicated random access memory used by a main processor of the adapter; or configured in a second mode to operate both as a random access memory used by the main processor and also used for storing information received from the network. The method includes enabling the second mode of the internal memory so that the internal memory is configured to operate both as random access memory for the main processor and for storing information received from the network.

Abstract: In a method and apparatus for scalable deduplication, a data set is partitioned into multiple logical partitions, where each partition can be deduplicated independently. Each data block of the data set is assigned to exactly one partition, so that any two or more data blocks that are duplicates of each are always be assigned to the same logical partition. A hash algorithm generates a fingerprint of each data block in the volume, and the fingerprints are subsequently used to detect possible duplicate data blocks as part of deduplication. In addition, the fingerprints are used to ensure that duplicate data blocks are sent to the same logical partition, prior to deduplication. A portion of the fingerprint of each data block is used as a partition identifier to determine the partition to which the data block should be assigned. Once blocks are assigned to partitions, deduplication can be done on partitions independently.

Abstract: A migration source virtual server and a migration destination virtual server respectively include a volume information management unit for associating and managing volume identifying information for identifying the logical volumes and the logical volumes managed by the management OS of the migration source virtual server and the management OS of the migration destination virtual server; an identification unit for the migration source virtual server and the migration destination virtual server to identify the same logical volume as a target logical volume based on the volume identifying information; and a virtual OS migration unit for migrating data in an memory area used by a virtual OS of the migration source virtual server to the migration destination virtual server, and migrating update data in the memory area to be updated during the migration to the migration destination virtual server.

Abstract: Provided are a method, system, and program for distributing application transactions among work servers. Application transaction rates are determined for a plurality of applications supplying transactions to process. For each application, available partitions in at least one server are assigned to process the application transactions based on partition transaction rates of partitions in the servers. For each application, a determination is made of weights for each server including partitions assigned to the application based on a number of partitions in the server assigned to the application. The determined weights for each application are used to distribute application transactions among the servers including partitions assigned to the application.

Abstract: The invention includes a system, apparatus, and method for storing media content within a service provider network. The system includes multi-service servers associated with access points adapted to allow end-user devices to access the service provider network. Each multi-service server includes a common storage partition adapted for storing media content and a plurality of end-user storage partitions adapted for maintaining associations to media content. The system includes media servers that communicate with the multi-service servers for providing media content to the multi-service servers. In response to a request for media content received from one of a plurality of end-user devices, the requested media content stored in the common storage partition is associated with a selected one of the end-user storage partitions associated with the end-user. The request for media content is received in response to end-user directed advertisements received at any of the plurality of end-user devices.

Abstract: A system and method to determine the geographic location of a network user based on a plurality of network addresses and a plurality of mapping request information. The method involves receiving a plurality of mapping requests from a plurality of network users identified by a plurality of network addresses. A geographic location of a network user associated with a network address is then derived based on the plurality of network addresses and the plurality of mapping requests. In one embodiment, the network address is an Internet Protocol (IP) address. The method may be implemented, in one embodiment, as part of a system that executes as software on a computer.

Abstract: Indirect persistent storage of data in a file that is associated with an application program and is capable of having an embedded OLEObject includes creating the OLEObject by way of a Component Object Model add-in that supplements the application program, and using the OLEObject to store the data in the file. The OLEObject is marked so that it is hidden from a user of the application program. After loading a file that was previously saved and closed, the OLEObject is initialized, and the stored data is retrieved. The add-in may be a reporting add-in that queries a database, such as an OLAP database.

Abstract: A method and system are provided for partitioning a file system. The system may include one or more server computer systems and a plurality of physical file systems. The physical file systems may be hosted by the one or more server computer systems. The physical file systems may be accessible to clients through a virtual file system having a single namespace. The virtual file system may include metadata which are partitioned across the plurality of physical file systems. The server computer systems may be configured to independently perform file system consistency checks on each of the physical file systems, in order to independently validate each partition of the metadata.

Abstract: The data path in a network storage system is streamlined by sharing a memory among multiple functional modules (e.g., N-module and D-module) of a storage server that facilitates symmetric access to data from multiple clients. The shared memory stores data from clients or storage devices to facilitate communication of data between clients and storage devices and/or between functional modules, and reduces redundant copies necessary for data transport. It reduces latency and improves throughput efficiencies by minimizing data copies and using hardware assisted mechanisms such as DMA directly from host bus adapters over an interconnection, e.g. switched PCI-e “network”. This scheme is well suited for a “SAN array” architecture, but also can be applied to NAS protocols or in a unified protocol-agnostic storage system. The storage system can provide a range of configurations ranging from dual module to many modules with redundant switched fabrics for I/O, CPU, memory, and disk connectivity.

Abstract: A computing device having partitions, and a method of communicating between partitions, are disclosed wherein each partition comprises at least one address area readable but not writable from the other of the at least two partitions. In one embodiment one partition sends to the other partition a request for information, which information is in the other partition in an address area not accessible to the one partition, the other partition copies the information to an address area accessible to the one partition, and the one partition reads the information from the accessible address area. In another embodiment the at least one accessible address area of each partition includes a data area and a consumer pointer indicating the position to which that partition has read the data area in another partition.

Abstract: In one embodiment, a system and method for proliferating a computing device configuration relates to generating a categorized registry file including at least one registry entry that is categorized relative to a feature of the source computing device to which the at least one registry entry pertains, providing the categorized registry file to a target computing device, determining whether to import the at least one registry entry relative to a category to which the at least one registry entry is related, and importing the at least one registry entry into a registry of the target computing device if it is determined to so import it.

Abstract: A method to write information to two virtual tape servers. The method writes a file to a virtual host device disposed in a first virtual tape server, where the virtual host device comprises an adjustable bandwidth. The method queues a job to copy the file to a second virtual tape server, determines the age of the copy job, and copies that file to the second virtual tape server. The method sets an age threshold, and determines if the copy job age is greater than that age threshold. If the copy job age is greater than the age threshold, then the method decreases the adjustable bandwidth, if not, the method restores the adjustable bandwidth.

Abstract: A method and apparatus for modifying the configuration of a network device, such as a router, using a two-stage configuration model is provided. A first request from a user for a change in configuration of a network device is received. Configuration data associated with the first request is stored. A second request to modify the configuration of the network device to reflect the configuration data is received. An exclusive lock on the network device is assigned to the user preventing other users from modifying the configuration of the network device. The current operational state of the network device is modified to reflect the configuration data, which is then stored in a device configuration database. Users can view configuration history data to view prior configurations of the network device. Multiple users may modify the network device without interfering with one another because conflicts are avoided through use of an exclusive lock.

Abstract: A management computer monitors an allocated capacity of a source virtual volume and an allocated capacity of a virtual pool having a storage area allocated to a destination virtual volume in a storage, judges whether the allocated capacity of the source virtual volume can be covered in the virtual pool or not, and informs the user of a result that data migration fails when the allocated capacity of the source virtual volume cannot be covered. When the allocated capacity of the source virtual volume cannot be covered, the management computer uses another storage area to increase the capacity of the virtual pool. Accordingly, when data migration is performed between the virtual volumes, capacities of physical areas allocated to the source virtual volume and the destination virtual volume can be grasped so that the data migration can be performed accurately between the source virtual volume and the destination virtual volume.

Abstract: A shared memory stores packets for a packet processor. The shared memory is arranged into banks that are word-interleaved. All banks may be accessed in parallel during each time-slot by different requesters. A staggered round-robin arbiter connects requesters to banks in a parallel fashion. Requestor inputs to the arbiter are staggered to allow access to different banks in a sequential order over successive time-slots. Multi-processor tribes have many processors that generate random requests to the shared memory. A slot scheduler arranges these random requests into a stream of sequential requests that are synchronized to the staggered round-robin arbiter. A packet interface requestor stores incoming packets from an external network into the shared memory. The packet's offset within pages of the shared memory is determined by the first available bank that the packet can be written to, eliminating delays in storing incoming packets and spreading storage of frequently-accessed fields.

Abstract: In one embodiment, the invention provides an apparatus for caching data in a network, with the apparatus including a proxy cache configured to receive request for an object from a client and to fetch data blocks from a server. The proxy cache may be configured to cache the data blocks in a hierarchical relationship within the object. The object may be, for example, a data file or a directory. The data blocks that are cached in the proxy cache define an active data set which is based upon a request from a client.

Abstract: An apparatus and method provides the capability of metering temporary capacity on demand in a computer system. A resource-time is specified, such as processor-days. The actual usage of the resource is monitored, and the customer is charged for only the actual usage of the resource. In this manner a customer may purchase a specified resource-time, and is only charged for the time that the resource is actually used. The preferred embodiments extend to metering temporary capacity on demand in a logically partitioned computer system. If a resource is shared, the actual usage of the resource is monitored, and the customer is only billed for actual usage that exceeds a predetermined non-zero threshold.

Abstract: A single chip network controller for interfacing between a physical network and a processing system on the media side of the network controller. The network controller includes a physical layer for receiving data for transmission to the network and encoding the received data for transmission thereto and for receiving data from the network, and for receiving data from the network and decoding the received data. A media layer is provided for interfacing with the processing system for receiving data from the processing system for interface with the physical layer for encoding and transmission thereof and for receiving decoded data from the physical layer and providing access thereto by the processing system. An on-chip non-volatile memory is provided having a first portion associated with configuration information for configuring the operation of the physical layer and the media layer, and a second portion thereof that is accessible by the processing system on the media side of the network controller.

Abstract: Provided are techniques for storing local versions of a data set. A first number that indicates how many local versions of the data set are to be stored in local storage given an amount of available local storage is received. It is determined whether a second number that indicates a total number of local versions of the data set that the local storage is capable of storing exceeds the first number. In response to determining that the second number exceeds the first number, the amount of local storage that is capable of storing the first number of local versions of the data set is used.

Abstract: A system for sharing block data includes a non-removable device for storing block data (e.g. a hard drive) that is networked with a plurality of computers. Each computer can initiate discovery commands and read/write commands, and transmit these commands over the network to the non-removable storage device. Computer commands are intercepted and processed by a logical algorithm program at the storage device. One function of the logical algorithm program is to instruct each computer to treat the non-removable block storage device as a removable block device. Because the computers treat the storage device as a removable block device, they relinquish control of the device (after use) to other computers on the network. The logical algorithm program also functions to allocate temporary ownership of the block storage device to one of the computers on the network and passes temporary ownership from computer to computer on the network.

Abstract: The technique of the invention retrieves any print job of redundant image data having identical image identification data with the image identification data of an object job, which is specified among print jobs stored in a print server, deletes image data present on a reference path of the retrieved print job, and overwrites the reference path of the retrieved print job with a reference path of the object job. The print job in which the image data was deleted is executed by utilizing the common reference path to read remaining image data and converting the image data into print data printable with a printer. This arrangement desirably prevents identical image data from being stored redundantly and thereby effectively saves the storage capacity of print jobs.

Abstract: A multi-processor system includes a plurality of processors; and a memory section connected with the plurality of processors and configured to store a message transmitted from each of the plurality of processor to another. The memory section has a plurality of priority buffer regions corresponding to a plurality of priority levels, and the message is classified based on a priority level allocated to the message. Each of the plurality of priority buffer regions stores the message having the priority level corresponding to the buffer region.

Abstract: When a hypervisor in a computer server receives input/output (I/O) data traffic, the hypervisor sends the I/O data traffic to a security sensor application shared by multiple operating system (OS) partitions. If the security sensor application indicates that the I/O data traffic meets pre-defined security standards in the security sensor application, and the I/O data traffic is addressed to one of the OS partitions in the computer server, the hypervisor sends the I/O data traffic to the applicable OS partition. If the I/O data traffic meets the pre-defined security standards, and the I/O data traffic is not addressed to one of the OS partitions, the hypervisor sends the I/O data traffic to an external destination in a network coupled to the computer server.

Abstract: An algorithm extracts a company ID from a LAN MAC address corresponding to a cable modem connected to a CMTS, cross-references the company ID to a corresponding company name in a company-name database, and then displays the company name in a command line user interface.

Abstract: A node in a multi-node system includes a memory, an active device that includes a cache, an interface that sends and receives coherency messages on an inter-node network coupling the node to another node, and an address network that communicates address packets between the devices in the node. In response to receiving a coherency message from the other node requesting an access right to a coherency unit, the interface sends an address packet on the address network. The address packet is a first type of address packet if the coherency unit is in the modified global access state in the node and a second type of address packet otherwise. If the active device is the owner of the coherency unit, the active device responds to the first type of address packet and ignores the second type of address packet.

Abstract: A network interface adapter includes a network interface and a client interface, for coupling to a client device so as to receive from the client device work requests to send messages over the network using a plurality of transport service instances. Message processing circuitry, coupled between the network interface and the client interface, includes an execution unit, which generates the messages in response to the work requests and passes the messages to the network interface to be sent over the network. A memory stores records of the messages that have been generated by the execution unit in respective lists according to the transport service instances with which the messages are associated. A completion unit receives the records from the memory and, responsive thereto, reports to the client device upon completion of the messages.

Abstract: A network device implements congestion management of sessions of a network protocol. In one implementation, an incoming request component receives session requests for a negotiation session between the network device and a second network device. A capacity pool stores a value relating to capacity of the network device to continue to efficiently process the session requests. New sessions are initiated when the value stored in the capacity pool is less than an estimate of the capacity of the network device at which the network device maximizes processor usage while minimizing session timeouts.

Abstract: A method, a system, an apparatus, and a computer program product are presented for a fragment caching methodology. Within the request path from a client to a server, a first computing device may attach to a request message a message header that indicates that the first computing device supports fragment processing; a second computing device within the request path processes this request message. When the second computing device receives a response message corresponding to the request message, it can check for a message header directive that indicates that it should cache the response message's fragment only if the response path does not have at least one computing device that supports the processing of fragments; if so, then it forwards the response message without caching its contained fragment.

Abstract: A method, apparatus and computer product that, in a system having a client computer, and apparatus for connecting the client computer to a network having a server for backing up the client computer, enables transferring data from the client computer to the server, by connecting the client computer to the network; backing up data on the client computer to a storage device attached to the network when the client computer is connected to the network; and transferring the data from the storage device to the server, preferably at a time determined by the server.

Abstract: A system for transferring a sequence of actions to an electronic meter through a bandwidth limited communications channel. The sequence of actions is programmed as a program file that is broken into pieces for transmission to the electronic meter. The pieces are received by the electronic meter, verified not to contain errors, and combined into a single program session. Any errors in the transmission are noted in a status table and the program file is retransmitted. Upon receipt of an execute command, the program session is commenced. After the session has completed the status table is updated. Thus, the electronic meter may be programmed in a programming session that contains more data than can be transferred via the bandwidth limited communications channel.