Abstract: A method and system for passing information between a client, as a browser, and a server, as an application server, where the information is passed through a web server for processing between the application server and the browser. The webserver loads one or more template files. These template files contain standard markup language plus special tags. These tags are parsed, translated into commands for the application server, and sent to the application server. The application server returns the objects called to the web server, which passes the called objects to the client. The session is persistent.

Abstract: A program running on a web server allows automated domain name registration, modification and management through an interface running on a client machine. The program redefines the concept of the Domain Name System zones by breaking them down into discrete records that can be managed in a database. The structuring of domain records in such a way allows global modifications to a given record type for all domains owned by a given domain name Registrant. Further, when run on the web server of an accredited registrar, the program enables domain name Registrants an easy and efficient way to reliably monitor and manage their domain name property.

Abstract: At a data transfer device for transferring a request message from a first communication device to a second communication device, and transferring a response message containing a response data from the second communication device to the first communication device, an identifier to be allocated to the response data contained in the response message is generated according to a content of the response data, and a re-direct response message for re-directing the first communication unit to a URL containing the identifier is transmitted to the first communication device, instead of transmitting the response message, when the response message is received from the second communication device, and the response message containing the response data stored in the memory in correspondence to the identifier contained in the URL is transmitted when the request message for the URL containing the identifier is received from the first communication device.

Abstract: A way of reducing the impact of denial of service attacks is presented. For each connection request received by a server, the server attempts to establish a connection to accommodate the corresponding request. For each connection request that the server cannot currently handle, the connection request is placed in a backlog queue for future handling. If one or more of the backlog queues have entries, connection sockets that have connections but no received request data are identified and disconnected. Such connection sockets would be highly suspect of being generated as a result of denial of service attacks. Upon disconnection, resources are freed for legitimate requests thereby improving server performance even during denial of service attacks.

Abstract: A packetised data network includes IP telephones (ITs) and a network intelligence (NI). All of the keys of each IT are “soft” keys (i.e., they have no fixed function). The NI associates a configuration data structure with the IT which correlates the keys with functions, and, based on this, may control the display of the IT to indicate the current function of certain of the soft keys. Some of the functions are requests for data services at the telephone (e.g., video or programmed audio over the internet). When a user requests such a service with a key press, the NI sets up the service between the data source and the telephone. This may require associating a new configuration data structure with the keys of the IT. The IT user may activate multiple data services through the NI.

Abstract: A method is provided for controlling, i.e., changing, the medium or mode for interaction between a user of a wireless device and an application accessed by the wireless device. The method includes the step of a) determining the currently available bandwidth for transmissions to the wireless device over a wireless network, and b) of changing the medium for interaction between the user of the wireless device and the application from a first medium (e.g., audio+video) to a second medium (e.g., audio only or text) based on the bandwidth determined in step a). Steps a) and b) can be provided via function calls or other instructions in the application, can be provided by a network entity, or, alternatively can be based in part by user interaction with the wireless device.

Abstract: A data management system operable between a set of presentation layer servers, a set of application servers and a set of data servers. The data management system includes: a session manager routing users to at least one of a plurality of presentation layer servers; an application manager coupling business applications provided by the business application servers responsive to user interaction with the presentation servers; and a data manager coupling business applications to at least one of a plurality of data sets.

Abstract: A method for reducing first copy out times of printed matter. To implement the method, a request to print at least a portion of the printed matter is executed. Then, a uniqueness identifier is generated in a host computer, the uniqueness identifier specifically associated with the at least a portion of the printed matter. Next, the uniqueness identifier is compared to a list of uniqueness identifiers stored in memory. If the uniqueness identifier is found in the list of uniqueness identifiers, at least a portion of the printed matter is printed using data stored in a memory location referenced by the list of uniqueness identifiers. If the uniqueness identifier is not found in the list of uniqueness identifiers, the uniqueness identifier is stored and a reference to data is stored in memory pertaining to the at least a portion of the printed matter in the list of uniqueness identifiers.

Abstract: An application monitoring system is provided. The application monitoring system includes a monitor component to monitor statistics related to an application in operation. A reporting component is in communication with the monitor component and is operable to capture the statistics of the application in operation monitored by the monitor component. A trigger component analyzes the statistics of the application monitored by the monitor component and compares the statistics of the application with a threshold and generates a trigger signal based on the relationship of the statistics of the threshold. A dashboard component is operable to identify the application to monitor and provide an application threshold. A method of monitoring an application using an application monitoring system is also provided.

Abstract: The invention is directed to techniques for synchronizing a plurality of servers, receiving a client request from the client to access a server of the plurality of servers, generating a transmit identifier associated with the client request, the transmit identifier identifying an event upon the occurrence of which the plurality of synchronized servers each transmit a response to the client, forwarding the client request and the transmit identifier to each of the plurality of synchronized servers. The invention is also directed to techniques and mechanisms for receiving a client request associated with a client and receiving a transmit identifier identifying an event, generating a response to the client request, and transmitting the response to the client upon an occurrence of the event identified by the transmit identifier.

Abstract: A method of providing network access includes receiving a request from a customer to use a volume of network access and establishing an account in favor of the customer for the volume of network access. The method also includes monitoring the transfer of a volume of information. The volume of information is capable of being expressed in the units of the volume of network access. The method also includes adjusting the account of the customer in relation to the volume of information.

Abstract: A method and system is disclosed for setting up, modifying and tearing down an up-stream communication session in a basic service set (BSS) in a wireless local area network (WLAN), so that the communication session has a defined Quality of Service (QoS). Regarding setting up an up-stream communication session, a first Path message and a first Resv message (Path/Resv message) of a RSVP protocol are detected at a designated subnet bandwidth manager (DSBM) in a station having a point coordinator (PC). The first Resv message originates from a RSVP agent of a host outside the BSS, and is a request for setting up an up-stream session between a source non-PC station in the BSS and the PC station. A QoS parameter set and a classifier from the first Path/Resv message for the session are extracted at the DSBM.

Abstract: Image restoration and reconfiguration support for crashed network devices. The method includes establishing a file transfer session between an information transferring network device that has entered a debug mode and a server. A name of a last known good image and configuration file pair is stored on the network device. The last known good image and configuration file pair is stored on the server. The network device requests a transfer of the last known good image and configuration file pair from the server to the network device.

Abstract: A mobile station attempts to access wireless data services such as WAP applications via a data call, by first transmitting a session request to a wireless network, where the session request identifies an initial data bearer that should be used to establish the session. Upon receiving notification that the network is unable to establish the data session using the initial data bearer, the mobile station accesses a bearer table stored in its memory, selects an alternate data bearer which may be the next best data bearer, and automatically reattempts the data call without user intervention. The process repeats until the session is successfully established using one of the data bearers in the bearer table, or until the occurrence of a terminating event, such as cancellation of the data call by the user of the mobile station, or expiration of a predetermined time limit.

Abstract: An application policy engine for a computer blocks access to network resources by applications executing on the computer that are not authorized for such access by an application policy file. The application policy engine monitors outgoing network traffic from the computer and compares an identifier for the application contained in a network access request with application identifiers stored in the application policy file. If the application identifier is associated with an unauthorized application, access to the network is blocked by the application policy engine. In another aspect, an unauthorized application is allowed access to certain resources on a network while being blocked from other resources on the same network. In still a further aspect, an authorized application may be permitted only certain types of access to a network or network resource.

Abstract: A system that provides a multi-drop local area network (LAN) data transfer with devices on a wide area network (WAN) via a communication network is disclosed. Two methods for managing data traffic flow between individual nodes on a LAN and a WAN are also disclosed. The point to multi-point communication system may be implemented with a digital subscriber line (DSL) transceiver and compatibly configured communication devices coupled with each node or computer on a LAN. In one embodiment, the system uses a master computer on the LAN to manage protocol stacks to control the flow of downstream and upstream data traffic between computers on the LAN and WAN data traffic on a DSL. In a second embodiment, the master computer assigns at least one asynchronous transfer mode (ATM) level virtual connection (VC) to each computer on the LAN.

Abstract: An enterprise network router interface communicates with a public regional Autonomous System Border Router (ASBR). The ASBR only forwards the enterprise network traffic to the router interface. The router interface redirects data packets to data highly specialized packet processing appliances for parallel processing of VPN and cache application traffic. Policy based routing instructions are imposed on the ASBR for subsequent secure, tunneled transmission. This enterprise routing system and method used within an enterprise imposes routing instructions superseding gateway protocol routing thus allowing VPN and content caching applications to be run efficiently and securely without resort to an enterprise dedicated backbone.

Abstract: A method and apparatus for calculating, displaying and acting upon relationships in a social network is described. A computer system collects descriptive data about various individuals and allows those individuals to indicate other individuals with whom they have a personal relationship. The descriptive data and the relationship data are integrated and processed to reveal the series of social relationships connecting any two individuals within a social network. The pathways connecting any two individuals can be displayed. Further, the social network itself can be displayed to any number of degrees of separation. A user of the system can determine the optimal relationship path (i.e., contact pathway) to reach desired individuals. A communications tool allows individuals in the system to be introduced (or introduce themselves) and initiate direct communication.

Abstract: The present invention relates to a web browser apparatus and a web browsing method that allows a user to perform web browsing by simple operations of filling in a paper medium and inserting the paper medium in the apparatus. According to the present invention, an action identification code for deciding the next action is extracted from an input image and analyzed. The next action is decided based on an analysis result of the action identification code and the input image. Page data is obtained from a web server in accordance with the decided action. If a user instructs by filling in a physical medium on which the obtained page data is printed, an action identification code to be used for deciding an action corresponding to the instruction is prepared based on the page data obtained from the web server. An output image is prepared based on the prepared action identification code and the obtained page data and controlled to be printed on a physical medium (such as a paper medium).

Abstract: A method is provided for optimizing rendering and display of HTML data by a wireless trans-receiving device. The method includes receiving a portion of the data, and parsing the portion of the data where the parsing begins when a minimum amount of the portion of data has been received. The method also includes laying out the portion of the data for display, and displaying the portion of data in a web page form.

Abstract: A method and apparatus is disclosed for policy-enabled, contract-based management of network operational support systems. A policy kernel utilizes multiple policy access points for interfacing to dedicated policy management systems. The policy kernel uses policy views, containing a set of required policies, to request the policy view from the policy management system. The policy view initiates a contract for regulating the selection and import of executable policies to the policy kernel. The contract applies running components to the executable policies to enable them to run on the policy kernel and resolves any potential conflicts by applying a set of policy dependency rules to any executable policies that are in variance with one another. The executable policies are imported into the policy kernel through the policy access point. The policy kernel may then implement the requested policy view by executing the executable policies thus imported.

Abstract: User interface apparatus (1) comprising electronic user interface device (2) and storage device (3), the electronic user interface device being operative to convey information to a user, the information being derived from a resource which is remote from the user interface device, the storage device being portable and interfaceable with said user interface device and the arrangement being such that in use whilst the storage device is interfaced with the user interface device, the storage device stores a reference to the resource so that the user may access that resource at a subsequent time. The electronic user interface could be a viewer comprising a screen. So, a user could read the text of a piece of literature which is accessed from an Internet resource by way of a URL. If the user wishes to discontinue reading, the reference of that part of the text where he discontinued reading is stored on the storage device.

Abstract: A method and system of receiving, storing, and delivering customer comments, including qualitative and quantitative feedback, over a communications network, such as the Internet. Also, the present invention relates to a method and system of rating and ranking companies, including individual merchants and both buyers and sellers, and their products and services based upon comments received and then awarding the companies points based upon their rating.

Abstract: A method and a system for establishing a self-owned and self-managed network-based voice communication solution (VCS) for supporting business transactions and commerce applications over the communications network(s) including the Internet and PSTN. The voice communication solution is requested by a merchant or business entity at a computer connected to the Internet by providing (i) information needed for approval and (ii) system configuration for accepting the solution. Through a friendly interactive process with a web server and a solution server, the necessary software for voice communication is downloaded to a merchant's designated computer host, turning it to be a VCS server. Upon activation, the VCS server can support voice over IP (VOIP) communication and connect an incoming call to a telephone via PSTN or a PBX network. The VCS server can receive a VOIP call from anyone at anyplace via an Internet connected voice enabled computer.

Abstract: A system, method and computer program product are provided for policy-based billing for a network session. Initially, a plurality of packets is received by a plurality of analyzers. Thereafter, the packets are aggregated. Next, the plurality of packets is analyzed to identify a plurality of flows and an session associated with the flows. At least one application associated with the session is also identified. The session is then reconstructed utilizing the identified application. A user associated with the session is then identified along with a policy. The user is then billed for the session in accordance with the policy.

Abstract: One embodiment of the disclosures made herein is a method for implementing multicast control in a point-to-multipoint tree. In accordance with such method, an operation for translating a network element interface identifier associated with a first network element from a first type of network element interface identifier to a second type of network element interface identifier. The operation for translating the network element interface identifier generates a translated network element interface identifier corresponding to the second type of network element interface identifier and transmits the translated network element interface identifier from the first network element for reception by a second network element in response to successful translating the network element interface identifier. After initiating the operation for translating the network element interface identification, an operation is performed for creating a designated root of a point-to-multipoint tree.

Abstract: An area is divided into regions or cells each having an associated multicast group address. The cells are organized using a quad-tree data structure that is dynamically updated. Mobile entities within a given cell elect one of their members as coordinator for assessing cost data associated with subdividing or merging the cell with other sibling cells. The coordinators communicate this cost data to a partitioning entity, which may be a central server, that computes a new partition scheme using a greedy algorithm. The new partition scheme is then broadcast to the mobile entities for use in subsequent communication. Mobile entities join multicast groups that intersect with their individual vision domains. In this way, mobile entities can acquire information from other mobile entities without the need to monitor all multicast group transmissions.

Abstract: Communication and Process Migration Protocols instituted in an independent layer of a virtual machine environment allow for heterogeneous or homogeneous process migration. The protocols manage message traffic for processes communicating in the virtual machine environment. The protocols manage message traffic for migrating processes so that no message traffic is lost during migration, and proper message order is maintained for the migrating process. In addition to correctness of migration operations, low overhead and high efficiency is achieved for supporting scalable, point-to-point communications.

Abstract: Methods are disclosed for establishing a path for data transmissions in a system having a plurality of possible paths by creating a configuration database and establishing internal connection paths based upon a configuration policy and the configuration database. The configuration policy can be based on available system resources and needs at a given time. In one embodiment, one or more tables are initiated in the configuration database to provide connection information to the system. For example, a path table and a service endpoint table can be employed to establishing a partial record in the configuration database whenever a user connects to a particular port on a universal port card in the system. The method can further include periodically polling records in the path table and transmitting data from the partial records to a policy provisioning manager (PPM).

Abstract: Methods and apparatus providing information about characteristics associated with a network are described. A network node associated with a client for selecting a server that can best provide content to a client transmits a request for a response. A plurality of content servers or content routing agents receive requests corresponding to the request from the network node associated with the client. The content servers provide a response and fragment and/or pad datagrams associated with the response. The content servers transmit these fragmented and/or padded datagrams to the network node associated with the client. The network node associated with the client can reassemble and/or trim the received datagrams and identify as optimal the server that first completes transmission of the response.

Abstract: A method and system for managing access information for users and other entities in a distributed computing system is disclosed. An aspect of the invention relates to current user links between a first computing node and a second computing node. Objects are created/maintained to identify allowable links between computing nodes. Objects can also be created/maintained to store identification of chains of links. The current user link allows access for a user from the first computing node to the second computing node without user authentication by the second computing node. This can be implemented using trust relationships between the first and second computing nodes. Transitive aspects of the trust relationships can be handled by accessing information about chains of users/nodes. In addition, trust relationships can be administered by a local computing node.

Abstract: Systems and methods provide e-mail forwarding by receiving a first message from a first e-mail system, the first message being previously addressed to a first e-mail account address on the first e-mail system; associating the first message previously addressed to the first e-mail account with a second e-mail account address; forwarding the first message to the second e-mail account address; and arranging for an incentive to be shared between the first e-mail system and a forwarding system that receives the first message.

Abstract: An apparatus for finding resources on a network comprises a finder server having access to: (a) a database including: (i) an index of resources available on network of interconnected computers on which a plurality of resources reside; and (ii) information regarding user feedback gathered from previous operations of the apparatus by a user and plural previous users; and (b) a learning system operable to access and learn from information contained on the database.

Abstract: A system and method that optimizes transmission control protocol (TCP) initial session establishment without intruding upon TCP's core algorithms. TCP's initially session establishment is accelerated by locally processing a source's initial TCP request within the source's local area network (LAN). A control module relatively near the source's local area network (LAN) and another control module relatively near a destination's LAN are utilized to complete the initial TCP session establishment within the source and the destination's respective LANs, thereby substantially eliminating the first round-trip time delay before the actual data flow begins. The first application-layer data packet thus can be transmitted at substantially the same time as the initial TCP request.

Abstract: A method of producing a blended SYN cookie can include identifying within a SYN packet a source network address and desired communications session parameters. Subsequently, an index value into a table of pre-configured sets of communications session parameters can be retrieved. Notably, the index value can reference one of the sets which approximates the desired communications parameters. A hash value can be computed based upon the source network address, a constant seed and current date and time data. Finally, the computed hash value can be combined with the index value, the combination forming the blended SYN cookie.

Abstract: Address information is steganographically encoded into audio or graphic data, and thereafter decoded to permit linking to the internet. The address information can be a literal URL, or may be an index to a database from which a corresponding URL can be obtained.

Abstract: A system providing for virtual network management is disclosed. A system in accordance with the present invention allows a service provider to remotely manage one or more client network management systems. The security of the client network management systems is advanced by only allowing communications between a client network management system and the service provider that have been initiated by the client network management system. A mirror image of a client network management system is maintained by the service provider as a virtual network management system. Data included in the virtual network management system is periodically updated with data received from the client network management system. Instructions or data may be passed from the service provider to the client network management system in reply to communications initiated by the client network management system.

Abstract: The present invention provides a test method which can determine whether a user terminal is capable of supporting a real time connection, such as a computer telephony link, with a network terminal while simultaneously supporting a connection with a WWW server.

Abstract: A communications network that includes an originating Real Time Data over IP host and a terminating Real Time Data over IP host between which communication is to be effected. The network also includes communication controller for receiving information relating to the communication. The network also includes a communication forwarder that receives at least some data sent between the two Real Time Data over IP hosts and which sends to the communication controller information relating to the communication.

Abstract: The functionality of Advanced Intelligent Network (AIN) components and Internet-based resources are integrated to provide simultaneous visual and telephonic access to an interactive information delivery system. The present invention enhances conventional Interactive Voice Response (IVR) systems by simultaneously providing visual information that corresponds to the voice-based information that is delivered telephonically. A user that contacts a conventional IVR service provider (IVR host) can be provided with the option of a Visual IVR (VIVR) session. The VIVR session can provide visual information to the user in the form of HTML-formatted web pages delivered over an Internet connection and will provide audible message information over a conventional wireless or wireline voice telephone connection. A VIVR session can coordinate the delivery of visual information (e.g., web pages) and the delivery of telephony-based information (e.g.

Abstract: The present invention is directed to systems and methods for efficient and effective multicast delivery over hub and spoke networks, including satellite-based hub and spoke networks. In one embodiment, a method of establishing a multicast connection with a plurality of receiving stations includes receiving with a gateway port a unicast connection, such as a TCP connection, from a sending station, mapping the unicast connection to a multicast connection on a first multicast group IP address, and initiating the multicast connection to a plurality of receiving stations. In alternative embodiments, the multicast connection is established over a satellite link, and/or is unidirectional.

Abstract: A technique for providing an announcement in a communications network includes setting up a first level communication session in a first network element of the network. A determination is then made that an announcement is to be played to the first network element. An identity of a second network element which is to play the announcement on the first communication session is then sent and after a second level communication session is set up, the second level communication channel parameters are modified in accordance with the transmitted identity. The second network element then plays the announcement to the first network element. The transmitted identity may include an IP address or a port number or a TA. The communication session may include a PDP context. The first network element may include a Mobile Station.

Abstract: Apparatus, methods and articles of manufacture for handling messages in a client-server environment. In general, computers of a client-server environment are configured with sockets to facilitate network communications. A socket of at least one of the computers is configured to recognize a format of a message to be received from another computer, whereby the socket is configured to handle receiving the message without invoking the application until the message is completely received. In general, the message may be formatted with a length field or terminating characters. In one embodiment, the socket utilizes a record definition to recognize the message format.

Abstract: A network router management interface offers two different presentation modes for viewing configuration and operational information encoded in extensible markup language output obtained from a network router. The network router management interface provides an application programming interface (API) that permits client applications to formulate configuration and operational requests according to an extensible markup language, such as XML. In response to the configuration and operational requests submitted by a client application, the router produces XML output. On a selective basis, the user may elect to view or archive the XML output in either a rendered or unrendered format. In this manner, clients such as network administrators, installation technicians and applications developers can view raw XML output on a selective basis for use in development and debugging.

Abstract: There is provided a method for providing content to network devices in a communication network. A level of congestion of the communication network is determined (305). A cost of service is calculated based on the level of congestion (310). The network devices are informed of the cost of service (315). A first selection is received from a user of a network device specifying a content to be downloaded to the network device during a download process (320). A second selection is received from the user specifying a cost of service threshold for the download process (325). The cost of service is automatically compared to the cost of service threshold (330). The download process is automatically performed, when the cost of service is less than the cost of service threshold (335).

Abstract: A method and a device for protecting data communication traffic between a first communication station and a second communication station, in which the data is dispatched according to a data protocol from the second to the first communication station. The method includes the steps of the comparison of the data protocol with at least one standardized protocol and the forwarding only of data of which the data protocol complies with the at least one standardized protocol to the first communication station. For this purpose, the device includes memory in which data of at least one standardized protocol have been stored and a comparison/forwarding part which compares the stored data characteristics with the data protocol and forward only data of which the data protocol complies with the at least one standardized protocol.

Abstract: A method for dynamically allocating MCU resources during a multipoint network event such as a conference call. The method determines the number of MCU resources to allocate for the start of the multipoint network event and then at each of a plurality of modeling intervals during the multipoint event adjusts the number of allocated MCU resources based upon actual inbound users. Self-tuning of the allocation of MCU resources for multipoint events occurs in advance of use by providing a look ahead allocation of resources based on what is likely to be needed in the future for a conferencing event. The number of multipoint events occurring within a tuning interval are counted. The number of MCU resources actually utilized during each multipoint event are accumulated and then a probability value is determined for future use of MCU resources for an upcoming multipoint event.

Abstract: Methods and apparatus are provided for reserving resources in a wireline network from a wireless network. A resource reservation request is made by a service client to a service broker. The service broker contacts a bandwidth broker to determine the available resources in the wireline network. The service broker also contacts a geographical domain server for information related to wireless access for the requested reservation. Using information provided by the geographical domain server, the service broker contacts a radio bearer broker to determine the resources available in a particular wireless network. Based upon the information provided by bandwidth brokers and radio bearer brokers, the service client can reserve the requested resources.

Abstract: An apparatus and method for processing AAL2 supporting multiple virtual channels in a mobile communication system is disclosed. The present invention includes transmitting part including a first memory for storing ATM cells having the same destination according to corresponding destination information, where the transmitting part multiplexes user data items transmitted from a plurality of AAL2 users into one ATM cell according to corresponding destination information and transfers it to the ATM layer; and a receiving part including a second memory for storing mini-cells having destinations by users according to corresponding destination information, where the receiving part demultiplexes each ATM cell transmitted from the ATM layer to deconstruct it into mini-cells by users according to corresponding destinations and transmits them to corresponding AAL2 users. Accordingly, the accommodation capacity of the communication system increases and transmission rate rises, providing stable communication service.

Abstract: The present invention relates to a method and device for the scalable monitoring of a computer system comprising a plurality of computer units constituting hardware resources to be monitored forming a monitored domain, the method being implemented by means of a central computer system called a manager connected to a communication network that allows the transfer of information between at least one resource and the manager. The method comprises a step for organizing the monitored domain into monitored subdomains comprising a predetermined maximum number of resources, and a step for automatically creating and configuring, for each subdomain, an information synthesis node comprising at least one synthesis agent stored in the storage means of a resource. Each synthesis agent is designed to synthesize indicator values calculated and stored in the storage means of at least one resource.