Abstract: A scalable domain name system with persistence and load balancing receives requests from client DNS servers or other DNS servers. Each DNS server is associated with a subset of the DNS groups in the network and the invention checks to see if the client DNS server is part of the DNS group that the DNS server is authoritative. If the DNS server is not authoritative for the client DNS server's group, then the request is forwarded to the proper DNS server. The receiving DNS checks to see if a persistent response is required for the request. If a persistent response is required, the appropriate IP address is returned to the requestor. If a persistent response is not required, the load, availability, and latency of the content servers are used to determine the proper content server's address to return to the requestor.

Abstract: A network system is provided for enabling priority-based number switching from a lower priority access number to a higher priority access number during an active data session is provided. The system comprises, a CTI-switch for establishing call connections and performing call switching according to instruction, a network-hosted part of a software application for monitoring the current user-node connection states and the current states of the alternate access numbers, at least two network-access nodes connected to the network, the access nodes each accessible through dialing a network-access number from the user node and, a client-hosted part of the software application for listing access numbers, configuring priority states to the access numbers and for communicating the pertinent data to the network-hosted part of the software application. The system affects call transfer based on priority state.

Abstract: A mechanism for authorizing a data communication session between a client and a first server is disclosed. When a request is received to establish a session with a particular entity that is associated with the client, it is determined whether authorization of the session can be performed locally at a second server. If it is determined that authorization of the session can be performed locally at the second server then, the first server is informed that the session may be established between the client and the first server for the particular entity. A third server that is associated with the particular entity is identified and once the first server is informed that the session may be established, the third server is informed that the session has been authorized to be established for the particular entity. However, if authorization of the session cannot be performed locally at the second server then, the third server is requested to authorize the session between the client and the first server.

Abstract: A system server is used to manage communication over a network between the system server and a plurality of physical devices of a passenger entertainment system. The system is configured and operated using software to provide passenger entertainment. The system server comprises software for instantiating a dispatch object to open a framework network addressable unit objects, for instantiating one or more virtual line replaceable unit objects to manage communication between a network address unit and physical devices, and for communicating network messages through the dispatch object to the physical devices. The dispatch object tracks messages to the physical devices utilizing a queue and tracks messages from the physical devices utilizing a queue. The dispatch object maintains the status of related devices. The dispatch object also adds and removes one or more of the virtual line replaceable units. The network addressable unit objects move data from one storage location to another.

Abstract: A method and apparatus for providing an improved Internet camera is provided. The method of sending data to a client comprises sending the data through a first path to the client and periodically refreshing the data, the refreshing data sent through a second path to the client.

Abstract: A communications method including the steps of: activating a plurality of signal sources, and transmitting a synchronization event to the plurality of signal sources to cause the plurality of signal sources to simultaneously transmit data in response to the synchronization event.

Abstract: A technique for authenticating a user to a server using SIP messages includes forwarding an SIP request from the user agent to the server. The server then forwards a request for authentication to the user agent in response to the invite request, the request for authentication including information that the authentication will be performed using a UMTS AKA mechanism. The user agent then forwards and authentication response to the server in accordance with the UMTS AKA mechanism and the server then performs the appropriate actions to perform an invoked SIP procedure in response to the SIP request. The SIP request may include any standardized SIP request including an SIP INVITE request or an SIP REGISTER request.

Abstract: A new communications connection timer management framework for handling network communications protocol timers is disclosed. The timer management framework separates transmission control blocks (TCBs) having scheduled actions from the set of all TCBs maintained by a server. The TCBs having scheduled actions are referenced by a time-space partitioned data structure having time-slots corresponding to a current protocol timer “tick” value. The active TCBs are placed within particular ones of the time-space partitions based upon their expiration times. During each timer check sequence (e.g., once every 100 millisecond timer tick for TCP protocol timers), the timer management framework accesses a partition associated with a current timer value and checks the TCBs referenced within the current partition.

Abstract: A method and apparatus for handling subscriber services from different sources without requiring interaction with different devices. The present invention also provides a method and apparatus for receiving multimedia services using session initiation protocol (SIP) messages received from a source, such as a server on a network. In one embodiment, a set-top device is provided in which a SIP control is provided to register a subscriber with a server using SIP messages. A connection to a network, such as the Internet, is provided to communicate with the server. The set-top device is placed in line with the audio and video source to control audio and video streams presented to the subscriber. The set-top device is also configured to receive voice calls from a public switched telephone network (PSTN). Further, the set-top device includes a remote control mechanism, such as an infrared (IR) transmitter and receiver to receive input from the subscriber and to control other devices using IR signals.

Abstract: A system and method are provided for maintaining consistent server-side state across a pool of collaborating servers with independent state repositories. When a client performs an event on a collaborating server which affects such state on the server, it publishes notification of the event into a queue maintained in client-side state which is shared by all of the collaborating servers in the pool. As the client makes requests to servers within the pool, the queue is thus included in each request. When a collaborating server needs to access its server-side state in question, it first discerns events new to it from the queue and replicates their effects into such server-side state. As a result, the effects of events upon server-side state are replicated asynchronously across the servers in the pool, as the client navigates among them.

Abstract: An electronic device is disclosed that is adapted to communicate with a first device network and to communicate with a second device that is part of a second device network. The device includes a processor and a communications module in electronic communication with the processor for communications with other devices including the second device and at least one device from the first device network. Memory may also be included in electronic communication with the processor for storing data. The electronic device may also include a pseudo-random scheduler for providing time points defining a schedule for the electronic device to communicate with the other devices. A dynamic scheduler may also be included to modify the schedule. The electronic device may also include an event queue.

Abstract: The present invention concerns a method for data transmission with assured quality of service, as well as a gateway program module (GWM) for it, a front-end facility program module (VVM) for it, a terminal program module (EM) for it, a gateway (UAG) for it, a front-end facility (INA) for it and a terminal (TERA) for it. According to the method, a terminal (TERA, TELA) requests from a gateway (UAG), connected to a data network (INT), a communication connection to a communication partner facility (TELB) with at least one predefined quality of service. The gateway (UAG) then requests from the data network (INT) the communication connection with the at least one predefined quality of service.

Abstract: A distributed system provides for separate management of dynamic cluster membership and distributed data. Nodes of the distributed system may include a state manager and a topology manager. A state manager handles data access from the cluster. A topology manager handles changes to the dynamic cluster topology. The topology manager enables operation of the state manager by handling topology changes, such as new nodes to join the cluster and node members to exit the cluster. A topology manager may follow a static topology description when handling cluster topology changes. Data replication and recovery functions may be implemented, for example to provide high availability.

Abstract: A network scanner apparatus is connected to a least one terminal via a network. A control portion controls the network by the use of a TCP/IP protocol. A readout portion reads-out a paper to produce an image data signal. An operation portion inputs an IP address as a transmitting destination of the image data signal. A transmission portion directly transmits the image data signal to the terminal having the inputted IP address.

Abstract: A Point-to-point protocol configured to provide communication exchange between a first device and a second device. The point-to-point protocol is configured to negotiate an exchange rate and establish a connection for the communication exchange between the first and second device. As system dynamics change, the point-to-point protocol is also configured to permit application programs in the first device and the second device to request renegotiation of the exchange rate at any time. The point-to-point protocol is also configured to provide confirmation to a sending application program that information was delivered to a receiving application program.

Abstract: In a technique for authenticating a user submitting a service request from a client to a server, a service agent on the server receives the service request and submits an authentication request to a manager agent. If the user is successfully authenticated, the manager agent transmits a message to the service agent including user authentication information and stores a time-out value establishing a predetermined time period. The service agent stores the user authentication information and shares it with a distributed application which provides the requested service to the user. The manager agent determines whether the predetermined time period has been exceeded before another service request is received at the service agent, and if not then the service agent attempts to authenticate the user using the stored authentication information. Otherwise, the service agent submits another authentication request to the manager agent to authenticate the user.

Abstract: A customer making a credit card transaction inserts their smart card into a card reader attached to the merchant's system. The card reader activates the customer's card and passes certain merchant information. The merchant's system then requests a “billing digest” from the customer's card. The billing digest is returned to the merchant's card reader that forwards it (and the transaction information which includes customer information and merchant information) to the corresponding credit card issuer, which maintains the customer's credit card account. In one embodiment, the customer information and the merchant information are encrypted. Upon receiving the billing digest, transaction information is decrypted if necessary and the credit card issuer looks up the customer's master key using the customer's account number.

Abstract: In a communications system having a plurality of endpoints each including a logical entity and its physical counterpart, a method for managing a pool of multicast addresses. The method including the steps of: generating a pool of available multicast addresses; receiving a request for a multicast address; allocating a multicast address for usage subject to at least a first limitation; monitoring the usage of the allocated multicast address; and reclaiming the allocated multicast address if as a function of the monitoring it is detected that a first condition is met, and causing the allocated multicast address to be placed into the pool of available multicast addresses.

Abstract: Application node processors examine application calls and file descriptors associated with application calls in system area networks, determine how to process the application calls based on examining calls and file descriptors and either translate the application call to a lightweight protocol or process the call using the application node operating system.

Abstract: A scalable, reliable session initiation protocol (SIP) signaling router includes cluster nodes for performing SIP services. A location server replicates its database of SIP location information to each of the cluster nodes. Because each cluster node maintains its own local copy of the SIP location database, the time for routing SIP signaling messages is decreased. Load sharing is also performed among the cluster nodes by Ethernet switches that connect the cluster nodes to external networks. One Ethernet switch periodically sends messages to each of the cluster nodes to monitor the operational status of the cluster nodes. The Ethernet switch also maintains a connection tuple table containing information regarding active connections to each of the cluster nodes. Load sharing is performed based on the operational status and the connection tuple table.

Abstract: The invention relates to a method for transmitting information such as fax, voice or data to a destination information device via a dynamic transmission network. The dynamic transmission network includes one or more transmission control servers (TCSs) and one or more transmission client nodes (TCNs). The TCS is always connected to the computer network, while the TCN is dynamically connected with the computer network. When connected to the computer network, the TCN checks its system status and then registers to the TCS. After getting the information from the TCN, the TCS stores said information into a dynamic transmission route table, wherein the information includes the country code, area code, Client ID, IP address, etc. of the TCN. Once any user requests the TCS to send a information to a destination site, the TCS will locate an available TCN physically nearest to the same country code and area code as those of the destination site, and then transmits the information to the TCN through the computer network.

Abstract: A service of reducing the number of tunnels in exchange for a specified service fee. A communication system, which generates tunnels in physical lines and multiplexes a plurality of sessions on the physical lines, comprises a monitor unit for monitoring the state of use of tunnels and sessions used by the user when the user using a plurality of tunnels is a customer who requires service of reserving sessions in a smaller number of tunnels in exchange for a specified service fee; a tunnel/session control unit performs control so as to gather the plurality of sessions of said user in a specified tunnel when the sessions currently used by the user can be reserved in a smaller number of tunnels; and a charging unit for charging a usage rate according to the number of tunnels or the number of physical lines used.

Abstract: Systems and methods are provided which afford a technical application for insuring, bonding, and underwriting a transmission of a data set, streaming data, and/or document over the Internet through TCP/IP and all other electronic media such as WAP (wireless application protocol), VOIP (voice-over IP), fiber optic channels, microwave channels, and through standard electrical switches, electrical outlets and power lines. The present invention includes a computer readable medium having computer executable instruction to cause a system perform a method for insuring, bonding, and/or underwriting data transmission. The method includes enabling a first remote client coupled to a communications network to insure, bond, and/or underwrite a transmission of an electronic data set, streaming data, and/or document, with a selected coverage type for a selected coverage amount, from the first remote client to one or more second remote clients.

Abstract: A distributed messaging method for publishing topical data messages in a communications network can include the steps of receiving in a first message router from a data consumer a request to subscribe to a message topic; responsive to receiving the subscription request, retrieving from a message topic server a location of a second message router communicatively linked to a data publisher able to provide data messages consonant with the requested message topic; establishing an interprocess communications connection between the first and second message routers; and, transmitting data messages from the data publisher over the established interprocess communications link to the data consumer.

Abstract: A system and method for monitoring remote computer access and associated costs is provided. The system includes a remotely located communication server in communication with multiple host computer networks and in communication with a network access server. First and second memory devices contain a list of authorized users for the host computer networks and a user log for use by a billing computer to generate bills. The method includes the steps of creating starting and ending time stamps for each authorized user accessing a respective one of the multiple host computer networks and creating a user log to generate bills and monitor host computer network usage.

Abstract: The invention uses a distributed network of specialized nodes of different types dispersed around the Internet. In operation, web client's requests are directed to a node of a first type chosen to be close to the client, and the client communicates with this node using a standard protocol such as HTTP. This first node receives the request, and locates a node of a second type, chosen to be an optimal initial relay on a path to the web server. The first node may communicates the request to the second node using a different, specialized, protocol that has been designed for improved performance and specifically to reduce traffic volume and to reduce latency. The second node receives communication from the first node using this specialized protocol, and relays it to an optimally chosen third node using the same, or possibly different internode communication protocol.

Abstract: To send point information indicated by an automatic vending machine to a center unit by a packet communication function of a portable telephone of a user of the automatic vending machine, a free space in a single packet of the point information to be sent from the automatic vending machine to the center unit is used to send management information such as sales information, stock information, failure information and the like of the automatic vending machine to the center unit.

Abstract: A system determines whether to grants access to a network server by a user. Initially, a user attempts to gain access to a network server, such as a web server. Prior to granting access to the network server, the network server authenticates the user by sending an authentication request to an authentication server. The authentication server determines whether the user was already authenticated by the authentication server. If the user was already authenticated by the authentication server, then the network server is notified that the user is authenticated. The network server then grants the user access to the network server. If the user was not already authenticated by the authentication server, then login information is retrieved from the user and compared to authentication information maintained by the authentication server. If the retrieved login information matches the authentication information, then the network server is notified that the user is authenticated.

Abstract: A system, method, apparatus, and computer program code for providing content to a device, wherein operation of the device may be interrupted as a result of a display of content by the device. According to embodiments of the present invention, a plurality of content segments can be identified or selected. In addition, a device (e.g., computer, cellular telephone, personal digital assistant) associated with a recipient of the content segments can be identified or selected. The content segments can then be provided to the device in such a way that display of a content segment by the device may interrupt operation of the device, thereby providing focus on the content segment.

Abstract: A system for network security transparently occupies an observation port on the data stream, passing the entire range of network information to a dedicated interpreter. The interpreter resolves the data stream into individual data packets, which are then assembled into reconstructed network sessions according to parameters such as protocol type, source and destination addresses, source and destination ports, sequence numbers and other variables. The different types of sessions may include the traffic of many different types of users, such as e-mail, streaming video, voice-over-Internet and others. The system detects and stores the sessions into a database. A parser module may extract only the minimum information needed to reconstruct individual sessions. A backend interface permits a systems administrator to interrogate the forensic record of the network for maintenance, security and other purposes.

Abstract: Class of Service (CoS) allows a user to share attributes between entries in a way that is transparent to an application. This is achieved by generating the values of the attributes by a CoS logic at the time of or immediately prior to the time the entry is transmitted to an application, rather than storing the values of the attributes with the attribute itself. In alternative embodiments, the attributes may be generated at a time well before the time the entry is transmitted to an application. A CoS includes a CoS Definition entry and a Template entry. These two entries interact to provide attribute values to target entries within their CoS “scope” based on the target entry's DN, presence or absence of the target entry's CoS attribute, the attribute value stored in the target entry's CoS Template, and other factors. The CoS Definition entry, which is stored as an LDAP subentry below the branch at which it is effective, identifies the type of CoS being used.

Abstract: A method of securely communicating a network address of a client that issues service requests to a first server that proxies the service requests for a second server. A network address of the client is received. A processor determines whether a first network address of the first server is equal to a second network address of the second server. The network address of the client is sent from the first server to the second server in a secure request message only when the first network address of the first server is equal to the second network address of the second server. Accordingly, a secure communications protocol is provided in which an address of a requesting client, e.g., an IP address, is passed in the protocol only among a responding server and its proxy, thereby preventing interception of the client IP address by unauthorized processes.

Abstract: A method, program and system for authenticating LDAP referral searches are provided. The invention comprises receiving a bind request from a LDAP referred search request and then searching the local directory for an entry corresponding to the distinguished name (DN) of the bind request. If an entry for the bind DN is located within the local directory, the bind request is authenticated. If an entry for the bind DN is not found in the local directory, a defined reference server is checked for the prefix of the bind DN. If the prefix for the bind DN is located in the reference server, the reference server is contacted for authentication, which is performed using a root DN. If an entry for the bind DN is not found in either the local directory or reference server, the bind request cannot be authenticated and is denied.

Abstract: A system and method for providing network training to students operating communication nodes at locations remote from a classroom laboratory equipped with operational servers, routers, and other computer networking devices used to implement an IT network. The networking devices in the classroom laboratory are configured into a first operating state and placed in first operational modes. A training host generates and transmits a graphical user interface, such as a Web page, to the remote nodes, which have a display and display application (e.g., a browser). The graphical user interface displays the computer networking devices in the classroom laboratory using icons or other graphical representations of the devices illustrating how the devices are communicatively linked. Each remote node is operable to select a graphical representation of a networking device.

Abstract: The Translucent Proxying of TCP (TPOT) device and methods use TCP-OPTIONS and IP tunneling to guarantee that all IP packets belonging to a specific TCP connection will traverse the proxy which intercepts the first packet of data. This guarantee allows the ad-hoc deployment of TPOT devices anywhere within the communication network, and does not restrict the placement of proxy devices at the edge of the network. Furthermore, no extra signaling support is required for the TPOT device to properly function while the addition of TPOT devices to communication networks significantly improves the throughput of intercepted TCP packets of data.

Abstract: In order to assure that services in an network and applications or users in the network are able to communicate and interact with one another data is provided by the specification and the application that provides for an operable interface between the application and the service. A user or user system can make use of the data information provided by the service to perform selected functions and tasks that is conveyed to the application and passed on to the service. Various graphical user interfaces can be provided, depending on the application and the need of the user.

Abstract: A method for determining a change in the SAF-TE enclosure status and a change in the SAF-TE device slot status, each with a single issuance of one new command, replacing countless re-issuance of similar commands. Use is made of a common disconnection/reconnection capability as well as a tagged command queuing technique, such that multiple types of status changes in a SAF-TE enclosure are concurrently determined. Since each of the new commands described here is initiated by the host adapter, the host adapter is prepared for receiving asynchronously a changed status from the reconnecting target device such as a SEP whenever it becomes available, without resorting to use of a complex SCSI protocol known as “asynchronous event notification.

Abstract: Multiple devices within a data communication network can be configured according to a single configuration profile. Configuration profile data is stored in a configuration file. Connections are made to individual devices, and the data in the configuration file is transformed into device-specific commands.

Abstract: Apparatus and methods are provided for multiplexing application flows over a pre-allocated bandwidth reservation protocol session. According to one embodiment, a pre-allocated reservation protocol session, such as an RSVP session, is shared by one or more application sessions. The reservation protocol session is pre-allocated over a path between a first network device associated with a first user community and a second network device associated with a second user community based upon an estimated usage of the path for application sessions between users of the first and second user communities. Subsequently, the one or more application sessions are dynamically aggregated by multiplexing application flows associated with the one or more individual application sessions onto the pre-allocated reservation protocol session at the first network device and demultiplexing at the second network device.

Abstract: Techniques for interacting with a client process on a mobile device connected to a network over a wireless link include receiving, at a mobile interactions server, a first message from the client process. The first message indicates a first action by a user of the mobile device. The first action is related to a first graphical element displayed on the device for requesting a service from an application. Based on the first message, it is determined whether the action is associated with an event type of a plurality of predetermined event types. If it is determined the action is not associated with the event type, then, without invoking any method of the application, first data is generated. The first data describes any change in the first graphical element. The first data is sent to the client process for changing the display of the first graphical element.

Abstract: Techniques for controlling a network connection in accordance with connection information associated with a destination location on a network are disclosed. Controlling of the network connection in accordance with connection information associated with the destination location can be achieved in a variety of ways. One way is in the selection of a network transport (e.g., bearer selection). Another way is in the configuration of parameters associated with the connection (i.e., connection parameters). In either case, the connection information includes information with which the selection of the network transport and/or connection parameters can be made. The controlling of the network connection impacts quality of service provided to a requestor that is requesting use of the connection.

Abstract: A plurality of computer nodes communicates using seemingly random IP source and destination addresses and (optionally) a seemingly random discriminator field. Data packets matching criteria defined by a moving window of valid addresses are accepted for further processing, while those that do not meet the criteria are rejected. In addition to “hopping” of IP addresses and discriminator fields, hardware addresses such as Media Access Control addresses can be hopped. The hopped addresses are generated by random number generators having non-repeating sequence lengths that are easily determined a-priori, which can quickly jump ahead in sequence by an arbitrary number of random steps and which have the property that future random numbers are difficult to guess without knowing the random number generator's parameters. Synchronization techniques can be used to re-establish synchronization between sending and receiving-nodes.

Abstract: To allow many users to efficiently use the functions of a processing server that performs predetermined processing, via a network and also to prevent interference by illegal users. In a content supply system 100, in order to use a streaming server 102 to perform a live distribution, a user PC 106 to be used makes a reservation for a time zone, etc. to a server reservation control center 101. When the reservation is accepted, the user PC 106 sends a reconfirmation (reconfirmation of the reservation) to the server reservation control center 101 by six hours before the distribution start time according to the reservation. If the reconfirmation is not made by six hours before, the server reservation control center 101 cancels the reservation. On the other hand, if the reconfirmation is made by six hours before, the server reservation control center 101 confirms the reservation and carries out billing processing.

Abstract: The invention relates to a system and method for caching a network connection. The system sustains connections between a server and one or more back-end databases. The server may establish multiple connections with one or more back-end databases based on data requests from one or more users. The server may determine one or more back-end databases from which the data requests may be satisfied. After receiving the data, the users, using an end-user device, may request disconnection of a connection between the end-user device and the server. The server, however, sustains the connection with the back-end database from which the data was retrieved. The server may use this connection to satisfy other data requests without re-establishing a connection with that back-end database.

Abstract: A communication system includes a token generator to create one or more tokens, as well as a token action log to associate each token with a customizable set of one or more actions, where each token is to trigger the associated set of one or more actions in response to accompanying a communication that experiences an event. The communication system also includes a token distributor to make the one or more tokens available for distribution to entities potentially desiring to communicate with the communication system.

Abstract: A wireless router employing a technique to couple a plurality a host services or host systems and a plurality of wireless networks. A method to route data items between a plurality of mobile devices and a plurality of host systems through a common wireless router. A point-to-point communication connection is preferably established between a first host system and a common wireless router, a mobile network message at a mobile device is generated, the mobile network message is transmitted via a wireless network to the common wireless router which in turn routes a data item component of the mobile network message to the appropriate host service.

Abstract: Session data is encoded in a tag-length-value format and encrypted using a modified encryption key. A session cookie is then formed by concatenating the length of the length of the secret, the length of the secret, the secret itself, and the encoded and encrypted configuration data. The session cookie is transmitted from a server computer to a client computer, where it is stored.

Abstract: The object of the present invention is to provide a DNS server and terminals both of which are capable of sending and receiving communication by means of a small number of IP addresses. In the case where a firewall is not provided, when the DNS server receives an inquiry of a FQDN, it sends a broad cast frame for searching a terminal to which an IP address is assigned via all the network devices. When a terminal monitors the broad cast frame and finds the FQDN to be its own FQDN, it returns the uni-cast frame to the DNS server. When the DNS server receives the uni-cast frame, it makes a look-up table and a reverse look-up table. As a result, the terminal can receive the communication by an ordinary method. In the case where the firewall is provided, by processing an IP address conversion between the external IP address and the internal address by the use of an IP address conversion means NAT in addition to making the look-up table and the reverse look-up table, the terminal can receive communication.

Abstract: In a system, device, and method for controlling access to a memory, a memory interface device is used to coordinate access to a memory device by a number of host applications. The memory interface device is situated between the number of host applications and the memory device. The memory interface device received memory access requests from the number of host applications, interacts with the memory device for servicing the memory access requests, and provides result/status information to the number of host applications. The memory interface device maintains a separate context for each memory access request in order to correlate each memory access request with the host application that issued the memory access request and the result/status information generated for the memory access request.

Abstract: An advertisement generation system presents a time-dependent advertisement to a user based upon to a search term of a search query during a period of time via a communication network The system includes a search engine coupled to a web server for receiving the search query and for presenting a search results page. The search results page is accompanied with an immediate advertisement. In one embodiment, the system includes an advertisement repository to store data representing a plurality of advertisements and includes the immediate advertisement and the time-dependent advertisement. Also, the system includes a user profiler configured to communicate a plurality of search characteristics and includes a data structure to store the search characteristics.