Abstract: Systems and algorithm for providing a service to a client includes defining a virtual infrastructure in which a plurality of virtual machines are running on a virtualization layer with at least one of the virtual machine executing an image processor algorithm. The image processor algorithm is configured to access framebuffer data of a specific virtual machine that includes the service to be controlled, process the framebuffer data to generate image data packets with contextual information by scanning the framebuffer data to discern the image of the virtual machine display, obtaining connection parameters and client characteristics of a connection to the client, analyzing the framebuffer data to balance performance of the connection and performance of the specific virtual machine, and selecting a compression technique for processing the framebuffer data to generate image data packets. The image data packets are transmitted to the client for presenting on a display device.

Abstract: In an embodiment, an electronic digital data packet router performs receiving a DHCP initiation message on a particular interface among a plurality of network interfaces,; modifying the DHCP initiation message by adding a particular DHCP option that signals a DHCP server to provide router configuration data, resulting in a modified DHCP initiation message; relaying the modified DHCP initiation message to the DHCP server; receiving, from the DHCP server, a DHCPOFFER message that comprises the particular DHCP option containing configuration data; configuring the router using the configuration data; relaying the DHCPOFFER message without the particular DHCP option on the particular interface toward another data packet router.

Abstract: A method and circuit for implementing a network manager quarantine mode in an interconnect system, and a design structure on which the subject circuit resides are provided. A respective network manager on a source interconnect chip and a destination interconnect chip sends end-to-end (ETE) heartbeats on each path between the source and destination interconnect chips. Each network manager maintains a heartbeat table with counters to track each path to each destination interconnect chip. When a first network manager of a first interconnect chip detects a change from at least one valid path to no working paths for a second interconnect chip of the interconnect chips, the quarantine mode is established for a programmable quarantine time interval and all paths are prevented from advertising good heartbeats during the quarantine time interval.

Abstract: A packet processing type determiner includes a non-secure packet processing module configured to process packets received over a single socket using a non-secure protocol. The packet processing type determiner also includes a data indicator checking module configured to check the packets for a first indicator denoting a beginning of a secure data record. The packet processing type determiner further includes a secure packet processing module configured to use a secure protocol to process the packets when a packet with the first indicator is detected until a packet with a second indicator denoting an end of the secure data record is detected.

Abstract: Various embodiments described or referenced herein are directed to different devices, methods, systems, and computer program products for providing cross-domain communication via a user interface provided in a web browser. A first one or more trusted data network domains for a first user interface component may be identified. A second user interface component provided from a second data network domain accessible via a second one or more servers may be opened for display. A first event message may be transmitted from the second user interface component to the first user interface component. If the second data network domain is within the first one or more trusted data network domains, one or more operations may be performed within the first user interface component in response to the first event message.

Abstract: An access device, a system and a method for implementing service configuration are disclosed. The method includes: identifying, by an access device AN, an operation mode of a CPE according to a result of a handshake negotiation performed between the line port of the access device CN and the CPE, and selecting a corresponding preset service template according to the operation mode of the CPE, and then configuring the line port according to the service template selected, thereby implementing the self adaptation of the ATM mode and PTM mode of the CPE. With the technical solution of the invention, when VDSL2 service is provided, the service may automatically access subscribers of ADSL ATM mode and subscribers of VDSL PTM mode simultaneously, and an automatic configuration and management may be realized for all the service configurations in different modes, and thus the operation complexity may be simplified, and the operation cost may be lowered.

Abstract: A domain to be published to an enterprise ECDN is associated with a set of one or more enterprise zones configurable in a hierarchy. When a DNS query arrives for a hostname known to be associated with given content within the control of the ECDN, a DNS server responds by handing back an IP address, by executing a zone referral to a next (lower) level name server in a zone hierarchy, or by CNAMing to another hostname, thereby restarting the lookup procedure. At any level in the zone hierarchy, there is an associated zone server that executes logic that applies the requested hostname against a map. A name query to ECDN-managed content may be serviced in coordination with various sources of distributed network intelligence.

Abstract: A computer system and method for identifying and pairing devices. The system includes a plurality of remote user interface computers, each having a display device and a user input device and each connected to a first network via a first respective data communication link. The system also includes a plurality of medical devices each having a medical device user interface and a second data communication link adapted to exchange data with the remote user interface computers. The system also includes a database adapted to communicate with the remote user interface computers via a connection to the first network or via a direct connection to one of the remote user interface computers, the database being adapted to store patient medical information including a treatment prescription that includes use of one of the medical devices.

Abstract: Systems and methods for providing the progressive download of media content using techniques that preferentially identify and use periods of surplus network capacity to maintain the content delivery. A buffer of a receiving system is maintained and pre-filled with enough content to bridge playback intervals where a network is unable to deliver content as fast as it is played out. Content delivery does not impact other users' applications and use of the network and its resources since content is only sent when surplus network capacity exists in the network. When no surplus network capacity is available, a user requesting content may be given the option to continue the delivery in the background so that the content may be played at a later time. The user may then resume their playback experience once the content has been completely delivered using surplus network capacity as it becomes available.

Abstract: Devices and methods for generating timing signals at a rate that matches a rate of remotely generated timing signals are provided. In some embodiments, a host generates timing signals in accordance with a USB specification, such as keep-alives, start-of-frame packets, or ITPs. An upstream facing port transmits the timing signals over a network to a downstream facing port. The downstream facing port generates and transmits timing signals to a USB device at a predetermined rate, and alters the predetermined rate based on an analysis of the rate at which timing signals are received from the upstream facing port.

Abstract: Various computing components (such as devices, operating environments, and processes) may communicate by exchanging instances of a data collection, such as a class or data structure. However, the definition of the data collection may evolve to specify different numbers, types, properties, and orderings of the items in the data collection, and it may be difficult to verify the structure and contents of an instance received from another component and possibly of a different version. This difficulty may be mitigated by exchanging versioning information about the instance (e.g., as part of the communications wire protocol) and by allocating the converting such that the sender may downconvert to earlier versions requested by a recipient, while the recipient may upconvert to later versions than a version provided by a sender. These techniques may promote the accuracy and consistency of information exchange among many components that operate on different versions of the data collection.

Abstract: Providing SIP application server interoperability, including detecting at a first SIP application server an event necessitating that work be performed in relation to a SIP application session that is managed by a second SIP application server, creating a SIP message object carrying a set of instructions representing the work, and sending the SIP message object for delivery to the second SIP application server and performance of the instructions at the second SIP application server in relation to the SIP application session.

Abstract: This discloses a host system and a target configured to communicate via a point-to-point coupling a Host Target Communication (HTC) protocol for sharing the host system's wireless interface using endpoints to optimize messaging and with the host system managing the buffer resources of the target to minimize target requirements, latency and so on. The HTC integrates into a large number of point-to-point communications protocols. The program systems for the host and the target, installation packages, computer readable memories including program systems and/or installation packages, and a download server are also disclosed.

Abstract: Techniques for delivering content to an end user device are disclosed. A policy server performs an ingest process in which multiple versions of a content object are created. The multiple versions of the content object are associated with a single network identifier which can be distributed to publishers of the content object. When the content object is requested using the single network identifier, the policy server determines a preferred version and delivery orchestration scheme from among the multiple versions for delivery to an end user device based on several criteria. The policy server may thereafter orchestrate delivery of the preferred version of the content object to the end user device. The single network identifier may be associated with an edge location in a content delivery network (CDN) and the policy server may orchestrate delivery in cooperation with servers at the CDN edge location.

Abstract: Methods for providing for secure communications across data networks, including untrusted networks. In one embodiment, the method comprises establishing security associations between devices on the network using a digital certificate and key exchange protocol. In one variant, the digital certificate comprises a public encryption key; the recipient of the certificate authenticates the sender using at least the signature, and then generates a cryptographic element (e.g., key), and initialization vector. The key is encrypted and sent back to the originator, where it is decrypted and used to encrypt datagrams sent between the devices. The initialization vector may be used to initialize the encryption algorithm on the receiving device.

Abstract: A pervasive realtime framework supports the execution of realtime software applications with high-level functions that significantly reduce the effort and time needed to develop realtime software applications in a new operating environment paradigm in which realtime connections between network nodes are pervasive. The pervasive realtime framework handles the complex tasks of connecting to communicants, virtual areas, and other network resources, as well as switching those connections in response to user inputs and thereby enables software application developers to focus on developing high-level realtime software application functionality.

Abstract: Disclosed herein is a fast data call connection method capable of reducing a connection time and increasing the probability of connection success in a CDMA 2000 network. In the fast data call connection method of the present invention, the PDSN transmits a data call connection request message, including an authentication type and a challenge value, to the MS. The MS transmits a data call connection response message, including a response to the challenge value, to the PDSN. The PDSN performs authentication with reference to the data call connection response message, and transmits a data call connection complete message to the MS if authentication succeeds. Accordingly, the present invention is advantageous in that it can reduce connection time, can increase the probability of connection success, and can guarantee compatibility by checking the MS version before a data call connection process is executed.

Abstract: A remote access service is provided by receiving remote access transport agent (RATA) capability information of a home remote access server (RAS) and a remote RAS from the home RAS and the remote RAS, respectively, generating a RATA profile based on the RATA capability information, supported by the home RAS and the remote RAS, and transmitting the generated RATA profile to the home RAS and the remote RAS, respectively.

Abstract: A control unit for controlling a card reader. The control unit includes an authentication management unit for transmitting/receiving information to/from a host and each of a first encryption magnetic head device and a second encryption magnetic head device to mutually authenticate each other. The authentication management unit includes (1) a commanding means for commanding one of the first encryption magnetic head device and the second encryption magnetic head device to create lower-level information for authentication, according to a request on authentication from the host, (2) a sharing means for transmitting the lower-level information for authentication received from the above-mentioned one device to the other device for the purpose of sharing it and (3) a transmission means for transmitting the lower-level information for authentication, having been shared in all of the first encryption magnetic head device and the second encryption magnetic head device, to the host.

Abstract: A method for binding a work Label Switch Path (LSP) with a protection LSP, including: transmitting a first message including binding information to a Path Merging Label Switching Router (PML) via a Path Switching Label Switching Router (PSL) so as to request for creating a protection LSP of the work LSP; the PML router assigning a label for the protection LSP based on the first message and returning a second message carrying the binding information; after receiving the second message, the PSL router binding the work LSP with the protection LSP based on the binding information, and transmitting a notification message including the binding information to the PML router; the PML router binding the work LSP with the protection LSP based on the binding information in the notification message.

Abstract: The present disclosure generally relates to systems and methods for establishing and maintaining communication between two or more communication devices coupled to communication networks. Some specific aspects relate to communication between a plurality of communication devices each of which is coupled to a respective network. Other aspects relate to establishing such communication by way of contact lists maintained and facilitated on systems coupled to the networks. Users of multiple communication networks, such as VoIP, PSTN and wireless, employ multiple communication devices to communicate with their contacts. For example, a VoIP enabled computer is necessary to access contacts on a VoIP network and a mobile or cellular telephone is used to access contacts on wireless and PSTN networks. A contact list, stored on one communication device, in some instances, cannot be accessed from another communication device.

Abstract: A method is described for negotiating the use of multi-link ciphering and for the generation of unique keys for each of the links using a single 4-way handshake protocol exchange.

Abstract: Systems, methods, and devices for simplified resource-sharing with electronic devices are provided. For example, a method for using at least one resource of a variety of electronic devices from another electronic device may include receiving resource-sharing information associated with a resource-sharing electronic device via near field communication, determining a resource-sharing scheme for using the resources of the resource-sharing electronic device based on the resource-sharing information, and sharing at least one resource of the resource-sharing electronic device using the determined resource-sharing scheme. The resource-sharing information may be received from a near field communication interface of the resource-sharing electronic device or from a radio frequency identification tag associated with the resource-sharing electronic device.

Abstract: A system, device, and method for distributing link state information in a communication network combines a link state routing protocol with a sliding window mechanism in order to efficiently distribute link state information. The sliding window mechanism permits a predetermined number of unacknowledged link state advertisement protocol messages to be outstanding at any given time. Unacknowledged link state advertisement protocol messages are retransmitted after a predetermined timeout period.

Abstract: The invention provides an Ethernet-based data transmission method, which is applied to a control system with a plurality of nodes. The method comprises: a first node caches the data needed to be sent (S101); if the current communication macro-cycle comprises the time segment for the first node to send data, the first node sends the cached data in the time segment for the first node to send data within the current communication macro-cycle; if the current communication macro-cycle does not comprise the time segment for the first node to send data, the first node does not send the cached data in the current communication macro-cycle; wherein other nodes do not send data in the time segment for the first node to send data within the current communication macro-cycle, and the communication macro-cycles have same durations and each communication macro-cycle consists of a plurality of time segments with a fixed length (S102). The invention further provides Ethernet nodes and a control system.

Abstract: Setting up a label switched path (LSP) for traffic between nodes of a network, involves sending a request message requesting reservation of resources for the requested LSP, from an ingress node (10) via intermediate nodes (40) and returning an acknowledgement message to an upstream node along the path. Absence of an acknowledgement from the downstream node, that the request message was received, is detected. Whether the given node should react to the detected absence can be determined from an indication (R) in the request message. Thus other nodes can react more quickly to take remedial action, to reroute or to remove the resource reservations without a long wait for a time out or a refresh message from the waiting ingress node, to enable more efficient use of the resources.

Abstract: A content streaming system, such as an HTTP streaming system, can use a variant audio playlist that identifies different audio playlists, such as one playlist in English and one playlist in Spanish, for the same program such as a video program which is specified by a video playlist which can be separate from the variant audio playlist. A client can use the variant audio playlist to select a particular audio content for the same program, and the particular audio content can be referred to by one URL in the variant audio playlist, among a set of alternative URLs, in the variant audio playlist, for alternative audio content.

Abstract: Dynamic host integration techniques are provided. A Transaction-based system integrates heterogeneous hosts to perform various operations associated with the transaction-based system. A command handler implements a specific operation for a host system and a protocol handler implements a specific communication protocol for contacting and having the host system execute the specific operation. For any given transaction within the transaction-based system a command handler and a protocol handler are dynamically acquired and bound to the processing flow to execute a desired operation on a remote and heterogeneous host system.

Abstract: A method for synchronizing different components of a computer network system using meta-commands embedded in normal network packets. The data communication channel between different components of a computer network system can be used to transport meta-commands piggybacked in normal network packets, without modifying or compromising the validity of the protocol message. Embodiments of the method can be used for embedding test synchronization and control commands into the network packets sent through a device or system under test. The device or system under test can be an edge device, with the data communication channel carrying normal packets containing meta-commands embedded in the packets to synchronize the test control of the test clients and the test servers connected to the edge device.

Abstract: This document describes tools capable of securely distributing entertainment content among and using distributed hardware. These tools may do so robustly by rebinding entertainment content between distributed hardware units. The tools, for example, may distribute content protection in hardware between a policy unit, a transcryption unit, a graphics processing unit, and a playback unit. By so doing the tools enable, among other things, users to select from many graphics cards rather than rely on the graphics capabilities of an integrated (e.g., SOC) hardware solution.

Abstract: A method for synchronizing different components of a computer network system using meta-commands embedded in normal network packets. The data communication channel between different components of a computer network system can be used to transport meta-commands piggybacked in normal network packets, without modifying or compromising the validity of the protocol message. Embodiments of the method can be used for embedding test synchronization and control commands into the network packets sent through a device or system under test. The device or system under test can be an edge device, with the data communication channel carrying normal packets containing meta-commands embedded in the packets to synchronize the test control of the test clients and the test servers connected to the edge device.

Abstract: Migrating data from a source storage device to a target storage device includes creating new paths to the target storage device, setting the target storage device to a state where I/O operations are initially accepted, where accepted I/O operations are rejected some time after acceptance, setting the source storage device to a state where at least some I/O operations are rejected, transferring metadata corresponding to the source storage device to the target storage device, where state information is transferred from the source storage device to the target storage device and setting the target storage device to a state where I/O operations are accepted and performed. Migrating data from a source storage device to a target storage device may also include creating new volumes on the target storage device and transferring data from the source storage device to the target storage device.

Abstract: The disclosure discloses a method for transmitting compressed rights. The method includes that: a terminal negotiates a compress algorithm with a server; the terminal requests the server through an “Extensions” field in a rights object request message to transmit the rights in compression format; the server generates a rights object response message according to a standard approach, compresses the rights in the rights object response message according to the negotiated compress algorithm, and generates a compressed rights object response message and sends the compressed rights object response message to the terminal; the terminal receives the compressed rights object response message, decompresses the rights in the received rights object response message according to the negotiated compress algorithm, and generates a decompressed rights object response message.

Abstract: The present invention is an apparatus, system, and method for the improved tracking of a data state. The present invention allows session states to be maintained by sites that run on multiple, load-balanced servers. The present invention removes a single point of failure in a system, thus preventing all active sessions from being lost by providing persistent session data distributable across one or more machines over a communications network.

Abstract: System and methods for facilitating electronic commerce by securely providing certificate-related and other services, including certificate validation and warranty services. The system services include a certificate status check service and a warranty service. The certificate status check service allows a relying customer to validate a subscribing customer's digital certificate. The warranty service allows the relying customer to receive a collateral-backed warranty that the subscribing customer's digital certificate is valid, and also confirms the ability of the subscribing customer to pay. All participants and a root entity are provided with a transaction coordinator for combining services and operations into a single transaction having the qualities of atomicity, consistency, isolation, and durability. The transaction coordinator provides a single consistent interface for certificate-status messages and requests, as well as messages and requests relating to other services.

Abstract: A satellite orbit data compressing method includes: determining a compression method of a parameter value on the basis of a variation tendency of the parameter value in an orbit model approximating a satellite orbit; and calculating a compressed parameter value by reducing a bit sequence representing the parameter value using the determined compression method.

Abstract: An apparatus, system, and method are disclosed for device level enablement of a communications protocol. An adapter compatibility module determines an adapter compatibility status for a plurality of host adapters. A positive adapter compatibility status indicates that each host adapter in the plurality of host adapters is compatible with a communications protocol. A processor compatibility module determines a processor compatibility status for one or more processors. The one or more processors coordinate data transfers to and from the plurality of host adapters. A positive processor compatibility status indicates that each of the one or more processors is compatible with the communications protocol. A compatibility summary module determines a compatibility summary for the plurality of host adapters and the one or more processors.

Abstract: The present invention is directed towards systems and methods for distributed operation of a plurality of cryptographic cards in a multi-core system. In various embodiments, a plurality of cryptographic cards providing encryption/decryption resources are assigned to a plurality of packet processing engines in operation on a multi-core processing system. The packet processing engines can be configured to operate in user space of a system, and can access cryptographic resources via memory allocations mapped from kernel space to user space.

Abstract: Some embodiments of a three-way communication protocol have been presented. In one embodiment, a message receiver receives a message from a message transmitter. The message may include an idempotent identification (ID). The message receiver records the idempotent ID, and sends a first acknowledgement of the message to the message transmitter in response to receipt of the message. In response to receipt of a second acknowledgement from the message transmitter acknowledging the message transmitter's receipt of the first acknowledgement, the message receiver discards the idempotent ID.

Abstract: A method and system for transmitting an application message between nodes of a clustered data processing system is disclosed. According to one embodiment, a method, embodied within a machine-readable medium, is provided according to which a determination is made whether one or more application messages to be transmitted to a first node of a plurality of nodes from a second node of the plurality may be currently transmitted. The method of the described embodiment further includes the processing of the one or more application messages in response to a determination whether the one or more application messages may be currently transmitted.

Abstract: In general, techniques are described for simplifying admission control signaling between subscriber devices, access nodes, and service edge routers to facilitate subscriber-specific admission control for multicast streams. In one example, a service edge router receives a service request and accesses a subscriber profile to determine whether the requesting subscriber is authorized to receive the service. Upon authorization, the service edge router returns the service request to the access node in a substantially similar form in which the service request was received. The access node receives the service request on a service edge router-facing interface, indicating the service edge router has granted authorization for the subscriber device to receive multicast traffic associated with the multicast group identified within the service request.

Abstract: A network traffic management device (NTMD) capable of gracefully handling remote file transfer errors is disclosed. A first local area network (LAN) may include a first NTMD and a client device. A second LAN may include a file server and an optional second NTMD. The first and second LANs are connected by a wide area network. The first NTMD optimizes network file transfer protocol (e.g., CIFS, NFS) operations by locally acknowledging file write command messages from the client device and reliably handling any file transfer errors that may occur by withholding flush data command messages from the client device until determining the locally acknowledged and forwarded file write commands were received by the file server. If any errors are encountered, the first NTMD returns a failed flush message to the client device or terminates the TCP/IP connection between the client device and the file server to indicate the error.

Abstract: In one embodiment, a security device receives one or more first unique identifications of packets sent by a first device to a second device for which a corresponding acknowledgment was purportedly returned by the second device to the first device. The security device also receives one or more second unique identifications of packets received by the second device from the first device and acknowledged by the second device to the first device. By comparing the first and second unique identifications, the security device may then determine whether acknowledgments received by the first device were truly returned from the second device based on whether the first and second unique identifications exactly match.

Abstract: A system and method for capturing non-forgeable packet traces. Upon start-up of a sniffer, a first quote of Platform Configuration Register (PCR) values in a Trusted Platform Module (TPM) utilized by the sniffer is obtained, wherein the first quote comprises a list of starting values in the PCRs and is signed by the TPM and stored in a packet log. When a packet of interest is intercepted by the sniffer, the sniffer obtains a hash of the packet and instructs the TPM to extend a PCR with the hash value. The packet of interest is then stored in the packet log. When the sniffer is shutdown, a second quote of values in the PCRs is obtained, wherein the second quote comprises a list of current values in the PCRs, and wherein the second quote is signed by the TPM and stored in the packet log.

Abstract: A method, non-transitory computer readable medium, and apparatus that obtains with a content management computing device application configuration information about an executing application on an end user computing device that provides content to a primary end user. Sensor data is obtained with the content management computing device from one or more sensor devices. A type of device for the end user computing device executing the application is identified. One or more personalized values are determined with the content management computing device based on the obtained sensor data, the identified type of device, and the obtained application configuration information. The determined one or more personalized values are provided by the content management computing device to the end user computing device to optimize the content provided to the primary end user by the executing application.

Abstract: The system includes a server module to interact with a base client. The server module interacts with the logic of the web application to obtain the data requested by a base client data and sends it back to the base client in a format handled by the base client. The base client may then reformat the data to a client application requested format before passing the data to the client application. This method and system allows a client application programmer to obtain easily usable data from a web application by using the base client.

Abstract: The apparatus includes a base client module and a server module. The base client module receives requests from a client application on a client computer. The base client module calls a resource of a web application. A server module transparently interacts with the logic of the web application to obtain the requested data and sends it back to the base client in a format handled by the base client. The base client can then reformat the data to a client application requested format before passing the data to the client application. This method allows a client application programmer to obtain easily usable data from a web application by using the base client.

Abstract: An approach for providing content transmission upon placement of a call on hold is disclosed. A data communications system includes a proxy server that is configured to receive a message from a first client indicating the hold condition of a Voice Over Internet Protocol (VOIP) call with a second client. The system also includes a content server (e.g., music server) that is configured to transmit the content stored therein to the second client in response to a request message from the server.

Abstract: A Call Session Control Function (CSCF) entity in an IP Multimedia Subsystem (IMS) network comprises a first interface for interfacing with other entities and uses signalling in an Extensible Markup Language (XML) format. The other entities that the CSCF interfaces with can be located outside the IMS network, such as servers supporting third party IT or web-based applications, or within the IMS network. The CSCF directs XML based service requests by filtering XML messages received via the first interface.

Abstract: A server establishes a secure session with a client device where a private key used in the handshake when establishing the secure session is stored in a different server. During the handshake procedure, the server receives a premaster secret that has been encrypted using a public key bound with a domain for which the client device is attempting to establish a secure session with. The server transmits the encrypted premaster secret to another server for decryption. The server receives the decrypted premaster secret and continues with the handshake procedure including generating a master secret from the decrypted premaster secret and generating one or more session keys that are used in the secure session for encrypting and decrypting communication between the client device and the server.