Abstract: Techniques for streaming media packets in a peer-to-peer network are disclosed.

Abstract: An in-band signaling method that enables secure updates of a care-of-IP address for a mobile host that roams between access networks. In the illustrative embodiment described herein, a mobile host includes an intelligent interface that handles IP networking functions and tunnels IP packets between the mobile host and the mobile host's home agent/remote access server (HA/RAS) transparently, as if the mobile host established a connection to a communicating or destination host (DST) from the home network (where the HA/RAS resides). In accordance with an aspect of the invention, there is provided an in-band signaling method that employs encrypted three-way handshake signaling messages that are embedded in encapsulated IP packets to enable care-of IP address updates. This method can effectively protect mobile hosts from denial-of-service attacks and is transparent to NAT/NAPT firewalls.

Abstract: A TCP proxy insertion and uninstall method is provided, including: during establishment of a TCP connection, forwarding a TCP connection establishing packet between a TCP client and a TCP server through an L3, and recording option information and sequence number information of the TCP connection establishing packet; performing determination on a packet according to a proxy policy; forwarding the received packet if it is determined that no proxy process is required for the packet, and updating the recorded sequence number information according to sequence number information of the received packet; and generating a client pseudo socket and a server pseudo socket according to the option information and sequence number information if it is determined that a proxy process is required for the packet, terminating the received packet by adopting the client pseudo socket and server pseudo socket, processing the terminated packet through an L7 and forwarding the processed packet.

Abstract: A first base station wirelessly transmits media to a first communication device for a communication session. The first base station hands off the communication session to a second base station. The second base station wirelessly transmits the media to the first communication device for the communication session. In response to the hand-off, the second base station selects a second communication device based on the type of media and transmits a prompt to the first communication device to transfer the communication session to the second communication device. In response to a user instruction, the second base station transmits the media to the second communication device for the communication session.

Abstract: A method, system and program product for assigning a resource to a client in a collaborative environment. The method includes defining, using a tool, a threshold value for collaborative attributes for each resource responding to one or more clients and calculating on a periodic basis, using the tool, an updated value for the collaborative attributes for each resource. The method further includes comparing, upon receipt of a collaboration request, the updated value with the threshold value defined for collaborative attributes for a first resource and, if the updated value is less than the threshold value for the first resource, connecting the client to the first resource for establishing a collaborative session. If not, repeating comparing the updated value with the threshold value for the collaborative attributes defined for a next resource and connecting the client to the next resource whose updated value is less than the threshold value.

Abstract: A communication apparatus is configured to execute testing of whether or not the responding module is correctly responding to the plurality of commands transmitted and received between a transmission module and a reception module, the testing being performed via a loop-back mode transmission and reception path configured such that the reception module receives the command transmitted by the transmission module; and during the testing, following procedure is performed, which includes: transmitting the specific command by the transmission module; receiving the specific command by the reception module via the transmission and reception path; deactivating reception of the specific command; and transmitting a command different from the specific command subsequent to transmitting the specific command by the transmission module.

Abstract: The present invention relates to a checker circuit for a handshake protocol. The checker circuit detects common errors that occur when two communication unit on execute the handshake protocol. The checker circuit is characterized by a compact circuit design that is associated with reduced susceptibility to circuit errors and a significantly reduced spatial requirement. The invention also relates to a method for checking the execution of the handshake protocol.

Abstract: The present disclosure involves systems, software, and computer implemented methods for calculating a quality of service associated with a network participant associated with a networked business process. One method comprises identifying a profile of a potential network participant associated with a networked business process, the networked business process comprising a set of interrelated business processes performed by at least two different network participants. The profile defines at least one technical capability of the potential network participant. A set of criteria associated with the networked business process is identified, the criteria defining at least one technical capability metric. The identified profile of the potential network participant is compared with the identified set of criteria, and a determination of whether the profile of the potential network participant meets or exceeds the identified set of criteria is made.

Abstract: When a portable information terminal operates in an unused state, a predetermined access point is searched for. As a result, when the predetermined access point is detected, a connection to the predetermined access point is established, and a predetermined data communication process is performed.

Abstract: A system and method are disclosed for creating a secure video content path, or a protected media content bus, within an unsecure personal computer. A portable security module, or electronic key safe, may be inserted into a personal computer that has different internal components for processing secure and unsecured content. The security module may establish a secure encrypted link with a secure video processor of the personal computer, and may use the personal computer's network interface to request authority to receive secured content. The security module may provide content keys to the secure video processor to access secured content received over an external network.

Abstract: Information may be transferred directly between two mobile electronic devices where each device has a display and a camera on the same side. Data may be converted into one or more images using a processor on a first mobile communication device. The images may be displayed on a display on the first mobile communication device. The images are configured to convey information in a form that is detectable by a camera built into a second mobile communication device and interpretable by computer executable instructions running on a processor coupled to the camera that is built into the second mobile communication device. Images displayed on a display of the second device may be detected with a camera on the first device. The images on the second device's display may be interpreted to convert information encoded within those images into electronic data using the processor on the first device.

Abstract: Methods for processing streaming data records are provided that include facilities for defining and naming multiple input and output data streams using relational processing definitions and abstractions similar to those found in relational database management systems (RDBMS) and embodied as a set of communicating stream processing nodes. The result is a Distributed Data Stream Management System (DDSMS) which is also a kind of Relational Data Stream Management System (RDSMS). The former comprises a set of Relational Data Stream Management System (RDSMS) nodes, whereas the latter might contain only a single RDSMS node.

Abstract: A network file transfer and caching system is presented. The system provides multiple access utilities to select and transfer files to other users. The system is of particular use where the size of the files precludes transfer by other means such as e-mail attachments. The system is uniquely integrated into the operating systems by providing right click context menu file selection and process initiation. New utilities enable improved workflow by providing download information without the need to wait for completion of the network transfer process. Network transfer processes may progress in the background without user oversight or intervention. Files are cached and securely available to selected receivers of the files. The caching process may be managed by selected parameters related to number of downloads and time limits for availability of downloads.

Abstract: A cellular phone 10 transmits a request for management information including size information of object data which is desired to be downloaded, and determines whether a size of the object data exceeds a predetermined value or not, based on the size information. If the size of the object data does not exceed the predetermined value, the cellular phone 10 stores the object data, received in response to the download request, in a temporary storage area. If the size of the object data does exceed the predetermined value, the cellular phone 10 determines whether a free area for storing the object data in a permanent storage area exists or not. If a free area exists, the object data received in response to the download request is stored in the permanent storage area.

Abstract: A software framework that allows seamless integration of generic media players into a web browser. A media player is a software module that implements specific interfaces; defines a playing state, such as playing, paused, or stopped; and associates with the playing state a current playback time. A generic media player implements interfaces, including timing interfaces and playback synchronization interfaces for exchanging timing and synchronization information with a web browser. A player-hosting peer, which is a software component built into the browser, manages generic player hosting by a web browser. The player-hosting peer negotiates playback state and rendering status between the browser and the media player. Both the media player and the player-hosting peer maintain playing state and current playback time. The relationship between the peer and the player is a master slave relationship, with the peer being the master.

Abstract: Systems and algorithm for controlling a virtualized computer service remotely through a client includes defining a virtual infrastructure in which a plurality of virtual machines are running on a hypervisor with at least one of the virtual machine executing an image processor algorithm. The image processor algorithm is configured to receive a connection request from the client for controlling the virtualized computer service (or simply, virtual service) available at a specific virtual machine. The request includes a plurality of connection parameters that describe the connection requirements of the client and is received at the virtual machine that is equipped with the image processor algorithm. The connection parameters are interrogated using the image processor algorithm to identify a specific virtual machine that provides the requested virtualized computer service. A framebuffer data for the identified virtual machine located in virtual memory is accessed and read directly through a hypervisor.

Abstract: A low rate DoS attack detection algorithm is used, which relies on a characteristic of the low rate DoS attack in introducing high rate traffic for short periods, and then uses a proactive test based differentiation technique to filter the attack packets. The proactive test defends against DDoS attacks and low rate DoS attacks which tend to ignore the normal operation of network protocols, but it also differentiates legitimate traffic from low rate DoS attack traffic instigated by botnets. It leverages on the conformity of legitimate flows, which obey the network protocols. It also differentiates legitimate connections by checking their responses to the proactive tests which include puzzles for distinguishing botnets from human users.

Abstract: The present invention is an apparatus, system, and method for the improved tracking of a data state. The present invention allows session states to be maintained by sites that run on multiple, load-balanced servers. The present invention removes a single point of failure in a system, thus preventing all active sessions from being lost by providing persistent session data distributable across one or more machines over a communications network.

Abstract: Systems, methods, apparatus and software can implement a flexible I/O fence mechanism framework allowing clustered computer systems to conveniently use one or more I/O fencing techniques. Various different fencing techniques can be used, and fencing mechanism can be customized.

Abstract: A method of generating authentication seeds for a plurality of users, the method involving: based on a single master seed, generating a plurality of derivative seeds, each one for a corresponding different one of a plurality of users; and distributing the plurality of derivative seeds to a verifier for use in individually authenticating each of the plurality of users to that verifier, wherein generating each one of the plurality of derivative seeds involves mathematically combining the master seed and a unique identifier identifying the corresponding user.

Abstract: A method for transferring time-synchronous data, particularly voice and video data, over a network, particularly the Internet, between at least two terminals, where between the terminals a connection is established using a SIP server and where the SIP protocol is used for establishing the connection, is—with respect to high Quality of Service for transferring time-synchronous data and with a technically simple and cost effective design—developed in a way that the SIP server analyzes the connection and/or the terminals or the like and that based on the analysis it determines an ideal bandwidth for optimizing the transfer of time-synchronous data.

Abstract: Various embodiments of systems and methods for data message exchange in a client server network are described herein. In various embodiments, a client and a server network may implement a data message protocol for message exchanges. A method of an embodiment ensures message delivery, acknowledge message delivery, message delivery in a specific order, resending of lost data messages, and the like. In various embodiments, such data exchange may optimize data transmission and resource consumption in a client server network. A server can store data messages in a buffer and resend them only when requested by the client, as in the case of lost or out of sequence data message. A client with limited storage space need not concern itself with storing data messages and processing them at a later point in time. Furthermore, a client may optimize data transmission by acknowledging bulk data messages, rather than acknowledging them individually.

Abstract: A method of transmitting data for use at a data processing system and network interface device, the data processing system being coupled to a network by the network interface device, the method comprising: forming a message template in accordance with a predetermined set of network protocols, the message template including at least in part one or more protocol headers; forming an application layer message in one or more parts; updating the message template with the parts of the application layer message; processing the message template in accordance with the predetermined set of network protocols so as to complete the protocol headers; and causing the network interface device to transmit the completed message over the network.

Abstract: In a typical peer-to-peer network, any user of the peer-to-peer network may request a lookup of a key and its associated value. To limit access to a stored key-value pair, a user node may generate a registration message for a key-value pair. The value may include the payload to be stored at the storage node, and an access list containing one or more retrieval identifiers indicating one or more users authorized to access the payload. In some cases, the registration message may also include an encrypted payload which is encrypted with a group key. The group key may be included in the registration message, and may be encrypted with an encryption key which is known by the authorized user.

Abstract: A method and a system for in-service software upgrade in a Hot Standby Redundant Distributed (HSRD) system are provided. A standby route processor in HSRD system is updated with upgraded software. The standby route processor is synchronized with an active route processor present in the HSRD system. The control of routing process is switched over to the standby route processor (with the upgraded software) from the active route processor. During the switchover, a minimal context forwarder on the line card begins execution and continues forwarding packets across a network, while a line card in the HSRD system is being reloaded and configured.

Abstract: A system for uploading content includes a sender capable of sending an upload request, where the upload request comprises a request to upload content from the sender to a recipient. The system also includes a network entity, such as the recipient, capable of operating an upload agent. The upload agent, in turn, is capable of receiving the upload request, and thereafter determining an upload schedule relating to the time and/or manner of uploading the content. The sender can then be capable of uploading the content to the recipient in accordance with the upload schedule. The network entity can be further capable of recovering an upload session that has encountered an interruption.

Abstract: Discovery of intermediate network devices is performed using a technique that piggybacks upon the existing standard TCP (Transport Control Protocol) “SACK” (Selective Acknowledgment) option in a SYN/ACK packet so that discovery information may be shared between pair-wise-deployed peer intermediate devices when a TCP/IP connection (Transport Control Protocol/Internet Protocol) is first established between network endpoints using a conventional three-way handshake. Use of the SACK option is combined with another technique which comprises modifying the original 16-bit value of the TCP receive window size to a special arbitrary value to mark a SYN packet as being generated by a first peer device. The marked SYN when received by the second peer device triggers that device's discovery information to be piggybacked in the SACK option of the SYN/ACK packet. The first device then piggybacks its discovery information in the SACK option of the ACK packet which completes the three-way handshake.

Abstract: The present application is directed towards systems and methods of state migration in a multi-core system. An external process on a client or server may initiate a plurality of connections with the multi-core system, such that some cores have a plurality of connections and others have none. The present invention provides systems and methods for redirecting a connection or migrating the state of a connection from being associated with a first core with a plurality of connections to a second core with no connections.

Abstract: A method for determining network topology of a provider network includes selecting a first network element, selecting a first port on the first network element, and iteratively performing connectivity validation tests using the first port, wherein each connectivity validation test is associated with a type of network element and yields a result that indicates whether a second port on a second network element of the associated type is connected to the first port. A system for discovering topology of a network, the system comprising a topology discovery engine in operable communication with a near network element and operable to identify a first port of a far network element that is connected to a second port of the near network element by remotely altering operation of the near network element to cause the second network element to respond in a manner that identifies the first port.

Abstract: Various methods for application costing to provide decision making for service provisioning are provided. One example method may comprise connecting to a web based portal environment system. The method may further comprise establishing a hypertext transfer protocol keep-alive connection with the web based portal environment system. The method may further comprise receiving a push command via the hypertext transfer protocol keep-alive connection. The method may additionally comprise executing the push command. Similar and related example methods, example apparatuses, and example computer program products are also provided.

Abstract: A management apparatus connected to an image forming apparatus for managing usage of the image forming apparatus is disclosed. The management apparatus includes a user data storage part for storing user identification data and use restriction data corresponding to the user identification data, and a use restriction data acquiring part for acquiring the use restriction data corresponding to the user identification data.

Abstract: The present invention discloses a system, method, apparatus, and computer usable product code for handling requests. The invention can include a kernel level cache, a request handling service, and a transport layer security service. The kernel level cache can store request handling data. The request handling service can handle secure requests at a transport layer of a kernel when request handling data is present in the kernel level cache. The transport layer security service can handle encryption/decryption operations for the secure requests and request responses at the transport layer.

Abstract: A chipset for an audio player supporting Bluetooth advanced audio distribution profile (A2DP). The chipset comprises first and second processors. The first processor reads audio source data from a storage device and performs a first part of advanced audio distribution profile (A2DP) source encoding. The second processor is coupled to the first processor and performs a second part of the advanced audio distribution profile (A2DP) source encoding. The first and second processors collectively act as a Bluetooth host.

Abstract: Discovery of intermediate network devices is performed using a technique that piggybacks upon the existing standard TCP (Transport Control Protocol) “SACK” (Selective Acknowledgment) option in a SYN/ACK packet so that discovery information may be shared between pair-wise-deployed peer intermediate devices when a TCP/IP connection (Transport Control Protocol/Internet Protocol) is first established between network endpoints using a conventional three-way handshake. Use of the SACK option is combined with another technique which comprises modifying the original 16-bit value of the TCP receive window size to a special arbitrary value to mark a SYN packet as being generated by a first peer device. The marked SYN when received by the second peer device triggers that device's discovery information to be piggybacked in the SACK option of the SYN/ACK packet. The first device then piggybacks its discovery information in the SACK option of the ACK packet which completes the three-way handshake.

Abstract: Communication networks are automatically tested from a superordinate producer-independently managing network management center, such as when subordinate, producer-specific operation and maintenance centers (OMCs) are not occupied. Producer-dependent information is transmitted when an alarm report is sent and producer-specific hardware tests are automatically generated in the network management center (NMC). It is unnecessary for producer-specific object classes to be completely defined in the information model of the OMC-NMC interface. The tests automatically generated in the network management center can be triggered in response to errors, e.g. for a particular hardware board, or preventively, for example for the entire hardware of a network unit.

Abstract: A method for establishing a TCP connection between two client terminals protected by stateful firewalls and comprising means for sending messages to each other via a messaging server. The client terminals agree on establishing a mutual TCP connection by sending a message, which indicates port numbers to be used on said connection. A TCP connection establishment procedure is started in both client terminals. After sending a first handshake message, a message indicating a sequence number of the first handshake message is sent from both client terminals to each other. When the firewalls of the opposite client terminals reject the first handshake message, an acknowledgement message to the first handshake message is created in both client terminals using a raw socket, which acknowledgement message includes the received sequence number as an acknowledgement number. Finally, the raw socket based acknowledgement message is sent to the opposite client terminal for completing the establishment of the TCP connection.

Abstract: In an embodiment, a session associated with a first hardware device that sends or receives a first data stream and a second hardware device that sends or receives a second data stream may be provided. The session may be used to access information related to the first hardware device and the second hardware device. The accessed information may be used to identify a strategy from among a plurality of strategies for synchronizing either the first data stream and the second data stream or the first hardware device and the second hardware device. The identified strategy may be applied to synchronize either the first data stream and the second data stream or the first hardware device and the second hardware device.

Abstract: A wireless local area network (WLAN) device includes a WLAN adapter having a USB terminal connected to a USB terminal of a PC (personal computer). The WLAN adapter is loaded with a program for setting a WLAN and executing a communication, and a connection of the adapter to the PC prompts the PC to recognize the adapter as a CD-ROM drive, and prompts the program for setting a WLAN and executing a communication to run automatically. The PC loads data of SCSI standard into the WLAN adapter by using a vender defined command of SCSI standard by way of the program for setting a WLAN and executing a communication. The WLAN adapter converts the data of SCSI standard into data for setting a WLAN or data of TCP/IP (Transmission Control Protocol/Internet Protocol), and sets the WLAN and executes the communication.

Abstract: Methods and apparatus for machine-to-machine communications are disclosed. A communications server provides a way for application servers on the Internet to communicate with a plurality of physically remote devices that do not have “traditional” Internet connections. Communications between an application server and its remote devices are normalized by the communications server so that the need for a variety of wired and wireless protocols remains transparent to the application server. In addition, the application server may initiate communications with remote devices using dynamic IP addresses, because the communications server discovers dynamic IP addresses using a non-IP based protocol.

Abstract: A processing apparatus enabling initial settings to be easily configured as a user desires e.g. upon purchase of the apparatus without unpacking the apparatus from a shipping carton. The processing apparatus comprises a wireless communication unit operable by an AC power supply or a battery, and an EEPROM operable by the AC power supply or the battery and stores initial settings information for the apparatus. An MCU of the processing apparatus determines whether electric power is currently supplied from the AC power supply or from the battery. Further, the MCU determines whether or not power-on history information on the AC power supply has been stored. When the battery is used and no power-on history information has been stored, the MCU rewrites the initial settings information stored in the EEPROM, based on initial settings information received from a dealer's PC by wireless communication.

Abstract: A method, apparatus, and system are disclosed for exchanging services in a distributed system. A communication module receives an advertisement of service capabilities for a service provider. The communication module further receives a registration of service requirements for a service consumer. A match module determines if the advertisement service capabilities match the registration service requirements. A configuration module configures the service provider to supply the service requirements of the service consumer if the advertisement service capabilities match the registration service requirements. An establishment module establishes a service relationship between the service provider and the service consumer. The service provider provides the service requirements of the service consumer.

Abstract: A method and system of establishing communications between at least two independent software modules in a safety critical system, such as a medical system, is provided. The design comprises providing a media connection between software modules, wherein the software modules employ a communications protocol and participate in a bi-directional master-slave relationship between a master module and a slave module. The design further comprises sending an arbitrary length of data between the master and slave modules, wherein the arbitrary length of data is used by the master module to control and obtain status from the slave module, and sending arbitrary data further enables the slave module to return data and status information to the master module. The design also employs a safety critical communications watchdog between the master and slave modules, wherein the safety critical communications watchdog monitors communications quality between the master and slave modules.

Abstract: In a communication apparatus capable of switching states in response to a request from an external device, the communication apparatus switches states between said second state where the communication apparatus replies a valid response under limited circumstance and the third state where the communication apparatus does not reply a valid response before a registration; and said first state where the communication apparatus replies a valid response and said third state after the registration based on the same setting.

Abstract: Applications executed out of router memory may acquire additional bandwidth that is not being used by other applications, in order to speed up network traffic. Scavenging may occur up to a point where current congestion is detected, at which point any scavenged bandwidth is relinquished and the application returns to its prescribed limit. After current congestion is mitigated, scavenging may occur up to a limit below the point where congestion was detected. After a predetermined interval, additional scavenging may occur beyond this limit until a preset bandwidth limit is reached.

Abstract: A system providing a reproducible package of a web service scenario having at least one web service client and at least one web service coupled to said network. A collector extracts a set of message exchanges between the web service client and the web service, and a closure builder captures a service description. A workspace repository coup stores the set of message exchanges and the service description to create the reproducible package of the web service scenario. According to one embodiment, the reproducible packages provide mechanisms to share and replay XML message-based scenarios for distributed applications.

Abstract: A network in which peer-to-peer remediation is provided to keep clients in the network up-to-date. As network clients establish peer-to-peer connections, they exchange status information. The status information allows the clients to mutually identify whether one client is more out-of-date than another. The more up-to-date client provides update information to the more out-of-date client. To preserve the integrity of the update process, updates are provided as signed binary files and are only applied by the client receiving the update if the binary file may be authenticated by the recipient.

Abstract: A system transfers data via a communication session between a client application and a server application, where the client application runs on a first network and the server application runs on a second network. The system includes a proxy having a socket to the client application. The proxy converts data between a local protocol run on the first network to a non-local protocol. An agent creates a socket to the server application. The agent converts data between a local protocol run on the second network and the non-local protocol. A server is in communication with the proxy and the agent. The server contains a message queue dedicated to the communication session. The message queue stores data transmitted during the communication session.

Abstract: The present invention describes a system and method of extracting and storing data elements from network packets, thus performing the task of data mining. In one embodiment of the present invention incoming packets are decomposed one protocol layer at a time to extract data elements contained in the protocol headers. Layer-specific parsers perform deep packet inspection in order to extract data elements from upper-level protocols. Extracted data is arranged in rows, which are subsequently stored into a memory-based accumulator. After some length of time the accumulator is flushed to disk files. Another process reads the flushed disk files row-by-row, inserting each row into a relational database. Standard SQL operations are performed on the relational database in order to generate and display reports of the collected data.

Abstract: A method and corresponding device provides for automatically detecting a protocol for a load testing routine. The method includes the steps of, for an application to be load tested, executing the application and recording communications between a first tier and a second tier during the execution. The recording step includes recording modules loaded by the application, recording network traffic and Web traffic, comparing the recorded modules, network traffic and Web traffic to a rule set, and based on the comparing step, selecting one or more protocols appropriate for load testing the application. Finally, the method includes the step of generating a script based on the recorded communications and the protocols, where the script specifies the protocols.

Abstract: This specification describes technologies relating to imparting cryptographic information in network communications.