Abstract: Techniques for dynamically configuring security mechanisms in a network can construct security perimeters that satisfy security needs at any given time while also efficiently spreading security functions among network elements and systems. In one technique, a network element comprises security function modules. Systems toward which the network element forwards data packets also comprise security function modules. A particular security function module on the network element begins in a state of deactivation. The network element determines whether a corresponding security function module on one of the systems is functioning in a satisfactory manner. If not, then the network element activates the particular security function module. While activated, the particular security function module may perform at least some of the security function operations that the corresponding security function module would have performed if the corresponding security function module was satisfactory.

Abstract: A system and method for mediating the routing of asynchronous messages includes routing the asynchronous message to a first recipient, determining whether the first recipient opened the asynchronous message, and re-routing the asynchronous message to a second recipient who is qualified to receive and respond to the message if the first recipient fails to open the message (i.e., read, listen, display, act upon the message). In an embodiment, the message is re-routed to the second recipient if the first recipient fails to open the message within a deadline automatically imposed by the system when the message is of a certain type. In an embodiment, a mediator monitors if any recipient accepts responsibility for the asynchronous message and informs the other recipients that the asynchronous message may be deleted from their message queues.

Abstract: Techniques are described for managing communications between computing nodes of a computer network. In some situations, multiple computing nodes of a provided computer network may share a single virtual network address, and communications sent to that single virtual network address by other computing nodes may be managed in various manners. For example, the multiple computing nodes sharing the single virtual network address may be part of a pool of alternative destinations associated with the single virtual network address, and particular computing nodes from the pool may be selected to receive particular communications sent to the single virtual network address. Pools of multiple related computing nodes may also be identified and monitored in various manners. In some situations, the computing nodes may include virtual machine nodes hosted on one or more physical computing machines or systems, such as by or on behalf of one or more users.

Abstract: The present invention provides a communications network which is divided into a plurality of segments, with, each segment comprising one or more routers and one or more communications links that connect the routers. Each of the segments also comprises a segment management module. Each of the segment management modules reports to a supervisory management module and the communications network may comprise one or more supervisory management modules. If a segment management module predicts that a QoS threshold will be breached then it may re-route a data flow within that segment. If such a re-route is not possible then it will send a request to its supervisory management module to initiate a re-routing to a further segment.

Abstract: A redundancy manager manages commands to peripheral devices in a computer system. These peripheral devices have multiple pathways connecting it to the computer system. The redundancy manager determines the number of independent pathways connected to the peripheral device, presents only one logical device to the operating system and any device driver and any other command or device processing logic in the command path before the redundancy manager. For each incoming command, the redundancy manager determines which pathways are properly functioning and selects the best pathway for the command based at least partly upon a penalty model where a path may be temporarily penalized by not including the pathway in the path selection process for a predetermined time. The redundancy manager further reroutes the command to an alternate path and resets the device for an alternate path that is not penalized or has otherwise failed.

Abstract: A method performed by a wireless node includes receiving a data flow associated with user devices; performing a packet inspection of the data flow; determining whether a network address of the wireless node matches another network address associated with the data flow; converting the other network address to a layer 2 identifier when the other network address matches the network address; establishing a bearer link within the wireless node based on the layer 2 identifier; and offloading the data flow from layers of a network, which are higher relative to the wireless node, to the bearer link, wherein the data flow does not traverse the layers.

Abstract: Access control methods include receiving an access authorization message from an authentication server computer at a blocking device that connects a first network to a second network, modifying access criteria of a transparent firewall at the blocking device responsive to the received access authorization message and operating the transparent firewall according to the modified access criteria to control transfer of messages between the first and second networks. The invention may also be implemented as apparatus and computer readable media.

Abstract: Systems and methods for providing overload protection in a communications system are provided. More particularly, an importance or priority rating of a message received at a communication server is determined. If the communications system is in an overload state, and if the importance rating of the received message is not sufficiently high, overload protection is applied. Overload protection can include denying service to a requested or in process communications system associated with the message.

Abstract: A central coordinator can execute operations to minimize in-network contention and external network interference in a communication network. The central coordinator can determine to switch to alternate communication channel if performance of the alternate communication channel surpasses the performance of a current communication channel. A multicast channel switch message is transmitted to a plurality of client devices associated with the central coordinator. If an acknowledgement for the multicast channel switch message is not received from a first client device, the central coordinator causes remainder of the plurality of client devices to defer switching to the alternate communication channel and transmits a unicast channel switch message to the first client device. The central coordinator and the associated client devices switch to alternate communication channel after an acknowledgement is received from all the client devices.

Abstract: A URI-redirection via machine-scannable-code system and method are provided herein.

Abstract: A router and methods for its use are disclosed. The router includes input and output circuitry for receiving and routing data packets to computing devices connected to the network. The router also includes a memory configured to store a number of tables relating the destinations of particular packets with routes for the packets to follow. The router is capable of correctly routing data packets which specify false identity parameters. The router is also capable of dynamically varying routing protocols used to route data packets. The router is also capable of routing data packets to one of a number of output ports based on a comparison of at least one of the identity parameters that specifies false information to a table stored in the router's memory.

Abstract: A method and apparatus for providing a reliable Voice Extensible Markup Language (VXML) over packet networks such as Voice over Internet Protocol (VoIP) and Service over Internet Protocol (SoIP) network are disclosed. For example, a service provider may utilize a plurality of content servers that can be accessed by at least one telephony browser. The telephony browser can reach the content browsers directly as well as through a shared server that may load balance among the content servers. When a request for a VXML content, e.g., a VXML application, is received, the telephony browser sends the request to the shared server. If the request fails or a response is not received prior to expiration of a predetermined time interval, then the telephony browser sends a second request directly to one of the content servers that is capable of providing the requested content.

Abstract: A NAS load balancing system for distributing NAS loads of a NAS unit including a plurality of nodes and accessed via a network by multiple NAS clients is disclosed. In the NAS load balancing system, the NAS unit has multiple virtual IP addresses.

Abstract: A method for configuring data communication paths between a central controller and a plurality of devices is provided. The method ensures a first appliance is active. For each of the devices, a first communication capability is determined between the first appliance and the device. Signals indicative of the first communication capabilities are transmitted to the central controller. Respective communication paths are mapped between the central controller and the devices via the first appliance as a function of the first communication capabilities. The method ensures an automatic appliance failover is obtained.

Abstract: An address of an information object repository that should service a client request for an information object is returned in response to a request therefor. The address of the information object repository which is returned is selected according to specified performance metrics regardless of whether or not the information object repository maintains a local copy of the information object that is the client request. In some cases, the address of the information object repository is further selected according to an address of a client making the client request. Further, the address of the information object repository is selected from a number of addresses of information object repositories.

Abstract: A method begins by a router receiving a data packet and determining a destination of the data packet. The method continues with the router determining whether the router has an affiliation with the destination. The method continues with the router determining whether to temporarily locally store the data packet when the router has the affiliation with the destination. The method continues with the router locally storing the data packet and forwarding the data packet to the destination in accordance with a transfer protocol when the determination to temporarily locally store the data packet is favorable.

Abstract: A method for backing up a TCP connection includes a data transmission process and a data receiving process. The data transmission process includes obtaining, by an AMB of a transmitting end, boundary information of data; and backing up the data and the boundary information of the data to a SMB of the transmitting end. The data receiving process includes backing up, by the SMB, data received from a peer side of the TCP connection and the boundary information of the data received by the peer side to the AMB; and deleting the data received by the peer side from the data backed up by the SMB during the transmission process according to the boundary information of the data received by the peer side. The disclosure also provides an apparatus for backing up a TCP connection.

Abstract: Methods and devices are disclosed for including a plurality of users in a conversation over a communication network. A conversation is initiated when a text message is received requesting the conversation. A conversation is established using conversation gateways currently unused by users to be included in the conversation. Communication may occur across gateways in order to conserve conversation gateway resources.

Abstract: A network equipment is in communication with customer premises equipment (CPE) through a primary electrical path and a secondary electrical path, and includes a timer, a processor and a switching device. The timer provides heartbeat packets for the CPE via the primary electrical path and the secondary electrical path to obtain a first response time and a second response time corresponding to the primary and secondary electrical paths. The switching device is switched to the primary electrical path or the secondary path under the control of the processor. When the timer reaches a preset retransmission timeout, the processor controls the switching device to be switched to the secondary electrical path from the primary electrical path. When the second response time exceeds the first response time at least twice in succession, the processor enables the switching device to be selectively switched to the primary electrical path.

Abstract: In one embodiment, a router generates a notification message that indicates the router is to be gracefully removed from service. The router sends the notification message to peers of the router in a network. The router then continues to forward packets for a grace period after sending the notification message, to permit backup paths to be propagated to peers, and to be put into service, prior to withdrawal from service of paths through the router. Thereafter, the router is removed from service at the expiration of the grace period.

Abstract: Embodiments of the present invention relate a data processing method comprising executing a first application on a first processor of a multiprocessor system and implementing, on the first processor, a first protocol stack supporting a first communication channel, bearing first communication data, associated with the first application; and executing a second application on a second processor of the multiprocessor system and implementing, on the second processor, a second protocol stack supporting a second communication channel, bearing second communication data, associated with the second application.

Abstract: Provided is a router to acquire a content, even when accessibility to a server is impossible due to a network failure. The router comprises: a unit for storing content data included in a content reply message transmitted from a content server; a unit for, when the content server becomes unreachable, broadcasting, to other routers, an MBC setting request message configured to set guidance information in the other routers, the guidance information being used, when a content request message which requests the content server for the content data is transmitted from a content request node, to transfer the content request message to the own router; and a unit for replying a content reply message including the stored content data, when the content request message used to request the content server for the content data is transferred in accordance with the guidance information.

Abstract: An automated method for developing new products within a development entity, comprises receiving respective catalogs of technology assets, each including at least one of a patent, trade secret, know-how, documentation, prototypes, pre-production units, production samples, tooling, and demonstration frameworks. Each catalog corresponds to a discrete pool of technology assets having subject matter in common. The development entity also receives, from the originating owner, title to each pool in exchange for an equity interest in the development entity and an option to re-acquire the pool upon payment of a reacquisition fee to at least one primary investor. Further development of each technology asset pool is funded by at least one primary investor, who receives an equity interest in the development entity in exchange for its capital investments. Costs expended by the development entity to develop new product concepts corresponding to each asset pool are separately tracked.

Abstract: In an embodiment, a method comprises receiving a path advertisement comprising information about an available path and a well-known community value associated with the available path. A modified best path calculation is performed in response to receiving the available path either from a higher-ranked device or from a device that is not participating in diverse path calculation, resulting in creating a particular best path. The particular best path is advertised to other routers with or without a restriction indicator based on whether it is a client learned path or non-client iBGP peer learned path and based on whether the advertisement is directed to a client or a non-client iBGP peer.

Abstract: A network comprising a plurality of network devices is configured to implement scheduling for energy efficiency. In one aspect, a set of network devices interconnected in a line within a network is identified, and a common frame size is established. For each of the network devices of the line, active and inactive periods for that network device are scheduled in a corresponding frame having the common frame size, with the frames in the respective network devices of the line being time shifted relative to one another by designated offsets. For each of one or more of the active periods of each of the network devices of the line, received packets are scheduled for processing in that network device.

Abstract: Network data transmission systems and methods are described. In one embodiment, a method for transmitting data between two nodes of a network can include transmitting the data using a protection bandwidth of a first transmission path between the two nodes and, based on detecting a failure condition in the first transmission path, using a different second transmission path between the two nodes to transmit the data otherwise transmitted using the protection bandwidth of the first transmission path. In one embodiment, the systems and methods can be applied to networks that use a layer-1 redundancy scheme.

Abstract: A system and method for automatically cloning or migrating a computing appliance while maintaining its operational state. A configuration bundle that includes configuration data, software revision level and a list of system updates is used to recover or duplicate a device's operation state. The system and method can also be utilized to migrate a computing appliance between different operating system while maintaining or replicating the previous operational state.

Abstract: An information processing apparatus searches for an apparatus that has a transmission destination that can be accessed from an image forming apparatus on a network when a transmission destination of file transmission processing cannot be accessed from the image forming apparatus, generates a process flow including processing in which the image forming apparatus transmits a file to the transmission destination in the apparatus found through the search and transmits the generated process flow to the image forming apparatus, and generates a process flow including processing for moving the file from the transmission destination in the apparatus found through the search to a designated transmission destination and stores the generated process flow in the information processing apparatus. The information processing apparatus executes the generated process flow when the end of the processing is notified from the image forming apparatus.

Abstract: Apparatus and systems may include a first node group include a first network node coupled to a memory, the first network node including a first port, a second port, a processor port, and a hop port. Network node group may include a second network node coupled to a memory, the second network node including a first port, a second port, a processor port, and a hop port, the hop port of the second network node coupled to the hop port of the first network node and configured to communicate between the first network node and the second network node. Network node group may include a processor coupled to the processor port of the first network node and coupled to the processor port of the second network node, the processor configured to access the first memory through the first network node and the second memory through the second network node. Other apparatus, systems, and methods are disclosed.

Abstract: A method for location based address assignment for the distribution of traffic is provided that includes receiving a request for service from a host. A location of the host within a network environment is identified. A selected one of a plurality of gateway devices is assigned to service the host based on the location of the host within the network environment and the location of the selected one of the gateway devices within the network environment. A forwarding address associated with the selected one of the gateway devices is transmitted to the host for subsequent use by the host in forwarding network traffic.

Abstract: Methods and apparatus for adaptively scheduling a finger stabilization algorithm. A method is provided that includes comparing first and second finger determinations associated with a node, increasing a time interval between executions of a finger stabilization algorithm if differences between the finger determinations satisfy a first criteria, and decreasing the time interval between executions of the finger stabilization algorithm if differences between the finger determinations satisfy a second criteria.

Abstract: Routing a request in a network that has a repository of information about dynamically changing network paths between nodes within the network may include, with a requesting node, consulting the repository and sending a request to an indirectly connected destination node within the network though an end-to-end route based on information within the repository.

Abstract: The computer system of the present invention has a plurality of SAS target devices, an SAS initiator device, and a service delivery subsystem that is connected to each SAS target device by means of a physical link that is physical wiring and connected to the SAS initiator device by means of a wide link constituted by a plurality of physical links. The SAS initiator device controls how many physical links in the wide link are allocated to a particular SAS target device, whereby access from the SAS initiator device to the SAS target device is made via a physical link that is allocated to the SAS target device and is not made via a physical link that is not allocated to the SAS target device.

Abstract: A communication network design circuit can derive a path and a necessary link capacity for multiple point communication service permitting arbitrary communication within a predetermined range of communication amount by providing traffic amount of data in-flowing through an ingress node and traffic amount of data flowing out through an egress node. The communication network designing circuit has setting means for setting a mathematical programming problem for deriving the multiple point communication service and optimizing means for solving the mathematical programming problem set by the setting means and obtaining the path for the multiple point communication service.

Abstract: A network architecture in accordance with the present invention includes a communication network that supports one or more network-based Virtual Private Networks (VPNs). The communication network includes a plurality of boundary routers that are connected by access links to CPE edge routers belonging to the one or more VPNs. To prevent traffic from outside a customer's VPN (e.g., traffic from other VPNs or the Internet at large) from degrading the QoS provided to traffic from within the customer's VPN, the present invention gives precedence to intra-VPN traffic over extra-VPN traffic on each customer's access link through access link prioritization or access link capacity allocation, such that extra-VPN traffic cannot interfere with inter-VPN traffic.

Abstract: A method for processing data packets in a communication network includes establishing a path for a flow of the data packets through the communication network. At a node along the path having a plurality of aggregated ports, a port is selected from among the plurality to serve as part of the path. A label is chosen responsively to the selected port. The label is attached to the data packets in the flow at a point on the path upstream from the node. Upon receiving the data packets at the node, the data packets are switched through the selected port responsively to the label.

Abstract: Systems, methods, and apparatus for facilitating utility meter communication are provided. One or more communications to be transmitted by a utility meter may be identified by the utility meter. A cost associated with the transmission of the one or more communications may be determined by the utility meter, and a determination may be made as to whether the cost satisfies one or more cost parameters. If it is determined that the cost satisfies the one or more cost parameters, the one or more communications may be transmitted by the utility meter. If, however, it is determined that the cost does not satisfy the one or more cost parameters, the one or more communications may be stored by the utility meter for subsequent transmission.

Abstract: Processing a browser request that specifies a destination network resource generally includes intercepting a browser request that specifies a selected destination network resource and redirecting the browser request to a network server that differs from the destination resource specified by the browser request. Processing a browser request also may include intercepting a browser request received from a client computer at a proxy server when the browser request specifies a selected destination network resource and performing instructions associated with and in addition to instructions performed to download the selected destination network resource.

Abstract: A distributed storage system includes, a plurality of storages configured to store a plurality of items of block data obtained by dividing an original data in a distributed manner, a route planning unit configured to obtain unused bandwidth information of a plurality of networks that are connected to the plurality of storages, and a balancing control unit configured to obtain block data that is a target of data transfer among the plurality of the storages based on the unused bandwidth information of the plurality of networks, and position information indicating a position of the block data in the original data.

Abstract: A recovery network may provide communication recovery and backup services to a carrier having a service area. The recovery network may be configured to communicatively couple the carrier to the public communication network (PCN) using one or more alternative communication paths, such as a satellite network. The alternative communication paths may couple the recovery network to the carrier independently of the PCN. When the carrier detects a failure in its uplink to the PCN, it may failover to the recovery network, which may service the communication requests using the alternative communication path(s). Similarly, the recovery network may be used to service inbound communication requests directed to the carrier or other organization, such as a Public Safety Answering Point (PSAP). When used with a PSAP, the recovery network may be configured to access and/or provide metadata related to inbound communication requests.

Abstract: Embodiments of the invention include a method performed in a packet processor core for policing a packet through a hierarchical policer coupled to one or more policing requestors. The hierarchical policer has a plurality of meter levels including an initial level and one or more subsequent levels. The hierarchical policer creates a meter result at the meter of each meter level using packet characteristics and a meter state for that meter level. The hierarchical policer generates meter level outputs that classify the packet for each meter level and for at least one of the subsequent levels the meter level output is based on the meter level output from a previous meter level. The hierarchical policer performs a meter combine operation that produces a final packet output attribute from the combination of the meter level outputs. The hierarchical policer returns the final packet output attribute to a policing requestor.

Abstract: A server downloads a code image to remote devices so that the remote devices are performing properly in accordance with an updated version of the code image. The server may include an application server that targets devices and informs the targeted devices about a multicasting session. The targeted devices subsequently join the multicast session supported by a multicasting server and extract the code image from the multicast session. After the multicast session has been completed, the downloading center polls the targeted devices to determine which devices have successfully downloaded the code image. The server may repeat the download to devices that did not successfully download the code image by subsequently scheduling a subsequent multicasting session or by individually sending the code image to the devices. Portions of the code image may be sent in multicasting messages based on a depth level and interval.

Abstract: Methods and systems for reroute and generation of backward routing information are provided. When an originator node wants to transmit a packet to a destination node and cannot transmit the packet to a next node recorded in a routing table, the originator node records a backward packet tag and information of the originator node into the packet, and transmits the edited packet to a backup node recorded in the routing table. The backup node retrieves a backward routing table in response to the backward packet tag to see whether a forwarding node corresponding to the originator node and the destination node is a backward routing terminal. If not, the backup node transmits the packet to the forwarding node. If so, the backup node removes the backward packet tag and the information of the originator node from the packet, and transmits the packet to the forwarding node.

Abstract: A method includes receiving network distance information, receiving a request from a client for an identity of a peer providing content, and identifying a first peer and a second peer providing the content. The network distance information includes a compilation of network distance information provided by a plurality of service providers. The method further includes determining that a network distance between the first peer and the client is less than a network distance between the second peer and the client based on the network distance information, and providing the identity of the first peer to the client.

Abstract: A network comprises a communication device having network communication interfaces and a data processing node having network communication ports. The communication device includes a first and a second interface communicatively coupled to a first and a second port of the data processing node respectively. The first interface is selected as a primary interface for the transmission of network traffic to destinations across the network. The second interface is selected as a backup interface which is to be selected for the transmission of the network traffic in the case of a need to failover to the backup interface. Network traffic from the communication device is transmitted via the first interface while the first interface is selected as the primary interface. At least one data message is transmitted from the communication device via the second interface, while the first interface is selected as the primary interface.

Abstract: A method of broadcasting a data packet (D) in an ad hoc network comprising a plurality of groups of mobile nodes traveling along traffic lanes in a road network. The data packet (D) is broadcast within a group (G) during an intragroup broadcasting phase during which the data packet (D) propagates simultaneously in two opposing directions of movement (A1, A2), such that the packet (D) is received by peripheral nodes (B1, B2) of the group (G). During an intergroup broadcasting phase, a peripheral node (B) transmits the data packet (D) to another group.

Abstract: Provided are methods, devices, and systems for maintaining a SIP survivable network. A SIP endpoint maintains an ordered list of the controllers that are available to it and registers with a subset containing the first N controllers in the list, where N is a plurality, but not all, of the controllers in the list, and obtains services from one or more of the controllers of the subset. If one of the controllers of the subset becomes unavailable, the endpoint registers with the (N+1)st controller in the list, thereby adding it to the subset. If and when the one controller becomes available again, the endpoint de-registers with the (N+1)st controller, thereby removing it from the subset, and if necessary re-registers with one controller. The subset thus forms a sliding window on the list.

Abstract: A location manager includes a memory and a processor coupled to the memory. The processor executes a process including extracting a combination of a transfer device and a path by using topology information indicating a relation of connections among transfer devices. The process including calculating a sum of an amount of electric power consumed by the transfer device being included in the combination to store the data and an amount of electric power consumed by transfer devices on a path included in the combination to transfer the data. The process including selecting a combination of which the sum of electric power calculated at the calculating is a minimum sum out of the combinations extracted at the extracting. The process including outputting information indicating the combination selected at the selecting.

Abstract: A system measures traffic in a device. The system tracks an amount of data and the data units and predicts the amount of padding associated with the data units. The system determines the amount of traffic in the device based on the predicted padding, the amount of data, and the number of data units.

Abstract: A communications system may include at least one destination server for hosting email message boxes, and communications devices for generating email messages each associated with a respective message box. A delivery server may have a plurality of queues and a controller. The controller may store the email messages in a first queue, and attempt to send the stored email messages to the destination server at a first sending rate. The controller may also move email messages stored in the first queue to a second queue based upon a delivery failure. Email messages may be sent from the second queue at a second sending rate less than the first sending rate. The controller may also move email messages from the second queue to the first queue having a common characteristic with a successfully delivered email message.