Abstract: A central host performs an automated method of updating multiple remote devices. In one embodiment, the host recognizes a predetermined download time and, in advance of the download time, transmits a calendar update to multiple remote devices. The calendar update includes the download time, and the remote devices may utilize the download time to set calendar reminders for entering an active state. Within a short time after reaching the download time, the host pushes download data to the remote devices by broadcasting the download data. In one aspect, the host may receive message acknowledgements from remote devices in response to a first calendar update, and the host may automatically transmit additional calendar updates to any remote devices that did not receive the first calendar update. Additional embodiments involve related methods and the terminal devices that receive the updates.

Abstract: A method for generating an update status alert at a receiving device, the receiving device operating in a network of participating devices, each participating device broadcasting status information about a monitored entity associated with a respective participating device, the method comprising the steps of: receiving broadcast status information from each of the participating devices; aggregating the received status information to derive a consensus of the status information received from each of the participating devices; comparing the derived consensus with the status of the monitored entity of the receiving device; detecting a difference between the derived consensus and the status of the monitored entity; and in dependence of a difference being determined, generating an update status alert at the receiving device.

Abstract: A method and apparatus are provided for detecting peer-to-peer communication on a data communication network, between an internal client machine within an internal address space and an external client machine. The method includes routing all messages addressed to internal client machines to an analysis device. The analysis device identifies messages pertaining to peer-to-peer communication and identifies the internal client machine to which the messages of a specified nature were addressed. The analysis device terminates the connection with the external client machine if the establishing of the peer-to-peer communication is in violation of a pre-determined internal network rule.

Abstract: A method includes receiving network distance information, receiving a request from a client for an identity of a peer providing content, and identifying a first peer and a second peer providing the content. The network distance information includes a compilation of network distance information provided by a plurality of service providers. The method further includes determining that a network distance between the first peer and the client is less than a network distance between the second peer and the client based on the network distance information, and providing the identity of the first peer to the client.

Abstract: Methods, apparatus, and products are disclosed for optimizing a physical data communications topology between a plurality of computing nodes, the physical data communications topology including physical links configured to connect the plurality of nodes for data communications, that include carrying out repeatedly at a predetermined pace: detecting network packets transmitted through the links between each pair of nodes in the physical data communications topology, each network packet characterized by one or more packet attributes; assigning, to each network packet, a packet weight in dependence upon the packet attributes for that network packet; determining, for each pair of nodes in the physical data communications topology, a node pair traffic weight in dependence upon the packet weights assigned to the network packets transferred between that pair of nodes; and reconfiguring the physical links between each pair of nodes in dependence upon the node pair traffic weights.

Abstract: It is an object to provide a data collection system that is configured to reduce a communication amount, etc. at the time when data are collected from a plurality of devices, so as to reduce a communication amount attended by the collection of data without increasing processing loads imposed on devices. A symbol classifying unit of a data relay device classifies received data that have been already compressed. A data recompressing unit replaces codes contained in the classified already compressed data with other codes, so as to recompress the already compressed data. A symbol set clustering unit sends a transfer destination renewal device a communication speed at the time when the recompressed data are transferred to other devices, a processing speed at the recompressing time, etc. The transfer destination renewal device generates transfer destination information on the basis of the communication speed, the processing speed, etc.

Abstract: In one embodiment, a method can include: (i) classifying a packet in a server load balancer (SLB) for determining if the packet is destined for a virtual Internet protocol (VIP) address hosted on the SLB; (ii) selecting a server from a group of servers representing the VIP address; (iii) changing a destination IP address of the packet from the VIP address to a real IP address of the selected server; and (iv) recirculating the packet for repeating the classifying.

Abstract: A wireless networking system uses mobile and fixed transceivers to achieve a network with changing topology. A routing process includes quality-of-service considerations in the network to allow for features such as file or other data transfer, streaming audio and video, digital telephone communications, etc. The routing process adapts to transceiver units entering, leaving, or moving within, the network. Auxiliary networks such as the Internet, campus or corporate intranets, home networks, etc., can be accessed through the wireless network. Features, designs and user interfaces for the units are described. Security and access control of media content and other data is presented.

Abstract: A client on a packet based network is provided with a stream of encoded video data. The system is maximizes the bit-rate of the video stream by adapting to fluctuations in network capacity. Adaptation of the bit-rate of the transmitted enclosed video data is timed to occur upon a scene change in the video sequence. In this way the interruption to the viewer when the perceived quality of the video sequence increases or decreases is minimized as it is ‘hidden’ in the scene change. The technique may be applied to hierarchically encoded video data and to other encoding technique which adapt to network conditions.

Abstract: A method and system for dynamic distributed data caching is presented. The system includes one or more peer members and a master member. The master member and the one or more peer members form cache community for data storage. The master member is operable to select one of the one or more peer members to become a new master member. The master member is operable to update a peer list for the cache community by removing itself from the peer list. The master member is operable to send a nominate master message and an updated peer list to a peer member selected by the master member to become the new master member.

Abstract: Systems and methods are provided for selecting a path for an I/O in a storage area network. In one embodiment, a method comprises receiving path configuration information for paths associated with a host device connected to the storage area network, a listing of components within the storage area network, and a notification of a component failure within the storage area network. The method may also comprise correlating the received path configuration information, the received listing of components, and the received notification of component failure to determine one or more paths associated with the host device affected by the component failure. The method may further comprise transmitting to the host device an alert for the one or more affected paths.

Abstract: A router of a network is configured to manage routing of packets based on executing applications. The network communicates packets of information between endpoints coupled to the network. Each packet is assigned to a traffic class based on the application associated with the packet. The router manages routing of received packets based on the traffic classes associated with the received packets. Accordingly, the router can determine routing priority, bandwidth, acknowledgment policy, and other routing management information based on the applications associated with received packets.

Abstract: A cryptographic processor for redundantly-processing cryptographic operations is disclosed. The cryptographic processor includes a number of input ports, a first and second cryptographic engines, comparison logic and a plurality of output ports. The number of input ports is configured to accept both plaintext and ciphertext. Each of the number of input ports is coupled to both the first and second cryptographic engines. The comparison logic is configured to determine if the first and second cryptographic engines produce a result that is different. The number of output ports is configured to produce both plaintext and ciphertext.

Abstract: A terminal device includes multiple interfaces having links to various networks. When a trigger event occurs, the terminal device selects a target link to a network to transition from its current link. A candidate link selection function determines candidate links that are filtered to remove links not meeting connectivity criteria. A target link selection function is then executed to select a target link from the filtered candidate links. Thus, the target link selection function is not run for every possible link, but only those meeting the criteria.

Abstract: An apparatus and a method for layer-2 and layer-3 VPN discovery are disclosed. The apparatus is incorporated in a network, and the network includes a first carrier network. The first carrier network includes at least two layer-1 provider edge devices. Layer-1 VPN information is created within the first carrier network. BGP next hop information passes within the first carrier network. The BGP next hop information is for a selected one of the following: a layer-2 VPN-based provider edge device, a layer-3 VPN-based provider edge device, and a layer-2 and layer-3 VPN-based provider edge device. The network also includes a second carrier network within which the BGP next hop information is used for VPN discovery.

Abstract: A recording medium storing a program for performing collective communication of unique-messages by a computer. According to the program, a space in which nodes are arranged is equally split into regions according to directions from the origin of a relative coordinate system, and a region to which each node belongs is determined on the basis of the relative coordinates of the node. When the computer receives an instruction to execute collective communication of unique-messages, messages are submitted to nodes in turns so that the numbers of messages addressed to the respective regions and submitted per predetermined unit time are equated, and each message submitted to one of the nodes contains data unique to the node.

Abstract: Communication device capabilities may change during an established multimedia session due to connection of a peripheral device. For example, a user listens to an Internet radio service on a mobile phone through a set of headphones. Later, the user connects the mobile phone to stereo system in a car. The mobile phone can leverage the car's stereo system to present higher quality audio than it could present with the headphones. Functionality can be implemented in a communication device to detect connection of a peripheral device and determine multimedia capabilities of the peripheral device. The communication device updates its presence information to indicate the multimedia capabilities of the peripheral device. In response, a multimedia server determines multimedia capabilities indicated in the presence information have changed and optimizes delivery of multimedia content based on the updated multimedia capabilities.

Abstract: Network traffic associated with a set of domain names is redirected according to campaigns provided by one or more potential purchasers of network traffic. The campaigns include a set of preferences for the network traffic a campaign targets. Individual requests for a domain in the set of domain names are analyzed to determine a set of request attributes. The set of request attributes are compared with the sets of preferences provided by the potential purchasers. The traffic is redirected according to the campaigns provided by purchasers. Network traffic for a set of domain names can be auctioned or otherwise sold in real-time based on campaigns provided by potential purchasers. Conversion tracking may provided independently or in combination with redirecting network traffic according to campaigns.

Abstract: A modular development platform is described which enables creation of reliable, compact, physically robust and power efficient embedded device prototypes. The platform consists of a base module which holds the processor and one or more peripheral modules each having a peripheral device and an interface element. The modules can be electrically and physically connected together. The base module communicates with peripheral modules using packets of data with an addressing portion which identifies the peripheral module that is the intended recipient of the data packet.

Abstract: The present invention supports a method for transmitting information packets across network firewalls. A trusted entity is provisioned with an address designation for a pinhole through the firewall during setup of a communication session between two communication devices. This pinhole address is used throughout the communication session between the two communication devices to transmit information packets onto and out of the communication network. Information packets addressed to the communication device inside the firewall are received by the trusted entity, which replaces address header information in the information packet with the address for the pinhole. The information packet is routed to the pinhole where it passes onto the network for routing to the communication device inside the firewall. Information packets transmitted from the network are also routed to the trusted entity for routing toward the communication device outside the firewall.

Abstract: A system includes an information storage module and an inspection module. The information storage module is configured to store a plurality of tags. Each tag is associated with a known set of traffic types of a plurality of known sets of traffic types. The inspection module is configured to compare a traffic flow to a set of traffic types to determine a matching set of traffic types, request a tag from the information storage module, and mark the traffic flow with the tag. The tag corresponds to the matching set of traffic types.

Abstract: Methods and apparatus that enable more than one server to host a resource using a shared IP address such that a client may generally access the resource on any of the servers using the shared IP address are disclosed. According to one aspect of the present invention, a method for providing paths that allow a client to access a resource in a TCP/IP network includes obtaining an IP address, as well as associating the IP address to first and second servers. The first and second servers support the resource at the IP address, and a first path of the plurality of paths that allow the client to access the resource is between the client and the first server and a second path of the plurality of paths that allow the client to access the resource is between the client and the second server.

Abstract: A method and apparatus for routing a data stream through a plurality of data movers independent of a network interface type is provided. In one embodiment, the method for routing the data stream to a destination with indifference to network interface type includes segregating the data stream into a plurality of data blocks at an application layer, wherein the plurality of data blocks are to be routed to a destination through the plurality of data movers and coordinating data path selection for communicating the plurality of data blocks to the plurality of data movers over a plurality of data paths.

Abstract: In one embodiment, a method can include: determining a topology of digital picture frames in a frame network; identifying a lead picture frame from among the digital picture frames; sending the digital picture frame topology to a client coupled to the lead picture frame; receiving in the lead picture frame and from the client, media content for display on a destination digital picture frame in the frame network; and routing the received media content to the destination digital picture frame using router functionality in at least one of the plurality of digital picture frames.

Abstract: Systems and methods for reducing network performance degradation by assigning caching priorities to one or more states of a state machine are disclosed herein. In one embodiment, the method comprises storing, in a memory, a state machine corresponding to one or more patterns to be detected in a data stream, wherein the state machine comprises a plurality of states, generating a test data stream based on the one or more patterns, traversing the state machine with the test data stream, determining a respective hit quantities associated with each of the plurality of states, the hit quantities each indicating a number of accesses to a corresponding state by the traversing, and associating a caching priority to at least some of the plurality of states based on the hit quantities of the respective states.

Abstract: A system for automated installation of a communication line using an optimal route between a source location and a destination location is disclosed. The system includes a routing module configured to provide an automated design process for rendering the optimal route. The routing module utilizes a routing algorithm to select the optimal route from a graph of capacity links defining a plurality of possible routes between the source and destination locations. If, at any time during the design process, the optimal route or capacity links defining the optimal route are detected as unavailable for any reason, the routing module re-initiates the design process and thereafter selects a new optimal route based upon a new capacity graph built without the previously unavailable capacity link. A command and control engine manages the process for assigning the optimal route in the provisioning system.

Abstract: A device provides layer two (L2) services between customer networks that are coupled by one or more intermediate computer networks. The device comprises a routing process that receives label information for a label switched path (LSP) through the intermediate networks. The device further comprises a L2 service that receives L2 service information from a device associated with second customer network. In accordance with the label information, the device transports L2 communications between the first and second customer networks through the one or more intermediate networks. By utilizing label information in this manner, the device may minimize the impact of providing L2 services through the intermediate networks.

Abstract: Methods and system for admission control and scheduling in ad hoc wireless networks are provided. The method for admission control and scheduling in ad hoc wireless networks for different class of flows C1, C2 and C3 is provided where said admission control mechanism evaluate the probability of QoS violation and admit those calls whose probability of QoS violation is below a specified threshold. Admission Control for Class C1 evaluates the probability where destination node is a one-hop neighbor of the source node. Admission Control for Class C1 evaluates the probability where source and destination nodes are not one hop neighbors. Admission Control for Class C2 and class C3 flows evaluates the average or mean delay requirement and a requirement on the rate. Scheduling class C1 flows when admitted flows violate the QoS requirements; and Scheduling class C2 and class C3 flows.

Abstract: An address of a terminal on a network is fixed during the session. The present invention provides an electronic apparatus that can be connected to a network, including, a communication unit communicating with another electronic apparatus existing on the network, a temporary-address setting unit setting a temporary address that is temporarily valid on the network, an address-requesting unit requesting that an address management apparatus connected to the network should set an address at a predetermined timing, when the temporary address is set, and an address-request stopping unit inhibiting the address-requesting unit from operating, while the communication unit is communicating with the other electronic apparatus, by using the temporary address.

Abstract: Various methods to prioritize the transmission of interactive digital content to multiple users to achieve efficient usage of available bandwidth are disclosed. The present invention covers prioritization of transmission of digital content based on information transmitted from the receiver. In addition, prioritization of multicast transmission of digital content to multiple clients accessing a shared interactive environment can be realized.

Abstract: There is disclosed a method, apparatus and computer program for communicating messages between a first messaging system and a second messaging system. The messaging system comprises a set of source queues with each source queue owning messages retrievable in priority order. It is determined that a message should be transferred from the first messaging system to the second messaging system. A source queue is selected which contains a message having at least an equal highest priority when compared with messages on the source queues. A message having the at least equal highest priority from the selected source queue of the first messaging system is then transferred to a target queue at the second messaging system.

Abstract: Communicating information about a contact, such as presence status, may be regulated in accordance with priority values associated with contacts. Various parameters about contacts with respect to a particular environment may be collected and utilized to assign priority values to the contacts. Flow of information about the contacts is regulated based on the assigned priority values. Information about contacts with higher priority values may be communicated more frequently to client devices from one or more servers than those contacts with lower priority values. In addition, information about contacts associated with priority values that satisfy one or more criteria may be prefetched from a server to a client device.

Abstract: A method of establishing a secure communication channel between end nodes of an IP communication network via one or more intermediate nodes using the Secure Shell, SSH, protocol, the method comprising defining an SSH configuration file containing a plurality of sections, each section defining parameter values for a corresponding hop of the tunnel and an identification of the section defining parameter values for any subsequent hop. At that end node, a first instance of an SSH client is established, with the name of the configuration file being an initialization value for the first instance, and using the parameter values contained in a first section of the configuration file to establish a first SSH connection to the next node in the sequence.

Abstract: A method and system for rerouting data over a local area network is provided. The method comprises defining at least one port group associated with a bridging device, each port group including interfaces linked to the bridging device. A plurality of statuses for each port group is defined, the status being dependent on the individual statuses of the interfaces linked to the bridging device. At least one target port associated with each port group, each target port relating to a path for data. The method further comprises defining an action for each status of a port group and monitoring the status of the interfaces forming part of each port group. In response to determining the status of a port group, triggering the predefined action associated with the port group status at one of the port group's target ports.

Abstract: Secure tunneled multicast transmission and reception through a network is provided. A join request may be received from a second tunnel endpoint, the join request indicating a multicast group to be joined. Group keys may be transmitted to the second tunnel endpoint, where the group keys are based at least on the multicast group. A packet received at the first tunnel endpoint may be cryptographically processed to generate an encapsulated payload. A header may be appended to the encapsulated payload to form an encapsulated packet, wherein the header includes information associated with the second tunnel endpoint. A tunnel may be established between the first tunnel endpoint and the second tunnel endpoint based on the appended header. The encapsulated packet may be transmitted through the tunnel to the second tunnel endpoint. The second tunnel endpoint may receive the encapsulated packet. Cryptographic processing of the encapsulated packet may reveal the packet having a second header.

Abstract: To provide a technology capable of reducing a processing load on a base station controller and restraining a traffic quantity within a mobile communication system. A base station apparatus connected to a base station controller has a first establishing unit establishing a first logic communication path between the base station apparatus and the base station controller; a second establishing unit establishing a second logic communication path between the base station apparatus and another base station apparatus; and a forwarding unit forwarding data, transmitted and received with the another base station apparatus and the base station controller serving as terminal points, as data of another base station apparatus via the first logic communication path and the second logic communication path.

Abstract: Layer-7 application layer message (“message”) classification is disclosed. A network traffic management device (“NTMD”) receives incoming messages over a first TCP/IP connection from a first network for transmission to a second network. Before transmitting the incoming messages onto the second network, however, the NTMD classifies the incoming messages according to some criteria, such as by assigning one or more priorities to the messages. The NTMD transmits the classified messages in the order of their message classification. Where the classification is priority based, first priority messages are transmitted over second priority messages, and so forth, for example.

Abstract: A network system for inter-component communications in an electronic device is disclosed. The system comprises a plurality of components for an electronic device, where each of the components communicates with at least one other component over a communications medium for a wireless mesh network. Each of the components comprises a communications transceiver operable to determine network traffic load levels for an exchange of communication data between the components, and allocate the network traffic between at least one pair of the components over a plurality of wireless links within the wireless mesh network based on potential-field based measurements at each of the components. In addition, each of the communications transceivers share the exchange of the communication data between the components based on a prescribed priority level for allocation of the network traffic.

Abstract: A system and method for prioritizing data packets being communicated over a packet network may include receiving a data packet at a network node. The data packet may include an origination network address, a destination network address, and a data field. A determination may be made as to whether at least one of the origination and destination network addresses is a priority network address. The data field of the data packet may be set to a priority value if at least one of the origination and destination network addresses is determined to be a priority network address. The data field of the data packet may be set to a non-priority value if both the origination and destination network addresses are determined not to be a priority network address.

Abstract: Systems and methods for performing storage operations over multi-stream data paths are provided. Prior to performing a storage operation, it may be determined whether multi-streaming resources are available to perform a multi-stream storage operation. Availability of multi-streaming resources may be related to network pathways capable of supporting multi-stream storage operations, existing network load related to other storage operations being or to be performed, availability of components capable of supporting multi-stream storage operation, and other factors. If system resources to support multi-stream storage operations are not available, the system may optionally perform a traditional storage operation that does not incorporate multiple data streams.

Abstract: A technique dynamically assigns priorities to traffic engineering (TE) label switched paths (LSPs) from a head-end node of a computer network. The novel technique increases the ability to place TE-LSPs that would be otherwise blocked by bandwidth fragmentation. Specifically, a head-end node allocates a range of priority values for groups of possible TE-LSP configurations, such as, e.g., groups by type and/or size of the possible TE-LSPs. When requesting a TE-LSP, the head-end node attempts to establish the TE-LSP by dynamically increasing a priority value of the TE-LSP within the corresponding range of priority values until adequate resources are available, at which time the head-end node may establish the TE-LSP.

Abstract: A system for centrally controlling packet network communications may include an input/output (I/O) unit configured to communicate data packets over a packet network with multiple network communications devices, a processing unit in communication with the I/O unit and configured to communicate with the network communications devices via respective node segments, and a memory in communication with the processing unit and configured to store a table. The processing unit may be configured to receive and store network performance information of node segments generated by the network communications devices. The network performance information may be stored in the table in association with indicia representative of the node segments, respectively. The processing unit may further be configured to control network communications by the network communications devices over the node segments based on the network performance information stored in the table.

Abstract: In some networking situations, securing an inner packet of a tunnel packet requires an intermediary networking device knowing a destination address of the secured inner packet. Consequently, an identity of a secured network is known to others and presents a security risk. The provided technique addresses this risk by: i) establishing at a first security interface a first secured network connection between a first and second secured network, the connection established for a first packet addressed to a virtual security interface and destined for the second secured network; and ii) responding to a network condition by establishing at a second security interface at least one second secured network connection between the first and second secured network, the connection established for a second packet addressed to the virtual security interface and destined for the second secured network.

Abstract: When path status information is updated, the time at which the update is effective is recorded. A packet arrival time in each path is predicted based on new status information and data transmission history after the effective time. The packet is transmitted to the path that provides a fastest packet arrival time. This reflects the path status available from the reception side on the data transmitted in past, so that an actual data arrival time, an arrival time close to a reception completion time, or a reception completion time can be predicted.

Abstract: A technique for enforcing a database relationship is disclosed. The technique includes specifying within a database schema a reference type that associates two structures and specifies the relationship between the two structures, and automatically generating code that checks the relationship between the two structures based on the specified reference in the database schema.

Abstract: A method, system, and computer program product reports malware events in real-time and does not cause network congestion that adversely affects the usability of the network. A method of reporting malware events comprises the steps of detecting a malware event, determining a level of the detected malware event, comparing the level of the detected malware event to an event trigger threshold, and transmitting a notification of the detected malware event, based on the comparison of the level of the detected malware event to the event trigger threshold.

Abstract: Provided are improved SIP communication systems and methods for traversing firewalls, NATs, and ALGs. An encapsulation protocol is used to preserve the original SIP message by encapsulating the original SIP message in visible encapsulation protocol of layers 4+. An encapsulated SIP message is decapsulated after transparently traversing a firewall, NAT, and/or ALG.

Abstract: Priority-biased compound arbitration at a switching fabric ingress. The ingress includes a plurality of ingress queues and a priority-biased arbitration engine configured to arbitrate between the ingress queues. The ingress further includes exit first-in-first-out queues (FIFOs) configured to forward cells from the ingress queues to a switching fabric and a throughput-biased arbitration engine configured to arbitrate between the exit FIFOs.

Abstract: Cascading a lookup over multiple lookup tables when performing multicast forwarding involves accessing a first lookup table based on at least part of a multicast destination address included in a packet header. The first lookup table identifies the portion (e.g., one or more entries) of a second lookup table in response to a key generated from a first portion of the packet header. The portion of the second lookup table can be accessed based on a second portion of the packet header. The second lookup table identifies at least one output interface via which the packet should be output. Such systems and methods may, in some embodiments, allow existing hardware to be used to support a new addressing format that involves larger addresses than were previously supported by that hardware.

Abstract: Described are techniques for providing an application program interface that leverages the terminal services session broker infrastructure to support third party plug-in applications. In a typical scenario, when a user requests for a connection to access third party plug-in applications, the application program interface may override the session broker logic and interacts with the session broker process to identify sessions or suitable servers to which the user can be connected. The user may access the third party plug-in applications through the identified sessions or suitable servers.