Abstract: A method for routing communications on a network node in a communications network includes: updating a central domain master regarding changes detected in topology, receiving a routing plan from the central domain master, where the routing plan is calculated at least in accordance with the changes, and transmitting data as necessary in accordance with the routing plan. A method implementable on a central domain master for routing communications between network nodes in a communications network includes receiving transmissions regarding changes detected in topology from the network nodes, calculating a routing plan based on at least the transmissions, and distributing the routing plan to the network nodes, where the central domain server is one of the network nodes.

Abstract: A temporary ENUM architecture assigns a temporary ENUM at call time. For an originated communication requiring routing to a party which needs a particular callback format not supported, the TempENUM provides consistency with the specific format required by the receiving party. The TempENUM is assigned for the duration of the call or communication, or for a given amount of time thereafter. The TempENUM service gateway includes a TempENUM database, a module that assigns a suitable TempENUM at the time of call routing, and a module that handles a lookup in the TempENUM database, and maps the assigned TempENUM to a calling party identifier (CgPID). The TempENUM database stores a TempENUM from a coordinator system and relates the actual calling party identifier (CgPID) for use in callback attempts. Either during the initial call or communication, or shortly thereafter, the receiving party uses the TempENUM number to return communication the initial caller.

Abstract: Location based security rules are provided for preventing unauthorized access to a device, application, system, content, and/or network, etc. The location-based security rules enable a user, computing device, system, etc. to access the requested item or information when the user provides proper identification information. The proper identification information is based in part on the location of the user and/or the user's access request.

Abstract: A method, apparatus, and system are described for a route server that connects network users to network providers. The route server may connect to network elements, including routers, from a plurality of Internet network service providers (ISP) to the network elements of a plurality of users through the route server. The route server also may make routing decisions for the plurality of users and the plurality of ISPs and is programmed to maintain multiple views of the routing table as well as implement multiple BGP instances, each instance representing different autonomous systems, in a single instance of the route server. The route server also may match a first user to one or more of the ISPs based on criteria including not only the best possible routes of each ISP but a full listing of all possible routes to a destination address from each ISP matching the user's criteria in order to construct a route table to get IP packets of a user to a destination address.

Abstract: Systems and procedures are presented for communicating multiple data streams through an SSLVPN gateway. One implementation of a method includes receiving a plurality of incoming data streams and load balancing the incoming data streams. The load balancing includes assigning a first set of one or more incoming data streams to a first subprocessor, and responding to the first set of incoming data streams with outgoing data streams that include a first identifier that indicates the first subprocessor. One implementation of a network element includes a plurality of subprocessors and a dispatcher module. The dispatcher module is coupled to the plurality of subprocessors, and is configured to recognize an identifier in a received data stream. The dispatcher module dispatches the received data stream to a corresponding subprocessor of the plurality of processors in response to the identifier in the received data stream.

Abstract: A system is connected to an access point via a network, receives packet transmission information held by the access point, and extracts an address having a transfer destination which is radio interface from the packet transmission information. It is assumed that the terminal of the extracted address exists under the access point holing the packet transmission information. Thus, it is possible to realize connection relationship between a terminal and an access point at low cost and not depending on the vendor.

Abstract: A system and method for enabling the interchange of enterprise data through an open platform is disclosed. This open platform can be based on a standardized interface that enables parties to easily connect to and use the network. Services operating as senders, recipients, and in-transit parties can therefore leverage a framework that overlays a public network.

Abstract: A system includes a policy engine in an Internet Protocol Multimedia Subsystem (IMS). The policy engine may be configured to store a group of policies associated with the IMS, and forward the group of policies to a group of policy components in the IMS.

Abstract: System and method for dynamically re-directing communications sessions destined for a particular entity in a communications system, each communications session being associated with at least one predefined route. Location information indicative of a current location of the particular entity is obtained and applied to a predefined set of conditional routing rules associated with the particular entity. This rules-based processing generates a routing result, on the basis of which the at least one predefined route associated with each communications session destined for the particular entity is dynamically updated.

Abstract: Email users may feel overwhelmed with the abundance of emails they receive. Many current email management techniques require at least some manual intervention that may be time consuming and/or otherwise frustrating to a user. As provided herein, emails may be characterized based upon content of the email and domain classification data (e.g., a company name, business category, or a website name associated with the domain name of the sender). One or more viewing panels may be populated with the characterized emails. A viewing panel may present emails corresponding to a particular characterization (e.g., a shopping viewing panel may display emails characterized as shopping). To enhance characterization, rules used to characterize emails may learn from a user's actions. For example, a user may move an email from a shopping viewing panel to a travel viewing panel, thus altering the characterization of the email from shopping to travel.

Abstract: Methods, apparatus, and products are disclosed for optimizing a physical data communications topology between a plurality of computing nodes, the physical data communications topology including physical links configured to connect the plurality of nodes for data communications, that include carrying out repeatedly at a predetermined pace: detecting network packets transmitted through the links between each pair of nodes in the physical data communications topology, each network packet characterized by one or more packet attributes; assigning, to each network packet, a packet weight in dependence upon the packet attributes for that network packet; determining, for each pair of nodes in the physical data communications topology, a node pair traffic weight in dependence upon the packet weights assigned to the network packets transferred between that pair of nodes; and reconfiguring the physical links between each pair of nodes in dependence upon the node pair traffic weights.

Abstract: A Fiber Channel Switch which enables end devices in different Fabrics to communicate with one another while retaining their unique Fiber Channel Domain_IDs. The Switch is coupled to a first fabric having a first set of end devices and a second fabric having a second set of end devices. The Switch is configured to enable communication by the first set of end devices associated with the first fabric with the second set of end devices associated with the second set of end devices using the unique Domain_IDs of each of the first set and the second set of end devices. In one embodiment of the invention, the first and second fabrics are first and second Virtual Storage Array Networks (VSANs) respectively. In an alternative embodiment, the first fabric and the second fabric are separate physical fabrics.

Abstract: A database query comprising a logical table definition and at least one route tracing indicator is forwarded to at least one distributed database node within a distributed network of databases. At least one query response is received including distributed route tracing information associated with each distributed database node that processed the database query along a path associated with the at least one query response. The received distributed route tracing information is processed to characterize query route propagation within the distributed network of databases. This abstract is not to be considered limiting, since other embodiments may deviate from the features described in this abstract.

Abstract: A STUN message is received at a router device in a network from a client device in the network along a network path. The STUN message is evaluated for information that indicates to the router device to modify media that is subsequently sent along the network path. If the evaluating indicates that the router device is to modify the media, the media is modified in accordance with information in the STUN message that indicates attributes of the network.

Abstract: A communications device and method for transmitting e-mail with image data attached as an attachment file can select whether to send the e-mail directly to the recipient or via a mail server, depending on the address of the e-mail to be transmitted. As a result, the disclosed device and method can reduce the load on the mail server and transmit large volumes of data reliably.

Abstract: A method and system for radio frequency management (RFM) in a mesh network using a path distance factor (PDF) is disclosed. According to one embodiment, a computer-implemented method, comprises calculating a path distance factor (PDF) between a first mesh router and a portal. A frame is transmitted to a second mesh router, wherein the frame includes the path distance factor.

Abstract: Techniques are described for providing point-to-multipoint (P2MP) Ethernet service in a L2 network. Routers providing the Ethernet service allow an administrator to classify local attachment circuits as either “leaf” attachment circuits or “root” attachment circuits to define a tree-like architecture for forwarding Ethernet frames within a VPLS domain. Based on the classifications, each of router constructs flood domains, referred to herein as mesh groups, that control switching behavior between attachment circuits and pseudowires that transport the L2 communications through the VPLS domain. The routers utilize the mesh groups when switching L2 communications to enforce the requirements of E-TREE service or other L2 services in which L2 traffic is constrained within the L2 VPN to tree-like connectivity.

Abstract: Embodiments relate to systems and methods for de-populating a cloud data store. In aspects, data from premise or other sources can be stored in a set of host storage clouds. A network administrator, owner, or other user can initiate the extraction of the set of cloud-populated data, and migrate that data to a set of step-down data stores, such as on-premise databases, servers, and/or other stores. A staging engine hosted in a cloud data distribution service can manage the discovery, reading-out, and delivery of the set of cloud-populated data to the set of step-down data stores. The staging engine can configure high-bandwidth data connections to the distribution service from the host storage clouds, and/or to the target step-down data stores from the data distribution service. A set of de-population commands can specify the connections, target data locations, file or directory formats, and/or other parameters to be used to re-locate the cloud-populated data.

Abstract: Real routable external addresses may be pooled rather than assigned to nodes and may be dynamically bound to connections by a proxy or gateway device in ways that spread apparent identity of individual nodes across multiple of the external addresses. In general, these spread identity techniques may be employed at one end or the other of a connection, as well as at both ends. In a typical double-ended configuration, the architecture and associated techniques provide “double-blindfolding,” wherein true identities (addresses) of communicating peers are always hidden from each other. In some double-ended configurations, dynamic binding may be employed at a fine level of granularity, for instance allowing individual packets associated with given connection to bear different apparent source addresses and/or different apparent destination addresses. In some single-ended configurations, a spread identity proxy is interposed between an information server and a plurality of requestors.

Abstract: Configurations of a multi-tiered system for receiving and reporting web site traffic data with low latency are described. The multi-tiered system can include a tier of collecting servers for receiving incoming event tracking data communications (e.g., HTTP requests for logging web page requests at corresponding web sites). A collecting server receiving an incoming communication determines a particular logging server in a lower tier to route the incoming communication. Upon receiving the incoming communication, the logging server processes the communication by 1) logging the communication to persistent storage, and 2) routing the communication to i) a tier of long-term storage servers and ii) a tier of short term storage and low-latency servers (i.e., real-time servers) for aggregating and reporting web site traffic data. Each real-time server can be configured to aggregate the web site tracking data for reporting to a publisher with low latency.

Abstract: Using the ALTO Service, networking applications can request through the ALTO protocol information about the underlying network topology from the ISP or Content Provider. The ALTO Service provides information such as preferences of network resources with the goal of modifying network resource consumption patterns while maintaining or improving application performance. This document describes, in one example, an ALTO server that implements enhancements to the ALTO service to enable initiating incremental updates of network and cost maps to ALTO clients upon receiving status information from a content delivery network (CDN) node.

Abstract: A cooperative packet routing for wireless sensor networks is described. In one aspect, a transient sensor node in a wireless sensor network receives a packet from a source node, wherein the packet is targeted for receipt by a base station. The transient sensor node, responsive to receiving the packet, estimates how much operational energy remains in the sensor node. If the determined amount of energy meets a configurable threshold, the transient sensor node implements a set of cooperative packet routing operations for conditional re-transmission of the packet to the base station. The configurable threshold is set to ensure substantially optimal usage and lifetime of the sensor node in the wireless sensor network. The conditional re-transmission of the packet is based on a set of randomized packet re-transmission criteria.

Abstract: The present invention supports a method for transmitting information packets across network firewalls. A trusted entity is provisioned with an address designation for a pinhole through the firewall during setup of a communication session between two communication devices. This pinhole address is used throughout the communication session between the two communication devices to transmit information packets onto and out of the communication network. Information packets addressed to the communication device inside the firewall are received by the trusted entity, which replaces address header information in the information packet with the address for the pinhole. The information packet is routed to the pinhole where it passes onto the network for routing to the communication device inside the firewall. Information packets transmitted from the network are also routed to the trusted entity for routing toward the communication device outside the firewall.

Abstract: Methods, apparatuses and systems directed to synchronizing transmissions among parent and child routing nodes in a hierarchical wireless mesh network. In one implementation, the present invention employs a time slot scheduling algorithm to coordinate communications between wireless nodes of a hierarchical tree. In one implementation, the present invention provides a wireless mesh network where slot scheduling information propagates throughout the mesh, while individual nodes in the mesh compute their respective time slot schedules based on this information and the current state of the network. In one such implementation, a parent routing node computes its slot schedule and transmits certain parameters to its child nodes (as opposed to the schedule itself). The child node(s) then iterates the same scheduling function based on the parameters passed to it to determine the slots with which it should communicate to its parent node and its child nodes.

Abstract: A network device for processing data on a data network includes a port interface configured to receive a data packet from a data network and to send a processed data packet to an egress port of the plurality of ports, a packet evaluation module configured to parse the received data packet and modify the received data packet to form the processed data packet and a search engine configured to perform searches of lookup tables using parsed data packet values and to return search results to the packet evaluation module to assist in modifying the received data packet. At least one lookup table shares at least two different types of entries in that same at least one lookup table, where the search engine is configured to distinguish between the at least two different types of entries in that same at least one lookup table.

Abstract: Information system, including: first and second storage apparatuses connected to a host computer and including volumes designated by a common volume identifier, but being accessible via differing paths of differing priorities. A failure detection storage apparatus connected to the storage apparatuses includes a third volume. Any I/O request designating the common volume identifier, is first sent to the first volume though the first access path, but upon error is then sent to the second volume thorough the second access path. The first or second storage apparatus detecting failure stores, in the third volume, a failure information flag. Upon receiving an I/O request through the second access path, the second storage apparatus determines whether the failure information flag is stored in the third volume, and sends an error reply of the I/O request to the host computer if the failure information flag is stored in the third volume.

Abstract: A method and apparatus is disclosed herein for providing an I/O extension for a mobile device. In one embodiment, the apparatus comprises: a first interface to the mobile device; a second interface to a cloud; a third interface to a display device; a fourth interface to one or more user input devices; and a controller, coupled to the first, second, third and fourth interfaces, to coordinate information exchange between the mobile device, the cloud and the one or more user input devices to enable display on the display device of data from the mobile device and the cloud, including full-resolution rendered web pages from a full browser running on the mobile device.

Abstract: Techniques for dynamically configuring security mechanisms in a network can construct security perimeters that satisfy security needs at any given time while also efficiently spreading security functions among network elements and systems. In one technique, a network element comprises security function modules. Systems toward which the network element forwards data packets also comprise security function modules. A particular security function module on the network element begins in a state of deactivation. The network element determines whether a corresponding security function module on one of the systems is functioning in a satisfactory manner. If not, then the network element activates the particular security function module. While activated, the particular security function module may perform at least some of the security function operations that the corresponding security function module would have performed if the corresponding security function module was satisfactory.

Abstract: A redundancy manager manages commands to peripheral devices in a computer system. These peripheral devices have multiple pathways connecting it to the computer system. The redundancy manager determines the number of independent pathways connected to the peripheral device, presents only one logical device to the operating system and any device driver and any other command or device processing logic in the command path before the redundancy manager. For each incoming command, the redundancy manager determines which pathways are properly functioning and selects the best pathway for the command based at least partly upon a penalty model where a path may be temporarily penalized by not including the pathway in the path selection process for a predetermined time. The redundancy manager further reroutes the command to an alternate path and resets the device for an alternate path that is not penalized or has otherwise failed.

Abstract: Access control methods include receiving an access authorization message from an authentication server computer at a blocking device that connects a first network to a second network, modifying access criteria of a transparent firewall at the blocking device responsive to the received access authorization message and operating the transparent firewall according to the modified access criteria to control transfer of messages between the first and second networks. The invention may also be implemented as apparatus and computer readable media.

Abstract: Described are a system and method of presenting virtual arrays in a storage network. A physical storage array is partitioned into a plurality of virtual arrays. Each virtual array has logical units of storage. Each virtual array is associated with a virtual array management interface by which a management application executing remotely on a host can address communications separately to that virtual array for managing the logical units of storage of that virtual array.

Abstract: A NAS load balancing system for distributing NAS loads of a NAS unit including a plurality of nodes and accessed via a network by multiple NAS clients is disclosed. In the NAS load balancing system, the NAS unit has multiple virtual IP addresses.

Abstract: Techniques are described for reducing the amount of data traffic carried on inter-chassis links within a multi-chassis router. A multi-chassis router is described in which the packet forwarding engines (PFEs) of each chassis receive and modify forwarding structures, generated in accordance with various load-balancing protocols, to exhibit a chassis-local link preference. Each of the PFEs may implement a selection bias for forwarding paths that egress from the multi-chassis router at the member chassis that includes the ingress PFE.

Abstract: A software reload is executed. The hardware associated with the network device continues to forward network traffic during the software reload. Also, a kernel of the network device operates unaffected in a protected address space throughout the software reload. Further, the kernel preserves local checkpointed and shared memory data. Application processes running on the network node are shut down gracefully. The reloaded software is brought up and the network device is resynchronized.

Abstract: In one embodiment, a reactive routing computer network may be partitioned into diverse logical topologies, and a source node may transmit route request (RREQ) messages toward a destination node on each logical topology. In response, the source node may receive route reply (RREP) messages indicating routes to the destination node in each logical topology. The source node may thus select a route for each logical topology to reach the destination node, accordingly. In another embodiment, if partitioned logical topologies do not produce two or more routes or as a standalone embodiment, the source node may transmit RREQ messages toward the destination node without any corresponding logical topology. The destination node receives RREQ messages, and two or more routes from the source node to the destination node may be determined (e.g., by the destination or source node) based on the received RREQ messages at the destination node and path selection criteria.

Abstract: A method and system for leaking routes between routing engines in a communication network. The method and system includes a route distribution service that receives and stores routing information from one or more exporting routers. The stored routing information includes the identity of one or more shared routes and may also include related route exportation criteria such as restrictions on which importing routers may receive shared routes. The route distribution service receives from one or more importing routers a request for one or more shared routes and provides one or more shared routes to the importing router. Importing routers can register with the service in order to receive shared routes or be notified when shared routes become available.

Abstract: Distributed data processing systems that provide services at two network addresses have their interfaces described in a published interface description document available at a Uniform Resource Locator (“URL”). The interface description of the second of the services replaces the interface description of the first of the services. Related methods, computer readable media, and systems to benefit from an embodiment of the invention are also described and claimed.

Abstract: A method begins by a router receiving a data packet and determining a destination of the data packet. The method continues with the router determining whether the router has an affiliation with the destination. The method continues with the router determining whether to temporarily locally store the data packet when the router has the affiliation with the destination. The method continues with the router locally storing the data packet and forwarding the data packet to the destination in accordance with a transfer protocol when the determination to temporarily locally store the data packet is favorable.

Abstract: Systems, methods, and computer-readable media for network routing metering are disclosed. In some embodiments, various changes to the routes, and other actions requested by a computer system, physical or virtual, can be metered. Those actions may be performed and later rated in order to determine what amount, if any, to charge an account associated with the requesting network participant system. The network participant system can be billed based on the activities performed on its behalf. Therefore, even if a network is performing poorly and requires more resources that would normally be allowed by a neighboring router, if the network owner pays to have these requests performed, then the embodiments herein can allocate more resources to supporting the network's rapidly changing network.

Abstract: A method is implemented in a network element that functions as one of a plurality of controllers for one of a plurality of areas of a split architecture network. The controller provides a control plane for the area of the split architecture network where the controller is remote from a plurality of switches providing a data plane for the area of split architecture network. The controller facilitates optimized routing across the plurality of areas of the split architecture network by providing limited intra-area link cost data to other controllers of other areas of the split architecture network and to traditional routers of a network including the split architecture network. The limited intra-area link cost data provides costs of each possible shortest path traversal of the area of the controller without providing all internal link cost data.

Abstract: Systems and methods of the present invention for maintaining network data distribution are provided. Network data may be distributed in such as manner as to allow a network session to weather interrupted communications between host and clients without significant loss of data. Embodiments of the present invention provide for one or more clients to serve as backup host(s) for the network session, such determinations including the use of NAT profile information. When the other clients transmit data to the host, they may also transmit the data to one or more backup hosts if there are any indications of interrupted communication.

Abstract: A networking device may operate according to a first configuration profile adapted to cause the device to conform to restrictions applicable within a plurality of different locations. The networking device may obtain a second, location-aware configuration profile, which may include restrictions applicable to the location where the device is deployed. The second, location-aware configuration profile may be provided by a location-aware configuration service responsive to a request from the device. The service may determine a location of the device from the request. The service may identify restrictions applicable within the region the device is located.

Abstract: A system receives a request from a client relating to an account associated with the client, and values associated with a set of parameters relating to the request. The system matches the values to a structure that includes cases of the set of parameters to determine one or more cases similar to the values associated with the set of parameters. The system accesses information for the account based on routing information corresponding to the determined one or more similar cases.

Abstract: According to an embodiment of network address translation traversal, a server agent interfaces a private network to a public network. Private IP addresses for servers located in the private network are mapped to corresponding identifiers known to clients located outside the private network. A request message sent over the public network by a client located outside the private network is received by the server agent. The request message includes a host identifier having a first portion that identifies the server agent to the public network and a second portion that identifies a server located in the private network. The second portion of the host identifier is unknown to the public network. The request message is sent to the server identified by the second portion of the host identifier using the private IP address that maps to the second portion of the host identifier.

Abstract: Described are mechanisms for verifying configuration information in 2547 BGP VPNs. An originating PE generates a first knowledge digest encoding first configuration information associated with a current set of information advertised for a VRF. The originating PE also generates a second knowledge digest encoding second configuration information associated with cumulative information advertised for the VRF. The originating PE is capable of receiving a message from a user PE, the message including a third knowledge digest encoding third configuration information related to the user VRF. The originating PE is capable of comparing the first knowledge digest to the third knowledge digest and producing a first indication if the third configuration information encoded in the third knowledge digest is not a subset of the first configuration information encoded in the first knowledge digest.

Abstract: A first router sends to neighboring routers an interest packet associated with the at least one service including a service name indicator and a unique interest tag. A second router receives the interest packet, sends the interest packet to a server of the at least two servers and stores the interest tag together with the incoming and outgoing connection port in its interest route table. The server attaches data including load data of the at least one service to the interest packet and sends the interest packet back to the second router. The second router calculates service performance data based on the data attached, stores the service performance data in its service performance table and updates the routing table based on an evaluation of the service performance data, and sends the interest packet via its incoming connection port as associated by the interest route table to the first router.

Abstract: A method includes receiving at a cache server a content request from a client system, determining that the cache server is overloaded in response to receiving the content request, and in response to determining that the cache server is overloaded, returning to the client system a domain redirection response including a load status of the cache server.

Abstract: A technique dynamically retrieves reachability information from a target node, including a tail-end or any intermediate node, along a traffic engineering (TE) label switched path (LSP) that spans multiple domains in a computer network. The interdomain information retrieval technique is illustratively based on a request/response signaling exchange whereby at least a portion of the reachability, i.e., routing, information maintained by the target node is propagated to a head-end node of the TE-LSP. The routing information may comprise a list of address prefixes reachable by the target node, but may optionally include next-hop and metric attributes associated with those prefixes. The head-end node uses the retrieved routing information to calculate routes reachable from the target node for insertion into its routing table.

Abstract: A routing method for a network is provided. The routing method includes the steps of a) selecting one of a plurality of basic nodes as a cluster head; b) broadcasting a first message by the cluster head; c) continuing to broadcast the first message by any of the plurality of basic nodes which receives the first message, until all the plurality of basic nodes receive the first message; and d) selecting a corresponding father node by each of the plurality of basic nodes based on an information associated with the first message.

Abstract: One example embodiment provides a method and system where a node in a utility network registers with one or more access point devices associated with one or more local area utility networks. The utility node generates a unique network address using a network address prefix of a network address associated with the access point device. The utility node registers with a DNS server. Messages sent to the utility node are routed through the access point corresponding to the received prefix used to generate the unique network address for the utility node. The network address for the utility node and access point may be IPv6 addresses and the network address prefix may be an IPv6 prefix, or may be an IPv4 address.