Abstract: The present invention extends to methods, systems, and computer program products for establishing and maintaining membership within a federation infrastructure. A joining node submits a join message to an existing federation infrastructure. The federation infrastructure routes the join message to a processing node. The processing node facilitates identification of predecessor, successor, neighborhood, and routing nodes (for the joining node) within a ring of nodes. The joining node exchanges messages with identified nodes to obtain state information for the identified nodes and other nodes within the ring. Nodes periodically exchange state information, including state information for other nodes, such that state information for the ring is efficiently propagated to all nodes in the ring even when communication between some nodes is lost. Instance IDs, phase values, and freshness values are used to determine when state information is stale and/or is to be updated.

Abstract: Computing entities in a dynamic, decentralized computing environment are treated as if these computing entities were nodes in a graph linked by edges so as to match these nodes until no further matches are possible. New nodes may dynamically be introduced into the decentralized computing environment and yet various embodiments of the present invention continue to match nodes while inhibiting deadlocks in the decentralized computing environment.

Abstract: A peer-to-peer (P2P) network system and a method of operating the P2P network system based on region are provided. If an edge peer storing a resource information list of a super peer migrates to a different super peer and is registered and connected with the different super peer, the edge peer transfers the resource information list to the different super peer to share the resource information list. Resources may be searched based on a region information list into which resource information lists of adjacent super peers are integrated.

Abstract: Resources for IP networking are managed. A field is added to an operating system kernel software procedure. The field references a virtual router context. Packet processing software code is modified to cause the packet processing software code to execute in accordance with the virtual router context.

Abstract: A wireless networking system uses mobile and fixed transceivers to achieve a network with changing topology. A routing process includes quality-of-service considerations in the network to allow for features such as file or other data transfer, streaming audio and video, digital telephone communications, etc. The routing process adapts to transceiver units entering, leaving, or moving within, the network. Auxiliary networks such as the Internet, campus or corporate intranets, home networks, etc., can be accessed through the wireless network. Features, designs and user interfaces for the units are described. Security and access control of media content and other data is presented.

Abstract: A system and method, associated with a receiver, for increasing the range or bandwidth of a wireless digital communication network and a receiver incorporating the system or the method. In one embodiment, the system includes: (1) a service class detector configured to determine a service class of a PDU received by the receiver from the wireless digital communication network and (2) a frame check sequence checker coupled to the service class detector and configured to disregard error-checking information in the PDU when the service class indicates that the PDU is a streaming media PDU.

Abstract: One or more trusted network devices within a data network infrastructure determine a physical location of a client device requesting access to the data network infrastructure. A trusted physical location is generated and associated with the client device. The approach can include determining whether a candidate network device is a trusted network device based on a likelihood that the candidate network device can be modified to provide false physical location data. The approach also can include determining a response for an access request by the client and controlling network resources provided to the client based on the trusted physical location.

Abstract: A method and apparatus is provided for managing a plurality of devices in a federated network and a sub-network within the federated network. The devices in the sub-network may have a functional capability of performing a function associated with the federated network. For example, the federated network may include devices for providing data content such as media content and the sub-network may include devices for controlling the presentation of the data content. In addition, a constellation of devices is provided that may share data content such as media data. At least some of the devices in the constellation may form a sub-network.

Abstract: Methods, systems, and data structures are provided for dynamically routing a data packet through a Content Distribution Network (CDN). A routing table includes a desired path for a data packet and one or more alternative paths. Each path includes links and each link connects pairs of an entry node, intermediate nodes, and a destination node together. Each link also includes policies that are processed by the entry node and the intermediate nodes. If conditions of currently available nodes (local nodes) trigger one or more of the policies, then any processing node dynamically reorders a number of the currently available nodes within the routing table. After the processing, the data packet is routed to a next or preferred currently available node within the routing table.

Abstract: Disclosed are a method and system for establishing a session, via the Internet, between a user and an application. The method comprises the steps of providing a plurality of instances of the application, each of the instances having a respective Internet address; and the user accessing one of said instances, via the Internet, by means of the Internet address of said one instance. That accessed one instance selects one of the instances, according to a defined procedure, for a session with the user, and sends to the user an identifier, such as an URL, for accessing said selected one instance. The user accesses the selected one instance, via the Internet, by using said identifier.

Abstract: In accordance with one aspect of the invention, methods and apparatus for distributing a Mobile IP registration request to one of a plurality of Home Agents are disclosed. A registration request is received from a Foreign Agent to which the Mobile Node has roamed. One of the plurality of Home Agents is selected. The registration request is then forwarded to the selected one of the plurality of Home Agents. The source IP address of the registration request is an IP address of the Foreign Agent to which the Mobile Node has roamed, thereby enabling the selected one of the plurality of Home Agents to send a Mobile IP registration reply directly to the Foreign Agent without interception by the network device.

Abstract: A distributed Link-State Routing Protocol (LSRP) system in a packet switch having external communication ports has a first card executing Update process of the LSRP, making database updates, a second card executing Decision process(Shortest Path First (SPF)) of the LSRP, and a communication fabric coupling the cards with each other and the external ports. The LSRP may be an IS-IS system. In some embodiments there are additional cards involved, and the distribution of Link-State functions is over a set of multiple cards. Also in some embodiments there is a Location Service (LS) controller monitoring and configuring cards in the system.

Abstract: A SOAP routing method includes receiving a SIP request message from a service requester where the SIP request message carries application QoS information and service description information, selecting a SOAP intermediate node and a service provider according to the application QoS information and service description information, obtaining the SOAP routing information according to the SOAP intermediate node and service provider, and sending the SIP request message carrying the SOAP routing information to the corresponding service provider. In addition, a routing system and relevant devices are provided.

Abstract: A system for distributed file storage includes a plurality of servers providing, to a plurality of clients, file access services for accessing files stored on the plurality of servers. A list of neighbor servers is maintained by each server. The neighbor servers are a subset of the plurality of servers. At least one server of the plurality of servers is switched into a neighbor group of servers based on network distance. Each file is stored in the form of a plurality of N pieces on N servers, the pieces being generated from the file. The list is used to obtain information for reconstructing files stored on the neighbor servers, such that any K out of the N pieces can be used to reconstruct any file.

Abstract: A generally full-wire throughput, switching Ethernet controller used within an Ethernet network of other switching Ethernet controllers connected together by a bus. The controller comprises a plurality of ports including at least one bus port associated with ports connected to other switching Ethernet controllers. A hash table stores MAC addresses and VLAN ids of ports within said Ethernet network. A hash table address control hashes the MAC address and VLAN id of a packet to initial hash table location values, changes the hash table location values by a fixed jump amount if the address and VLAN id values stored in said initial hash table location do not match the received address and VLAN id, and provides at least an output port number of the port associated with the received address and VLAN id. A storage buffer includes a multiplicity of contiguous buffers in which to temporarily store said packet.

Abstract: A system and method that provides dynamic network policy management. The system enables a network administrator to regulate usage of network services upon initiation of and throughout network sessions. The system employs a method of identifying selectable characteristics of attached functions to establish static and dynamic policies, which policies may be amended before, during and after any session throughout the network based on the monitored detection of any of a number of specified triggering events or activities. Particular policies associated with a particular identified attached function in prior sessions may be cached or saved and employed in subsequent sessions to provide network usage permissions more rapidly in such subsequent sessions. The cached or saved policy information may also be used to identify network usage, control, and security. The system and method of the present invention provides static and dynamic policy allocation for network usage provisioning.

Abstract: A system accessing and transmitting different data frames in a digital transmission network, for accessing and transmitting different data frames, said system comprises: at least a user-network interface (UNI), which is used to couple with the subscriber's network; and/or at least a network-network interface (NNI), which is used to couple with said digital transmission network to transfer data; and a data converting device, coupled with said UNIs and said NNIs, which is used to convert data formats between said UNIs or data formats between said NNIs or data formats between said UNIs and said NNIs; said data converting device comprises a virtual bridge device and an interface device, said virtual bridge device switches data between said UNIs and said NNIs, and said virtual bridge device detects control messages, and transmits the control messages to control system of the device to process via the control interface unit; and data frames of message except control messages are switched, so as to overcome the limi

Abstract: A method and apparatus resolves a symbolic identified to a physical data stream. The method and apparatus is particularly suited to resolving physical datastreams in a dynamic distributed network environment. The symbolic identifier is generated in a process resident on a terminal connected to a network. The physical datastream is resourced by a repository. Resource such as servers capable of performing such a resolution, are organized in a hierarchical relationship.

Abstract: Aspects of the invention provide apparatuses, systems, and methods for supporting cable redundancy in a network connecting a network controller (101) and an I/O device (109) (an adapter). An adapter includes a first port (407) and a second port (409) for receiving the same messages from a scanner (301) over a first and second transmission media (353, 355), respectively. A connection manager module (423) instructs a switching module (419) to direct the output data contained in the first message to a data structure (421) when the first transmission medium is operational and to direct the output data contained in the second message to the data structure when the first transmission medium is non-operational. Also, the adapter formats a message from input data.

Abstract: Risk of inadvertent introduction of software bugs to a large number of users during a software update is minimized using an automatic mechanism controlling update release. A value-generating module generates a value for a computer, the value falling within a population range of values. A specification module receives update information in an update deployment specification. The information specifies an eligibility window during which a specified portion of the population range is eligible to retrieve an update. The specification can include fields, such as a code selector, a value offset, a start time, etc. An eligibility determination module applies rules to automatically determine eligibility of the computer to retrieve the software update. The computer is determined eligible when the value for the computer falls within the specified portion of the population range for the eligibility window. An update module permits the computer to retrieve the software update based on the eligibility determination.

Abstract: A virtual environment server. The server manages time-shifted presentation data between multiple participants in a shared virtual environment system. The server includes a routing module configurable for coupling to multiple participants, a real-time data management module coupled to the routing module, a time-shifted data management module coupled to the routing module, and a data store module coupled to the real-time data management module and to the time-shifted data management module. Participant output presentation data is received from the participants, stored as real-time presentation data, and transferred to appropriate participants. In response to requests from a requesting participant to obtain time-shifted presentation data from a time-shifted participant and any influence participants, time-shifted presentation data is retrieved from the data store module and transferred to the requesting participant.

Abstract: A mesh is joined by a node, wherein the mesh includes a Distributed Routing Table (DRT) for determining addresses of nodes in the mesh. A DRT message is processed in accordance with a security mode of the DRT.

Abstract: A method for tracking the opening of physical mail includes preparing a mail piece for delivery to a mailpiece recipient, the mailpiece having identifying information thereon, and communicating the mailpiece identifying information to a mail opening tracking organization. The mailpiece is delivered to the mailpiece recipient. The mailpiece is mechanically opened and data related to the mailpiece opening event is captured and the data related to the mailpiece opening event is communicated to the tracking organization.

Abstract: An end host in a peer-to-peer system stores identifiers for both its peers and the neighbors of its peers. When the IP address of the end host and one of the peers changes, the end host's new IP address can be sent to each neighbor of the peer so that communication between the end host and the peer will not be lost. The order in which the neighbors of the peer are stored can be prioritized for faster delivery of the end host's changed IP address to the peer. The prioritizing can be by available bandwidth of the neighbors, proximity of the neighbors, trust between the peer and its neighbors, the probability that the IP address of the neighbors will change, etc. Proximity of the peers from each other and the end host can be a function of the identifier, which can be generated from a public key.

Abstract: In a network apparatus including a forwarding unit corresponding to a base point for conducting packet transmission/reception with an external network, and plural control units for operating plural applications that are arranged to access virtual interfaces of the control units that correspond to actual interfaces of the forwarding unit so that the network apparatus appears from the outside to be functioning as a single unit. A routing process of generating a routing table is executed at a master control unit corresponding to one of the control units, and if the routing table of the master control unit is updated, a routing table of the forwarding unit is updated by a routing synchronization process that operates independently from the routing process. One or more routing tables of one or more slave control units corresponding to the control units other than the master control unit are updated through the forwarding unit.

Abstract: Information representing a plurality of clients on a network is stored in a data structure. The data structure may be stored within a server or agent in a content delivery network and may include client network address information. The data structure is dynamically compressed based on network proximity information relating to the clients.

Abstract: A system and method that provides dynamic network policy management. The system enables a network administrator to regulate usage of network services upon initiation of and throughout network sessions. The system employs a method of identifying selectable characteristics of attached functions to establish static and dynamic policies, which policies may be amended before, during and after any session throughout the network based on the monitored detection of any of a number of specified triggering events or activities. Particular policies associated with a particular identified attached function in prior sessions may be cached or saved and employed in subsequent sessions to provide network usage permissions more rapidly in such subsequent sessions. The cached or saved policy information may also be used to identify network usage, control, and security. The system and method of the present invention provides static and dynamic policy allocation for network usage provisioning.

Abstract: The present invention provides mechanisms for transferring processor control of multiple network connections between two component devices of a computerized system, such as between a host CPU and a NIC. In one aspect of the invention, two or more network communications may each have a different state object in the upper layers of a network protocol stack, and have a common state object in the lower layers (e.g., the Framing Layer) of the network protocol stack. In part due to the commonalities in the lower software layer states, the invention provides for offloading processor control of multiple network communications at once, including long and short-lived connections. In addition, the invention can negotiate with an alternative peripheral device to offload the network communication to the alternative peripheral device in the event of a failover event, and provides a solution to incoming data packets destined for one or more VLANs.

Abstract: A system is presented for providing a middleware communication space that provides asynchronous message delivery service for partially connected mobile ad hoc networks. Embodiments of the present invention use mobile devices to bridge separated islands of networks and store and propagate messages. The system and software architecture supports methods for messaging caching, transferring and routing. More specifically, embodiments provide methods and systems that extend a communication space concept into a distributed environment and combine it with the standard Web Services technologies, i.e, SOAP, and WS series protocols. The communication space provides an extension of Web Services to mobile ad hoc networks and provides asynchronous message caching, transferring and routing.

Abstract: An improved system and method is provided for packet routing in dynamic router tables. Specifically, the invention provides a method, computer system, and computer readable media for using Priority Search Trees (PSTs) to match, insert, and delete rules in dynamic routing tables in O(log n) time. In a first embodiment, for a dynamic router table consisting of n pairs of tuples, each tuple comprising an address prefix and next-hop information, the invention provides a system and method, using a PST, for inserting a new tuple, deleting an existing tuple, and searching for the tuple with the longest matching prefix for destination address, wherein each operation is performed in O(log n) time.

Abstract: A network router employs a single board architecture that includes both a forwarding engine and an interface card concentrator. All of the circuits involved in routing are incorporated into a single board, reducing the system cost of the router. A single processor performs various functions in connection with these circuits, such as management of interface cards and the forwarding engine. In addition to lowering the system cost, the compact architecture allows higher density installation of interface cards.

Abstract: A technique for implementing VLANs across a service provider network involves establishing logical ports that have bindings to transport tunnels. The logical ports are then treated the same as physical ports in defining broadcast domains at particular service provider edge devices. Logical ports can be established for Layer 2 transport tunnels that use stacked VLAN tunneling and MPLS tunneling. Establishing a logical port that uses stacked VLAN tunneling involves binding a physical port and a stacked VLAN tunnel to the logical port. Establishing a logical port that uses MPLS tunneling involves binding an MPLS tunnel to a logical port. In one embodiment, the logical port is bound to a static MPLS tunnel and in another embodiment, the logical port is bound to a dynamic MPLS tunnel and the destination IP address of the destination service provider edge device.

Abstract: A router includes a multicast packet transmitting unit that multicasts the identifier of the router periodically, a relay determining unit that determines whether a received data packet should be relayed to a router in another segment, an order determining unit that determines, on the basis of information included in multicast packets from the other routers, the router to which the data packet shall be transferred, and a packet relaying unit that, when the data packet is not relayed, notifies the transmission source which transmitted the packet as to the router selected by the order determining unit to be the relay destination and then transfers the data packet to the selected router. A router suitable for relaying the packet is thus selected. Since switching of the relay router may be performed by following the router redirection message, it is unnecessary to add a new function to a terminal.

Abstract: A method processing packets for network processor applications. The method includes receiving a packet at an ingress connector of a docking platform from a network processor application, wherein the ingress connector is not specific to the network processor application. The method also includes processing the packet by a PPA shell, the PPA shell comprising a plurality of interfaces between the docking platform and the network processor application, where the plurality of interfaces is not specific to the network processor application, and where the processing comprises invoking at least one of a plurality of functions utilizing one of the plurality of interfaces, wherein the plurality of functions is specific to the network processor application.

Abstract: A method for wireless LAN communication using multiple channels is provided. An ATIM containing channel information is generated when there is data to be sent, and the ATIM is transmitted via a main channel after a predetermined period of time. When a station loses a channel reservation competition, the station generates and transmits via the main channel another ATIM containing channel information regarding another channel to be used from data transmission. The station then performs channel switching to the other channel corresponding to the channel information, transmits the data via the other channel, and switches the channel back to the main channel at the time of a subsequent beacon.

Abstract: There is provided a distributed database system comprising a plurality of participating nodes mutually interconnected via a communication network. The participating nods include a first subset of storage nodes and a second subset of interfacing nodes. The storage nodes are grouped into a plurality of slots, each storage node having stored therein addresses of substantially al other storage nodes in its particular slot. The storage nodes of each slot further have stored therein one or more addresses of storage nodes in all other of the slots of the system. The interfacing nodes each have stored therein addresses of one or more of the storage nodes. The storage nodes are operable to store one or more data records therein and/or retrieve one or more data records therefrom in response to instructions received from the interfacing nodes. The system is coordinated in operation in a decentralised manner.

Abstract: One aspect of the present invention can include a method for restricting resources consumed by ghost agents. The method can include the step of associating a ghost agent with a host. A resource utilization value can be ascertained for the ghost agent and the host combined. The ascertained resource utilization value can be compared with a usage threshold. A determination can be made as to whether operations of the ghost agent are to be executed based upon the previous comparison.

Abstract: A distributed Link-State Routing Protocol (LSRP) system in a packet switch having external communication ports has a first card executing Update process of the LSRP, making database updates, a second card executing Decision process(Shortest Path First (SPF)) of the LSRP, and a communication fabric coupling the cards with each other and the external ports. The LSRP may be an IS-IS system. In some embodiments there are additional cards involved, and the distribution of Link-State functions is over a set of multiple cards. Also in some embodiments there is a Location Service (LS) controller monitoring and configuring cards in the system.

Abstract: There are provided a packet transfer device, a semiconductor device, and a packet transfer system, which can provide a DMZ constructed in a simple configuration. A LAN is connected to a first port. A public server is connected to a second port. A WAN is connected to a third port. A filtering section performs filtering processing according to attributes of each packet inputted via any one of the first to third ports. A routing section carries out routing processing on the packet which was not discarded by the filtering section.

Abstract: An information output apparatus which is capable of limiting a range for outputting information based on a position. A position information acquiring section acquires first position information, a message receiving section receives information including second position information, and a message transferring section transfers the received information. The message transferring section transfers the received information when the first position information acquired by the position information acquiring section falls within a predetermined range of the second position information received by the message receiving section.

Abstract: An overlay communication system (120) aides determining a route between nodes (101-103) in an underlay communication system (110). In particular, when a first node (102) wishes to discover a route to a second node (103), the first node notifies the overlay communication system, which notifies all nodes in the underlay communication system of the desire. Both the first and the second nodes begin flooding the underlay system simultaneously. When a node in the underlay system hears both the flood messages from the first and the second node, the overlay communication system is notified and stops all flooding. The route information is then provided to the first and the second nodes via the overlay communication system.

Abstract: A system, method, and apparatus for load balancing to a plurality of ports is presented herein. A miniport driver is adapted to multiplex and demultiplex traffic workload across the ports. The miniport driver classifies outgoing packet streams and distributes each packet stream to a communication ring, such as an Ethernet ring, for example, associated with at least one of the ports. Additionally, the miniport driver can be configured to configure a operation of the plurality of ports in one of several modes, including a mode wherein the plurality of ports are operable and act as a single logical interface for the operation.

Abstract: A method, system and apparatus for improving network performance of a multiprocessor system that has a limited number of physical network interfaces by using virtual IP addresses are provided. When a processor of the multiprocessor system determines that it is processing network data, it uses a virtual IP address to transmit the data. The virtual IP address is associated with a buffer; and thus the data is sent to the buffer. This allows the processor to be free to process other data, network or otherwise. The buffer, with the help of a controller, then contends for the use of one of the limited physical network interfaces to transmit the data.

Abstract: An apparatus for developing portable packet processing applications on network processors includes a docking platform which provides a common interface for individual packet processing applications to be plugged into the network processing environment. Each application interacts with the docking platform through the common interfaces provided by the latter. The docking platform interacts with the other modules inside the system to accomplish the requests from the application. In this manner, the applications become “shielded” from the implementation details of the underlying hardware. The applications need not change when the network processor hardware features are changed. It therefore provides a universal packet processing programming environment in which applications can execute in a portable and flexible manner in various hardware architectures.

Abstract: A security subsystem is provided with at least a first security engine, a first set of registers and a control portion to perform a first security operation for each of a first number of data blocks of each of a first number of data segments of a first data object. In one embodiment, the security subsystem is provided with two security engines and two sets of registers to respectively perform the first security operation and a second security operation for the first data object and a similarly constituted second data object. In one embodiment, the first and second security operations are DES and hashing operations. In one embodiment, the multi-method security subsystem is embodied in a multi-service system-on-chip.

Abstract: A method for coordination of concurrent processes or for control of the transport of mobile units within a network, wherein a) the control of the network occurs in a decentralized and self-organizing manner in the controllers of node points or local defined sub-networks, whereby the control units of adjacent node points or sub-networks are connected to each other for data exchange of, b1) data from prediction models for local process sequences at each node and/or data from prediction models for the local process sequences of adjacent nodes and/or b2) data from data recording elements of each node or the boundaries associated therewith and/or data from data recording elements of adjacent nodes or the boundaries associated therewith, c) local simulation and optimization of switching the controller to establish the performance of the nodes or sub-networks with regard to the buffer capacity of the boundaries based on models for short-term predictions with fixed switch states for adjacent nodes, are applied.

Abstract: A system and method are provided to remotely activate options resident on a multi-vendor supported device. The technique includes receiving, at a centralized facility, an activation key sent from a first location and configured to activate an option of an in-field device located in a second location, and sending the activation key and a verification script, from the centralized facility, to the in-field device at the second location. The technique also includes receiving, at the centralized facility, a report generated by the verification script and, if the report is satisfactory, installing the activation key in the in-field device to activate the option and, if the report is not satisfactory, aborting activation of the option.

Abstract: A method and system for monitoring hardware information associated with a network device in an enterprise system are provided. In one embodiment, a method for monitoring hardware information associated with a network device in an enterprise system includes retrieving hardware information associated with a network element, the hardware information including information on one or more hardware characteristics. A display dynamically presents the information.

Abstract: A security infrastructure and methods are presented that inhibit the ability of a malicious node from disrupting the normal operations of a peer-to-peer network. The methods of the invention allow both secure and insecure identities to be used by nodes by making them self-verifying. When necessary or opportunistic, ID ownership is validated by piggybacking the validation on existing messages. The probability of connecting initially to a malicious node is reduced by randomly selecting to which node to connect. Further, information from malicious nodes is identified and can be disregarded by maintaining information about prior communications that will require a future response. Denial of service attacks are inhibited by allowing the node to disregard requests when its resource utilization exceeds a predetermined limit. The ability for a malicious node to remove a valid node is reduced by requiring that revocation certificates be signed by the node to be removed.

Abstract: A small cost-effective crossbar switch is provided. A switch circuit is disposed in each of a plurality of nodes which are cascade connected with each other in a plurality of stages. Each switch circuit receives from a node of a previous stage a designated address to specify directly or indirectly the relative position in which a target switch circuit is present, determines whether the designated address represents a specific value “0”. When it is determined that the specific value is represented, each switch circuit allows data output to a node-out line, decrements the received designated address by “1” to generate a new designated address, and supplies this new designated address to a node of the subsequent stage.