Abstract: A scalable messaging system for data transmission between the network devices, such as set top boxes, and a central system server, such as a server which maintains a database of event logs for the network. Individual routers at the data center broadcast an announcement packet indicating that they are available to accept messages from the network devices. The announcement message contains at least an identification of the router and the manner in which messages may be sent to it, e.g., one or more connection socket numbers and/or network addresses. The frequency at which availability messages are sent by the routers is preferably dependent upon the relatively loading of the individual router. Thus, the more heavily loaded a particular router becomes, the less often it will broadcast an availability message; the more lightly loaded it becomes, the more often such messages are broadcast.

Abstract: The Web service-providing device receives a request message demanding the Web service through a communication device. When the Web service-providing device transfers the processing of the Web service demanded by the request message to another Web service-providing device and demands the return of a response message containing the request result, it sends a request message with a destination-of-return information header appointing itself as the receiver of the response message through the communication device and executes the transfer. If the Web service-providing device itself has executed the processing transferred through a request message containing the destination-of-return information header, it sends a response message containing the request result to the destination designated in the destination-of-return information header through the communication device.

Abstract: Disclosed is a technique for data synchronization. A first identifier for a portion of data on a primary volume is determined, wherein a unique identifier is associated with each portion of data at the primary volume. A second identifier for a portion of corresponding data at a secondary volume is determined, wherein a unique identifier is associated with each portion of data at the secondary volume. The first and second identifiers are compared. When the first and second identifiers do not match, the portion of corresponding data at the secondary volume in a storage device is replaced with the portion of data at the primary volume.

Abstract: A spool file modifying device employed in a print server is connected with a printer. Further, the print server and at least one external terminal are interconnected. A spool file representing a print job that is instructed at the external terminal is converted into print data adaptable to the printer. The spool file modifying device includes a font data extracting system that extracts font data included in the spool file, a registering system that registers the extracted font data with the print server, and a modifying system that modifies the spool file to create a modified spool file in accordance with modifying information included in the spool file. The modified spool file is converted into the print data using the extracted font data, and then transmitted to the printer.

Abstract: An apparatus, system, and method are disclosed for selective, end-to-end message level security. The apparatus includes a message class definition module, a security module, and a messaging module. The message class definition module identifies a predetermined message class of an internode message. The security module applies security to the message at an application layer. The security that is applied to the message corresponds to a security level, which depends on the message class of the message. The security may include encryption, authentication, and/or other security features. The messaging module communicates the message between a first node and a second node. A third node, such as a broker, may be interposed between the first and second nodes, in which case the security of the message is preserved at the third node.

Abstract: A service integration platform system includes an interface configured to receive a service request initiated by an Independent Software Vendor (ISV) and one or more processors configured to authenticate the service request and in the event that the service request is authenticated, route the service request to an Internet Service Provider (ISP) providing the service to be further processed. The service request is routed to a deployment environment provided by the ISP in the event that the service request is received on a deployment Universal Resource Identifier (URI) corresponding to the deployment environment; the service request is routed to a test environment provided by the ISP in the event that the service request is received on a test URI corresponding to the test environment.

Abstract: A method for facilitating the design and assignment of Ethernet VLANs. The method includes receiving a VLAN name, a class of service and two or more access ports. The switches and trunks associated with the access ports are determined. A VLAN database is searched for the VLAN. A VLAN is created if the searching does not result in locating the VLAN. Creating the VLAN includes selecting a starting access port from the two or more access ports. A base path is mapped from the starting access port to another of the access ports. The base path includes one or more of the switches and one or more of the trunks. The base path is added to the VLAN and includes the starting access port and the other access ports. For each of the two or more access ports not currently located in the VLAN a new path is mapped from the access port to one of the switches in the VLAN. In addition, a new path is added to the VLAN including the access port. The VLAN is then transmitted to the VLAN database.

Abstract: A method of “stateful failover” is provided that allows email gateway systems in a cluster to deliver email messages that have been accepted for delivery by a member of the cluster, but has failed with out delivering the messages. The method involves creating a backup copy of the messages that have been accepted for delivery by one email gateway system in the stateful failover cluster on one or more other email gateway systems in the stateful failover cluster. Upon detecting the failure of the email gateway system that accepted the message, another member of the stateful failover cluster that has access to the backup copy of the message queue takes responsibility for the delivery of the messages on the mirrored queue.

Abstract: An automated system and method to request, process, fulfill, manage and terminate an inter-provider IP service is introduced to allow the realization of an electronic inter-provider IP service, including the service definition, requisition, contracting, provisioning, management, fulfillment and settlement. The system includes an adaptive hardware infrastructure and flexible software to define business models and revenue structures that can adapt to business requirements and provide real-time information to profit centers.

Abstract: Systems and methods for transmitting data across a firewall are described. A representative method includes: receiving a request to transmit data to a destination; searching for a firewall associated with the destination, the firewall being configured to prohibit communication to the destination via a primary communication protocol and allow communication to the destination via a secondary communication protocol. If the firewall is detected, automatically configuring the data for communication with the secondary communication protocol; and transmitting the data to the destination by utilizing the secondary communication protocol. Other devices and programs are disclosed.

Abstract: A route convergence monitoring system and method provide for determining routing changes or affected devices that may cause detrimental or other quality conditions to occur in an endpoint device. In one embodiment, ongoing endpoint quality monitoring of quality conditions and convergence occurrence monitoring of successive route changes that may occur are initiated. An endpoint quality monitor provides for determining an endpoint quality condition and transferring an indicator of the condition (e.g., endpoint device and timing) to a network manager. The network manager may add one or more information indicators and provides the indicators to an end-to-end convergence monitor. The convergence monitor, receives the indicators and determines one or more of a second endpoint device, routing changes in at least a portion of the network and a correlation of routing changes that may have caused the indicated or other quality conditions to occur.

Abstract: In accordance with one illustrative embodiment, when a file is moved from the background to the foreground in a peer-to-peer client, the client makes a local request for file pieces. The client sends a handshake message to itself to check for available pieces. The client then exchanges messages locally the same way it would with external peers. As an alternative approach to local message passing, the client may keep a local record of file fragments in a data structure, such as a markup language document or other data repository. The client may then query the data structure for needed file fragments before submitting a request to the peer-to-peer network. Every time a new file segment is downloaded and validated in the background, or the foreground, the peer-to-peer client may update the data structure. Then, the client may simply query the data structure for the specific segment it wishes to download.

Abstract: A mechanism is provided for integrating a user resource into a managed computing resource system. If a level of data privacy indicating a first level of dedicated computing resources, a user resource is integrated into a first logical design. Responsive to the level of data privacy indicating a second level of dedicated computing resources, the user resource is integrated into a second logical design. If there is no indication of the level of data privacy and the user resource has at least one associated unique IP address, a capacity of a point of deployment (POD) device is determined. If there is no indication of the level of data privacy and no unique IP address, the user resource is integrated into the first logical design. If the user resource utilizes a predefined percentage of the capacity, the user resource is integrated into a third logical design.

Abstract: A method and apparatus is provided to discover and integrate applications in an application router framework. The discovery operation includes receiving a registration notification for an application on a network, adding information describing the application to a repository into a data structure and publishing the data structure onto an application router. The association operations include querying one or more application routers on an application network for meta-data and other information on applications, exchanging the meta-data and other information between the application routers and associating the applications together automatically using their respective application protocols.

Abstract: A method, apparatus, and computer program product includes serially receiving, from a source, a plurality of forward messages each addressed to one of a plurality of destinations; receiving a plurality of availability signals, each availability signal indicating that one of the destinations is available to accept a forward message; simultaneously sending a forward message to each available destination; simultaneously receiving, after a predetermined period of time, a plurality of reverse messages from the destinations, each reverse message corresponding to one of the forward messages simultaneously sent to an available destination; and serially sending the reverse messages to the source.

Abstract: A method and system for monitoring and reporting performance information relating to data transmission. One of a plurality of network service providers associated with the terminating party are identified at the central controller to enable routing of the data transmission. The central controller establishes a connection between an originating party and the identified network service provider for routing of the data transmission to the terminating party. The data transmission is routed by the central controller to the identified network service provider, and the status of a portion of the data transmission is monitored by the central controller while the data transmission to the terminating party occurs and until the connection with the terminating party ends. Performance information associated with the data transmission is generating at the central controller based on the monitored data transmission. The performance information is reported to a third party by the central controller.

Abstract: Methods and apparatus for implementing peer-to-peer relay. In one implementation, a method of island recovery in a peer system in a peer-to-peer relay network includes: detecting the presence of two or more islands in a peer-to-peer relay network, wherein each island includes at least one peer system; joining two detected islands by connecting a peer system in a first island to a peer system in a second island; wherein peer systems in different islands are not connected.

Abstract: When a packet transfer equipment receives a packet, it extracts several types of information contained in the received packet such as the destination IP address and the destination port number and, using the extracted information as the key, inquires of a packet transfer method resolution server about the information related to the packet transfer method. The server keeps the correspondences between several types of information contained in the packet and one or more type of information related to the packet transfer method in the database and, in response to the inquiry from the packet transfer equipment, replies one or more type of information related to the packet transfer method. The packet transfer equipment rewrites several types of information such as the destination IP address and the destination port number according to one or more type of information obtained and transfers the received packet.

Abstract: Various embodiments are described for performing pattern matching for content based switching. In one embodiment, an apparatus may include a document parser and a pattern parser. The document parser may be arranged to parse a document having transaction information and to create a document object from the transaction information. The pattern parser may be arranged to parse pattern information of a pattern for one or more elements according to a predefined pattern object data structure and to place the elements in appropriate blocks within the pattern object data structure. Other embodiments are described and claimed.

Abstract: In a method of reducing a running cost and labor required for quality measurement, client computers matching predetermined district information are selected from a plurality of management target computers receiving network services, a quality measuring program is installed in these client computers to obtain execution results of the quality measuring program, and the quality of network services when the management target computers in the service target district access a server computer.

Abstract: Techniques for routing event data from a field device, such as an external defibrillator, to a selected subset of a plurality of possible destinations are described. The event data may include physiological data of the patient, such as a 12-lead electrocardiogram (ECG). The destinations may be associated with one of a plurality of patient treatment centers, and may include, as examples, computing device, printers, displays, personal digital assistants, or web-accessible accounts. In some examples, a server maintains user-configurable information or rules for at least some of the destinations, and uses the information or rules for determining whether event data received from a field device is routed to the destination. In some examples, the server may also make the routing determination based on an analysis of event data, such as a determination as to whether the event data indicates that the patient is suspected to be experiencing an acute myocardial infarction.

Abstract: In a network, a user can configure host-level policies usable for load balancing traffic to servers of a domain. A global server load balancing (GSLB) switch provides load balancing to the servers, and is configured with the GSLB host-level policies. Users can define a host-level policy (alternatively or additionally to a globally applied GSLB policy) and apply the host-level policy to hosts in domains configured on the GSLB switch. Thus, the user can enable different policies for different hosts. This allows the user to have the flexibility to control metrics used for selection of a best address for querying clients, as well as the metric order and additional parameters used in the GSLB process, at the host level.

Abstract: A method and system is provided for increasing participation in a standby router protocol (SRP) without increasing the amount of network traffic due to SRP messaging. One or more domain master VLANs participate in an SRP on behalf of numerous member VLANs belonging to the domain master VLAN's domain. The domain master VLANs are associated with at least one virtual router. Each domain member VLAN follows the current default routing configuration for the domain master VLAN as determined in accordance with the SRP election process defined for that virtual router. An end-host attached to a host-specific port on an SRP router participates in the SRP by using a router bridge connection established between the SRP router and other SRP routers supporting the virtual router. Each end-host on a host-specific port follows the current default routing configuration implemented by the current master SRP router as determined in accordance with the SRP election process defined for that virtual router.

Abstract: A support server receives via a communication network, facility condition information provided by a content providing terminal that provides a content, showing the condition of the facility where a content is used, and facility information provided by a content user terminal, which is set in the facility where the content is used. The support server stores the received facility condition information and the facility information in a database. The support server extracts facility information that meets the condition shown by the stored facility condition information, from the stored facility information. Then, the support server selects the content user terminal set in the facility specified by the extracted facility information, as the providing destination of the content.

Abstract: In a system including a first unit retaining a first identifier and a second unit retaining a second identifier for reading out the first identifier from the first unit to transmit, as cooperation information, a combination of the first identifier and the second identifier, for managing the cooperation information, a cooperation information managing apparatus receives the cooperation information and registers the second identifier included in the cooperation information and a group of a plurality of first identifiers including the first identifier included in the cooperation information in a state associated with each other. For managing objects to be used by a user, this enables managing the objects as an aggregation without handling the objects individually, thereby realizing efficient management from a user's point of view.

Abstract: A system and method that provides dynamic network policy management. The system enables a network administrator to regulate usage of network services upon initiation of and throughout network sessions. The system employs a method of identifying selectable characteristics of attached functions to establish static and dynamic policies, which policies may be amended before, during and after any session throughout the network based on the monitored detection of any of a number of specified triggering events or activities. Particular policies associated with a particular identified attached function in prior sessions may be cached or saved and employed in subsequent sessions to provide network usage permissions more rapidly in such subsequent sessions. The cached or saved policy information may also be used to identify network usage, control, and security. The system and method of the present invention provides static and dynamic policy allocation for network usage provisioning.

Abstract: A console switch selectively connects a terminal to a port of an information processing device that has a plural number of ports connected through a network. This console switch includes: a first unit that obtains port information from the terminal, the port information specifying the port; and a second unit that refers to a predetermined database in accordance with the port information obtained by the first unit, and establishes a connection path between the terminal and the port of the information processing device.

Abstract: Methods and systems for managing a multi-tiered computer infrastructure. The infrastructure includes a plurality of functional layers, wherein one of the layers is a resource allocation layer. Each functional layer includes a set of resources that are substantially interchangeable with other resources in the same layer and adapted to be able to operate with any resource in an adjacent layer. The resource allocation layer receives and manages information regarding the status of the resources and allocates the resources to a task in accordance with utilization levels and operability of any particular resource.

Abstract: A routing system includes a router, a statistics server (Stat Server) coupled to the router, receiving, processing and storing statistics related to event handling, and providing information regarding the statistics for use by routing intelligence in the router, and a first proxy data server coupled to the Stat Server and to a second proxy data server at a remote contact center over a network. The system is characterized in that the Stat Server receives event statistics regarding the local queue, and through the coupled first and second proxy data servers, event statistics regarding the remote queue, provides information related to the statistics to the router, and the router determines to route incoming events to local queue or to the remote queue based on the information provided.

Abstract: Risk of inadvertent introduction of software bugs to a large number of users during a software update is minimized using an automatic mechanism controlling update release. A value-generating module generates a value for a computer, the value falling within a population range of values. A specification module receives update information in an update deployment specification. The information specifies an eligibility window during which a specified portion of the population range is eligible to retrieve an update. The specification can include fields, such as a code selector, a value offset, a start time, etc. An eligibility determination module applies rules to automatically determine eligibility of the computer to retrieve the software update. The computer is determined eligible when the value for the computer falls within the specified portion of the population range for the eligibility window. An update module permits the computer to retrieve the software update based on the eligibility determination.

Abstract: Techniques for secure federation of data communications networks are provided. The techniques employ an edge proxy server to route messages depending on a federation mode. In Direct federation mode, an edge proxy server of a network is configured to exchange messages with a specified set of entities, such as other networks, servers, other devices, or users. In Automatic federation mode, an edge proxy server may accept all incoming messages from entities that have a valid certificate. In Clearinghouse federation mode, the edge proxy server forwards all outgoing messages to a specified, trusted clearinghouse server.

Abstract: Methods, data structures, and systems for tracking network events that occur across multiple platforms are disclosed. Entities may enter into business agreements for products and services to be conducted across different platforms and register the terms of those agreements with a tracking computer. The tracking computer can monitor network events and determine settlement amounts to be distributed between the entities involved in a given network event based on the terms of one or more agreements that may be stored in a database.

Abstract: A system monitors signaling data transmitted between routers. The system includes at least one router that communicates signaling data via a session with at least one other router. The system also includes a network element that receives a copy of the signaling data via a control session established with the at least one router. The sessions, including the control session, can be border gateway protocol (BGP) sessions. The network element can also operate as a BGP control server or a centralized policy manager.

Abstract: The invention relates to methods for processing data packets according to a set of rules, and especially for preparing of decision trees for selecting the correct rule for processing of a data packet. In preparation of a decision tree, a splitting point within a dimension being studied is chosen as follows. The rules are sorted to allow monotonous iteration through all range end values specified in the rules in the dimension being studied. The range end values are then iterated through in a monotonous fashion, either increasing or decreasing. At each iteration, the number of range low end values and the number of range high end values being equal to the current iteration value is counted. From these counts and the accumulated results from the corresponding counts in previous iterations, the numbers of rules with ranges in different positions relative to the current iteration value are deduced, and from these values, the goodness of the iteration value is calculated.

Abstract: A method and a Fibre Channel switch element are provided that allows communication between a host system and a target device attached to a proprietary switch fabric in a network. The Fibre Channel switch element includes a first port that communicates with the target device through the proprietary switch fabric by logging on behalf of the host system so that the proprietary switch behaves as if it was directly communicating with the host system; and a second port that communicates with the host system and collects host bus adapter (“HBA”) identification information, wherein the HBA identification information is used to map the first port to the second port so that when the host system communicates with the target device the Fibre Channel switch element is transparent to the proprietary switch fabric.

Abstract: A method of establishing a bi-directional Label Switched Path (LSP) includes an establishing request and available upstream and downstream label sets are sent from a first node to a terminal node of the LSP node-by-node. If the available upstream or downstream label set obtained by the terminal node or other nodes is null, the LSP can't be established; if the establishing request is sent to the terminal node and the received available upstream and downstream label sets are not null, the terminal node chooses an upstream label and an downstream label. An establishing response and the upstream and downstream labels are sent from the terminal node to the foregoing nodes node-by-node, and each of other nodes except the first node chooses an upstream label and a downstream label to an upstream node according to the upstream and downstream labels provided by the downstream node.

Abstract: A system and methodology for protecting new computers by applying a preconfigured security update policy is described. In one embodiment, for example, a method is described for controlling connections to a computer upon its initial deployment, the method comprises steps of: upon initial deployment of the computer, applying a preconfigured security policy that establishes a restricted zone of preapproved hosts that the computer may connect to upon its initial deployment; receiving a request for a connection from the computer to a particular host; based on the preconfigured security policy, determining whether the particular host is within the restricted zone of preapproved hosts; and blocking the connection if the particular host is not within the restricted zone of preapproved hosts.

Abstract: An end host in a peer-to-peer system stores identifiers for both its peers and the neighbors of its peers. When the IP address of the end host and one of the peers changes, the end host's new IP address can be sent to each neighbor of the peer so that communication between the end host and the peer will not be lost. The order in which the neighbors of the peer are stored can be prioritized for faster delivery of the end host's changed IP address to the peer. The prioritizing can be by available bandwidth of the neighbors, proximity of the neighbors, trust between the peer and its neighbors, the probability that the IP address of the neighbors will change, etc. Proximity of the peers from each other and the end host can be a function of the identifier, which can be generated from a public key.

Abstract: A method for backing up data in a plurality of computers connected via a network. The method includes forming partnerships between the plurality of computers such that each computer in a partnership commits under agreements to help backup the data of its partners. The method further includes periodically verifying that previously backed up data is being retained by the computers committed to act as backup partners in accordance with the agreements. In another embodiment, the method provides a distributed cooperative backing up of data in a system that includes a loose confederation of computers connected via a network. In this embodiment the method includes selecting computers as potential backup partners from among the loose confederation of computers connected via the network based on predetermined criteria, and negotiating a reciprocal backup partnership agreement between the computers based on predetermined requirements, including backup requirements.

Abstract: A message directed to a first version of a service is received at a content based router in a distributed computing system. The message is transmitted to a second version of the service instead of the first version of the service if the message is compatible with the second version of the service. The message is transmitted to the first version of the service if the message is not compatible with the second version of the service.

Abstract: A system and method that provides dynamic network policy management. The system enables a network administrator to regulate usage of network services upon initiation of and throughout network sessions. The system employs a method of identifying selectable characteristics of attached functions to establish static and dynamic policies, which policies may be amended before, during and after any session throughout the network based on the monitored detection of any of a number of specified triggering events or activities. Particular policies associated with a particular identified attached function in prior sessions may be cached or saved and employed in subsequent sessions to provide network usage permissions more rapidly in such subsequent sessions. The cached or saved policy information may also be used to identify network usage, control, and security. The system and method of the present invention provides static and dynamic policy allocation for network usage provisioning.

Abstract: Methods of electronic scheduling for playback of media contents. Discrete items of content are scheduled for play back based upon a schedule created by the integration of five standard scheduling methods into a single scheduling algorithm. In the first scheduling method, a discrete item of content is assigned a frequency rating relative to other items of content. A second way to schedule is repeating a content item at specific intervals of time. A third scheduling method allows the content to be played at a specific date and time. The forth scheduling method includes playing a content item upon receipt of a trigger event which is received from a source external to the scheduling system. And lastly, means are provided for selectively determining whether or not particular content is available for play in a particular venue or during a particular period of time.

Abstract: A network provides computer services to users and has a centralized data center (CDC) and regional data centers (RDCs) coupled to the CDC. Each RDC is coupled to a plurality of users and maintains for each associated user back up storage. Each user has a user machine with user data stored thereon, and such user data is automatically mirrored to the associated back up storage on the RDC. Each RDC maintains for each associated user a user profile corresponding to the user, and each user and each RDC has a physical location. A user newly couples to the network by contacting the CDC at a network address thereof and receiving from the CDC a network address of an RDC based at least in part on the location of the user. The RDC of the received network address maintains the user profile for the user, and the location of such RDC is expected to be relatively close to the location of the user as compared with the location of all other RDCs.

Abstract: An improved system and method is provided for packet routing in dynamic router tables. Specifically, the invention provides a method, computer system, and computer readable media for using Priority Search Trees (PSTs) to match, insert, and delete rules in dynamic routing tables in O(log n) time. In a first embodiment, for a dynamic router table consisting of n pairs of tuples, each tuple comprising an address prefix and next-hop information, the invention provides a system and method, using a PST, for inserting a new tuple, deleting an existing tuple, and searching for the tuple with the longest matching prefix for destination address, wherein each operation is performed in O(log n) time.

Abstract: A system and method of emulating a network controller within an information handling system is disclosed. In one form, an information handling system can include a host chipset operably coupled to a network interface controller of a first main circuit board, and a management controller operably coupled to the host chipset. The information handling system can also include an emulated network interface controller operable to be activated by the management controller. The information handling system can further include a communication bus coupled to the host chipset and the management controller. In one form, the communication bus is operable to activate a communication link between the host chipset and the emulated network interface controller.

Abstract: Routers of a content network include routing entries that specify aggregation levels, enabling the routers to establish a tree-based topology within an aggregation realm for distribution of broadcast packets. Each router is configured to have a prescribed aggregation level within the aggregation realm, and identify a network-directed broadcast packet based on detecting a prescribed pluricast code at a corresponding prescribed prefix location relative to the prescribed aggregation level. Each router also is configured for storing a registration request within its routing entries, and propagating the registration request to other routers within the aggregation realm. Each registration request includes a bit mask according to one of the prescribed aggregation levels. Hence, client-based registration requests can be propagated throughout the aggregation realm for rules-based coalescence of subscriber groups throughout the aggregation realm.

Abstract: A method for monitoring replica servers in a networked computer system is provided, in which each server in the system has a replica partner vector table that includes state information about other servers in the system. The replica partner vector table includes data fields for storing an update sequence number (USN) and timestamp information that identifies the time of the last update and/or the time last successful replication attempt for each replica server in the system. After each successful replication, the server updates the entries in the replica partner vector to reflect the updated USN and timestamp information. The replica monitoring method evaluates the USN and timestamp entries in the replica partner vector table to determine if any servers in the system are latent. If the monitoring method detects that a server in the system is latent, an alert is generated whereby users and/or a network administrator are informed of the problem.

Abstract: A monitoring system, method, and computer-program product tracks events and device states in a device and sends those events and states to a remote central service center using an Internet access module. The remote central service center monitors the received events and states for errors or warnings. The monitoring software (e.g., a dynamic link library) supports multiple data formats and multiple protocols to more effectively communicate the event and state information.

Abstract: A load-balancing device having a specification-information insertion unit, a specification-information detection unit, and a destination determination unit. When a response message does not contain specification information specifying a destination server, the specification-information insertion unit detects the source server of the response message as the destination server, and inserts into the response message specification information specifying the destination server. A client stores specification information specifying a destination server, and inserts the specification information in a request message when it is necessary to guarantee the uniqueness. When the load-balancing device receives a request message from the client, the specification-information detection unit detects whether or not specification information is inserted in the request message.

Abstract: A method of communicating information between a first program and a second program over a network is described. The method includes relaying the information between the first program and a first communications program over a first network connection, relaying the information between the first communications program and a second communications program over a second network connection and relaying the information between the second communications program and the second program over a third network connection. Further, the first communications program creates the second network connection to the second communications program through a first firewall program, which prevents access to the first program initiated by the second program. Thus, the second network connection is initiated by the first communications program. The first communications program can be, for example, a protocol daemon and the second communications program can be, for example, a relay program.