Abstract: A system and a method for auto-configuring stackable network devices are disclosed for automatically configuring a plurality of stackable network devices. The system for auto-configuring stackable network devices comprises: a configuration file, a command line interface (CLI) component, a switch controller and a topology manger. The method for auto-configuring stackable network devices utilizes the feature that the network device has a unique medium access control (MAC) address, to automatically performing the system configuration.

Abstract: A system and method are shown for load balancing across global network resources using an existing network protocol, such as Mobile IP, having a redirect feature. According to one method, each of a plurality of servers at a data center uses Mobile IP to obtain an IP address that is also provided to a content server site. Further, a content server site includes a plurality of IP addresses assigned to the plurality of servers and creates a load database including load data for each server. When a client request is received at the content server site from a client device, the content server site determines a network address of a server to process the client request based on the load data, and provides the network address of the server to the client device. When the client device receives the network address of the server, the client device sends an application request to the selected server, and the selected server sends an application response to the client device.

Abstract: A control program for a co-processor in a video-on-demand system directs the co-processor to perform the steps of: a) obtain a transmission control list, from an external source, which identifies a group of several video data packets and a respective subgroup of internet protocol headers for each video data packet in the group; b) partition into pieces, each video data packet and its respective subgroup of internet protocol headers as identified by the transmission control list; and, c) send the partitioned pieces, along with an additional header for each piece, to an output port during a series of spaced apart time intervals.

Abstract: A system and method for providing a broadcast to a receiver via a communication network. In particular, the broadcast is received via at least one global multicast channel. At least one local multicast channel is associated with the global multicast address. Then, a communication link is established between the receiver and the local multicast channel, and the broadcast is routed from the global multicast channel to the local multicast channel to provide the broadcast to the receiver. The number of the receivers which are receiving the broadcast may be determined. The receiver may include an Internet Protocol (IP) interface which enables the receiver to receive the broadcast via an IP-type multicast communication. The receiver may also be wireless, and can receive the broadcast in a first subnet using a multicast communication. Prior to the receiver moving to a second subnet, a request is generated by the receiver to receive the broadcast in the second subnet.

Abstract: A method, system, apparatus, and computer program product are presented for a distributed port firewall system. The distributed port firewall system provides mapping of port usage to application needs, application action object (AAO) used to identify the use of ports. Application action object may be opened based on endpoint and user. Port firewall “properties” are added in order to configure firewall which are only configurable by certain trusted users or applications. Different policies applied to usage and the opening of ports based on both a collection of endpoints, managed regions, or on a per endpoint basis. Beyond just allowing an application to open a port, the allowed packet types are also configured to work in conjunction with a distributed packet snooper session.

Abstract: A communications security system has been described. The security system in the form of a firewall is made up of a plurality of communicatively coupled sets of modules in a matrix configuration. The modules may be implemented in hardware and software in order to rely on the advantages of each technology. Data packets are typically coupled to an ingress side of the firewall where policy rules having the highest importance are checked first. The result is a high speed system having carrier class availability.

Abstract: A system and method for providing the ability to selectively share data in a network routing device with an associated host. The system and method employs a hardware firewall in the routing device which restricts the host such that it can only access areas in shared memory which contains data destined for the host. The routing device CPU notifies the host of pending data and the location of that data in the shared memory. The hardware firewall is also notified of the location in shared memory which the host may access. When the host attempts to read the data, the firewall ensures that only the stated memory area or areas are accessed by the host. Once the data has been read by the host, the firewall is notified to cancel the host's ability to access the shared memory until such time as a new packet destined for the host arrives in the routing device.

Abstract: A network address server is configured to resolve a target network address name label with a network address, with the target address name label defining a branch of one level of a multi-level network address name space. The network address server is one of a plurality of network address servers each being uniquely associated with a respective region of the address name space level. The network server includes an address name database, and an address name processor in communication with the address name database for providing a response to a query for the network address corresponding to the target address name label. The address name database includes a number of database records, each identifying a unique address name label and a network address uniquely associated with the address name label.

Abstract: According to one embodiment, a network hardware machine is disclosed. The network hardware machine includes a central processing unit (CPU) that processes data packets received at the network hardware machine, and a classifier, coupled to the CPU, that classifies the packets prior to the packets being received at the CPU.

Abstract: An information management and distribution system is disclosed. The information management and distribution system includes a client-side application and a server application that interact to facilitate the controlled exchange of contact information over a network. The client-side application can provide creation and design, rolodex, exchange, and update features. The information management and distribution system can also include a corporate administrator application. Still another aspect of the invention is that contact information can be distributed to registered users in a common format.

Abstract: A method, apparatus, and computer program product includes serially receiving, from a source, a plurality of forward messages each addressed to one of a plurality of destinations; receiving a plurality of availability signals, each availability signal indicating that one of the destinations is available to accept a forward message; simultaneously sending a forward message to each available destination; simultaneously receiving, after a predetermined period of time, a plurality of reverse messages from the destinations, each reverse message corresponding to one of the forward messages simultaneously sent to an available destination; and serially sending the reverse messages to the source.

Abstract: In one embodiment there is disclosed an application program in which a document is created containing complex rendering codes which codes identify locations within the document where material other than the basic medium is to be inserted or where special treatment is required. These rendering codes control, for example, the insertion of tabs, special attributes of the tabs, such as color, printing, etc, the type of binding the document is to have, the type of printing, the type of assembly, the downloading of material from other sources, the tailoring of portions of the document to the end user, etc. During the rendering process the rendering codes are used to insure that the finished product is rendered exactly as contemplated by the document creator even when the document is rendered without assistance from the creator and without the need for communicated directions outside of the created document.

Abstract: A remote configurator for a gateway device is disclosed. The remote configurator module is operatively disposed in a gateway device for providing network connectivity between a source and destination of IP-compliant traffic. Embodiments of the remote configurator module are disclosed providing an HTML-based configuration interface for allowing remote management of gateway configuration files over an IP-compliant connection.

Abstract: A network isolation apparatus is provided that permits data to be sent to a remote computer or network without a return path so that the isolated sensitive network may not be compromised. The isolation device spoofs the network so that the network believes it has a fully functional external connection. The invention has a first media converter for receiving data from a workstation on a sensitive network; this data is then passed to a second media converter and then transmitted to a remote computer. An optical signal generator sends signals to the workstation to imitate a standard transmit and receive connection, and also sends signals to the second media converter to imitate a standard transmit and receive connection. No physical connection exists for the remote computer workstation to compromise the sensitive network.

Abstract: The invention is related to a method in a communication network for handling traffic, such as data packets, from source nodes to destination nodes, via user selectable relay nodes. The relay nodes form an overlay network of nodes operated and managed by an overlay network operator. Communication between relay nodes relies on using packet forwarding services of intermediate networks being operated and managed independently by other operators. For any source/destination pair the overlay network operator may select an appropriate sequence of relay nodes to be passed depending on the required quality of service and the performance of different intermediate networks. The invention enables the control of the spreading of traffic between any two end-points over several alternative relay routes.

Abstract: A Virtual Access Core (VAC) manages and controls access to virtual machines. A Virtual Instruction Routine (VIR) protocol is used by all components of the system to pass instructions and information about a Virtual Session. The VAC issues commands in the VIR protocol language causing virtual machines to start and stop. A VIR host that hosts virtual machines responds to VAC commands. Web clients access the system via links, which a web server uses to send access requests to the VAC. The VAC responds by searching through process memory and database tables for information about free slots on a plurality of VIR hosts grouped into a Host Array. When one or more free slots have been identified, the VAC issues VIR Protocol commands instruction one or more VIR Hosts to load and start specific virtual machines in Specific Slots.

Abstract: An apparatus and method for forwarding data on a digital data network are provided. The network includes optimized routers and a plurality of routers connected on the network. A route optimizer receives information from the optimized routers and plurality of routers with regard to traffic congestion. The information can include queue lengths of one or more queues within the optimized routers. The route optimizer uses the congestion information from the optimized routers and plurality of routers to define optimum paths for transfer of data. The defined paths can be MPLS paths, which are then transmitted to the optimized routers and any other routers in the network.

Abstract: A platform and method of deploying virtual processing areas networks are described. A plurality of computer processors are connected to an internal communication network. At least one control node is in communication with an external communication network and an external storage network has an external storage address space. The at least one control node is connected to the internal network and thereby is in communication with the plurality of computer processors. Configuration logic defines and establishes a virtual processing area network having a corresponding set of computer processors from the plurality of processors, a virtual local area communication network providing communication among the set of computer processors, and a virtual storage space with a defined correspondence to the address space of the storage network.

Abstract: A method for facilitating the electronic scheduling for playback of a variety of media such as music or video is disclosed. In the described system, discrete items of content (such as music or video) are scheduled for play back based upon a schedule created by the integration of five standard scheduling methods into a single comprehensive scheduling algorithm. In the first scheduling method a discrete item of content is assigned a frequency rating relative to other items of content. A second way to schedule is called recurring playback. In the recurring method, a particular item of content is scheduled to repeat at specific intervals of time. Intervals can be in terms of minutes, hours or days. A third scheduling method allows the content to be played according to a time base, that is, media content can be scheduled to play at a specific date and time. The forth type of input to the scheduling system is a trigger event which is received from a source external to the scheduling system.

Abstract: A system controller selects a transmission mode for content distribution based upon the relative popularity of the content within the content distribution system. The system controller receives a content distribution request from a content source and detects a content distribution characteristic for content to be distributed by the content source, in response to receiving the content distribution request. When the content distribution characteristic indicates the content as being relatively popular, or frequently requested by receivers in the content distribution system, the system controller selects a one-to-many transmission mode for the content. When the content distribution characteristic indicates the content as being relatively unpopular, or infrequently requested by receivers in the content distribution system), the system controller selects a one-to-one transmission mode for the content.

Abstract: A multiprocessor computer system is configured to selectively transmit address transactions through an address network using either a broadcast mode or a point-to-point mode transparent to the active devices that initiate the transactions. Depending on the mode of transmission selected, either a directory-based coherency protocol or a broadcast snooping coherency protocol is implemented to maintain coherency within the system. A computing node is formed by a group of clients which share a common address and data network. The address network is configured to determine whether a particular transaction is to be conveyed in broadcast mode or point-to-point mode. In one embodiment, the address network includes a mode table with entries which are configurable to indicate transmission modes corresponding to different regions of the address space within the node.

Abstract: An application programming interface (API) is described that allows creating or destroying one or more pairs of data structures for asynchronously passing between the operating system and a network application pointers to packet buffers mapped to both parties.

Abstract: TICC manages asynchronous communications among groups of concurrent (parallel) processes (Objects) in multiprocessors. It dedicates one processor to function as Communications Processor, C. TICC defines a Causal Communication programming Language, called CCL, whose statements may appear intermixed with statements of any conventional programming language. TICC defines methods for compiling CCL statements in these mixed language programs into sequences of protocols which are executed by C, in parallel with on going computations guaranteeing (1) group-to-group loss less, buffer less, self-synchronizing asynchronous data transfers; (2) more than a hundred fold reduction in communication latencies; (3) Dynamic Flexibility to monitor, repair, reconfigure and update software objects without service interruption; and (4) protection and security of all data, distributed to or collected from communicating objects, based on an Agreement Protocol.

Abstract: A method and apparatus for enhancing the current data communication capabilities of the North American Terrestrial System (NATS) Network is presented. In accordance with an embodiment of the present invention, an airborne data server (ADS) is added to the airborne architecture of the current NATS Network and a ground data gateway (GDG) is added to the ground-based architecture of the current NATS Network. The ADS functions as a router/gateway connected to many local area networks (LANs) aboard the aircraft. The ADS provides for the automation of data services such as scheduling, routing and translation. The GDG is the central hub for the network and dispatcher of data to customer premises or to the aircraft.

Abstract: A session initiation protocol (SIP) based communication system registers a number of different device types (10, 50) in a database (30). Each type of communication device is registered including a communication device description, internet protocol address, priority, registration time, and expiration time (80). When a call is received by the network (20), the communication device at which to reach the user is first selected by priority (116) and then by registration time of the communication device (122).

Abstract: A user gains access to a private network by connecting to a network, either through a hardwired or wireless connection, and then initiates an Internet access request targeting any website. If the user is not already authorized for Internet access, then the user is sent to a first predetermined website that points the user to an authentication server accessible via the Internet. The authentication server sends the user an HTTP form pages requesting authentication information. When the user responds, a network monitoring device within the private network alters the form page to include the user's hardware address and an encoded ID based on the network's location. The authentication server forwards this data to a gate keeper server, which authenticates the new user and transmits an unblock message along with another encoded ID based on the network's location and the user's hardware address.

Abstract: A system and method for facilitating information interexchange between a wireless telecommunications system having at least one telecommunications device therein and an information service provider. A Business-to-Business (B2B) engine is connected to the telecommunications system for receiving realtime information related to a telecommunications device within the telecommunications system. This realtime information is provided by the B2B engine to the information service provider, which consequently provides content data to the telecommunications device within the telecommunications system.

Abstract: Packets are routed in a communications network including an infrastructure of packet switching nodes interconnected by packet transport links, and a plurality of access nodes to which a routing path, defined by data held in packet switching nodes located along the routing path, may be directed in the infrastructure for a given network address. Different types of routing updates are used in a single routing domain.

Abstract: The invention is directed to techniques for managing data distribution in a network. A source or root node distributes data (e.g., video data) throughout a network of nodes by distributing data from parent to child through a tree of nodes. The nodes distribute the data through the network concurrently in a real-time manner, but retain copies of the data in nonvolatile data storage on each node. Thus, the data remains accessible on each node so that the data is available after the real-time distribution of the data. After the real-time distribution of the data, a new node can attach to any of the nodes currently in the network as a child of that node, and then the new node can request a copy of the data from the data storage of that parent node.

Abstract: A Collaborator computer collaborative environment (CCE) instantiated by a computer network includes N Collaborator CCE clients and a Collaborator CCE server. Each of the N Collaborator CCE clients generates message objects each including a nested group identifier and an associated privilege level; the Collaborator CCE server filters the generated message objects and routes only those message objects to an Nth Collaborator CCE client that is a member of the respective group having the group identifier and that has a privilege greater than or equal to the associated privilege level. Corresponding software is also described.

Abstract: The occurrence of recursive loops between network elements are detected and prevented. One or more queries are generated that are sent between the network elements. One or more of the network elements detect the imminent occurrence of a recursive loop between the network elements, and prevent the recursive loop by generating an intensional answer in response to the query. The intensional answer contains rules.

Abstract: A computer-based system is configured for aggregating multiple router configurations into a single router configuration, enabling transfer of functionality from routers configured according to the respective router configurations to a single router having the single router configuration. The system includes a configuration determination resource configured for determining the router configurations from the multiple routers, and a device analyzer resource configured for determining for each router configuration a corresponding candidate configuration to be utilized in the single router configuration. Any conflict detected between the router configuration and the corresponding candidate configuration is managed by a conflict resolution resource, which determines the availability of a resolved configuration in the single router configuration to replace the corresponding router configuration.

Abstract: An archive cluster application runs in a distributed manner across a redundant array of independent nodes. Each node preferably runs a complete archive cluster application instance. A given nodes provides a data repository, which stores up to a large amount (e.g., a terabyte) of data, while also acting as a portal that enables access to archive files. Each symmetric node has a set of software processes, e.g., a request manager, a storage manager, a metadata manager, and a policy manager. The request manager manages requests to the node for data (i.e., file data), the storage manager manages data read/write functions from a disk associated with the node, and the metadata manager facilitates metadata transactions and recovery across the distributed database. The policy manager implements one or more policies, which are operations that determine the behavior of an “archive object” within the cluster. The archive cluster application provides object-based storage.

Abstract: The invention provides a high availability control method for a router in an autonomous system, the router being in communication with other routers using an IS—IS protocol via interfaces and presenting both an active IS—IS protocol engine and a standby IS—IS protocol engine. The method comprises steps of storing data concerning adjacency, the state of links, and interfaces in a memory of the active protocol engine, updating the data stored in a memory of the standby protocol engine, and activating the standby protocol engine using the updated data. The invention also provides a router implementing the method. The invention serves to increase router availability in the event of a failure or of maintenance actions.

Abstract: A manufacturing facility includes a plurality of programmable logic controllers that contain operating programs and process parameters. The programmable logic controllers are connected to a network such that the operating programs and process parameters from the programmable logic controllers can be backed-up to a remote data storage device. Preferably, the backing-up of the programmable logic controllers takes place automatically and periodically in a manner that does not interrupt the manufacturing process.

Abstract: A network management system which includes a plurality of network devices operating in a coordinated manner and a management server managing the network devices. The management server includes apparatus for defining policy information and for generating setup information using policy information to generate setup information for each network device. The system generates setup information for each network device, distributes setup information to each network device, installs setup information to each network device, enables settings, collects setup information for each network device, and organizes and checks for consistency in the collected information.

Abstract: A method for providing leased network addresses for a host from a server executing on a server device is disclosed. A first request for a leased network address from the host, relayed by an intermediate device, is received. The intermediate device filters communications between the host and the server device. A response is generated for the host, by the server, which offers a leased network address for a particular period of time and includes a network address of the intermediate device. The network address of the intermediate device is provided in a portion of the response normally designated for indicating a network address of the server. By providing the address of the intermediate device in the portion of the response designated for the server address, the server causes the client to send renewal requests to the intermediate device so that a relay process on the intermediate device can properly operate on the request, without modifying the client process.

Abstract: A system is disclosed for distributing and scheduling the play of advertising content utilizing a network. A database is provided for storing the advertising content. A server is coupled to the database. The server is capable of receiving and storing input preferences relating to parameters selected from the group consisting of: frequency, interval, time of play, and trigger events. A scheduling algorithm is executed on the server for generating scheduling data utilizing the input preferences. The scheduling algorithm is based on predetermined methods of processing these input preferences. A network is coupled between the database and the server for distributing the advertising content and the scheduling data to a plurality of output devices.

Abstract: A peer-to-peer network has a server that maintains a list of addresses of clients connected to the peer-to-peer network. The server generates seed lists for each of the clients connected to the network from the server maintained list. The clients conduct peer-to-peer searches using the seed list provided by the server. The seed lists may be either randomly generated or generated to facilitate network objectives. The clients may periodically request seed list refreshing. The peer-to-peer network may further include authentication and authorization search security checks.

Abstract: A method and a corresponding system for enabling the sending of messages to a recipient via any of a number of messaging systems of different types are disclosed. In the method addresses for said recipient are stored. Furthermore, recipient availability information is received from the messaging systems. The recipient availability information is interpreted so as to determine in which of the messaging systems the recipient is currently available. Furthermore, an originator input including an identification of the recipient is received and an address among the stored addresses that are associated with messaging systems in which the recipient is currently available is chosen. Finally, the messaging system associated with the chosen address is identified.

Abstract: Using switching technologies to duplicate packets of a digital stream (e.g., digital video stream) sent from one workstation to multiple recipient workstations, where the switching technologies enable the multiple streams sent from the switch to the recipient workstations to be generated from a single digital stream sent from the sending workstation to the switch. Data units, such as video data units, may be transmitted by using a switch to enable receipt of a stream of data units including a payload portion and an attribute portion from at least two conferencing participants. The switch is used to duplicate at least a subportion of the payload portion of a data unit within the stream of data units, and to enable access to the duplicated subportion of the data unit by two or more conferencing participants.

Abstract: Placing virtualization agents in the switches which comprise the SAN fabric. Higher level virtualization management functions are provided in an external management server. Conventional HBAs can be utilized in the hosts and storage units. In a first embodiment, a series of HBAs are provided in the switch unit. The HBAs connect to bridge chips and memory controllers to place the frame information in dedicated memory. Routine translation of known destinations is done by the HBA, based on a virtualization table provided by a virtualization CPU. If a frame is not in the table, it is provided to the dedicated RAM. Analysis and manipulation of the frame headers is then done by the CPU, with a new entry being made in the HBA table and the modified frames then redirected by the HBA into the fabric. This can be done in either a standalone switch environment or in combination with other switching components located in a director level switch.

Abstract: A control system is disclosed for controlling data flow over a data-packet-network according to specific destinations. The system has a network monitoring system for monitoring network performance parameters; a network access system for accessing specific nodes in the network; and a control software executable on the network access system for assigning and changing cost parameters at selected nodes in the network. A network administrator uses the network access system and control software to assign and implement cost values at the selected nodes, the values associated individually with a specific destination or destinations, the values establishing forwarding costs to be incurred at the selected nodes, and link costs to be incurred per data link between the nodes such that manipulation of such cost value assignments enables load balancing of data traveling through the network. In one embodiment the data-packet-network is internal to a router and nodes comprise internal router cards.

Abstract: A gateway using multiple NAT tables to translate network addresses (e.g., Internet Protocol Addresses). The gateway may comprise a service selection gateway connecting remote systems to service domains. The gateway translates local addresses of remote systems to external addresses, and vice versa. The external addresses (bound to the respective local addresses) may be provided by the service domains. The NAT information is partitioned according to service domains such that the external addresses related to the same service domain are stored in the same NAT table. If there is no overlap of external addresses provided by two service domains, the two service domains may share the same NAT table. Due to the partitioning of the NAT information, each table may be limited to be of small size, and the accesses to individual tables may be fast. As a result, a gateway may be able to process and forward packets quickly.

Abstract: A switch element is configured to extend communications between data lines. The switch element includes a set of ingress devices, a set of center stage devices, and a set of egress devices. Each center stage device is connectable to each ingress device and to each egress device. Each ingress device connects to a corresponding egress device across one of the center stage devices. The center stage switch can be selectively actuated to accommodate a new ingress or egress device across the center stage switch.

Abstract: The present invention is directed to the discovery of network devices capable of handling multiplexed packet data flows. According to the present invention, multiplexing routers included in a path along which communication resources are reserved insert an object into the RSVP RESV message, to provide operating parameters to an originating multiplexing router. Using the operating parameters provided by multiplexing routers along the path, the originating multiplexing router can identify a multiplexing router proximate to a receiving communication device or devices. The originating multiplexing router can then create super packets addressed to the receiving multiplexing router proximate to the receiving communication that contains multiple data packets. The router to which the super packet is addressed can then deaggregate the super packet, and deliver the data packets to the receiving communication device or devices.

Abstract: A message broker data processing apparatus comprising: a unit for receiving published messages on a topic from a plurality of publisher applications; a unit for processing the received messages; and a unit for distributing the processed messages to a subscriber application; wherein the unit for receiving includes a plurality of publication point data processing nodes, each of which receives published messages on the topic from a publisher application.

Abstract: Access control approaches are disclosed wherein managed object in Simple Network Management Protocol (SNMP) Management Information Bases (MIBs) are accessed on a per-Virtual Private Network (VPN)-basis with no modifications to existing MIBs. A manager and an SNMP Agent operating in a VPN environment agree on a mapping between SNMP securityNames and VPN IDs. Under the agreed mapping, the target VPN of any SNMP management request can be unambiguously determined from the securityName alone. For each securityName, one or more MIB Views are configured using in a View-based Access Control Model MIB (VACM MIB) table; the MIB Views specify which portions of the managed object tree can be viewed or modified by a corresponding VPN. Thereafter, a VPN-enabled device provides SNMP requests in which a VPN ID value is passed in the securityName field of the context string in the community string.

Abstract: A network mediator corresponding to a computing device uses packet filters to restrict network communications. The network mediator includes a set of one or more filters, each filter having parameters that are compared to corresponding parameters of a data packet to be passed through the network mediator. The network mediator determines whether to allow the data packet through based on whether the data packet parameters match any filter parameters. The set of filters can be modified by a remote device, but cannot be modified by the computing device whose communications are being restricted. When a data packet is sent from the computing device, the data packet will include the virtual address which is changed to the network address by the network mediator prior to forwarding the packet on the network, and vice versa. By virtualizing the addresses, the computing device is restricted in accessing other devices over the network.

Abstract: A system and method of processing commands receives and stores in a memory a first command line interface. The first command line interface processes commands addressed to boards of a first board type. The system and method receives and stores in memory a second command line interface. The second command line interface processes commands addressed to boards of the first board type. The system and method processes a first command using the first command line interface and a second command using the second command line interface. The first command and the second commands are addressed to boards having the first board type.