Abstract: Provided is a device and a method for providing network virtualization, in which a method of dynamically mapping a processor includes extracting tenant information on a tenant and information on a virtual machine (VM) generated by a Cloud OS or controller; classifying virtual machine queues (VMQs) and processors to process the VMQs by tenant, and dynamically mapping the VMQs onto the processors by tenant.

Abstract: Techniques for managing power loads of a data center include electrically coupling a data center infrastructure power load and a data center IT power load in a power distribution system having a specified power capacity, the infrastructure power load including a plurality of infrastructure power loads associated with at least one of a data center cooling system, a data center lighting system, or a data center building management system, and the IT power load including a plurality of IT power loads associated with a plurality of rack-mounted computing devices; determining that a predicted amount of the IT power load is about equal to or greater than a threshold power value; throttling the infrastructure power load to reduce a portion of the power capacity used by the infrastructure power load; and based on throttling the infrastructure power load, increasing another portion of the power capacity available to the IT power load.

Abstract: Methods and systems for performing load balancing and session persistence in IP (e.g., IPv6) networks are described herein. Some aspects relate to a destination options extension header that may be used to store load balancing session persistence option (LBSPO) data, including a client identifier and a server identifier for each of a client and a server. A load balancer for a server farm can perform session persistence and load balancing based on the LBSPO information. The server can include its own address in the LBSPO data when responding to an initial request from a client. The client device may then address subsequent packets to the server selected for that session, thereby bypassing the load balancer after the session is established, thereby freeing the load balancer to handle other requests. The LBSPO information may remain unchanged for the duration of the session.

Abstract: A method for providing Layer 2 link attributes to a user includes transmitting a query using a Layer 3 network protocol to at least a first network element to determine a link attribute for a Layer 2 link between the first network element and a second network element in a network, receiving a response indicative of the link attribute for the Layer 2 link, determining based on the received response a graphical line attribute corresponding to the link attribute according to a predetermined mapping of link attributes to graphical line attributes, and updating a line element at a graphical user interface according to the graphical line attribute, the line element connecting at the graphical user interface a first graphical element corresponding to the first network element and a second graphical element corresponding to the second network element.

Abstract: Applying a security policy to an application session, includes: recognizing the application session between a network and an application via a security gateway; determining by the security gateway a user identity of the application session using information about the application session; obtaining by the security gateway the security policy comprising network parameters mapped to the user identity; and applying the security policy to the application session by the security gateway. The user identity may be a network user identity or an application user identity recognized from packets of the application session. The security policy may comprise a network traffic policy mapped and/or a document access policy mapped to the user identity, where the network traffic policy is applied to the application session. The security gateway may further generate a security report concerning the application of the security policy to the application session.

Abstract: A method, system, and program product comprising determining a set of objects to be represented in a computer model, determining the relationships between the object to be represented in the computer model, and creating layered over and underlying relationship between the determined set of objects.

Abstract: According to one embodiment system and method provides executing at least a portion of a cloud computing task on a client terminal. The system and method further includes checking whether the client terminal is recharging or not and accessing a server for executing the cloud computing task if the terminal is recharging.

Abstract: In one embodiment, a node may determine a topology of a plurality of reporting nodes within a directed acyclic graph (DAG) in a computer network. The reporting nodes may then be assigned to one of a plurality of reporting groups, where reporting nodes are allowed to report only during designated time windows corresponding to their assigned reporting group. The reporting nodes may then be informed of at least their own assignment to a particular reporting group. In another embodiment, a particular reporting node may join the DAG, and may also receive an assignment to one of a plurality of reporting groups. Accordingly, the particular reporting node may also determine designated time windows corresponding to the assigned reporting group, where the particular reporting node is allowed to report only during the designated time windows.

Abstract: A security gateway includes packet routing policies, each including a host network address, an application network address, and a forwarding interface. In routing data packets of an application session, the security gateway: recognizes the application session between a network and an application; determines a user identity from an application session record for the application session; determines packet routing policies applicable to the application session based on the user identity; receives a data packet for the application session, including a source network address and a destination network address; compares the source network address with the host network address, and the destination network address with the application network address; and in response to finding a match between the source network address and the host network address, and between the destination network address and the application network address, processes the data packet using the forwarding interface of the packet routing policy.

Abstract: In one embodiment, a data aggregator discovery (DAD) message may be distributed by an associated data aggregator, the DAD message identifying the initiating data aggregator, and comprising a recorded route taken from the data aggregator to a receiving particular node as well as a total path cost for the particular node to reach a root node of the DAG through the recorded route and via the data aggregator. The receiving particular node determines a path cost increase (PCI) associated with use of the data aggregator based on the total path cost as compared to a DAG-based path cost for the particular node to reach the root node via the DAG. If the PCI is below a configured threshold, the particular node may redirect traffic to the data aggregator as source-routed traffic according to the recorded route. The traffic may then be aggregated by the data aggregator, accordingly.

Abstract: Systems and methods for collecting information from digital media files. More specifically, a collection module may be used to communicate with a social networking system and analyze the digital media files associated with a user profile. The collection module may generate media-based profile information based on media content and/or location, time and date data extracted from the digital media files. The media-based profile information may be incorporated into the user profile information and used by the social networking system for various purposes.

Abstract: Applying a security policy to an application session, includes: recognizing the application session between a network and an application via a security gateway; determining by the security gateway a user identity of the application session using information about the application session; obtaining by the security gateway the security policy comprising network parameters mapped to the user identity; and applying the security policy to the application session by the security gateway. The user identity may be a network user identity or an application user identity recognized from packets of the application session. The security policy may comprise a network traffic policy mapped and/or a document access policy mapped to the user identity, where the network traffic policy is applied to the application session. The security gateway may further generate a security report concerning the application of the security policy to the application session.

Abstract: A security gateway includes packet routing policies, each including a host network address, an application network address, and a forwarding interface. In routing data packets of an application session, the security gateway: recognizes the application session between a network and an application; determines a user identity from an application session record for the application session; determines packet routing policies applicable to the application session based on the user identity; receives a data packet for the application session, including a source network address and a destination network address; compares the source network address with the host network address, and the destination network address with the application network address; and in response to finding a match between the source network address and the host network address, and between the destination network address and the application network address, processes the data packet using the forwarding interface of the packet routing policy.

Abstract: A start node acquires coupled state information indicating a connectibility of nodes from a network. By executing simulation in accordance with a computational model constructed based on the coupled state information, the start node determines for each node a first link that transmitted an oscillation or a signal first to the node. A path that extends from a target node to the start node via the first link of intermediate nodes is selected.

Abstract: The present invention relates to a method for controlling system overload in a wireless communication system. The method comprises: a first step in which a mobility management entity (MME) that has received a tracking region update request message from a first terminal transmits a location update request message to a home subscriber server (HSS); a second step in which, if the HSS has determined that a system overload has occurred, the HSS sets MME-backoff time for preventing the transmission of a request message to the HSS, and transmits a location update rejection message including said MME-backoff time to the MME; and a third step in which the MME drives a backoff timer corresponding to said MME-backoff time and rejects a TAU update request message from a terminal received prior to the completion of the driving of the backoff timer.

Abstract: An information handling system is provided. The information handling system includes a plurality of core devices coupled to each other and to a plurality of distribution devices and a plurality of top-of-rack devices coupled to a plurality of servers and to the distribution devices. The plurality of servers are running hypervisors thereon that each manage a virtual switch and a plurality of virtual machines (VMs). The information handling system further includes a plurality of local network address resolution mediators, with each local network address resolution mediator running on one of the plurality of servers and receiving packets from VMs running thereon, and a global network address resolution mediator running on one of the plurality of core devices. The global network address resolution mediator is in communication with each of the plurality of local network address resolution mediators to collect and distribute packets from the plurality of VMs.

Abstract: Apparatus, and an associated method, by which to permit selection by a user of a mobile node of with which cellular communication system network that the mobile node shall communicate by way of an interworking wireless local area network. User selection is provided even when the interworking wireless local area network is directly connected to the home network of the mobile node. A determiner determines whether the interworking wireless local area network is directly connected to the home network. And, responsive to the determinations, an identifier identifies the cellular communication system network associated with the interworking wireless local area network.

Abstract: In some embodiments, a virtual device context (vDC) domain may be advertised to other network devices. If at least a partition of each device is determined to belong to the same vDC domain, the network interface communicating with the at least one device may be activated.

Abstract: Method for applying a security policy to an application session, includes: recognizing the application session between a network and an application via a security gateway; determining by the security gateway a user identity of the application session using information about the application session; obtaining by the security gateway the security policy comprising network parameters mapped to the user identity; and applying the security policy to the application session by the security gateway. The user identity may be a network user identity or an application user identity recognized from packets of the application session. The security policy may comprise a network traffic policy mapped and/or a document access policy mapped to the user identity, where the network traffic policy is applied to the application session. The security gateway may further generate a security report concerning the application of the security policy to the application session.

Abstract: A device receives updated television content, and generates a file that provides an indication to copy the updated television content to multiple television distribution sites, where each television distribution site includes multiple television distribution devices. The device identifies one of the multiple television distribution devices, associated with each of the multiple television distribution sites, to receive the file, packages the updated television content with the file, for the identified one of the multiple television distribution devices, and provides the updated television content and the file to the identified one of the multiple television distribution devices.

Abstract: Techniques are disclosed for dynamic assignment of a logical zone to a data center. A request may be received to link together different accounts. Data center selection information may then be obtained including, for example, an identification of the data centers to which each of the linked accounts is currently assigned, linked account usage information and system capacity information. The obtained information may be used to determine a selected data center to which to assign the logical zone across each of the linked accounts. The selected data center may be determined based on one or more selection priorities, which may be set based on input from any combination of a customer, a service provider and/or another party. Any linked accounts not currently assigned to the selected data center may then have instances migrated to the selected data center using, for example, one or more passive and/or active migration techniques.

Abstract: The invention facilitates remote management of a computer via a network. Remote computer management in which communication between a managed computer and a remote computer management server is initiated by the managed computer is implemented so that the communication is formatted in accordance with a network communications protocol that can be used to format communication that is allowed to pass through a firewall and/or gateway that mediates communication with the managed computer.

Abstract: There is provided an authentication server including: a network access authenticating unit and an address notifying unit wherein the network access authenticating unit receives, from an authentication relay connected to a network, a first authentication message for a communication device existing under the authentication relay, and execute network access authentication process with the communication device, and the address notifying unit notifies the communication device of the server's address information in accordance with a result of the network access authentication process.

Abstract: Providing gateway redundancy is disclosed. On each of a master and a standby gateway a single IP routing redundancy protocol instance is associated with a plurality of subscriber subnets. On each gateway, the respective single IP routing redundancy protocol instance is used to provide gateway redundancy for the plurality of subscriber subnets.

Abstract: One of the embodiments is directed to establishing peer-to-peer tunnels between clients in a mobility domain. Normally, clients attached to a network having access nodes connected to a central controller transfer all traffic through the central controller via tunnels between the access node and the central controller. A mobility manager operating in the controller tracks access nodes connected to the controller, and clients connected to those access nodes. When the mobility controller recognizes traffic passing between clients in its mobility domain that is eligible for peer-to-peer forwarding, it instructs the access nodes supporting the clients to establish a peer-to-peer tunnel between the nodes, and direct the client traffic through this peer-to-peer tunnel. The peer-to-peer tunnel may be session based, or may be aged. Eligibility of traffic for peer-to-peer tunnels may be controlled by rules, such as limiting peer-to-peer tunnels by source or destination, by port or protocol, and the like.

Abstract: Apparatus are provided that include a mobile access notification service interface configured to operate on messages targeting a mobile access notification service so that a given message targeting a given user via the mobile access notification service causes a access notice indicator of the given user's mobile data communication device to visibly show when data from the given message is ready for access via one or more designated non-mobile access devices. The mobile access notification service interface includes an access notification trigger data detector configured to process and identify, from among plural messages originating at message source machines, access notification messages containing access notification trigger data.

Abstract: In one embodiment, a method includes receiving a provisioning instruction including a device identifier from an external management entity, receiving the device identifier from a network device, associating the provisioning instruction the network device, and sending a portion of the provisioning instruction to the network device. The device identifier being associated with a virtual resource. The associating is based on the device identifier of the virtual resource and a device identifier of a network device. The portion of the provisioning instruction is sent to the network device based on the associating.

Abstract: A distributed computing system includes a primary device and one or more backend devices. The primary device provides a management interface for the distributed computing system. A plurality of applications may be installed on the backend devices for execution. The primary device generates registration data that associates the applications with management interface commands or configuration parameters in response to messages received from the applications. Subsequently, when the primary device receives a particular command at the management interface, the primary device identifies, based on the registration data, a particular application from among the plurality of applications. In response to identifying the application, the primary device may send to the application an outgoing message.

Abstract: A computer program product, method, and apparatus for discovering information about the nodes of the disperse data network, sending a command from a client to a distributed file system, wherein the distributed file system contains the discovered information, distributing the command from the distributed files system to one or more of the nodes of the distributed file system, and executing the command on the one or more network nodes.

Abstract: Systems and methods are provided that dynamically route messages based on the availability of a message consumer on any given route, and which adapt to changes in message consumer availability throughout a messaging network. In various embodiments, changes to message routing criteria at a destination broker in the network are propagated to each source broker for the destination broker, which in turn propagates the changes to their source brokers until the entire network is adapted.

Abstract: Methods of electronic scheduling for playback of media contents are disclosed. Discrete items of content are scheduled for play back based upon a schedule created by the integration of scheduling methods into a single scheduling algorithm. In a first scheduling method, a discrete item of content is assigned a frequency rating relative to other items of content. A second way to schedule is repeating a content item at specific intervals of time. A third scheduling method allows the content to be played at a specific date and time. A fourth scheduling method includes playing a content item upon receipt of a trigger event which is received from a source external to the scheduling system. And lastly, means are provided for selectively determining whether or not particular content is available for play in a particular venue or during a particular period of time.

Abstract: A device for caching a scalable original file having a first structure which has a header and a plurality of information packets for different information levels has a cache memory configured to cache a proxy file and/or information packets of the proxy file and a proxy file generator configured to generate a proxy file such that the latter is transferable into or directly has a second structure, which corresponds to the first structure of the original file. The proxy file generator further is configured to read out a first information packet of a basic information level from the original file and insert it into the proxy file at a position specified by the second structure and to output the proxy file in the second structure, so that in the second structure, at least one of the information packets of a non-basic information level is replaced with an empty information packet.

Abstract: A method for operating a local area data network with a plurality of network nodes is disclosed, wherein the network nodes send requests to the data network using request values and each of the network nodes has an associated explicit identifier from a key space. A plurality of network nodes respectively has an associated one or more table entries in a value table distributed over the network nodes. In this case each table entry includes a request value having data associated with the key space and with the request value, the network node being responsible for a request value whose identifier is less than or equal to the request value. For the plurality of network nodes, the frequency with which requests for the request values associated with a respective network node are sent to the respective network node is respectively monitored.

Abstract: A system for securely transferring information from an industrial control system network, including, within the secure domain, one or more remote terminal units coupled by a first network, one or more client computers coupled by a second network, and a send server coupled to the first and second networks. The send server acts as a proxy for communications between the client computers and the remote terminals and transmits first information from such communications on an output. The send server also transmits a poll request to a remote terminal unit via the first network and transmits second information received in response to the poll on the output. The system also includes, outside the secure domain, a receive server having an input coupled to the output of the send server via a one-way data link. The receive server receives and stores the first and second information provided via the input.

Abstract: The present invention relates to home devices such as set-top boxes, and more particularly to methods providing autonomous file transfers to and from such home devices. There is provided a method for spreading notifications pertaining to the completion of file transfers in time. The method is based on the concept of imposing different delay times on different devices, which delay times must be observed prior to notifying the server of a file transfer completion.

Abstract: In a first embodiment of the present invention, a method for operating a presence server in a home network is provided, the method comprising: receiving a request for presence information; sending an event notification to all subscribed control points informing them of the request for presence information; receiving an action from one of the subscribed control points accepting or rejecting the request for presence information; and if the action received from the one of the subscribed control points accepts the request for presence information, causing presence information regarding the one of the subscribed control points to be sent to the entity that sent the request for presence information.

Abstract: A system and method can provide a data service in a network environment. A subnet administrator can receive a path record resolution request from a source node, wherein the source node uses the path record resolution request to obtain an address of a destination node. Furthermore, the subnet administrator can provide an address of an intermediate node to the source node, wherein the intermediate node provides the data service. Then, the source node can send one or more data packets in a data flow to the intermediate node based on the address of the intermediate node.

Abstract: Methods, servers and systems for communicating signaling information in a telecommunications signaling network implement methods that include receiving a first message encoding signaling information from a source component and processing the message using a fixed pipeline having a plurality of modules, each module having at least one procedure for performing a specific set of tasks. Application level routing operations may be performed to identify a suitable destination component. Information contained in the first message may be used to generate a second message encoding signaling information, which is sent to the identified destination component.

Abstract: A content delivery network (CDN) aggregation system is disclosed. A user requesting content from a content provider has his or her DNS request forwarded to a CDN selector. The CDN selector intelligently selects an optimal CDN from amongst a number of partner CDNs to provide the requested content.

Abstract: A communication routing arrangement includes two or more wireless routers coupled to a communication network, and a user device adapted to couple with the communication network through a communication path including at least one of the two or more wireless routers. The communication path between the user device and the communication network is selected based on available resources of the two or more wireless routers.

Abstract: A central control verifying apparatus includes a plurality of quasi switches respectively corresponding to a plurality of switches in a network; a connection data managing section which manages connection data between the plurality of switches; and a verifying section. Each of the plurality of quasi switches is communicably connected with the network central control section through a control link. A requesting quasi switch of the plurality of quasi switch transmits a route setting request to the network central control section. A target quasi switch of the plurality of quasi switches receives the route indication data generated in response to the route setting request from the network central control section. The verifying section refers to the connection data and the route indication data received by the target quasi switch to verify whether or not a desired route setting is performed according to the route setting request by the network central control section.

Abstract: A method, computer program product, and computer system are provided for determining a convenient route. The method includes, for instance: obtaining, by a processor, a route that includes a starting point and an ending point; analyzing the route to determine whether at least one stored route is within a pre-defined acceptance zone of the route; and responsive to determining that at least one stored route is within a pre-defined acceptance zone, assigning a convenience factor of the at least one stored route relative to the route.

Abstract: Embodiments are directed to providing a multi-tenant relay service that securely relays data between computer systems. A computer system receives a portion of data that is to be passed from a first computer system belonging to a first tenant to a second, different computer system. The instantiated multi-tenant relay service is configured to securely relay data for multiple different tenants. The computer system creates a secure routing channel for routing the data of the first tenant between the first computer system and the second computer system. The secure routing channel applies a unique identifier to each portion of data received from the first tenant. The computer system also routes the received data from the first computer system to the second computer system through the secure routing channel using the applied unique identifier.

Abstract: A communication routing arrangement includes two or more wireless routers coupled to a communication network, and a user device adapted to couple with the communication network through a communication path including at least one of the two or more wireless routers. The communication path between the user device and the communication network is selected based on available resources of the two or more wireless routers.

Abstract: The present invention relates to several techniques for managing the contents of proxy tables in ways that optimize performance, latency, and reliability for communication networks, while ensuring a certain number of early-acting proxies per restricted device. An entity is allowed to keep a required number of proxies per resource-restricted device by removing or adding proxy table entries. Furthermore, the entity is allowed to keep track of early-acting proxies based on forwarding strategies, reporting strategies and/or polling strategies. Thereby, proxy table entries can be controlled to optimise overall system performance and reliability characteristics.

Abstract: In general, techniques are described for advertising end user content delivery reachability by content delivery networks (CDNs) to upstream content serving entities. In one example, a CDN interconnection (CDNI) device of a content serving entity receives a prefix advertisement that specifies a downstream entity and indicates the downstream entity provides content delivery reachability to the network address prefix. A request router of the CDNI device receives a content request that includes a request for content and specifies a network address of an end user device to receive the content, wherein the network address is within a range defined by the network address prefix. The request router selects the downstream entity to serve the content request based at least on the content delivery reachability indication and redirects the content request to the downstream entity.

Abstract: A network node for communicating data packets secured with a security protocol over a communications network includes a host information handling system (IHS) and one or more external security offload devices coupled by a secure data link. The host IHS communicates state information about data packets, and the external offload security device provides stateless secure data encapsulation and decapsulation of packets using a security protocol. An external network interface controller or internal network interface controller communicates encapsulated data packets over the communications network to a final destination. Encapsulation and decapsulation of packets by the external security offload device reduces network latency and reduces the computational load on the processor in the host IHS. Maintaining state information in the host IHS allows hot-swapping of external security offload devices without information loss.

Abstract: In one embodiment, a network device in a network obtains information identifying first storage and second storage. The network device notifies one or more other network devices in the network that traffic that is received by the other network devices is to be routed to the network device. The network device performs data migration from the first storage to the second storage. When the data migration from the first storage to the second storage is completed, the network device notifies the other network devices in the network that traffic that is received by the other network devices is no longer to be routed to the network device.

Abstract: A data processing device includes a receiving means, a discriminating means, a data retriever determining means, and a transmitting means. The receiving means receives data transmitted from a client computer to one of plural server computers. The discriminating means extracts destination information and source information from the received data. The destination information is information on the one of the plural server computers. The source information is information on the client computer. The data retriever determining means determines a data retriever in accordance with the extracted information. The data retriever searches the one of the plural server computers. The transmitting means transmits the data together with the destination information and the source information to the determined data retriever.

Abstract: Resources are organized into collections to facilitate more efficient and reliable resource access. Namespace managers communicate with one another to form a federation namespace infrastructure. The infrastructure efficiently routes, migrates, and processes namespace requests, such as, for example, namespace registration requests from providers requesting to manage portions of namespaces and lookup requests from consumers requesting access to managed resources. Resources are registered in and made accessible from multiple different namespaces. Resources are identified using nested queries that filter results at multiple levels of a hierarchical namespace.