Abstract: Protocol status information is used to perform traffic filtering by dropping messages that are not consistent with the protocol status information. In one embodiment, a method involves comparing message information and protocol status information. The message information is associated with a first message. The protocol status information is obtained in response to one or more second messages, which are conveyed according to a protocol used to assign network addresses to clients. The method also involves determining whether to discard the first message, based on an outcome of the comparison of the message information and the protocol status information. For example, it can be determined that the first message should be discarded, if the message information does not match the protocol status information.

Abstract: A method and apparatus for inter-domain routing based on AS architecture includes retrieving route information for a destination IP address of a data packet received from a source host in a forwarding information base (FIB); requesting to obtain a domain locator corresponding to the destination IP address to the mapping system when the route information corresponding to the destination IP address is not retrieved; and performing routing by using the obtained domain locator and routing information that is previously stored in the routing information base (RIB) in which the source host is present.

Abstract: A telecommunication system and a method for generating a real time connection between a first endpoint and a second endpoint in an IP network using an ICE STUN connectivity check follow a procedure that includes the steps of generating a list of possible connection paths between the first endpoint and the second endpoint, establishing a respective priority for each possible connection path included in the list, and generating the real time connection between the first endpoint and the second endpoint. During this procedure first there is an attempt to generate the real time connection using the highest-priority connection path. If this is not possible, then the system attempts to establish the real connection using the connection path with the next highest priority, until the real time connection is actually established. Furthermore, for each possible connection path, its respective quality-of-service value is determined and is considered when establishing its priority on the list.

Abstract: A mechanism for replacing a first internet protocol (IP) address with a second IP address in a response to a request to a server from an application is disclosed. A processing device may receive a request from an application and forward the request to a server. The processing device may receive a response from the server, where the response includes a first IP address. The processing device may generate a second IP address and replace the first IP address in the response with the second IP address. The processing device may send the response to the application.

Abstract: Described herein are techniques for providing carrier grade dynamic network address translation (NAT). The disclosed techniques allow for dynamic switching from regular NAT to network address ports translation (NAPT) based on system load. Under the NAPT mode, the disclosed techniques allow the ports of a public IP address to be broken up into contiguous blocks of ports (e.g., of the same size and/or of varying size) such that each block can be assigned to an associated (e.g., different) private IP address. For each new connection from the private IP address, if the port used is the next port sequentially, the NAT device can store an offset from the starting public/private IP address ports. If the port is not the next port sequentially, the network address translation device can associate a new block of public ports to the private IP address.

Abstract: A method for operating a device adapted to store information with high reliability includes determining a storage address for a data payload portion of a write request in accordance with a configuration of a communications interface coupled to the device, where the data payload is to be stored in mirroring groups of cache storage partitions of a plurality of cache storage modules. The method also includes generating a payload read request in accordance with the storage address, and prompting the communications interface to initiate the storing of the data payload, in parallel, in the mirroring groups in accordance with the payload read request.

Abstract: A technology for balancing computing resource load across cache servers in a distributed data store is disclosed. The technology can monitor computing resource load on each cache server to increase or decrease an assigned weight of the cache server. The technology can use two hash functions to reallocate, based on the change in the assigned weight, a portion of the key space from one cache server to another. The first hash function can be a consistent hash function that identifies a cache server mapped to an entity identifier. The second hash function can be employed to determine a hash weight of the cache server. The hash weight of the cache server can then be evaluated against the assigned weight to determine whether the entity identifier should remain mapped to the same cache server or should be reevaluated for allocation to a different cache server.

Abstract: An image processing device and method of controlling an image processing device to be in communication with one of a plurality of external printer controllers is provided. The method includes monitoring, at initiation of the image processing device, a communication address assigned to the image processing device to detect whether a current communication address is different from a previously assigned communication address and acquiring, from memory, a configuration data object associated with the current communication address in response to detecting that the current communication address is different from the previously assigned communication address. The configuration data object being associated with the current communication address and includes one or more parameters for controlling one or more operations of the image processing device. The image processing device is automatically configured the image processing device using the one or more parameters acquired from the configuration data object.

Abstract: The present invention is directed towards forwarding network packets in a cluster network. A predetermined identifier may be inserted into a Media Access Control (MAC) ID field of an Ethernet header of a packet to distinguish various types of traffic. Newly received packets may be identified due to the absence of the identifier. The identifier may be added to the source MAC ID field of the Ethernet header of the packet, and the packet may be distributed to cluster nodes for processing via an inter-node communication bus. Thus, received packets with the identifier in the source MAC ID field may be identified as steered for processing by an internal node of the cluster. After processing the packet, the internal node may transmit the processed packets via the inter-node bus with a destination MAC ID including the identifier.

Abstract: A process calibrator is formed with a user interface, which guides to choose the right connection arrangements of the process calibrator according to the function of the process calibrator. The user interface shows in the display of the process calibrator the connection arrangements of the process calibrator and indicates the place of the connection arrangement assigned to the selected function visually compared to other connection arrangements. The connection arrangements shown by the user interface in the display are placed similarly to the physical connection arrangements of the process calibrator. As the user interface indicates the connection arrangement that is assigned to the selected function of the process calibrator, it is easy for the user to make the right connection.

Abstract: A method for DNS processing is provided. The method is executed by an electronic device and includes the following steps: determining a plurality of TTL values, wherein each of the TTL values corresponds to one of a plurality of operating states of the electronic device, and determining whether to remove an entry from a local DNS cache in the electronic device or not according to the TTL value corresponding to the current state among the operating states of the electronic device.

Abstract: A communication system includes a redirect server and a deployment server configured to configure different terminal devices so that those devices are able to access a network of a service provider. A terminal device, computer readable medium and method are also disclosed that helps deploy such a service. In one embodiment, a communication system is configured so that a user of a terminal is provided with a code. The code is then communicated to a redirect server via a terminal associated with the user. The redirect server utilizes the code to determine the address of a deployment sever. The redirect server then provides the address to the terminal so the terminal can connect to a configuration management system so that the terminal may communicate with that system to be configured for accessing the network services hosted by the system.

Abstract: A gift transaction system with a buyer interface is disclosed. The buyer interface facilitates personalization by a buyer of a gift package to send to a recipient. A method of operating a gift transaction system with the buyer interface includes: determining gift intent of a buyer account to send a gift item in a gift transaction; generating a buyer gift interface to receive a recipient contact entry of a recipient in response to the determined gift intent; generating an interactive gift notification to the recipient contact entry to receive a confirmation of the gift transaction; and sending a notification to a merchant store to ship a gift package to the recipient in response to receiving the confirmation.

Abstract: An example embodiment of a method and system of validating a user's control over contact information may comprise at least one server computer receiving contact information for a user and determining whether the contact information for the user is valid. If the contact information for the user is determined to be valid, the server computer(s) may store the contact information in a registered contacts database, monitor a plurality of record updates, including a request to register a domain name, in a domain name registration database for the contact information and determine whether the contact information appears in the record updates. If the contact information is determined to appear in the record updates, the server computer(s) may notify the user that the contact information appears in the record updates. In some embodiments, the registration of the domain name may be declined if the information matches.

Abstract: A packet processing method and a background server are provided. The packet processing method includes: receiving, by a bearer system of a background server, an IPIP packet sent by an access server via an IP tunnel; and removing a reverse proxy IP address and a windows server IP address that are in an outer layer of the IPIP packet, and changing a destination IP address in the IPIP packet, of which the reverse proxy IP address and the windows server IP address are removed, into the windows server IP address, to obtain an IP packet.

Abstract: A method, system and computer-usable medium are disclosed for controlling access to a node deployed in a cloud environment. A new node, based upon a common image, is created in a cloud computing environment. A unique set of randomized system parameters are then generated for the new node, which is then mapped to a set of generic system parameters. A request to access the new node is intercepted, which contains the generic system parameters. The intercepted access request is then parsed to extract the set of generic system parameters, which are then replaced with the unique set of randomized system parameters associated with the target node to generate a modified access request. The modified access request is then forwarded to the target node.

Abstract: A processing device in one embodiment comprises a processor coupled to a memory and is configured to obtain internal log data of a computer network of an enterprise, to extract values of a plurality of designated internal features from the log data, to obtain additional data from one or more external data sources, and to extract values of a plurality of designated external features from the additional data. The extracted values are applied to a regression model based on the internal and external features to generate malicious activity risk scores for respective ones of a plurality of domains, illustratively external domains having fully-qualified domain names (FQDNs). A subset of the domains are identified based on their respective malicious activity risk scores, and one or more proactive security measures are taken against the identified subset of domains. The processing device may be implemented in the computer network or an associated network security system.

Abstract: A method, non-transitory computer readable medium and an application traffic manager computing device for determining whether a received query from a client computing device to resolve a hostname comprises a domain name with a value indicating type of internet protocol version. The received query is processed by truncating a portion of the domain name with the value indicating type of internet protocol version from the received query when the domain name with the value indicating type of internet protocol version is determined to be present. An internet protocol address is received from at least one of a plurality of servers based on the truncated portion of the domain name with the value indicating type of internet protocol version. The format of the received internet protocol address is determined for conforming to one or more policies. One or more actions are performed based on the determination.

Abstract: In one embodiment, contextual service mobility in an enterprise fabric network environment (e.g., overlay and underlay networks) provides for moving of the location of a service being applied to packets with minimal updates to the mapping database. The mapping database is used to convert addresses of the overlay network to physical network and service addresses. The mapping database provides contextual lookup operations on the same destination address of a packet being forwarded in the overlay network to provide different results. The contextual lookup operations provide for a packet to be forwarded to a service node or its intended destination depending on the current context. In one embodiment, the enterprise fabric network uses Locator/ID Separation Protocol (LISP), a network architecture and set of protocols that uses different overlay and underlay namespaces and a distributed mapping database for converting an overlay address to an underlay address.

Abstract: A list of addresses indicating communication destinations is acquired. A communication protocol used between a communication apparatus and a communication destination indicated by an address is specified. The notation of the address included in the list is converted.

Abstract: In accordance with an example embodiment of the present invention, there is provided a method, comprising receiving in an apparatus a first message from a second apparatus located in a different domain as the apparatus, the first message comprising a logical name of the second apparatus and a first global address, receiving a second message from a third apparatus, the second message comprising a second global address, and determining whether the first and second global addresses are the same address, or where the first and second global addresses are IPv6 addresses, whether they belong to the same network, and responsive to the first and second global addresses being the same address, or in the case of IPv6 belonging to the same network, causing transmission of information comprising at least one of a logical name and a local address of the second apparatus to the third apparatus.

Abstract: Internet protocol addressing to uniquely identify clients and destinations across computer networks is provided. Communication between a proxy service and a DNS nameserver is facilitated to permit the DNS nameserver to send a subscriber identifier to the proxy service in response to a DNS request for a flagged domain name. The proxy service selects a unique IP address from a pool of IP addresses assigned to the proxy service. The proxy service associates the selected IP address with the subscriber identifier and optionally, the target domain name of the DNS request. The proxy service provides the unique IP address to the DNS nameserver which returns the unique IP address to the client device for the target domain name. The subscriber can then be authenticated at the proxy service transparently without input from the subscriber or client device based on the unique IP address provided by the client device to the proxy service.

Abstract: A server apparatus includes a receiving unit that receives a location registration signal from a mobile wireless device, a determining unit that determines whether the mobile wireless device is a model compliant with only a first communication standard or a model compliant with both of the first communication standard and a second communication standard, based on the identification information contained in the location registration signal, and a location registration processing unit that causes a server configured to perform a process using a first Internet protocol to perform a location registration process when the mobile wireless device is the model compliant with only the first communication standard, and causes a server configured to perform a process using a second Internet protocol to perform the location registration process when the mobile wireless device is the model compliant with both of the first communication standard and the second communication standard.

Abstract: A system and method for connecting to a security device by means of a Peer-to-Peer (P2P) relay demon. In the present disclosure, a P2P technology is applied to a technology for connecting to a security device, such as a Network Video Recorder (NVR), Digital Video Recorder (DVR), or Internet Protocol (IP) camera, to thereby communicate with the security device in a safe and convenient way.

Abstract: Methods and systems to process a request received at an application program interface are described. The system receives a request from a client machine that includes a job that is associated with data. The request is received at an application program interface. Next, a peer-to-peer network of processing nodes generates a plurality of sub-jobs based on the job. The peer-to-peer network of processing nodes schedules the plurality of sub-jobs for parallel processing based on an availability of resources that are respectively utilized by the sub-jobs and parallel processes the plurality of sub-jobs before generating task results that are respectively associated with the plurality of sub-jobs.

Abstract: Machine-to-Machine (M2M) communication has been described for communication in a single network in among others publications from the European Telecommunications Standards Institute (ETSI). The publications describe a single network with defined entities, a resource structure and protocols. According to the invention, a solution is described for communication between entities residing in different M2M networks. Entities or applications residing in a first M2M network requiring information of an entity in another second M2M network submit a request with a target ID pointing to the entity in the second M2M network. The request is forwarded to the network node of the first network. The network node of the first network checks whether the target ID matches with an entity of a second network that according to a Domain Name Server (DNS) lookup has an address of a second network node of the second M2M network. On a match the request is routed towards the retrieved second network node of the second M2M network.

Abstract: Example embodiments of the systems and methods of IPv6 mapping disclosed herein involve computing an IPv6 source and/or destination address based on the type of service being used by the user, which is derived from the digits input to the device by the user or system, and the destination phone number input by the user. The mapping is done in second half (for example, 64 bits) of the IPv6 address (the interface ID). The first half of the IPv6 address is a defined subnet (known as a “prefix” in IPv6 terms) for phone number routing. The subnet comprises a global routing prefix and a subnet identification. The interface ID is split into three sections: an identifier, a country code, and an end point number.

Abstract: An output resource identifier, such as a universal resource locator (URL), may be programmatically generated using one or more recomposition rules and decomposed parts of a source, or input, URL. The decomposed parts may be programmatically generated using one or more decomposition rules. The input and output URLs may comprise one or more of web and/or native URLs.

Abstract: Systems and methods of the present invention provide for one or more server computers communicatively coupled to a network and configured to: receive a domain name search string; identify: a token, within the domain name search string, reflecting a user pattern; a next element in the sequence for the user pattern; and an available domain name comprising a string reflecting the next element in the sequence; and transmit the available domain name to a client computer communicatively coupled to the network.

Abstract: A method, system and computer-usable medium are disclosed for controlling access to a node deployed in a cloud environment. A new node, based upon a common image, is created in a cloud computing environment. A unique set of randomized system parameters are then generated for the new node, which is then mapped to a set of generic system parameters. A request to access the new node is intercepted, which contains the generic system parameters. The intercepted access request is then parsed to extract the set of generic system parameters, which are then replaced with the unique set of randomized system parameters associated with the target node to generate a modified access request. The modified access request is then forwarded to the target node.

Abstract: In general, embodiments of the invention relate to routing packets between servers in different layer 2 domains. More specifically, embodiments of the invention relate to using overlay routing mechanisms in an Internet Protocol (IP) fabric to enable communication between servers in different layer 2 domains to communication. The overlay routing mechanisms may include direct routing, indirect routing, naked routing, or a combination thereof (e.g., hybrid routing).

Abstract: Aspects of the subject matter described herein relate to file system placeholders. In aspects, placeholders may be used by a client to represent remote file system objects. The placeholders may include metadata, searchable text, and may also include none, some, or all of the content of the represented remote file system objects. Search data from the placeholders is integrated into a local search database of the client such that the client is able to satisfy queries and identify relevant local and remote file system objects even when the client is offline with respect to remote storage.

Abstract: A system, method and computer-readable medium for request routing based on cost information are provided. A client request processing a resource identifier for requested content transmits a first DNS query to a content delivery network service provider. The content delivery network service provider transmits an alternative resource identifier in response to the client computing device DNS query. The alternative resource identifier is selected as a function of cost information. The client computing device then issues a second DNS query to the same content delivery network service provider. The content delivery network service provider can then either resolve the second DNS query with an IP address of a cache component or transmit another alternative resource identifier that will resolve to the content delivery network service provider. The process can repeat with the content delivery network service provider's network until a DNS nameserver resolves a DNS query from the client computing device.

Abstract: There is proposed a mechanism for a connection control conducted in a communication network (such as IMS) when a back to back user agent (B2BUA) and network address translation function are involved in the establishment of the connection. When a control network element, such as a P-CSCF, receives a signaling message related to the establishment of the communication connection, via a communication leg coming from a network address translation device, it is determined whether address information contained in an SDP element of the signaling message matches with preset address information allocated to a border gateway function or BGF. When no matching is determined, normal processing like an initiation of a latching procedure at an own BGF is conducted. Otherwise, if a matching address information is determined, i.e. a mirrored SDP is deemed to be present, a latching processing at an own BGF is inhibited and the received BGF's address information are used in the connection establishment procedure.

Abstract: Access is controlled to managed resources in a stateless web server architecture including a stateless web server computing platform; a resource locator map portion of the stateless web server computing platform providing a unique resource locator code representing each managed resource in a stateless web server architecture, wherein the managed resource is assigned to a plurality of application program components; a set of servlet filters disposed in a portion of the stateless web server computing platform, each servlet filter associated with one of the application program components; a resource locator matcher portion of the stateless web server computing platform, responsive to a user request to a unique resource locator, matching a pattern in the user request to one or more of the application program components using a corresponding servlet filter; and a request dispatcher portion of the stateless web server computing platform sending the user request to the matched application program component, wherein

Abstract: In one embodiment, a mobile device 102 may execute a mobile client 104 to access a remote client 108 on a remote computer device 110. A mobile client 104 may connect to a data network 106. The mobile client 104 may establish a peer-to-peer connection with a remote client 108 executing on a remote computer device 110 over the data network 106.

Abstract: One embodiment of the present invention provides a system for automatic configuration of a computing device in a content-centric network (CCN). During operation, the system sends, by the computing device on at least one of the computing device's faces, an interest in configuration information. The interest has a predetermined name prefix. The system then receives a content object in response to the interest. The content object includes at least a default name prefix, to which the computing device can send other interests. The system further configures the computing device based on the received content object.

Abstract: Disclosed are an access method for a WiFi access point, a WiFi access point and a WiFi system, which relate to communications technology. The present application adds to a WiFi system the RAN and PSCN of a 3G network, and adds a 3G module to an AP, so that the AP can serve as a 3G terminal to access the 3G network, thereby connecting the AP and an AC/BRAS through the RAN and PSCN. Because the 3G network has broader coverage, implementing access point access through the 3G network reduces the complexity of an AP accessing the AC/BRAS.

Abstract: Routing messages between virtual networks using a mapping of virtual addresses from one virtual network to a virtual address of the other virtual network. Each virtual network has a valid set of virtual addresses, some of which being assigned to virtual nodes within the corresponding network. When a virtual network identifies a message to be sent, it identifies a destination for the message. Some destinations may be within the same virtual network and thus may be routed to virtual nodes within the virtual network. Other destinations may instead be mapped to a virtual address of another virtual network. In that case, routing information may also be obtained and the message may be dispatched to the virtual address of the other virtual network. This may be performed without the need for a gateway, which publishes a public address that is globally unique.

Abstract: A method, system, and computer program product for Internet of Things (IoT) network-connected devices. Embodiments include methods and systems for registering one or more listener devices (e.g., mobile phones or tablets, etc.) to receive messages from one or more notification devices (e.g., web cameras, etc.). A notification server is selected from among multiple notification servers to receive notification messages from the notification devices and then to forward (e.g., through a push service, etc.) portions of or variations of the notification messages to the listener devices. In some embodiments, the selection of the notification server is based on load balancing between the multiple notification servers and/or push servers. In some embodiments, the selection of a notification server and/or push server is based on a provisioning file.

Abstract: An automation platform for a hub-based system federating disparate unified communications systems is provided. According to one embodiment, the method includes connecting a first unified communications system supporting a first domain and an automation platform to a federation server, where the automation platform includes a plurality of automated applications that includes a social media automated application, an instant messaging automated application and a directory search automated application. The method further includes routing a message from the first unified communications system to an automated application of the plurality of automated applications, processing the message by the automated application, and issuing a command based on the processed message.

Abstract: A method for managing an e-mail response based on the e-mail domains of the recipients is provided. The method receives a first e-mail sent to a plurality of e-mail addresses that includes e-mails with different domain names, provides a list of different domain names associated with a plurality of e-mail addresses and an e-mail address of a sender of the first e-mail, generates, based on a selection of one or more of the different domain names, a distribution list including one or more e-mail addresses limited to e-mail addresses having a selected domain name, and providing the distribution list in an addressee field associated with the e-mail response.

Abstract: A memory device may include a memory component that stores data and a processor. The processor may map one or more banks or one or more virtual banks in the memory component based on one or more properties associated with the memory component and an expected random access rate for the memory component.

Abstract: A locator (e.g., a URL) associated with a network-based resource, such as a web page, may be customized in a manner that increases the likelihood that one or more viewers of the locator will remember and utilize the locator in order to access the network-based resource at a later time. The locator may include words or combinations of words that are associated with attributes of the network-based resource (e.g., the contents of the web page), the viewers or a context in which the locator is presented to the viewers. The words or combinations may be selected such that a length of the locator is less than a length of another locator that is permanently associated with the network-based resource. The locator may be presented to the viewers in any context, such as on a billboard, in an audio or video message, or on a shipping label affixed to a parcel.

Abstract: Included are embodiments for ReNAT communications address communications. Some embodiments include a network operations center (NOC) that includes a ReNAT twin NAT that translates between a customer-assigned private IP address and a unique private IP (UPIP) address. The NOC may additionally include a ReNAT VPN component coupled to the ReNAT twin NAT, where the ReNAT VPN provides a source IP address to the ReNat twin NAT. The NOC may include logic that when executed by a processor, causes the processor to facilitate communication between a user workstation on a private network and a remote computing device, wherein facilitating communication includes receiving the data from the user workstation via a traditional VPN portal, wherein address translation has been performed by a ReNAT twin NAT client on the user workstation.

Abstract: A destination Media Access Control (MAC) address of a packet is determined. In response to determining that the destination MAC address is a virtual MAC address and belongs to an access device, mask-based, virtual MAC address, the packet is encapsulated with a Very Large Layer 2 (VLL2) network protocol header, and sent to an access device associated with the access device, mask-based virtual MAC address.

Abstract: System and method for providing cloud computing services are described. In one embodiment, the system comprises a cloud computing environment comprising resources for supporting cloud workloads, each cloud workload having associated therewith an internal cloud address; and a routing system disposed between external workloads of an external computing environment and the cloud workloads, the routing system for directing traffic from an external address to the internal cloud addresses of the cloud workloads. A designated one of the cloud workloads obtains one key of a first pair of cryptographic keys, the first pair of cryptographic keys for decrypting encrypted storage hosted within the cloud computing environment.

Abstract: A wireless communication apparatus is for communicating with an access point through a first communication and communicating with another communication apparatus through a second communication via a network including an access point. The wireless communication apparatus includes a detection unit configured to detect a status of the first communication; and a reconnection unit configured to reconnect the first communication and then reconnect the second communication by using connection information of a corresponding network layer of the wireless communication apparatus acquired through the first communication when disconnection of the first communication is detected by the detection unit.

Abstract: A transmission management system includes a destination name data managing unit which manages a plurality of destination name data items which indicate a plurality of names of a destination in communications between transmission terminals, a destination name data reading unit which reads a destination name data item from the plurality of destination name data items managed by the destination name data managing unit, and a destination name data transmitting unit which transmits the destination name data item read by the destination name data reading unit to a transmission terminal capable of communicating with the destination.

Abstract: This invention specifies mechanisms for detection of failure of links directly attached to communication devices (hosts and gateways) or lying in the path between these devices. The invention also specifies mechanisms for recovering communication sessions when the failure occurs. The failure in a link connected to the host or to the gateway is detected by using a link layer trigger by the respective node while the gateway failure or failure in a remote link is detected by a signaling mechanism initiated by the host on the basis of two control timers, probe timer and keepalive timer. The edge router and gateway also assist the host to detect the failure and quickly start the recovery process. They perform packet redirection through a lively link to the host, thus reducing or completely avoiding packet losses while the host performs the recovery mechanism to transfer the session from the failed link to the lively link.