International Business Machines Corporation

Chien Dinh Vu

Charles Steven Lingafelt

Phuong Thanh Nguyen

Yonghua Lin

Yan Qi Wang

Bhavesh Dhanji Budhabhatti

In one aspect, a method of storing data includes setting a first data node in a first storage area and setting a second data node in a second storage area. The second data node is an element of a plurality of elements forming a first flat table of at least one flat table in the second storage area. The step of setting a first data node includes storing in the first data node a two-tuple linker which comprises a first identifier indicating the first flat table and a second identifier indicating the row of the element in the first flat table. In another aspect a corresponding data storage structure is further provided.

Data storage method and data storage structure

A system and method for an end user to change the operation of a data flow filter mechanism, such as a firewall, that operates to control data flows between a plurality of protected computing devices and one or more non-protected computing devices. With the system and method, an administrator of a sub-network of computing devices may set a client computing device's scope of rules/policies that may be changed by a user of the client computing device, with regard to a data flow filter mechanism. The user of the client computing device, or the client computing device itself, may then log onto the data flow filter mechanism and modify the operation of the data flow filter mechanism within the limits established by the administrator.

System and method for on-demand dynamic control of security policies/rules by a client computing device

In an NXN switch a plurality of buses interconnect the individual input modules to all of the output modules in a predetermined sequence. The input modules store the received cells and a unique ID. When selected the input module places a cell and its ID on selected ones of the buses along with a multicast vector which identities which of the output modules is to process the cell on a bus. The output modules examine the multicast vector and process the cell (table lookup) if selected In the multicast vector. If an output module is unable to process a required cell (successful table lockup) it sets a retry vector resident on the bus and the input module modifies the multicast vector to indicate only those output module(s) which failed to process a required cell. The cell, the ID and the modified multicast vector are placed on a bus in a subsequent selection of that input module.

Growing community of inventors

Durham, NC, United States of America

Chien Dinh Vu