Hewlett-packard Development Company, L.p.

Hewlett-packard Company

Hewlett-packard Development, L.p.

Dipankar Gupta

Srikanth Natarajan

David Chan

Bruno Edgard Van Wilder

Liqun Chen

Boris Balacheff

Graeme John Proudler

Siani Lynne Pearson

Swamy Jagannadha Mandavilli

Yong Boon Ho

Anil A Kuriakose

Sunil Menon

Chris Schleicher

Peter C Zwetkof

Zhi-Qiang Wang

Aaron J Loyd

In an exemplary embodiment, a method for managing a network includes monitoring a network using an interior gateway protocol to detect change in the network, and determining effects of the detected network change on Multi Protocol Label Switching paths in the network. For example, the MPLS paths can be the same as IGP best paths. An exemplary embodiment includes managing a Multi Protocol Label Switching network by discovering edge routers in the Multi Protocol Label Switching network, determining possible combinations of Multi Protocol Label Switching path end points based on services provided within the network, selecting discovered edge routers for observation, based on the determined possible combinations, monitoring the selected edge routers, and determining status of Multi Protocol Label Switching paths in the network based on the monitoring.

MPLS VPN fault management using IGP monitoring system

In an embodiment of a method of tracing a path through a switch mesh from a first device connected to the switch mesh to a second device connected to the switch mesh, hardware addresses of the first and second devices are obtained. At least one switch that is a neighbor to the first device is identified. At least one switch that is a neighbor to the first device is queried to identify at least one port of at least one switch that is forwarding packets having the hardware addresses of the first and second devices.

Determining network paths

Methods and systems are disclosed for inferring address and subnet relationships. An exemplary method includes identifying a first address associated with a subnet; determining a length of a prefix part of the first address; determining a length of a prefix part of a second address; determining when a portion of the second address matches a portion of the first address; and determining when the lengths of the prefix parts of the first and second addresses are equal. A relationship between the second address and the subnet is inferred when the portion of the second address matches the portion of the first address and the lengths of the prefix parts of the first and second addresses are equal.

Method and apparatus for inferring address and subnet relationships

A system and associated method of storing data concerning a computer network are disclosed. Mesh information concerning a mesh of nodes in the computer network is produced. The mesh information indicates that an interface of the mesh is an external mesh interface, and the mesh information is stored.

Method of storing data concerning a computer network

A system and method for communicating between a management station and at least two networks having duplicate Internet Protocol (IP) addresses. An IP address for an IP data packet to be sent to at least one of an end device and the management station is recognized. A header of the IP data packet with a tag that identifies one of the duplicate IP networks within which the end device resides is modified. The IP data packet is routed, based on the tag, in accordance with a policy.

Method and system for communicating between a management station and at least two networks having duplicate internet protocol addresses

In a computing platform, a trusted hardware device () is added to the motherboard (). The trusted hardware device () is configured to acquire an integrity metric, for example a hash of the BIOS memory (), of the computing platform. The trusted hardware device () is tamper-resistant, difficult to forge and inaccessible to other functions of the platform. The hash can be used to convince users that that the operation of the platform (hardware or software) has not been subverted in some way, and is safe to interact with in local or remote applications. In more detail, the main processing unit () of the computing platform is directed to address the trusted hardware device (), in advance of the BIOS memory, after release from 'reset'. The trusted hardware device () is configured to receive memory read signals from the main processing unit () and, in response, return instructions, in the native language of the main processing unit (), that instruct the main processing unit to establish the hash and return the value to be stored by the trusted hardware device (). Since the hash is calculated in advance of any other system operations, this is a relatively strong method of verifying the integrity of the system. Once the hash has been returned, the final instruction calls the BIOS program and the system boot procedure continues as normal. Whenever a user wishes to interact with the computing platform, he first requests the integrity metric, which he compares with an authentic integrity metric that was measured by a trusted party. If the metrics are the same, the platform is verified and interactions can continue. Otherwise, interaction halts on the basis that the operation of the platform may have been subverted.

Trusted computing platform

A document transfer system enabling a consumer to obtain a document from an owner upon payment uses a cryptographic protocol involving the consumer, the owner, a document source, such as a printer, and a mediator.

Document transfer systems

Trusted computing platform using a trusted device assembly

A document transfer system enabling a consumer to obtain a document from an owner upon payment using a cryptographic protocol involving the consumer, the owner, a document source, such as printer, and a mediator, according to which protocol the consumer requests a document, the owner provides the source with first and third portions of the key and provides the mediator with a fourth portion of the key, which fourth portion can combine with said first portion to generate the complete key, the consumer provides the owner with the payment and the owner provides the source with a second portion of the key which can combine with said first portion to generate the complete key. A printer for use in the above system, the printer comprising a document memory for storing a received encrypted document, a key memory for storing a first cryptographic key portion, a processor for receiving a second cryptographic key portion and combining it with the first key portion to form a complete cryptographic key which is supplied to a decrypting module. The encrypted document is supplied to the decrypting module whereupon the document is decrypted and supplied to the consumer.

Growing community of inventors

Fort Collins, CO, United States of America

Dipankar Gupta