Sun Microsystems, Inc.

Geoffrey G Baehr

Amit Narayan Gupta

Martin Patterson

Glenn Carter Scott

Geoffrey Mulligan

Thomas L Lyon

William Danielson

Carolyn Turbyfill

David S Allison

Pavani Naishadh Diwanji

Michael R Sheridan

Steven Peart

Ashar Aziz

Germano Caronni

Vipul Gupta

Alexander V Galitsky

Valery P Kouplitchenko

Victor K Kondratiev

Sriraman Venkataraman

In embodiments of the invention, a method and apparatus for dynamic proxy insertion in network traffic path is described. According to one or more embodiments of the invention, a request and/or response message may be modified to include one or more thru-proxy tags to identify a network (or traffic) node (e.g., a proxy, server, or intermediary). For example, a request directed to a server or a response directed to a client may be altered to insert a plurality of intermediate or final destination designations. In so doing, a path of a request or response may be altered dynamically. A thru-proxy tag in a response may be inserted in a related request to identify a destination or node such that the request is sent to the destination in the thru-proxy tag before being sent to an origin server. Thru-proxy tags may be used to identify multiple and/or alternate destinations.

Method and apparatus for dynamic proxy insertion in network traffic flow

Methods and systems of the present invention include providing a connection between a first computer and a second computer by receiving, at a third computer, information regarding one of the first and second computers to facilitate establishment of a secure connection between the first computer and the second computer, creating a first end-to-end security link between the first computer and third computer, and creating a second end-to-end security link between the second computer and the third computer to establish the secure connection. The first and second computers could be a client and a server on the Internet, and these methods and systems can, for example, increase the possible number of new secure connections to the server. The third computer also permits processing of information transmitted between the client and server in the third computer. For example, the information could be reformatted or used in testing a process of one of the first and second computers.

Method and apparatus for providing secure communication with a relay in a network

A client is given control over the pre-fetching of resources. The client may be, for example, resident on an electronic device such as a computer system that caches resources. The resources may be, for instance, web pages. Identifying property values that are intrinsically tied to the contents of the resources are used to determine whether resources are already resident within the cache prior to pre-fetching the resources. In addition, the client may request information regarding a resource to assist the client in determining whether to pre-fetch the resource. Such information may include the size of the resource and other information.

Client controlled pre-fetching of resources

A method and apparatus for local advertising. Internet Service Providers (ISPs) or proxies owned by an ISP insert advertisements transmitted from a web host to a client. The advertisement may be stored in the proxy's cache or may be retrieved from a web server for an advertiser. By providing the ISP with the ability to insert the advertisement, advertisements appear on small web sites that do not normally attract advertisers. Additionally, due to the number of advertisements placed by an ISP, small advertisers may have their advertisement appear in connection with frequently used web sites. One or more embodiments of the invention provide for an ISP to collect and store demographic information such as the user's age, residence, credit history, etc. Additionally, stored information may include web sites the user has accessed, time spent on each web site, and any searches performed by the user. The profile information may be utilized by the proxy to conduct targeted advertising and to associate a cost with certain demographic information. The profile information may be evaluated by the ISP for advertisement insertion. Alternatively, the profile information may be forwarded to an advertiser or advertising agency that evaluates and forwards back an advertisement for the proxy to transmit to the user.

Method and apparatus for local advertising

A communication appliance with a desktop unit and a secondary unit. The desktop unit includes an outer casing, bottom feet, openings in the outer casing for control elements, a plurality of heat-producing electronic components and at least one speaker. The bottom feet extend from a bottom of the outer casing and support the outer casing on a surface such that the bottom of the outer casing is spaced from the surface. The control elements are used for operating the communication appliance. The outer casing includes a plurality of cooling slots for cooling electronic components found in the interior of the communication appliance so that a fan or other external device is not needed.

Appliance for integrating multiple forms of communication

Housing for communication appliance

A system for screening data packets transmitted between a network to be protected, such as a private network, and another network, such as a public network. The system includes a dedicated computer with multiple (specifically, three) types of network ports: one connected to each of the private and public networks, and one connected to a proxy network that contains a predetermined number of the hosts and services, some of which may mirror a subset of those found on the private network. The proxy network is isolated from the private network, so it cannot be used as a jumping off point for intruders. Packets received at the screen (either into or out of a host in the private network) are filtered based upon their contents, state information and other criteria, including their source and destination, and actions are taken by the screen depending upon the determination of the filtering phase. The packets may be allowed through, with or without alteration of their data, IP (internet protocol) address, etc., or they may be dropped, with or without an error message generated to the sender of the packet. Packets may be sent with or without alteration to a host on the proxy network that performs some or all of the functions of the intended destination host as specified by a given packet. The passing through of packets without the addition of any network address pertaining to the screening system allows the screening system to function without being identifiable by such an address, and therefore it is more difficult to target as an IP entity, e.g. by intruders.

System for packet filtering of data packet at a computer network

System for packet filtering of data packets at a computer network

In the present invention, a microprocessor controls a moveable output hopper with multiple paper slots attached to a laser printer. Print jobs of different users are directed to separate open slots by user name or other identifier corresponding to a particular user. A small LCD panel for each slot displays an identifier representing the user whose job is currently using the output slot. Incoming print data to the laser printer is monitored for a banner page. The user name or identifier is then extracted from the banner page, and if the current job is for a new user, the trays are moved and the print job is output to the first unused tray. A user name or identifier corresponding to the printed output is also displayed on an LCD panel corresponding to a particular tray. If all trays are full, print jobs are sent to a tray designated as the default/shared tray.

Laser printer output director

A radio transceiver including an antenna for transmitting and receiving radio signals, a reception section for selecting a received carrier signal, a transmission amplifier section for amplifying signals to be broadcast, a mixer, coupled between the reception section and the transmission section, a variable frequency generator for generating local frequencies for the mixer, and a first (synphase) quadrature demodulating channel and a second (square) channel demodulating channel. The mixer includes a first switch, a first double balanced (DB) mixer, intermediate frequency (IF) filter, IF amplifier, power divider, and a second DB mixer. These components are used during both transmission and reception by the radio transceiver.

Growing community of inventors

Palo Alto, CA, United States of America

Geoffrey G Baehr