International Business Machines Corporation

Cisco Technology, Inc.

At&t Intellectual Property I, L.p.

Lenovo (singapore) Pte. Ltd.

Jacques Fieschi

Jean-Francois Le Pennec

Patrick Michel

Alain Benayoun

Claude R Galand

Aline Fichou

Jean-Fran&ccedil;ois Le Pennec

Olivier Hericourt

Pascal Roy

Jean-François Le Pennec

Andre Albano

Rene Chuniaud

Jean-Francoise Le Pennec

Olivier Daude

Guy Euget

Remi A Vautier

Jean-Francois LePennec

Marc Gatignol

Michel Chicherio

Michel Glisse

Andre Bruno

Jean Martin

Lucien Bertacchini

Remi Vautier

The presently disclosed embodiments are directed to representing network performance information using a network map by partitioning a graphical affordance representing a network element in the network map into segmented sections in accordance with a temporal encoding scheme to encode temporal information in the network map. The segmented sections are encoded using a performance encoding scheme to identify a level of performance associated with the segmented sections so that the network map depicts a performance of the network element over time.

Time-based graphic network reporting navigator

A method for validating an electronic payment by a credit/debit card in a transaction system. The method includes registering a purchase of an article by a buyer using a credit/debit card associated with at least one PIN code, checking that the at least one PIN code is associated with the number of said credit/debit card provided by said buyer to said seller terminal, checking, by said electronic payment center, whether or not said at least one PIN code is valid, and one of: after the at least one PIN code is found to be valid, checking, by said electronic payment center, whether the electronic payment center has received a pre-validation from a third party; after the at least one PIN code is found to be valid, contacting a third party via a communication network and requesting that the third party validate the purchase; and after the at least one PIN code is found to be valid, contacting a third party via a communication network and requesting said at least one PIN code from the third party. The third party is a prime owner of the credit/debit card.

Method for validating an electronic payment by a credit/debit card

A method and system for enabling interconnection of VPNs is disclosed. An interconnection device manages an interconnection process at one or more facilities including, for example, a gateway device. The gateway device has information relating to a plurality of VPNs, and may facilitate interconnection between devices on at least two of the VPNs by determining that one device is in fact a member of a first one of the VPNs, and by forwarding connection parameters of the first VPN to the second VPN on an as-needed basis. In this way, the gateway allows interconnection without the need for a completely centralized decision-making process, and does so independently of the type of device and/or VPN(s) being used. Moreover, the gateway may implement only those VPN parameters needed by both VPNs to communicate with one another with a desired level of security, thereby simplifying the routing and forwarding processes associated with the actual communication occurring via the interconnection. The information related to the plurality of VPNs and their respective member devices may be stored in a mapping table at the gateway, and identification parameters of a device seeking interconnection and/or associated VPN parameters may be verified by the use of digital certificates.

Virtual private network crossovers based on certificates

A method and system of transmitting data frames from a sending unit () to a receiving unit () in a data transmission network comprising at least a backbone () wherein the data are transmitted over high speed links enabling long Maximum Transmission Units (MTU) between an ingress node () connected to the sending unit by a first access link () and an egress node () connected to the receiving node by a second access link (), with at least one of the first and second access links being a low speed access link requiring the data frames to be segmented into short MTUs between the sending unit and the ingress node and between the egress node and the receiving unit. A plurality of consecutive segmented data frames () belonging to the same flow of data transmitted from the sending unit to the ingress node are assembled by the ingress node into an assembled data frame () corresponding to the long MTU, the assembled data frame is transmitted over the backbone from the ingress node to the egress node at a high speed authorized by the backbone links, and the assembled data frame is de-assembled into consecutive segmented data frames () corresponding to the short MTUs by the egress node before being transmitted to the receiving unit.

Method and system for assembling segmented frames of data transmitted over a backbone network

A method and system for reserving a virtual connection from a source workstation to a destination workstation. Packets of data are transmitted over a network between an ingress node of the source workstation and an egress node of the destination workstation. In accordance with the method of the present invention, a reservation request is delivered from the source workstation to a reservation server. The reservation server includes a user database for storing the identification of each user allowed to access to the reservation server and also stores the rights of each user. The reservation server further includes a network database for storing the information describing a network capacity required to set up the virtual connection. A verification is then performed to determine whether or not the reservation request may be validated in view of user information within said source workstation. A second verification is performed to determine whether or not the capacity of said network is sufficient to meet the requirements of the reservation request. In response to the capacity of the network being sufficient to meet the requirements of the reservation request, a virtual connection is established from the ingress node to the egress node.

System and method for reserving a virtual connection in an IP network

A security system for preventing unauthorized use of a computer device. An extractable security piece includes an extractable main private key and a main PC public key. A PC security area which is a non-extractable part of the computer device includes a PC private key and an extractable main public key, which, together with the keys of the extractable security piece, constitute a Public Key Infrastructure. The extractable security piece and the PC security area include processing means for mutual authentication of the extractable security piece and the PC security area after the extractable security piece, which had been previously removed, has been reinserted in the computer device, thereby enabling the authorized user to access data stored in the computer device.

Security system for preventing a personal computer from being used by an unauthorized people

In a remote computer, a method for providing a file comprises the steps of receiving a request for this file, identifying this file as being stored in a distant server, requesting the distance server to send the file, identifying this file as being used, and forwarding this file. Further, in a local server, a method for transferring a file from a home server comprises the steps of receiving a request for this file, this request comprising the home server identification, checking that this file is not locally stored, requesting this file to the home server, identifying the file as being locally used, and forwarding this file.

Files transfer between a remote home server and a local server

Method for validating an electronic payment by a credit card in a transaction system comprising a seller terminal () for registering a sale of one or several articles by a buyer (or) using a credit card associated with a plurality of PIN codes and an electronic payment center () connected to the seller terminal by the Internet network (). The method consists for the electronic payment center to check that a buyer PIN code which is provided by the buyer to the center is associated with the number of the credit card provided by the buyer to the seller terminal and is characterized in that it comprises a step automatically carried out by the electronic payment center of checking with a third party whether the buyer PIN code is valid.

A method and system are disclosed for generating and using a virus-free file certificate integrated in a file. The method, for use in a virus-free certificate authority (), for generating a virus-free certificate () certifying that a file is virus-free includes the steps of: receiving () a virus-free certificate request for a file from a server () or a client () system, said virus-free certificate request including the file for which the virus-free certificate is requested; determining () whether a virus-free certificate is integrated in the file; if no virus-free certificate is integrated in the file: determining () whether the file is virus-free or not; if the file is declared virus-free by the virus-free certificate authority (): generating () a virus-free certificate () including a file signature () for certifying that said file is declared virus-free by the virus-free certificate authority (); integrating () the generated virus-free certificate () in the file; sending () back in response to the virus-free certificate request the file with the integrated virus-free certificate (). The method for use in a server () or client () system, for determining that a file is virus-free includes the steps of: determining () whether a virus-free certificate () is integrated within a file; if a virus-free certificate is integrated within the file: authenticating () the virus-free certificate (), said virus-free certificate including a certificate signature (); authenticating () the file, said virus-free certificate () including a file signature (), said file signature certifying that said file has been declared virus-free by a virus-free certificate authority ().

Method and system for generating and using a virus free file certificate integrated within a file

Data transmission system for transmitting packets of data from a source workstation () to a destination workstation () wherein the packets of data are transmitted over at least a first IP network () and a second IP network () between an ingress node () connected to the source workstation in the first network and an egress node () connected to the destination workstation in the second network. The system comprises a local reservation server () in the first network accessible by the source workstation and a remote reservation server () in the second network accessible by the local reservation server. The local reservation server includes connection setup means for setting up a virtual connection meeting a predefined requirement of Quality of Service from the ingress node to the egress node in response to a request from the source workstation and bandwidth request means for requesting additional bandwidth in the second network to the remote reservation server.

Data transmission system for reserving a virtual connection over multiple IP networks by means of a reservation

Data transmission system for transmitting packets of data from a source workstation () to a destination workstation () wherein the packets of data are transmitted over at least an IP network () between an ingress node () connected to the source workstation and an egress node () connected to the destination workstation, wherein each router within the intermediary nodes along the data path from the ingress node to the egress node determines the best route in a routing table defined by the contents of a field contained in each packet of data being received. For this, the router of the ingress node comprises a configuration table which defines the contents of the TOS field in function of information associated with the 4/5 level protocol such as TCP or UDP.

IP data transmission network using a route selection based on level 4/5 protocol information

A method and system are disclosed for generating and using a virus-free file certificate. The method, for use in a virus-free certificate authority (), includes the steps of: receiving () a virus-free certificate request for a file from a server () or a client () system; determining () whether the file is virus-free or not; if the file is declared virus-free by the virus-free certificate authority (): generating () a virus-free certificate () including a file signature () for certifying that said file is declared virus-free by the virus-free certificate authority (); sending () back in response to the virus-free certificate request the virus-free certificate (). The method, for use in a server () or client () system, includes the steps of: determining () whether a virus-free certificate () is associated with a file; if a virus-free certificate is associated with the file: authenticating () the virus-free certificate (), said virus-free certificate including a certificate signature (); authenticating () the file, said virus-free certificate () including a file signature (), said file signature certifying that said file has been declared virus-free by a virus-free certificate authority ().

Method and system for generating and using a virus free file certificate

A file manager (and method) provided for locating a file identified by a path referring to a logical unit and an identifier, includes a table associating the file with a priority list of physical units. The file manager can be incorporated into the controller of peripheral devices in a computer system or an operating system of the computer system.

File manager for storing several versions of a file

A method for transmitting data frames with compressed headers in a multiprotocol data transmission network comprising at least one ingress node transmitting data to egress nodes. Each frame of data includes data bytes and a header which defines the transmission protocols. This method comprises the steps of comparing the address field of the frame to a list of address fields corresponding to the current flows of data, selecting candidate headers associated with flows having the same address, determining a compressed header based upon the position and the number of bytes that differ between the frame header and the candidate header, selecting as reference header the best candidate header based on compression ratio, and transmitting a compressed data frame wherein the data bytes are preceded by a reference label and a compressed header including a field defining the position and the number of consecutive bytes in the portion being compressed, a field including the different bytes, and a field including the portion of header which is not compressed.

Growing community of inventors

St. Laurent du Var, France

Jacques Fieschi