Enterasys Networks, Inc.

Emc IP Holding Company LLC

Extreme Networks, Inc.

Other

John Roese

Richard W Graham

David E Frattura

David Harrington

Stephen J Todd

Roger Durand

Brendan J Fee

Steven A Pettit

John-Paul Gorsky

Anja A Allen

Kenneth Durazzo

James P Richmond

Richard Bussiere

Paula Jane Dunigan

Steven Pettit

Mark Townsend

The present invention provides method and systems for dynamically mirroring network traffic. The mirroring of network traffic may comprise data that may be considered of particular interest. The network traffic may be mirrored by a mirror service portal from a mirror sender, referred to as a mirror source, to a mirror receiver, referred to as a mirror destination, locally or remotely over various network segments, such as private and public networks and the Internet. The network traffic may be mirrored to locations not involved in the network communications being mirrored. The present invention provides various techniques for dynamically mirroring data contained in the network traffic from a mirror source to a mirror destination.

System, method and apparatus for traffic mirror setup, service and security in communication networks

A method, article of manufacture, and apparatus for creating dynamically composed compute nodes from disaggregated hardware components is discussed. These components may be dynamically allocated from resource pools to the compute nodes.

Dynamically composed compute nodes comprising disaggregated components

A computer implemented method, system and computer program product for observing a mobile device's interaction with a set of resources in a geographic location, and creating a usage profile for the set of resources based on the mobile device's interactions with the resources. The usage profile includes a prediction of a subset of resources that will be used at a second geographic location in order to migrate the subset of resources to the second geographic location when the mobile device moves to the second geographic location.

Predicting a sub-set of resources to be migrated to a new location based on a mobile device's interactions with resources at a first location and a predicted period of time the mobile device is to be in the new location

A computer implemented method, system and computer program product enabling cloud service providers to register in a cloud book is presented. The cloud book includes a profile for each cloud service provider of the cloud service providers including the services and terms of service for each cloud service provider. Consumers register in the cloud book; users are able to connect to each other; and the users are able to browse the cloud service providers' connection to consumers. Each consumer is enabled to compare the services and terms of service to determine which service provider has services that match the consumer.

Cloud book registry for cloud service providers wherein the consumer can access the profile for each cloud service provider and service usage of other consumers

Implementations are provided herein for the migration of known infrastructure services, such as those existing on a private cloud infrastructure, to a public cloud environment, that enables private cloud operators to migrate their applications and data to a public cloud environment that meets the same trust, security, and resiliency standards currently employed in the private cloud environment. In one implementation, a private cloud can communicate an infrastructure services manifest to a public or hybrid cloud provider, which highlights the application and the data that will be moved to the public or hybrid cloud. The public or hybrid cloud can then use the infrastructure services manifest to establish an optimum virtualized environment containing the infrastructure services detailed in the infrastructure services manifest.

Migrating private infrastructure services to a cloud

A request for network access is received from a client device at a network entry device of a network infrastructure. The network infrastructure determines a physical location of the client device and determines authorization of the client device based on the physical location. The approach can include providing the physical location along with other user credentials to an authorizing device. The method can also include determining a level of service based on the physical location. Communication for the approach can make use of the IEEE 802.1X protocol.

Location-based access control in a data network

The intrusion detection function monitors for and reports detected intrusion signatures. The dynamic intrusion signatures function determines whether reported intrusion signatures exist in a library of signatures associated with a particular intrusion detection function. If the reported signature does not exist in the library, the library is updated. Detected intrusion signatures are reported to similarly enabled devices for library analysis and updating, if necessary. The related method includes the steps of monitoring for intrusion signatures or other triggering events, analyzing the events and updating IDS signature libraries as necessary.

System and method for dynamic distribution of intrusion signatures

Systems and methods are provided for preserving the privacy of data contained in mirrored network traffic. The mirrored network traffic may comprise data that may be considered confidential, privileged, private, or otherwise sensitive data. For example, the data payload of a frame of mirrored network traffic may include private Voice over IP (VoIP) communications between users on one or more networks. The present invention provides various techniques for securing the privacy of data contained in the mirrored network traffic. Using the techniques of the present invention, network traffic comprising confidential, privileged, private, or otherwise sensitive data may be mirrored in such a manner as to provide for the privacy of such data over at least a portion if not all of the mirrored communications between the mirror source point and the mirror destination point.

Method for network traffic mirroring with data privacy

A method, computer readable medium, and system for acquiring address block information for an attached function that initiates network access on a distributed computing network. Additional policy information in acquired concerning the attached function. One or more access policies are set based, at least in part, on the address block information and the additional policy information.

System and method for address block enhanced dynamic network policy management

A method and apparatus are provided that allows for the representation of a larger number of classes of network traffic and logical queues than is physically available on a per port basis within a network device. A number of logical queues, whose number can match the number of classes of network traffic a network device handles, may be supported across an aggregated set of ports even though the network device has fewer physical queues per port than there are classes of network traffic. The method and apparatus improve the management of network traffic sensitive to time delay and jitter, and further facilitates the operation of these applications in a simultaneous or near simultaneous manner.

Method and apparatus of virtual class of service and logical queue representation through network traffic distribution over multiple port interfaces

A method of determining a physical location of a device connected to a data network infrastructure including a plurality of connection points at different physical locations, the method including establishing a connection with the data network infrastructure via a cable-based transmission medium, wherein a communication signal passes via the cable-based transmission medium including at least one of the plurality of connection points. A connection point identifier is determined based, at least in part, upon the at least one of the plurality of connection points. A signal characteristic of the communication signal passing via the cable-based transmission medium between the device and the data network infrastructure through the at least one of the plurality of connection points is measured. A first physical location of the device is determined based on the determined connection point identifier, including accessing stored information associating the determined connection point identifier with location information. A second physical location of the device is determined based on the determined first physical location and the measured signal characteristic, including accessing stored information associating signal characteristics with location information.

Using signal characteristics to determine the physical location of devices in a data network

The present invention provides a method and system for controlling usage of network resources on a communications network. The method comprising acts of: (a) creating one or more packet rules for analyzing packets received at one or more devices of the communications network, each rule including a condition and action to be taken if a packet received at a device satisfies the condition; and (b) creating one or more service abstractions associated with a user of the communication network, each service abstraction representing a named set of one or more of the packet rules. In some embodiments one or more role abstractions may be created, each role abstraction representing a role of a user with respect to the communications network, and each role abstraction including a set of one or more packet rules, and possibly one or more service abstractions.

Creating, modifying and storing service abstractions and role abstractions representing one or more packet rules

A system that associates physical locations with network-linked devices in a network to which such devices are connected. This system employs a variety of techniques for establishing device location. The system configuration can vary and can include any type of data network, including LANs, MANs, Wide Area Networks (WANs), Personal Area Networks (PANs), and Home Networks. The system provides location information for particular devices to the network devices and management, and may be used in any of a variety of ways to improve configuration accuracy, control, and security. The location information may also be used to control or secure a device itself.

Locating devices in a data network

A system and method that provides dynamic network policy management. The system enables a network administrator to regulate usage of network services upon initiation of and throughout network sessions. The system employs a method of identifying selectable characteristics of attached functions to establish static and dynamic policies, which policies may be amended before, during and after any session throughout the network based on the monitored detection of any of a number of specified triggering events or activities. Particular policies associated with a particular identified attached function in prior sessions may be cached or saved and employed in subsequent sessions to provide network usage permissions more rapidly in such subsequent sessions. The cached or saved policy information may also be used to identify network usage, control, and security. The system and method of the present invention provides static and dynamic policy allocation for network usage provisioning.

Growing community of inventors

Newmarket, NH, United States of America

John Roese