International Business Machines Corporation

At&t Intellectual Property I, L.p.

At+t Corp.

Olivier Daude

Olivier Hericourt

Jean-Francois Le Pennec

Paritosh Bajpay

David H Lu

Anand Kumar Singh

Shiu Y Chong

John H Mayr

Marc Gatignol

Sarma Tanuku

Claude R Galand

Jacques Fieschi

Olivier Caillau

Andrew Forth

A method of generating predictive reports includes recording a user identification, a timestamp including a connection date, and a query associated with report requested by a user from a database system for each connection of the user identification to the database system during a predetermined period. A plurality of intervals is defined in the predetermined period. Retrieved are instances of the user identification associated with connections of the user identification to the database system during a threshold number of the plurality of intervals based on a position that a current date occupies in a current interval, such that a position of each connection date in a respective interval is the same as the position that the current date occupies in the current interval. The query is executed to generate the report from the database system on the current date prior to a request for the report from the user.

System and method for caching database reports

A method and apparatus for managing a virtual private network are disclosed. For example, the method collects performance data for at least one parameter from a plurality of customer edge routers and a plurality of provider edge routers associated with the virtual private network. The method correlates the performance data for identifying one or more performance exceptions based on a threshold for each of the at least one parameter, and performs a trending analysis using the one or more performance exceptions to predict a potential problem that will impact the virtual private network.

Method and apparatus for providing end to end virtual private network performance management

A method of report caching includes recording a user ID, a timestamp including at least a connection date and at least one SQL query associated with a report requested by a user from the database system for each connection of the user to the database system over a predetermined period. A plurality of intervals is defined in the predetermined period. Retrieved are instances of the user ID associated with connections of the user to the database system during at least a threshold number of the intervals based on a position that a current date associated with a current connection of the user to the database system occupies in a current interval. The at least one SQL query is executed to generate the report from the database system on the current date before request for the report from the user. The report is stored in a cache for user's retrieval.

A system and computer program product for monitoring and optimizing performance and availability of a Dynamic Host Configuration Protocol (DHCP) service are provided by one or a plurality of DHCP servers in an Internet Protocol (IP) network comprising one or a plurality of IP subnetworks. The system implemented in hardware, comprises a computer infrastructure operable to define one or a plurality of groups of subnetworks, each group of subnetworks comprising one or a plurality of subnetworks. The computer infrastructure is further operable to retrieve information related to resources, in particular IP addresses, allocated within a DHCP server to each group of subnetworks. The computer infrastructure is further operable to transfer the information to a DHCP service monitoring system, the DHCP service monitoring system comprising means for retrieving the information from the one or a plurality of DHCP servers and means for aggregating the information for each group of subnetworks.

Method and system for optimizing performance and availability of a dynamic host configuration protocol (DHCP) service

A method and system for monitoring and optimizing performance and availability of a Dynamic Host Configuration Protocol (DHCP) service provided by one or a plurality of DHCP servers () in an Internet Protocol (IP) network comprising one or a plurality of IP subnetworks. The method comprises in a DHCP server () defining one or a plurality of groups of subnetworks, a group of subnetworks comprising one or a plurality of subnetworks; retrieving information related to resources, in particular IP addresses, allocated within said DHCP server to each group of subnetworks; transferring said information to a DHCP service monitoring system (). The method comprises in a DHCP service monitoring system () retrieving (to) from one or a plurality of DHCP servers (), information related to resources, in particular IP addresses, allocated within each DHCP server () to groups of subnetworks, each group of subnetworks comprising one or a pluarlity of subnetworks and aggregating (to) the information for each group of subnetworks.

A method and system for enabling interconnection of VPNs is disclosed. An interconnection device manages an interconnection process at one or more facilities including, for example, a gateway device. The gateway device has information relating to a plurality of VPNs, and may facilitate interconnection between devices on at least two of the VPNs by determining that one device is in fact a member of a first one of the VPNs, and by forwarding connection parameters of the first VPN to the second VPN on an as-needed basis. In this way, the gateway allows interconnection without the need for a completely centralized decision-making process, and does so independently of the type of device and/or VPN(s) being used. Moreover, the gateway may implement only those VPN parameters needed by both VPNs to communicate with one another with a desired level of security, thereby simplifying the routing and forwarding processes associated with the actual communication occurring via the interconnection. The information related to the plurality of VPNs and their respective member devices may be stored in a mapping table at the gateway, and identification parameters of a device seeking interconnection and/or associated VPN parameters may be verified by the use of digital certificates.

Virtual private network crossovers based on certificates

A method and system for monitoring and optimizing performance and availability of a Dynamic Host Configuration Protocol (DHCP) service provided by one or a plurality of DHCP servers () in an Internet Protocol (IP) network comprising one or a plurality of IP subnetworks. The method comprises in a DHCP server () defining one or a plurality of groups of subnetworks, a group of subnetworks comprising one or a plurality of subnetworks; retrieving information related to resources, in particular IP addresses, allocated within said DHCP server to each group of subnetworks; transferring said information to a DHCP service monitoring system (). The method comprises in a DHCP service monitoring system () retrieving (to) from one or a plurality of DHCP servers (), information related to resources, in particular IP addresses, allocated within each DHCP server () to groups of subnetworks, each group of subnetworks comprising one or a plurality of subnetworks and aggregating (to) the information for each group of subnetworks.

A method and system for preventing unauthorized dynamic host configuration servers from responding to client configuration requests in an Internet Protocol (IP) network. In accordance with the method of the present invention multiple network clients are simulated within a server checker client. At least one unauthorized dynamic host configuration server is then detected utilizing the server checker client within said IP network. Upon detection of an unauthorized dynamic host configuration server, configuration requests are delivered from the server checker client to the detected unauthorized dynamic configuration server such that the unauthorized dynamic host configuration server is unable to respond to configuration requests from actual network clients.

Method and system for preventing unauthorized server interference in an internet protocol network

A method for automatically identifying from an ordinary station connected to a TCP/IP network, the network components managed by a network management station for which it is possible to read or write over the confidential network data they store. Starting from the list of the default passwords protecting the network data and the IP addresses of the network components communicating with the ordinary station, the method allows by repeating the IP address discovery process, to discover step by step the passwords used in all the network components managed by the network management station and try to use them in reading or writing network information. The method allows detecting the lack of protection by password which usually occurs in campus networks and thus auditing such networks against intrusion from one of the stations of the network.

Method and system for evaluating network security

The present invention relies on dynamic autoproxy configuration and more particularly to a method and system for selecting a Proxy/Socks Server according to some response time and availability criteria. It rests on a dynamic autoproxy mechanism using availability and response time probes. It relies on probes retrieving well known HTML pages through each Proxy/Socks Server, measuring associated response time, detecting Proxy/Socks failures and degradation of response time. It also uses a CGI (Common Gateway Interface) program for dynamically creating autoproxy code (in a preferred embodiment Javascript code) on an autoproxy URL (Universal resource locator) system for selecting said Proxy/Socks Server.

Growing community of inventors

Nice, France

Olivier Daude