International Business Machines Corporation

At&t Intellectual Property I, L.p.

Olivier Hericourt

Didier F Giroir

Olivier Daude

Jean-Francois Le Pennec

Jacques Fieschi

Jean-François Le Pennec

Claude R Galand

Aurelien Bruno

Nicolas Grisi

Andrew Forth

A system and computer program product for monitoring and optimizing performance and availability of a Dynamic Host Configuration Protocol (DHCP) service are provided by one or a plurality of DHCP servers in an Internet Protocol (IP) network comprising one or a plurality of IP subnetworks. The system implemented in hardware, comprises a computer infrastructure operable to define one or a plurality of groups of subnetworks, each group of subnetworks comprising one or a plurality of subnetworks. The computer infrastructure is further operable to retrieve information related to resources, in particular IP addresses, allocated within a DHCP server to each group of subnetworks. The computer infrastructure is further operable to transfer the information to a DHCP service monitoring system, the DHCP service monitoring system comprising means for retrieving the information from the one or a plurality of DHCP servers and means for aggregating the information for each group of subnetworks.

Method and system for optimizing performance and availability of a dynamic host configuration protocol (DHCP) service

Described is a system and method for receiving an electronic mail including an attachment file and separating the attachment file from the electronic mail. The attachment is then sent to a remote source and the attachment file is replaced with a substitute file including identifying data for retrieving the attachment file from the remote source. The electronic mail with the substitute file is then forwarded to a receiver.

System and method for an electronic mail attachment proxy

A method and system for monitoring and optimizing performance and availability of a Dynamic Host Configuration Protocol (DHCP) service provided by one or a plurality of DHCP servers () in an Internet Protocol (IP) network comprising one or a plurality of IP subnetworks. The method comprises in a DHCP server () defining one or a plurality of groups of subnetworks, a group of subnetworks comprising one or a plurality of subnetworks; retrieving information related to resources, in particular IP addresses, allocated within said DHCP server to each group of subnetworks; transferring said information to a DHCP service monitoring system (). The method comprises in a DHCP service monitoring system () retrieving (to) from one or a plurality of DHCP servers (), information related to resources, in particular IP addresses, allocated within each DHCP server () to groups of subnetworks, each group of subnetworks comprising one or a pluarlity of subnetworks and aggregating (to) the information for each group of subnetworks.

A method and system for enabling interconnection of VPNs is disclosed. An interconnection device manages an interconnection process at one or more facilities including, for example, a gateway device. The gateway device has information relating to a plurality of VPNs, and may facilitate interconnection between devices on at least two of the VPNs by determining that one device is in fact a member of a first one of the VPNs, and by forwarding connection parameters of the first VPN to the second VPN on an as-needed basis. In this way, the gateway allows interconnection without the need for a completely centralized decision-making process, and does so independently of the type of device and/or VPN(s) being used. Moreover, the gateway may implement only those VPN parameters needed by both VPNs to communicate with one another with a desired level of security, thereby simplifying the routing and forwarding processes associated with the actual communication occurring via the interconnection. The information related to the plurality of VPNs and their respective member devices may be stored in a mapping table at the gateway, and identification parameters of a device seeking interconnection and/or associated VPN parameters may be verified by the use of digital certificates.

Virtual private network crossovers based on certificates

A method and system for monitoring and optimizing performance and availability of a Dynamic Host Configuration Protocol (DHCP) service provided by one or a plurality of DHCP servers () in an Internet Protocol (IP) network comprising one or a plurality of IP subnetworks. The method comprises in a DHCP server () defining one or a plurality of groups of subnetworks, a group of subnetworks comprising one or a plurality of subnetworks; retrieving information related to resources, in particular IP addresses, allocated within said DHCP server to each group of subnetworks; transferring said information to a DHCP service monitoring system (). The method comprises in a DHCP service monitoring system () retrieving (to) from one or a plurality of DHCP servers (), information related to resources, in particular IP addresses, allocated within each DHCP server () to groups of subnetworks, each group of subnetworks comprising one or a plurality of subnetworks and aggregating (to) the information for each group of subnetworks.

A method and system for preventing unauthorized dynamic host configuration servers from responding to client configuration requests in an Internet Protocol (IP) network. In accordance with the method of the present invention multiple network clients are simulated within a server checker client. At least one unauthorized dynamic host configuration server is then detected utilizing the server checker client within said IP network. Upon detection of an unauthorized dynamic host configuration server, configuration requests are delivered from the server checker client to the detected unauthorized dynamic configuration server such that the unauthorized dynamic host configuration server is unable to respond to configuration requests from actual network clients.

Method and system for preventing unauthorized server interference in an internet protocol network

The present invention relates to a system and method of dispatching an IP datagram comprising socks traffic on a socks server, in an Internet Protocol (IP) network comprising a plurality of socks servers, the IP datagram comprising an IP header comprising a Type Of Service (TOS) field. The method comprises in a socks dispatcher the steps of retrieving the value of the Type Of Service (TOS) field from the IP header of the IP datagram and selecting a socks server referring to a first table, said first table defining for each value of the TOS field one or a plurality of socks servers. The IP datagram is sent by an IP network device with a given priority. The step of retrieving the value of the Type Of Service (TOS) field is followed by the further step of determining the priority of the IP datagram by referring to a second table, the second table defining a priority for each value of the Type Of Service (TOS) field. The IP datagram comprising data according to a given application level protocol, the step of determining the priority of the IP datagram comprises the further step of determining the application level protocol of data transported in the IP datagram by referring to the second table, the second table defining a priority and an application level protocol for each value of the Type Of Service (TOS) field. In case of congestion in one or a plurality of output queues, the step of determining the priority of the IP datagram is followed by the further steps of discarding in the one or plurality of output queues IP datagrams having the lowest priority until there is no more congestion, and discarding the IP datagram when said IP datagram compared with IP datagrams in said one or plurality of output queues, has the lowest priority.

Method and system of dispatching socks traffic using type of service (TOS) field of IP datagrams

A method and system for setting a value within a type of service field in an Internet Protocol (IP) datagram in accordance with an application level protocol at which said IP datagram is transported within a socks connection from a source application that resides within a source device to a destination application that resides within a destination device. The method includes determining IP addresses of the source and destination devices. The application level protocol for the source and destination devices are then determined utilizing the port addresses to which and from which the IP datagram is sent. The IP addresses for the source and destination nodes as well as the identity of the application level protocols corresponding to the source and destination applications are then indexed in a first table. A type of service value to be encoded within the IP datagram is then determined and written into the type of service field of the IP datagram.

System and method for accessing a Socks server from an end user workstation in an IP network

A method and system are disclosed for generating and using a virus-free file certificate integrated in a file. The method, for use in a virus-free certificate authority (), for generating a virus-free certificate () certifying that a file is virus-free includes the steps of: receiving () a virus-free certificate request for a file from a server () or a client () system, said virus-free certificate request including the file for which the virus-free certificate is requested; determining () whether a virus-free certificate is integrated in the file; if no virus-free certificate is integrated in the file: determining () whether the file is virus-free or not; if the file is declared virus-free by the virus-free certificate authority (): generating () a virus-free certificate () including a file signature () for certifying that said file is declared virus-free by the virus-free certificate authority (); integrating () the generated virus-free certificate () in the file; sending () back in response to the virus-free certificate request the file with the integrated virus-free certificate (). The method for use in a server () or client () system, for determining that a file is virus-free includes the steps of: determining () whether a virus-free certificate () is integrated within a file; if a virus-free certificate is integrated within the file: authenticating () the virus-free certificate (), said virus-free certificate including a certificate signature (); authenticating () the file, said virus-free certificate () including a file signature (), said file signature certifying that said file has been declared virus-free by a virus-free certificate authority ().

Method and system for generating and using a virus free file certificate integrated within a file

An access device for establishing a Systems Network Architecture (SNA) session between an SNA Client and an SNA application using Telnet 3270 services over a communication network. The communication network, has Telnet 3270 servers for accessing the SNA application. The access device comprises logic for: (1) receiving from a Telnet 3270 client, a request for establishing a Telnet 3270 session with a Telnet 3270 Server, the request comprising an identification of the SNA client associated with the Telnet 3270 client, (2) selecting a communication path within the communication network to access a Telnet 3270 server providing services to the SNA client by referring to a configuration table, which comprising, for each SNA client, one or more communication paths leading to one or more Telnet 3270 servers, and (3) forwarding the Telnet 3270 session request to a selected Telnet 3270 server along the selected communication path.

Method and system for providing SNA access to telnet 3270 and telnet 3270 enhanced services over wide area networks

The present invention is directed to computer viruses and more particularly to a method and system for use in a virus-free certificate firewall, of controlling and filtering files using a virus-free certificate. An example embodiment of the method comprises the steps of: receiving a file; if a virus-free certificate () is required for the file: determining whether the a virus-free certificate is already associated with the file; if a virus-free certificate is already associated with the file: authenticating the associated virus-free certificate, said virus-free certificate comprising a certificate signature; if the virus-free certificate is authenticated, determining whether the file is virus-free or not; if the file is virus-free, forwarding the file with the associated virus-free certificate; if the virus-free certificate is not authenticated or if no virus-free, certificate is associated with the file; determining whether the file is virus-free or not, if the file is virus-free, associating with the file a new virus-free certificate; and forwarding the file with the new virus-free certificate.

Method and system for controlling and filtering files using a virus-free certificate

A method and system as disclosed for use in a virus-free certificate proxy (), of retrieving from one or a plurality of virus-free certificate authorities () a virus-free certificate () certifying that a file is virus-free. The method includes the steps of: receiving () virus-free certificate request for a file; selecting a virus-free certificate authority () having authority to generate a virus-free certificate () for the file; requesting () the virus-free certificate to the selected virus-free certificate authority (); receiving () from the selected virus-free certificate authority the generated virus-free certificate; sending back () in response to the virus-free certificate request the received virus-free certificate.

Method and system for retrieving an anti-virus signature from one or a plurality of virus-free certificate authorities

The present invention is directed to computer networks and more particularly to a system and method in a network device for caching Hyper Text Transfer Protocol (HTTP) data transported in an Internet Protocol (IP) Datagram sent on a socks connection established over a Transmission Control Protocol (TCP) connection between a source port on a source device and a destination port on a destination device.

Method and system for caching HTTP data transported with socks data in IP datagrams

A method and system are disclosed for generating and using a virus-free file certificate. The method, for use in a virus-free certificate authority (), includes the steps of: receiving () a virus-free certificate request for a file from a server () or a client () system; determining () whether the file is virus-free or not; if the file is declared virus-free by the virus-free certificate authority (): generating () a virus-free certificate () including a file signature () for certifying that said file is declared virus-free by the virus-free certificate authority (); sending () back in response to the virus-free certificate request the virus-free certificate (). The method, for use in a server () or client () system, includes the steps of: determining () whether a virus-free certificate () is associated with a file; if a virus-free certificate is associated with the file: authenticating () the virus-free certificate (), said virus-free certificate including a certificate signature (); authenticating () the file, said virus-free certificate () including a file signature (), said file signature certifying that said file has been declared virus-free by a virus-free certificate authority ().

Method and system for generating and using a virus free file certificate

The present invention relates to computer viruses and more particularly to a method and system for caching anti-virus file certificates. Each anti-virus certificate associated with a file comprises a file signature. The file signature is generated by a virus-free certificate authority, which avoids the system, which receives the file to check this file for all existing viruses. The virus-free certificate authority validates the file against all known viruses, using one or several anti-virus checkers. In case of new viruses, only the virus-free certificate authority is changed and the only process performed by the system receiving the file is to verify the file against the file signature included in the virus-free certificate, and to filter the file according predetermined rules. The present invention drastically simplifies the computing resources for detecting viruses on network devices such as IP Routers and Firewalls.

Growing community of inventors

Cagnes sur Mer, France

Olivier Hericourt