International Business Machines Corporation

Patrick Droz

Andreas Kind

Robert Haas

Ilias Iliadis

Paul T Hurley

Clark Debs Jeffries

Roman Alexander Pletka

Joseph Franklin Logan

Christian Cachin

Hoyt Edwin Bowen, Jr

Lukas Kencl

John G Rooney

Tomas Tuma

Xiao-Yu Hu

Bernard Metzler

Atiya Suhail

Kashipati G Rao

Douglas H Dykeman

Marc Stoecklin

Soenke V Mannal

René A Pawlitzek

Gilad Goren

Ceki Gulcu

Joseph Paki

Lakas Kencl

Rajai Nasser

Ed Bowen

Network flow records from various administrative domains are provided to a network monitoring entity. The network monitoring entity analyzes the network flow records in a way to locate a source of malicious network flow.

Operating a network monitoring entity

Embodiments relate to polygon recovery from a +1/&#x2212;1 description of a plurality of polygons of a very large scale integrated (VLSI) mask for production of a VLSI semiconductor device. An aspect includes receiving a set of data comprising the +1/&#x2212;1 description of the plurality of polygons of the VLSI mask, the +1/&#x2212;1 description comprising a plurality of corners. Another aspect includes determining a 4-directional data structure, a Mm value comprising a first limit value, and a Mp value comprising a second limit value for each of the plurality of corners. Another aspect includes recovering the plurality of polygons from the set of data by assigning each of the plurality of corners to a single polygon based on the 4-directional data structure, the Mm value, and the Mp value of each of the plurality of corners, and determining an order of the respective corners of each polygon.

Polygon recovery for VLSI mask correction

A method for determining a representation (y) of a signal (s) comprise selecting a predetermined number (m) of row vectors (v, . . . , vm) from a predetermined measurement matrix (M). The predetermined measurement matrix (M) is predetermined dependent on a product of a predetermined Hadamard matrix or generalized Hadamard matrix (H) and a predetermined representation matrix(B). The predetermined representation matrix (B) represents a predetermined basis for the signal(s). The method further comprises determining a respective inner product of the signal (s) and each of the predetermined number (m) of selected row vectors (v, . . . , vm) resulting in a predetermined number (m) of measurements (y, . . . , ym) forming the representation (y) of the signal (s).

Method, device, computer program and computer program product for determining a representation of a signal

A system, method apparatus, and computer readable medium for managing renewal of a dynamic set of data items. Each data item has an associated renewal deadline, in a data item management system. A renewal schedule allocates to each data item a renewal interval for renewal of the data item. On addition of a new data item, if a potential renewal interval having a duration required for renewal of the data item, and having an ending at the renewal deadline for that item does not overlap a time period in the schedule during which the system is busy, the renewal schedule is automatically updated by allocating the potential renewal interval to the new data item. If the potential renewal interval does overlap a busy period, the renewal schedule is automatically updated by selecting an earlier renewal interval for at least one data item in the set.

Renewal management for data items

The present invention provides a system and method for time-series with compression accuracy as a function of time. Briefly described, in architecture, one embodiment of the system, among others, can be implemented as follows. The system includes a computer with a processor. The system performs a method receiving a data set on the computer, utilizing a plurality of filter banks to transform the data set into a plurality coefficients, wherein each coefficient is associated with a basis function, and quantizing the plurality of coefficients, wherein the quantization maps the plurality of coefficients into certain value ranges. Then, system further performs determining a threshold based upon each coefficient effect on a time domain, disregarding the coefficient that fall below the threshold, and storing any remaining coefficients as compressed data for the data set.

Apparatus and method for time-series storage with compression accuracy as a function of time

A method and system for managing asynchronous transfer mode (ATM) traffic in a computer system is disclosed. The computer system is used in sending, receiving, or sending and receiving a plurality of ATM flows. Each ATM flow has a plurality of ATM cells, a minimum ATM bandwidth guarantee, and a maximum ATM bandwidth. The method and system include determining whether excess bandwidth exists for the ATM flows. The method and system also include gracefully increasing a portion of the ATM cells transmitted for each ATM flow during periods of excess bandwidth. The portion of the ATM cells transmitted is not more than the maximum ATM bandwidth limit. If an ATM flow presents a sufficient offered load, the portion of the ATM cells transmitted in the flow is not less than a minimum ATM bandwidth guarantee.

Controlling ATM traffic using bandwidth allocation technology

A system and method for monitoring packetized traffic flow in a network and enabling approximation of the rate information of a network flow. The method for monitoring network traffic flow includes receiving, at a network packet flow collector device, packetized traffic flow signals to be monitored; sampling said received packetized traffic flow signals in time to form an approximation of the packet flow rate in time; generating packet flow activity data comprising data representing the sampled traffic flow signals sampled in time; communicating the packet flow activity data to a network packet flow analyzer device and processing the flow activity data to form signals representing an approximate version of the network traffic flow in the network, the analyzer processing the traffic flow signals for reconstructing the rate of the netflow as a function of time. The flow analyzer then generates a compressed version of the network traffic flow signals in the network, the compressed network traffic flow signals comprising relevant approximation of the packet flow rate in time.

System and method for network flow traffic rate encoding

A method and an apparatus for classifying a data network connectable computing device as a mobile computing device. Information related to the location of a registering device is determined. The determined location information is compared to a stored location information associated to this device. The device is detected as a mobile device when at least the stored location information is different to the determined location information. Neither the devices themselves nor any access mechanism to the data network have to be changed.

Automatic mobile device detection

The present invention provides a method for transferring encrypted information from one storage area to other storage area wherein cryptographic data protection scheme having protection attributes are applied on the data. A crypto container having cryptographic properties represents cryptographically protected data. The attributes that have been attached to the container at the time when data is added or removed from the container determine the scheme of data protection being applied. Crypto container can be converted or serialized for storage or transmission, here the conversion spread only to the protected data parts which possibly includes crypto containers in protected form but may not the attached crypto attributes. These attributes must be stored or transmitted in another form.

Method for efficient and secure data migration between data processing systems

Load balancing apparatus for a data communications network comprises hash logic for computing a hash function on incoming data packets. A threshold detector is connected to the hash logic for triggering, in response to utilization of the downstream objects exceeding a predefined threshold, redefinition in the hash logic of parameters of the hash function from a first set of parameters to a second set of parameters for redistributing the data packets amongst the downstream objects. In use, the hash logic, directs the packets for routing to downstream objects in the network via a first routing path based on a hash computation using the first set of parameters, and, if the threshold is exceeded, selectively directs the packets to one of the first routing path and a second routing path in dependence on separate hash computations using the first and the second sets of parameters for subsequent routing of the packets via the selected one of the first and second routing paths based on the results of one of the separate hash computations.

Load balancing in data networks

Method and systems for controlling ATM traffic using bandwidth allocation technology

Methods and apparatus are provided for controlling flow rates of a plurality of data packet flows into a queuecorresponding to a resourceof a network device. The flows comprise a setof non-responsive flows, and a setof other flows which may comprise responsive flows and/or flows whose responsiveness is unknown. The flow rates are managed in accordance with a queue management scheme such that adjustments are made to each flow rate in dependence on excess bandwidth in the resource, the amounts of the adjustments being dependent on one or more adjustment parameters for each flow. An error signal is generated based on the deviation from a desired allocation ratio of the ratio of the total flow rates into the queuefor the sets of flows. At least one adjustment parameter for at least one flow is then varied in dependence on the error signal in such a manner as to reduce the aforementioned deviation. A closed-loop control scheme thus operates in conjunction with the underlying queue management scheme to promote fair bandwidth allocation even in the presence of a mix of responsive and non-responsive flows.

Flow control in network devices

A method is described for sending frames of data from at least two sending nodes via one or more forwarding nodes to one receiving node in an ATM network. Each frame of data is partitioned into cells and includes a VPI field and a VCI field. The sending nodes include a first label into the VPI field of each of the cells representing an identification of the routing of the cell. Furthermore, the sending nodes include a second label into the VCI field of each of the cells representing an identification of the source of the cell. The forwarding node swaps the first and the second label according to a swapping table. With respect to the second label, the forwarding node enters the swapping table in the column of the output labels and reads the corresponding input label.

Method and apparatus for multipoint-to-point transmission in an ATM network

The present invention provides an improved method and a system for processing data packets in a router. The router includes a plurality of input/output ports and more than one packet processing units. The packet processing units derive from a piece of information associated to each data packet one output port to forward the data packet to. In response to a data packet arriving at one input port one packet processing unit is determined. The determined packet processing unit is then requested to derive a respective output port. The output port is derived from a piece of information within the packet. An identification identifying the respective output port is in the following returned to the requesting unit. Finally, the data packet is forwarded to the identified output port. The method and system according to the present invention optimize advantageously resource utilization that leads to higher packet processing speed and helps to lower the costs and power requirements. Furthermore, it leads to increased fault tolerance, i.e. increased reliability.

Method and system for processing data packets

A network-attachable computer system () that comprises a network interface for connection to a network (), a server module address, a secure identifier (ID), and a key k. The computer system () generates identity information which comprises the secure identifier ID and which is protected using said key k. This identity information is automatically sent via the network interface to a server module () which is reachable via the network () by using said server module address where it is used to determine whether the respective computer system () is reported lost or stolen.

Growing community of inventors

Rueschlikon, Switzerland

Patrick Droz