Sun Microsystems, Inc.

Oracle America, Inc.

Robert P St Pierre

Germano Caronni

Glenn Carter Scott

Viswanathan Swaminathan

Stephen Uhler

Clarence Kirk Greene

Vipul Gupta

David W Curbow

Mark J Koch

Surinder Singh

Eric Macintosh

Pradip S De

A method for denial of service attack deterrence involves receiving requests from clients, where the requests include a server protocol component, designating a client as a malicious client based on the requests, intercepting and inspecting, prior to the clients receiving a response, the server protocol component of each response to the clients, and rewriting at least a portion of the server protocol component of each response destined for the malicious client.

Distributed denial of service deterrence using outbound packet rewriting

A method for congestion recovery during a denial of service attack involves creating a split horizon zone on a server, where the split horizon zone includes a fictitious zone mapped to a fictitious address, receiving and investigating requests from clients, designating a malicious client based on investigating the requests, where the malicious client is associated with a client address, assigning the client address to the fictitious zone, and routing network traffic from the malicious client to the fictitious address.

Distributed denial of service congestion recovery using split horizon DNS

A method of associating a range of destination IP addresses with a real IP address for use with the Virtual Address Resolution Protocol is disclosed. The destination addresses may be a range of virtual IP addresses in a virtual network or a range of real IP addresses in a physical network. A record of the association of the range of destination addresses with a single real IP address is stored in a Virtual Address Resolution Protocol lookup table which is utilized when sending messages from a virtual IP address. The ability to assign a range of destination addresses to a single real IP address represents an extension of the use of VARP. The association of multiple destination addresses to a single real IP address allows an electronic device to function as a router to a widely distributed real or virtual network. The virtual network of the present invention adds a layer of encryption to the originating virtual network by sending encrypted data packets between the origin and destination addresses.

System and method of extending virtual address resolution for mapping networks

Method and apparatus for optimizing mesh routing for stability and system lifetime maximization in networks, for example in wireless networks. A routing module may be instantiated in nodes on the network. The routing module may implement a link quality and node health aware routing protocol on the network that considers a combination of link quality and node health/residual lifetime metrics in the calculation of the desirability of nodes and links between nodes as parts of an overall route. A route selection metric for each route may be determined from routing cost metrics for the nodes on the route and the number of hops on the route. A node may then select a best route according to the determined route selection metrics for the routes.

Method and apparatus for mesh routing

A method of extending the functionality of a virtual network is disclosed. Messages intended for a virtual destination address located on a network equipped with a device performing packet filtering, network address translation or a similar function on the edge of the network (an 'edge device'), are encapsulated in higher level protocols prior to being sent to the edge device. The virtual destination address may be associated with a process on the edge device or a process on another device in the interior of the network. Higher level protocol designations, including transport protocol designations accompanied by a port number and application protocol designations, are retrieved from an extended virtual address registration. Messages arriving at the edge device are determined by the Network layer to contain a higher level protocol and are passed up the Internet Protocol model stack to a higher layer. The higher layers of the edge device, such as the Transport layer and the Application layer, may be accessible and therefore configurable to a non-Systems Administrator thus allowing the message to reach the intended virtual destination address.

System and method for using data encapsulation in a virtual network

A method of processing callback requests included in web procedure calls through a firewall is discussed. A requesting device contacts a receiving device and requests the performance of a procedure. The procedure call includes a callback request that includes a destination address and port on the requesting device, as well as the address of a broker device. The receiving device parses the procedure call and identifies the requested service and the callback request and then terminates the connection with the requesting device. The receiving device executes the procedure and then requests a new connection to the broker device once the results of the requested service are obtained. The broker verifies the identity of the device and establishes a connection with the receiving device. The receiving device then transmits the results of the requested procedure to the broker which then forwards the results to the requesting device.

System and method for processing callback requests included in web-based procedure calls through a firewall

A method for performing trick-play functions in a multicast stream, involving generating a session announcement protocol (SAP) message, wherein the SAP announcement includes a first internet protocol (IP) address of a multicast source, forwarding the SAP message to a multicast router, wherein the multicast router includes an attached storage to cache the multicast stream, substituting the first IP address with a second IP address associated with the multicast router, requesting a trick-play function to obtain a unicast stream, and receiving the unicast stream from the attached storage based on the trick-play function.

Trick play for multicast streams

A method of utilizing transport protocols to provide bidirectional web procedure calls is disclosed. A callback request included with a web procedure call provides a destination address and port on the requesting device to be utilized in a new connection for receiving the response from the receiving device. The utilization of a callback request included with a web procedure call enables a receiving device to terminate the original connection upon which it received the web procedure call while performing the requested procedure. In situations where the requested procedure takes an extended period of time or the receiving device is responding to a large number of requests, the ability to drop the original connection, perform the procedure, and respond to the requesting device via a new connection saves resources on the receiving device. Replies to the request are sent to the requesting device utilizing the destination address and port included as a parameter in the callback request. Access to the receiving device is increased as connections do not need to be held open.

System and method for processing callback requests, which include a client port and address, included in web-based procedure calls

A method for conveying a security context, including creating and assigning a virtual address to a client process, issuing a first Internet Protocol version compliant packet wherein the first Internet Protocol version compliant packet comprises a security context, prepending an issued packet with a second Internet Protocol version header producing a second Internet Protocol version compliant packet, forwarding the second Internet Protocol version compliant packet to a recipient, stripping away the second Internet Protocol version compliant header from the second Internet Protocol version compliant packet producing a stripped packet at the recipient, decrypting and authenticating the stripped packet using a particular method as indicated by the security context producing a decrypted and authenticated packet, and routing the decrypted and authenticated packet to a recipient process using the virtual address.

Method and apparatus for conveying a security context in addressing information

A network messaging protocol enabling messages from multiple network devices to share a single display device is disclosed. The protocol enables a display device to prioritize among incoming messages from different network devices and to prioritize among incoming multiple messages from a single device. The protocol further enables multiple networked devices communicating over an IP based network to share a display device, and also provides the ability for a network device to specify the display characteristics of its message. A display device executing the messaging protocol processes and displays multiple messages from multiple network devices without the need to overwrite important messages or display messages in unreadable sizes.

System and method for a priority messaging protocol for a shared display device

A method of chaining together multiple dependent web-based procedure calls into a single request is disclosed. A request containing multiple MIME encoded service requests is transmitted to a first service. The request is parsed and the first service identified and performed. The results of the first service are appended to the remainder of the request which is forwarded to a second service listed in the request. The second service listed in the request may use the output of the first service as input and performs the second service. The process continues until the last service listed in the request is performed. Any output from the performance of the service requests is returned to the requesting device following execution of a MIME encoded callback request, the callback request being embedded in the original request following the last of the listed service requests.

System and method for forward chaining web-based procedure calls

A display device executing a network messaging protocol and capable of receiving display requests from multiple network devices communicating with the display device over an Internet Protocol (IP) based network is disclosed. The network priority messaging protocol executed by the display device enables the display device to efficiently display messages received from multiple network devices. The protocol enables the display device to prioritize among incoming messages from different network devices and to prioritize among incoming multiple messages from a single device. The protocol executed by the display device further enables the display device to receive display characteristics encoded as part of a message from a network device. The display device executing the network priority messaging protocol is able to process and display multiple message requests without the need to prematurely overwrite the message currently being displayed or to segment the display surface of the display device into smaller pieces.

System and method for a display device using a priority messaging protocol

The present invention addresses the difficulties of controlling new devices which have been added to a network. A network protocol, the NetCTL protocol, enables a remote control device to dynamically learn the command codes of a newly network attached device if the new device is executing the protocol. The intervention of a system administrator is not necessary since the dynamic teaming process happens automatically when the new device is attached to the network. Because the protocol allows the remote control device to learn the codes dynamically, there is no need to consult previously written tables of commands which can omit the codes for newly invented devices. A user of the remote control device which has 'learned' the codes (i.e. acquired the codes) for a network attached device is able to control that device, regardless of the device's physical location, by selecting and sending the network attached device a command code to perform an operation.

Protocol for a remote control device to enable control of network attached devices

Vehicle door shelter

A system and method for delivering parking information is disclosed. Embodiments of the present claimed invention utilize video imaging to analyze the availability of parking spaces. More specifically, a computer is used to process video images of a parking location to determine if a parking space is available.

Growing community of inventors

Sunnyvale, CA, United States of America

Robert P St Pierre