Sequel Technology Corporation

Websense, Inc.

Wall Data Incorporated

Todd A Barnes

Mark G Grieve

Dalen Matthew Abraham

Paul F Bouche

Thomas P Bougetz

Robert C Allison

Michael S Nikkel

Brent A Langdon

Mark A Mortensen

John P Lemire

Patrick D Jenny

Tracy A Gosselin

Stuart Rosove

Dalen M Abraham

In accordance with the present invention, a network management program () is provided that manages the communication of data packets between an intranetwork () and an internetwork (). An operator of a computer connected to the intranetwork () inputs vital information regarding users of computers connected to the intranetwork (), mapping information regarding computers connected to the intranetwork (), and policies to be applied against those users and computers, using a graphical user interface (GUI). The GUI () communicates the vital user information, mapping information and policies to a database () which stores and organizes the vital user information, mapping information and policies. A filter executive () optimizes the policies stored in the database () into a set of rules for each user and passes the rules to a filter engine (). The filter engine () filters all outbound data packets transmitted from the intranetwork () to the internetwork () and verifies all inbound data packets from the internetwork () according to the rules provided by the filter executive (). The filter executive () also communicates the mapping information stored in the database () to a naming service manager () which further updates the mapping information and returns the updated mapping information to the filter executive (). Consequently, the filter executive () filters the data packets according to the most recent mapping information.

Method and apparatus for managing internetwork and intranetwork activity

In accordance with the present invention, a network management program (80) is provided that manages the communication of data packets between an intranetwork (44) and an internetwork (40). An operator of a computer connected to the intranetwork (44) inputs vital information regarding users of computers connected to the intranetwork (44), mapping information regarding computers connected to the intranetwork (44), and policies to be applied against those users and computers, using a graphical user interface (GUI 70). The GUI (70) communicates the vital user information, mapping information and policies to a database (72) which stores and organizes the vital user information, mapping information and policies. A filter executive (76) optimizes the policies stored in the database (72) into a set of rules for each user and passes the rules to a filter engine (78). The filter engine (78) filters all outbound data packets transmitted from the intranetwork (44) to the internetwork (40) and verifies all inbound data packets from the internetwork (40) according to the rules provided by the filter executive (76). The filter executive (76) also communicates the mapping information stored in the database (72) to a naming service manager (74) which further updates the mapping information and returns the updated mapping information to the filter executive (76). Consequently, the filter executive (78) filters the data packets according to the most recent mapping information.

A naming service manager (46) is provided for resolving mapping information regarding a plurality of computers connected to a local area network (LAN 24) and their users. The naming service manager 46 collects mapping information, i.e., user login names, domain names, computer names and IP addresses, from a plurality of naming service agents 50 located on the LAN (24) and correlates the mapping information into a current computer-to-user assignment or 'mapping' for each user of the LAN 24 and/or a current IP address-to-computer assignment or 'mapping' for each computer connected to the LAN 24. The naming service manager (46) serves the correlated mapping information to a plurality of naming service applications (48) which process the correlated mapping information in accordance with their own needs and requirements.

Method and apparatus for resolving network users to network computers

A method and apparatus for the automatic completion of a computer generated screen including a plurality of fields. As the user completes each field in the screen with an alphanumeric string, the alphanumeric string is associated with an identification number. The alphanumeric string entries in the fields of the screen can be represented as a sequence of identification strings. As each screen is completed by the user, the present invention generates a sequence of identification strings representative of the screen. The rows are stored in memory and are used to automatically complete later screens at the user's command. When a user wishes to automatically complete the screen, the fields of the current screen that contain alphanumeric strings are analyzed. Once all of the fields have been analyzed and a sequence of identification numbers formed, the sequence of identification numbers for the current screen is compared to the plurality of sequences of identification numbers for prior screens.

Automatic adaptive computer screen generation

Growing community of inventors

Snohomish, WA, United States of America

Todd A Barnes