190results about How to "Blocking in network" patented technology

An anonymous location wireless network service for use in a wireless network that tracks the location and identity of network users, such as networks complying with enhanced 911 standards. The service provides content providers with the location of network users without revealing their identities. The service includes a wireless network having a proxy server, a network communication link to a plurality of web sites, and a wireless communication link to a plurality of handheld devices. The proxy server blocks identity by reading the location and identity information of network devices, generating dummy identifications, relating the dummy identifications to the identity information, storing the relationships in a memory storage, and forwarding the location information and dummy identifications to the global computer network. Upon receiving return messages from the global computer network, the proxy server reads the dummy identifications, looks up the related identity information in the memory storage, and forwards the data to the appropriate network devices.

Disclosed is a centralized controlling method of the process of delivering a routing packet for content transmission in a content-centric network (CCN). The routing method in a content centric network according to the present invention includes: a content distribution controller in the content centric network receiving a request for specific-content distribution from a user, determining locations of routers storing the content, and finding one of the routers to which the request from the user will be transmitted; and the content distribution controller finding an optimal path in consideration of a traffic distribution status and then transmitting a forwarding information base (FIB) to routers included in the optimal path.

In methods and apparatus for routing packets through a communications network, a respective distinct broadcast address is assigned to each of a plurality of distinct sets of virtual ports. No virtual port belongs to more than one of the distinct sets. A respective egress address is assigned to each packet entering the network via an ingress virtual port. The respective egress address corresponds to a respective destination address of the entering packet when a correspondence between the destination address and an egress address is known. When no correspondence between the destination address and an egress address is known, the respective egress address is a broadcast egress address corresponding to the set comprising the ingress virtual port. The packet is routed according to the respective egress address. The routing is restricted to virtual ports belonging to the distinct set of virtual ports that includes the ingress virtual port. The distinct sets of virtual ports and their associated broadcast addresses define isolated virtual private networks within the network. Each physical port of the network may map one-to-one onto a corresponding virtual port, or may map onto a corresponding plurality of virtual ports, in which case the each virtual port of the plurality is associated with a respective distinct combination of a physical address of the physical port and a respective virtual network identifier.

Hollow thermoexpandable particles or microspheres are provided that contain hydrocarbon blowing agents and have a shell polymer that can be softened at the onset of the expansion temperature and solidified at a higher temperature (thermoset) in an expanded state. Preferably, the microspheres have a shell of thermally expandable and thermally crosslinkable polymer and a hollow interior that contains a hydrocarbon liquid that boils at a temperature below the heat activated crosslinking temperature of the polymer shell. The crosslinking of the shell polymer during or after expansion, which is heat activated at an elevated temperature, can solidify the shell polymer and, then, maintain the expanded volume of the microspheres. The thermoexpandable thermoset polymer particles are useful in insulation, packaging, for making foam materials such as polyurethane or polyisocyanurate rigid foams. The invented thermoset microspheres can substantially improve the close cell percentage and compressive strength of the foam materials and make the foam manufacturing less hazardous.

Systems and methods for providing a boundary scan test of a wired or wireless network having a plurality of network nodes are presented. The system includes a test station communicatively coupled with the network. The test station creates a MAC layer scan test route sequence that includes each link in the network and is independent of the routing mechanism and protocol used for the network. The test station also creates a test agent that is configured to traverse each link in the scan test route sequence. The test agent is then deployed on the network and information about a link is reported back to the test station after the test agent examines the link. The scan test route sequence can be created by sending out a series of broadcast messages from one or more nodes in the network, sequentially applying a network tour to cover the entire network, or performing a depth first search on the entire network.

An improved scheduling mechanism usable for a data transmission in a packet based network is provided. A plurality of connections is detected, and for each of the connections, a buffer occupancy level is determined. Then, the connections having a smaller buffer occupancy level are prioritized in comparison to the other connections, and packets of the plurality of connections are scheduled on the basis of the result of the prioritizing. The scheduling mechanism is implemented in a network element of the packet based network or in a sender and receiver.

The invention relates to a SIM-based authentication method capable of supporting inter-AP fast handover, which can decrease the number of authentication procedures without negatively influencing the security of the wireless LAN by establishing an encrypted channel for each mobile node and using method 1: an aggressive key pre-distribution and method 2: probe request triggering passive key pre-query technique, thereby reducing the time of inter-AP handover for the mobile node. Furthermore, a re-authentication procedure is started to update the key after the key is used for a long time so as to ensure that the key is safe, thereby effectively achieving a fast and safe wireless LAN environment.

An anonymous location wireless network service for use in a wireless network that tracks the location and identity of network users, such as networks complying with enhanced 911 standards. The service provides content providers with the location of network users without revealing their identities. The service includes a wireless network having a proxy server, a network communication link to a plurality of web sites, and a wireless communication link to a plurality of handheld devices. The proxy server blocks identity by reading the location and identity information of network devices, generating dummy identifications, relating the dummy identifications to the identity information, storing the relationships in a memory storage, and forwarding the location information and dummy identifications to the global computer network. Upon receiving messages from the global computer network, the proxy server reads the dummy identifications, looks up the related identification information in the memory storage, and forwards the data to the appropriate network devices.

The present invention relates to device triggering in case of a congestion control. A triggering server transmits a device trigger request to a terminal over a communication network including a serving network node. The network node evaluates whether the connection can be established from the terminal to the server, including determining whether the network is congested and/or whether a back-off timer is running and/or the remaining time of the back-off timer at the terminal. Then the network node transmits a delivery delay indication to a device triggering control server to provide it with the delivery delay indication indicating at least one of impossibility of establishing the connection to the server after the trigger or a data transmission delay.

A security method and system using a server security solution and a network security solution is disclosed. In the security method based on the security system that has a firewall for blocking malicious access to a corresponding network, a network intrusion prevention system for blocking intrusion into the network and server systems including a mail server and a File Transfer Protocol (FTP) server, the server systems transmit information on an intruding system, which has transmitted harmful traffic, to the network intrusion prevention system at the time of detecting the harmful traffic. The network intrusion prevention system blocks the access of the harmful traffic based on the information transmitted from the server systems. According to the present invention, the server systems detect malicious intrusion attempts, and intrusion is blocked at a network level, so that the present invention is effective in that second and third malicious intrusion attempts can be fundamentally blocked and the consumption of network resources attributable to repeated intrusion attempts can be prevented.

A protocol processing method and apparatus are disclosed for a multi-SIM terminal holding multiple subscriber identification cards. The method includes: determining whether all the subscriber identification cards are associated with the same base station (e.g., a Public Land Mobile Network); and conducting, when all the subscriber identification cards are associated with the same base station, frequency scanning and measurement for a selected one of the subscriber identification cards, and sharing the results of frequency scanning and measurement with all the subscriber identification cards. Hence, the multi-SIM terminal may reduce battery power consumption without repeated frequency scanning and measurement for multiple subscriber identification cards.

In one embodiment, an intermediate network device has a plurality of ports, and at least some of the ports are associated with Virtual Local Area Network (VLAN) designations. A spanning tree entity executes a spanning tree protocol to transition the ports among a plurality of spanning tree states. A VLAN port logic circuit is disposed at one or more of the ports and processes control packets advertising VLAN memberships. The VLAN port logic circuit, in response to receiving a control packet broadcast by another intermediate network device, asserts bits in a VLAN wanted vector for which the spanning tree state of the selected port is in the forwarding state, signifying that network messages associated with such VLAN designations are to be forwarded from the respective port. The VLAN wanted vectors may later be transmitted in control messages from the intermediate network device.

Disclosed are systems and methods for managing Internet Protocol (“IP”) addresses in a network gaming environment comprising a plurality of electronic gaming machines, having one or more in-game network devices. In particular an in-game switch is provided, which is configured to receiving an external IP address from a centrals DHCP server and to determine a scope of internal IP addresses associated with the one or more in-game network devices. Once the scope is determined, the in-game switch is configured to lease IP addresses from the address scope block to the associated in-game network devices.

A method for reducing vulnerability of a computer network to a detected virus threat includes receiving an identifier of a network device detected as a source of virus activity. The method also includes relating the identifier to a predetermined account of the detected device and then automatically disabling the device account. Accordingly, the detected device is isolated from the network to prevent infection of the network by the detected device.

Embodiments of the present invention disclose a method, a device, and a system for self-adaptively adjusting a data transmission rate, which solve the problem of network buffer overflow. The method includes: receiving parameters sent by a client; calculating a predicted value of a data sending rate according to a maximum value of a network buffer and the received parameters; judging whether the predicted value of the data sending rate is less than an original service bit rate; and if the predicted value of the data sending rate is less than the original service bit rate, discarding data of at least one data unit in a send buffer. The method, the device, and the system are mainly applied to adjust the data transmission rate, and especially to adjust the data transmission rate in a time-varying network.

A terminal (101) includes interfaces for communication with a mobile network (102) and a wireless LAN (103). A first IMS server (107) performs IMS call control processing relating to terminals located in the mobile network (102) and a second IMS server (111) relays a signal relating to IMS call control processing concerning terminals located in the wireless LAN (103). These IMS servers search for a mobile network packet gateway (106), a packet data gateway (110), and a gateway to be controlled by a route change request for requesting change of a packet transmission path and relay the route change request. The route change request provided from the terminal (101) is relayed by the IMS servers to provide the change request to all networks specified. The packet transmission path is changed by the gateway in accordance with the request. Thus, the terminal having the interfaces for both of the mobile communication network and the wireless LAN can select a network to use for each communication port.

The present disclosure discloses a method, device and node apparatus for blockchain permission control. The method comprises: receiving target information sent by a node apparatus; acquiring an account address of a configured account of the node apparatus; acquiring, according to the account address, from a predetermined block stored with the account address and an account permission corresponding to the account address, the account permission corresponding to the account address; and processing the target information according to the account permission accordingly. In the present disclosure, node apparatuses are configured with corresponding accounts, and performing permission control on the accounts can restrict permissions of different node apparatuses so as to ensure security and privacy of blockchain data.

A system for preventing network micro-congestion using send pacing based on end-to-end bandwidth. The system includes one or more processors and memory coupled to the processors, wherein the memory contains program instructions executable by the processors to obtain an estimate of end-to-end network bandwidth available to a particular application-level data transfer operation in progress over a network between a first endpoint and a second endpoint. Based at least in part on the estimate of end-to-end bandwidth, the instructions are further executable to introduce a delay between transmissions of two or more successive messages or packets of the particular application-level data transfer operation from the first endpoint.

The present invention relates to an optimized interaction method of a WLAN user terminal selecting an access mobile communication network. In this method, after a wireless connection between the WLAN user terminal and a WLAN access network is established, the WLAN access network or the WLAN user terminal initiates an access authentication procedure, and the WLAN access network sends a user identity request message to the WLAN user terminal. After receiving the user identity request message, the WLAN user terminal determines network selection information to be currently carried according to a detecting result of whether the WLAN access network is changed or according to user selection information, and returning a message containing the determined network selection information to the WLAN access network. The WLAN access network then judges whether the network selection information in the received message indicates one of the mobile communication operation networks to which the WLAN access network is currently connected; if so, sends an access authentication request from the WLAN user terminal to a mobile communication operation network indicated in the network selection information, otherwise, the network sends a notification signaling to the WLAN user terminal, the WLAN user terminal completes subsequent operations according to contents in the notification signaling. With the present invention, when being accessed to a WLAN that is connected to multiple mobile communication operation networks, the WLAN user terminal is capable of selecting an optimal mobile communication operation network to access according to the requirements.