112 results about "Branch office" patented technology

An internetwork that is especially designed to seamlessly compensate for a failure in the system, and to allow the testing of modifications to the system, without interrupting the normal systems operations. The internetwork is especially useful for financial services and related transaction data where the users of that data and/or services are located in multiple branch offices physically separated from each other and from the data and/or services desired. The internetwork includes a modularized communications system, wherein users are connected to specific modules, and each of the modules operates preferably at less than 50% capacity. In more preferred embodiments, each module includes dual (b)routers for connecting to a core tier and separate dual (b)routers for connecting to the users.

A computer system accesses a list of connections. The list of connections identifies computers, protocols, and/or types of connections that can be used. The computer system attempts to establish a connection to a server. While establishing the connection, the computer system can store a user's credential. If the connection to the server fails, the computer system attempts to access a connection from the list, and uses the stored user credential (if it exists) to authenticate the user on the new connection without requesting the credential anew from the user.

This disclosure relates to enhanced overlay network-based transport of traffic to and from customer branch office locations, facilitated through the use of the Internet-based overlay routing. A method of selecting an ingress edge region of the overlay network begins by mapping a service hostname to an IKEv2 destination of an outer IPsec tunnel associated with a first overlay network edge. An IKEv2 session is established from the first overlay network edge to the customer router. Upon tunnel establishment, a secondary lookup is performed to determine whether the first overlay network edge is an appropriate ingress region. Based on a response to the secondary lookup, a IKEv2 redirect is issued to a second overlay network edge. A new tunnel is then established from the second overlay network edge to the customer router. Thereafter, an additional lookup may also be performed to determine whether the second overlay network edge remains an appropriate ingress region.

Systems and methods are disclosed for providing a hierarchy of appliances to more efficiently access resources across a plurality of branch offices. A method comprises the steps of: establishing, by a first aggregator appliance, connections with a first plurality of branch office appliances; establishing, by a second aggregator appliance, connections with a second plurality of branch office appliances, the first plurality of branch office appliances not having information identifying the second plurality of branch office appliances; receiving, by the first aggregator appliance, from a first branch office appliance a request from a client for access to a resource; identifying, by the first aggregator appliance via the second aggregator appliance, a second branch office appliance from the second plurality of branch office appliances to service the request; transmitting, by the first aggregator appliance, to the first branch office appliance information identifying the second branch office appliance; and establishing, by the first branch office appliance, a connection with the second branch office appliance. Corresponding systems are also described.

Systems and methods for pre-positioning data in a network memory are described. A pre-positioning command may be executed to position specific data at one or more network memory appliances before the data is requested at a branch office. For example, the first download of a software update over the communication network at a branch office may require several minutes. To make the first download of the software update faster, the software update may be downloaded previously to the branch appliance. According to various embodiments, the pre-positioning command may comprise a time of transfer and/or a schedule. The data may be received by a pre-positioning receiver such as a file system server, a hypertext transfer protocol server, a file transfer protocol server, or a virtual client.

An interactive Internet mortgage origination system and method for business-to-business use with selected point of access professionals. The system allows professionals, such as Realtors, builders, accountants, lawyers, insurance agents, financial planners, and other professionals already in close proximity to the mortgage transaction to actively participate in the transaction. The system allows the Realtors to track the loan origination progress for multiple borrowers from active to approved to floating to locked to closed. The mortgage origination system also allows the Realtor to monitor commission pipelines generated thereby. The pipeline monitor is helpful in tracking all active, approved, floating, locked, and closed mortgage applications. The mortgage origination system also will track the relationship of a branch manager, or broker, with the real estate agents, or solicitors, who work for that branch manager.

The invention provides a method for authenticating a point of sail (POS) file and a method for maintaining an authentication certificate. During the POS file authentication, a two-level certificate management-based POS digital signature scheme is adopted, wherein the first-level certificate is a root certificate and the second-level certificate is a working certificate; the root certificate can authenticate the legality of the working certificate, but cannot authenticate the legality of an application program; and the working certificate can authenticate the legality of downloaded POS software. A POS acquirer head office applies the root certificate and the working certificate from certificate authority (CA), provides a POS acquirer root certificate public key to a terminal manufacturer, performs digital signature to generate a root certificate public key file, returns the root certificate public key file to the head office and then issues the root certificate public key file to each branch office; each POS acquirer branch office receives the root certificate public key file transmitted by the head office; and the POS acquirer head office performs digital signature on a working certificate public key by a root certificate private key to generate a working certificate public key file and issue the working certificate public key file to each branch office. The method for authenticating the POS file and the method for maintaining the authentication certificate have the advantages of contributing to the update and the maintenance of the certificate per se and guaranteeing the authenticity of application software.

Systems and methods for a Survivable Branch Office are provided by embodiments of the invention. The Survivable Branch Office includes a plurality of interconnected packet-based network devices, wherein the Branch Office is adapted to operate in a first mode during which centralized telephony call processing services are supplied to the Branch Office by a Main Office via a connection between the Branch Office and the Main Office. The Branch Office is also adapted to operate in a second mode when the connection between the Branch Office and the Main Office is interrupted. In the second mode the plurality of interconnected packet-based network devices collectively provide telephony call processing services in a distributed manner for the Branch Office. The network devices in some instances are packet-based peer-to-peer terminal sets, wherein the terminal sets themselves can collectively provide required telephony services normally supplied by the Main Office, by operating in a peer-to-peer mode when connection is lost with the Main Office.

A method for placing branch locations having the steps of: (a) identifying at least one service provider branch location, (b) identifying at least one service receiver, (c) identifying a measure of service receiver value, (d) calculating the value of each of the service receivers based on the measure of service receiver value, (e) determining which of the service provider branch locations is the closest service provider branch location for each of the service receivers, and (f) determining a probability that each of the service receivers will utilize the closest service provider branch location.

Branch domain controllers (DCs) contain read only replicas of the data in a normal domain DC. This includes information about the groups a user belongs to so it can be used to determine authorization information. Password information, however, is desirably replicated to the branch DCs only for users and services (including machines) designated for that particular branch. Moreover, all write operations are desirably handled by hub DCs, the primary domain controller (PDC), or other DCs trusted by the corporate office. Rapid authentication and authorization in branch offices is supported using Kerberos sub-realms in which each branch office operates as a virtual realm. The Kerberos protocol employs different key version numbers to distinguish between the virtual realms of the head and branch key distribution centers (KDCs). Accounts may be named krbtgt_<ID> where <ID> is carried in the kvno field of the ticket granting ticket (TGT) to indicate to the hub KDC which krbtgt′ key was used to encrypt the TGT.

An Ethernet Optical Area Network (EOAN) system, and methods for implementing and using such an EOAN system, are disclosed. The EOAN system may be used to improve the speed and reliability of data communications networks for small to medium-sized companies in metropolitan area networks. The EOAN system provides end-to-end Ethernet protocol, enabling professionals to have high-speed data communications in real time. The EOAN system may be generally utilized for improving data communications between branch offices, home offices, campuses, and remote sites for a wide variety of industries. The present invention preferably includes a fiber optic ring, Network Operation Center (NOC), NOC architecture components, existing client equipment, and one or more Free Space Optic (FSO) devices, microwave communication technology, and/or data switching platforms to implement high-speed Ethernet-based connections such as within a specified metropolitan area. The preferred EOAN system preferably integrates a plurality of FSO, microwave, and/or fiber optic technologies with Ethernet protocol (Fast Ethernet, Gigabit Ethernet, 10 Gigabit, etc.) to provide data connection services.

The invention which provides an automatic teller machine (ATM for short) dynamic privilege management system belongs to the technical field of automatic control of financial machineries and computers. According to the system, a management control module is arranged in an ATM device, and a privilege management unit, a task management unit, an equipment management unit, a statistical analysis and decision support management unit, a user management unit, and a short message management unit are arranged in the management control module to perform concentrated and dynamic ATM management. The system is suitable for financial mechanisms which have extremely strict ATM management requirements, especially large financial mechanisms, can administer the safe operation of each site through treating a head office and branch offices as centers, and allows rules and the authority to be unifiedly set to improve the safety of a financial mechanism system.

The invention discloses a data mining method, a platform and a system. The data mining method comprises the following steps: a parameter configuration interface of a preset data mining model is provided by a data mining platform; a parameter from a branch office user is received through the parameter configuration interface, and a task item is set and generated; the data mining platform executes the task item to perform data mining. By adopting the data mining method, the platform and the system, the corresponding parameters are arranged through the preset parameter configuration interface after the branch office user is connected to the data mining platform, therefore, the mining model can be rapidly applied, so as to obtain the result of localization, and the popularization and the application of the data mining technology are convenient.

The invention discloses a project management system which is characterized in that the project management system is arranged on a server of a head office, staffs of all internal departments of the head office access the project management system by a local area network, and staffs of branch offices at difference places or staffs in project departments access the project management system by a virtual private network (VPN); all data of the project management system can be centrally kept in a specialized data storage center of a headquarter; all users only need to use an IE browser of Windows to access functions authorized by the system; the project management system is simple to operate, is reasonable in resource allocation and improves utilization factor; the overall process of the project from early-stage bidding to implementation and later period is brought into the system for monitoring and management; the project management system improves the level of project management and the work synergism among the system and the staffs as well as among the staffs.

The invention discloses a marketing index dynamic benchmarking management method which is characterized in that based on comprehensively analyzing and summarizing the structure and current management situation of various marketing people in groups and teams in the whole company, the benchmarking indexes of four types of groups and teams are determined scientifically and reasonably by combining with marketing focal point of working, and a three-level benchmarking management system for the marketing department, subordinate four departments and power supply subsidiary companies is formed. The benchmarking job of groups and teams and performance assessment of a company are combined tightly, by organizing each professional department to hold a group and team benchmarking analysis meeting regularly and analyzing the indexes comprehensively, and by carrying out quantitative assessment on work achievements through comprehensive analysis on the indexes, the attention to the benchmarking management of the marketing groups and teams by leaders of subsidiary companies is improved. The marketing index dynamic benchmarking management method provided by the invention has the advantages that a marketing index dynamic management system can play effective monitoring and timely management and control roles in service works such as marketing services, copy, check and acceptance, metering maintenance and used electricity check, and overcomes the defect that a routine administration system is lack of process management and control and feedforward control.

The techniques herein provide for enhanced overlay network-based transport of traffic, such as IPsec traffic, e.g., to and from customer branch office locations, facilitated through the use of the Internet-based overlay routing infrastructure. This disclosure describes a method of managing and enforcing quality-of-service (QoS) in an Internet-based overlay network shared by a set of content provider customer entities. For each entity having a customer branch, the customer branch is coupled to the Internet-based overlay routing network. A quality-of-service (QoS) policy is configured for the customer. According to the method, utilization of the Internet-based overlay network against the configured QoS policy is then monitored. The QoS is then enforced for the customer and at least one other customer, based in part on the QoS policies. Capacity is enforced for a customer entity according to the QoS policy at one of: a global level, a geographical region level, and at the customer branch level.

The invention provides a very high frequency ground-air communication common system multistage distributed monitoring system. A multistage distributed monitoring system is in communication connectionwith a very high frequency ground-air communication common system. The multistage distributed monitoring system includes a region monitoring center, a branch office monitoring center, and a remote control station monitoring center, can realize multistage system cascade connection, and can realize the technical effect that the multistage distributed monitoring system is relatively higher in automation and intelligent degree and is rich in functions.

A bank customer management communication system comprises a networked communication server for communicating with a bank customer through a customer's wireless communication device by sending an estimated bank-teller available time to the customer in a bank branch office depending on an arrival time of the customer to the bank branch office for managing and reducing customer's wait time in the bank branch office.

Methods and apparatus for printing by a client computer reduce network usage and print delay, while performing print configuration and management at a centralized print server. The print server controls enablement of a branch office printing mode. When the branch office printing mode is enabled, the client computer sends spooled print data directly to a selected printer in the branch office. When the branch office printing mode is disabled, the client computer sends the spooled print data to the centralized print server, and the print server routes the print data to the selected printer. The print server performs configuration and management functions for the client computer in both operating modes. The print server may enable and disable the branch office printing mode on a per queue basis.