A secure data interchange system enables information about bilateral and multilateral interactions between multiple persistent parties to be exchanged and leveraged within an environment that uses a combination of techniques to control access to information, release of information, and matching of information back to parties. Access to data records can be controlled using an associated price rule. A data owner can specify a price for different types and amounts of information access.

Secure data interchange

A system in which a single VLAN architecture spans multiple VLAN transport protocols and technologies, including a method and system in which multiple different VLANs may be combined in a single enterprise network. Each LAN-switch in the sytem identifies each frame with an identifier, and associates that identifier with particular VLAN identifiers for each type of VLAN technology. When a frame is bridged or routed from a first type of VLAN to a second type of VLAN, the first VLAN encapsulation is removed and the second VLAN encapsulation is added, with appropriate change in the VLAN identifier for the frame or packet. The identifier may also be implicit for the frame, such as when a particular set of sender's MAC addresses are identified with a particular VLAN. Individual VLANs, of whatever architecture, may be added, configured or reconfigured, modified, or deleted, using control tools associated with the multiple VLAN architecture system. Individual ports may be associated with particular VLANs, or may be designated "dynamic" so that frames or packets associated with those ports are associated with particular VLANs in response to source or destination addresses or other information.

Multiple VLAN architecture system

This invention relates to the field of Internet Protocol communications. More particularly, this invention is a method for setting up, authorizing, maintaining, and terminating an IP telephony session with quality of service across the Internet by combining session initiation protocol, resource reservation protocol, common open policy service, and open settlement protocol. The method of this invention allows an IP telephony session to benefit from all these protocols. With reference to the figure, an embodiment of this invention involves an SIP client (115, 130, 135, 136) that uses SIP and RSVP; SIP proxy servers (150, 151) that use SIP and COPS; policy servers (140, 141, 142) that use COPS and OSP; a clearing house server (180) that uses OSP; and several routers that use RSVP and COPS (e.g., 160, 161, 170).

METHOD FOR PROVIDING IP TELEPHONY WITH QoS USING END-TO-END RSVP SIGNALING

The invention provides a method and system for switching in networks responsive to message flow patterns. A message “flow” is defined to comprise a set of packets to be transmitted between a particular source and a particular destination. When routers in a network identify a new message flow, they determine the proper processing for packets in that message flow and cache that information for that message flow. Thereafter, when routers in a network identify a packet which is part of that message flow, they process that packet according to the proper processing for packets in that message flow. The proper processing may include a determination of a destination port for routing those packets and a determination of whether access control permits routing those packets to their indicated destination.

Network flow switching and flow data export

The invention provides an enhanced datagram packet switched computer network. The invention processes network datagram packets in network devices as separate flows, based on the source-destination address pair in the datagram packet. As a result, the network can control and manage each flow of datagrams in a segregated fashion. The processing steps that can be specified for each flow include traffic management, flow control, packet forwarding, access control, and other network management functions. The ability to control network traffic on a per flow basis allows for the efficient handling of a wide range and a large variety of network traffic, as is typical in large-scale computer networks, including video and multimedia traffic. The amount of buffer resources and bandwidth resources assigned to each flow can be individually controlled by network management. In the dynamic operation of the network, these resources can be varied—based on actual network traffic loading and congestion encountered. The invention also teaches an enhanced datagram packet switched computer network which can selectively control flows of datagram packets entering the network and traveling between network nodes. This new network access control method also interoperates with existing media access control protocols, such as used in the Ethernet or 802.3 local area network. An aspect of the invention is that it does not require any changes to existing network protocols or network applications.

Method for traffic management, traffic prioritization, access control, and packet forwarding in a datagram computer network

A desired static route is read from a static routing table and a polling is effected on a network connected to a terminal at regular intervals. If a normal response is issued from the network, then information about the above static route is entered in a routing table. If no normal response is delivered from the network, then the information about the static routes entered in the routing table is deleted.

Hirokazu Tamiya

Papers

Static routing system