Dalibor F Vrsalovic

6546423, Apr 8, 2003

Oct 22, 1999

09/422950

Partha P. Dutta - San Jose CA
Nino Vidovic - Santa Clara CA
Dalibor F. Vrsalovic - Sunnyvale CA

ATT Corp. - New York NY

G06F 15173

709225, 709224, 709226, 709227, 709235, 709229, 713152, 713153, 713154, 713200, 713201

A system and method for load balancing. A packet is received at a firewall, which implements a rule and refers the packet to a load balancing proxy. The proxy performs a load balancing analysis at the load balancing proxy. Based on the results of the load balancing analysis, the proxy determines a load balancing rule, which is implemented by the firewall. At the end of the session to which the received packet belongs, the load balancing rule is deleted at the firewall.

6574666, Jun 3, 2003

Oct 22, 1999

09/422954

Partha P. Dutta - San Jose CA
Dalibor F. Vrsalovic - Sunnyvale CA

ATT Corp. - New York NY

G06F 1516

709227, 709224, 709225, 709229, 713151, 713164, 713201

A system and method for loading a filtering rule at a firewall. A firewall receives a packet and determines if a rule that pertains to the packet is loaded at the firewall. If a pertinent rule is found, it is implemented and the action prescribed by the rule for the packet is performed. If no pertinent rule is found, then a pertinent rule is retrieved from a source external to the firewall, and loaded at the firewall. The rule is then implemented for the packet. After the rule expires, e. g. , when the user logs off, the rule is deleted from the firewall.

20030005090, Jan 2, 2003

Jun 30, 2001

09/895999

Robert Sullivan - Pleasanton CA, US
Dalibor Vrsalovic - Sunnyvale CA, US
Muhamed Aganagic - San Jose CA, US

G06F015/177

709/220000

An integrated internetworking architecture for automating the configuration and control of networks that operate according to standard layered protocols. The described architecture includes two major blocks: (1) a network; and (2) a controller coupled to the network that automatically configures the network by coordinating different resources to perform an action, such as providing an e-commerce shopping service. The controller may operate at a layer above the standard network protocols so as to abstract away the visible complexity of the network, thus allowing a human user to control, configure and operate the network as if it were a single host (e.g., computer) via a simple user interface. A tool set may also be provided to simulate and evaluate the interaction of the various networked components using the properties and provisioning information maintained within the controller.

61733644, Jan 9, 2001

Jan 15, 1997

8/783180

Daniel N. Zenchelsky - San Jose CA
Partha P. Dutta - San Jose CA
Thomas B. London - Mountain View CA
Dalibor F. Vrsalovic - Sunnyvale CA
Karl Andres Siil - Montgomery Township, Somerset County NJ

AT&T Corp. - New York NY

G06F 1200
G06F 1300

711118

A cache for use with a network filter that receives, stores and ejects local rule bases dynamically. The cache stores a rule that was derived from a rule base in the filter. The cache rule is associated in the cache with a rule base indicator indicating from which rule base the cache rule was derived, and a rule base version number indicating the version of the rule base from which the cache rule was derived. When the filter receives a packet, the cache is searched for a rule applicable to a received packet. If no such rule is found, the filter rule base is found, and an applicable rule is carried out and copied to the cache along with a rule base indicator and version number. If a cache rule is found, it is implemented if its version number matches the version number of the rule base from which it was derived. Otherwise, the cache rule is deleted. The cache provides an efficient way of accurately implementing the rules of a dynamic rule base without having to search the entire rule base for each packet.

61548111, Nov 28, 2000

Dec 4, 1998

9/204343

Sinisa Srbljic - Velika Gorica, HR
Partha P. Dutta - San Jose CA
Thomas B. London - Mountain View CA
Dalibor F. Vrsalovic - Sunnyvale CA
John J. Chiang - San Francisco CA

AT&T Corp. - New York NY

G06F 1200

711118

A scalable distributed caching system on a network receives a request for a data object from a user. The caching system carries out a locator function that locates a directory cache for the object. The directory cache stores a directory list that identifies the locations of object caches that purport to store copies of the object requested by the user. The object caches on the object directory list are polled, and in response send messages to the cache that received the user request indicating if each object cache stores a copy of the requested object. The receiving cache sends a message requesting a copy of the object to the object cache that sent the message first received by the receiving cache indicating that an object cache stores the requested object. The object cache that sent the first received message then sends a copy of the object to the receiving cache, which stores a copy and then sends a copy to the user. The directory list for the object is then updated by adding the network address of the receiving cache.

6233686, May 15, 2001

Jan 17, 1997

8/785501

Daniel N. Zenchelsky - San Jose CA
Partha P. Dutta - San Jose CA
Thomas B. London - Mountain View CA
Dalibor F. Vrsalovic - Sunnyvale CA
Karl Andres Siil - Montgomery Township, Somerset County NJ

AT & T Corp. - New York NY

G06F 1300

713201

A system and method for providing peer-level access control on networks that carry packets of information, each packet having a 5-tuple having a source and destination address, a source and destination port, and a protocol identifier. The local rule base of a peer is dynamically loaded into a filter when the peer is authenticated, and ejected when the peer is loses authentication. The local rule base is efficiently searched through the use of hash tables wherein a hashed peer network address serves as a pointer the peer's local rules. Each rule comprises a 5-tuple and an action. The action of a rule is carried out on a packet when the 5-tuple of the rule corresponds to the 5-tuple of the packet.

59338490, Aug 3, 1999

Apr 10, 1997

8/827763

Sinisa Srbljic - Velika Gorica, HR
Partha P. Dutta - San Jose CA
Thomas B. London - Mountain View CA
Dalibor F. Vrsalovic - Sunnyvale CA
John J. Chiang - San Francisco CA

AT&T Corp - Middletown NJ

G06F 1200

711118

A scalable distributed caching system on a network receives a request for a data object from a user. The caching system carries out a locator function that locates a directory cache for the object. The directory cache stores a directory list that identifies the locations of object caches that purport to store copies of the object requested by the user. The object caches on the object directory list are polled, and in response send messages to the cache that received the user request indicating if each object cache stores a copy of the requested object. The receiving cache sends a message requesting a copy of the object to the object cache that sent the message first received by the receiving cache indicating that an object cache stores the requested object. The object cache that sent the first received message then sends a copy of the object to the receiving cache, which stores a copy and then sends a copy to the user. The directory list for the object is then updated by adding the network address of the receiving cache.