Juniper Networks Patent Applications

Content service aggregation system

Granted: May 15, 2008
Application Number: 20080114887
A network content service apparatus includes a set of compute elements adapted to perform a set of network services; and a switching fabric coupling compute elements in said set of compute elements. The set of network services includes firewall protection, Network Address Translation, Internet Protocol forwarding, bandwidth management, Secure Sockets Layer operations, Web caching, Web switching, and virtual private networking. Code operable on the compute elements enables the network…

Identification of potential network threats using a distributed threshold random walk

Granted: May 1, 2008
Application Number: 20080101234
In general, the invention is directed to techniques of identifying an infected network device in a computer network where traffic to and from the infected network device is not necessarily routed through a single point on the computer network. For example, individual line cards in network devices count incoming network flows from network devices in host tables. The host tables of all line cards of all participating network devices are then correlated. It is then determined whether the…

INTERNET TELEPHONE SYSTEM ENSURING COMMUNICATION QUALITY AND PATH SETTING METHOD

Granted: May 1, 2008
Application Number: 20080101583
An LSP control unit checks whether or not there is a label switching path of a hundred to thousand times of a band necessary for transferring a VoIP packet between a pair of edge label switch routers in response to notification from a VoIP packet control unit. When there is not a label switching path between the edge label switch routers, the LSP control units establishes a label switching path between the pair of edge label switch routers. When there is a label switching path between…

Dynamic construction of label switching protocol interfaces

Granted: March 20, 2008
Application Number: 20080069110
Techniques are described for dynamically constructing a label switching protocol interface in a network device. For example, the techniques allow dynamic construction of a Multi-Protocol Label Switching (MPLS) interface. According to some embodiments, upon receiving a network communication from a subscriber, a network device determines whether the subscriber requires support for the label switching protocol. If the subscriber requires such support, the network device creates an interface…

HIERARCHICAL POLICERS FOR ENFORCING DIFFERENTIATED TRAFFIC BEHAVIOR

Granted: March 6, 2008
Application Number: 20080056268
A hierarchical traffic policer may include a first policer configured to pass first packets when a first condition is met. The first policer also may alter selection information within the passed first packets. A second policer may be configured to pass second packets when a second condition is met. The second policer may be further configured to pass all of the passed first packets from the first policer based on the altered selection information within the passed first packets.

SWITCHING SYSTEM

Granted: February 28, 2008
Application Number: 20080049756
An ATM switching system 1 is provided with an ATM switch 11, a reserved connection memory 12 for storing reserved connection information, a call history memory 13 for maintaining call histories of requests for connection from subscriber's terminal units 21 to 2n, and a call-signal processing section 15. The call-signal processing section 15 generates a request for connection with respect to a trunk ATM switching network 3 by the use of the call histories in the call history memory 13 in…

Dual AAL1 device and synchronization method used therewith

Granted: February 21, 2008
Application Number: 20080043753
Upon receipt of a synchronization request from the CPU, the AAL1 device of the act system causes its cell forming section to extract the allocation position information for the SAR-PDU payload about a particular time slot in the current frame and, via the synchronization information send/receive section, transfers the information to the AAL1 device of the standby system. The AAL1 device of the standby system causes its operation processing section to calculate the allocation position of…

MULTI-CHASSIS ROUTER WITH MULTIPLEXED OPTICAL INTERCONNECTS

Granted: February 21, 2008
Application Number: 20080044181
A multi-chassis network device includes a plurality of nodes that operate as a single device within the network and a switch fabric that forwards data plane packets between the plurality of nodes. The switch fabric includes a set of multiplexed optical interconnects coupling the nodes. For example, a multi-chassis router includes a plurality of routing nodes that operate as a single router within a network and a switch fabric that forwards packets between the plurality of routing nodes.…

METHOD AND APPARATUS FOR IMPLEMENTING A LAYER 3/LAYER 7 FIREWALL IN AN L2 DEVICE

Granted: February 7, 2008
Application Number: 20080034414
Methods and apparatus for transferring packets in a packet switched communication system. A system is provided that includes an L2 device including a controller determining for each packet received whether the received packet is to be inspected, an inspection device operable to inspect and filter packets identified by the controller including using a zone specific policy and an L2 controller for transferring inspected packets in accordance with L2 header information using L2 protocols.

Spoof checking within a label switching computer network

Granted: January 24, 2008
Application Number: 20080019358
A label switching router (LSR) is described that spoof checks Multi-protocol Label Switching (MPLS) packets to prevent malicious or inadvertent injection of MPLS packets within a label switched path (LSP). The LSR ensures that MPLS packets received from an upstream label switching router (LSR) contain labels that were advertised to that upstream LSR. A software module associated with a signaling protocol, such as the Resource Reservation Protocol (RSVP), the Label Distribution Protocol…

SYSTEM AND METHOD FOR INCREMENTAL AND CONTINUOUS DATA COMPRESSION

Granted: January 17, 2008
Application Number: 20080016246
A data compression system and method for that is capable of detecting and eliminating repeated phrases of variable length within a window of virtually unlimited size.

COMMUNICATION NETWORK DESIGN

Granted: January 10, 2008
Application Number: 20080008098
A communication network design circuit can derive a path and a necessary link capacity for multiple point communication service permitting arbitrary communication within a predetermined range of communication amount by providing traffic amount of data in-flowing through an ingress node and traffic amount of data flowing out through an egress node. The communication network designing circuit has setting means for setting a mathematical programming problem for deriving the multiple point…

USE OF GROUP POLL SCHEDULING FOR BROADBAND COMMUNICATION SYSTEMS

Granted: December 6, 2007
Application Number: 20070280291
A group poll mechanism (GPM) that schedules upstream bandwidth for cable modems by pointing a request opportunity normally reserved for a single service flow to more than one service flow. Essentially, instead of using the seldom-used poll requests one per service flow, this same request opportunity is pointed to multiple service flows. In such kind of a scheme the GPM gives the same mini-slot to multiple service flows. The GPM implements the use of place-holder SIDs and novel mapping of…

PPP TERMINATING EQUIPMENT, NETWORK EQUIPMENT AND METHOD OF RESPONDING TO LCP ECHO REQUIREMENT

Granted: October 18, 2007
Application Number: 20070242698
In a PPP terminating equipment 100 connected with a switch fabric and terminating PPP link, the PPP terminating equipment 100 has an LCP echo requirement detecting section 20 detecting whether or not a received packet is the LCP echo requirement packet, and an LCP echo response producing section 40 producing a response packet to the LCP echo requirement by rewriting the LCP header of the received LCP echo requirement packet. The PPP terminating equipment 100 thereby produces and returns…

BAND CONTROL SYSTEM FOR A DIGITAL SUBSCRIBER NETWORK AND BAND CONTROL METHOD TRANSFER

Granted: October 11, 2007
Application Number: 20070237178
A band control system for a digital subscriber line network in which a first apparatus and a second apparatus situated at a subscriber station and a center, respectively, are interconnected by a cable for interchanging at least a digital data signal with each other. The system may cause one of the first apparatus or the second apparatus to monitor receipt of signals from the other of the first apparatus or the second apparatus; send, based on a result of monitoring, a band variation…

SYSTEMS AND METHODS FOR PRESERVING THE ORDER OF DATA

Granted: September 20, 2007
Application Number: 20070220189
A device includes an input processing unit and an output processing unit. The input processing unit dispatches first data to one of a group of processing engines, records an identity of the one processing engine in a location in a first memory, reserves one or more corresponding locations in a second memory, causes the first data to be processed by the one processing engine, and stores the processed first data in one of the locations in the second memory. The output processing unit…

CONTROLLING NETWORK TRAFFIC

Granted: September 13, 2007
Application Number: 20070211634
In an ATM exchange, a cell transmission control section transmits an ATM cell to a transmission path of an ATM network. A traffic monitor monitors traffic of the cell transmissions. A statistical process section performs a temporal statistical process on the result of the traffic monitoring using a clock and a memory. A CAC produces an instruction for traffic control over a transmission terminal based on the result of the statistical process. A UPC controls traffic of a transmission path…

ASYNCHRONOUS TRANSFER MODE SWITCH

Granted: September 6, 2007
Application Number: 20070206499
The invention provides an ATM switch which realizes hierarchical shaping for each virtual channel and each virtual path with a simple configuration. Cells are sent from cell buffers of an ATM core switch by FIFO operation to output side connection information application sections of output side circuit interfaces. In each of the output side circuit interfaces, the output side connection information application section acquires connection information such as a service class based on an…

MPOA System and Its Shortcut Communication Control Method, and Shortcut Communication Control Program

Granted: August 30, 2007
Application Number: 20070201478
An MPOA system for establishing communication by using layer 3 protocol on an ATM network, in which data about the layer 3 address of a source of data packets is added to an address resolution request packet which is transmitted in order to establish a shortcut VCC toward a destination of the data packets in each communication node and hence transmitted to the destination, and in the case of accepting the address resolution request packets to be transmitted in order to establish the…

Dynamic building of VLAN interfaces based on subscriber information strings

Granted: August 23, 2007
Application Number: 20070195780
Techniques are described that allow a network device, such as a router, to dynamically build VLAN interfaces based on subscriber information strings included within packets. In particular, the network device comprises an interface controller and a forwarding controller, where the forwarding controller receives the packet over an Ethernet port and forwards the received packet to the interface controller. The packet includes both Ethernet tagging information and a subscriber information…