Abstract: Security attacks on network entities can be compensated for and reduced through insurance that modifies incentives. In one example, a virtual slice provider includes a secure and non-secure slice having resources to provide network access to users through a service provider. The secure slice is assigned a first security level and a non-secure slice is assigned a second lower security level. In one embodiment, the second slice is isolated from the first slice. The virtual slice provider also has a risk policy between the slice provider and the service provider to establish different rates charged to the service provider for access to the secure and non-secure slices and to provide different levels of payment to the service provider for losses resulting from a lack of security in each slice.

Abstract: A method and apparatus is disclosed herein for reducing at least one of both flicker and noise in video sequences. In one embodiment, the method comprises receiving an input video and performing operations to reduce one or both of noise and flicker in the input video using spatial and temporal processing.

Abstract: Embodiments of the present invention include a set of processes and systems for implementing a forward weight-adaptive over-complete transform of an image/video frame, an inverse weight-adaptive over-complete transform of an image/video frame, and fast and low-memory processes for performing the forward weight-adaptive over-complete transform, processing coefficients in the transform domain and performing the inverse weight-adaptive over-complete transform simultaneously.

Abstract: A method and apparatus is disclosed herein for using a language framework for composable programs. In one embodiment, the method comprises accessing active content having a software component embedded therein, where the software component has a plurality of components that together implement a work flow of a sequence of activities, the plurality of components representing one or more external services, one or more user interface controls and one or more inputs and output; executing the software component, including mediating communication between components using an information flow-based security model.

Abstract: A method and apparatus is disclosed herein for automated test input generation for web applications.

Abstract: A method and apparatus is disclosed herein for synchronized multi-link transmission in an ARQ-enabled multi-hop wireless network. In one embodiment, the method comprises performing pre-transmission of a packet to hops to enable a base station and the plurality of hops in the network to transmit the packet synchronously to one or more mobile stations in the wireless communication system; and performing one or more re-transmissions of the packet at a set of one or more hops forming a path in the network if time remaining before a synchronized transmission time for the path as a whole is greater than a threshold.

Abstract: The present invention provides methods for sending a digital message from a sender (606) to a recipient (608) in a public-key based cryptosystem comprising an authorizer (606). The authorizer can be a single entity (606) or comprise a hierarchical or distributed entity (602, 604a-604b). The present invention allows communication of messages by an efficient protocol, not involving key status queries or key escrow, where a message recipient (608) can decrypt a message from a message sender (606) only if the recipient (608) possesses up-to-date authority from the authorizer. The invention allows such communication in a system comprising a large number (e.g. millions) of users.

Abstract: Cryptographically Protected Prefixes (“CPPs”) are used to create IP addresses, preventing any correlation between a CPP IP address and a host's geographic location. An IP address is subdivided into address prefixes of multiple segments. Each segment is encrypted with a cryptographic key known only to a subset of routers in the access network domain (or Privacy Domain). Therefore, each router obtains the information it needs to forward a packet of information, but not any additional information.

Abstract: A method for location estimation employs filtering in both the radio signal domain and the space domain separately. The method filters raw values of the run-time radio signal measurements to reject distorted inputs. A region of confidence (RoC) is formed according to certain algorithms. Only location estimates falling within the RoC are considered for further processing. The location estimate candidates filtered by the RoC are put in a number of time-indexed bins. Each of the bins contains location estimate candidates obtained at similar times. A shortest route connecting a candidate from each bin is calculated to further improve the accuracy of the location estimation.

Abstract: The present invention provides a method and system for handoff in a wireless communication network. In one embodiment, a common handoff encryption key is generated by an authentication server and transmitted to a first access point and a second access point. The first access point transmits the handoff encryption key to a wireless terminal. The wireless terminal encrypts output data with the handoff encryption key. When the wireless terminal is associated with the second access point, the second access point decrypts data from the wireless terminal with the handoff encryption key. In a second embodiment, a handoff WEP key generation secret parameter is provided to a first and a second access point. Both access points generate a handoff WEP key as a function of the handoff WEP key generation secret parameter and an address of a wireless terminal. The first access point transmits the handoff WEP key to the wireless terminal.

Abstract: In an RF environment serviced by 802.11, Bluetooth (TM), or other network transmitters, or combinations, location-estimation methods and systems can advantageously use redundancy to refine an estimated location of an RF receiver. In one embodiment, a method for finding a receiver's location includes receiving signals from fixed transmitters, calculating preliminary location estimates, and combining the estimates using predetermined reference information on the RF environment. The reference information preferably includes minimum mean-squared error optimizing coefficients.

Abstract: A method of providing cross layer interaction in a mobile terminal is disclosed. The method comprises the steps of providing a common policy repository in the mobile terminal; providing a system policy decision point adapted to receive policies stored is the common policy repository; and providing a layer policy decision point implementing associated with a layer. A mobile terminal enabling cross layer interaction is also disclosed. The mobile terminal comprises a policy management tool; a policy repository tool coupled to the policy management tool and storing policies generated by the policy management tool; and a policy decision point coupled to the policy management tool and the policy decision point.

Abstract: A location update system for updating a location of a mobile terminal. The system includes a paging area with a mobile terminal present within the paging area, a domain area with the mobile terminal present within the domain area and a paging location update server that is communication with the mobile terminal and updates a location of the mobile terminal and updates the domain area.

Abstract: Disclosed herein are systems and methods for communicating a number of data flows on a single communications channel. In one embodiment, a method of communicating a number of data flows on a shared communications channel includes the acts of (1) calculating a set of optimum goodput rates for the data flows, in order to maximize a total utility of the data flows, (2) calculating a set of optimum throughput rates for the data flows based on the optimum goodput rates, and (3) transmitting the data flows on the shared communications channel with the optimized throughput rates. Optimization is preferably done using utility functions that indicate the utility of the data flows as a function of their goodput rates. The method can additionally block temporarily a transport layer of at least one of the data flows if the transport layer of that data flow is bottlenecked.

Abstract: A method of coordinating the handoff of a mobile carrier between a first access network and a second access network. The method including establishing a contract between a user of a mobile carrier and a hyper operator and attempting a hand off from a first access network that the mobile carrier is currently operating within to a second access network, wherein the attempting includes authenticating at the hyper operator only that the user may have access to the second access network via the contract. Handing off to the second access network if the authenticating is successful.

Abstract: The Multiprice Commerce Service includes a method of procuring transactions between a vendor and customers of a Hyper Operator. The Hyper Operator constructs a real-time varying sellers' function which is a representation of the willingness of the vendor to sell a product as a function of price. The customers detect a sell offer for the product and each transmits a maximum price that she is willing to pay. The Hyper Operator aggregates the buy offers, constructs a real-time varying buyers' function which continuously compares the buyers' function to the sellers' function and when a comparison yields a profit level that at least meets a predetermined target level specified by the vendor, consummates a sale of the product between a qualifying customer and the vendor, all sales of the product to different buyers being conducted by the Hyper Operator in a single aggregate transaction.

Abstract: One aspect of the present invention regards a method of coordinating the handoff of a mobile carrier between a first access network and a second access network, the method including handing off from a first access network that the mobile carrier is currently operating within to a second access network and building a physical access network topology based on the handing off without input from either the first access network or the second access network.

Abstract: The Hyper Advertising System includes a Hyper Operator that provides services for communication devices, customers who possess the devices, and vendors. The Hyper Operator receives advertisements from the vendors and uses a combination of data mining tools and a customer database, along with contextual information about subscribers, to generate acceptable recipients and transmit the advertisements to these recipients. Recipients forward the advertisement to other customers of the Hyper Operator known by the recipient to be possibly interested in the advertisement. The recipients who refer the advertisements to other customers are compensated.

Abstract: Improved variable dimension vector quantization-related (“VDVQ-related”) processes have been developed that provide quality improvements over known coding processes in codebook optimization and the quantization of harmonic magnitudes that can be applied to a broad range of distortion measures, including those that would involve inverting a singular matrix using known centroid computation techniques. The improved VDVQ-related processes improve the way in which actual codevectors are extracted from the codevectors of the codebook by redefining the index relationship and using interpolation to determine the actual codevector elements when the index relationship produces a non-integer value. Additionally, these processes improve the way in which codebooks are optimized using the principles of gradient-descent. These improved VDVQ-related processes can be implemented in various software and hardware implementations.

Abstract: A digital content provider, representing an author, provides copyright-protected digital content data and a metadata file appended to it for the electronic distribution of the digital content over a network. The electronic distribution metadata describes various data about the digital content such as the title, the author, the content provider, the royalty, and the redistribution parameters. A primary content receiver receiving the digital content and the metadata, generates and transmits a notice of completion based on the metadata parameters. Upon receipt, an electronic distribution management system within a service provider (xSP) provides fee assessment and proceeds distribution services.