Abstract: A method for generating a shared secret is disclosed. In an example embodiment, a sequence of data packets is transmitted from a first node to a second node. A packet error bitmap corresponding to packets in the sequence of packets that are received correctly in a first transmission attempt is generated at the second node. Further, the packet error bitmap is transmitted from the second node to the first node. Then, the first node and the second node separately mixes the packets received correctly in the first transmission attempt to generate the shared secret.

Abstract: Two-way (full-duplex) wireless communications. Various embodiments measure interference channels and provide for interference cancellation in both analog and digital domains to mitigate self-interference. The system supports multiple clients wherein new clients can join the network asynchronously, and also supports Multiple-Input Multiple-Output (MIMO) antennas.

Abstract: Two-way (full-duplex) wireless links in facilitating network management and improve network performance. Once aspect includes methods for network management using a high-throughput channel and a low-throughput channel. Other aspects include methods to facilitate practical realization and improve performance of some of the network information theoretic configurations, such as Space-Division Multiple Access (SDMA) in uplink and downlink, Interference Channel, and other forms of distributed collaborative signaling schemes. Another aspect includes methods to support cognitive wireless networks.

Abstract: A method includes receiving, from a server, a plurality of data packets at a wireless client device; identifying, by the wireless client device, receive times for the plurality of data packets; identifying, by the wireless client device, a first subset of the plurality of data packets having shorter delay times than a second subset of the plurality of data packets having higher delay times based on the received times; and mixing, by the wireless client device, a subset of the first plurality of data packets to generate an encryption key.

Abstract: Embodiments include a method for secure data storage including constructing an encryption key from a plurality of key elements, the constructing including distributing the plurality of key elements to a plurality of key maintenance entities, each of the plurality of key maintenance entities employing a plurality of independent safe guards for their respective key elements of the plurality of key elements; and requiring access to the plurality of key elements to construct the encryption key. The method includes receiving a subset of the plurality of key elements via a twice-encrypted communications channel; and regenerating the encryption key at the client node; and after encrypting data, deleting the subset of the plurality of key elements received over the twice-encrypted communications channel, retaining any of the plurality of key elements previously stored at the client node.

Abstract: A method and apparatus for (a) operating a first full-duplex transceiver to exchange radio-frequency signals with a second full-duplex transceiver, (b) determining at the first full-duplex transceiver that a residual self-interference signal exceeds a threshold, (c) in response to the determination that the residual self-interference signal exceeds the threshold, performing a self-training operation.

Abstract: A server performed method includes receiving, from a first device, a request for authentication by the server, wherein the request includes a unique identifier of the first device, and upon verifying that the unique identifier is registered at the server, sending a push notification to the first device and to a second device registered as associated with the first device. A first list of IDs of at least one wireless device within wireless communication range of the first device is received from the first device, and a second list of IDs of at least one wireless device within wireless communication range of the second device is received from the second device. The first and second list of IDs are compared to identify common IDs between the first list and the second list. Successful authentication of the first device is confirmed when at least one common ID is identified.

Abstract: Two-way (full-duplex) wireless communications. Various embodiments measure interference channels and provide for interference cancellation in both analog and digital domains to mitigate self-interference. The system supports multiple clients wherein new clients can join the network asynchronously, and also supports Multiple-Input Multiple-Output (MIMO) antennas.

Abstract: Embodiments include a method for secure data storage including constructing an encryption key from a plurality of key elements, the constructing including distributing the plurality of key elements to a plurality of key maintenance entities, each of the plurality of key maintenance entities employing a plurality of independent safe guards for their respective key elements of the plurality of key elements; and requiring access to the plurality of key elements to construct the encryption key. The method includes receiving a subset of the plurality of key elements via a twice-encrypted communications channel; and regenerating the encryption key at the client node; and after encrypting data, deleting the subset of the plurality of key elements received over the twice-encrypted communications channel, retaining any of the plurality of key elements previously stored at the client node.

Abstract: Two-way (full-duplex) wireless communications. Various embodiments measure interference channels and provide for interference cancellation in both analog and digital domains to mitigate self-interference. The system supports multiple clients wherein new clients can join the network asynchronously, and also supports Multiple-Input Multiple-Output (MIMO) antennas.

Abstract: A communication system where a central node (base-station or access point) communicates with multiple clients in its neighbourhood using transparent immediate beam-forming. Resource allocation and channel access is such that the central node does not necessarily know when each client starts its transmission. Receive beam-forming in such a system is not possible, as beam-forming coefficients for each client should be selected according to the particular channel realization from that client to the central node. Each client is detected early in its transmission cycle, based on either a signature that is part of the physical characteristics unique to that client, or based on a signature that is intentionally inserted in the clients' signal, and accordingly adjusts its beam-forming coefficients.

Abstract: A method performed by a server includes receiving, over a first communication link, an encrypted asymmetric key from a client device; receiving, over a first communication link, an encrypted asymmetric key from a client device; receiving, over a second communication link, authentication key data from an auxiliary device associated with the client device; recovering the asymmetric key by decrypting the encrypted asymmetric key using the authentication key data; and using the decrypted asymmetric key to exchange a further encrypted message with the client device.

Abstract: The methods and systems for amplify-and-forward (in-band) relaying relate to beamforming techniques including receive and transmit beamforming for reducing self-interference, and improving Signal-to-Noise Ratio (SNR), or Signal to Interference plus Noise Ratio (SINR), of an incoming signal (to be relayed). The incoming signal is amplified and retransmitted simultaneously with the incoming signal, and over the same frequency band as that of an incoming signal.

Abstract: Embodiments include a method for secure data storage including constructing an encryption key from a plurality of key elements, the constructing including distributing the plurality of key elements to a plurality of key maintenance entities, each of the plurality of key maintenance entities employing a plurality of independent safe guards for their respective key elements of the plurality of key elements; and requiring access to the plurality of key elements to construct the encryption key. The method includes receiving a subset of the plurality of key elements via a twice-encrypted communications channel; and regenerating the encryption key at the client node; and after encrypting data, deleting the subset of the plurality of key elements received over the twice-encrypted communications channel, retaining any of the plurality of key elements previously stored at the client node.

Abstract: Embodiments include method for authentication including interacting with a user by a server in real time to collect verification data for authentication by requiring the user to take an action in real time; comparing a detected reaction by the user in response to the requirement to take the action to a predetermined metric; and determining based on the comparison to the predetermined metric, whether to authenticate the user.

Abstract: Embodiments are directed to a method for encrypting data communications, including performing a stochastic procedure between a plurality of nodes, including at least a first node and a second node; collecting a measured outcome of the stochastic procedure, the measured outcome of the stochastic procedure providing a dependent random variable pair; and constructing an encryption key based on one or more correlations identified between at least a first random variable and a second random variable, the first and second random variables forming the dependent random variable pair.

Abstract: A method and system is disclosed for operating an in-band relay to receive and amplify an incoming radio frequency signal and forward the amplified radio frequency signal. Methods to improve isolation between receive and transmit front-ends are disclosed, enabling an increase in the amplification gain without causing oscillation. Methods for learning the impulse response of the self-interference channel, and methods to perform adaptive echo cancellation in the analog domain. In addition, methods for transmit and receive beamforming are presented that achieve two objectives: (1) Improve the signal-to-noise ratio of the relayed signal, thereby compensating for noise amplification. (2) Improve the isolation, thereby enabling to increase the relay gain without causing oscillation.

Abstract: A satellite communication terminal for a field environment includes: a broadband interface that creates a broadband link with a device in the field environment and that manages communication over the broadband link; a satellite antenna that creates a satellite backhaul link with a satellite in orbit; a satellite interface that manages communication over the satellite backhaul link; and a processor that controls a beam direction of the satellite antenna, performs broadband services on data exchanged with the device over the broadband link and the satellite backhaul link, and provides access to the exchanged data to the device.

Abstract: A transmitter (102,200) applies a dimensional transformation to preliminary digital drive signals representing symbols, thereby generating transformed digital drive signals (704) designed to represent each symbol using a plurality of first dimensions of an optical carrier (242), the first dimensions distributed over two or more timeslots. The preliminary digital drive signals are designed to represent each symbol using a plurality of second dimensions of the carrier, which differ from the first dimensions. Using the transformed signals, the transmitter generates (706) an optical signal (260). A receiver (102,300) receives (802) an optical signal (360) and determines received digital signals (804) corresponding to the first dimensions. The receiver applies an inverse dimensional transformation to the received digital signals to generate preliminary digital drive signal estimates (806) corresponding to the second dimensions, thereby permitting estimation of the symbols (808).

Abstract: An antenna system includes an array of antenna elements, each element including: one or more first terminals and second terminals that receive a vertically polarized wireless signal and a horizontally polarized wireless signal, respectively, at a radio frequency; a first signal combining circuit and a second signal combining circuit that combine the horizontally polarized wireless signal and the horizontally polarized wireless signal to obtain a combined vertically polarized signal and a combined horizontally polarized signal, respectively; a first frequency converting circuit and a second frequency converting circuit that convert the combined vertically polarized signal and the combined horizontally polarized signal to a baseband vertically polarized signal and a baseband horizontally polarized signal, respectively, at a frequency different from the radio frequency; a baseband processing circuit that combines the baseband vertically polarized signal and the baseband horizontally polarized signal after a 90°