Abstract: An apparatus is provided that includes a processor configured to receive a captured traffic unit (CTU) intended for a network service, the CTU being one into which incoming traffic has been assembled based on a filter describing which incoming traffic to capture and how to assemble the respective incoming traffic into the CTU. The processor is also configured to determine whether to allow the CTU to pass to one or more applications configured to implement the respective network service based on a passlet including permissions to a particular user. The processor is further configured to instruct a firewall to allow the CTU to pass to the respective one or more applications or to reject the CTU based on the determination. In this regard, the processor is configured to perform the above functions under control of a security framework implemented in middleware between a user-level domain and a system-level domain.

Abstract: A mobile terminal includes a processor capable of operating a link manager. The link manager is capable of at least partially operating a wireless connection between the terminal and an access point in an active mode, where the access point is coupled to a network. The link manager is also capable of transitioning the connection from the active mode to a standby mode or hibernate mode. In this regard, transitioning the connection includes entering the mobile terminal in a power-saving mode of a bearer of the connection, such as a Bluetooth power-saving mode, and directing the access point to reduce traffic flowing from the network across the connection to the mobile terminal when the mobile terminal is otherwise capable of receiving the traffic.

Abstract: The invention relates to novel crystalline forms of (2R)-2-[(R)-(2-ethoxyphenoxy)-phenylmethyl]morpholine hydrochloride. In various embodiments, the novel crystalline forms may be substantially enantiopure. The preparation and characterization of the novel crystalline forms of (2R)-2-[(R)-(2-ethoxyphenoxy)-phenylmethyl]morpholine hydrochloride is also described. The invention also relates to pharmaceutical compositions containing novel crystalline forms of (2R)-2-[(R)-(2-ethoxyphenoxy)-phenylmethyl]morpholine hydrochloride, which are useful to treat and/or prevent various conditions such as nervous system and pain disorders.

Abstract: Peer-to-peer authentication involves generating an authenticatable, globally unique, peer-to-peer identifier to associate a device with a user identity. The user identity is associated with one or more peer devices of a user. The peer-to-peer identifier, together with authentication credentials of a legacy Internet service, is sent to an infrastructure authentication service. The legacy Internet service is capable of verifying the user identity based on the authentication credentials. Based on verification of the authentication credentials, a list of authenticatable, globally unique, peer-to-peer identifiers that bind the peer devices to the user identity is received from the infrastructure authentication service. A peer-to-peer identifier that binds the selected peer device to the user identity is received from a selected one of the peer devices, and the selected peer device authenticated as associated with the user identity based on receiving the respective peer-to-peer identifier.

Abstract: Using virtual devices with P2P groups involves sending a discovery record from a virtual device to an Internet-based broker. A registration message from the peer-to-peer group is received by the virtual device in response to the discovery record. The registration message is used to join the virtual device with the peer-to-peer group. The user is authorized via the Internet-based broker and the virtual device is joined with the peer-to-peer group based on the user authorization and the registration message. Services are then provided to the peer-to-peer group via the virtual device in accordance with the discovery record. The virtual device may include a wide-area network service that is modeled to act as a physical device of the peer-to-peer group.

Abstract: Provided are improved systems, nodes, and methods for enabling dynamic end-to-end (e2e) session-enhancing services for transport-level connections such as TCP-based connection sessions, thereby providing the communicating entities the ability to select, adjust, and control e2e session enhancing (e2e-SE) services before and during communications. Embodiments allow for dynamic negotiation and renegotiation of e2e session-enhancing services at establishment of and during the active course of communication sessions, such as at establishment of and during transparent e2e-SE services TCP connections. Embodiments may be used as part of any e2e session-enhancing services framework for mobile or wireless and wireline communications. End-to-end session-enhancing services can be dynamically added and removed according to the need of applications and existing and changing conditions without affecting the on-going communication and the applications running on both end nodes.

Abstract: An apparatus is provided that includes a processor configured to receive a captured traffic unit (CTU) intended for a network service, the CTU being one into which incoming traffic has been assembled based on a filter describing which incoming traffic to capture and how to assemble the respective incoming traffic into the CTU. The processor is also configured to determine whether to allow the CTU to pass to one or more applications configured to implement the respective network service based on a passlet including permissions to a particular user. The processor is further configured to instruct a firewall to allow the CTU to pass to the respective one or more applications or to reject the CTU based on the determination. In this regard, the processor is configured to perform the above functions under control of a security framework implemented in middleware between a user-level domain and a system-level domain.

Abstract: Secure resource discover in peer-to-peer networks involves creating a resource discovery record associated with a computing resource of a user device that is made available via the user device to peers of a peer-to-peer network. The resource discovery record describes the computing resource and may be independent of native service discovery mechanisms of the peer-to-peer network. An access right record is created that controls the ability of one or more contacts to gain access to the resource discovery record. The resource discovery record is sent to the one or more contacts via the peer-to-peer network. The one or more contacts can use the resource discovery record to access the computing resource via the peer-to-peer network in accordance with the access right record.

Abstract: Management of access control in wireless networks known as smart spaces includes a framework that presents non-expert users with a consistent and intuitive interaction mechanism to manage access to devices they own in the smart space without exposing to them the complexity of the underlying security infrastructure. Access control of devices in a network can include providing an interface between a user-level tool on a first device connected to a network and security components associated with the network, communicating a passlet between the user-level tool and the interface, verifying access permission at a second device on the network where access permissions are based on the passlet, and providing a response to the first device based on the verification of the access permission in the passlet. The passlet provides access permissions based on a particular user rather than a particular device.

Abstract: Provided are improved systems, nodes, and methods for enabling dynamic end-to-end (e2e) session-enhancing services for transport-level connections such as TCP-based connection sessions, thereby providing the communicating entities the ability to select, adjust, and control e2e session enhancing (e2e-SE) services before and during communications. Embodiments allow for dynamic negotiation and renegotiation of e2e session-enhancing services at establishment of and during the active course of communication sessions, such as at establishment of and during transparent e2e-SE services TCP connections. Embodiments may be used as part of any e2e session-enhancing services framework for mobile or wireless and wireline communications. End-to-end session-enhancing services can be dynamically added and removed according to the need of applications and existing and changing conditions without affecting the on-going communication and the applications running on both end nodes.

Abstract: A mobile terminal includes a processor capable of operating a link manager. The link manager is capable of at least partially operating a wireless connection between the terminal and an access point in an active mode, where the access point is coupled to a network. The link manager is also capable of transitioning the connection from the active mode to a standby mode or hibernate mode. In this regard, transitioning the connection includes entering the mobile terminal in a power-saving mode of a bearer of the connection, such as a Bluetooth power-saving mode, and directing the access point to reduce traffic flowing from the network across the connection to the mobile terminal when the mobile terminal is otherwise capable of receiving the traffic.

Abstract: A system (200) provides a network designer with a mechanism by which to quickly estimate the performance of a code division multiple access wireless communication network. The system (200) allows the designer to enter a group of network and sector parameters. Based on these parameters, the user can choose one of three methods depending on a desire for speed, accuracy, and generality of result. The system (200) determines the pilot strength and interference for each location in the network. The system (200) determines pilot strength to interference values for each location. The system (200) estimates the performance of the communication network using these determined values and accounting for user-defined network parameters.

Abstract: A system (200) provides a network designer with a mechanism by which to quickly optimize the load distribution in a wireless communication network (100) by iteratively modifying the pilot power settings within an analysis session. The system (200) determines a reverse interference level for the network (100). The system (200) then adjusts the pilot power level of each sector by an amount equal to the difference between a sector's reverse interference level and the network's reverse interference level. The system (200) assigns, based on the adjusted pilot power levels, each wireless device (140) in the network (100) to a sector.