Abstract: An electronic device that selectively approves secure access of a second electronic device to a network is described. This electronic device receives an access request associated with a computer, where the access request includes passphrase parameters associated with a user, and the passphrase parameters include inputs to and an output of a cryptographic calculation. In response, the electronic device calculates one or more second outputs of the cryptographic calculation based at least in part on the inputs and one or more stored passphrases. Moreover, when there is a match between one of the one or more second outputs and the output, the electronic device accesses a policy associated with the user. Then, when one or more criteria associated with the policy are met, the electronic device selectively provides an access acceptance message to the computer, which includes information for establishing the secure access of the second electronic device.

Abstract: In order to facilitate access to multiple networks, an electronic device may first authorize a portable electronic device to access a radio-access network associated with a network operator. In particular, the electronic device may provide a request with a first identifier for a portable electronic device to an authentication/authorization server for access to the radio-access network. After receiving first authorization information from the authentication/authorization server for the portable electronic device to access the radio-access network, the electronic device may provide a second request with a second identifier of the portable electronic device to a second server for access to a second network associated with the second server and an entity. Based on the subsequent response from the second server, the electronic device may provide access information to a radio node that allows the portable electronic device to access the radio-access network, or radio-access network and the second network.

Abstract: In order to facilitate access to multiple networks, an electronic device may first authorize a portable electronic device to access a radio-access network associated with a network operator. In particular, the electronic device may provide a request with a first identifier for a portable electronic device to an authentication/authorization server for access to the radio-access network. After receiving first authorization information from the authentication/authorization server for the portable electronic device to access the radio-access network, the electronic device may provide a second request with a second identifier of the portable electronic device to a second server for access to a second network associated with the second server and an entity. Based on the subsequent response from the second server, the electronic device may provide access information to a radio node that allows the portable electronic device to access the radio-access network, or radio-access network and the second network.

Abstract: A grid router includes a plurality of external interface units to receive packets of services from one point and to provide packets of services to another point and a second plurality of mailbox units to store and forward the packets associated with mailboxes, one per service. Each mailbox unit is connected to each external interface unit. The units are implemented on PCs (personal computers) having memory controllers and move the packets through the router close to or at the I/O (input/output) rate of the memory controllers.

Abstract: Method for operating an electronic network having a hardware layer and requiring network functions, involves virtualizing networking functions to virtual machines; using an addressing overlay above the hardware layer providing identities to the virtual machines and other network entities, the virtual machines being likely to move around different hardware components over the network, and the identities moving with the virtual machines; directing data flows around the network via the virtual machines using software defined flow mapping, the flows being directed among the virtual machines using the moving identities. The identities are mapped to the hardware locations of the virtual machines and the mapping is updated upon moving of the machine.

Abstract: A grid router includes a plurality of external interface units to receive packets of services from one point and to provide packets of services to another point and a second plurality of mailbox units to store and forward the packets associated with mailboxes, one per service. Each mailbox unit is connected to each external interface unit. The units are implemented on PCs (personal computers) having memory controllers and move the packets through the router close to or at the I/O (input/output) rate of the memory controllers.

Abstract: TCP Proxy apparatus for a wireless network section to a TCP-enabled network includes a latency aware unit for monitoring round trip time over the wireless access network section to determine latency within the access section; and a filter for filtering out momentary changes in the latency. Momentary fluctuations in the wireless connection causes instantaneous packet loss, which merely requires minimal packet retransmission, temporarily affecting latency. The filter ensures that such fluctuations do not activate the TCP congestion avoidance mechanisms and unnecessarily slow down the overall transmission rate.

Abstract: A grid router for routing packets and a network containing the same. The router comprises ingress units (IE), mailbox units (MU), and egress units (EU) connected in a structure of succeeding layers, said layered structure being segregated such that units in a given layer are connected only to a subset of units in a succeeding layer, wherein said grid router comprises a hashing unit for using a hashing function to direct incoming packets through said layers, and wherein said hashing function is configured to reinforce said segregation by directing packets arriving at a given unit in one layer only to units of a corresponding subset in said succeeding layer.

Abstract: A grid router for routing packets and a network containing the same. The router comprises ingress units (IE), mailbox units (MU), and egress units (EU) connected in a structure of succeeding layers, said layered structure being segregated such that units in a given layer are connected only to a subset of units in a succeeding layer, wherein said grid router comprises a hashing unit for using a hashing function to direct incoming packets through said layers, and wherein said hashing function is configured to reinforce said segregation by directing packets arriving at a given unit in one layer only to units of a corresponding subset in said succeeding layer.

Abstract: A grid router includes a plurality of external interface units to receive packets of services from one point and to provide packets of services to another point and a second plurality of mailbox units to store and forward the packets associated with mailboxes, one per service. Each mailbox unit is connected to each external interface unit. The units are implemented on PCs (personal computers) having memory controllers and move the packets through the router close to or at the IPO (input/output) rate of the memory controllers.