Abstract: A set of certificate management methods designed to significantly reduce or eliminate reliance on infrastructure network connectivity after vehicles are sold uses techniques to support certificate management operations in order to reduce the frequency which vehicles need to communicate with the Certificate Authorities (CAs) and the amount of data that needs to be exchanged between vehicles and the CA. These methods include, for example, approaches to use one-way communications and vehicle-to-vehicle (V2V) communications to replace expired certificates, approaches to use one-way communications and V2V communications to replace revoked certificates, and use of a small subset of vehicles as proxies to help retrieve and distribute Certificate Revocation Lists (CRLs) and replacement certificates. The combination of these techniques leads to solutions that can eliminate the need for roadside infrastructure networks completely.

Abstract: Disclosed is an improved method and apparatus for estimating and applying a step size value for a least mean squares echo canceller. A power estimate of an excitation signal is compared to a reference power level to determine a shift adjustment. The shift adjustment is added to a reference shift amount to determine a shift amount. The product of an excitation signal and an error signal is then calculated and the product is stored in a memory register comprising a plurality of bits. The bits stored in the memory register are shifted either left or right based upon the shift amount. The shift adjustment may be based in part upon the ratio of the excitation signal power estimate and the reference power level.

Abstract: The present invention advantageously provides techniques to solve problems with combinatorial anonymous certificate management by addressing critical issues concerning its feasibility, scalability, and performance. Methods and procedures to manage IEEE 1609.2 anonymous and identifying cryptographic keys and certificates in the Vehicle Infrastructure Integration (VII) system are presented, along with methods for management of identifying and anonymous certificates in a partitioned Certificate Authority architecture designed to enhance vehicle privacy. Novel methods for vehicles to dynamically change an anonymous certificate for use while maintaining vehicle privacy are given. Refinements to basic combinatorial schemes are presented including probabilistic key replacement, rekey counter decrement, dynamic rekey threshold, geographic attack isolation and proofs of geographic position.

Abstract: The present invention advantageously provides a system and method for management of cryptographic keys and certificates for a plurality of vehicles. Each vehicle of the plurality of vehicles generates public/private key pairs, requests multiple time-distributed certificates, creates an encrypted identity, and surrenders expired certificates. An assigning authority receives the public/private key pairs, the request for multiple time-distributed certificates, the encrypted identity, and the expired certificates from said vehicle. The assigning authority authorizes the vehicle with an authorizing authority, validates the expired certificates, proves ownership, and distributes the requested time-distributed certificates to said vehicle. Validation can comprise checking expired certificates against misused, compromised and/or previously surrendered certificates.

Abstract: A set of certificate management methods designed to significantly reduce or eliminate reliance on infrastructure network connectivity after vehicles are sold uses techniques to support certificate management operations in order to reduce the frequency which vehicles need to communicate with the Certificate Authorities (CAs) and the amount of data that needs to be exchanged between vehicles and the CA. These methods include, for example, approaches to use one-way communications and vehicle-to-vehicle (V2V) communications to replace expired certificates, approaches to use one-way communications and V2V communications to replace revoked certificates, and use of a small subset of vehicles as proxies to help retrieve and distribute Certificate Revocation Lists (CRLs) and replacement certificates. The combination of these techniques leads to solutions that can eliminate the need for roadside infrastructure networks completely.

Abstract: A system and method is provided for managing digital certificates, the system including one or more a certificate authorities and a vehicle-bound digital certificate manager, the apparatus comprising: a mobile client having a wireless transceiver with internet protocol capabilities and a vehicle communication device; the client further including at least one processor and at least one non-transitory computer readable medium encoded with instructions, which when loaded on the at least one computer, establishes processes for information handling, comprising: establishing secure communications with a certificate authority to receive at least one of a Vehicle Identification Digital Certificate (“VIDC”), an Anonymous Vehicle digital Certificate (“AVDC”), and a Certificate Revocation Lists (“CRLs”); storage management of at least one of the VIDC, AVDCs, and CRLs; and forwarding of at least one of the VIDC, AVDCs, and CRLs received from the certificate authority to the digital certificate manager using the vehicle c

Abstract: Disclosed is an improved method and apparatus for estimating and applying a step size value for a least mean squares echo canceller. A power estimate of an excitation signal is compared to a reference power level to determine a shift adjustment. The shift adjustment is added to a reference shift amount to determine a shift amount. The product of an excitation signal and an error signal is then calculated and the product is stored in a memory register comprising a plurality of bits. The bits stored in the memory register are shifted either left or right based upon the shift amount. The shift adjustment may be based in part upon the ratio of the excitation signal power estimate and the reference power level.

Abstract: A message broadcast system is disclosed for quickly delivering a relatively large amount of content to customer premises devices. A dial-out voice server initiates a plurality of telephone calls to a plurality of telephone numbers associated with customer premises alerting devices. The dial-out server also transmits a control data signal to the alerting devices, which indicates an incoming voice message to the alerting devices. The customer premises devices are connected to the telecommunication network via a communication channel and are configured to continuously monitor the communication channel for the control data signal. In response to receipt of a control data signal, an alerting device automatically configures itself to receive the incoming voice message. After delivering the voice message to the alerting device, the dial-out voice server may disconnect and place another call.

Abstract: Disclosed is an improved method and apparatus for estimating and applying a step size value for a least mean squares echo canceller. A power estimate of an excitation signal is compared to a reference power level to determine a shift adjustment. The shift adjustment is added to a reference shift amount to determine a shift amount. The product of an excitation signal and an error signal is then calculated and the product is stored in a memory register comprising a plurality of bits. The bits stored in the memory register are shifted either left or right based upon the shift amount. The shift adjustment may be based in part upon the ratio of the excitation signal power estimate and the reference power level.

Abstract: A system and method for using networked mobile devices in a vehicle in a tightly integrated manner is presented. The vehicle has an OBE, a mobile device client, and vehicle components, and the mobile device has a mobile device proxy and applications, such that the mobile device client and the mobile device proxy communicate, enabling dynamic transfer of the applications to the OBE and execution of the applications on the mobile device and the OBE using the plurality of vehicle components at runtime. In one embodiment, the mobile device client and the mobile device proxy authenticate each other. The authentication can be performed using digital certificates. The mobile device client can communicate the vehicle components on the vehicle to the mobile device proxy. The mobile device client and the mobile device proxy can communicate using Bluetooth. The vehicle components can include dashboard displays, speakers, and voice I/O systems.

Abstract: The inventive system for providing strong security for UDP communications in networks comprises a server, a client, and a secure communication protocol wherein authentication of client and server, either unilaterally or mutually, is performed using identity based encryption, the secure communication protocol preserves privacy of the client, achieves significant bandwidth savings, and eliminates overheads associated with certificate management. VDTLS also enables session mobility across multiple IP domains through its session resumption capability.

Abstract: A method and system for public key infrastructure key and certificate management provides anonymity to certificate holders and protects the privacy of certificate holders from the compromise of a certificate authority. Functional separation is provided in the authorization of a certificate request and the assignment of certificates and key pairs. The authorizing certificate authority approves or denies each certificate request from a requestor whose identity is not made available to the assigning certificate authority. The assigning certificate authority, upon approval from the authorizing certificate authority, issues one or more certificates and optionally generates and provides the associated key pairs to the requester without disclosing these certificates and key pairs to the authorizing certificate authority.

Abstract: The present invention advantageously provides a system and method for management of cryptographic keys and certificates for a plurality of vehicles. Each vehicle of the plurality of vehicles generates public/private key pairs, requests multiple time-distributed certificates, creates an encrypted identity, and surrenders expired certificates. An assigning authority receives the public/private key pairs, the request for multiple time-distributed certificates, the encrypted identity, and the expired certificates from said vehicle. The assigning authority authorizes the vehicle with an authorizing authority, validates the expired certificates, proves ownership, and distributes the requested time-distributed certificates to said vehicle. Validation can comprise checking expired certificates against misused, compromised and/or previously surrendered certificates.

Abstract: The present invention advantageously provides techniques to solve problems with combinatorial anonymous certificate management by addressing critical issues concerning its feasibility, scalability, and performance. Methods and procedures to manage IEEE 1609.2 anonymous and identifying cryptographic keys and certificates in the Vehicle Infrastructure Integration (VII) system are presented, along with methods for management of identifying and anonymous certificates in a partitioned Certificate Authority architecture designed to enhance vehicle privacy. Novel methods for vehicles to dynamically change an anonymous certificate for use while maintaining vehicle privacy are given. Refinements to basic combinatorial schemes are presented including probabilistic key replacement, rekey counter decrement, dynamic rekey threshold, geographic attack isolation and proofs of geographic position.

Abstract: Disclosed is an improved method and apparatus for estimating and applying a step size value for a least mean squares echo canceller. A power estimate of an excitation signal is compared to a reference power level to determine a shift adjustment. The shift adjustment is added to a reference shift amount to determine a shift amount. The product of an excitation signal and an error signal is then calculated and the product is stored in a memory register comprising a plurality of bits. The bits stored in the memory register are shifted either left or right based upon the shift amount. The shift adjustment may be based in part upon the ratio of the excitation signal power estimate and the reference power level.

Abstract: PSTN and voice over packet telephony are integrated at a customer premises, thereby reducing the plurality of redundant user I/O devices on the desktop, simplifying management of multiple telephony interfaces, and interconnecting PSTN and VoP calls at the desktop. A desktop appliance interfaces to both the PSTN and a packet network and includes a single set of user I/O and user audio devices, analog telephony functionality, a digital interface, VoP telephony functionality, and a switching and bridging system for interconnecting/bridging the user devices, the PSTN, and the packet network. A desktop PC can also be incorporated with the appliance, the PC providing telephony applications and the appliance providing network connectivity for the PC. Similarly, the PC can provide network connectivity and telephony functionality, with the appliance integrating the PSTN and VoP calls.

Abstract: Methods and systems are disclosed for transferring service application data from a server to a subscriber device via the PSTN without establishing a call between the server and subscriber device and without the PSTN switching components having inherent knowledge as to the data content. The server defines a generic request message, which contains the service application data and data delivery instructions. This generic request message is delivered to the subscriber's terminating switch, which subsequently delivers the service application data to the subscriber based on the data delivery instructions. The terminating switch then defines a generic response message and delivers it to the server, informing the server as to status of the data delivery. Similarly, methods and systems are also taught for broadcasting data from a server to a plurality of devices via the PSTN.

Abstract: A message broadcast system is disclosed for quickly delivering a relatively large amount of content to customer premises devices. A dial-out voice server initiates a plurality of telephone calls to a plurality of telephone numbers associated with customer premises alerting devices. The dial-out server also transmits a control data signal to the alerting devices, which indicates an incoming voice message to the alerting devices. The customer premises devices are connected to the telecommunication network via a communication channel and are configured to continuously monitor the communication channel for the control data signal. In response to receipt of a control data signal, an alerting device automatically configures itself to receive the incoming voice message. After delivering the voice message to the alerting device, the dial-out voice server may disconnect and place another call.

Abstract: Reliably detecting voiceband signaling tones at a subscriber or network device in the presence of near-end and far-end speech occurs by eliminating, rather than balancing, near-end talk-off and by separately handling far-end talkoff and near-end talkdown. A tone detector is placed on the receive path of the device. One or more frequencies that comprise the tone to be detected by the tone detector are attenuated/removed from the near-end speech present on the send path of the device thereby preventing the near-end speech from talking-off the tone detector. Near-end talkdown and far-end talkoff are eliminated by utilizing two separate signal-to-guard ratios within the tone detector: a large signal-to-guard ratio to combat the effects of the far-end talkoff and a small signal-to-guard ratio to combat the effects of the near-end talkdown. The tone detector is switched between the two signal-to-guard ratios by predicting whether the near-end is speaking.

Abstract: Utility failures are automatically detected and potential causes for these failures are automatically located and identified without having to physically search a utility provider's network. Detection systems capable of monitoring utility status are located at each, or a subset, of the customer premises serviced by a utility provider. A monitoring system, capable of correlating the geographical location of the detection systems with the geographical location of the equipment that comprises the utility provider's network, is located at a utility provider and interconnects with the detection systems through a communications network. The monitoring system queries the detection systems to determine utility status and to subsequently locate an outage and deduce a possible cause for the outage. Detection systems can also be configured to automatically contact the monitoring system to report utility status.