Abstract: According to one embodiment of the present invention, there is provided a method of authorizing a computing device to access a network, comprising receiving authentication data including a user identifier from the computing device, determining whether approval to verify the authentication data is given, and where it is so determined, authorizing the device to access the network upon verification of the authentication data.

Abstract: A secured network is disclosed configured to carry data, comprising a plurality of network bubbles and a plurality of network control points, wherein each network bubble comprises one or more bubble partitions and each bubble partition comprises at least one networked device configured to transmit and receive data, and all of the network devices corresponding to at least one of the plurality of network bubbles have a common network security policy. At least one network control point, such as a router, is provided with a marker module arranged to mark outgoing packets with a label corresponding to the network bubble from which the packets originate that can be used to enforce the network security policy of the at least one network bubble.

Abstract: A method and apparatus is disclosed for distributing routing information between nodes in networks in which routing parameters from subnets are carried in the internal gateway protocol for use in routing decisions in an external gateway protocol.

Abstract: According to one embodiment of the present invention, there is provided a method of authorising a computing device to access a network, comprising receiving authentication data including a user identifier from the computing device, determining whether approval to verify the authentication data is given, and where it is so determined, authorising the device to access the network upon verification of the authentication data.

Abstract: A method and apparatus is disclosed for distributing routing information between nodes in networks in which routing parameters from subnets are carried in the internal gateway protocol for use in routing decisions in an external gateway protocol.

Abstract: A secured network is disclosed configured to carry data, comprising a plurality of network bubbles and a plurality of network control points, wherein each network bubble comprises one or more bubble partitions and each bubble partition comprises at least one networked device configured to transmit and receive data, and all of the network devices corresponding to at least one of the plurality of network bubbles have a common network security policy. At least one network control point, such as a router, is provided with a marker module arranged to mark outgoing packets with a label corresponding to the network bubble from which the packets originate that can be used to enforce the network security policy of the at least one network bubble.

Abstract: A control entity generates a set of control values for input to a processing entity that needs these control values for its proper working. The control entity can only generate the correct control values when enabled by an enabling entity, such as a smart card. The enabling and control entities each have a touch point word generator for respectively generating first and second identical successions of touch-point words. In addition, the enabling entity has a build-word generator for producing from each touch point word of the first succession, a corresponding build word having a value dependent on the value of the touch-point word concerned and its order position in the first succession. The enabling entity passes these build words to the control entity where they are used together with the corresponding touch point words of the second succession, to produce a series of command word values serving as the required control values.