Abstract: A method and apparatus for enhanced data storage in peer-to-peer (P2P) networks. Users subscribe to a P2P storage network that allows each user to store files on the storage network by swapping blocks of the user's files with blocks from storage of a peer, or peers, on the network. A user desiring to utilize the storage network for a certain data block must take back an equal, or substantially equal, storage block from another peer on the network thereby insuring no net change, or minimal net change, in total storage across the P2P storage network. In addition, the diffusion of data blocks throughout the storage network is employed whereby individual peers swap data blocks on a random basis thereby further enhancing the security of the swapped blocks from direct attacks.

Abstract: A method and apparatus for analyzing the perimeter security of communications networks. More particularly, information is identified which defines a particular communications network, e.g., an intranet, and identifying the connected hosts thereto. Utilizing such information, a determination is made with respect to identifying the routes that define the network. Utilizing the routing information, the connectivity of the hosts within the network, e.g., an intranet, is probed to ascertain the integrity of the network and thereby identifying potential security risks across the perimeter defense of the network.

Abstract: A method for location tracking on a distributed basis using multiple locations, which utilizes a pairwise application of distance constraints and vicinities for determining locations. The location of a particular node is represented by a group of points (as opposed to a single point) defined by the vicinity.

Abstract: A method and apparatus are disclosed wherein a battery comprises an electrode having at least one nanostructured surface. The nanostructured surface is disposed in a way such that an electrolyte fluid of the battery is prevented from contacting the electrode, thus preventing discharge of the battery when the battery is not in use. When a voltage is passed over the nanostructured surface, the electrolyte fluid is caused to penetrate the nanostructured surface and to contact the electrode, thus activating the battery. In one illustrative embodiment, the battery is an integrated part of an electronics package. In another embodiment, the battery is manufactured as a separate device and is then brought into contact with the electronics package. In yet another embodiment, the electronics package and an attached battery are disposed in a projectile that is used as a military targeting device.

Abstract: A clock recovery method is disclosed wherein the FIFO delay of data words and the phase difference between a data word and a receiver clock are used to time data transmissions from a transmitter. The phase difference between the data word and the receiver clock is determined by the offset of a word relative to a desired position in a storage buffer. The FIFO delay is determined either by measuring the difference between a read pointer and a write pointer in the FIFO or, alternatively, by calculating the difference between a timestamp of the time a data word entered the FIFO and the current time as the data word is read from the FIFO.

Abstract: A liquid electrical switch is disclosed that uses a plurality of droplets of conducting liquid to form an electrical path. In a first embodiment, at least a first voltage differential is used to create a separation distance between two droplets. The droplets are illustratively contained within a housing and surrounded by an immiscible, insulating liquid. In this embodiment, the at least a first voltage differential draws at least a portion of at least one of the droplets away from a second droplet, thus preventing electrical current from flowing from the at least one droplet to the second droplet. In another embodiment, the at least a first voltage differential is changed in a way such that at least one liquid droplet is made to come into contact with a second droplet, thus creating an electrical path between the two droplets.

Abstract: Duplicate processing at network operators is avoided by applying once-only processing at operators which are adjacent to either the source or destination host of a data packet. An operator is adjacent to a host if there exists a path between the operator and the host containing no other operators. In one embodiment, an operator determines that it is adjacent to a host if it receives a special broadcast data packet from the host. To ensure that no other operators receive the special broadcast data packet, the adjacent operator drops the packet. In another embodiment, operators determine whether they are adjacent to identified hosts by transmitting special ping packets to the hosts. If an operator receives a ping response from the host, the operator determines that it is adjacent to the host. To ensure that only adjacent operators receive ping responses, intervening operators drop special ping packets received from other operators.

Abstract: A method for executing distributed processes on garbage collecting virtual machines. More particularly, garbage collection is delivered as a function of certain timing variables such as the time until a process will require its next garbage collection cycle, process hibernation time, and the actual total garbage collection time per process. Advantageously, distributed application programs are executed on garbage collecting virtual machines without any adverse processing impact resulting from the garbage collection process.

Abstract: A method and apparatus for achieving relatively low compression ratios based on the realization of using a longer history and longer common strings of the input data stream as an initial evaluation of the input data prior to applying a particular compression process. More particularly, the input data is preprocessed by applying string-matching to the extract long common strings. The input data is divided into a series of blocks with each individual block having a uniform size, illustratively, 1000 characters in length. Further, a so-called fingerprint is computed and stored for each block. Thereafter, the input data stream is traversed and comparison is made between a particular set of character of the input stream and the computed fingerprints. In particular, the input stream is traversed as a function of a sliding window wherein the present window of characters of the input is compared to the computed fingerprints.

Abstract: A method and apparatus for protecting against network damage in next generation communications networks. More particularly, network safety is achieved using semantic restriction of higher level call processing protocol primitives coupled with dynamically programming the various network routing elements to enforce both connection control and rate control.

Abstract: A communications system for executing distributed processes on garbage collecting virtual machines. More particularly, distributed applications are providing using garbage collection delivered as a function of certain timing variables such as the time until a process will require its next garbage collection cycle, process hibernation time, and the actual total garbage collection time per process. Advantageously, distributed application programs are executed on garbage collecting virtual machines without any adverse processing impact resulting from the garbage collection process.

Abstract: A method and apparatus for compressing packets that enables inter-packet compression thereby achieving greater robustness and increased compression ratios without the deleterious effects, e.g., the effect of packet loss multiplying, of prior compression schemes. More particularly, a so-called acknowledgment scheme is employed in conjunction with the specific compression algorithm such that the transmitter, i.e., sender, can limit the history used by the compression algorithm to those packets that are correctly received. In particular, a vector identifying the packets used as the history is included in the compressed packet thereby enabling the receiver to reconstruct the packet history state necessary to decompress the packet. Advantageously, increased robustness and greater compression ratios are achieved independent of any particular one compression scheme.

Abstract: A high power combiner arrangement with improved isolation between input ports for high power applications. In particular, in accordance with high power combiner arrangement, power combining logic is combined with a series of isolators such that at least one isolator is inserted between each power source, i.e., a signal source, and a corresponding input port to the power combining logic. The number of isolators inserted is determined as a function of the isolation requirements of the overall application. Advantageously, the degree of isolation achieved by the high power combiner is directly proportional to the number of inserted isolators placed between each power source. Furthermore, the insertion of a number of high power circulators between each power source and the power combing logic facilitates the achievement of higher isolation between the power sources with minimal degradation in signal characteristics.

Abstract: A method and apparatus for controlling bit slips in a high-speed, two-way, communications channel. More particularly, the entire communications system, comprising, inter alia, a receiver, a transmitter and the physical communications channel is operated as a feedback loop. That is, the detection of bit slips is performed continuously in the receiver and a bit slip signal is generated that indicates the number of bit slips and the direction, i.e., forward or backward, of the bit slip. Thus, the bit slip signal is communicated to the transmitter and certain actions are performed to introduce bit adjustments in the bit stream to eliminate the effects of any future bit slips. The bit slip signal contains an indication of the number of bit slips which have occurred, the time between bit slips, and the direction of the slip. As a function of this information from the bit slip signal, bit adjustments are made in the communications stream to correct for the bit slips and mitigate any effect in future transmission.

Abstract: A technique for testing event driven software. In accordance with the technique, the source code of the event driven software is directly converted to an automation based model useful in verifying that the program code complies with the desired properties defined by the user. More particularly, the event driven system program code is translated into a target language for a particular model checker. Such a translation results in a model which contains statements directed at whether execution of the program code will affect the behavior of the event driven system. Thus, this model extraction process can be used as input to a logic model checker for determining whether event driven system complies with the desired correctness properties specified by the user. Advantageously, the model extraction process and application of the model checker occurs in a direct and dynamic fashion from the subject event driven system program code without the need for user intervention.

Abstract: An adaptive OCR technique for character classification and recognition without the input and use of ground truth derived from the image itself. A set of so-called stop words are employed for classifying symbols, e.g., characters, from any image. The stop words are identified independent of any particular image and are used for classification purposes across any set of images of the same language, e.g., English. Advantageously, an adaptive OCR method is realized without the requirement of the selection and inputting of ground truth from each individual image to be recognized.

Abstract: A method and apparatus for compressing packets that enables inter-packet compression thereby achieving greater robustness and increased compression ratios. More particularly, a variable-length coding is used in conjunction with maintaining a separate hash table for each packet. Further, the per-packet hash table indexes particular byte strings in the packet but does not index data in any other packet(s). That is, a respective separate hash table for each packet is employed wherein such hash table is constructed as the particular packet is compressed. As such, the respective hash table is encoded with the particular packet. Employing a per-packet hash table in combination with variable history state inter-packet compression provides for efficient and robust overall compression of the packets.

Abstract: A technique for determining whether particular clients within a computer network are universally configured in accordance with the desired network security features of the computer network. A probe is randomly inserted within incoming files, e.g., at a firewall in the computer network. The probe is configured as a function of a particular execution task, e.g. a known virus, such that in a properly configured client the probe will not execute and the firewall does not detect a security breach. However, if the client is misconfigured, i.e., not in compliance with the standard network security features, the probe will execute and trigger an alarm in the firewall indicating that the client is vulnerable to a security breach. Advantageously, a network security administrator can take appropriate action to correct those clients which are misconfigured.

Abstract: A type annotation technique such that expressions are assigned and annotated with types in such a way that types can be efficiently maintained during inference without new syntactic restrictions being placed on the expressions or underlying logic within the verification system. More particularly, in accordance with the technique, expressions, i.e. terms, are annotated using a particular labeling scheme such that, during verification, if an expression is annotated the verification may proceed without any additional type inference or type checking with regard to that expression.

Abstract: A technique for the delivering a client-based firewall. A firewall security device is configured for connecting to individual clients, e.g., personal computers, for providing firewall security measures directly to the client. The firewall security device is configured as a electronic dongle which is attached to an external communications port of the client, e.g., the parallel communications port. The incoming communications stream to the client from, e.g., public networks, is passed through the firewall security device. In this way, the firewall security device applies and delivers a set of standard network security measures thereby protecting the client from security breaches triggered by the communications stream received from the public network. Advantageously, the firewall is delivered directly by the client without intervention, use, or connection to a separate firewall server.