Abstract: A translator is provided for translating predetermined portions of packet header information including an address of a data packet according to a cipher algorithm keyed by a cipher key derived by a key exchanger. A mapping device is also provided for mapping the address to a host table stored in memory. If the address does not match an entry in the host table, a security device is triggered.

Abstract: A system (105) determines a power level for transmitting to a neighboring node in a wireless network. The system (105) receives a message indicating a three-dimensional position and orientation of the neighboring node and a type of directional antenna of the neighboring node that transmitted the message. The system (105) determines the power level for transmitting to the neighboring node based on the three-dimensional position and orientation of the neighboring node and the type of the directional antenna.

Abstract: The systems and methods described herein include, among other things, processes for providing low latency packet transport in ad hoc networks. To this end, the systems, in certain embodiments, employ an architecture for communication nodes in MANETs, in which the delay introduced in “routing” or “relaying” the packet is reduced. In these systems invention, the data plane of the OSI stack at relay nodes is collapsed so that bits entering the node are re-energized “on-the-fly”, with only a brief pause. A transit key in each packet, inserted by the originator of the packet, is used to index into a transit table to determine one of three actions to perform—drop, keep, or retransmit the packet. A control plane determines, for each packet, whether it should be re-energized or not. The control algorithm ensures that only nodes along the path from the source to the destination re-energize (relay) the packet.

Abstract: This invention relates to systems and methods for communication in a wireless ad hoc network that employs multi-packet reception. The wireless network includes a transmitting node configured to transmit a control packet to a receiving node while other nodes within a transmission range of the transmitting node are involved in ongoing communication. The receiving node is configured to receive the control packet while simultaneously receiving a second packet from a second transmitting node, and to process the control packet without aborting the receiving of the second packet. Methods for transmitting and receiving multiple packets simultaneously are also presented.

Abstract: Systems and methods for locating the shooter of supersonic projectiles are described. The system uses at least five, preferably seven, spaced acoustic sensors. Sensor signals are detected for shockwaves and muzzle blast, wherein muzzle blast detection can be either incomplete coming from less than 4 sensor channels, or inconclusive due to lack of signal strength. Shooter range can be determined by an iterative computation and/or a genetic algorithm by minimizing a cost function that includes timing information from both shockwave and muzzle signal channels. Disambiguation is significantly improved over shockwave-only measurements.

Abstract: A system facilitates the visualization of a network having multiple nodes. The system collects information from at least one of the nodes (510). The information describes network operation over a period of time. The system then reconstructs the network operation for the time period from the collected information (520) and presents the reconstructed network operation to an operator (530-550).

Abstract: This invention provides satellite communication systems and methods that employ a satellite in MIMO communication with a geographically-distributed array of ground nodes. In an embodiment, the satellite communication system includes a MIMO satellite configured to receive first information at a higher bandwidth, process the first information into lower bandwidth signals, and relay the lower bandwidth signals using a satellite communication link. The geographically-separated ground nodes receive the lower bandwidth signals and transmit terrestrial signals using high-speed communication links. A central processing node receives the terrestrial signals over the high-speed communication links and combines the terrestrial signals to obtain the higher data rate signals.

Abstract: The disclosed systems and methods provide for the compression and decompression of packet headers. An uncompressed header can be compressed in size to form a smaller, compressed header, such that the compressed header can include values that can be used to re-produce the uncompressed header. A compressed header can include at least two such values. A first value of the at least two values can be computed based on a second, earlier uncompressed header and can be used to derive the uncompressed header. Similarly, a second value of the at least two values can be computed based on a third uncompressed header and can be used to derive the same uncompressed header. Accordingly, the uncompressed header can be derived based on the first value and the second uncompressed header, or based on the second value and the third uncompressed header. The uncompressed header, second uncompressed header, and third uncompressed header can be associated with different packets.

Abstract: A method and apparatus of performing power line sensing is presented. The method and apparatus includes a three-axial vector magnetic sensor for detecting a magnetic field radiated from a power line. An active isolation system is used to determine the effects of noise and other magnetic fields on the three-axial vector magnetic sensor. Power line status information is then determined from data received from the three-axial vector magnetic sensor and the active isolation system.

Abstract: A system constructs an OSPF-compatible virtual model of a multi-hop, multi-access packet radio network that includes a plurality of routers (120) and which includes its own private, internal routing system (150), in order to facilitate the incorporation of that packet radio network into an overall OSPF routing environment. The system determines a network graph identifying actual connectivity among the plurality of routers (120). The system constructs a virtual model (300) of the, wherein connectivity of the virtual model may be different than the actual connectivity of the network graph. The system represents the multi-hop, multi-access radio network in the virtual model as a set of multi-access links (305, 310), point-to-point links, AS-external routes, and area summary routes. The system employs the virtual model for routing purposes and advertises the virtual model to other OSPF routers for the same purpose.

Abstract: Techniques are disclosed for implementing wireless fallback of wireline service. Network interface units [405] may be installed in subscriber buildings in a residential or business neighborhood. The NIUs [405] may include a wireless transceiver [407] and a switch [410]. During normal operation, the switch provides the subscribers with wireline network connectivity. In the event of a local failure of the wireline connectivity, the NIUs may provide fallback network connectivity through the wireless transceiver [407], which communicates with other wireless transceivers installed at other local subscriber locations.

Abstract: A system to detect subsurface activity. The system employs vibration sensor pairs, with each sensor pair having a shallow sensor and a deep sensor. Outputs of the sensors of a pair are processed together and events are detected based on the relative values detected by the sensors of the pair. When signal energy departs from a detected background level, the relative amplitude and frequency content of vibrations measured at the shallow and deep sensors may be compared. The comparison may be performed, at least in part, using a classifier that discriminates between subsurface activity and surface to activity. The outputs of sensor pairs may be aggregated to make a determination of whether subsurface activity exists and/or its location. Aggregation may involve comparing the outputs of the same sensor pair at multiple time intervals or may involve comparing the outputs of arrayed sensor pairs.

Abstract: A method and apparatus is disclosed for increasing the security of computer networks through the use of an Intrusion and Misuse Deterrence System (IMDS) operating on the network. The IMDS is a system that creates a synthetic network complete with synthetic hosts and routers. It is comprised of a network server with associated application software that appears to be a legitimate portion of a real network to a network intruder. The IMDS consequently invites inquiry and entices the intruder away from the real network. Simulated services are configured to appear to be running on virtual clients with globally unique, class “C” IP addresses. Since there are no legitimate users of the virtual network simulated by the IMDS, all such activity must be inappropriate and can be treated as such. Consequently, the entire set of transactions by an intruder can be collected and identified rather than just those transactions that meet a predefined attack profile.

Abstract: The invention relates to a transport protocol and associated methods and stack architectures for improving the energy efficiency of transmitting packets through an ad hoc network. The protocol controls transmissions by taking into account per-packet energy limits, per-node loss tolerances, and/or minimum availability rates determined based on path quality measurements collected by packets traversing the network and application reliability requirements associated with various applications.

Abstract: A system facilitates communication among nodes in a wireless network. A timeslot is assigned to each of a group of nodes (201) in the wireless network (400, 800, 1200, 1300). The timeslot is a time for a corresponding node to receive messages transmitted by other nodes (201). A modulation scheme is assigned to each of the nodes (201). A message is transmitted from at least one of the nodes (201), using the assigned modulation scheme, to at least one destination node during a timeslot assigned to the at least one destination node. The messages are received at the at least one destination node from the at least one of the nodes (201).

Abstract: Disclosed are methods and systems for routing T-37 E-mail over an H 323 (VOIP) network. The methods and systems facilitate the obtaining and utilization of data from Gatekeepers with respect to the utilization of Gateways to be utilized to transmit the E-mail from the network over a conventional telephone network to the recipient. They thereby facilitate the choice of a Gateway which is less heavily utilized.

Abstract: A method (38) and system (56) evaluate the accuracy of an Automatic Location Identification (ALI) system (36) deployed within an environment (20) and configured to location a wireless communication device (24) originating an emergency call (22) through a wireless communication network (26). The method (38) includes a subprocesses that identify a validation region (144) in which a service area (106) of a public service answering point (PSAP) (32) and an RF coverage area (129) overlap, classify sub-regions within the validation region (144) according to a predetermined set of test scenarios (148) representing unique calling environments, and select test points (200) within the validation region (144) from which test calls, that simulate emergency calls, will be performed.

Abstract: Embodiments of the invention reduce the probability of success of a DOS attack on a node receiving packets by decreasing the probability of random collisions of packets sent by a malicious user with those sent by honest users. The probability of random collisions may be reduced in one class of embodiments of the invention by supplementing the identification field of the IP header of each transmitted packet with at least one bit from another field of the header. The probability of random collisions may be reduced in another class of embodiments of the invention by ensuring that packets sent from a transmitting IPsec node to a receiving IPsec node are not fragmented.

Abstract: Methods and systems can reduce the spread of computer files or data on a network by obtaining and tracking times of arrival for chunks of data transmitted on the network. The times of arrival for a node can be transformed into time-series and periodograms computed from the time-series. Successive periodograms can be compared to determine changes in the strongest peaks of the periodograms. If a new peak is identified, a search for the occurrence of the peak in previous periodograms can be conducted. If no peak having a matching frequency is found, a search for the peak in the periodograms for neighboring nodes can be performed. If matching peaks are found, the associated data stream can be classified. Predictions of the timing and length of associated data packets can be used to randomly interrupt transmission of associated data packets resulting in reducing the spread of the classified data stream.

Abstract: Devices and methods for securely storing data are provided. A device for constructing an encryption key comprising a tamper-protection barrier that encloses one or more memory devices is provided. The memory stores data for constructing the encryption key. The memory may include a single memory device or a plurality of memory devices. The tamper-protection barrier also encloses a security processor configured to combine the data stored in the memory based in part on a function, such as a logical exclusive-or (XOR) function, to construct the encryption key. The stored data in the memory may include partial keys. These partial keys may be created based in part on applying the XOR function to an encryption key.