Abstract: Systems for enhancing the sensitivity of detecting an optical signal using nonlinear optics and method of performing the same. In one embodiment, a single-photon detection system includes an optical amplifier realized in a waveguide, and a photodetector coupled to an output of the optical amplifier. A light detection and ranging system includes the optical amplifier coupled to an optical source and one photodetector. In another embodiment, a photodetection system includes a plurality of optical frequency converters, coupled to an optical source, that sequentially convert a wavelength of photons of the optical source to a final wavelength, and a single-photon photodetector coupled to the optical frequency converters to detect single photons produced by the optical source. In another embodiment, an optical sensor includes an optical pump, and a transducer including an optical ring cavity coupled to the optical pump and configured to utilize optical four-wave mixing to detect an external stimulus.

Abstract: Systems for enhancing the sensitivity of detecting an optical signal using nonlinear optics and method of performing the same. In one embodiment, a single-photon detection system includes an optical amplifier realized in a waveguide, and a photodetector coupled to an output of the optical amplifier. A light detection and ranging system includes the optical amplifier coupled to an optical source and one photodetector. In another embodiment, a photodetection system includes a plurality of optical frequency converters, coupled to an optical source, that sequentially convert a wavelength of photons of the optical source to a final wavelength, and a single-photon photodetector coupled to the optical frequency converters to detect single photons produced by the optical source. In another embodiment, an optical sensor includes an optical pump, and a transducer including an optical ring cavity coupled to the optical pump and configured to utilize optical four-wave mixing to detect an external stimulus.

Abstract: Systems for enhancing the sensitivity of detecting an optical signal using nonlinear optics and method of performing the same. In one embodiment, a single-photon detection system includes an optical amplifier realized in a waveguide, and a photodetector coupled to an output of the optical amplifier. A light detection and ranging system includes the optical amplifier coupled to an optical source and one photodetector. In another embodiment, a photodetection system includes a plurality of optical frequency converters, coupled to an optical source, that sequentially convert a wavelength of photons of the optical source to a final wavelength, and a single-photon photodetector coupled to the optical frequency converters to detect single photons produced by the optical source. In another embodiment, an optical sensor includes an optical pump, and a transducer including an optical ring cavity coupled to the optical pump and configured to utilize optical four-wave mixing to detect an external stimulus.

Abstract: An on-demand method of routing data between a plurality of local peer groups (LPG) of plural moving nodes comprises transmitting a route request message from a source node, relaying the route request message to a native boundary node; forwarding the route request message to a foreign boundary node, determining if the destination node is within an LPG for the foreign boundary node; relaying the route request message to another boundary node if the destination node is not within the LPG, relaying the route request message to the destination node if the destination node is within the LPG, receiving the routing request message at the destination node, transmitting a routing response to the source node, relaying the routing response to the source node through a path discovered by the route request, receiving the routing response at the source node, and transmitting the data, upon receipt of the routing response.

Abstract: An obfuscated network traffic server is operative to generate obfuscated network traffic. The obfuscated network traffic server maintains the relationship between extracted application content and extracted network header content such that the obfuscated network traffic is indistinguishable from the monitored network traffic. The obfuscated network traffic server may include a network monitor operative to monitor network traffic and to extract application content and network header content from the monitored network traffic. The obfuscated network traffic server may also include a data masking processor operative to mask a portion of the separated application content and/or the separated network header content. The obfuscated network traffic server may further include a masking attribute selector operative to specify the attributes of the application content and/or the network header content that is to be masked.

Abstract: In some embodiments, a personal possession management system using a short range Internet Protocol (IP) based Personal Area Network (PAN) comprises a master device MD to be worn or held by a user, and an IP based RFID electronic tag ET to be attached to or contained within a personal possession desired to be managed. The electronic tag ET has communicability with the master device. The master device MD is configured to allot an IP address to the electronic tag ET in a registration mode using IEEE 802.11 protocols and sends probes to the electronic tag ET. The electronic tag ET is configured to receive messages from the master device MD and respond accordingly. The master device MD alerts a user when the communicability between the master device MD and the electronic tag Er is disrupted in a monitoring mode.

Abstract: The invention disclosed here is aimed at enabling a trusted third party to manage user opt-ins which would enable growth of personalized information services, that is, enabling trusted business relationships between three types of entities—an end-user, an information source/provider, and an application service provider/developer—so that they can have a controlled, secure and private exchange of sensitive and/or confidential information. The inventive system has modes of operation recommended based on various conditions, enabling a secure exchange of private information between personal information repository owners and application services providers to enable deliver of personalized services. One mode is Durable Subscription Management, which is used when per transaction approval is not needed, that is, when an end-user has given permission to access data for a given or predefined period of time.

Abstract: A mobile device includes: multiple interfaces that are configured to support a various access technology such as 3G or Wi-Fi etc. A public land mobile network (PLMN) selector that generates a list for each of the PLMN networks that provide coverage to the mobile device. A PLMN selection policy parameter that is set to True or False to allow or prohibit the selection of PLMN networks by the mobile device based on the generated list where the generated list includes information as to different access technologies and selection priorities supported on the PLMN access networks providing coverage to the mobile device. In particular, when the PLMN selection policy parameter is set to True, multiple PLMN registrations are allowed; and when the A PLMN selection policy parameter is set to False, multiple PLMN registrations are prohibited.

Abstract: A mechanism by which handoff delay can be minimized while not compromising the IMS/MMD security and also protecting the media if required by certain applications is presented. One proactive method includes proactive authentication. Another proactive method includes proactive security association, such as transferring SA keys from old proxy to new proxy, or transferring keys through serving signal entities. Reactive methods include transferring SA keys from old proxy to new proxy, using either push or pull technology. Other reactive methods include transferring keys through serving signal entities using either push or pull technology.

Abstract: A directional notch filter for simultaneous transmit and receive of wideband signals comprises an antenna, an antenna match, a receiver, a power combiner, a first directional coupler, a second directional coupler and a shaping filter accepting a signal and producing a compensation signal as a replica of an antenna reflection transfer function, wherein the first and second directional couplers produce signals and portions of signals received by the antenna and sent to the receiver via the power combiner. The receiver can produce a receiver signal and the first directional coupler can produce a first signal as a portion of an overall signal received by the antenna, the first signal comprising at least reflection of a signal from the power amplifier and the second directional coupler samples a small portion of the receiver signal, said second directional coupler producing a second signal.

Abstract: An inventive system and method for creating source profiles to detect spoofed traffic comprises obtaining a routing path for data to traverse nodes using traffic profiles, each routing path comprising at least a target AS, initializing one or more AS sets with last hop ASes, enhancing the AS sets by connecting the AS sets to routers, for each enhanced AS set, filtering observed traffic flows, and using the filtered flows to associate enhanced AS sets with network monitoring points to create the source profiles. In one aspect, filtering flows comprise TCP session filtering and/or destination bogon filtering. In one aspect, the routers are border gateway protocol routers. In one aspect, the last hop ASes are one hop away from the target AS.

Abstract: Changes in a signal are detected. The signal is repeatedly sampled in a synchronous manner during a predetermined interval to generate a captured eye diagram. At least one of a positive differential eye diagram or a negative differential eye diagram is generated from the captured eye diagram and a baseline eye diagram. The at least one positive or negative differential eye diagram is analyzed to determine whether a change in signal conditions is present.

Abstract: Fault-tolerant multicast networks via network coding comprises a digital signal operator that combines data signals multicast from multiple sources and transmits the combined data signal via a link to the next or destination node. In one aspect, the digital signal operator includes an exclusive-OR operator that performs a Boolean exclusive-OR function on the received bit streams of the multicast data from the plurality of sources.

Abstract: In some of the preferred embodiments, a method for network discovery of a mobile device to use at least one of a plurality of access networks within an IP network includes: obtaining specified network information in the vicinity of a given location based on a set of criteria when a mobile is connected to the IP network from any location.

Abstract: A method, an apparatus and a program for detecting spoofed Internet Protocol (IP) traffic directed to a network having a plurality of autonomous systems (AS) is provided. The method comprises receiving an incoming packet through an AS, the incoming packet containing a source IP address and a destination IP address, acquiring a corresponding source and destination IP address prefixes, converting the corresponding source and destination IP address prefixes into a source AS number and a destination AS number, determining if the incoming packet arrived from an unexpected source based upon the corresponding destination IP address prefix and the converted source and destination AS number using an unexpected pair tuple table generated from network routing information and generating an alert indicating that the incoming packet is not allowed to enter the network.

Abstract: A single burst method is used to determine the available bandwidth in a network environment. A sending node transmits test packets to a receiving node. The size of the test packets is dynamically determining based on network parameters within the network environment. The sending node then receives test receipt packets that have the same sequence numbers as the corresponding test packets. Packet clusters are formed from the test receipt packets. The available bandwidth is determined based on the packet clusters along with values set by the single burst method or inputted by a user.

Abstract: A communication node operable to estimate faults in a mobile ad hoc network and method of performing the same. In one embodiment, the communication node includes a processor and memory including computer program code configured to, with the processor, cause the communication node to monitor a set of observable parameters at the communication node, produce a fault estimate at the communication node from the set of observable parameters, and provide the fault estimate to a global fault detector at another communication node.

Abstract: A method, simulator and program for simulating vehicular movement based upon user input parameters related to simulation topology and simulation vehicles including, but not limited to linear vehicular density. The simulator generates the simulation topology having a simulation area using the user input parameters, places a plurality of simulation vehicles within the simulation area at an initial placement using at least two input parameters related to simulation vehicle and the generated simulation topology; and determines movement of the plurality of simulation vehicles starting with the initial placement using a plurality of movement models. Each of the plurality of simulation vehicles has mobility characteristics generated using the plurality of movement models. When vehicle moves outside the simulation area, the vehicle re-emerges at a location within the simulation area. The vehicle re-emerges with new movement characteristics.

Abstract: According to some embodiments, a key management apparatus for deploying in a smart grid system adapted to receive metering data from smart meters connected to at least one relay via a network, includes: a key control mechanism that derives a key array of individual purpose specific keys from one master key such that the purpose specific key in the key array are each independent cryptographic keys for each specific usage in an application or for each application if there is only one specific usage in an application.

Abstract: Methods and systems used to plan, optimize, and manage LTE femtocell networks describes an analytical framework and algorithms that allow analysis and planning of various femtocell aspects including dynamic adjustment of femtocell power for interference mitigation, and optimization according to user selectable policies. The framework recommends using a hybrid of both distributed control and centralized policy enforcement. An algorithm having two closely related aspects is provided. The first part is an Iterative and Distributed Algorithm (IDA), which is intended to be executed inside the femtocells. The second part of the algorithm is intended to be used as a toolset and is called Analytic Computational Algorithm (ACA), which is intended to be used in a centralized planning and operations center. The ACA provides a set of conditions that are used to check for convergence of the IDA.