Abstract: A virtual ad hoc network testbed provides the capability to instrument a testbed in order to support the execution of network-aware applications “as is.” Network aware applications are a special class of applications that interact with a network not only by using the network for communication purposes, but also configure or read the status of network devices. Local stack management provides the means to automatically construct standard APIs for accessing the information residing in a simulated or emulated network, and instantiate these APIs. The testbed is designed to bridge a standard management module (such as SNMP) and a simulation or emulation model, starting from a MIB module. The testbed uses CORBA as a communication means. The process is divided into two parts, agent side and model side.

Abstract: This present application relates to, among other things, novel techniques to evaluate and qualify multiple networking options. A device contains multiple network connectivity options, including but not limited to various wireless and wired technologies such as Wi-Fi, 3G, WiMAX, LTE, Ethernet, Bluetooth, UWB, WHDMI, etc. Each connectivity option can be evaluation and pre-qualified prior to the user selecting that mode of communication. This evaluation process takes into account both lower-layer information such as signal strength, bit error rates, SNR, interference, etc. but also network-layer information such as IP connectivity, and end-to-end path performance.

Abstract: A method for routing a multicast message comprising the steps of receiving a multicast message including at least a message, a source identifier, a sequence number, a time-to-live value and a multicast group destination, determining if the multicast group destination is in a multicast forwarding table, determining if the message has been previously received, adding the multicast message to the multicast forwarding table if it is determined that the multicast message has not been previously received, determining if a node that received the multicast message is a forwarding node; randomly setting a wait time for forwarding the multicast message; and forwarding the multicast message at the expiration of the wait time.

Abstract: A system and method for supporting mobile coalitions for entertainment comprises devices including a master device, a server having a multimedia service executable by the master device and modules operable to recommend formation of a coalition based on the service, invite the devices to participate in the coalition, set up the coalition by determining the devices to participate, launching on each device a link to the coalition, performing emulation of the coalition by streaming a portion of the service to each device until experience is satisfactory, and continuing by transmitting the service to the devices, capture interactions on the devices by users, the interactions comprising at least gestures, taps correlating to messages of quality of experience, adapt the coalition by managing user inputs conveying quality of experience, maintaining synchronization of the devices, and maintaining the service when one or more of the devices cease to participate, and terminate the coalition.

Abstract: A high data rate optical signal is inverse multiplexed into a multitude of lower-rate tributaries, each of which is coded by its unique OCDM code, and the combined coded tributaries are injected into a common phase scrambler. Coherent summation of these optically encoded tributaries pass through a shared phase or phase and frequency scrambler before exiting the secure location. The setting of the scrambler acts as the key. The authorized recipient with the correct key retrieves the ones and zeros of the several decoded signals.

Abstract: In some embodiments, a system and method for substantially real-time comparison of quality of interfaces by mobile devices over heterogeneous networks is disclosed. The method can be performed using a dynamic and rapid comparison by distributed hosts, using a minimal number of injected network packets, using minimal path quality metrics, which path quality metrics are independent of how a Qol is measured, and in a manner suitable for both wireline and wireless networks.

Abstract: Apparatus and methods of simultaneous transmission and reception in a single-antenna radio transceiver. The transceiver may be used, for instance, for communication between at least two terminals, by use of multiple intermediate recruited transceiver nodes. The recruited transceiver nodes receive a signal from a master mode, and then retransmit the signal to a receiver. The recruited transceiver nodes are designed to have reduced interference between the transmit channel and the received channel. In accordance with one aspect of the present application, embodiments can achieve more robust wireless communication between a transmitter and an over-the-horizon receiver. The robust wireless communication will have improved resistance to interference, including self-interference, and improved communication range.

Abstract: An open communication method between at least two sub-networks using a broker node. Each of the sub-networks has a different routable network addressing scheme. The method comprises receiving a packet for a specific application, the packet includes an application identifier, determining if the packet is to be relayed to another of the at least two sub-networks based upon the application identifier, determining if a node receiving the packet is a broker node, relaying the packet to a broker node if not a broker node and forwarding, by the broker node, the packet to at least one node in another of the at least two sub-networks. The node generating the packet communicates using a first of the at least two sub-networks. A broker node communicates using at least two of the at least two sub-networks via a corresponding routable network addressing schemes for each of the sub-networks.

Abstract: In Low Earth Orbit (LEO) satellite networks data routes for point to point and point to multipoint communication sessions in LEO satellite networks are determined by considering session bandwidth, priority, and the constantly changing terminal-satellite and satellite-satellite connectivity. Multiple routes are computed for a session to facilitate automatic adaptive rerouting by satellite payloads when they encounter network failures or congestion conditions.

Abstract: A system and method for secure data management is presented. The method comprises receiving a query, performing the query and obtaining answers to it, creating certain formulas representing the answers; and determining whether there is a minimum number of distinct models of these formulas conjoined with the relevant anonymity predicates along with previous answers and general background knowledge, and when that number of models does not exist, suppressing the answers. In one aspect, the method further comprises creating formulas encoding the information conveyed by the answer; and combining the formulas encoding the information with prior information.

Abstract: The design of telecommunication networks is such that there is provision of end-to-end path protection to multiple demands under a single link or node failure in the networks. Restoration routes are provided on Preconfigured Virtual Cycles (PVC's), where each demand is assigned one restoration route and specific restoration wavelengths on a segment of one cycle. Multiple demands may share restoration wavelengths, and the number of restoration wavelengths may vary among the PVC links. First, a plurality of candidate PVC's are generated where each demand may be assigned to multiple candidates. Assignment of demands with common failure scenarios are allowed, under certain conditions, to the same PVC. Next, a set of PVC's is selected from among the candidates, while minimizing total reserved restoration capacity and ensuring that all demands are protected. Next duplicate assignments are eliminated. Finally, conflicts of wavelength assignments are resolved. The invention focuses primarily on optical networks.

Abstract: A system and method for policy based management for a high security MANET comprises policy managers, each performing policy decision-making and policy enforcement using multiple policies, containers, each related to an application and each container having one policy manager, nodes, each having an infrastructure and at least one container, and dynamic community building blocks associating the containers having a same application, the containers being in different nodes, the associated containers maintained by the dynamic community building blocks on a secure network. Each container can define a security boundary around the node. Each container can be a lightweight virtual machine. The system can also have a special container having a policy manager only evaluating policies for conflicts. In one embodiment, a node can consist of multiple network devices and each network device is a container of its own.

Abstract: An inventive scheme for detecting parties responsible for repeated malicious activities in secure and anonymous communication is presented. The scheme comprises generating a pool of keys, distributing to and associating with each party a small number of keys chosen randomly from the pool, revoking a key when it is detected as used in a malicious activity, creating a set of parties associated with the revoked key, revoking additional keys randomly chosen among the keys not currently revoked, selecting new keys, and when a party requests an updated key, sending the updated key selected from among the new keys to the requesting party, wherein if an other malicious activity is detected, creating another set of the parties associated with the other malicious activity and identifying the parties in both sets. The steps of the inventive scheme are repeated until only one party is in the intersection set.

Abstract: A single step routing and wavelength assignment method and system for automated provisioning of services on DWDM networks is presented. This novel single step solution automates design and assignment of services in DWDM networks. For an automated provisioning platform that can handle the routing and wavelength assignment in a single step, the solution avoids reconfiguration of existing services. It also takes into consideration practical aspects of DWDM transponder availability at termination sites and regeneration sites along the selected route. The methodology includes iterative computation of common channel sets to avoid multiple shortest path computations for each of the wavelengths.

Abstract: A system and method for spammer host detection from network flow data profiles comprises constructing one or more cluster profiles and detecting spammer hosts. Construction cluster profiles comprises observing network flow data from one or more hosts; for each host, representing the network flow data associated with the host as a multidimensional vector; clustering the vectors of the hosts into the plurality of cluster profiles; annotating each cluster profile using at least one of black lists and white lists; and calculating a confidence in each cluster profile annotation. Detecting spammer hosts comprises observing the network flow data from a new host; representing the network flow data associated with the new host as a multidimensional vector, and placing the new multidimensional vector of the new host into one cluster profile of the one or more cluster profiles.

Abstract: A system for interactive media skimming and search on a device comprises a scene manager building a model of a 3D scene of a multimedia segment of the media visible on a screen of the device, facets of scene objects in the 3D scene are used to dynamically convey visual imagery as a texture from a multimedia source and maintaining a logical navigable relationship between the scene objects, the object facets and the multimedia segments, and further comprising an interaction manager, a user manager securely storing user information and preferences, a playback component initiating rough or high definition playback, a texturizer creating a 2D texture artifact from a set of the multimedia segments in the media for a 3D facet, a transformer transforming and modifying pixels, a cache and scene heuristics maintaining a set of 3D scenes comprising objects, object facets, a virtual camera, and positions of the objects.

Abstract: A method for maintaining a local peer group (LPG) for supporting communications among vehicles. The LPG is formed from a plurality of vehicles. Each vehicle is equipped with a wireless communications device. One of the vehicles is selected as a group header node (GH). The method comprises receiving periodically a heartbeat packet from the GH, the heartbeat packet including a maximum hop count, and a heartbeat cycle, forwarding the heartbeat packet until the maximum hop count is reached after waiting for a first random relay delay, which is less than a maximum allowable adjustable value, replying to the heartbeat packet with a membership report packet, forwarding a membership report packet towards the GH, and adding a vehicle that submitted the membership report packet to a LPG membership as a member node of the LPG if the membership report packet is new or updating information for a member node.

Abstract: An optical communications network incorporating photonic layer security, with secure key exchange without loss of data, and a method of operating the network are disclosed. The network comprises a transmit side and a receive side. The transmit side includes first and second scramblers and a transmit side switch; and the receive side includes first and second descramblers and a receive side switch. The scramblers use encryption keys to encrypt optical signals, and the descramblers use the encryption keys to decrypt the encrypted optical signals. The encryption keys can be updated randomly and at will by installing new encryption keys on the scramblers and descramblers, and the transmit side and receive side switches are synchronized so that all of the optical signals that are encrypted using a new or updated encryption key are decrypted using the same new or updated encryption key.

Abstract: A payload switching architecture for LEO satellite networks minimizes processing and storage requirements of payloads for deployment as small primary or secondary payloads, payloads perform only forwarding functions. Forwarding rules are provisioned in the payloads enabling them to reroute in case of failures or congestion without intervention from a ground station. Configuration rules are provisioned in the payloads enabling them to dynamically establish and remove interplane crosslinks without intervention from a ground station. The central network operations center on the ground computes forwarding rules and configuration rules for payloads and uploads the rules to the payloads.

Abstract: Network architecture configured for open communication between a plurality of sub-networks. Each of the plurality of sub-networks has a different routable network addressing scheme. The architecture includes at least one broker node adapted to communicate using at least two different routable network addressing schemes. The broker node comprises an identification management module configured to collect peer-application addresses for nodes currently accessing a specific application, the peer-application addresses being associated with a specific application, an address resolution module configured to map each of the peer-application addresses to a sub-network specific routable network address and a network coordination module configured to monitor and coordinate sub-network communication capabilities between the broker node and at least one other broker node and elect a primary broker node for each sub-network which the broker node and at least one other broker node is capable of communication.