Abstract: An apparatus, system and method are introduced for preserving privacy of data in a dataset in a database with a number n of entries. In one embodiment, the apparatus includes memory including computer program code configured to, with a processor, cause the apparatus to form a random matrix of dimension m by n, wherein m is less than n, operate on the dataset with the random matrix to produce a compressed dataset, form a pseudoinverse of the random matrix, and operate on the dataset with the pseudoinverse of the random matrix to produce a decompressed dataset.

Abstract: In a distributed management scheme for LEO satellite networks interactions between a satellite and the designated fixed center occur according to a time schedule and only when the designated center is in the coverage area of the payload. For exception/alarm reporting and real-time configuration updates the interaction varies with time. Interactions of this type occur between a satellite and the management center that is “nearest” to the payload or satellite at the time instant at which the network event occurs or configuration upload is needed. The nearest management center for a payload is the center that can be reached from the payload with fewest number of crosslink hops. A central network operation center determines, prior to payload launch, the association between satellites and management centers for routine information exchange, and the nearest management center for the payload for different snapshots of time.

Abstract: A method for determining a transmission channel for multi-hop transmission of a data packet from a plurality of data channels in an ad-hoc network. The network includes at least one local peer group. Each local peer group has a plurality of moving vehicles as nodes. The method comprises steps of determining available channels for data packet transmission at each node, transmitting a first list of available channels to at least one other node, receiving, from the at least one other node, a second list of available channel for the at least one other node, creating an available channel table including the first and second lists of available channels, selecting a transmitting channel for a data packet based upon information in the available channel table, and advertising the selected channel to the at least one other node.

Abstract: A method and system for public key infrastructure key and certificate management provides anonymity to certificate holders and protects the privacy of certificate holders from the compromise of a certificate authority. Functional separation is provided in the authorization of a certificate request and the assignment of certificates and key pairs. The authorizing certificate authority approves or denies each certificate request from a requestor whose identity is not made available to the assigning certificate authority. The assigning certificate authority, upon approval from the authorizing certificate authority, issues one or more certificates and optionally generates and provides the associated key pairs to the requester without disclosing these certificates and key pairs to the authorizing certificate authority.

Abstract: A system and method for spammer host detection from network flow data profiles comprises constructing one or more cluster profiles and detecting spammer hosts. Construction cluster profiles comprises observing network flow data from one or more hosts; for each host, representing the network flow data associated with the host as a multidimensional vector; clustering the vectors of the hosts into the plurality of cluster profiles; annotating each cluster profile using at least one of black lists and white lists; and calculating a confidence in each cluster profile annotation. Detecting spammer hosts comprises observing the network flow data from a new host; representing the network flow data associated with the new host as a multidimensional vector, and placing the new multidimensional vector of the new host into one cluster profile of the one or more cluster profiles.

Abstract: An inventive system and method for creating source profiles to detect spoofed traffic comprises obtaining a routing path for data to traverse nodes using traffic profiles, each routing path comprising at least a target AS, initializing one or more AS sets with last hop ASes, enhancing the AS sets by connecting the AS sets to routers, for each enhanced AS set, filtering observed traffic flows, and using the filtered flows to associate enhanced AS sets with network monitoring points to create the source profiles. In one aspect, filtering flows comprise TCP session filtering and/or destination bogon filtering. In one aspect, the routers are border gateway protocol routers. In one aspect, the last hop ASes are one hop away from the target AS.

Abstract: A system and method are provided by which a wireless network service provider is able to provide and maintain a high level of quality of service for terminals in the corresponding network, by overcoming problems that result in a diminished quality of service, including handoff delays as terminals move between cells in a network and the uncertainly as to which cell the individual terminals are moving to as they roam within the network. Providing and maintaining a high level of quality of service in a wireless network includes recording a history of movements of a terminal within the wireless network, analyzing the movements of the terminal within the wireless network to compute a probability distribution of the terminal's target location, and allocating network resources, including bandwidth and priority scheme, to the terminal based on the probability distribution for the terminal.

Abstract: Methods for coordinating power usage and link adaptation in wireless communications are described. Terminals and/or access points (APs) may attempt to modify terminals' transmit power in relation to a desired communication data transfer rate. Link adoption may also be used in conjunction with the described methods.

Abstract: A system and method for mobility support of a mobile node having a home network in a heterogeneous roaming environment is presented. The method comprises the steps of authenticating the mobile node in a visited network and obtaining an address for the mobile node in the visited network, establishing a security connection between a functional component in the visited network and an agent in the home network, creating a home address for the mobile node, and using the home address to generate a SIP signaling address, a SIP media address, and a non-SIP media address, such that SIP non-media is transmitted using the security connection to the SIP signaling address, SIP media is transmitted using the security connection to the SIP media address, and non-SIP media is transmitted using the security connection to the non-SIP media address.

Abstract: A system and method for modeling and evaluating resource requirements of services is disclosed. The system and method in one aspect enable describing an application session in a software model, for example, as a sequence of events in a sequence diagram, annotating the sequence diagram with information and using the sequence diagram and the information to create a mathematical model such as a Markov model that represents the application session. Once in Markov form the service can be analyzed. The system may include a user interface for allowing a user to enter annotations to the sequence diagram.

Abstract: Method and system for improving personal productivity in home environments may store state information associated with an environment and one or more users in a knowledge base, detected activity of a user, infer location of the user based on the detected activity, and suggest one or more tasks to be performed based on the inferred user location.

Abstract: Various embodiments of the present invention relate to wireless network management. One specific example relates to efficient radio frequency (RF) spectrum management involving multiple mobile vehicles, whereby a system and/or a method of the invention achieves greatly improved spectral efficiency in the assignment of frequency bands to communications channels between the vehicles and/or stationary ground stations. Other examples of the present invention provide systems and methods to analyze the RF emissions resulting from the motion of transmitters and/or receivers through airspace with the help of five-dimensional quanta of space (x, y, z), time and frequency to assign frequency bands to test plans (including previously-validated test plan(s) and/or to-be-validated test plan(s)). In one specific example, the analysis is directed to the assignment of frequency bands with and without reuse.

Abstract: In an OCDM-based photonic encryption system by applying random noise on unused channels and varying the inter-code phases on realistic framing repetition, an OCDM-based encryption system with provable security guarantees results.

Abstract: Mobile wireless devices may receive data streams from multiple remote sensors. The sensors may have limited power supplies and memory capacity. Aspects of the invention use statistical characteristics of the sensor data streams and the cost of acquiring a single element of each stream to determine what sequence the sensors should send their data streams in. The cost of acquiring the data may be modified dynamically, depending on parameters such as block size. Additional factors, such as a sensor's buffer capacity, may limit the amount of stream elements that may be cached and affect the sensors' stream transmit sequence. The evaluation order may be dynamically modified using an event processing engine, to reflect both changing statistics of underlying sensor stream tuples and time-varying acquisition costs associated with individual streams. This helps to increase in the operational lifetime of the sensors and associated monitoring applications.

Abstract: A system and method for network selection procedures for simultaneous network connectivity through multiple accesses comprises obtaining stored and registered PLMNs, determining whether PLMNs are both stored PLMN for access technology type Ai and registered PLMN, when no PLMNs are both, performing PLMN selection using a standard procedure, when only one PLMN is both, determining whether the PLMN satisfies a condition, and when the PLMN satisfies the condition, attempting to connect to the PLMN, and when more than one PLMN is both, creating a set of PLMNs, selecting one PLMN that satisfies the condition, from the set PLMN, attempting to connect to the selected PLMN, and when attempting to connect fails, removing the selected PLMN from the set, and selecting another PLMN. In one aspect, the PLMN that minimizes changes is selected. In one aspect, the PLMN that provides access to a larger number of access technologies is selected.

Abstract: A method for distributed traffic navigation in a vehicular network is presented. At each vehicle entering the network, information associated with the vehicular network is acquired and stored, and destination addresses are broadcasted as route requests. At each vehicle in the network, the stored information is updated through vehicle to vehicle communication. At each junction, a header vehicle is selected for listening for broadcasts to determine the presence of a matrix. If the matrix is not present, the matrix is initialized based on the stored information of the header vehicle. The header vehicle further estimates travel time on the road segments based on the matrix, calculates a backlog indicator based on the segment travel time and the route requests. The header vehicle further updates the matrix and generates a route based on the matrix. The matrix is broadcasted from the header vehicle.

Abstract: The preferred embodiments provide a system and/or method that exploits the presence of multiple interfaces to provide high quality video streaming (or real time streaming). The proposed solution includes three specific strategies 1) receiver buffer management, 2) selective re-transmission of packets and 3) dynamic load balancing across interfaces to achieve high quality video streaming across multiple interfaces.

Abstract: Methods and systems are provided for developing decision information relating to a single system based on data received from a plurality of sensors. The method includes receiving first data from a first sensor that defines first information of a first type that is related to a system, receiving second data from a second sensor that defines second information of a second type that is related to said system, wherein the first type is different from the second type, generating a first decision model, a second decision model, and a third decision model, determining whether data is available from only the first sensor, only the second sensor, or both the first and second sensors, and selecting based on the determination of availability an additional model to apply the available data, wherein the additional model is selected from a plurality of additional decision models including the third decision model.

Abstract: This document describes an EAP method used for extending EAP functionality. The extended functionality includes channel binding and re-authentication. The EAP method also allows sequencing of multiple EAP methods inside it.

Abstract: The inventive system comprises a touch screen on a mobile device and an application that defines a set of functioning components that provide the functionality for navigating media. The inventive application comprises components including event handling touches on the touch screen, presentation and layout interacting with event handling, content cache storing media and metadata, and content loading connecting to and loading the media and the metadata from a remote storage device, such that the event handling component invokes one or more of the presentation and layout component, the content cache component and the content loading component in response to various touch screen interactions. The various touch screen interactions perform setting a browser shape, setting a range, focus, zoom in and out, and/or level of detail of the media segments, moving laterally in time, resetting a view, annotating and/or viewing annotations, playing, pausing, and stopping the media summarization.