Abstract: A security method and system for Layer Independent Passive Clustering (LIPC) is presented. The inventive method and system maintains the states in the LIPC cluster formation protocol while adding a ‘Trusworthy’ event to each state and provides a methodology that depends on the state of the transmitting node to quantify Trustworthy and derive a Trust Confidence Value (TCV) to represent the level of confidence in quantifying ‘Trustworthy’. The invention dynamically computes a degree of trustworthiness for each participating network node and eliminates nodes from participating in the PC cluster formation protocol and packet forwarding if they do not meet established trust metrics. The security solution can also apply to PC-based Mobile Ad hoc Networks (MANETs). The novel system and method applies a multidimensional set of security algorithms to protect the LIPC cluster formation protocol from malicious attacks that compromise cluster formation and secure routing.

Abstract: A system and method for managing wireless communications for a plurality of devices in a high occupancy vehicle is presented. The method comprises steps of creating a global bandwidth usage map across all vehicles, routes, and passengers, transmitting the global bandwidth usage map to a vehicle controller, interpreting the global bandwidth usage map and creating a local usage map, and commanding a wireless concentrator to manage the wireless communications for the devices in accordance with the local usage map. Further, the global map can be created by gathering ticket and route information, obtaining customer productivity data from a network, and parsing obtained data into canonical form. A step of inputting the ticketing information by one of the user, and a ticketing agent can be included. A step of displaying messages using a wireless access application residing on the device can be included.

Abstract: A system and method for transporting encrypted data having a transmitter and a receiver is provided. The transmitter generates a sequence of optical pulses, which are copied and output as identical channels. The identical channels are modulated by a plurality of modulators using data to generate a modulated data signal. Respective spectral phase encoders coupled to each of the plurality of data modulators encode respective modulated data signals using a plurality of mutually orthogonal phase codes that are individually associated with the respective spectral phase encoder. These encoded data signals are combined and code-scrambling by a spectral phase scrambler using a scramble code as an encryption key to generate an encrypted signal. A receiver reverses the encryption to extract the data.

Abstract: A method of transforming return oriented programming executables into functionally equivalent yet different forms with specific structural and/or functional characteristics that can assist in the use of such executables. A method automatically biases the structural and/or functional diversity of the return oriented programming software executables to achieve specific program representation objectives while preserving the programmatic capabilities of the original executable.

Abstract: A three-way handshake method for optical messaging in a multi-domain optical network that includes a first pass from a source domain to a destination domain through intermediate domains on candidate working paths, collecting information identifying available routing resources for each working path, calculating a working path metric and storing each of the metrics at the respective border node, determining a path key of the topology of each domain working path and using the path key to identify the path outside its domain and determining the best working paths and border nodes to use. A second pass using the path keys for identifying the working path in each domain and reserving the identified routing resources and selecting which routing resources to use. A third pass identifying the selected routing resources and establishing an optical signaling message path between the source node and the destination node.

Abstract: Systems and methods for improved photonically-assisted RF filtering. Presently, processing of wide-band RF signals involves the use of multiple specialized equipment to isolate a region of interest from the spectrum. The present invention discloses the use of a modulation system to upconvert the RF signal onto the sideband of a light source such as a laser, an optical filter sub-system comprising a plurality of filtering units that function as combinations of IIR and FIR filters, and a resonant channelizing filter for noise reduction and rejection of undesired channels, and means for control and agility of a piecewise coherent optical filter. The resulting filtered RF signal may then be downconverted to the electrical domain for further signal processing.

Abstract: Optical bypass circuits are selected and created with a desired amount of traffic on each circuit to offload from the IP routers, the maximum possible amount of traffic. In a first phase, each node in a network independently determines the maximum number of optical bypass circuits, configured to their maximum capacity, to as many destinations, that could possibly originate at that node. The determination is made by aggregating traffic from a given traffic matrix. The optical bypass circuit transports traffic that originates at the node plus transient traffic that the node receives from other nodes. In the second phase, the node will eliminate an optical bypass circuit found in the first phase if any of its parent nodes created a necessarily longer optical bypass circuit to the same destination. In addition, if a descendent node has more aggregate traffic to fill more bypass circuits than the parent node, then the extra optical bypass circuits from the descendent node are also created.

Abstract: A system and method for selective wavelength interleaved filtering technique for analog to digital conversion (ADC) comprises a remote aperture for analog input, a modulator operable to transform the analog input into an initial optical signal, a photonic front end having high resolution optical filters operable to filter the optical signal into multiple subsequent optical signals and supply local oscillators for downconversion into electrical signals, a segmented subsystem having a plurality of ADCs, each operable to receive and convert one subsequent optical signal of the optical signals, and a memory buffer and process subsystem operable to reconstruct the converted subsequent optical signals into a digital representation of the analog input by executing reconstruction algorithms. Provision is made for compensation of distortions arising in the electrical to optical to electrical conversion process.

Abstract: A system and method for a reactive and personalized exposure of user context to a third party comprises information sources, a context discovery module providing the user context based on the information sources, an identification module obtaining an identity of the third party, a personalization engine, and a rendering system rendering and forwarding a reply to the third party, wherein if the identification module obtains the identity, the personalization engine creates a personalized message in accordance with the user context and the identity and the reply is the personalized message, and if the identification module does not find the identity, the reply is a generic message. The context discovery module and the identification module can each comprise an inferencing engine. The inferencing engine can be associated with a policy engine. Policy engines can be associated with each module and/or engine. The personalization engine can comprise a database of special messages.

Abstract: A method for ranking a plurality of documents relevant to a user profile comprises determining a high resolution representation for the user profile, computing a high resolution representation for each document, calculating a rank for each document based on the high resolution representation of the document and the high resolution representation of the user profile, recalculating the rank for each document based on a lower resolution representation of the document and/or a lower resolution representation of the user profile when the rank of each document is not satisfactory, and outputting a number of the plurality of documents sorted by the rank of each document, when the rank is satisfactory. The high resolution representation can be a discrete wavelet transform. The lower resolution representation can be recalculated by averaging the values of the discrete wavelet transform. Outputting the number of documents can comprise displaying the documents on a device.

Abstract: Methods for coordinating power usage and link adaptation in wireless communications are described. Terminals and/or access points (APs) may attempt to modify terminals' transmit power in relation to a desired communication data transfer rate. Link adoption may also be used in conjunction with the described methods.

Abstract: Various embodiments of the present invention for validating the authenticity of a website are provided. An example of a method according to the present invention comprises providing a website having an artifact, receiving a communication from a user, at a service provider, for validating the website associated with a service provider, inquiring from the user a description of the artifact comparing the artifact on the website with the description of the artifact from the user and generating a indication to the user based upon the comparing. The communication is over a first communication channel and the website is accessed over a second communication channel. The first communication channel is different than the second. The artifact can be displayed after a user session is identified.

Abstract: A security method and system for Layer Independent Passive Clustering (LIPC) is presented. The inventive method and system maintains the states in the LIPC cluster formation protocol while adding a ‘Trusworthy’ event to each state and provides a methodology that depends on the state of the transmitting node to quantify Trustworthy and derive a Trust Confidence Value (TCV) to represent the level of confidence in quantifying ‘Trustworthy’. The invention dynamically computes a degree of trustworthiness for each participating network node and eliminates nodes from participating in the PC cluster formation protocol and packet forwarding if they do not meet established trust metrics. The security solution can also apply to PC-based Mobile Ad hoc Networks (MANETs). The novel system and method applies a multidimensional set of security algorithms to protect the LIPC cluster formation protocol from malicious attacks that compromise cluster formation and secure routing.

Abstract: This document describes a proactive mechanism to provide fast-handover involving PMIPv6. In particular, it describes how one can achieve fast handoff for PMIPv6 using Media-independent Pre-Authentication (MPA) technique. It discusses the need for a fast-handoff for PMIPv6 environment. It then describes how MPA techniques could be used during different steps involving both intra-domain and inter-domain handoff for PMIPv6. MPA-based fast-handover takes advantage of the pre-authentication mechanism so that the mobile can perform the access authentication while in the previous local mobility (PMA) domain and thus would be able to complete many of the handoff related operations while still in the previous network.

Abstract: A method, an apparatus and a program for detecting spoofed Internet Protocol (IP) traffic directed to a network having a plurality of autonomous systems (AS) is provided. The method comprises receiving an incoming packet through an AS, the incoming packet containing a source IP address and a destination IP address, acquiring a corresponding source and destination IP address prefixes, converting the corresponding source and destination IP address prefixes into a source AS number and a destination AS number, determining if the incoming packet arrived from an unexpected source based upon the corresponding destination IP address prefix and the converted source and destination AS number using an unexpected pair tuple table generated from network routing information and generating an alert indicating that the incoming packet is not allowed to enter the network.

Abstract: A system and method for secure data management is presented. The method comprises receiving a query, performing the query and obtaining answers to it, creating certain formulas representing the answers; and determining whether there is a minimum number of distinct models of these formulas conjoined with the relevant anonymity predicates along with previous answers and general background knowledge, and when that number of models does not exist, suppressing the answers. In one aspect, the method further comprises creating formulas encoding the information conveyed by the answer; and combining the formulas encoding the information with prior information.

Abstract: A system, a network node, a router, a method and a program used to determine a bottleneck bandwidth on a multi-hop path between a source and destination node is presented. The method comprises receiving probe packets by a first hop node in the multi-hop path, measuring a bandwidth on a link between the first hop node and a next hop node in the multi-hop path, generating a bandwidth discovery packet including the measured bandwidth, transmitting the BDP to the next hop node, relaying the probe packets to the next hop node, and determining if the next hop node is a last-hop node on the multi-hop path. A last hop node records the measured bandwidth from the BDP, adjusts the delay between the probe packets based upon the bandwidth and relaying the probe packets to the destination node. The destination node determines the bottleneck bandwidth based on the delay between the probe packets.

Abstract: A method for customized voice communication comprising receiving a speech signal, retrieving a user account including an user profile corresponding to an identifier of a caller producing the speech signal, and determining if the user profile includes a speech profile with at least one dialect. If the user profile includes a speech profile, the method further comprises analyzing using a speech analyzer on the speech signal to classify the speech signal into a classified dialect, comparing the classified dialect with each of the dialects in the user profiles to select one of the dialects, and using the selected dialect for subsequent voice communication with the user. The selected dialect can be used for subsequent recognition and response speech synthesis. Moreover, a method is described for storing a user's own pronunciation of names and addresses, whereby a user may be greeted by the communication device using their own specific pronunciation.

Abstract: A question conversion engine converts terms and phrases used in a user's question into terms and phrases that are more likely to produce information containing the search terms. The question conversion engine parses a user's question to associate each term in the user's question with a part of speech and to eliminate extraneous terms in the user's question. A term/phrase replacement map is used to replace terms and/or phrases in the user's question with replaced terms and phrases that are more likely to produce relevant information. The question conversion engine matches the user's question to a declarative expression thereby altering the semantics of the question into an expression that is more likely to produce optimum search results.

Abstract: An open communication method between at least two sub-networks using a broker node. Each of the sub-networks has a different routable network addressing scheme. The method comprises receiving a packet for a specific application, the packet includes an application identifier, determining if the packet is to be relayed to another of the at least two sub-networks based upon the application identifier, determining if a node receiving the packet is a broker node, relaying the packet to a broker node if not a broker node and forwarding, by the broker node, the packet to at least one node in another of the at least two sub-networks. The node generating the packet communicates using a first of the at least two sub-networks. A broker node communicates using at least two of the at least two sub-networks via a corresponding routable network addressing schemes for each of the sub-networks.