Abstract: An apparatus, system and method are introduced for prioritizing allocation of communication bandwidth in a network. In one embodiment, the apparatus includes memory including computer program code configured to, with a processor, cause the apparatus to assign a value to a prioritization parameter at an endpoint communication device dependent on a priority of an information flow in a network, and update a communication bandwidth for the information flow dependent on the value of the prioritization parameter after a round-trip time for the information flow.

Abstract: Systems for enhancing the sensitivity of detecting an optical signal using nonlinear optics and method of performing the same. In one embodiment, a single-photon detection system includes an optical amplifier realized in a waveguide, and a photodetector coupled to an output of the optical amplifier. A light detection and ranging system includes the optical amplifier coupled to an optical source and one photodetector. In another embodiment, a photodetection system includes a plurality of optical frequency converters, coupled to an optical source, that sequentially convert a wavelength of photons of the optical source to a final wavelength, and a single-photon photodetector coupled to the optical frequency converters to detect single photons produced by the optical source. In another embodiment, an optical sensor includes an optical pump, and a transducer including an optical ring cavity coupled to the optical pump and configured to utilize optical four-wave mixing to detect an external stimulus.

Abstract: Systems for enhancing the sensitivity of detecting an optical signal using nonlinear optics and method of performing the same. In one embodiment, a single-photon detection system includes an optical amplifier realized in a waveguide, and a photodetector coupled to an output of the optical amplifier. A light detection and ranging system includes the optical amplifier coupled to an optical source and one photodetector. In another embodiment, a photodetection system includes a plurality of optical frequency converters, coupled to an optical source, that sequentially convert a wavelength of photons of the optical source to a final wavelength, and a single-photon photodetector coupled to the optical frequency converters to detect single photons produced by the optical source. In another embodiment, an optical sensor includes an optical pump, and a transducer including an optical ring cavity coupled to the optical pump and configured to utilize optical four-wave mixing to detect an external stimulus.

Abstract: Systems for enhancing the sensitivity of detecting an optical signal using nonlinear optics and method of performing the same. In one embodiment, a single-photon detection system includes an optical amplifier realized in a waveguide, and a photodetector coupled to an output of the optical amplifier. A light detection and ranging system includes the optical amplifier coupled to an optical source and one photodetector. In another embodiment, a photodetection system includes a plurality of optical frequency converters, coupled to an optical source, that sequentially convert a wavelength of photons of the optical source to a final wavelength, and a single-photon photodetector coupled to the optical frequency converters to detect single photons produced by the optical source. In another embodiment, an optical sensor includes an optical pump, and a transducer including an optical ring cavity coupled to the optical pump and configured to utilize optical four-wave mixing to detect an external stimulus.

Abstract: Systems for enhancing the sensitivity of detecting an optical signal using nonlinear optics and method of performing the same. In one embodiment, a single-photon detection system includes an optical amplifier realized in a waveguide, and a photodetector coupled to an output of the optical amplifier. A light detection and ranging system includes the optical amplifier coupled to an optical source and one photodetector. In another embodiment, a photodetection system includes a plurality of optical frequency converters, coupled to an optical source, that sequentially convert a wavelength of photons of the optical source to a final wavelength, and a single-photon photodetector coupled to the optical frequency converters to detect single photons produced by the optical source. In another embodiment, an optical sensor includes an optical pump, and a transducer including an optical ring cavity coupled to the optical pump and configured to utilize optical four-wave mixing to detect an external stimulus.

Abstract: A system and methods are provided for transmitting an encrypted data word of two or more bits. This involves identifying a random key word comprising two or more bits for encrypting the data word and identifying a set of unique orthogonal codes. This also involves selecting a code from the set of unique orthogonal codes that corresponds to a result of an exclusive-or (XOR) operation between the two or more bits of the data word and the random key word. This also involves encoding a signal with the code and transmitting the encoded signal as encrypted data.

Abstract: A system and method for maximizing the standby time of mobile communication devices that have WiFi or other high energy-consuming network interfaces, by predicting in real time actionable silent periods (ASPs) of the interface and shutting the interface down during these ASPs. Standby times are significantly increased, resulting in longer periods of operation before battery charging is required, while keeping minimal the probabilities of missing incoming data packets when the interface is turned off.

Abstract: Methods and systems for information dissemination in mobile ad hoc networks founded on Content Based Routing. The method comprises encoding, via an encoding logic within the source node, a plurality of information categories associated with the content in a header of the packet, encrypting the packet with an encryption key unique to the plurality of information categories, with the encrypted packet having a unique dissemination group identity in its header, and disseminating the encrypted packet to nodes that have subscribed to the data based on the dissemination group identity. The system comprises a host within the source node, an identity generator to generate the dissemination group identity for the content, an encryption unit for encrypting the content, and a routing unit to disseminate the content to the dissemination mesh based on established subscriptions.

Abstract: A system, and method related thereto, for providing a vehicular communications network public-key infrastructure. The system comprises a plurality of communications infrastructure nodes and a plurality of vehicles each having a communications component. The communications component provides vehicle to vehicle (V2V) communications, and communications via infrastructure nodes. A communications security component in each of the plurality of vehicles provides security for the communications between the plurality of vehicles using a plurality of security modules. The security modules include a certificate management module. A public key interface module may include a public key, a private key, an anonymous key and a management key. The system further includes a detection and response module for attack detection and attack mitigation. The communications security component assigns and installs at least one security key, a certificate of operation, and a current certificate revocation list.

Abstract: A method for distributed computations for fault-diagnosis in a system whose fault propagation model has deterministic couplings between faults and symptoms includes creating a ‘relation graph’ in which the nodes correspond to the potential faults, with two nodes connected by a ‘relational link’ if their corresponding faults have an observed symptom in common. Each relational link is assigned a weight equal to the sum, taken over the symptoms represented by the relational link, of the reciprocal of the number of distinct fault-pairs that produce each such symptom. The relation graph is then partitioned into several domains, while minimizing the number of cross-domain relational links, which correspond to cross-domain symptoms.

Abstract: A staggered execution environment is provided to safely execute an application program against software failures. In an embodiment, the staggered execution environment includes one or more probe virtual machines that execute various portions of an application program and an execution virtual machine that executes the same application program within a time delay behind the probe virtual machines. A virtualization supervisor coordinates the execution of the application program on one or more probe virtual machines. The probe virtual machines are used to detect and correct software failures prior to the execution virtual machine encountering them. The virtualization supervisor embargos output data in order to ensure that erroneous data is not released which may adversely affect external processes.

Abstract: A MOAF algorithm is used to resize cells for balancing capacity. The MOAF algorithm bases its decision on a cell and all other cells which the algorithm decides are sufficiently close in a propagation sense to affect the results. The MOAF algorithm also automatically determines those cells in an area which are most heavily loaded and those cells which are lightly loaded. The MOAF algorithm will only decrease the size of a cell if it determines specific adjacent cells that are willing and able to accept the load, and the MOAF algorithm will increase the size of a cell only if there is a nearby heavily loaded cell that requires the removal of load. Moreover, the MOAF algorithm can be tuned (via the threshold parameter T) to shift the focus of the optimization from avoidance of coverage holes to the avoidance of creation of excessive handover legs.

Abstract: A system and method is provided for authenticating a first device to a second device. This involves providing images to the second device, receiving an indication of selected ones of the images as authenticating images, and identifying an authenticating code associated with the second device. This also involves receiving a transaction request from the second device, the first device providing a display page to the second device, the display page including the authenticating images at locations identified by the authenticating code.

Abstract: In a distributed management scheme for LEO satellite networks interactions between a satellite and the designated fixed center occur according to a time schedule and only when the designated center is in the coverage area of the payload. For exception/alarm reporting and real-time configuration updates the interaction varies with time. Interactions of this type occur between a satellite and the management center that is “nearest” to the payload or satellite at the time instant at which the network event occurs or configuration upload is needed. The nearest management center for a payload is the center that can be reached from the payload with fewest number of crosslink hops. A central network operation center determines, prior to payload launch, the association between satellites and management centers for routine information exchange, and the nearest management center for the payload for different snapshots of time.

Abstract: A system and method for secure representation of data is presented. The method comprises setting a number of components, dividing original data into the set number of components using a function, storing the set number of components of divided data, determining a number of retrieved components, and using the function to retrieve the data from the retrieved components and to determine retrieved data. In one aspect, the function is XOR. In one aspect, when the number of retrieved components is less than the set number of components, the retrieved data is redacted data, and when the number of retrieved components is equal to the set number of components, the retrieved data is the original data.

Abstract: A method and software product for limit privacy loss due to data shared in a social network, where the basic underlying assumptions are that users are interested in sharing data and cannot be assumed to constantly follow appropriate privacy policies. Social networks deploy an additional layer of server-assisted access control which, even under no action from a user, automatically evolves over time, by restricting access to the user's data. The evolving access control mechanism provides non-trivial quantifiable guarantees for formally specified requirements of utility (i.e., users share as much data as possible to all other users) and privacy (i.e., users expose combinations of sensitive data only with low probability and over a long time).

Abstract: Changes in a signal are detected. The signal is repeatedly sampled in a synchronous manner during a predetermined interval to generate a captured eye diagram. At least one of a positive differential eye diagram or a negative differential eye diagram is generated from the captured eye diagram and a baseline eye diagram. The at least one positive or negative differential eye diagram is analyzed to determine whether a change in signal conditions is present.

Abstract: The present invention advantageously provides techniques to solve problems with combinatorial anonymous certificate management by addressing critical issues concerning its feasibility, scalability, and performance. Methods and procedures to manage IEEE 1609.2 anonymous and identifying cryptographic keys and certificates in the Vehicle Infrastructure Integration (VII) system are presented, along with methods for management of identifying and anonymous certificates in a partitioned Certificate Authority architecture designed to enhance vehicle privacy. Novel methods for vehicles to dynamically change an anonymous certificate for use while maintaining vehicle privacy are given. Refinements to basic combinatorial schemes are presented including probabilistic key replacement, rekey counter decrement, dynamic rekey threshold, geographic attack isolation and proofs of geographic position.

Abstract: A high data rate optical signal is inverse multiplexed into a multitude of lower-rate tributaries, each of which is coded by its unique OCDM code, and the combined coded tributaries are injected into a common phase scrambler. Coherent summation of these optically encoded tributaries pass through a shared phase or phase and frequency scrambler before exiting the secure location. The setting of the scrambler acts as the key. The authorized recipient with the correct key retrieves the ones and zeros of the several decoded signals.

Abstract: An architecture and accompanying method and apparatus for providing multi vendor administration of telephone numbers being ported from one service provider to another.