Abstract: A high capacity interactive multimedia system is provided that can deliver large number of concurrent video on demand and high speed data streams in an integrated fashion to a plurality of subscribers located at one or more subscriber sites. A video server module in the system generates a plurality of video on demand streams, which are transported via a high capacity transport system to a plurality of clients located at a subscriber site. A web server in the system stores data, such as web pages, which are also transported via the high capacity transport system to the clients. By accessing the web pages, a plurality of subscribers interact with the system via the clients. The interactive multimedia system controls and monitors in a centralized fashion the hardware and software components of the system, thus assuring the quality of the video and data services provided to the subscribers.

Abstract: A patch panel system (100) includes interface units (120) and radio units (130). The interface units (120) connect to user devices (110) via corresponding ports. The radio units (130) are associated with radio channels. Combinations of the interface units (120) and the radio units (130) provide conversion of constant bit rate communication to packetized communication and reconversion of the packetized communication to the constant bit rate communication.

Abstract: Systems and methods for geographically mapping an intrusion into a network having one or more network points include receiving intrusion information identifying a intrusion into a point of the network, correlating the intrusion information with location information for the identified network point, and network identification information for the identified network point, and generating a map displaying a geographical location of the intrusion.

Abstract: Methods and systems are provided for call center screening that enable a network service provider to dynamically control service request traffic directed to selected service centers. An Advanced Intelligent Network (AIN) service is configured to intercept calls originating from calling parties and directed to trigger numbers designated for processing predetermined service requests. Depending upon the trigger number, the AIN may play an announcement asking a calling party to designate the service requested. Following a calling party's valid response, a second announcement is played asking the calling party to select the type of service associated with the first response. Depending upon the calling party's responses and calling party's location, the AIN may route the call to selected service centers, in order to control the traffic to overloaded service centers.

Abstract: A system and method for adding a new network device to an existing network is described. An existing network has at least one master network device that acts as the gatekeeper for adding new network devices to the network. The master network device receives a request from a new network device to join the network. In response, the master network device issues a request to the new network device to perform a specified action. The master network device receives verification from the human user that the specified action has been performed. Upon receiving the verification, the master network device adds the new network device to the network.

Abstract: Systems and methods for geographically mapping a vulnerability of a network having one or more network points include receiving vulnerability information identifying a vulnerability of a point of the network, correlating the vulnerability information with location information for the identified network point, and network identification information for the identified network point, and generating a map displaying a geographical location of the vulnerability.

Abstract: The disclosed systems and methods provide for the compression and decompression of packet headers. An uncompressed header can be compressed in size to form a smaller, compressed header, such that the compressed header can include values that can be used to re-produce the uncompressed header. A compressed header can include at least two such values. A first value of the at least two values can be computed based on a second, earlier uncompressed header and can be used to derive the uncompressed header. Similarly, a second value of the at least two values can be computed based on a third uncompressed header and can be used to derive the same uncompressed header. Accordingly, the uncompressed header can be derived based on the first value and the second uncompressed header, or based on the second value and the third uncompressed header. The uncompressed header, second uncompressed header, and third uncompressed header can be associated with different packets.

Abstract: A translator is provided for translating predetermined portions of packet header information including an address of a data packet according to a cipher algorithm keyed by a cipher key derived by a key exchanger. A mapping device is also provided for mapping the address to a host table stored in memory. If the address does not match an entry in the host table, a security device is triggered.

Abstract: A system facilitates the visualization of a network having multiple nodes. The system collects information from at least one of the nodes (510). The information describes network operation over a period of time. The system then reconstructs the network operation for the time period from the collected information (520) and presents the reconstructed network operation to an operator (530-550).

Abstract: The disclosed systems and methods provide for the compression and decompression of packet headers. An uncompressed header can be compressed in size to form a smaller, compressed header, such that the compressed header can include values that can be used to re-produce the uncompressed header. A compressed header can include at least two such values. A first value of the at least two values can be computed based on a second, earlier uncompressed header and can be used to derive the uncompressed header. Similarly, a second value of the at least two values can be computed based on a third uncompressed header and can be used to derive the same uncompressed header. Accordingly, the uncompressed header can be derived based on the first value and the second uncompressed header, or based on the second value and the third uncompressed header. The uncompressed header, second uncompressed header, and third uncompressed header can be associated with different packets.

Abstract: Techniques are disclosed for implementing wireless fallback of wireline service. Network interface units [405] may be installed in subscriber buildings in a residential or business neighborhood. The NIUs [405] may include a wireless transceiver [407] and a switch [410]. During normal operation, the switch provides the subscribers with wireline network connectivity. In the event of a local failure of the wireline connectivity, the NIUs may provide fallback network connectivity through the wireless transceiver [407], which communicates with other wireless transceivers installed at other local subscriber locations.

Abstract: The disclosed technology provides a system and method of securely communicating data. An encryptor located at a transmitter can provide encrypted data to the transmitter. The transmitter can maintain a packet number indicating a particular packet for carrying the encrypted data and a sub-packet number indicating a position within the packet where the encrypted data is to be stored. The encryptor can produce the encrypted data using an encryptor seed generated based on the packet number and sub-packet number. A receiver can maintain a receiver packet number indicating a number of previously received packets and can compute a receiver sub-packet number. The receiver can receive a packet containing encrypted data and can decrypt the encrypted data using a decryptor seed generated based on the receiver packet number and sub-packet number.

Abstract: A method and apparatus is disclosed for increasing the security of computer networks through the use of an Intrusion and Misuse Deterrence System (IMDS) operating on the network. The IMDS is a system that creates a synthetic network complete with synthetic hosts and routers. It is comprised of a network server with associated application software that appears to be a legitimate portion of a real network to a network intruder. The IMDS consequently invites inquiry and entices the intruder away from the real network. Simulated services are configured to appear to be running on virtual clients with globally unique, class “C” IP addresses. Since there are no legitimate users of the virtual network simulated by the IMDS, all such activity must be inappropriate and can be treated as such. Consequently, the entire set of transactions by an intruder can be collected and identified rather than just those transactions that meet a predefined attack profile.

Abstract: Methods and systems for detection and/or prevention of network attacks can include the use of multiple and/or time-dependent addresses coupled with filtering by the directory or naming service. The directory service can respond to requests for the address of a resource by returning an address that can be relocated over time by coordinating the directory service entry with the host and network address configuration data and/or by returning an address specific to the requestor. Thus, the directory service can track and build profiles of matches between requestors and accesses. The methods and systems can use the time dependent addresses and profiles to distinguish legitimate accesses from unauthorized or malicious ones. Requests for non-valid addresses can be misdirected to “empty” addresses or to detection devices.

Abstract: Embodiments of the invention reduce the probability of success of a DOS attack on a node receiving packets by decreasing the probability of random collisions of packets sent by a malicious user with those sent by honest users. The probability of random collisions may be reduced in one class of embodiments of the invention by supplementing the identification field of the IP header of each transmitted packet with at least one bit from another field of the header. The probability of random collisions may be reduced in another class of embodiments of the invention by ensuring that packets sent from a transmitting IPsec node to a receiving IPsec node are not fragmented.

Abstract: A system facilitates communication among nodes in a wireless network. A timeslot is assigned to each of a group of nodes (201) in the wireless network (400, 800, 1200, 1300). The timeslot is a time for a corresponding node to receive messages transmitted by other nodes (201). A modulation scheme is assigned to each of the nodes (201). A message is transmitted from at least one of the nodes (201), using the assigned modulation scheme, to at least one destination node during a timeslot assigned to the at least one destination node. The messages are received at the at least one destination node from the at least one of the nodes (201).

Abstract: Disclosed are methods and systems for routing T-37 E-mail over an H 323 (VOIP) network. The methods and systems facilitate the obtaining and utilization of data from Gatekeepers with respect to the utilization of Gateways to be utilized to transmit the E-mail from the network over a conventional telephone network to the recipient. They thereby facilitate the choice of a Gateway which is less heavily utilized.

Abstract: A method (38) and system (56) evaluate the accuracy of an Automatic Location Identification (ALI) system (36) deployed within an environment (20) and configured to location a wireless communication device (24) originating an emergency call (22) through a wireless communication network (26). The method (38) includes a subprocesses that identify a validation region (144) in which a service area (106) of a public service answering point (PSAP) (32) and an RF coverage area (129) overlap, classify sub-regions within the validation region (144) according to a predetermined set of test scenarios (148) representing unique calling environments, and select test points (200) within the validation region (144) from which test calls, that simulate emergency calls, will be performed.

Abstract: Methods and systems can reduce the spread of computer files or data on a network by obtaining and tracking times of arrival for chunks of data transmitted on the network. The times of arrival for a node can be transformed into time-series and periodograms computed from the time-series. Successive periodograms can be compared to determine changes in the strongest peaks of the periodograms. If a new peak is identified, a search for the occurrence of the peak in previous periodograms can be conducted. If no peak having a matching frequency is found, a search for the peak in the periodograms for neighboring nodes can be performed. If matching peaks are found, the associated data stream can be classified. Predictions of the timing and length of associated data packets can be used to randomly interrupt transmission of associated data packets resulting in reducing the spread of the classified data stream.

Abstract: Kernel-based intrusion detection using Bloom filters is disclosed. In one of many possible embodiments for detecting an intrusion attack, a Bloom filter is provided and used to generate a Bloom filter data object. The Bloom filter data object contains data representative of expected system-call behavior associated with a computer program. The Bloom filter data object is embedded in an operating system (“OS”) kernel upon an invocation of the computer program. Actual system-call behavior is compared with the data in the Bloom filter data object.