Abstract: A data management method and system allows user centric, secured management and sharing of user information such as e-commerce data (including login details, credit card information etc.), policies and preferences set by a user in a networked home environment. A technique to encrypt and decrypt the user data is utilized, while physically storing the encrypted version of the data on a gateway device in the home rather than an online service/entity. It is in a user's best interest to manage the user's private information on the user side such that a user has absolute control over what, where the user's information flows.

Abstract: Method and apparatus for remote access message differentiation in VPN endpoint routers enable differentiating local access traffic from remote traffic entering a network through a virtual private network (VPN), by allowing a local network router to treat and tag remote traffic differently from local traffic. Applications, such as HTTP server, benefit from such differentiation in order to respond differently to either remote or local access requests.

Abstract: A method for remote access to one or more Universal Plug and Play (UPnP) resources in a network is provided. An access policy for discovery of a UPnP resource in the network is maintained. Upon receiving a remote discovery request from a remote requester over a communication link, the access policy is consulted and it is determined if the resource is discoverable. If the resource is discoverable, then resource information is provided to the requester over the communication link.

Abstract: A method and system for dynamic generation of tasks in resource constrained devices involves identifying tasks that can be performed by devices in a resource constrained network, wherein the tasks represent activities that can be performed by the devices. Tasks are generated using the capabilities of devices as each device is discovered in the network. A task uses one or more functionalities of one or more devices. Task generation specifically takes into account the limited memory and processing power which a typical home device possesses, and the tasks are generated dynamically.

Abstract: A communication method and system enables a mobile device to establish and maintain a secure connection to a server in a target network via connecting networks. The connection is maintained even when the mobile device hands off (moves) from one connecting network to another connecting network.

Abstract: A method and system that enable an automatic invocation of device functionalities on devices in a network. Invocation mechanisms are provided to support heterogeneous invocation mechanisms including new invocation mechanisms. Invocation mechanisms using scripts can be added without the need for recompilation of support systems such as home-networking middleware systems. This further enables the use of scripts that can coordinate the use of multiple devices in accomplishing a task.

Abstract: A presentation system and method provides a GUI application that allows presenting Internet information on electronic devices such as consumer electronic devices with minimal user key presses/commands. The user is enabled to browse/search for Internet information without having to enter queries, using a small number of key presses. Further the user is enabled to obtain desired Internet information with no or minimal user involvement in query construction.

Abstract: A method and system for authentication between electronic devices with reduced user intervention is provided. An authentication process for electronic devices (e.g., CE devices) establishes ownership for secure communication, with reduced user involvement. Device ownership trust establishment allows secured/authenticated communication between electronic devices. The process binds a device to an owner such that the authentication only verifies the authenticity of a device, and verifies the ownership of the device to ensure authentication. This ensures that a device is a valid device that has not been tampered with, and ensures a device has a trusted owner. Ownership binding to a device can be verified and established by trusted third parties without user intervention.

Abstract: A method and system for delivering emails is provided, wherein emails are pushed from an email server to an email client without polling. Emails are delivered to the email client directly by pushing, without requiring the email client to poll an email server periodically.

Abstract: A method and system for remote access to UPnP devices is provided, which allows remote access to UPnP devices in a private network, and utilizes message forwarding at the UPnP layer. Existing UPnP control points can remotely access UPnP devices in a private network without modification to UPnP standards.

Abstract: A method and system that implement a process for managing video information on a video recording device. The management process involves receiving a video input signal including a video stream, obtaining content information corresponding to the video stream, associating the content information with the video stream, and storing the video stream and associated content information in a database as a searchable index for the video stream. The searchable index includes location of the stored video stream and identifies the associated content information. Then, content information from an input signal corresponding to a video stream is captured for analysis and searching the index to identify stored video streams related to the video program for suggestion to the user.

Abstract: A method and system for providing QoS in a network using traffic management including traffic stream admission and traffic control, is provided. The traffic stream admission and control is achieved using parameterized QoS within a network. Such parameterized QoS enhances QoS service in the UPnP QoS architecture.

Abstract: A method and system that enables aggregation and management of services and contents on multiple networks, is provided. In one implementation, such a method and system functionally bridges a first network and a second network such that services and contents, no matter where they come from, can be delivered to a user on one or more devices in the second network. The services and contents in the first network are converted by certain applications to behave as if they exist in the second network, so that they can be accessed by one or more devices in the second network. Such a method and system enables applications to be easily developed and distributed over the Internet using popular Web browsers as the platform for application runtime environments.

Abstract: A method and system for QoS control for remote access to UPnP devices, is disclosed. Enabling QoS control for remote access to UPnP devices involves providing a UPnP control point; providing a UPnP device in a network, wherein the first UPnP control point is connected to the network via a communication link; and providing access between the UPnP control point and the UPnP device by utilizing a UPnP proxy that examines UPnP messages in and out of the network and translates the local URL in the message to a URL that is accessible by the UPnP control point over the communication link.

Abstract: A distributed coordination system for a home network environment provides data and functional coordination among multiple control points in a networked home environment. Data and other services (e.g., events) are duplicated among multiple control points. The duplication allows multiple control points to function independently regardless of other control points. Coordination involves the synchronization of runtime state among multiple entities in the network. The distributed coordination system uses a weak consistency model to replicate data and coordinated functions (e.g., event notification) among heterogeneous controlling devices, such as DVD player, speaker, thermostat, with low overhead in a home network. The data replication and function coordination enable software components and/or users to access them without tying themselves to ensuring certain data on a specific control point.

Abstract: An eventing method and system is provided that enables resource-constrained CE devices, at home, away from home, on-the-go, or behind a firewall, to communicate through asynchronous events with each other and/or with other type electronic devices, at home or on the Internet. Further, a scalable distributed system is provided that supports asynchronous eventing over the Internet efficiently and at low cost.

Abstract: An authentication method and system is provided for asynchronous eventing between a client and a server over the Internet. In a subscription phase, the client sends a subscription request to the server to express interest in receiving notifications associated with one or more particular events that may asynchronously occur on the server. The client authenticates the server by checking the identity of the server, and if the client determines that the server can be trusted, the client subscribes the notifications, otherwise, the client does not subscribe. After a successful subscription, in a notification phase, the server notifies each client that has subscribed for a particular type of event. Each client upon receiving a notification, authenticates the server by verifying that the received notification is sent by the server with which the client subscribed for the notification.

Abstract: A method and system for pushing asynchronous notifications to devices in a network including client devices and server devices. A connection is established between a client device and a server device, wherein the client device sends a request for data to the server device, the server device includes a notification tag in a reply to the request from the client device for the client device to maintain the connection to the server device to await notifications from the server device, the client device receives the reply from the server device and checks for a notification tag in the reply such that if the reply includes a notification tag the client device maintains the connection to the server device to send notifications to the client device via the connection.

Abstract: A method of maintaining persistent unique identifiers for devices interconnected in a network. Information is obtained from a device and a fingerprint generated from that information. It is then determined if the fingerprint is previously associated with an identifier in the network. If the fingerprint is not previously associated with an identifier in the network, then a new identifier associated with the fingerprint is generated, and the fingerprint and the associated new identifier is stored in a memory, wherein the new identifier forms a persistent unique identifier (PUID) for that device. Otherwise, if the fingerprint is not previously associated with an identifier in the network, then the associated identifier stored in the memory is used as the persistent unique identifier (PUID) for that device.

Abstract: A method of aggregating control in a first network and a second network, the first network having first devices and the second network having second devices. A communication channel is established between the first and second networks; from the first network the second devices in the second network are discovered through the communication channel; and from the first network one of the second devices in the second network is controlled through the communication channel. The first and second network can be connected but isolated. Further, the first and second networks can implement different network protocols, or the same network protocol.