Abstract: An system for and method of providing end-to-end encrypted real-time phone calls using a commodity mobile phone and without requiring service provider cooperation is presented. The system and method improve upon prior art techniques by omitting any requirement for mobile phones that are specially manufactured to include end-to-end encryption functionality.

Abstract: A method of per-packet keying for encrypting and decrypting data transferred between two or more parties, each party having knowledge of a shared key that allows a per-packet key to differ for each packet is provided. Avoiding the use of a static session key during encryption offers several advantages over existing encryption methods. For example, rejecting packets received with duplicate sequence numbers, or sequence numbers that are beyond a specified deviation range mitigates Replay Attacks.

Abstract: A method of encrypting broadcast and multicast data communicated between two or more parties, each party having knowledge of a shared key, is provided. The key is calculated using values, some of which are communicated between the parties, so that the shared key is not itself transferred. Avoiding the transfer of the key offers several advantages over existing encryption methods.

Abstract: An authentication and mass subscriber management technique is provided by employing a key table derived as a subset of a larger key pool, a network edge device, and authentication tokens attached on both the network edge device and on a subscriber's computing device. The network edge device and subscriber's computing device are provided with secure, tamper-resistant network keys for encrypting all transactions across the wired/wireless segment between supplicant (subscriber) and authenticator (network edge device). In an embodiment of the invention, a secure, secret user key is shared between a number of subscribers based upon commonalities between serial numbers of those subscribers' tokens. In another embodiment of the invention, a unique session key is generated for each subscriber even though multiple subscribers connected to the same network connection point might have identical pre-stored secret keys.

Abstract: The invention provides a secure Wi-Fi communications method and system. In an embodiment of the invention, unique physical keys, or tokens, are installed at an access point and each client device of the network. Each key comprises a unique serial number and a common network send cryptographic key and a common network receive cryptographic key used only during the authentication phase by all components on the LAN. Each client key further includes a secret cryptographic key unique to each client device. During authentication, two random numbers are generated per communications session and are known by both sides of the wireless channel. Only the random numbers are sent across the wireless channel and in each case these numbers are encrypted. A transposed cryptographic key is derived from the unique secret cryptographic key using the random numbers generated during authentication. Thus, both sides of the wireless channel know the transposed cryptographic key without it ever being transmitted between the two.

Abstract: An authentication and mass subscriber management technique is provided by employing a key table derived as a subset of a larger key pool, a network edge device, and authentication tokens attached on both the network edge device and on a subscriber's computing device. The network edge device and subscriber's computing device are provided with secure, tamper-resistant network keys for encrypting all transactions across the wired/wireless segment between supplicant (subscriber) and authenticator (network edge device). In an embodiment of the invention, a secure, secret user key is shared between a number of subscribers based upon commonalities between serial numbers of those subscribers' tokens. In another embodiment of the invention, a unique session key is generated for each subscriber even though multiple subscribers connected to the same network connection point might have identical pre-stored secret keys.

Abstract: The invention provides a method and system for locally tracking network usage and enforcing usage plans at a client device. In an embodiment of the invention, a unique physical key, or token, is installed at a client device of one or more networks. The key comprises a usage application and one or more access parameters designated the conditions and/or limits of a particular network usage plan. Upon initial connection to the network, the usage application grants or denies access to the network based on an analysis of the current values of the access parameters. Therefore, network usage tracking and enforcement is made simple and automatic without requiring any back-end servers on the network while still providing ultimate flexibility in changing billing plans for any number of users at any time.

Abstract: The invention provides a secure Wi-Fi communications method and system. In an embodiment of the invention, unique physical keys, or tokens, are installed at an access point and each client device of the network. Each key comprises a unique serial number and a common network send cryptographic key and a common network receive cryptographic key used only during the authentication phase by all components on the LAN. Each client key further includes a secret cryptographic key unique to each client device. During authentication, two random numbers are generated per communications session and are known by both sides of the wireless channel. Only the random numbers are sent across the wireless channel and in each case these numbers are encrypted. A transposed cryptographic key is derived from the unique secret cryptographic key using the random numbers generated during authentication. Thus, both sides of the wireless channel know the transposed cryptographic key without it ever being transmitted between the two.

Abstract: The invention provides a secure Wi-Fi communications method and system to enable automatic network roaming without requiring any back-end authentication servers and alleviating the need to handle large numbers of network parameters. In an embodiment of the invention, a client device listens for a “beacon frame” broadcast from a Wi-Fi access point. The beacon frame identifies the basic service set identifier (BSSID) of the access point. A tamper-resistant token, or client key, installed at the client device stores a set of authentication parameters, e.g., cryptographic keys, for each Wi-Fi network the client is permitted to access. Each set of authentication parameters is associated with a particular BSSID.

Abstract: A system, method, and apparatus for automatically and dynamically updating options, features, and/or services available to a client device operating in a client-server environment. The client device includes a client template database for storing templates defining a configuration of the client device. This configuration determines the options, features, and/or services available to a client device and the user of the client device. A server includes a server template database for storing the most current or latest versions of the templates used to configure the client device. When a user enters a user request at the client device, the client device transmits an associated information request to the server. The information request includes a client template identifier associated with the information request and a client template version identifier.

Abstract: A system, method and apparatus for utilizing transaction databases in a client-server environment. The transaction databases can be used to receive and retain multiple server responses to consecutive client requests regardless of the temporal relationship between the multiple responses and consecutive requests. One method of the invention relates to how a client device displays information. This method is for use in a client-server system including one or more servers and a client device having a client transaction database, a client template database, and a user interface adapted to enable a user to enter requests. The method includes the steps of receiving a user request from the user via the user interface and retrieving a template from the client template database based on the user request. The template includes one or more data fields.

Abstract: A system, method and apparatus for utilizing transaction databases in a client-server environment. The transaction databases can be used to receive and retain multiple server responses to consecutive client requests regardless of the temporal relationship between the multiple responses and consecutive requests. One method of the invention relates to how a client device displays information. This method is for use in a client-server system including one or more servers and a client device having a client transaction database, a client template database, and a user interface adapted to enable a user to enter requests. The method includes the steps of receiving a user request from the user via the user interface and retrieving a template from the client template database based on the user request. The template includes one or more data fields.

Abstract: A method and system for providing formatted information via a wireless communications system that includes a plurality of cell sites. The method includes the steps of storing a plurality of page templates each having a page identifier and at least one information field. The method also includes the step of receiving a request from a first two-way wireless communications device, wherein the request specifies the first device and a first page identifier selected by a user of the first device. In response to receiving the request a first page template, of the plurality of page templates, is determined. The first page template corresponds to the first page identifier. The method also includes determining information relating to an information field of the first page template and sending a response message to the first device, wherein the response message includes the determined information. The method can includes the step of displaying the information on a display of the first paging device.

Abstract: A pager system in which individual pagers have a database is disclosed. The database can be updated by transmitting a mask code and update data. The mask code indicates a mask stored in the individual pager itself which receives the data. Using the mask code, the mask is identified and used to indicate positions in the database where data is to be written.

Abstract: A pager based information system (2) is used to transmit both conventional individual and group messages (using pager capcodes (76) for pager identification) and three types of unconventional multi-recipient (M-R) messages (using database ID's (68), multi-level group (MLG) ID's (78) and M-R group ID's (46)), all using the conventional POCSAG pager transmission format. Operation of the pager (6) is software controlled through the use of a microprocessor (8) and RAM (16); auxiliary chips are not needed because of the relatively slow transmission speeds. Authority to receive the M-R messages is provided at the time of manufacture (electronic serial number (ESN) (74)) or via broadcast (database ID's, MLG ID's and group IDs). Database messages are stored in pager RAM in a hierarchical or tree structure.

Abstract: A method of encoding stock market data and transmitting such data via radio to a plurality of one-way receivers via an SCA channel on a commercial FM station transmits both a cyclical repetitive loop of all the stocks listed on a particular exchange including parameters of their open, high, low and last prices. During actual trading hours, the current trade values are also inserted on a real-time basis in the loop. The receiver is automatically and immediately updated by means of its storage capacity. To provide a short cycle of operation, data is compressed by dividing the stocks into groups determined by a binary offset from the last price compared to open, high and low and also by the maximum last sale price.

Abstract: A pager based information system is used to transmit both conventional private messages (using unique pager IDs) and two types of unconventional multi-recipient (M-R) messages (using database IDs and group IDs), all using the conventional POCSAG pager transmission format. Operation of the pager is software controlled through the use of a microprocessor and a RAM; auxiliary chips are not needed because of the relatively slow transmission speeds. Authority to receive the M-R messages is provided at the time of manufacture (database IDs) or via broadcasts (group IDs). Database type M-R messages are stored in the pager RAM in a hierarchial or tree structure. The software controlled pagers permit the over-the-air modification of the operation of selected pagers, such as the addition or deletion of group IDs and the change in the tree structure of the storage area for the database messages.

Abstract: An apparatus and a method of providing an access control for transmitted stock market data from a central radio station to a plurality of one-way radio receivers. Into each receiver is inputted an access code including a cypher pointer which provides for scrambling of the remainder of the access code which includes the authorized services, the service cutoff date, and the unit serial number which is unique to a particular receiver. The cypher pointer is used to rotate a common map in the receiver used for unscrambling and in the central station used for scrambling. In order to receive service, the permanently stored serial number of the unit must compare with the serial number of the access code, the cutoff date must be greater than the present system date transmitted from the central station, and there must be an authorized service class.

Abstract: A game of skill is playable by several remote participants in conjunction with a live event, for example, a football game which is being observed by the participants on their television receivers. In the participant's remote location, a game console receives various game instructions and scoring information including the snap time, for example, of a football play via an FM subcarrier channel. Part of the data of this channel provides lockout information to prevent a play from being entered after the ball has been snapped. Scoring at the remote location is provided by a memory table at the remote location in association with degree of difficulty data which is transmitted via the FM system. In addition, a verification code or anti-cheating technique is provided by the use of several counters which are randomly started by counter start signals also transmitted over the FM system.

Abstract: A system for detecting the location and identification of a number of vehicles at multiple points on a given track against a time gauge which includes an on-board transmitter on each vehicle of a unique identifying frequency, spaced receiving circuit elements along the track at multiple points connected to individual transmitters to receive and modify the identifying signal and transmit the signal to a programmed computer for translating the multiple signals of the different unique identifying frequencies into signals ascertainable on a portable hand apparatus selectively to indicate the speed of any selected vehicles as in a race, and to keep track of position standings and lap times.