Abstract: A data processing system, method, and product are disclosed for automatically configuring IP security tunnels. A security policy specification format is established that is capable of being utilized by any one of multiple different operating systems and any one of multiple different machine types. An IP security tunnel is automatically configured utilizing the security policy specification format.

Abstract: The present invention provides a method, system, and computer program product for enhancing security within a distributed computing network while enabling fine-grained access control for packets traveling through the network. The disclosed techniques enable this fine-grained access control while simultaneously providing broad-brush application-independent and user-independent security for Internet Protocol (IP) packets that are in transit over both secure networks (such as a corporate intranet) and non-secure networks (such as the public Internet). Access control decisions are delegated to an access control engine, and are based upon mutually authenticated identity information (e.g. of a system user and/or application) that is extracted from information exchanged as part of an underlying security service (such as the Internet Key Exchange of the IP Security Protocol).

Abstract: A method, system, and computer program product for providing consistent, end-to-end protection within a computer network for user datagrams (i.e. packets) traveling through the network. The network may comprise network segments that are conventionally assumed to be secure (such as those found in a corporate intranet) as well as network segments in non-secure networks (such as the public Internet or corporate extranets). Because security breaches may in fact happen in any network segment when datagrams are unprotected, the present invention discloses a technique for protecting datagrams throughout the entire network path by establishing cascaded tunnels. The datagrams may be exposed in cleartext at the endpoints of each tunnel, thereby enabling security gateways to perform services that require content inspection (such as network address translation, access control and authorization, and so forth).

Abstract: A data processing system, method, and product are disclosed for automatically configuring IP security tunnels. A security policy specification format is established that is capable of being utilized by any one of multiple different operating systems and any one of multiple different machine types. An IP security tunnel is automatically configured utilizing the security policy specification format.

Abstract: A method, system, and computer program product for providing consistent, end-to-end protection within a computer network for user datagrams (i.e. packets) traveling through the network. The network may comprise network segments that are conventionally assumed to be secure (such as those found in a corporate intranet) as well as network segments in non-secure networks (such as the public Internet or corporate extranets). Because security breaches may in fact happen in any network segment when datagrams are unprotected, the present invention discloses a technique for protecting datagrams throughout the entire network path by establishing cascaded tunnels. The datagrams may be exposed in cleartext at the endpoints of each tunnel, thereby enabling security gateways to perform services that require content inspection (such as network address translation, access control and authorization, and so forth).

Abstract: NTSC composite color video signals captured in a freeze-frame videoconferencing system can be decomposed into luminance and chrominance components using simple digital addition and subtraction. The necessary apparatus includes a conventional color camera, an analog-to-digital converter, and a superframe buffer, organized into four field buffers. The analog signal is sampled at phase angles which are displaced at 135 degree increments. The preferred phase angles are 0, 135, 270, 45, 180, 315, 90 and 225 degrees relative to the phase of the color burst for the current scan line. Due to the reversal of the color burst phase on a frame-to-frame basis, a luminance or Y value can be obtained for each pel by adding the digital values stored in corresponding pel positions in corresponding fields (odd or even) in two successive frames of the same image. A chrominance or C value can be obtained by subtracting the same two values.

Abstract: Distributed transmission control for a TDMA system including one or more user networks. A time synchronized burst modem, one at each earth station in a system, transfers TDMA frame timing signals to an interconnected data processing machine. The interconnected data processing machine is then capable of synchronizing information transfer to the time synchronized burst modem in accordance with the received TDMA frame timing signals. Accordingly, each network has available to it, at each data processing machine in the network, TDMA frame timing signals. Accordingly, optimizing information transfer can be effected on a network-by-network basis, wholly independent of overall system TDMA information transfer optimization.

Abstract: A .[.two-phase.]. superconductive shift register using Josephson tunnelling devices is provided wherein a plurality of shift register stages each includes a first and second branch in parallel to which a DC current is supplied. A Josephson tunnelling device is located in each branch which operates in its no voltage state when the DC current is applied thereto. A first and second input means is provided for switching one of the Josephson tunnelling devices in accordance with an input to cause the input current to flow through the other branch. A first and second .[.coupling.]. .Iadd.control .Iaddend.means are located between the stages of the shift register, the first .[.coupling.]. .Iadd.control .Iaddend.means coupling the first branch circuits of successive stages and the second .[.coupling.]. .Iadd.control .Iaddend.means coupling second branch circuits of successive stages. The .[.coupling.]. .Iadd.control .Iaddend.means are .[.energized.]. .Iadd.effective .Iaddend.