Abstract: A system and method for locating a wireless client using trusted wireless detectors is described. Sniffers may sense signal strength information and transmit the information to a database. The database may store signal strength-based location information. Information from the database may then be used to determine the location of a wireless client based on new signal strength information from one or more sniffers.

Abstract: A system and method of managing multicast key distribution that includes associating a multicast address with each internal node of the key tree, wherein the key tree is created based on the last hop topology.

Abstract: A system and method that uses wireless-capable desktop computers in a vicinity such as to enable one to securely determine the location of an untrusted user with office level granularity.

Abstract: The invention is addressing the problem of efficient formation and maintenance of piconets with assistance from the master of an already existing piconet. The master of an existing piconet initiates the formation of a new helper piconet by at least two of its slaves. One of the slaves of the existing piconet becomes the master of the newly formed helper piconet and the other slave becomes a slave of the helper piconet. This process can be used to expand the number of Bluetooth devices that can use an Internet access point. It can also be used to permit two slave devices to communicate directly with one another so as not to unnecessarily use bandwidth available through the master. Finally, the method and system could be used to provide a method of efficient hand-off from one piconet to another.

Abstract: The present invention, among other things, obviates the effects of an attack on a wireless network through appropriate isolation and recovery. An aspect of the present invention can include a system and method of isolating a victim of malicious behavior in a wireless access network, and in particular WLAN networks. By having software on the victim's device, the system provides the capability of recovering the victim from the effects of the intruder, and prevents the victim from being affected by subsequent attacks by the intruder. The preferred embodiments include two key components: a local monitor and a global monitor.

Abstract: A method and apparatus for controlling ingress to a communications network to control quality of service is described. A request to admit a new communications flow is received. A polynomial and its coefficients representing a state of the network is determined and applied to the network state plus the new communications flow to determine whether admission of the new communications flow would cause the network to operate in a stable or unstable state. In response to determining that the network would operate in the unstable state, a communications flow for the ingress device is downgraded in its quality of service. By another approach, it is determined whether the new communications flow exceeds an allocated quota of bandwidth. Admission or rejection of the communications flow can be determined.

Abstract: Our invention is a method and system for a method of providing Quality of Service (QoS) over networks that do not provide any information and only serve to carry packets. Specifically, as Traffic traverses between various user networks via an opaque network, gateways at the edge of the user networks keep a record of the packets traversing into the opaque networks and packets traversing out of the opaque network. These gateways also know about the traffic classes that each of these packets belong to. The gateways at the ingress points (the user network where the packets originate) and the gateways at the egress points (the user network where the packets terminate) coordinate amongst themselves to exchange information about the number and latency of packets exchanged between the two. This information is used by the gateway at the ingress to estimate the state of the opaque network using dynamic throughput graphs.

Abstract: A secure localization method for wireless networks utilizes access point variable transmission power capability to transmit encoded localization signals at different power levels to a wireless device in the network. Based on the particular combination of encoded signals collected by the wireless device and reported back to a network controller, the location of the wireless device may be determined in conjunction with information contained in a location database.

Abstract: A system for key management in sensor networks which takes the location of sensor nodes into consideration while deciding the keys to be deployed on each node. This system reduces the number of keys that have to be stored on each sensor node and also provides for the containment of node compromise. Thus compromise of a node in a location affects the communications only around that location. The location dependent key management system does not require any knowledge about the deployment of sensor nodes. The system starts off with the loading of a single key on each sensor node prior to deployment. Subsequent to deployment a plurality of beacons is transmitted a plurality of different transmission ranges from each anchor node, said beacons containing at least one nonce. Each sensor node receives beacons depending upon its location in the network.

Abstract: The invention is addressing the problem of efficient formation and maintenance of piconets with assistance from the master of an already existing piconet. The master of an existing piconet initiates the formation of a new helper piconet by at least two of its slaves. One of the slaves of the existing piconet becomes the master of the newly formed helper piconet and the other slave becomes a slave of the helper piconet. This process can be used to expand the number of Bluetooth devices that can use an Internet access point. It can also be used to permit two slave devices to communicate directly with one another so as not to unnecessarily use bandwidth available through the master. Finally, the method and system could be used to provide a method of efficient hand-off from one piconet to another.

Abstract: A system and method that uses wireless-capable desktop computers in a vicinity such as to enable one to securely determine the location of an untrusted user with office level granularity.

Abstract: The invention is addressing the problem of efficient formation and maintenance of piconets with assistance from the master of an already existing piconet. The master of an existing piconet initiates the formation of a new helper piconet by at least two of its slaves. One of the slaves of the existing piconet becomes the master of the newly formed helper piconet and the other slave becomes a slave of the helper piconet. This process can be used to expand the number of Bluetooth devices that can use an Internet access point. It can also be used to permit two slave devices to communicate directly with one another so as not to unnecessarily use bandwidth available through the master. Finally, the method and system could be used to provide a method of efficient hand-off from one piconet to another.

Abstract: A system for key management in sensor networks which takes the location of sensor nodes into consideration while deciding the keys to be deployed on each node. This system reduces the number of keys that have to be stored on each sensor node and also provides for the containment of node compromise. Thus compromise of a node in a location affects the communications only around that location. The location dependent key management system does not require any knowledge about the deployment of sensor nodes. The system starts off with the loading of a single key on each sensor node prior to deployment. Subsequent to deployment a plurality of beacons is transmitted a plurality of different transmission ranges from each anchor node, said beacons containing at least one nonce. Each sensor node receives beacons depending upon its location in the network.

Abstract: A secure localization method for wireless networks utilizes access point variable transmission power capability to transmit encoded localization signals at different power levels to a wireless device in the network. Based on the particular combination of encoded signals collected by the wireless device and reported back to a network controller, the location of the wireless device may be determined in conjunction with information contained in a location database.

Abstract: A system and method of managing multicast key distribution that includes associating a multicast address with each internal node of the key tree, wherein the key tree is created based on the last hop topology.

Abstract: A system and method for locating a wireless client using trusted wireless detectors is described. Sniffers may sense signal strength information and transmit the information to a database. The database may store signal strength-based location information. Information from the database may then be used to determine the location of a wireless client based on new signal strength information from one or more sniffers.

Abstract: Unique temporary MAC addresses are calculated by mobile devices connected to wireless networks, using access point advertising information in combination with the permanent MAC address of the mobile device. The mobile devices use a hash function to construct a bit sequence from which a temporary MAC address can be extracted. The MAC address is unique over the entire region in which the mobile device can operate, without necessity of any coordination or negotiation between various access points of the region.

Abstract: The present invention, among other things, obviates the effects of an attack on a wireless network through appropriate isolation and recovery. An aspect of the present invention can include a system and method of isolating a victim of malicious behavior in a wireless access network, and in particular WLAN networks. By having software on the victim's device, the system provides the capability of recovering the victim from the effects of the intruder, and prevents the victim from being affected by subsequent attacks by the intruder. The preferred embodiments include two key components: a local monitor and a global monitor.

Abstract: A multi-hop wireless network system is disclosed that includes a plurality of routing nodes configured to route packets transmitted from a source node to a destination node. In the preferred embodiments, the plurality of routing nodes are configured to perform capture and analysis by only a last routing node before the destination node. Among other things, the system and method provides a efficient method for performing intrusion detection or other processing in a multi-hop wireless network.

Abstract: A service architecture for the rapid development of next generation telephony services that overcomes the limitations of the current closed PSTN architecture and service model. In this architecture services are provided by multiple cooperating distributed service providers. This architecture is built upon an object-oriented call model which is defined as a small set of extensions to the standard Java Telephony API call model. This new object-oriented call model hides the detail of the underlying call-state management protocols and hardware from applications.