Abstract: Methods are provided for securely transmitting a packet between endpoints of a network. In one aspect, there is provided a method for establishing an end-to-end key using extant hop-by-hop security associations. In a second aspect, there is provided a method in which a packet-specific encryption key PEK is used to encrypt a packet p. A signature of the key PEK is independently computed at each of two nodes, using an integrity key shared by the two nodes. The signature is sent from one of the two nodes to the other in association with the packet p. The receiving node uses the signature to verify that the packet p was originated by an entity having possession of the PEK.

Abstract: Embodiments address various methods and apparatuses that attempt to minimize the time that the security communication between group members may be at risk due to a user joining or leaving. For example, embodiments include methods of minimizing the time for which a joining member receives a secure commonly shared key and other embodiments include methods of minimizing the time that a user leaving the group has access to data shared within the group through updating the secure commonly shared key.

Abstract: There can be problems with the security of social networking communications. For example, there may be occasions when a number of friends wish to communicate securely through a social network infrastructure, such that non-trusted 3rd-party entities, such as a Social Network Operator or host that provides the application infrastructure, does not overhear the communication. In response to the above problems, embodiments presented propose a set of innovative, lightweight solutions, considering that in certain scenarios the Social Network Operator may not be a trusted entity. Embodiments of the present invention are directed to methods and apparatuses for secure information sharing in social networks using random keys.

Abstract: Techniques for efficient determination of a macroblock's spatial predictability quality with respect to the H.264 specification are provided. A device comprises a processor operable to estimate a first subset of spatial prediction modes based on a first pixel subset of a current subblock of an intra-frame. The processor is also operable to estimate a second subset of spatial prediction modes based on a second pixel subset of the current subblock. The first subset of prediction modes is different from the second subset of prediction modes.

Abstract: Methods and apparatuses to encode multimedia data enabling, among others, for example, improved decoded video quality, improved error recovery capabilities and/or improved decoding efficiency are described. An encoder device determines one or more distortion values for one or more portions of multimedia data based at least in part on one or more concealment methods related to concealing the one or more portions if the one or more portions were received in error. The encoder device determines one or more encoding methods for the one or more portions based at least in part on the one or more estimated distortion values. In one aspect, determining the one or more encoding methods comprises determining the one or more encoding methods so as to refresh the one or more portions based at least in part on a comparison of the one or more estimated distortion values and one or more thresholds.

Abstract: Methods and apparatus to process multimedia data enabling faster channel acquisitions, improved error recovery and improved efficiency. An encoder device encodes a first portion of multimedia data using inter-coding to generate a first version, and encodes the first portion of multimedia data using intra-coding to generate a second version. A decoder device receives a first version of a first portion of multimedia data, wherein the first version is inter-coded, receives a second version of the first portion of multimedia data, wherein the second version is intra-coded, and selectively decodes the first and second received versions.

Abstract: Decoding systems and methods are disclosed. In a particular embodiment, a video decoder system includes a first decoding path and a second decoding path configured to decode at a slower average rate than the first decoding path. The video decoder system includes a dynamic switch configured to provide a first portion of the encoded video signal to the first decoding path or to the second decoding path. The dynamic switch is further configured to provide a subsequent portion of the encoded video signal to the first decoding path or to the second decoding path in response to a value of a decoding metric associated with decode processing of the first portion.

Abstract: A key distribution scheme is provided, which is useful for establishing, distributing, and maintaining security associations in a Mobile IP network. An authentication server performs an initial validation of a new session and generates a root key which it delivers to the initial access gateway and to the home agent. The initial access gateway and the home agent each independently compute a derivative key available only to themselves. The initial access gateway, acting as proxy for the mobile station, uses the derivative key to sign the Mobile IP registration or binding update transactions, and sends the signed registration or binding update to the home agent for validation. Once the session is established between the mobile station and the home agent, the access gateways act as proxies on behalf of the mobile station to maintain the session mobility. In handoff, the new access gateway acquires the root key as part of the transferred session context.

Abstract: A method of processing a text message at a platform server includes processing the text message to obtain a first text element and a second text element, and communicating information associated with one or both of the first text element and the second text element to the sender of the text message or a third party, through a communication network. The platform server is administered by one or both of an administrator and a user with or without an account associated with the platform server. The text message includes the first text element and the second text element, linked by a visible non-alphanumeric character.

Abstract: A method is provided a wireless system for optimizing network throughput in a wireless communication system. More particularly, the methodology of the invention evaluates the both individual user data throughput as well as the data throughput of a larger user population, in determining the base station to which a user should attach when entering the wireless system. In an alternate embodiment, the invention methodology evaluates such individual user data throughput and the user population throughput in determining whether or not to handoff a data session for a user from one base station to the other.

Abstract: Decoding systems and methods are disclosed. In a particular embodiment, a video decoder system includes a first decoding path and a second decoding path configured to decode at a slower average rate than the first decoding path. The video decoder system includes a dynamic switch configured to provide a first portion of the encoded video signal to the first decoding path or to the second decoding path. The dynamic switch is further configured to provide a subsequent portion of the encoded video signal to the first decoding path or to the second decoding path in response to a value of a decoding metric associated with decode processing of the first portion.

Abstract: In a wireless network or other communication system, admission of users to the system involves use of a first scheduler, which makes actual scheduling decisions for admitted users, and a second scheduler, which emulates the operation of the first scheduler. The first scheduler is configured to manage access to network resources for users already admitted to the system. The first scheduler is coupled to an admission control module which contains the second scheduler. The second scheduler, also referred to herein as a virtual scheduler, emulates operation of the first scheduler, under an operating scenario involving admission of at least one additional user to the system, in order to generate a performance metric. The performance metric is used to make an admission control decision regarding admission of the at least one additional user to the system.

Abstract: Methods and systems to generate derivative information sources, from original information sources, use an ontology that provides a logic-based representation formalism of each of a number of original information sources, the original information sources having heterogeneous representation formalisms. The original information sources are transformed to the ontology. A number of derivative information sources, corresponding to the original information sources, may be automatically generated from the ontology.

Abstract: In a wireless network or other communication system, admission of users to the system is based on predicted scheduling gain. A scheduler is configured to manage access to network resources for users already admitted to the system. An admission control module is coupled to the scheduler, and determines a predicted scheduling gain of the scheduler under an operating scenario involving admission of at least one additional user to the system. The predicted scheduling gain is processed to generate at least one performance metric which is used to make an admission control decision regarding admission of the at least one additional user to the system.

Abstract: Techniques for efficient determination of a macroblock's spatial predictability quality with respect to the H.264 specification are provided. A device comprises a processor operable to estimate a first subset of spatial prediction modes based on a first pixel subset of a current subblock of an intra-frame. The processor is also operable to estimate a second subset of spatial prediction modes based on a second pixel subset of the current subblock. The first subset of prediction modes is different from the second subset of prediction modes.

Abstract: A method of transmitting or retransmitting a packet in a communication system. The method includes determining a modulation and coding scheme (MCS) to reduce the packet error rate (PER) for transmission, where the MCS is an aggregate of M redundant packet transmissions as a function of at least one of determined past channel conditions and/or allocated resources, determinable current channel conditions and/or allocated resources, future statistical channel conditions and/or allocated resources, and/or a cost function; and transmitting the packets in the communication system according to the MCS.

Abstract: A method of scheduling data communication over an uplink. The method enables two or more users seeking to transmit data over the uplink to be scheduled in response to their path loss. The user having the most attractive determined path loss among the two or more users seeking to transmit data over the uplink us scheduled first. Thereafter, the next user having the next most attractive path loss among the remaining users may be subsequently scheduled if the total noise rise leftover is greater than zero. This process repeats so long as or until the total noise rise leftover is about zero.

Abstract: A key distribution scheme is provided, which is useful for establishing, distributing, and maintaining security associations in a Mobile IP network. An authentication server performs an initial validation of a new session and generates a root key which it delivers to the initial access gateway and to the home agent. The initial access gateway and the home agent each independently compute a derivative key available only to themselves. The initial access gateway, acting as proxy for the mobile station, uses the derivative key to sign the Mobile IP registration or binding update transactions, and sends the signed registration or binding update to the home agent for validation. Once the session is established between the mobile station and the home agent, the access gateways act as proxies on behalf of the mobile station to maintain the session mobility. In handoff, the new access gateway acquires the root key as part of the transferred session context.

Abstract: Methods are provided for securely transmitting a packet between endpoints of a network. In one aspect, there is provided a method for establishing an end-to-end key using extant hop-by-hop security associations. In a second aspect, there is provided a method in which a packet-specific encryption key PEK is used to encrypt a packet p. A signature of the key PEK is independently computed at each of two nodes, using an integrity key shared by the two nodes. The signature is sent from one of the two nodes to the other in association with the packet p. The receiving node uses the signature to verify that the packet p was originated by an entity having possession of the PEK.

Abstract: A method for performing Talent Relationship Management (TRM) of candidates uses target groups formed for specified purposes from candidates constituting a talent pool. The target groups may be formed by a recruiter based on candidate attributes obtained from questionnaires, surveys and from data base information, and may be used for identifying candidates for filling a vacancy in an organization, based on specific requirements of the organization. The candidate attributes may include education, skill level, work specialty, experience, geographical location, and candidate aptitude. Each target group may be nurtured or otherwise managed by offering specialized services to the candidates of the target who share common interests/background. A UI can be used by the recruiter, or an administrator in the case of an organization to view the candidate attributes, candidate listing and other information pertaining to a target group. Only those who are authorized may view and administer/alter the target group listings.