Abstract: A user's voice is authenticated by prompting a user to say a challenge phrase from a list of predetermined phrases and comparing the user's response with a prerecorded version of the same response. The user's stored recordings are associated with an electronic identification or serial number for a specific device, so that when communication is established using the device, only the specific user may authenticate the session. When several phrases and recordings are used, one may be selected at random for authentication so that fraudulent authentication using a recording of the user's voice may be thwarted. The system and method may be used for authenticating a device when it is first activated, such as a telephony device, or may be used when authenticating a specific communications session.

Abstract: Various technologies and techniques are disclosed that improve media communications. In one embodiment, a media server receives a media communication with a first quality from a personal computer with VoIP telephone capabilities. The media server translates the media (e.g., audio, visual, etc.) communication into a second quality, and forwards the media communication to a communication gateway. The translation to improve communications can also be done when receiving the media communication from the communication gateway for forwarding to the persona computer having VoIP telephone capability. In some embodiments, a media server sits in the communication channel between a personal computer with VoIP telephone capabilities and a communication gateway and is able to translate communications into codec protocols they each understand.

Abstract: Various technologies and techniques are disclosed that improve media communications. In one embodiment, a media server receives a media communication with a first quality from a personal computer with VoIP telephone capabilities. The media server translates the media (e.g., audio, visual, etc.) communication into a second quality, and forwards the media communication to a communication gateway. The translation to improve communications can also be done when receiving the media communication from the communication gateway for forwarding to the persona computer having VoIP telephone capability. In some embodiments, a media server sits in the communication channel between a personal computer with VoIP telephone capabilities and a communication gateway and is able to translate communications into codec protocols they each understand.

Abstract: Techniques for providing a shared clipboard to participants in a conversation are provided. The shared clipboard is specific to the conversation to which it is associated in that the shared clipboard does not “spill over” from one conversation to another. When a conversation between two or more participants is established, a shared clipboard becomes available to the participants of the conversation. The shared clipboard facilitates the sharing of data between the participants in the conversation. During the conversation, each participant in the conversation is provided access to the shared clipboard, including its contents. When a participant joins or is added to the conversation, the added participant is also provided access to the shared clipboard and its contents.

Abstract: A method and system for providing context of a caller to a callee when a call is initiated is provided. The context system executing on the calling device collects context for the call. The calling device initiates the call and sends a message to the callee that includes the context. Upon receiving the message, the callee device notifies the caller that a call has been initiated and displays the received context. The callee can decide based on the received context whether to answer the call or not answer the call.

Abstract: The distributed firewall performs user authentication at a first level to establish a user security context for traffic from that user, and an authority context provides authorization for subsequent traffic. This authority context may be based on an underlying policy for particular types of traffic, access to particular applications, etc. Additionally, the system includes the ability to allow a user/process/application to define its own access control. The linking of the user security context from the traffic to the application is accomplished by enabling IPSec on a socket and forcing the socket to be bound in exclusive mode. The most common policy definitions may be included by default. Extensions of the Internet key exchange protocol (IKE) to provide the desired user authentication plus application/purpose are also provided. The architecture includes pluggable authorization module(s) that are called after IKE has successfully authenticated the peer, but before the connection is allowed to complete.

Abstract: A software network bridge is disclosed which allows the connected network segments to be presented as a single network unit to the host computer. The software bridge can be implemented as an intermediate network driver, abstracting multiple network segments into a single network interface for higher level protocols and applications. While the intermediate network driver acts as a software bridge implementing the Spanning Tree Algorithm, it also acts a network interface driver to higher level protocols, conglomerating information from the multiple underlying network interface cards and forwarding along commands from the higher level software to the appropriate network interface card. The intermediate network driver can also simultaneously send the same data packet through multiple network interfaces by creating multiple packet descriptors, each pointing to the same data, but each given individually to the underlying network interfaces to control during their transmission.

Abstract: A software network bridge is disclosed which allows the connected network segments to be presented as a single network unit to the host computer. The software bridge can be implemented as an intermediate network driver, abstracting multiple network segments into a single network interface for higher level protocols and applications. While the intermediate network driver acts as a software bridge implementing the Spanning Tree Algorithm, it also acts a network interface driver to higher level protocols, conglomerating information from the multiple underlying network interface cards and forwarding along commands from the higher level software to the appropriate network interface card. The intermediate network driver can also simultaneously send the same data packet through multiple network interfaces by creating multiple packet descriptors, each pointing to the same data, but each given individually to the underlying network interfaces to control during their transmission.

Abstract: A method is provided for implementing a firewall in a firewall architecture. The firewall architecture includes a plurality of network layers and a first firewall engine. The layers send packets and packet information to the first firewall engine, maintain and pass packet context to subsequent layers, and process the packets. The first firewall engine compares the packet information to one or more installed filters and returns an action to the layers indicating how to treat the packet.