Abstract: An objective of the present invention is to provide users with a kayak transporting apparatus to assist the users in the transportation of a kayak with minimum effort and strain to the users' body. The present invention provides a kayak carrier for a vehicle that can be adjusted to fit various sizes and shapes of kayak. The present invention is a low-profile apparatus compared to other kayak transporting apparatuses. The kayak transporting apparatus is also intended to be easily stored away as the kayak transporting apparatus is light-weight and the components of the apparatus are detachable from each other. Further, the present invention is a hitch attachment for the rear of a vehicle which facilitates the backing of a vehicle compared to a trailer ball attachment of other kayak transporting apparatuses. Thus, the present invention is a light weight, compact, versatile apparatus for transporting kayaks efficiently.

Abstract: A fishing rod holder includes an arch body, a support lip, a handle opening, and an alignment slot. The arch body that functions as the rigid holding structure includes a flat base, a left arch wall, and a right arch wall. The left arch wall and the right arch wall are oppositely positioned of each other about the flat base. The left arch wall is perpendicularly connected to the flat base. The right arch wall is perpendicularly connected to the flat base. The support lip is connected to a front end of the flat base and provides a platform to secure the pole section of the fishing rod. The handle opening traverses through a rear end of the flat base thus allowing to insert the handle section of the fishing rod. The alignment slot centrally traverses through the flat base and allows the arch body to be mounted to kayaks.

Abstract: Apparatus to enforce network policy based on identity authentication at a network endpoint device by offloading the authentication to a network attached authentication devices is disclosed. The authentication device may use Statistical Object Identification to perform the authentication. The present disclosure greatly reduces the resources needed by the network endpoint device to perform the authentication and eliminates the topological restrictions found in traditional network appliance based approaches.

Abstract: A Confidence Broker System is disclosed. One embodiment of the present invention includes a confidence broker (10) which communicates with a plurality of confidence producers (12A, 12B, 12C) and a plurality of confidence consumers (14A, 14B, 14C). Communications between these elements is conducted via a communications infrastructure (16). The confidence broker (10) also includes a communications interface (42) which is connected to a protocol converter (44). The protocol converter (44) is connected to a confidence normalizer (46). The confidence normalizer (46) is connected to a confidence mediator (48). The confidence mediator (48) is connected to a confidence mapper (50). The confidence mapper (50) is connected to the protocol converter (44). Each of the protocol converter (44), the confidence normalizer (46), the confidence mediator (48) and the confidence mapper (50) is connected to a storage device (52).

Abstract: Apparatus and system that perform the method of providing a FCoE Transformer including an Ethernet Interface and a Fibre Channel Interface, receiving, at the FCoE Transformer, an FCoE Frame via a Layer 2 Ethernet Switch, converting, at the FCoE Transformer, the FCoE Frame to a Fibre Channel Frame. The FCoE Frame includes a SOF field included in an FCoE Transport Header for providing an SOF character used to start the fibre channel frame, and the SOF field in the FCoE Transport Header is for encoding the SOF field, Fibre Channel Frame. The FCoE Frame includes an EOF field included in an FCoE Transport Header for providing an EOF character used to end the fibre channel frame, and the EOF field in the FCoE Transport Header is for encoding the EOF field, Fibre Channel Frame. The method includes transporting the Fibre Channel Frame.

Abstract: Apparatus and system for performing the method of providing a FCoE HBA including a Virtual Fibre Channel Port and an Ethernet Interface, providing a Layer 2 Ethernet Switch, and sending an FCoE Frame via the Layer 2 Ethernet Switch. The FCoE Frame includes a SOF field included in an FCoE Transport Header for providing an SOF character used to start a Fibre Channel Frame, and the SOF field in the FCoE Transport Header is for encoding the SOF field, Fibre Channel Frame. The FCoE Frame includes an EOF field included in an FCoE Transport Header for providing an EOF character used to end the Fibre Channel Frame, and the EOF field in the FCoE Transport Header is for encoding the EOF field, Fibre Channel Frame.

Abstract: The present invention enables the selection of network routes based on a combination of traditional route table entries, identity policy information, and trust level information determined dynamically for each network session. This enables a network operator to apply different policies to network entities presenting differing identity credentials. It also allows network operators to block access to networks and network resources when identity credentials are not provided or are unauthorized.

Abstract: The present invention provides methods and apparatus to generate a statistical object, the deterministic statistical representation of an original object, using a Deterministic Random Bit Generator (DRBG) (10). Multiple DRBG Statistical Object Generators (10) may be chained together to increase security by using independent security configurations (22) for each DRBG Statistical Object Generator (10).

Abstract: The present invention enables the selection of network routes based on a combination of traditional route table entries, identity policy information, and trust level information determined dynamically for each network session. This enables a network operator to apply different policies to network entities presenting differing identity credentials. It also allows network operators to block access to networks and network resources when identity credentials are not provided or are unauthorized.

Abstract: Apparatus to enforce network policy based on identity authentication at a network endpoint device by offloading the authentication to a network attached authentication devices is disclosed. The authentication device may use Statistical Object Identification to perform the authentication. The present disclosure greatly reduces the resources needed by the network endpoint device to perform the authentication and eliminates the topological restrictions found in traditional network appliance based approaches.

Abstract: Methods and apparatus for the Transporting of Fibre Channel data over Ethernet are disclosed. In one embodiment of the invention, a server (32) contains a virtual Fibre Channel Host Bus Adapter (HBA) (40). The virtual Fibre Channel HBA (40) contains a number of virtual Fibre Channel N-Ports (42) and an Ethernet interface (44). The virtual Fibre Channel HBA (40) is connected to an Ethernet layer (2) switch (24) via an ethernet local area network (21). The Ethernet layer (2) switch (24) is also connected to an FCoE Transformer (46) via an ethernet local area network (21). The FCoE Transformer (46) is connected to the Fibre Channel storage area network (20). Contained within the FCoE Transformer (46) are a number of real Fibre Channel N-Ports (48) that correspond to the virtual Fibre Channel N-Ports (42).

Abstract: Methods and apparatus for the Transporting of Fibre Channel data over Ethernet are disclosed. In one embodiment of the invention, a server (32) contains a virtual Fibre Channel Host Bus Adapter (HBA) (40). The virtual Fibre Channel HBA (40) contains a number of virtual Fibre Channel N-Ports (42) and an Ethernet interface (44). The virtual Fibre Channel HBA (40) is connected to an Ethernet layer (2) switch (24) via an ethernet local area network (21). The Ethernet layer (2) switch (24) is also connected to an FCoE Transformer (46) via an ethernet local area network (21). The FCoE Transformer (46) is connected to the Fibre Channel storage area network (20). Contained within the FCoE Transformer (46) are a number of real Fibre Channel N-Ports (48) that correspond to the virtual Fibre Channel N-Ports (42).

Abstract: Apparatus to enforce network policy based on identity authentication at a network endpoint device by offloading the authentication to a network attached authentication devices is disclosed. The authentication device may use Statistical Object Identification to perform the authentication. The present invention greatly reduces the resources needed by the network endpoint device to perform the authentication and eliminates the topological restrictions found in traditional network appliance based approaches.

Abstract: A Confidence Broker System is disclosed. One embodiment of the present invention includes a confidence broker (10) which communicates with a plurality of confidence producers (12A, 12B, 12C) and a plurality of confidence consumers (14A, 14B, 14C). Communications between these elements is conducted via a communications infrastructure (16). The confidence broker (10) also includes a communications interface (42) which is connected to a protocol converter (44). The protocol converter (44) is connected to a confidence normalizer (46). The confidence normalizer (46) is connected to a confidence mediator (48). The confidence mediator (48) is connected to a confidence mapper (50). The confidence mapper (50) is connected to the protocol converter (44). Each of the protocol converter (44), the confidence normalizer (46), the confidence mediator (48) and the confidence mapper (50) is connected to a storage device (52).

Abstract: An objective of the present invention is to provide users with a kayak transporting apparatus to assist the users in the transportation of a kayak with minimum effort and strain to the users' body. The present invention provides a kayak carrier for a vehicle that can be adjusted to fit various sizes and shapes of kayak. The present invention is a low-profile apparatus compared to other kayak transporting apparatuses. The kayak transporting apparatus is also intended to be easily stored away as the kayak transporting apparatus is light-weight and the components of the apparatus are detachable from each other. Further, the present invention is a hitch attachment for the rear of a vehicle which facilitates the backing of a vehicle compared to a trailer ball attachment of other kayak transporting apparatuses. Thus, the present invention is a light weight, compact, versatile apparatus for transporting kayaks efficiently.

Abstract: Methods and apparatus for a Secure Time Communication System (10) are disclosed. One embodiment of the invention provides secure and non-interactive communication of clock information over an unsecured communications channel. This communication provides perfect forward secrecy, while detecting and blocking message spoofing, message replay, denial of service and cryptographic performance attacks. This mechanism also bounds the effect of message delay manipulation. The mechanism consists of two components, a filtered time encryptor (16) and a filtered time decryptor (28). The filtered time encryptor (16) produces a message in two parts; a time token followed by an encrypted message body. The time token is used as a filter to detect most attacks and to determine the message key.

Abstract: Apparatus to enforce network policy based on identity authentication at a network endpoint device by offloading the authentication to a network attached authentication devices is disclosed. The authentication device may use Statistical Object Identification to perform the authentication. The present invention greatly reduces the resources needed by the network endpoint device to perform the authentication and eliminates the topological restrictions found in traditional network appliance based approaches.

Abstract: Methods and apparatus for a Secure Time Communication System (10) are disclosed. One embodiment of the invention provides secure and non-interactive communication of clock information over an unsecured communications channel. This communication provides perfect forward secrecy, while detecting and blocking message spoofing, message replay, denial of service and cryptographic performance attacks. This mechanism also bounds the effect of message delay manipulation. The mechanism consists of two components, a filtered time encryptor (16) and a filtered time decryptor (28). The filtered time encryptor (16) produces a message in two parts; a time token followed by an encrypted message body. The time token is used as a filter to detect most attacks and to determine the message key.

Abstract: Methods and apparatus for providing a mechanism that uses attribution information present in some network traffic to provide enhanced security for all network services protected by an attribution security system are disclosed.

Abstract: Methods and apparatus for the Transporting of Fibre Channel data over Ethernet are disclosed. In one embodiment of the invention, Fibre Channel data frame and primitive signals are transported over Ethernet instead of using the Fibre Channel FC-1 and FC-0 protocols. This allows less expensive Ethernet equipment and devices to transport and perform services for Fibre Channel connected devices without having a physical Fibre Channel interface. The ability to provide Fibre Channel services and functions without having a physical Fibre Channel interface allows existing Ethernet equipment to be placed into service as SAN components without modification.