Abstract: A plug-and-play (PnP) for configuring security in a PnP architecture includes a security manager and a PnP device. The PnP device is adapted to send a device description document to a user entity. The device description document includes an address pointing to the security manager, and as such, the user entity is capable of accessing the security manager based upon the address. The security manager is adapted to authenticate the user entity, and it authenticated, to communicate with the user entity to configure application-layer security of the PnP device, whereby configuring the application-layer security includes creating an access control list (ACL) document for restricting access to a service of the PnP device. In a further aspect, the PnP device may bootstrap establishing its link-layer security with configuring its application-layer security.

Abstract: For enabling a remote access to a local network via a remote access device of the local network, a mobile device of the local network assembles and provides configuration settings for the remote access. The remote access device receives the configuration settings from the mobile device and enables a remote access to the local network via the remote access device using these configuration settings.

Abstract: A Content Directory Service (CDS) security service specifying, in a user friendly manner, which users of a media server or other UPnP device own which content. The security service also permits the owners of content to control who is permitted to read the content. A CDS account manager is used to define user accounts and associated rights, such as validity periods and default rights. The CDS account manager is used by a security console which owns the media server. A CDS content manager is used to manipulate the rights to objects. The CDS content manager is used by a registered security aware control point (i.e., a control point associated with a user account) and can be used to change read and write access lists on the object.

Abstract: A system for selectively granting access rights within a network. When a requesting device learns that a device is a secure device and is owned by a Security Console, the requesting device calls a listowners action to the secure device, which respond by transmitting a public key hash to the requesting device. The requesting device then multicasts a message including the public key hash. Security Consoles receiving the multicast message then determine whether they recognize the public key hash. If a Security Console recognizes the public key hash, then it responds to the multicast message and subsequently provides the requesting device with access rights to the secure device.

Abstract: Application layer signaling is provided from users registering at a presence server for a presence service wherein upon reception the signaling is checked for spatial location information and stored for future use in providing the presence service in association with other user information, such as user identity. The application layer signaling may be in accordance with the session initiation protocol (SIP) and the spatial location information provided as a spatial location payload (SLoP). The presence service may provide access to the spatial location information to one or more location based services either openly or confidentially by hiding the user's identity and other information. The spatial location information may also be used in conjunction with a messaging service for providing messages to the users with enhanced functionality.

Abstract: A method, and related equipment, for interoperating between a device (11a) in a first network, such as an IMS network, and a device (12a) in a second network (12), such as a WV network, the first network using a first protocol (SIP) requiring that a message have a request uniform resource identifier including an address scheme, and the second network (12) using one or more other protocols. The method includes a step (41) of converting a message constructed according to the first protocol (SIP) but having as an address scheme indicating a protocol of the second network (such as “wv:”) to a message in which the address scheme is changed (e.g. to “sip:”) to indicate the protocol of the first network and in which a user uniform resource locator parameter is provided having a value indicating the original scheme, before conversion (i.e. “wv” in the example given).

Abstract: A method and corresponding equipment for setting up a conference call via a communication network that uses session initiation protocol (SIP) signalling for call setup, the method including steps (E1a E2a E3a E4a) of providing during the call setup signalling to a subscriber invited to participate in the conference call an indication that the call is a conference call and including in the call setup signalling a reference to a group document indicating information about the conference call, such as the other invited participants, or including the group document itself.

Abstract: Equipment of use typically in a mobile station for instructing a consumer electronic device to record content, for transferring content from a first consumer electronic device to a second consumer electronic device, and for requesting that a consumer electronic device communicate content to the equipment.

Abstract: A system for accessing protected content within an intranet includes a remote UI server capable of providing the remote user interface (UI) service, and a user entity capable of initiating the UI service with the remote UI server. In addition, the system includes a DRM agent capable of being accessed from the user entity over the remote UI service, where the DRM agent is located across the intranet from the control point. To effectuate modification of a rights object associated with a selected content item, the user entity is capable of operating the accessed DRM agent over the remote UI service. In this regard, the rights object is capable of being modified such that the selected content item can thereafter be accessed based upon the modified rights object.

Abstract: Providing access to content in an ad-hoc peer-to-peer network involves gathering, from a plurality of media servers coupled to the network, content listings that describe content available via the associated media server. A subset of the content listings is selected based on an identity associated with a control point device. An aggregated content listing is presented to the control point device based on the selected subset of the content listings.

Abstract: A method by which access to services of a network are controlled, including a step in which a client device presents proof of identity to a service security module attached to the network and providing security against unauthorized access to the service.

Abstract: Methods and systems are provided to link two Universal Plug and Play (“UPnP”) networks to enable the devices in one to communicate directly with the devices in the other. Specifically, a mobile station visiting a first UPnP network may establish communication with a second UPnP network via Web Services (“WS”) protocol with a network gateway of the second UPnP network. The UPnP devices in the first UPnP network can then communicate with those in the second. According to another aspect, a secure communication link is provided between the UPnP network and the remotely located mobile station. Specifically, a network gateway acts as an entry point to the UPnP network and authenticates and authorizes messages from the mobile station. According to yet another aspect, a mobile station lacking UPnP capabilities can communicate with UPnP devices using a network gateway that converts between WS messages and UPnP commands.

Abstract: Mobile-specific services are provided to a mobile device coupled to a local area network. The local area network provides ad-hoc connectivity between consumer electronics devices. A service provider device is coupled to the local area network. A mobile-specific service is provided at least in part by the service provider device. The mobile-specific service is advertised via the local area network. The mobile device subscribes to the mobile-specific service via the local area network in response to advertising of the mobile-specific service. The mobile device utilizes the mobile-specific service via the local area network.

Abstract: A system and method for managing next hop addressing where multiple address schemes are provided in messages transmitted via a network. A predefined addressing policy may be applied to an incoming message if the predefined addressing policy includes a policy corresponding to an incoming address scheme of the incoming message. The incoming address scheme is converted to one or more outgoing address schemes provided by a location service in response to a location query. A plurality of outgoing messages is dispatched, each using one of the outgoing address schemes provided by the location service. A default next hop addressing operation is effected when the predetermined addressing policy does not correspond to the incoming address and when none of the multiple outgoing address schemes provides a useful result.

Abstract: Synchronizing content description data between devices on an ad hoc peer-to-peer network involves storing a plurality of data entries on a directory server. Each data entry describes one or more multimedia data objects accessible via the network. A synchronization object of the directory server is associated with the data entries. The synchronization object is capable of describing changes to the data entries. The data entries are downloaded from the directory server to a cache of a control point device via the network. The synchronization object of the directory server is changed in response to a change in at least one of the data entries of the directory server. The cache of the control point device is updated with the change in the at least one data entry based on the changing of the synchronization object of the directory server.

Abstract: A system and method for updating and/or refreshing service announcements at regular intervals to a limited device within a network. The limited device sends a signal to the other devices in the network, requesting that refreshments and/or updates be provided at certain intervals. During these intervals, the limited device can enter a sleep mode, preserving battery life. At the end of the interval, the limited device exits the sleep mode and accepts any necessary updates and/or refreshments.

Abstract: Exchanging data between a mobile device and a network involves receiving, via the network, multicast service announcements from a plurality of service providers. The multicast service announcements are stored in a cache. A service search request originating from the mobile device is received. A reply to the service search request is determined based on the multicast service announcements stored in the cache. The reply is provided to the mobile device in response to the service search request.

Abstract: This invention relates generally to the field of cancer diagnostics. The invention further relates to the use of mutational load distribution analysis (MLDA) to examine changes in the distribution of genetic mutations incident to cancer.

Abstract: A relay server (11) including functionality for enabling a user in one domain to perform a group operation on a group used by a service in another domain, and so hosted by a server in the other domain. A predetermined list (11e) of mappable group commands, i.e. a table of mappings of group operation commands/ primitives is used. If the group command is not in the list of mappable group commands and so is not mappable, then the relay server copies the group from the other domain to the user domain, and binds the group to an approximately equivalent service in the user domain if there is one according to a predetermined list (11f) of such equivalents, but otherwise notifies the user that the group is available locally, and user interaction is required to bind the group to a service in the user domain.

Abstract: A light (resource-preserving) remote desktop protocol (32-35) for enabling a user of a client communication terminal (12) to interface with an application hosted by another communication terminal (14). Prior to exchanging remote user interfacing information according to the light remote desktop protocol, a discovery process (31) is performed. The light remote desktop protocol (32-35) provides for exchanging the user interfacing information according to a BEEP-like transport protocol and for indicating the user interfacing information itself using XML or SOAP to describe screens by which a user of the client makes inputs to the application and receives outputs from the application, and using a KPML-like or SOAP protocol derived from an input-event XML schema for the other communication terminal/remote user interfacing server (14) input events on the client communication terminal (12), including events in which a key is pressed on the client (12).