Abstract: This application describes techniques for testing fiber optic telecommunication systems, such as undersea fiber optic cable systems. Testing terminals may be deployed at a location of terminating equipment for a fiber optic cable. The testing terminals may be operated remotely. The testing terminals may be configured to programmatically test the cable by loading one or more tests and automatically configure the cable's transmitters and receivers based on predetermined loading schemes selected based on the tests to be performed. The testing terminals may iterate over channels and fiber pairs of the cable and may use back-to-back tests to remove artifacts from test results. Using the described techniques, a cable's channels and fiber pairs can be fully characterized in the amount of time afforded for a typical testing schedule, which was not generally possible using conventional testing.

Abstract: A method of detecting genetic material deriving from Chlamydia trachomatis comprising detection of a specified nucleic acid sequence, optionally using specific primers and probes and optionally in combination with the detection of genetic material deriving from Pectobacterium atrosepticum as an internal control; and related products and kits.

Abstract: An OPO system is provided. The OPO system includes a pump laser and an OPO. The OPO is internal to the pump laser.

Abstract: An OPO system is provided. The OPO system includes a pump laser and an OPO. The OPO is internal to the pump laser.

Abstract: An OPO system is provided. The OPO system includes a pump laser and an OPO. The OPO is internal to the pump laser.

Abstract: A method is provided in one example embodiment and includes identifying a bit rate associated with an adaptive streaming client that is engaged in a media session, where the bit rate is used to maintain a particular video quality for a media stream. The method also includes using a network virtual player to lock the bit rate for a particular time interval for the adaptive streaming client; and supporting the bit rate from a network for the adaptive streaming client during the media session. In more particular embodiments, the method can include detecting a plurality of congestion points flow instrumentation; and reducing a committed service rate for the virtual player based, at least in part, on the flow instrumentation.

Abstract: A method of detecting genetic material deriving from Chlamydia trachomatis comprising detection of a specified nucleic acid sequence, optionally using specific primers and probes and optionally in combination with the detection of genetic material deriving from Pectobacterium atrosepticum as an internal control; and related products and kits.

Abstract: According to one implementation of the present invention, a business logic application may function as a package tracking application to manage access to wireless access points in different WLANs along the route. A sensor node is initialized and configured with one or more connection parameter sets allowing it to associate with a given wireless network implemented by one or more access points. Before the sensor node disassociates with the wireless access point, the wireless access point transmits a new connection parameter set to the sensor node. This new connection parameter set may include a network ID for another wireless network. In one implementation, the sensor node re-initializes itself using the new connection parameter set information. This process may continue until the sensor node arrives at its final destination.

Abstract: Disclosed are methods and apparatus for methods and apparatus for facilitating a secure connection between a first and a second node in a computer network where one or both of the nodes may or may not reside behind a network address translation (NAT) enabled gateway. Embodiments of the present invention provide a seamless integration by providing a uniform solution for establishing secure connections, such as IPSEC, between two nodes irrespective of whether they are behind a NAT-enabled gateway or not. In general, a gateway is operable to receive a request from a remote host for a secure connection to a local host that within the home network of the gateway. The gateway then forwards this received request to a NAT traversal service. The NAT traversal service receives the request and then automatically sends an initiation message to set up a secure session, e.g., performing authentication and exchanging keys.

Abstract: A communication system including a repeatered trunk path and one or more unrepeatered branch segments coupled to the trunk path through associated submarine branching units. Each of the branch segments may be configured to carry at least the same channel capacity as the trunk path and may have a length greater than the average repeater spacing in the trunk path.

Abstract: A credential provisioning technique is provided that is secure yet easy to administer. A credential provisioner such as a network AP is configured to leave a secure mode of operation and allow open authentication with a wireless supplicant. After open authentication is established, the wireless supplicant requests credential provisioning. In response, the credential provisioner supplies the supplicant with an encrypted password. To prevent unauthorized access, the supplicant again requests credential provisioning but also proves knowledge of the encrypted password. At least one credential is supplied to the wireless supplicant in response to the proof only if a waiting period expires with just one request for credential provisioning being received by the credential provisioner.

Abstract: An improved approach to public key passing is provided to inhibit man-in-the-middle (MITM) attacks during an exchange of public keys over one or more public networks. In one embodiment, a method for securely passing public keys includes encrypting a first user public key, wherein the first user public key is associated with a first user device. The method also includes passing the encrypted first user public key to a first gateway server over a secure communication link. The method further includes receiving an encrypted second user public key from the first gateway server over the secure communication link, wherein the second user public key is associated with a second user device, and wherein the second user device is associated with a second gateway server. In addition, the method includes decrypting the second user public key.

Abstract: Methods and devices are provided for establishing a VPN tunnel for a user whose IP address is not known in advance (a “road warrior”). The road warrior first initiates a secure authentication session with a security gateway. In some such implementations, the road warrior provides a username/password pair that the security gateway compares to a database of usernames that have been authorized to initiate a VPN tunnel. After authenticating the road warrior, the security gateway then determines the IP address of the road warrior, then makes a correlation between the IP address, user, and a shared secret allocated to the road warrior. If the road warrior uses the proper shared secret in connection with a request to establish a VPN tunnel, the security gateway will establish the VPN tunnel.

Abstract: Methods apparatuses, and systems directed to managing wireless node access to one or more wireless networks. According to one implementation of the present invention, a business logic application may function as a package tracking application to manage access to wireless access points in different WLANs along the route. A sensor node is initialized and configured with one or more connection parameter sets allowing it to associate with a given wireless network implemented by one or more access points. In one implementation, the sensor node is configured only to accept received wireless frames that it can properly decrypt using the currently-stored encryption key. Accordingly, until the sensor node comes within radio contact of a wireless access point or other wireless node configured with the same encryption key, it does not establish a wireless connection. When the sensor node and such a wireless access point associate, they may exchange encrypted information (e.g.

Abstract: Methods, apparatuses, and systems directed to managing wireless node access to one or more wireless networks. According to one implementation, a business logic application may function as a package tracking application to manage access to wireless access points in different WLANs along the route. A sensor node is initialized and configured with one or more connection parameter sets allowing it to associate with a given wireless network implemented by one or more access points. In one implementation, the sensor node is configured only to accept received wireless frames that it can properly decrypt using the currently stored encryption key. When the sensor node and such a wireless access point associate, they may exchange encrypted information (e.g., data regarding the package) using an encryption key. Before the sensor node disassociates with time wireless access point, the wireless access point transmits a new connection parameter set to the sensor node.

Abstract: Disclosed are methods and apparatus for methods and apparatus for facilitating a secure connection between a first and a second node in a computer network where one or both of the nodes may or may not reside behind a network address translation (NAT) enabled gateway. Embodiments of the present invention provide a seamless integration by providing a uniform solution for establishing secure connections, such as IPSEC, between two nodes irrespective of whether they are behind a NAT-enabled gateway or not. In general, a gateway is operable to receive a request from a remote host for a secure connection to a local host that within the home network of the gateway. The gateway then forwards this received request to a NAT traversal service. The NAT traversal service receives the request and then automatically sends an initiation message to set up a secure session, e.g., performing authentication and exchanging keys.

Abstract: Systems and methods are disclosed for mitigating addressing conflicts in joined networks. For example, Internet Protocol (IP) addressing conflicts in a virtual private network (VPN) can be mitigated by automatically changing an address of a gateway of one network when another network is placed in communication therewith. A destination network address translation (DNAT) filter can be used to direct packets to the new address of the gateway.

Abstract: Systems and methods for laser capture microdissection are disclosed. One method incorporates the step of changing the beam diameter of the laser to adjust the size of the activated area of the transfer film and as a result, the size of the at least one microdissected portion of the sample adhered to the transfer film. Changing the beam diameter while operating the laser in idle mode permits the user to visualize the spot on the desired portion of the tissue sample and simultaneously increase or decrease the beam spot to optimally match the beam spot size with the portion of the tissue to be extracted. This method advantageously provides increased accuracy in microdissection and reduced heating of the tissue sample.

Abstract: A credential provisioning technique is provided that is secure yet easy to administer. A credential provisioner such as a network AP is configured to leave a secure mode of operation and allow open authentication with a wireless supplicant. After open authentication is established, the wireless supplicant requests credential provisioning. In response, the credential provisioner supplies the supplicant with an encrypted password. To prevent unauthorized access, the supplicant again requests credential provisioning but also proves knowledge of the encrypted password. At least one credential is supplied to the wireless supplicant in response to the proof only if a waiting period expires with just one request for credential provisioning being received by the credential provisioner.

Abstract: A communication system including a repeatered trunk path and one or more unrepeatered branch segments coupled to the trunk path through associated submarine branching units. Each of the branch segments may be configured to carry at least the same channel capacity as the trunk path and may have a length greater than the average repeater spacing in the trunk path.