Abstract: A system and method for fraud detection may include (a) receiving, by a model based fraud detection unit, a plurality of images related to fraud attempts, (b) determining, by the unit, for each of the images, whether or not the image is related to a fraud attempt, (c) if a percentage of the images identified as related to fraud attempts is lower than a threshold, then automatically modifying at least one coefficient in the model, and repeating steps (a), (b) and (c) until a percentage of the images identified as related to fraud attempts is higher than the threshold.

Abstract: Embodiments of the present invention provide a system and a method for identifying a fraud attempt of an entrance control system. Some embodiments, may comprise obtaining by an imaging system a plurality of images of an entrance point to secured area, extracting image information from at least one of the plurality of images, to identify a person in the entrance point vicinity, retrieve from a memory of the entrance control system stored data associated with the identified person, apply a plurality of deception detection tools on the image information, assign a unique fraud grade by each deception detection tool, calculating a combined fraud grade, and comparing the combined fraud grade to a threshold value to determine likelihood of fraud.

Abstract: Embodiments of the invention relate to a method and a system for managing access control identity parameters. The system includes a plurality of local access control systems configured to receive identity parameters of persons and transmit the identity parameters to a remote identity verification and management service, and to control local access controlling means. The remote identity verification and management service is configured to receive identity parameters from at least some of the plurality of local access control systems and store the identity parameters so that the identity parameters are associated with the respective persons.

Abstract: A portable identification device, an identification system and method are disclosed. The device may include a processor, a memory, at least one sensor, and a display unit. The sensor may be at least one of a camera and a directional microphone, and the processor may be configured to: receive from the at least one sensor a data stream, analyze the received data to extract identification data from the received data stream, send at least a portion of the extracted identification data to a remote computing device, receive identity related information from the remote computing device, and present the received identity related information on the display unit.

Abstract: A light indication device and a light indication method for a face recognition system are disclosed. The light indicator may be adapted to attract the attention of a person to a camera and provide the person feedback and indications as to the pose of his or hers face in a captured image and how to correct it, as well as indications regarding the progress of the face recognition process. The light indication device may comprise a housing having an central aperture adapted to accommodate a camera, a processor, a memory, a plurality of light emitting elements and a sensor to sense when a person is in vicinity to the light indication device. A method for using the light indication device is also provided.

Abstract: A system and method for entrance control to secured premises is disclosed. The entrance control system may comprise an entrance control unit; an authorization system comprising a control center; a premises entrance unit, located proximal to the entrance control unit; the premises entrance unit comprising a checkpoint unit and an optical unit, wherein the checkpoint unit is operatively connected to the optical unit and to the control center; and wherein the checkpoint unit is configured to receive a first input from the optical unit and a second input from the control center, and to output an authorized/non-authorized visitor signal based on the first input and the second input. A method for entrance control is also disclosed.

Abstract: A method of connecting a client to a server by a load balancer associated with a plurality of servers. The method includes establishing a first connection for transmission of packets between the load balancer and the client, selecting a server to service the client, and splicing the first connection with a second connection between the load balancer and the selected server, the second connection being established before the first connection.

Abstract: A subport forwarding and provisioning mechanism whereby a plurality of subports implemented using slower speed processors are used to perform the packet processing for a higher speed packet stream. Outbound packets are assigned a subport based on their MPLS labels. Once assigned, the packets are forwarded to a particular subport. The output of all the subports is aggregated and combined into a single high speed packet stream and transmitted over the link. Inbound packets are received by the high speed PHY and forwarded to one of a plurality of subports. The subport chosen is the one having the same subport index as the one through which the packet was sent out over at the transmitting node. Conventional layer 2 switches can also be used whereby reserved source MAC addresses are assigned to subports. The switch forwards the inbound packets to one of the subports in accordance with the packet's source MAC address.

Abstract: A method of performing policy enforcement by a switch, including receiving a plurality of frames, examining at least some of the received frames to determine whether they require non-default policy enforcement according to pre-programmed policy rules which pertain to at least one protocol, and forwarding, with default policy handling, at least some of the received frames which belong to the protocol to which the rules pertain, regardless of the policy enforcement they require.

Abstract: A path reroute mechanism for use in communication networks comprising multiple searches for a routing path to restore traffic following a failure that could not be protected by a previously established protection route (i.e. protection tunnel, bypass, etc.) or for routing or rerouting of traffic paths for optimization or any other purpose. Each node advertises TLVs that include bandwidth allocation information used to derive the actual amount of bandwidth available for protection purposes, protected paths and unprotected paths or a portion of this information such as in the case where unprotected paths are not supported. Searches are performed on larger and larger portions of the available bandwidth until a route for the path is found.

Abstract: A method of connecting a client to a server by a load balancer associated with a plurality of servers. The method includes establishing a first connection for transmission of packets between the load balancer and the client, selecting a server to service the client, and splicing the first connection with a second connection between the load balancer and the selected server, the second connection being established before the first connection.