Abstract: Embodiments of the invention relate to wireless communications networks, and more specifically to method and apparatus relating to wireless backhaul for cellular wireless systems. Increasing data capacity of cellular wireless systems places increasing demands on the capacity of the two way connection, known as backhaul, between a cellular base station and a telecommunications network such as the PSTN backhaul, since this is the connection that has to convey the wireless-originating traffic to its destination, often in an entirely different network. Known backhaul links include leased lines, microwave links, optical fibre links or radio resources for relaying backhaul traffic between base stations. The fixed line solutions are expensive to implement and maintain, while the radio solutions suffer from interference from transmissions between base stations with transmissions from user equipment to base stations which are not communicating with other base stations.

Abstract: Typically it is expensive to add cable within an existing multiple dwelling units (MDUs) such as blocks of flats to provide additional services such as broadband internet access, video on demand and video telephony. The present invention provides a broadband wireless access system especially suited to MDUs. A base station modulates radio frequency carrier signals with data to be transmitted in the system, and these signals are directed along a distribution network to a plurality of antennas which provide WLANs for subscriber equipment within the MDU.

Abstract: A cellular communication system comprising a plurality of geographically spaced base stations (2) each of which comprises an antenna arrangement (4, 6, 8) per base station sector, each of which antenna arrangements has an antenna element for generating an array of narrow beams (10, 12, 14) covering the sector. Timeslots are simultaneously transmitted over each of the beams so as to generate successive sets of simultaneously transmitted timeslots per sector. The timeslots are each split into multiple orthogonal codes, for example Walsh codes. The communication system additionally comprising a scheduling device (31) for allocating for successive sets of timeslots common overhead channels, including a common pilot channel, which are allocated to the same sub-set of codes of each timeslot in the set. For successive sets of timeslots different data traffic is allocated to the same sub-set of codes of each timeslot in the set.

Abstract: The invention is directed to a method of communicating between a first node including a plurality of antennas and a second node, the method comprising the steps of: transmitting a signal from the first node to said second node using each of the plurality of antennas of the first node; at the second node, selecting one of the plurality of antennas for use; and communicating between the two nodes using this selected antenna. The invention is also directed to apparatus and software for performing the methods.

Abstract: A method of detecting an intrusion at a node of a network comprising reading a first packet received by the node, determining a first signature of the first packet, comparing the first signature with a signature file comprising a first machine-readable logic representative of a first packet signature, determining the first signature corresponds with the first machine readable logic, reading a second packet generated by the node in response to reception of the first packet, determining a second signature of the second packet, comparing the second signature with the signature file further comprising a second machine-readable logic representative of second packet signature, and determining the second signature corresponds with the second machine readable logic is provided. A computer-readable medium and a node for detecting an exploit based upon an outbound signature generated in response to an inbound signature of the exploit are also provided.

Abstract: A node of a network maintaining an instance of an intrusion prevention system, the node comprising a memory module for storing data in machine-readable format for retrieval and execution by a central processing unit and an operating system comprising a network stack comprising a protocol driver, a media access control driver and an instance of the intrusion prevention system implemented as an intermediate driver and bound to the protocol driver and the media access control driver, the intrusion prevention system comprising an associative process engine and an input/output control layer, the input/output control layer operable to receive at least one of a plurality of machine-readable network-exploit signatures from a database and provide the at least one machine-readable network-exploit signatures to the associative process engine, the associative process engine operable to compare a packet with the at least one machine-readable network-exploit signature and determine a correspondence between the packet and t

Abstract: A node of a network running an intrusion detection system, the node comprising a central processing unit, a memory module for storing data in machine readable format for retrieval and execution by the central processing unit, a database for storing a plurality of machine-readable network-exploit signatures, an operating system comprising a network stack comprising a protocol driver, a media access control driver and an instance of the intrusion detection system implemented as an intermediate driver and bound to the protocol driver and the media access control driver is provided. A method of filtering data at a node of a network comprising binding an intrusion prevention system directly to a media access control driver of a network stack of a node of the network is provided.

Abstract: A network having a intrusion protection system comprising a network medium, a management node connected to the network medium and running an intrusion prevention system management application, and a plurality of nodes connected to the network medium and running an instance of an intrusion protection system application, at least one of the nodes having an identification assigned thereto based on a logical assignment grouping one or more of the plurality of nodes, each node sharing the identification being commonly vulnerable to at least one network exploit is provided. A method of transmitting a command and security update message to a subset of nodes of a plurality of network nodes comprising generating an update message by a management node of the network, addressing the update message to a network address shared by the subset of nodes, transmitting the update message, and receiving and processing the update message by the subset of nodes is provided.

Abstract: A mobile device operable in a mobile telecommunications network comprising a memory module for storing data in machine readable format for retrieval and execution by a central processing unit and an operating system operable to execute an intrusion detection application stored in the memory module is provided.

Abstract: A method of analyzing packets at a node of a network by an intrusion prevention system executed by the node, comprising reading the packet by the intrusion prevention system, comparing the packet with a machine-readable signature file, determining the packet has a packet signature that corresponds with the machine-readable signature file, and determining the machine-readable signature file has an associated squelch comprising a squelch threshold and a squelch period is provided. A computer-readable medium having stored thereon a set of instructions to be executed, the set of instructions that, when executed by a processor, cause the processor to perform a computer method of reading a packet, comparing the packet with a machine-readable signature file, determining the packet has a packet signature that corresponds with the machine-readable signature file, and determining the machine-readable signature file has an associated squelch comprising a squelch threshold and a squelch period is provided.

Abstract: Current telecommunications device transmission stages require a significant number of analogue (DAC) components. The present invention provides a digital to analogue converter implementation for coupling to the digital signal processing (DSP) stage of the device and comprises a DAC and means to nullify the output of the DAC over part of the DSP data output period to produce a series of pulses corresponding to this data. The pulses are bandpass filtered to produce an analogue output signal at an intermediate frequency.