Abstract: A device and method to control access to a wide area network such as the Internet is described in which specific users connected to an access point, such as a wireless access point, are given a controllable amount of connection performance, in terms of bandwidth, latency and/or packet loss. The bandwidth, latency and/or packet loss to each user may be controlled individually and as users spend more time connected to the access point they may be given less and less connection performance. Such a system may reward new users in favor of users who have spent a long time connected to the access point, which will discourage users from spending long periods of time occupying physical space and accessing an upstream network that would otherwise be available for new users. Connection performance may also cycle through connected users to manage bandwidth. Additionally, performance parameters can be controlled to encourage certain types of activity over others (e.g. video streaming, voice over IP, web browsing, etc.).

Abstract: A method and apparatus are utilized to conveniently and swiftly render stored information inaccessible. Sensitive information is stored in an encrypted form and by eliminating the key or keys which are needed for decryption, the stored information becomes virtually destroyed. A variety of mechanisms and policies can be used to manage, set and eliminate decryption keys. In some cases decryption keys can be stored in volatile storage elements so that by merely interrupting power to the storage element, the decryption keys are eliminated. In this way, a manually controlled mechanism can be used to allow a user to accomplish a “self-destruct” of the stored information instantly without the need for the operation of any processor and without the need to change any stored information.

Abstract: A method of restricting turns at vehicle intersections imposes a policy that is dynamic and congestion based. Vehicle turns are allowed only to the extent that such a maneuver does not cause a hindrance to other vehicles traveling the same direction that are not turning. A hindrance may be defined in a variety of ways based on whether other vehicles are substantially impeded in their progress. In this way, such a “no hinder” turn restriction is dependent on actual driving conditions and allows for more efficient movement of traffic in both heavily congested and light driving conditions. A no hinder turn restriction may be combined with or may replace other types of turn restrictions and may be utilized for both left and right turns and for streets with single or multiple lanes.

Abstract: A method for expanding input/output in an embedded system is described in which no additional strobes or enable lines are necessary from the host controller. By controlling the transitions of the signal levels in a specific way when controlling two existing data or select lines, an expansion input and/or output device can generate a strobe and/or enable signal internally. This internal strobe and/or enable signal is then used to store output data or enable input data. The host controller typically utilizes software or firmware to control the data transitions, but no additional wires are needed, and no changes are needed to existing peripheral devices. Thus, an existing system can be expanded when there are no additional control lines available and no unused states in existing signals.

Abstract: A method and apparatus are utilized to manage keys associated with encrypted stored information. Sensitive information is stored in an encrypted form, and by creating and deleting the keys needed to decrypt information according to a time-based policy, the convenient expiration of stored data can be realized. By periodically erasing old keys and creating new keys, information that has not been written recently becomes virtually deleted. A refresh policy can be utilized to cause information that is read to be re-encrypted using a newer key, thereby extending the time before it will become inaccessible.

Abstract: The ability to validate the identity of a specific machine connected to a computerized network is provided. This involves validating MAC addresses, or any other form of digital identification that should be uniquely associated with a computer or user. This take places through the use of an identification registrar and an identification valuator. Such an identification validation system can be used with MAC addresses and can be used in conjunction with a system that records other information necessary to associate activity on a computer network with the validated MAC address. In this way, the specific computer or user associated with network activity can be determined, and it can be guaranteed that the identification has not been tampered with.

Abstract: The ability to identify a specific machine associated with activity taking place on the Internet is provided. This involves recording the association between MAC addresses, which are uniquely associated with endpoints, and local IP addresses, the recording of the association between local IP addresses and port numbers with public IP addresses and port numbers, and the recording of public IP addresses and source port numbers associated with public activity. By recording this information and correlating it, in real-time or in a post-processing step, the specific machine associated with public activity can be determined.

Abstract: A method and apparatus are utilized to incrementally encrypt stored information, and can be applied to an existing medium storing unencrypted information. Information can be conditionally encrypted and/or decrypted as necessary and a separate storage area can be used to record whether a given block of information is stored encrypted or unencrypted. An embodiment of the present invention can be used as a retrofit device in a mechanism to encrypt information without causing undue interruption of normal operations. A variety of mechanisms and policies can also be used to manage, set and eliminate encryption keys.

Abstract: A method and apparatus for remote logging of access to and activity on a computerized network is provided. Logging information is transmitted to a remote log repository and is not maintained by the local log generating machine. After the logging information is stored in the remote repository, the access to the information is controlled by a specific policy that governs the type of information and the time period during which the information is available. No access is provided to information outside the bounds of the access policy. Preferably the remote log repository is outside the jurisdiction of relevant authorities. This allows the access policy between the log generating entity and the log repository to dictate precisely the information that is under the control of the log generating entity.

Abstract: Vehicle headlamp illumination is monitored and data is communicated to a host control unit. The host control unit implements a network accessible user interface to communicate with a user computer, which can include a graphical display of illumination information as well as a numerical indication of an automatically detected location of the edge of the headlamp beam. The network accessible user interface can also include the capability to manually audit the headlamp beam by allowing a user to specify a headlamp beam location, which will then update system parameters. The network accessible user interface may be a web-based interface where the host control unit implements a web server and the user computer is running a web browser. The system can include a collection of intelligent, independent sensor units, each incorporating a vertical array of sensing elements capable of detecting headlamp illumination.

Abstract: A method for expanding input/output in an embedded system is described in which no additional strobes or enable lines are necessary from the host controller. By controlling the transitions of the signal levels in a specific way when controlling two existing data or select lines, an expansion input and/or output device can generate a strobe and/or enable signal internally. This internal strobe and/or enable signal is then used to store output data or enable input data. The host controller typically utilizes software or firmware to control the data transitions, but no additional wires are needed, and no changes are needed to existing peripheral devices. Thus, an existing system can be expanded when there are no additional control lines available and no unused states in existing signals.

Abstract: Headlamp alignment is detected using a collection of intelligent, independent sensor units, each of which incorporates a vertical array of sensing elements capable of detecting headlamp illumination. The sensor units are networked together and can be coupled to a host controller. The host controller can provide a user interface via a touch screen and a Web server, and can further communicate with a plant network for interfacing with manufacturing databases. The network of sensor units can accommodate four or more sensors, which allows multiple vehicles and multiple headlamp types to be audited without physical movement of the sensor units. The sensor units are low in power consumption and can receive power over the same cable providing network communication. Incorporation of non-volatile memory within the sensor units allows factory data to be recorded within each sensor unit and permits convenient replacement of units in the field.

Abstract: Headlamp alignment is detected using a collection of intelligent, independent sensor units, each of which incorporates a vertical array of sensing elements capable of detecting headlamp illumination. The sensor units are networked together and can be coupled to a host controller. The host controller can provide a user interface via a touch screen and a Web server, and can further communicate with a plant network for interfacing with manufacturing databases. The network of sensor units can accommodate four or more sensors, which allows multiple vehicles and multiple headlamp types to be audited without physical movement of the sensor units. The sensor units are low in power consumption and can receive power over the same cable providing network communication. Incorporation of non-volatile memory within the sensor units allows factory data to be recorded within each sensor unit and permits convenient replacement of units in the field.

Abstract: A mechanism receives memory reads and writes from a packet processing engine, each memory access having an associated packet identifier or sequence number. The mechanism is placed between a processing engine and a memory system such that write data is buffered and information based upon reads and writes is recorded. Memory read data is returned speculatively since the packet processing engine is processing packets in parallel and not necessarily in sequence. Information is maintained allowing the detection of a speculative read that was incorrect (i.e. a memory conflict). When a memory conflict is detected, a restart signal is generated and the information for the associated packet identifier or sequence number is flushed.

Abstract: The ability to validate the identity of a specific machine connected to a computerized network is provided. This involves validating MAC addresses, or any other form of digital identification that should be uniquely associated with a computer or user. This take places through the use of an identification registrar and an identification valuator. Such an identification validation system can be used with MAC addresses and can be used in conjunction with a system that records other information necessary to associate activity on a computer network with the validated MAC address. In this way, the specific computer or user associated with network activity can be determined, and it can be guaranteed that the identification has not been tampered with.

Abstract: A method for expanding input/output in an embedded system is described in which no additional strobes or enable lines are necessary from the host controller. By controlling the transitions of the signal levels in a specific way when controlling two existing data or select lines, an expansion input and/or output device can generate a strobe and/or enable signal internally. This internal strobe and/or enable signal is then used to store output data or enable input data. The host controller typically utilizes software or firmware to control the data transitions, but no additional wires are needed, and no changes are needed to existing peripheral devices. Thus, an existing system can be expanded when there are no additional control lines available and no unused states in existing signals.

Abstract: A mechanism receives memory reads and writes from a packet processing engine, each memory access having an associated packet identifier or sequence number. The mechanism is placed between a processing engine and a memory system such that write data is buffered and information based upon reads and writes is recorded. Memory read data is returned speculatively since the packet processing engine is processing packets in parallel and not necessarily in sequence. Information is maintained allowing the detection of a speculative read that was incorrect (i.e. a memory conflict). When a memory conflict is detected, a restart signal is generated and the information for the associated packet identifier or sequence number is flushed.

Abstract: A mechanism receives memory reads and writes from a packet processing engine, each memory access having an associated packet identifier or sequence number. The mechanism is placed between the packet processing engine and a memory system such that write data is buffered and information based upon both reads and writes is recorded. Information is maintained allowing the detection of memory conflicts. Both a strict and alternate packet ordering are evaluated, such that the semantic ordering of packets is delayed until necessary to ensure that a consistent order exists. Such a late order binding mechanism is used to allow packets to be defined in any order so long as they obey a consistent order, thereby reducing the number of packet restarts and increasing overall efficiency.

Abstract: A mechanism receives start and done commands containing packet identifiers or sequence numbers from a packet processing engine for packets for which processing is being started and for which processing has completed respectively. Upon receiving a packet start command, an entry in an active packet list is created. Upon receiving a packet done command, the active packet list is updated. The oldest done packet in the active list is retired by flushing buffered write information to a memory system. The active packet list can be used in conjunction with a system supporting speculative reads and conflict detection. In some embodiments the packet start command is inferred from a read command containing a packet identifier or sequence number.

Abstract: A system for providing directed advertising or informational messages specific to individual persons or vehicles. The system encompasses a sensing and evaluation mechanism to detect persons or vehicles, in conjunction with a billboard or other display device capable of delivering a message specific to one or more individuals.