Abstract: A plurality of encryption keys is generated, and each encryption key is associated with one geographical area of a plurality of geographical areas. Each encryption key is forwarded to one or more base stations in the geographical area associated with the encryption key. At least one of the plurality of geographical areas that is adjacent to a first geographical area is determined, yielding one or more adjacent geographical areas, and an encryption key for at least one of the one or more adjacent geographical areas is forwarded to at least one base station covering the first geographical area.

Abstract: A home location register stores key material related to mobile stations associated with the home location register. A first visited location register associated with a first site in a first zone stores key material related to a first mobile station of the mobile stations associated with the home location register. When the first mobile station roams to a second site in a second zone associated with a second visited location register, the key material related to the first mobile station is encrypted with an interkey, yielding encrypted key material, wherein the interkey is used only by infrastructure system devices other than a mobile station for encrypting at least the key material for transport between at least the first and second zones. The encrypted key material is forwarded to the second visited location register.

Abstract: A first infrastructure system device other than a mobile station generates key material and forwards the key material to a second infrastructure system device other than a mobile station. A determination is made as to whether a mobile station for which the key material is directed is active on the system, and if so the key material is forwarded to a base station where the mobile station is active. The base station forwards the key material to the mobile station.

Abstract: A first infrastructure system device other than a mobile station generates an encryption key and encrypts the encryption key with a first intrakey associated with a first zone that includes a second infrastructure system device other than a mobile station, yielding a first encrypted encryption key. The first intrakey is used only by infrastructure system devices other than a mobile station for encrypting at least the encryption key prior to transport within the first zone. The first infrastructure system device forwards the first encrypted encryption key to the second infrastructure system device.

Abstract: A method includes receiving an authentication request from a mobile station (401) and determining whether to forward the request to an authentication agent. When it is determined to forward the request, the request is forwarded to the authentication agent (107). A random number and a random seed are received from the authentication agent (107). The random number and the random seed are forwarded to the mobile station (401). A response to the random number and the random seed from the mobile station (401) is received and forwarded to the authentication agent (107). The authentication agent (107) compares the response with an expected response. When the authentication agent (107) authenticates the mobile station (401), a derived cipher key is received from the authentication agent (107).

Abstract: A method includes receiving an authentication request from a mobile station (401) and determining whether to forward the request to an authentication agent. When it is determined to forward the request, the request is forwarded to the authentication agent (107). A random number and a random seed are received from the authentication agent (107). The random number and the random seed are forwarded to the mobile station (401). A response to the random number and the random seed from the mobile station (401) is received and forwarded to the authentication agent (107). The authentication agent (107) compares the response with an expected response. When the authentication agent (107) authenticates the mobile station (401), a derived cipher key is received from the authentication agent (107).

Abstract: A method of key distribution includes generating, by a first system device (101), key material and forwarding the key material from the first system device (101) to a second system device (107). It is determined whether a mobile station (401), for which the key material is directed, is active on the system. When the mobile station is active, the key material is forwarded to a base station (115) where the mobile station (401) is active, and the base station (115) forwards the key material to the mobile station (401).

Abstract: A method includes receiving an authentication request from a mobile station (401) and determining whether to forward the request to an authentication agent. When it is determined to forward the request, the request is forwarded to the authentication agent (107). A random number and a random seed are received from the authentication agent (107). The random number and the random seed are forwarded to the mobile station (401). A response to the random number and the random seed from the mobile station (401) is received and forwarded to the authentication agent (107). The authentication agent (107) compares the response with an expected response. When the authentication agent (107) authenticates the mobile station (401), a derived cipher key is received from the authentication agent (107).

Abstract: A method includes receiving an authentication request from a mobile station (401) and determining whether to forward the request to an authentication agent. When it is determined to forward the request, the request is forwarded to the authentication agent (107). A random number and a random seed are received from the authentication agent (107). The random number and the random seed are forwarded to the mobile station (401). A response to the random number and the random seed from the mobile station (401) is received and forwarded to the authentication agent (107). The authentication agent (107) compares the response with an expected response. When the authentication agent (107) authenticates the mobile station (401), a derived cipher key is received from the authentication agent (107).

Abstract: A method of key distribution includes generating, by a first system device (101), key material and forwarding the key material from the first system device (101) to a second system device (107). It is determined whether a mobile station (401), for which the key material is directed, is active on the system. When the mobile station is active, the key material is forwarded to a base station (115) where the mobile station (401) is active, and the base station (115) forwards the key material to the mobile station (401).

Abstract: Key management methods and communication protocol adapted to reduce the burden placed upon a key delivery device (e.g., KVL) operator. The KVL (101, 401) receives KMM frames (800) including a target destination field (826) and a key management message field (830). Key management messages (KMMs) to be delivered to various targets are included within the key management message fields. The KVL identifies targets either from target destination identifiers in the target destination field (if the KMM is to be delivered encrypted or “black” transfer to target) or from target destination identifiers in the KMM itself (if the KMM is to delivered unencrypted or “red” transfer to target). The KVL determines candidate devices to be targets if they correspond to the target destination identifiers and if so, the KVL automatically delivers the proper key management messages to the respective targets. Key management messages are not delivered to candidate devices not determined to be targets.

Abstract: A layered session data unit frame (300) is provided wherein a first frame (200), designated a session data unit("SDU"), containing user information (209), a link control field (205) and an encryption field (207), is divided into a plurality of smaller frames (321, 323), each having an information field and designated a link data unit("LDU"). According to the invention, the SDU user information (209) is allocated into the information fields (211, 213) of the plurality of LDU's. The SDU link control field (205) is divided into a plurality of sub-fields and imbedded into the information fields of a first group of LDU's. The SDU encryption field (207) is divided into a plurality of sub-fields and imbedded into the information fields of a second group of LDU's. The sub-fields may be distributed throughout the LDU's in a generally uniform fashion.

Abstract: A liquid dispenser has a closure cap for mounting the dispenser on a liquid container, and a non-removable tamperproof overcap secured to the closure cap. The overcap has a line of weakening to facilitate overcap separation to gain access to the dispenser actuator. And, the closure cap has a tamperproof ring.

Abstract: A pump sprayer has a body with aligned relatively large and small diameter cylinder portions and relatively large and small diameter pistons respectively reciprocable therein and delimiting with the cylinder a variable volume pump chamber during pumping, the small diameter piston shifting relative to the large diameter piston for opening the discharge. Cooperating limit stops acting between the piston members limit the relative movement thereof during a valve open position so as to thereby limit the duration during which the discharge passage is open irrespective of different external reciprocating pressures applied during pumping, such that the output of the sprayer is controlled during pumping.

Abstract: A process is described for converting an image in one digital format to a second digital format by considering both horizontal and vertical values of pixels to generate output pixels of intermediate value.

Abstract: A continuous tone image recording system comprises a solid state laser diode capable of sending out an analog signal-controlled pulsed beam of light, a continuous feedback circuit for stabilizing the laser diode light output, and an optical system for changing the path of the beam of light. The laser beam scans across a photosensitive receptor surface to provide scanned lines, which are positioned along the length of the receptor surface so as to provide images containing at least 64 levels of gray on transparent recording media or at least 32 levels of gray on opaque media.

Abstract: A liquid dispenser has relatively rotatable closure, sleeve and plunger members, the latter two being locked against reciprocation of the plunger member by a misalignment between ribs and grooves therebetween. One of the grooves has a pair of upstanding pegs on opposite sides so as to not only avoid inadvertent alignment when the ribs and grooves are in a misaligned position, but to also permit the plunger and sleeve members to rotate together as the rib abuts against one or the other of the pegs when in a misaligned position. A spacer element surrounding the plunger rod maintains the inlet valve in a closed position despite a slight separation between the plunger and sleeve members when rotated to the misaligned position. Also, the closure member is adapted to be removed only with difficulty from the container on which it is affixed.