Abstract: The present invention relates to a method or system of generating a surrogate key using cryptographic hashing. One embodiment of the method of the present invention may have steps such as selecting a field or group of fields that is or are unique among all records in the database and for each record, extracting the data from the fields; concatenating the extracted data into an input message; running the input message through a hash generator, either in batches or one at a time, for testing purposes perhaps; and outputting a surrogate key.

Abstract: Establishing secure communication between an implantable medical device and an external device includes: accessing, at the implantable medical device, biological data; utilizing the biological data, at the implantable medical device, to generate a public cryptographic key; and utilizing the public cryptographic key, at the implantable medical device, to generate a private cryptographic key.

Abstract: An invalidation scheme of a secret key is implemented, which is usable for a functional encryption scheme. In a cryptographic processing system 10 employing an encryption scheme with which if attribute information and key information set in encrypted data do not correspond to attribute information and key information set in a secret key, the encrypted data cannot be decrypted using the secret key, an encrypted data management device 200 is provided, which carries out a relay between a user terminal 100 carrying out encryption and decryption of data and an encrypted data storage device 300 storing encrypted data. The encrypted data management device 200 determines whether or not a user whose secret key is invalid is included in users having attribute information set in the encrypted data acquired from the encrypted data storage device 300, and sets a different value as key information in the encrypted data based on the determination result.

Abstract: A re-encryptor compares hashed digests of updated segments and original segments to located changed segments that must be re-encrypted. A new initialization vector is input to a block cipher engine for each changed segment. Since only changed segments need to be re-encrypted, transmission bandwidth to remote encrypted storage may be reduced. The amount of cipher text that is changed by a single update is reduced to a segment. Segments have a variable length and are bound by bits matching a segment delimiter. Each segment may have many fixed-length blocks that are encrypted by the block cipher engine with the same initialization vector for that segment. The segment delimiter is a randomly-generated word that is included with the initialization vectors in the metadata. Variable-length segments limit update disruption of the cipher text while fixed-length blocks are more efficiently encrypted. Combining segments and blocks provides for better re-encryption of updates.

Abstract: A method of providing anti-replay protection, authentication, and encryption with minimal data overhead is provided. A sender uses an arbitrary-length pseudorandom permutation to encrypt messages that include plaintext and successively increasing sequence numbers, to produce ciphertext messages. The sender transmits the ciphertext messages. A receiver receives the ciphertext messages and, for each received ciphertext message, performs the following operations. The receiver decrypts the given ciphertext message to recover plaintext and a candidate sequence number from the message. The receiver determines if the candidate sequence number is in any one of multiple acceptable sequence number windows having respective sequence number ranges that are based on at least one of a highest sequence number previously accepted and a last sequence number that was previously rejected, as established based on processing of previously received ciphertext messages.

Abstract: Disclosed herein are systems, methods, and non-transitory computer-readable storage media for erasing user data stored in a file system. The method includes destroying all key bags containing encryption keys on a device having a file system encrypted on a per file and per class basis, erasing and rebuilding at least part of the file system associated with user data, and creating a new default key bag containing encryption keys. Also disclosed herein is a method of erasing user data stored in a remote file system encrypted on a per file and per class basis. The method includes transmitting obliteration instructions to a remote device, which cause the remote device to destroy all key bags containing encryption keys on the remote device, erase and rebuild at least part of the file system associated with user data, and create on the remote device a new default key bag containing encryption keys.

Abstract: Lightweight authentication for on-premise rich clients is described. The lightweight authentication mitigates the amount of software that is installed on a client machine for authentication purposes. A portion of an external website is hosted on an application executing on the rich client. The user can interact with the portion of the external website in order to enter credentials or other identification information. The entry of the credentials or other identification information is relayed to the external website for verification. If the verification is successful, the user can interact with various external websites utilizing the single verification.

Abstract: An apparatus and a method for generating a unique user identification code for a user of a biometric security system are presented. No biometric information is stored either within the security system or on a device, and the method enables a unique user identification code to be generated to allow multi-system identification of the same user. The method includes receiving a public key from the system, obtaining a characteristic from the user, generating a biometric value from the characteristic, creating the identification code by combining and encrypting the generated biometric value and the system supplied public key, and transmitting the identification code to the system for authentication.

Abstract: Requests are pre-generated to include a cryptographic key to be used in fulfilling the requests. The requests may be encoded in uniform resource locators and may include authentication information to enable a service provider to whom the requests are submitted to determine whether the requests are authorized. The requests may be passed to various entities who can then submit the requests to the service provider. The service provider, upon receipt of a request, can verify the authentication information and fulfill the request using a cryptographic key encoded in the request.

Abstract: Exposure of sensitive information to users is controlled using a first security token containing user identity and user credentials to represent the user who requests services, and a second security token containing two other identities, one identifying the token issuer and the other identifying the owning process. When requesting services, the token-owning process sends a security token to indicate who is making the request, and uses its key to digitally sign the request. The token-owning process signs the request to indicate that it endorses the request.

Abstract: A certificate grant list is provided. The certificate grant list may be stored in a memory, at the network device. The certificate grant list may store information associated with a client-device certificate, where the client-device certificate permits the client-device access to a secure service.

Abstract: A method and apparatus for verifying data for use on an aircraft. A plurality of digital certificates associated with the data is received by a processor unit. The processor unit verifies the data for use on the aircraft using a selected number of the plurality of digital certificates.

Abstract: A Prepaid Data Hub for maintaining pre-payment information for roaming subscribers. The Hub interacts with two or more wireless telecommunication systems that implement two different wireless protocols and which may be operated by different wireless service providers. The Hub retrieves pre-payment information using two or more different protocols, with a first protocol being native to the home network, but a second protocol being an external prepaid portal protocol. The Hub also monitors subscriber data traffic to limit the amount of access consumed in a subscriber session, notify subscribers of a low balance, and the like. The Hub eliminates the need for network gateway devices to themselves provide control over and/or maintain pre-payment information.

Abstract: In a wireless multihop network having node devices within communication range neighboring node devices in a corresponding local neighborhood, the node devices generate visibility messages to be transmitted via connection-less broadcast. The visibility messages include at least an identifier of the corresponding node device. Visibility messages received by each of the node devices from the one or more neighboring node devices are processed to determine a measure of density of the local neighborhood. This measure of density also accounts for the heterogeneous transmit power capabilities of node devices and is used for updating of one or more operational parameter of the node device relating to utilization of the radio communications medium by that node device. A degree of utilization of the medium through the control of transmission data rate and power is adjusted based on an inverse relation to the measure of density determined from the received visibility messages.

Abstract: The subject technology provides configurations for receiving, at a first network device, a multicast packet of a multicast transmission from a multicast source. A header is inserted including one or more fields of information for a multicast distribution tree into the multicast packet in which the fields of information include a root level node field indicating a root node of the multicast distribution tree and one or more second level fields indicating one or more child nodes of the root node of the multicast distribution tree. In one example, the fields of information are not duplicative of routing information, stored by the first network device, corresponding to the one or more child nodes. The subject technology then forwards the multicast packet including the inserted header to respective network devices corresponding to the one or more child nodes based on the one or more fields of information from the inserted header.

Abstract: A remote notification method is applicable to a remote notification method, where a server, through the Internet, receives user information sent by an application program executed in a first communication device, the server according to the user information sets a remote notification mode. When the server receives a startup command sent by a terminal device, the server, through the Internet, receives a message sent by the application program and sends out the message according to the remote notification mode. Therefore, a user can change the notification mode according to real usage requirements and can obtain the message received by the first communication device when not being able to directly operate the first communication device.

Abstract: Systems and methods for protecting a network including preventing data traffic from exiting the network unless a domain name request has been performed by a device attempting to transmit the data traffic. In an embodiment, a device within the protected network attempting to send data outside the protected network requests an address for a destination outside the protected network from a domain name server (DNS). In response, the DNS provides an address of the destination to the device and a gateway. In response to receiving the address, the gateway temporarily allows access to the address. In an embodiment, a DNS is coupled to a protected network and the gateway, the DNS provides an external address to a device in response to a request; and a mapping to the gateway; the gateway, coupled to a protected network and an external network, allows traffic according to the mapping.

Abstract: Disclosed herein are a method and a corresponding apparatus that provides a tethering alert if the apparatus is tethering data. In one example, a method for providing a tethering alert by an apparatus having a first network communication interface and a second network communication interface is disclosed. The method includes i) receiving incoming data via one of the first network communication interface and the second network communication interface, ii) sending outgoing data via the other of the first network communication interface and the second network communication interface, iii) making a determination that there is a threshold similarity between the incoming data and the outgoing data, and iv) responsive to making the determination, the apparatus providing a tethering alert indicating that the apparatus is tethering data.

Abstract: Techniques for transmitting a packet from a source switch module to a destination switch module. Embodiments retrieve path information specifying a route to the destination switch module. A packet is created that includes (i) at least a portion of the path information and (ii) a set of load/store operations to be executed by the destination switch module. Embodiments then transmit the packet to a first switch module using a first port, the first port specified in the retrieved path information. The first switch module is configured to transmit the packet based on the at least a portion of the path information in the packet, and the destination switch module is configured, upon receiving the packet, to copy the set of load/store operations into an execution buffer to be automatically executed.

Abstract: A cable modem that supports stateless requesting and/or limited contention-based requesting is provided herein. In an example, a physical layer (PHY) configured to communicate over a plurality of upstream channels is provided. A bandwidth requester is provided to request bandwidth using contention-based requesting over a first subset of the upstream channels for contention-based flows and request bandwidth using stateless requesting over a second subset of the upstream channels for stateless flows.

Abstract: A method and apparatus for managing bookmark information of a media server through a network based on the UPnP AV standard is disclosed. If a request for bookmarking a content item is made, a bookmark item is created and the created bookmark item is linked to the content item by adding the ID of the created bookmark item to the property information of the content item and recording the ID of the content item to be bookmarked in the created bookmark item.

Abstract: The present disclosure discloses a method, system, and device for forwarding data frames, and relates to the communication field. The method includes: An upstream near-end device in a faulty part of a working tunnel activates a segmental protection tunnel after receiving a data frame when a part of the working tunnel fails, where the start node of the segmental protection tunnel is the upstream near-end device and the end node of the segmental protection tunnel is a downstream near-end device in the faulty part; the upstream near-end device forwards the data frame to the downstream near-end device through the segmental protection tunnel; and the data frame at the downstream near-end device is forwarded to the destination device through the faultless part of the working tunnel. The present disclosure provides segmental protection for the PBB TE tunnel.

Abstract: A system includes a router transceiver unit that is configured to be disposed on-board a vehicle system. The vehicle system may have at least a source vehicle and a separate linked vehicle that are communicatively linked with each other through a system network of the vehicle system. The router transceiver unit is configured to be communicatively coupled to a requesting operational component of the source vehicle and the system network. The router transceiver unit is also configured to receive a local data packet from the requesting operational component that is directed toward a target operational component of the linked vehicle. The router transceiver unit includes an encapsulation module that is configured to transform the local data packet into an in-tunnel data packet, wherein the local and in-tunnel data packets have different packet formats.

Abstract: In a networked multi computer environment, with redundant links, network interface cards (NICs) are commonly duplicated and teamed to provide a recovery mechanism when network components fail. Embodiments of the present inventions avoid teaming of pairs of NICs and provide a computing host with redundant network connections for the computing host through a switch that is transparent to the computing host. The computing host itself; that is, its hardware and software, is relieved of the duty of network access redundancy and returned to the simple, simplex networking operating mode. The switch replaces a potentially large number of NICs and the need for computing host network access redundancy management which leads to hardware and software cost reductions and increases the robustness and reliability of the system through redundant network access.

Abstract: A technique for implementing an optical virtual private network is disclosed. In one particular exemplary embodiment, the technique may be realized by a method comprising the steps of managing at least one client edge-virtual private network at a client edge by a service provider; and supporting a set of client edge-users at each client edge-virtual private network at each client edge wherein each client edge provides at least one virtual private network service to each client edge-user; wherein each client edge determines connectivity associated with each client edge-user and the service provider establishes the connectivity determined by each client edge.

Abstract: The present invention discloses a network communication system that includes a network processing center for receiving and converting an electronic or electro-magnetically transmissible data/content into a physically deliverable object and/or network transmissible content data files for carrying out a hybrid delivery of the data/content by a physical delivery process and/or a network electro-magnetic delivery process to a recipient or an ECRMA.

Abstract: Some embodiments of the present invention provide methods for providing emergency services to Voice over Internet Protocol (VoIP) subscribers. It is determined that a connection cannot be established between a VoIP router and a VoIP service provider network. A mobile terminal associated with the VoIP router is requested to dial the emergency services responsive to the determination that the connection cannot be established. A call is initiated from the mobile terminal to the emergency services responsive to the request. Related systems and computer program products are also provided herein.

Abstract: A channel and noise estimation method includes: performing channel estimation on a received signal to obtain a real channel estimation value; filtering the real channel estimation value to obtain a filtered channel estimation value; calculating a biased noise power value, a biased signal power value, a biased noise correlation and a biased signal correlation according to the filtered channel estimation value; calculating an unbiased noise power value, an unbiased signal power value, an unbiased noise correlation and an unbiased signal correlation according to the biased noise power value, the biased signal power value, the biased noise correlation and the biased signal correlation.

Abstract: A transceiver is connectable to a cable with at least three wires. The transceiver may include a controlled output stage including a high-side leg, having two P-type transistors coupled in series and having a common current terminal, coupled between an output pin and a positive supply pin. The P-type transistors have body regions coupled to the common current terminal of the high-side leg. A low-side leg, includes two N-type transistors coupled in series and having a common current terminal, coupled between the output pin and a negative supply pin. The N-type transistors have body regions coupled to the common current terminal of the low-side leg. The protection circuit also includes a voltage clamper coupled between the common current terminals.

Abstract: Presented herein are techniques for enhancing pre-equalization operations in a telecommunications network. In one example, a cable modem termination system (CMTS) determines the coherent bandwidth for pre-equalization coefficients associated with upstream transmissions received from a cable modem. The CMTS uses the coherent bandwidth of the pre-equalization coefficients to calculate a time constant for a time domain filter that may be applied to the pre-equalization coefficients. The CMTS also calculates, based on the time constant, filter coefficients for the time domain filter and applies the time domain filter to the pre-equalization coefficients to generate signal-to-noise ratio (SNR)-enhanced pre-equalization coefficients. The CMTS then sends the SNR-enhanced pre-equalization coefficients to the cable modem.

Abstract: A method relates generally to data reception for any of a plurality of data rates. In such a method, information and phases of a clock signal are obtained by a decision feedback equalizer. The information is equalized using the phases of the clock signal with the decision feedback equalizer to provide equalized sample streams. The equalized sample streams and the phases of the clock signal are provided to a selection circuit block. A first and a second phase of the phases are swapped, along with swapping a first and a second equalized sample stream corresponding to the first phase and the second phase, responsive to a data rate of the plurality of data rates.

Abstract: There is provided a filter network arrangement comprising a filter network; and one or more correction networks, wherein the one or more correction networks is arranged to substantially equalize the passband gain and group delay of the filter network arrangement. Given an appropriate Q for the one or more correction networks, a polynomial for the one or more correction networks can be found that equalizes both the passband gain and group delay and the one or more correction networks can be synthesized from the polynomial.

Abstract: A multicarrier radio frequency (RF) transceiver implementing dynamic spectrum access (DSA) is capable of sensing a spectral environment and transmitting an RF signal at the same time. The transceiver can cancel an RF transmit signal component within a composite receive signal using a combination of analog and digital cancellation. In one embodiment, analog RF cancellation is performed to reduce the level of a transmit signal component of a composite receive signal before the signal reaches an RF receiver. The RF cancellation may be used to reduce the transmit signal component to a level that maintains the linear operation of the RF receiver. Digital cancellation may be performed to reduce transmit signal remnants within an output signal of the RF receiver. Digital cancellation may be performed on a subcarrier-by-subcarrier basis in some implementations.

Abstract: One embodiment relates to a computer-implemented method that selects one of at least three procedures to determine equalization settings jointly for a transmitter and a receiver. A first process may be used if the end-of-channel signal-to-noise ratio (SNR) is greater than an SNR threshold and the equalization capability of the transmitter is greater than the equalization capability of the receiver. A second process may be used if the end-of-channel SNR is greater than the SNR threshold and the equalization capability of the transmitter is less than the equalization capability of the receiver. A third process may be used if the end-of-channel SNR is less than the SNR threshold. Other embodiments and features are also disclosed.

Abstract: A receiver termination circuit includes an internal AC coupling capacitor and an adjustable resistor forming an adjustable high-pass filter (HPF) at a receiver side of a transmission medium, and a digital-to-analog converter (DAC) coupled to the adjustable HPF, the DAC configured to provide a signal having a low-pass filter response to the adjustable HPF to provide a DC restore function.

Abstract: An n-tap (n?2 (in the case of FIG. 1, n=2)) DFE equalizes a received signal on the basis of a determination result of a signal which has been received, and outputs a determination result of the received signal after equalization. An adjustment section generates a plurality of filter patterns for observation of an inter-symbol interference amount by changing values of n bits included in the plurality of filter patterns. The adjustment section then compares each of the plurality of filter patterns generated with an output data string corresponding to the determination result of the received signal after equalization and adjusts tap coefficients set for n (in the case of FIG. 1, 2) taps included in the DFE on the basis of adjustment values corresponding to values of the n bits included in a filter pattern which matches the output data string.

Abstract: A circuit for receiving data in an integrated circuit is described. The circuit comprises a receiver configured to receive an input signal and to generate output data based upon the input signal, the receiver having a level detection circuit coupled to receive the input signal; and a calibration circuit coupled to the receiver, the calibration circuit having an input for receiving the input signal; an error detection circuit coupled to the input, the error detection circuit coupled to receive the input signal, a first reference voltage and a second reference voltage; and a control circuit coupled to an output of the error detection circuit, wherein the control circuit selectively generates either an offset control signal or an amplitude control signal based upon comparisons of the input signal to the first reference voltage and the second reference voltage. A method of receiving data is also disclosed.

Abstract: A method and apparatus are described for transmitting data. The method includes generating, by an access point (AP), a Physical Layer Protocol Data Unit (PPDU) including a signal field and a data field, and transmitting, by the AP, the PPDU to a station. The signal field includes a reception target indicator and an identifier field. The reception target indicator indicates whether a target of the PPDU is the AP or the station. The identifier field includes a local AP identifier identifying the AP when the reception target indicator indicates that the target of the PPDU is the station.

Abstract: A wireless communication base station device, whereby precision of propagation path estimation is improved by making possible determination of the contiguity of precoding strings contiguous in frequency regions. In this device, a pre-coding string contiguity determining portion (120) determines whether or not a plurality of pre-coding strings (?) which are input from a pre-coding string calculating portion (119) are contiguous in a frequency region. The pre-coding string contiguity determining portion (120) outputs smoothing possibility data, which indicate determination results, to a control data generating portion (104). The control data generating portion (104) generates control data indicating smoothing possibility data which is input from the pre-coding string contiguity determining portion (120).

Abstract: Embodiments provide techniques for high peak to average power ratio (PAPR) event mitigation in high speed data networks, such as cable networks, for example. Embodiments are applicable to multi-carrier and single-carrier modulation systems. Embodiments operate by predicting or detecting the occurrence of a peaking event at the transmitter, and then mitigating potential effects of the peaking event at the transmitter, including application of alternative constellation symbol mappings.

Abstract: A transmitting apparatus may comprise a symbol mapper; a first DFT and a second DFT performing DFT spreading on symbols mapped in the symbol mapper; and a subcarrier mapper mapping symbols which are DFT-spread in the first DFT and the second DFT to subcarriers, wherein the first DFT performs DFT spreading on all resource blocks to be transmitted when a total size of the resource blocks to be transmitted is a size which can be processed by the first DFT, or the first DFT performs DFT spreading on as many resource blocks among the resource blocks to be transmitted as the first DFT can process and the second DFT performs DFT spreading on the rest of the resource blocks to be transmitted when a total size of the resource blocks to be transmitted is not a size which can be processed by the first DFT.

Abstract: A radio base station 1 used in a radio communication system in which an SC-FDMA scheme is adopted for an uplink and an OFDMA scheme is adopted for a downlink, comprises: a receiver 140 configured to perform reception processing on a radio signal in the SC-FDMA scheme or the OFDMA scheme; an OFDM demodulator 150 configured to convert a received signal obtained by the receiver 140 from a time domain to a frequency domain and perform a primary demodulation of the resultant signal; a frame processor 170 configured to convert a data symbol obtained by the OFDM demodulator from a frequency domain to a time domain and perform a secondary demodulation of the resultant symbol; and a measurement unit 210 configured to measure a signal which is a signal after conversion to the frequency domain by the OFDM demodulator 150 and is the signal before conversion to the time domain by the frame processor 170.

Abstract: A DMT system for a half-duplex two-way link carries Internet protocol encoded video stream on a coaxial cable that also carries a baseband rendition of the same video stream. A plurality of downlink symbols modulated on a subband of subcarriers in a downlink signal are decoded. The symbols may carry data encoded on a subband using a constellation of QAM symbols assigned to the subband. Other subbands may be associated with different QAM constellations. Lower-order constellations of QAM symbols may be assigned to subbands that include higher-frequency subcarriers and higher-order constellations of QAM symbols may be assigned to subbands that include lower-frequency subcarriers. A block error correction decoder may be synchronized based on an identification of the first constellation of QAM symbols and information identifying boundaries between the plurality of downlink symbols.

Abstract: A distortion compensation device includes: a memory configured to store a first and second table, different addresses being assigned to the first and second table respectively, each of the addresses being related to a distortion compensation coefficient to compensate for a non-linear distortion, a first address in the first table and a second address in the second table corresponding to respective first and second ranges of power or amplitude of a transmission signal, and parts of the first and second ranges overlapping each other; and a processor coupled to the memory and configured to: update the respective distortion compensation coefficients related to the first address and the second address simultaneously, in accordance with a single value of the power or the amplitude, and compensate for the non-linear distortion generated by an amplifier amplifying the power of the transmission signal, by using at least one of the first and second table.

Abstract: A unified balun low noise amplifier (LNA) and I/Q mixer is provided as a single-chip design, and includes a passive/active gain-boosted balun-LNA-I/Q-mixer (blixer), a filter section and a buffer amplifier. The filter section includes an IF-noise-shaping transistorized current-mode lowpass filter sharing a common power supply with the blixer, which allows the blixer and lowpass filter to draw a single bias current. The filter section also includes a complex-pole load providing image rejection and channel selection.

Abstract: A method for effecting communication between devices in a communications network, the method comprising managing a communications process control flow; providing a plurality of re-usable components of the process control flow in which each component comprises a process control activity between two of the devices; aggregating the plurality of re-usable components into a sequence of the communications process control flow; in which each re-usable component is arranged to process a data structure; in which the data structure is the same for each re-usable component of the communications process control flow.

Abstract: A method and system for load balancing for virtual connections over a fiber channel network, the virtual connections using SCSI. The method including finding a one-way reassignment of a virtual connection (VC) from busiest VCE or locality domain to least busy VCE or locality domain placing the busiest VCE or locality domain and least busy VCE or locality domain in a target load range without reversing a load order, and executing the reassignment by a server fiber channel adapter.

Abstract: A telecommunications system for communicating internet packet data in accordance with a first internet protocol (IPV6) via a packet radio network operable in accordance a second internet protocol (IPV4). The system comprises a user equipment operable to request a bearer for communicating internet protocol data according to the second internet protocol (IPV4) to and from a gateway support node of the packet radio network. The gateway support node is operable to establish a tunnelling protocol bearer for communicating the internet packet data to and from the user equipment across the packet radio network. The user equipment is operable in combination with the gateway support node to form an address which is compatible with the first internet protocol (IPv6). The address includes an interface identifier having a tunnel endpoint identifier of the tunnelling protocol bearer which ends at the gateway support node of the packet radio network.

Abstract: A system for mapping and translating address information in a network is provided. The system includes a client-side address translator (120) and a server-side address translator (140). The client-side address translator (120) is configured to receive a data packet from a client (110). The data packet includes a first destination address representing the real destination address. The client-side address translator (120) maps the first destination address to another address using a mapping algorithm and transmits the data packet with the via the network (160). The server-side address translator (140) receives the data packet, translates the mapped address information back to the real destination address and forwards the data packet using the real destination address.

Abstract: Method and apparatus for communication in a peer-to-peer (P2P) network are provided. The method comprises a first peer in the P2P network selecting a primary Internet Protocol (IP) address from a plurality of IP addresses associated with the first peer. The method further comprises the first peer providing the primary IP address to a second peer as an address the second peer is to use in initiating communication with the first peer. The apparatus comprises a user equipment (UE) that includes a processor configured such that the UE selects a primary IP address from plurality of IP addresses associated with the UE and registers the primary IP address in the P2P network.