3com Corporation

Crimson Corporation

Harman International Industries, Inc.

Ivanti, Inc.

Hewlett-packard Development Company, L.p.

Brant David Thomsen

Lamar John Van Wagenen

Scott Allen Caddes

Brent Beachem

Thomas M Wheeler

James M Kirsch

Barani Subbiah

Peter M Rigstad

Ronald D Smith

John Y Yoon

Mark Farahar

David E Richmond

Vered Maor Semel

Earl Bryner

Lamar John Vanwagenen

There is provided a method of validating a first computing device based on copies of a distributed database storing a trust parameter indicative of a trusted or untrusted designation for network connected second computing devices, the method performed by a certain second computing device designated as trusted, comprising: receiving a validation request for designation as trusted transmitted by the first computing device designated as untrusted, querying trust-resource(s) to determine whether the first computing device should be designated as trusted or untrusted, when a trust parameter is obtained from the trust-resource, creating a new record storing the trust parameter of the first computing device, a first unique identifier indicative of the first computing device, and a second unique identifier indicative of the certain second computing device, and distributing the new record over the network for local verification and updating of respective copies of the distributed database.

Systems and methods for security of network connected devices

Methods of adding data identifiers and speech/voice recognition functionality are disclosed. A telnet client runs one or more scripts that add data identifiers to data fields in a telnet session. The input data is inserted in the corresponding fields based on data identifiers. Scripts run only on the telnet client without modifications to the server applications. Further disclosed are methods for providing speech recognition and voice functionality to telnet clients. Portions of input data are converted to voice and played to the user. A user also may provide input to certain fields of the telnet session by using his voice. Scripts running on the telnet client convert the user's voice into text and is inserted to corresponding fields.

Scripting support for data identifiers, voice recognition and speech in a telnet session

One embodiment of the invention sets forth a mechanism for selecting a voice recognition device included in a network of such devices for processing audio commands corresponding to a detected speech event. The voice recognition devices in the network individually determine which one of the devices is best suited to process the audio commands corresponding to the speech event. In operation, each of the voice recognition devices that detected the same speech event independently selects the same device for processing the audio command. Because each of the voice recognition devices, including the selected device, selects the same device for processing the audio command, the voice recognition devices not need to share information related to the selected device with one another.

Coordination among multiple voice recognition devices

An audio processing system includes a group of microphones associated with a dynamic network of microphones and a receiver. The receiver is configured to identify a first signal received by a microphone in the plurality of microphones that is designated as a primary microphone, and identify a subset of microphones included in the plurality of microphones, where each microphone in the subset is associated with a respective signal corresponding to the first signal. The receiver is further configured to calculate a weighting factor for each microphone included in the subset based on the first signal and the respective signal and opportunistically establish a connection with a microphone associated with the dynamic network of microphones that is not included in the plurality of microphones; and, based on a signal received from this microphone, adjust a weighting factor for at least one of the microphones in the subset.

Audio enhancement via opportunistic use of microphones

Scripting support for data identifiers, voice recognition and voice input in a telnet session

Secure communications on a network. An unauthenticated client on an network sends start packets to locate other clients. The unauthenticated client receives responses to the start packets from other clients on the network. The responses may be advertise packets that are from advertising clients that may be authenticated clients or other unauthenticated clients in authenticated mode. The unauthenticated client prioritizes the received packets so that authentication can be performed with the most desirable advertising client. Authentication packets are sent and received between the unauthenticated client and the advertising client in an attempt to authenticate.

Method for establishing a secure ad hoc wireless LAN

Method for establishing a secure Ad Hoc wireless LAN

A system for providing security in a computing network. The system has a server for distributing policies to be implemented by firewall devices in the network. The firewall devices provide hardware implemented firewalls to communication devices making network connections. The system has logic to allow a connection to be made to the network via a communication device at a node provided the firewall device is at that node. Therefore, the firewall device must be in the system for a connection to be established via the communication device. Additionally, the system is configured to cause data transferred by the communication device to be processed by the firewall.

System for providing firewall capabilities to a communication device

A method for providing security in a computing network. A device connects to a network and authenticates itself with a server. Next, the server adds the IP address of the device to a list of trusted devices. The server broadcasts the trusted IP address to all devices in the network to which the newly authenticated device is allowed to communicate. The devices in the network add the trusted IP address to a list of trusted address stored on each device. The server may also transmit its stored list to the newly authenticated device. After a device has received a packet, it determines if the IP address associated with the packet is on its trusted list. If it is, the device processes the packet. If the IP address is not found on the safe list, the device queries the authentication server to determine if the IP address is safe.

Method for managing network access

A method is described a NIC to ascertain the presence of spoofing activity and thus detect unauthorized network access. The NIC monitors for packets purporting to be from itself. In one embodiment, a NIC views packets trafficking on its network and monitors for packets having its own MAC Address, but which it did not send. In another embodiment, the NIC monitors for packets having its own IP address, but which it did not send. These falsely purportive packets originate not from the observant NIC, but suspiciously from elsewhere. Such suspect origins entities may be rogue entities attempting to gain unauthorized network access. These embodiments detect unauthorized access to a network by ascertaining the presence of spoofing activity in a manner that does not require gross revamping of network architecture or the burdening of network accessibility by legitimate authorized entities.

Method for detecting unauthorized network access by having a NIC monitor for packets purporting to be from itself

The present invention provides a method for detecting TCP/IP (Transmission Control Protocol/Internet Protocol) bindings for Network Interface Cards (NICs) installed on Windows 95&trade; and Windows 98&trade; operating systems with a VPN (Virtual Private Network) client present. More particularly, the present invention provides a method for parsing the Windows&trade; system registry to detect TCP/IP bindings for network interface cards installed within a host computer system. In one embodiment, a function for detecting TCP/IP bindings of one network interface card implemented and repeated for all keys of the registry of a computer software for detecting the TCP/IP bindings for network interface cards installed on the host computer system.

Growing community of inventors

Sandy, UT, United States of America

Brant David Thomsen