Cable Television Laboratories, Inc.

Darshak Thakore

Steven John Goeringer

Brian Alexander Scriber

Michael Glenn

Amol Bhagwat

Brady Johnson

Mark Deazley

Massimiliano Pala

Stuart Hoggan

Martha Lurie Lyons

Dave Belt

John Charles Bahr

Igor Faynberg

Arianne Therese Hinds

Brian Stahlhammer

Clarke Stevens

Donald E A Clarke

Stephen Arendt

Brendan Long

Mark Walker

Sanjay Patel

Anju Ahuja

Thomas Holtzman Williams

Tao Wan

Stephen G Glennon

David Daniel Smith

Scott L Caruso

Chad Riland

Yuan Tian

Dennis Alan Brown

Mark Davies

Austin Ralph Pahl

Derek Digiacomo

Jane Keys

Rob Alderfer

Craig M Pratt

David K Broberg

Carey Sonsino

Kyle Haefner

Joshua Redmore

Barry Charles Ferris

Chris Riha

Authenticating devices utilizing Transport Layer Security (TLS) protocol to facilitate exchange of authentication information or other data to permit or otherwise enable access to services requiring authentication credentials, certificates, tokens or other information. The authentication may utilize Digital Transmission Content Protection (DTCP) certificates, Diffie-Hellman (DH) parameters or other information available to the authenticating devices, optionally without requiring device requesting authentication to obtain an X.509 certificate.

Certificate authentication

A system for detecting and profiling endpoints of a computer network is provided. The system includes a first computing device including at least one processor in communication with at least one memory device. The first computing device is in communication with a computer network. The at least one memory device stores a plurality of instructions, which when executed by the at least one processor cause the at least one processor to receive a plurality of packets transmitted to the computer network, determine an identity of a first end point device associated with the plurality of packets, determine a behavior pattern for the first end point device based on the plurality of packets, and generate a synthetic profile for the first end point device based on the identity and the behavior pattern.

Systems and methods for enhanced network detection

A method for supporting a plurality of passwords in a communication network includes (a) receiving a client authentication message generated by a network client wishing to connect to the communication network, (b) computing a respective password authentication message for at least one password of a plurality of passwords stored in a password database to generate a set of one or more password authentication messages, each password of the plurality of passwords being a password for the communication network, (c) identifying a password authentication message of the set of one or more password authentication messages that matches the client authentication message, and (d) associating, with the network client, metadata corresponding to a password of the password database used to compute the password authentication message that matches the client authentication message.

Systems and methods for supporting a plurality of passwords in a communication network

A method operable by a communication network gateway for providing communication services includes (a) supporting respective communication links with a plurality of communication service providers, (b) supporting a plurality of virtual local area networks (VLANs), (c) associating each virtual local area network (VLAN) with a respective communication service provider of the plurality of communication service providers, and (d) routing data between each VLAN and the respective communication link of the respective communication service provider associated with the VLAN.

Communication network gateways and associated methods

A wireless communication system includes an external provider subsystem and an electronic network subsystem in operable communication with the external provider subsystem. The electronic network subsystem is configured to provide a first microservice and a second microservice different from the first microservice. The wireless communication system further includes an in-home subsystem (i) separate from the external provider subsystem, (ii) in operable communication with the electronic network subsystem, and (iii) including a first micronet and a second micronet different from the first micronet. The first micronet is configured to operably interact with the first microservice, and the second micronet is configured to operably interact with the second microservice. The wireless communication system further includes at least one electronic device configured to operably connect with one of the first micronet and the second micronet.

Systems and method for micro network segmentation

Systems and methods for micro network segmentation

Network communication systems and methods implementing micro network subsystems for securely delivering personal electronic information across wired and/or wireless media are disclosed. Software-defined networking (SDN) is used to segment a provider network into a plurality of personal micro networks each established for an object that is cryptographically bound to or cryptographically associated with a living being. When multiple providers implementing different workflows and binding different objects to the same person are connected to the communication system, an interoperable network database stores the information and compiles, searches, and distributes the information to/from multiple providers.

Method and architecture in support of patient-centric networks

Systems and method for extendable micronets

A system for micro-segmented networking is provided. A system controller is programmed to a) store a plurality of micro-segmented network accounts and a plurality of subscriber accounts, b) receive a request from a user device to activate a first micro-segmented network associated with a first subscriber account, c) authenticate the first subscriber account based on the subscriber information, d) activate the first micro-segmented network, including a plurality of device slots for a plurality of devices, e) transmit, to the user device, first device slot authentication information for a first device slot of the plurality of device slots; f) receive, from a first device connecting to the wireless network, the first device slot authentication information; g) authenticate the first device slot authentication information; and h) in response to authenticating the first device slot authentication information, connect the first device to the first micro-segmented network.

Systems and methods for managing network connectivity with netreach

Systems and methods of operation are disclosed for media delivery systems operable to deliver requested media content to a client device by accessing media resources and media processing elements available on a network to which the media delivery system and client devices are linked. The media delivery system is operable to use the media resources and media processing elements to provide the requested media content in a requested format. The media delivery system may implement network-based media processing, and may use Immersive Technologies Media Format. The media delivery system may implement, such as in, or between, the application layer and network layer according to the OSI model, two control planes: a media control plane and a network control plane, and a data plane: a media data plane.

Media and application aware network architecture

A system for monitoring the security of a connected Internet of Things (IoT) device is provided. The system includes a network doppelganger (ND) computer device. The ND computer device is in communication with the IoT device and a service provider computer device associated with the IoT device. The ND computer device is programmed to store a plurality of policies associated with the service provider computer device. The ND computer device is also programmed to receive a communication from the IoT device addressed to the service provider computer device. The ND computer device is further programmed to analyze the communication in view of the plurality of policies to determine whether the communication is approved. If the communication is approved, the ND computer device is programmed to route the communication to the service provider computer device.

Systems and methods for internet of things security environment

A system for provisioning a device is provided. The system includes a computer device. The computer device is programmed to receive, from a user equipment, a connection request via a layer two connection. The computer device is also programmed to accept the connection request. The computer device is further programmed to receive, from the user equipment, a certificate request via the layer two connection. Additionally, the computer device is programmed to determine a destination for the certificate request, and to route the certificate request to the destination.

Systems and methods for subscriber certificate provisioning

A method for remote monitoring includes (1) generating first sensor data from a first sensor at a first network node of a communications network and (2) sending the first sensor data from the first sensor to a second network node that is remote from the first network node, via the communications network. The first network node is powered from an electrical power grid that is separate from the communications network. The first sensor data may be raw sensor data and/or lossless sensor data.

System and method for remote monitoring

Growing community of inventors

Broomfield, CO, United States of America

Darshak Thakore