Network Resonance, Inc.

Skype Limited

Voltage Security, Inc.

Nokia Corporation

Claymore Systems, Inc.

Nexus Nabot Research L.l.c.

Eric Kenneth Rescorla

Kevin Stewart Dick

Theo Zourzouvillys

Terence Spies

Matthew J Pauker

Guido Appenzeller

Rishi R Kacker

Derek MacDonald

Adam Cain

Brian E Korver

Craig R Watkins

David Kashtan

Tom Kroeger

Theo Peter Zourzouvillys

A communication system includes a plurality of nodes, the communication system being arranged to assign each of the plurality of nodes a certificate by means of which it can authenticate itself to other nodes in the communication system and periodically distribute to the plurality of nodes an update formed by compressing a data set representing the validity of the certificates assigned to the plurality of nodes. The update is such that a node may not be able to unambiguously determine from the update whether or not a particular certificate is valid. The system further provides the plurality of nodes with a source of information about the validity of the plurality of certificates that is different from the update and by means of which a node may resolve an ambiguity in the update regarding a particular certificate's validity.

Certificate revocation

A communication system includes a plurality of nodes, the communication system being arranged to assign each of the plurality of nodes a certificate by means of which it can authenticate itself to other nodes in the communication system. The communication system further includes an authentication node arranged to determine that a certificate should be revoked and to, responsive to that determination, write an indicator of that certificate's revocation to a location in the communication system that is external to the authentication node and to which the node assigned the revoked certificate is not permitted to write.

A communication system comprising: a terminal having: an interface to a network, whereby the terminal can be connected to another party on a communication session; an output for outputting a communication stream received from another party on a communication session; and a source of play-out stream independent of a communication session; and a communication controller for managing a communication session terminated at the terminal, the communication controller being configured to: a) when it detects that the terminal has been placed on hold in a communication session, cause play-out stream from the source of play-out stream to be directed to the output; and b) when it detects that the terminal has been taken off hold in the communication session, cause communication stream from the communication session to be directed to the output.

Hold detection and handling

A system, method and computer program product for analyzing data from a message stream, are disclosed. Data in a structured format is captured from a message stream. The captured data is processed to conform to a data model format so that one or more events can be identified from an analysis of the processed data. Once an event has been identified, the message stream is monitored to detect the identified event. When detected, the event is exported via a network.

System, method and computer program product for analyzing data from network-based structured message stream

A system, method and computer program product for auditing a message in a message stream are disclosed. Messages in a message stream are captured including at least one message in an extensible markup language (XML) format. Each message in the XML format is then extracted from the captured messages and has a timestamp applied thereto. Each timestamped message in the XML format is then stored in a memory.

System, method and computer program product for auditing XML messages in a network-based message stream

A system, method and computer program product for providing a trading exchange are disclosed. A request for conducting trade of a security is received from a user. The security associated with requested trade is evaluated to generate a derivative security. A trade is then executed for the user using the derivative security. Information relating to the executed trade is captured utilizing a network so that the captured information can be utilized to adjust an account of the user in accordance with the executed trade.

System, method and computer program product for providing an efficient trading market

A system, method and computer program product are disclosed for transmitting a datagram in a wireless multiplexing framework. A datagram destined to a destination in a network is received and a wireless connection is then selected from a set of wireless connections. The received datagram is then processed to associate an intermediary destination with the datagram. The datagram is subsequently transmitted to the associated intermediary destination via the selected wireless connection. From the associated intermediary destination, the datagram is then forwarded to the destination utilizing the network.

System, method and computer program product for providing an IP datalink multiplexer

A system, method and computer program product for guaranteeing a data transaction over a network are disclosed. When a data transaction between at least a server and a client is detected on a network, data transmitted via the network between the server and client during the data transaction is captured. At least one identifier is associated with the captured data. A timestamp is also generated for the captured data. The timestamp includes information therein identifying at least a portion of the identifier(s). The captured data, the identifier(s) and the timestamp are stored in one or more data stores. The identifier(s) associated with the stored captured data is also mapped to an entry in an index to permit retrieval of the stored data from the data store via the index.

System, method and computer program product for guaranteeing electronic transactions

A system is provided that uses identity-based encryption (IBE) to support secure communications. Messages from a sender may be encrypted using an IBE public key and IBE public parameter information associated with a recipient. The recipient may decrypt IBE-encrypted messages from the sender using an IBE private key. A host having a service name may be used to store the IBE public parameter information. The sender may use a service name generation rule to generate the service name based on the IBE public key of the recipient. The sender may use the service name to obtain the IBE public parameter information from the host.

Identity-based-encryption messaging system with public parameter host servers

A system, method and computer program product for analyzing data from a message stream are disclosed. Data in an structured format is captured from a message stream. The captured data is processed to conform to a data model format so that one or more events can be identified from an analysis of the processed data. Once an event has been identified, the message stream is monitored to detect the identified event. When detected, the event is exported via a network.

Method and apparatus for clustered Secure Sockets Layer (SSL) acceleration where two or more SSL relays are connected in a cluster. Information is transferred between a first node (typically, the client) and one of the SSL relays where the transferred information is related to communication between the first node and a second node (typically, the server). The state information of an SSL connection between the first node and the one SSL relay is clustered. The clustering includes sharing the state information between the one SSL relay and each of the one or more SSL relays. Any of the SSL relays can take over all connections of another of the clustered SSL relays therefore, providing no interruption in the communication should any of the SSL relays fail.

Growing community of inventors

Mountain View, CA, United States of America

Eric Kenneth Rescorla