Qualcomm Incorporated

Nortel Networks Corporation

Avaya Inc.

Lakshminath Reddy Dondeti

Vidya Narayanan

Ranjith Subramanian Jayaram

Jun Wang

Saumitra Mohan Das

Charles Nung Lo

Peerapol Tinnakornsrisuphap

Anand Palanigounder

Gordon Kent Walker

Raymond Tah-Sheng Hsu

Bruce Collins

Haipeng Jin

Randall Coleman Gellens

Edward T L Hardie

Parag Arun Agashe

Fatih Ulupinar

Stephen Jay Shellhammer

Arungundram C Mahendran

Mark Maggenti

Ramachandran Subramanian

Donald Fedyk

Christopher John Bennett

Edward Thomas Lingham Hardie

Wenyi Zhang

Yong Jin Kim

Aram Perez

Jeffery N Brown

Sanjiv Nanda

Paul E Bender

Philip Michael Hawkes

Ravindra Manohar Patwardhan

Ashwin Deepak Swaminathan

Peter Anthony Barany

Noam A Ziv

Lu Xiao

Donald William Gillies

Hong Zhang

Ravi Ravindran

Chris Bennett

Greg Rose

Multiple protocol tunnels (e.g., IPsec tunnels) are deployed to enable an access terminal that is connected to a network to access a local network associated with a femto access point. A first protocol tunnel is established between a security gateway and the femto access point. A second protocol tunnel is then established in either of two ways. In some implementations the second protocol tunnel is established between the access terminal and the security gateway. In other implementations the second protocol tunnel is established between the access terminal and the femto access point, whereby a portion of the tunnel is routed through the first tunnel.

Remote access to local network

A system and method are provided that allow an application on a first terminal to inquire about available network communication associations that it can use to send data to another terminal, thereby avoiding the establishment of a new network communication association with the other terminal. A security information module may serve to collect and/or store information about available network communication associations between the first terminal and another terminal across different layers. The security information module may also assess a trust level for the network communication associations based on security mechanisms used to establish each association and/or past experience information reported for these network communication associations. Upon receiving a request for available network communication associations, the security information module provides this to the requesting application which can use it to establish communications with a corresponding application on the other terminal.

Method and apparatus for providing network communication association information to applications and services

A user device generates a social graph-based user certificate that conveys a trust level to other users of the social network. A user certificate for a user is obtained, the user having a user public key and corresponding user private key. A plurality of potential signers is identified within one or more social networks. The certificate is then sent to the identified plurality of potential signers. One or more signed versions of the user certificate may be received from at least some of the plurality of potential signers. The user device may assign a signer weight to each signed version of the user certificate, each corresponding signer weight associated with the signer of each signed version of the certificate. The user certificate, the user signature, one or more signed versions of the user certificate, and the user-assigned signer weights are distributed to one or more recipients.

Social network based PKI authentication

Apparatus and methods for automatic service discovery and connectivity include acts of or components for retrieving service metadata associated with one or more service devices from a connectivity entity, wherein the service metadata comprises connectivity parameters, and configuring one or more links with at least one of the one or more service devices based on the service metadata. Further, the apparatus and methods may include acts of or components for using a service available from the one or more service devices through the one or more links.

Method and apparatus for automatic service discovery and connectivity

A multi-party commitment method is provided whereby a joining node uses contributions provided by contributor nodes in a peer-to-peer overlay network to generate a node identifier. The joining node generates a first contribution and sends a join request to an introducer node (or a plurality of contributor nodes), where the join request seeks to obtain one or more contributions for generating the node identifier within an identifier space of the overlay network. A hash of the first contribution may be included as part of the join request. In response, the joining node may receive a plurality of contributions, wherein the contributions are bound to each other and the first contribution by a prior external multi-node commitment operation. The joining node can then generate its node identifier as a function of the first contribution and the received contributions. Consequently, collusion between nodes and malicious manipulation during ID generation can be frustrated.

Secure node identifier assignment in a distributed hash table for peer-to-peer networks

The described apparatus and methods may include a local network formation module configured to join an overlay network via an available connection, retrieve from the overlay network at least one ad associated with forming a local network, determine if there is at least one matching ad to form the local network, and if no matching ads are determined, then publish an ad with a first local network configuration, or if one or more matching ads are determined, then join a local network according to a second local network configuration corresponding to one of the one or more matching ads.

Methods and apparatus for automated local network formation using alternate connected interfaces

Methods and apparatus for reducing the effectiveness of chosen location attacks in a peer-to-peer overlay network. A method includes determining that new node identifiers are to be generated for a plurality of nodes in the network, inputting parameters to a hash function to generate a selected node identifier, and adopting a location in the network associated with the selected node identifier. Another method includes receiving a node identifier associated with a selected node, inputting parameters associated with the selected node to a hash function to generate a corresponding node identifier, comparing the node identifier with the corresponding node identifier, and determining that the selected node is a potential attacker if the node identifiers do not match. Another method includes detecting responsibility for initiating an update to one or more node identifiers, generating parameters to generate the node identifiers, and transmitting the parameters on the network.

Methods and apparatus for reducing the effectiveness of chosen location attacks in a peer-to-peer overlay network

Techniques for performing registration with a wireless network using integrity protection and/or ciphering are described. A user equipment (UE) may perform a security procedure with the wireless network for a first session and may generate UE security context data at the UE. The UE security context data may include a cipher key used for ciphering, an integrity key used for integrity protection, a temporary UE identity, and/or other information. The UE may use the UE security context data for secure communication with the wireless network during the first session. The UE may store the UE security context data upon termination of the first session. The UE may thereafter use the stored UE security context data for registration with the wireless network for a second session following the first session. The UE may perform integrity protection and/or ciphering for message(s) for registration based on the stored UE security context data.

Integrity protection and/or ciphering for UE registration with a wireless network

Methods and apparatus for creation, advertisement, and discovery of peer-to-peer overlay networks. A method includes detecting one or more communication links that allow a node to communicate with other nodes, determining that a universal overlay network is accessible using at least one communication link, selecting a selected communication link from the at least one communication link, and joining the universal overlay network using the selected communication link. An apparatus includes a transceiver configured to detect one or more communication links that allow a node to communicate with other nodes, and a processor configured to determine that a universal overlay network is accessible using at least one communication link, select a selected communication link from the at least one communication link, and join the universal overlay network using the selected communication link.

Methods and apparatus for creation, advertisement, and discovery of peer-to-peer overlay networks

Methods and apparatus for enhanced overlay state maintenance in a peer-to-peer overlay network. A first method includes inferring that a first node is leaving the overlay network, and transmitting a decrement message to decrement a size counter value. A second method includes identifying a set of nodes associated with a first node of an overlay network, obtaining a segment length associated with each node of the set of nodes, and determining a size of the overlay network by dividing the total number of nodes in the set of nodes by the sum of the segment lengths. A third method includes identifying a set of nodes associated with a first node of an overlay network, obtaining a size estimate associated with the first node and with each node of the set of nodes, and determining a size of the overlay network by averaging the size estimates.

Methods and apparatus for enhanced overlay state maintenance

Disclosed is a method for securely presenting content in a mobile station. The mobile station may have a smart module, a security agent, and an air interface for communicating with a content provider and with a remote content rights manager. The smart module stores content presentation units and has a proxy content rights manager for when the mobile station is unable to receive secure content keys from the remote content rights manager using the air interface. In the method, content presentation units are transferred from the remote rights manager to the smart module for storage. Secure content keys are requested from the smart module for allowing presentation of content requested while the mobile station is unable to communicate with the remote rights manager. The secure content keys are transferred, based on a stored content presentation unit, from the proxy content rights manager to the security agent for allowing content presentation.

Method and apparatus for content protection in wireless communications

Methods and apparatus for event distribution and routing in peer-to-peer overlay networks. A method is provided for event distribution and routing in a peer-to-peer overlay network that comprises a plurality of nodes. The method includes identifying a plurality of buckets on the overlay network, wherein each bucket includes one or more nodes, respectively, identifying bucket groups, wherein each bucket group includes a selected number of buckets, respectively, distributing events based on the bucket groups, and updating a routing table based on the events. A node includes a transceiver and a processor coupled to the transceiver and configured to identify a plurality of buckets on the overlay network, wherein each bucket includes one or more nodes, respectively, identify bucket groups, wherein each bucket group includes a selected number of buckets, respectively, distribute events based on the bucket groups, and update a routing table based on the events.

Methods and apparatus for event distribution and routing in peer-to-peer overlay networks

Remote access to local network via security gateway

A spatio-temporal random voting scheme is provided that incorporates location distribution, spatial randomness, and temporal randomness in the collection of information from a plurality of sensing devices within the cognitive network. The region is divided into a plurality of sectors, where each sector is a portion of the region. A subset of sectors is selected from the plurality of sectors in the region to provide spatial randomness. A device is randomly selected from each sector in the subset of sectors to provide additional spatial randomness to the information collection process. Temporal randomness may be introduced by randomly selecting a timeslot within a sensing window period in which devices are to scan a frequency spectrum band to determine if a signal energy above a threshold is detected. Sensing reports are then collected from the selected sensing devices and used to determine whether the frequency spectrum band is available or in use.

Spatio-temporal random voting scheme for cognitive networks

Growing community of inventors

Hyderabad Telangana, India

Lakshminath Reddy Dondeti