Nortel Networks Corporation

Michael G Lee

Leslie D Owens

A technique for enabling a firewall device to allow encrypted data to securely pass between networks, and at the same time allow the firewall to selectively monitor the encrypted traffic that is allowed to pass is disclosed. In one embodiment, the technique is realized by detecting an exchange of a first encryption key between a host device and a remote device, and the first encryption key supports confidentiality protection of a first security policy between the host device and the remote device. Next, a second encryption key is exchanged with the host device when the exchange of the first encryption key is detected, and the exchange of the second encryption key supports confidentiality protection of a second security policy between the firewall and the host device. Next, based at least in part upon the second security policy, the first encryption key is requested and the first encryption key is sent under the protection of the second security key and in accordance with the second security policy. Finally, encrypted data is passed when it is determined that the first encryption key is received.

Method and apparatus for securely transmitting encrypted data through a firewall and for monitoring user traffic

A communication system, for use with a communications network, includes a client configured to communicate with the server via the network. The client includes an input configured to receive a communication from a server via the network, a data set with identifiable portions, and an apparatus coupled to the interface and coupled and configured to select a portion of the data set, the apparatus being further configured to process the selected portion of the data set and a portion of the communication in accordance with an authentication function to produce an authentication result, where the selected portion of the data set is configured to serve a function independent of being used in accordance with the authentication function.

Network communication authentication

Call features for an Automatic Call Distribution (ACD) system implemented within a packet-based telephone environment are disclosed. Within a packet-based network, data messages are transferred between the ACD system and customer telephone stations while the customer waits for an attendant to become available. These data messages allow the customer to be informed of his/her current status within the priority order and further allows the customer to initiate a number of customer oriented operations. These operations include selecting music to listen to while waiting, requesting to be alerted when an attendant becomes available, and initiating a browser session for accessing data information. Overall, the status reports in combination with the initiating of one or more of the customer oriented operations can make the time spent waiting for an attendant a more productive and pleasant experience for the customer.

Growing community of inventors

Ottawa, Canada

Michael G Lee