Palo Alto Research Center Inc.

Xerox Corporation

Google Inc.

Gula Consulting Limited Liability Company

Paul J Stewart

Diana Kathryn Smetters

Dirk Balfanz

Glenn Edward Durfee

Hao-Chi Wong

Rebecca Elizabeth Grinter

Patrick Markus Baudisch

Nathaniel S Good

Jonathan J Huang

Ryan Tyler Cairns

Daniel C Swinehart

David Kirtland Fork

Van L Jacobson

Mark Webster Newman

W Keith Edwards

Trevor F Smith

Jana Zdislava Sedivy

Trond Thomas Wuellner

Michael F Plass

Teresa F Lunt

Steve B Cousins

Bryan Pendleton

Cristina Lopes

Ken Conley

Wade Douglas Guthrie

A device that implements adaptive on-demand tethering may include at least one processor circuit. The at least one processor circuit may be configured to monitor at least a first connection quality value associated with a first network connection of the device to a network. The at least one processor circuit may be further configured to receive information regarding a second connection quality value associated with a second network connection of another device. The at least one processor circuit may be further configured to initiate a tethering connection with the another device based at least in part on a comparison of the first connection quality value and the second connection quality value. The at least one processor circuit may be further configured to connect to the network through the second network connection of the another device via the tethering connection based at least in part on the comparison.

Adaptive on-demand tethering

A system and machine-implemented method for providing a software update within a network comprising plural computing devices. A subset of the plural computing devices is identified for installation of the software update. The software update is provided to the computing devices within the subset for installation. After providing the software update, a software version or a connectivity status is obtained for at least one of the computing devices within the subset. A determination is made that the software update is invalid based on the obtained software version or connectivity status.

Providing a software update to computing devices on the same network

In some embodiments, a device for network connection selection may include a network connection selector configured to obtain historical connection information related to previous network connections utilized by a device. The historical connection information may include connectivity disruptions indicating whether connectivity was disrupted for one or more network connections that were previously established by the device. The network connection selector may be configured to select a network connection for the device among a plurality of available network connections based on an evaluation of the historical connection information such that the selected network connection substantially maintains connectivity to a network for a future period of time.

System and method for intelligent network connection selection

A system and machine-implemented method for connecting to a network. Plural assignable channels for connecting to a network are determined. History data for one or more of the assignable channels is obtained. The history data indicates a number of prior network connections for the computing device via each of the one or more assignable channels. The plural assignable channels are ranked based on the obtained history data. The plural assignable channels are scanned based on the ranking. The computing device is connected to the network based on the scan.

Connecting to a network

We present technology that allows layman computer users to simply create, provision, and maintain secured infrastructure&#x2014;an instant PKI. This technology can be used in a wide variety of applications including wired and wireless networks, secure sensor networks (such as medical networks), emergency alert networks, as well as simply and automatically provisioning network devices whether secure or not.

Method, apparatus, and program product for provisioning secure wireless sensors

A system for facilitating voice calls over a content centric network (CCN) receives from a CCN user an expressed interest in receiving voice calls directed to the CCN user, wherein information in the CCN can be addressed, located, and disseminated by its content identifier and wherein data packets in the CCN are self-authenticating. Next, the system receives from a second network a packet for a voice call directed to the CCN user. The system then forwards to the CCN user the packet received from the second network with a CCN identifier corresponding to the interest expressed by the CCN user and forwards a packet from the CCN user for the voice call to the second network.

Voice over content centric networks

Pre-authentication information of devices is used to securely authenticate arbitrary peer-to-peer ad-hoc interactions. In one embodiment, public key cryptography is used in the main wireless link with location-limited channels being initially used to pre-authenticate devices. Use of public keys in the pre-authentication data allows for the broadening of types of media suitable for use as location-limited channels to include, for example, audio and infrared. Also, it allows a range of key exchange protocols which can be authenticated in this manner to include most public-key-based protocols. As a result, a large range of devices, protocols can be used in various applications. Further, an eavesdropper is forced to mount an active attack on the location-limited channel itself in order to access an ad-hoc exchange. However, this results in the discovery of the eavesdropper.

Systems and methods for authenticating communications in a network medium

A method for securing human to human communication over a network includes receiving, by a first computer, an incoming authenticated data stream from a second computer over a first communication channel, the incoming authenticated data stream having been computed using an incoming digital experiential data stream and a first imprint, and extracting the first imprint from the incoming authenticated data stream. The incoming authenticated data stream is then presented for sensory experience by a human. An outgoing digital experiential data stream is then input and the method computes a second imprint associated with the first computer and computes an outgoing authenticated data stream using the outgoing digital experiential data stream and the second imprint. A second communication channel is then secured from the first computer to the second computer using the first imprint, the second communication channel suitable for sending the outgoing authenticated data stream to the second computer.

Securing multimedia network communication

One embodiment of the present invention provides a system that facilitates access to encrypted data on a computing device based on a security-posture of the computing device. During operation, the system assesses the security-posture of the computing device upon which the encrypted data is stored. If the assessed security-posture meets specified criteria, the system provides the computing device with a key which enables the computing device to access the encrypted data.

Posture-based data protection

We present technology that allows layman computer users to simply create, provision, and maintain secured infrastructure&#x2014;an instant PKI. This technology can be used in a wide variety of applications including enabling secure communications to components of a vehicle, and enabling secure communications between the vehicle and associated infrastructure.

Method and apparatus for using a secure credential infrastructure to access vehicle components

Method, apparatus, and program product for automatically provisioning secure network elements

A system and method for sharing files securely includes server software on a first device configured to communicate with server software operating on one or more other preauthorized devices, such as a second device. The servers communicate with each other securely using cryptographic information exchanged during a preauthorization phase using a range-limited communication channel. The server on the first device obtains file information from the other preauthorized device(s) and combines the information with local file information from the first device. This combined file information is sent to client software operating on the machine, which presents the combined file information to users.

Method and system for securely sharing files

A method of using two or more display units with different resolutions which have been combined such that the geometry of images displayed across the multiple display units is preserved and the image appears to be substantially continuous to a viewer of the image. Compatibility of the sizes of image elements on different display units is achieved by using display unit-specific scaling to compensate for the different pixel sizes on the individual display units.

Growing community of inventors

Campbell, CA, United States of America

Paul J Stewart