Sprint Communications Comapny L.p.

Clearwire IP Holdings L.l.c.

Reza Jafari

Mohammed Ghouse Mohiuddin

Shingara Singh Dhanoa

Len I Mosley

Jeremy Richard Breau

Ezzat Atieh

Frederick Carl Rogers

John Eric Belser

Serge M Manning

Arun Santharam

Hung Viet Bui

Tim L Swan

Hal S Beech

George A Georgiou

Clayton B Wilson

Security in an asymmetrical network is addressed. At a security element, a handshake message is received on a path within the asymmetrical network. The handshake message is associated with an attempt to establish a session. A determination is made as to whether there is an entry for the handshake message in a local state table. When there is no entry in the local state table, then an entry is generated in the local state table, a notification of the handshake message is sent to a centralized computing platform that tracks handshake messages received by a plurality of security elements in the asymmetrical network, and the handshake message is allowed to pass along the path. A notification is received from the centralized computing platform that the session associated with the handshake message is allowed, based on associated handshake messages received at the centralized computing platform.

Addressing security in asymmetrical networks

Systems, methods, and computer-readable media for assigning priority to scalable video codings are provided. In one method, the dependency_id, quality_id, and temporal_id of a NAL unit header is used to calculate the priorty_id for the NAL unit header. In another method, the DiffServe field of an IP packet is modified based on the priority markings of the NAL unit header to provide different levels of assured forwarding.

Scalable video coding priority marking

A video surveillance system has an encoder receiving a video signal from a camera and generating real-time sequenced packets for streaming to a remote monitoring location. A transmit buffer is coupled to the encoder for buffering the sequenced packets. A transmit controller transmits an original packet stream comprising the sequenced packets. The transmit controller is responsive to retransmission requests to transmit sequenced packets from the transmit buffer as a retransmission stream. A receive controller is provided at the monitoring location for receiving the original packet stream and detecting missing packets from the original packet stream to transmit corresponding retransmission requests to the transmit controller for the missing packets. A decoder is responsive to the original packet stream to generate a reproduced video signal for viewing at the monitoring location. A recorder stores recorded video responsive to the original packet stream and the retransmission stream. The retransmission stream includes sequenced packets that are received too late to be used by the decoder for live reproduction, so that the recorded video provides a higher quality reproduced video signal than the reproduced video signal viewed in real-time at the monitoring location.

Simultaneous viewing and reliable recording of multimedia content over a network

A system, method, and computer-readable media are described for identifying a split-flow communications session occurring over two or more incompatible communications protocols. A data stream governed by a first communications protocol is associated with a device or end device by comparing information in the data packet headers with information in a device database that matches devices with the header characteristics such as an IP address. A second data stream governed by a second incompatible communications protocol is similarly associated with the same target endpoint or device. The two incompatible data streams may then be evaluated as a single split-flow communications session for malicious content, or for other purposes. If malicious content is detected, corrective policies may be implemented on the split-flow communications session to protect the device from the malicious content.

Split-flow attack detection

Addressing security in an asymmetrical network. At a centralized database, a handshake message is received from a security element that received the message on a first path. A second handshake message is received from a second security element that received the second message on a second path, where the centralized database tracks handshake messages and associations between the messages and communication sessions. A determination is made that the first message is associated with a session. Another determination is made that the second message is associated with the same session. An association between the second message and the first message is stored in the centralized database, based on the associations of the first message and the second message with the same communication session. A determination that the communication session is allowed is stored in the centralized database, based on the association of the second handshake message to the first handshake message.

A method and system are provided for centralizing services subscribed to by customers of a service provider for detecting attacks at the customer-end of a communications network. A signal diverter is installed in a signal path carrying inbound communication signals common to subscribed customers and a portion of the collective inbound signals for each customer is diverted to a detection apparatus. Finally, based on parameters for each subscribed customer, a determination is made as to if a subscribed customer is experiencing an attack.

Shared tap DOS-attack protection

A method, system, and medium are provided for managing bandwidth associated with a communication session characterized by a plurality of data packets being transmitted from a sender to a receiver. The receiver can include functions that monitor communication sessions and determine bandwidth adjustments corresponding thereto for optimizing the user's experience. The receiver can communicate feedback messages to senders that include requests for bandwidth adjustments. According to embodiments, senders can include well-known feedback listening ports through which feedback messages are received, enabling out-of-band user experience optimization.

Feedback for downlink sensitivity

A method, system, and computer-readable media are provided for determining connection needs of a mobile device connecting to a wireless network. In one aspect, the computer-readable media provide a method that includes receiving a request from a mobile device to access a wireless network, and performing an authentication phase related to the mobile device attempting to access the wireless network. Furthermore, the method includes evaluating signaling behavior of the mobile device during the authentication phase to determine which access technology from a plurality of types of access technologies to use to connect the mobile device to the wireless network. Moreover, the method includes connecting the mobile device to the wireless network using the determined access technology.

Supporting multiple authentication technologies of devices connecting to a wireless network

A method and system are provided for preventing network service shutdowns resulting from denial of service (DOS) attacks. First, parameters are monitored corresponding to network elements carrying communication signal traffic in a communications network, and, based on the parameters, if a DOS attack is indicated, performing the following for each instance of communication signal traffic: accessing data structures for data relating to protected communication signal traffic, and, based on the data, determining if the communication signal traffic is designated as protected. Finally; based on the determination, cleaning and forwarding each protected communication signal to its respective destination.

Detecting and addressing network attacks

Embodiments of the present invention provide systems, methods and apparatuses for addressing security by keeping track of handshake messages received by security elements along paths in an asymmetrical network. An Intelligent Security System receives handshake messages, thereby determining whether a session is allowed, and communicating information about the handshake messages, associations, and allowed sessions, to the security elements.

Methods and media for multi-layered packet security control are described. In one embodiment, a header of a packet is modified to include an identifier that identifies a manner in which the packet should be subject to a particular set of a plurality of sets of rules. The particular set of rules dictates how the packet is to be handled. Further, in one embodiment, the packet is communicated to a routing component, and the routing component is configured to reference the identifier to determine which, if any, of the plurality of sets of rules to apply to the packet.

Growing community of inventors

Olathe, KS, United States of America

Reza Jafari