Avaya Inc.

Other

Avaya Technology LLC

International Business Machines Corporation

Richard L Robinson

Paul Roller Michaelis

David S Mohler

Douglas Max Grover

Robert Reagan Gilman

Bruce Arland Rich

Robert J Serkowski

John Thomas Peck

Thomas Harry Benjamin

Steven E T Hikida

Gordon Richards Brunson

William Thomas Walker

Roger Leon Toennis

Anwar A Siddiqui

Mark Harald Wutzke

Mark Garstin

Mechanisms are provided, in a communication device associated with a first computing device, for capturing security data exchanged between the first computing device and a second computing device. The mechanisms receive a data message from either the first computing device or the second computing device. The data message is part of an operation for establishing a secure communication connection between the first computing device and the second computing device. The mechanisms filter the received data message for security data passed in the received data message and mirror the security data to an analysis port of the communication device. Moreover, the mechanisms output, via the analysis port, the security data to a data collection and analysis system that analyzes the security data with regard to security requirement compliance.

Intelligent certificate discovery in physical and virtualized networks

Fingerprint portions of two or more different fingers are detected on a detection surface, such as an optical surface, a touch pad, a touchscreen, or the like, and then a further detection made that the person has moved their finger(s), for example, apart, together or relative to one another. The movement can be detected based on identifying the fingerprint portion sliding across the screen. The combination of fingerprint information associated with a corresponding motion is correlatable to one or more actions or triggering events that are used to control one or more electronic devices. Further aspects are directed toward utilizing one or more of the techniques herein for a security application. For example, two users, each placing one or more fingers on a touch screen or touch pad, with the fingerprints thereafter being recognized, perform a certain movement with this triggering the unlocking, or locking, of an object.

Multi-finger sliding detection using fingerprints to generate different events

An optical scanner is configured to scan multiple print portions of a body part such as a finger. The optical scanner identifies a first one of the print portions in an area of an optical surface. An event such as launching an application is generated based on identifying the first print portion in the area of the optical surface. In addition, various events can be generated based on different combinations of print portions in different areas of the optical surface. In a second embodiment, a property detector is configured to identify different properties of a sleeve in different areas of a surface. An event is generated based on the detection of a property of the sleeve in an area of the surface.

Event generation based on print portion identification

A simple exemplary embodiment can leverage the ability of the touchscreen or touchpad device to distinguish between a fingernail and a palm-side fingertip press as binary distinctions. This can be done via long nails or alternatively, by rotating a hand to invert the finger. The binary distinction can be used to perform different functions. For example, a fingertip press could be the functional equivalent of a left-click on a mouse, and a fingernail press could be the equivalent of a right-click. Another example using a simply binary distinction could be that a fingertip press while typing will result in lower case, and fingernail press while typing will result in upper case. Another example, using a binary distinction, would interpret a light touch for right-clicks or upper case characters and a heavy touch for left-clicks or lower case characters.

Multi-mode touchscreen user interface for a multi-state touchscreen device

Prior art solutions only implement absolute music-on-hold suppression at the conference bridge. The present disclosure moves the intelligence and control capabilities to the entity implementing music-on-hold functionality and also provides mechanisms for applying the music-on-hold treatment more intelligently. Intelligent and flexible music-on-hold control algorithms are disclosed which make conference participation more convenient and enjoyable.

Intelligent music on hold

An optical scanner scans a first portion of a print of a body part such as a finger in a first area of an optical surface. The optical scanner detects a motion of the body part to a second area of the optical surface. This can be done in various ways. One way is for the optical scanner to detect a sliding motion of the body part to determine if most of the first portion of the print is in the second area. Another way is for the optical scanner to determine a rolling motion of the print based on a continuity of the print from the first area to the second area. A similar system and method is disclosed which detects a rolling motion of a body part by using a sleeve with multiple properties.

Detection of a rolling motion or sliding motion of a body part on a surface

A method and system are disclosed for providing secure communications with a communication appliance such as an IP telephone, wherein such an appliance has a reduced risk to attacks by unauthorized or rogue applications. In particular, 'denial of service' and 'man-in-the-middle' attacks are prevented. One embodiment establishes authenticated and encrypted communications with a single IP server for transmitting and receiving substantially all IP application communications with third parties.

Method and system for secure communications with IP telephony appliance

In one embodiment, a communication device includes a key strength controlling agentoperable to (i) receive a request for a cryptographic key; (ii) determine, from a restriction identifier, whether the cryptographic key strength is restricted; (iii) when the cryptographic key is restricted, cause the use of a second cryptographic key having a second key strength; and (iv) when the cryptographic key is not restricted, cause the use of a first cryptographic key having a first key strength. The first and second key strengths are different.

Method for undetectably impeding key strength of encryption usage for products exported outside the U.S

A system for licensing a computational component in a distributed processing network is provided. The system includes a licensing providerthat is spatially remote from the computational componentand is operable to: (a) assign a private and public key pair to the computational component; (b) create a digital certificatefor the computational component, the digital certificatebeing signed with a private key of the licensing provider, the licensing provider's private key being different from the computational component's private key; (c) create a license fileto be installed on the computational component; and (d) transmit the license fileand the computational component's signed digital certificateand private keyto the computational component

Certificate distribution via license files

A systemfor providing credentials to a computational component in a distributed processing network is provided. The systemincludes: (a) a plurality of crypto-tokens-, each crypto-token-comprising a unique identifier, optionally a digital certificate comprising a unique public key and the unique identifier, and a private key corresponding to the public key; (b) a provisioning systemcomprising a certificate authorityoperable to generate the plurality of crypto-tokens-; and (c) a computational componentcomprising a drive operable to receive and communicate with a selected crypto-token. The computational componentuses the digital certificate and private key in any of the crypto-tokens-to establish a secured communication session with the provisioning system. Before the establishing operation, any of the plurality of crypto-tokens-can be engaged with the computational componentto establish the secure communication session.

Secure installation activation

A packet-switched communications device in an enterprise network is provided. The packet-switched communications device has a corresponding unique identifier, such as an address or extension. The device includes a processor operable to (a) establish a secure communications session with a key generating agent in the enterprise network; (b) provide, to the key generating agent through the session, the unique identifier of the communications device; and (c) receive, from the key generating agent through the session, a secret key and a key identifier. An application server authenticates the packet switched device using the secret key. After authentication is successful, secure communications is established between the packet switched device and the application server.

Key server for securing IP telephony registration, control, and maintenance

The present efficient packet encryption method decreases the computation time to encrypt and decrypt successive packets of plaintext data. An S-vector is generated and the S-vector is used to encrypt successive packets of plaintext, thus reducing the per packet encryption/decryption time. The formula for encrypting successive packets includes use of the packet sequence number with a third variable injected to eliminate the predictability of the variables, thus making the present efficient packet encryption method more secure. A fourth variable is injected into the calculations to generate an encryption stream that does not repeat as frequently to provide additional security from hackers. For encrypting a packet having a long payload of plaintext, a packet byte sequence number is used to generate an encryption stream that is less likely to repeat within a particular packet.

Growing community of inventors

Broomfield, CO, United States of America

Richard L Robinson