Telcordia Technologies, Inc.

Bell Communications Research, Inc.

Other

Robert G White

Tao Zhang

Giovanni Di Crescenzo

Michael Todd Kramer

Stanley Pietrowicz

Gerardo Ramirez

James Joseph Brockman

Lisa B Blitzer

Josefa Ramaroson

Yang-Wei Wang

William Cruz

Dawn Diane Petr

Dwight Omar Hakim

Eric Van Den Berg

David Matthew Pepe

Joseph E Wilkes

Richard Ferrer

Joan Borras-Chia

David Mathew Pepe

Howard Lemberg

Andrew Burnette

Richard Reid Hovey

An inventive scheme for detecting parties responsible for repeated malicious activities in secure and anonymous communication is presented. The scheme comprises generating a pool of keys, distributing to and associating with each party a small number of keys chosen randomly from the pool, revoking a key when it is detected as used in a malicious activity, creating a set of parties associated with the revoked key, revoking additional keys randomly chosen among the keys not currently revoked, selecting new keys, and when a party requests an updated key, sending the updated key selected from among the new keys to the requesting party, wherein if an other malicious activity is detected, creating another set of the parties associated with the other malicious activity and identifying the parties in both sets. The steps of the inventive scheme are repeated until only one party is in the intersection set.

Method for a public-key infrastructure providing communication integrity and anonymity while detecting malicious communication

A method and system for public key infrastructure key and certificate management provides anonymity to certificate holders and protects the privacy of certificate holders from the compromise of a certificate authority. Functional separation is provided in the authorization of a certificate request and the assignment of certificates and key pairs. The authorizing certificate authority approves or denies each certificate request from a requestor whose identity is not made available to the assigning certificate authority. The assigning certificate authority, upon approval from the authorizing certificate authority, issues one or more certificates and optionally generates and provides the associated key pairs to the requester without disclosing these certificates and key pairs to the authorizing certificate authority. In another aspect, a distributed method is disclosed that allows individual nodes and/or units in a network to select certificates for broadcasting messages to a community of interest with a non-unique key.

Method and system to authorize and assign digital certificates without loss of privacy, and/or to enhance privacy key selection

The present invention advantageously provides techniques to solve problems with combinatorial anonymous certificate management by addressing critical issues concerning its feasibility, scalability, and performance. Methods and procedures to manage IEEE 1609.2 anonymous and identifying cryptographic keys and certificates in the Vehicle Infrastructure Integration (VII) system are presented, along with methods for management of identifying and anonymous certificates in a partitioned Certificate Authority architecture designed to enhance vehicle privacy. Novel methods for vehicles to dynamically change an anonymous certificate for use while maintaining vehicle privacy are given. Refinements to basic combinatorial schemes are presented including probabilistic key replacement, rekey counter decrement, dynamic rekey threshold, geographic attack isolation and proofs of geographic position.

Vehicle segment certificate management using shared certificate schemes

The present invention advantageously provides a system and method for management of cryptographic keys and certificates for a plurality of vehicles. Each vehicle of the plurality of vehicles generates public/private key pairs, requests multiple time-distributed certificates, creates an encrypted identity, and surrenders expired certificates. An assigning authority receives the public/private key pairs, the request for multiple time-distributed certificates, the encrypted identity, and the expired certificates from said vehicle. The assigning authority authorizes the vehicle with an authorizing authority, validates the expired certificates, proves ownership, and distributes the requested time-distributed certificates to said vehicle. Validation can comprise checking expired certificates against misused, compromised and/or previously surrendered certificates. Time-distributed certificates can have lifetimes adjustable based on certificate misuse detection system algorithms, amount of malicious activity detected, and/or certificate authority capacity.

Vehicle segment certificate management using short-lived, unlinked certificate schemes

A method and system for automatically configuring the frequency allocation within a cellular system or network. The method requires the collection of measurements from different parts of a cellular network, generating statistics from these measurements, and combining these statistics with inventory, propagation and geographic data. The combined data is used as input to a frequency allocation algorithm. As a result, the allocation algorithm produces a frequency configuration set, a quality measure of the configuration proposed and/or a set of recommendations that is fed back to the cellular base stations to re-allocate the frequency usage in a plurality of cells.

Method and system for real time cellular network configuration

A personal communications internetwork provides a personal communications internetwork providing a network subscriber with the ability to remotely control the receipt and delivery of wireless and wireline electronic text messages. The network operates as an interface between wireless and wireline networks. The subscriber's message receipt and delivery options are maintained in a database which the subscriber may access by wireless or wireline communications to update the options programmed in the database.

Electronic massaging network

A person communications internetworking provides a network subscriber with the ability to remotely control the receipt and delivery of wireless and wireline voice and text messages. The network operates as an interfaces between various wireless and wireline networks, and also performs media translation, where necessary. The subscriber's message receipt and delivery options are maintained in a database which the subscriber may access by wireless or wireline communications to update the options programmed in the database. The subscriber may be provided with CallCommand service which provides real-time control of voice calls while using a wireless data terminal or PDA.

Personal communications internetworking

A device for cleaning a conveyor belt, whereby the conveyor belt has at least one surface and the device is responsive to a source of cleaning fluid and a source of pressurized air and is electrically powered by a source of electric power, includes a washer head assembly. The washer head assembly is removably mounted above the conveyor belt and includes a dual spray arm member for spraying the cleaning fluid onto the at least one surface of the conveyor belt. The washer head assembly also includes an air-driven motor for rotating the dual spray arm member, whereby the air-driven motor is responsive to the source of pressurized air and is operatively coupled to the dual spray arm member. Further, the washer head assembly includes a selectively adjustable air flow control valve for adjusting the rotational speed of the dual spray arm member. The conveyor belt cleaning device also includes cart-based equipment which is transported on a portable cart. The cart-based equipment includes an electric motor and a pressure pump for pressurizing the cleaning fluid prior to the cleaning fluid being supplied to the dual spray arm member of the washer head assembly. The cart-based equipment also includes a regulator assembly for controlling the pressurized air prior to the pressurized air being supplied to the air-driven motor of the washer head assembly. The washer head assembly and the cart-based equipment are interconnected by flexible hoses.

Apparatus and method of cleaning conveyor belts

An interface between a protected computer or computer network and the World Wide Web (WWW). The interface comprises a split proxy system that encapsulates TCP/IP transmissions into a script transmission, which is not subject to problems in high latency systems, thereby greatly improving WWW access, via a wireless modem or other low-bandwidth communications network. The split proxy interface also provides compression, encryption and filtering capabilities and allows receipt of unsolicited transmissions from the service provider for such purposes as automatically updating or configuring WWW access software.

Growing community of inventors

Morristown, NJ, United States of America

Robert G White