Panasonic Corporation

Matsushita Electric Industrial Co., Ltd.

Sathya Narayanan

Eunsoo Shim

Dennis Bushmitch

Rajesh Khandelwal

Sarit Mukherjee

Daisaku Komiya

David Alan Braun

Nasir D Memon

Luyang Li

Gregory Michael Perkins

Gregory Ian Daley

Ahmet Sekercioglu

Greg Daley

Muthukumar Ratty

Eric Wu

Quin Shi

A method of authentication of a verifying device by a confirming device includes the confirming device receiving and storing a shared secret derived from at least a password of a user and sending a challenge. The method further includes the confirming device receiving a response to the challenge using the shared secret; determining if the response to the challenge is correct and if the response to the challenge is correct, authenticating the verifying device.

Authentication of a peer in a peer-to-peer network

A method for managing communication in a peer-to-peer network in which overlay information is updated on-demand such that neighboring node information is updated at least periodically and other overlay information is updated on-demand (from standard communications). For example, in one aspect, the network includes a plurality of nodes, and the method includes sending a leaving message from a leaving node to the predecessor and successor nodes of the leaving node, the leaving message including information relating to the leaving node, updating each of the predecessor and successor nodes exclusive of any other nodes of the plurality of nodes.

Method for on demand distributed hash table update

A method of authentication of peers of a peer-to-peer network includes a certificate issuer tracking at most a predetermined number of node IDs for each peer on the peer-to-peer network, a requesting peer requesting from the certificate issuer a certificate for authenticating a communicating peer and each certificate issued listing at least one node ID of the predetermined number of node IDs assigned for the communicating peer.

Robust peer-to-peer networks and methods of use thereof

A method for managing communication in a peer-to-peer network in which overlay information is updated on-demand such that neighboring node information is updated at least periodically and other overlay information is updated on-demand (from standard communications). For example, in one aspect, the network includes a plurality of nodes, and the method includes looking up at least one neighboring node, sending a joining message from a joining node to the neighboring node, the joining message including information relating to the joining node, joining the joining node to the network by updating each neighboring node exclusive of any other nodes of the plurality of nodes, sending reply messages from each neighboring node to the joining node, and updating the joining node with information from each neighboring node, exclusive of any other nodes of the plurality of nodes.

A mobility signaling method and apparatus are disclosed. Mobility signaling is performed by, first, generating a mobility signaling message () at a mobile node () to be sent to a correspondent node (). Next, either direct signaling or indirect signaling is selected as a signaling mechanism for the mobility signaling message () based on a cell residence heuristic. The mobility signaling message () is then sent to the correspondent node using the selected signaling mechanism for the mobility signaling message ().

Mobility signaling using direct or indirect signaling based on cell residency heuristics

Methods and apparatus to limit access to a secure personal network are provided. The method includes receiving an Internet protocol (IP) packet of a device including a confirmation value associated with the SPN. The method compares the confirmation value to a predetermined confirmation value and allows access to the SPN when the confirmation value matches the predetermined confirmation value. The IP packet is dropped otherwise. The confirmation value and the predetermined confirmation value are generated by an algorithm including a pseudorandom number generator, a hash function and a one-time password.

Method for secure packet identification

A method of router reachability verification for hosts in computer networks such as IPv6 networks is presented where hosts transmit router solicitations including information identifying a current router, and possibly one or more previous routers. A router that receives the router solicitations may then determine if it is the current router or one of the previous routers from the router solicitation information. If a router receiving the router solicitation is the current router, it waits a first delay before transmitting a router advertisement (RA). If the router is not a current router, it waits a second, longer delay. Accordingly, hosts may receive RAs from their current router before any other routers, thereby preventing unnecessary hand-offs. Also, RAs may include target host addresses so that hosts receiving the RAs may be aware of router reachability and avoid attempting to configure to undesirable routers.

Router reachability verification in IPv6 networks

A protocol for extending session endpoints in an ad-hoc network environment first performs device discovery to determine local devices within its coverage area and the capability of those devices. These local devices then exchange session descriptions with the endpoint device. If the current session may be supported by one of the local devices, the endpoint device, responsive to a command from an user, transfers the session endpoint to the local device and the endpoint device acts as a proxy for the local device in the session. Optionally, if the local device has a path to the correspondent node that is independent of the path through the endpoint device, it establishes the session along this path and then signal the endpoint node to terminate its session.

Session endpoint management protocol

The trusted computer network is protected behind a gateway that includes a bastion host and screening router which blocks all URLs associated with the trusted network. The bastion host includes a remote client authentication mechanism and web proxy component that verifies and translates incoming URL requests from authenticated remote clients. Authentication is performed using one-time passwords that are stored on a portable storage device. The user configures the portable storage device by operating configuration software from the protected side of the gateway. The portable storage device also stores plug-in software to enable the client computer to properly retrieve the one-time password and exchange authentication messages with the bastion host. Further security is obtained by basing the one-time password on an encrypted version of the user's PIN. A symmetric key used to encrypt the PIN is stored in a protected area within the portable storage device.

Computer network security system employing portable storage device

The emergency alert service responds to receipt of emergency alert messages by filtering, formatting and routing emergency alert information to a variety of different networked appliances and also to remote devices. In this way, a consistent warning message is disseminated simultaneously over many different warning systems, thus increasing warning effectiveness while simplifying the warning task. The system thus provides a common alerting protocol that is simple but quite robust and capable of exchanging all-hazard emergency alerts and public warnings over all kinds of networks.

Emergency alert service

A method is provided for transmitting data packets over a bi-directional contention and reservation based network. The network includes an operably linked system controller for receiving upstream channel packets and originating downstream channel packets. At least one operably linked remote terminal is included for receiving the downstream channel packets and originating the upstream channel packets. The system controller provides periodically allocated grants to the at least one remote terminal in the downstream channel for scheduling data packet transfers in the upstream channel. The periodically allocated grants have a fixed bandwidth size. The system controller also provides dynamically allocated grants to the at least one remote terminal in the downstream channel upon request of the at least one remote terminal for scheduling data packet transfers in the upstream channel. The dynamically allocated grants are of a requested bandwidth size. The bandwidth size of a data packet of a stream of packets to be transmitted from the at least one remote terminal through the upstream channel is determined and if it is greater than the size of the periodically allocated grant a dynamically allocated grant is requested. The dynamically allocated grant is requested to be of a bandwidth size equivalent to the bandwidth size by which the data packet exceeds the size of the periodically allocated grant. A first portion of the data packet is transmitted in response to the periodically allocated grant along with the dynamically allocated grant request. The remaining portion of the data packet is transmitted in response to a next available grant.

Growing community of inventors

Plainsboro, NJ, United States of America

Sathya Narayanan