Cisco Technology, Inc.

O2micro International Limited

Oplink Communications, Inc.

Apple Inc.

360 Degree Web, Inc.

Wei Luo

William Mark Townsley

Earl Hardin Booth, Iii

Chih Jen Kuo

Greg Weber

Feng Quan Liu

Miao Li

Wenhui Wang

Eric C Rosen

Wei-Zhong Li

Kevin A Gross

Shaun M Pacheco

Wei Zhong Li

Yanfeng Yang

George Wilkie

Ronan S Kerviche

Earl Iii Booth

Systems and methods for characterizing a camera system on a mobile device are disclosed. Characterization of the camera system may be implemented by providing a diffraction pattern of dots at controlled, defined angles to the camera system. Images of the diffraction pattern may be captured during a focus sweep through predetermined focus positions and/or while changing the relative locations between the lens and image sensor at the predetermined focus positions. The captured images may be analyzed to determine calibration data that provides physical measurement of properties of the camera system. The calibration data may then be implemented by the camera system to produce enhanced imaging on the mobile device.

Physical characterization of camera system for super-resolution imaging

A smart card enabled secure computing environment system locks the host computer system from user access and waits for a smart card to be inserted into an attached or co-resident smart card reader. When a smart card is inserted into the smart card reader, the invention asks the user to enter his smart card password which is compared to the password on the smart card. If the two passwords match, the invention looks up the user's username in an access file of valid users and finds its associated access times and/or cumulative time limits in the access file. if the current time is within any of the valid access times and the user's cumulative usage time is within the specified cumulative time limit, then access is granted and the system is unlocked. The invention periodically checks the current time while the user is using the computer. If a blocked time period is entered or a cumulative time limit is exceeded, the user is logged off the machine and the computer is locked from user access. If at any time the user's smart card is removed from the smart card reader the invention will shut down all of the user's programs and lock the system.

Smart card enabled secure computing environment system

Techniques for configuring a particular network interface on a particular node at an edge of a provider network to support a particular virtual private network include receiving customer input data. The provider network is a packet-switched network and the particular virtual private network is a link layer virtual private network. The customer input data indicates a topology for customer equipment devices outside the provider network on the particular virtual private network, and may include properties for corresponding interfaces that connect the customer equipment devices to the edge nodes. Based on the customer input data, configuration data is determined for configuring the particular interface at the particular node. The particular node is caused to configure the particular interface based on the configuration data without human intervention. Among other effects, these techniques support zero-touch provisioning of virtual private networks.

Techniques for customer self-provisioning of edge nodes for a virtual private network

A method and apparatus for processing a signal on an intermediate network node at an edge of a provider packet-switched network to support a link-layer virtual private network includes receiving a signal on a particular interface. The particular interface is for a direct communication link to a customer network node outside the provider network. It is determined whether the signal indicates that the particular interface is changing from an inactive state to an active state, whereby the signal is called first sign of life (FSOL). If it is determined that the signal is FSOL, then configuration data is determined for configuring the particular interface for the particular virtual private network. The signal is processed based on the configuration data. These techniques allow a dynamic response to new signals on a customer interface without human intervention by the provider.

Techniques for using first sign of life at edge nodes for a virtual private network

Systems and methods for interconnecting heterogeneous layer 2 virtual private network applications. To facilitate such interconnections, a common addressing scheme for forwarders is provided. All current pseudowire signaling protocols can incorporate this addressing scheme, and therefore establish connectivity among forwarders of different applications. Auto-discovery of remote forwarders is also facilitated by use of a common address family identifier (and subsequent address family identifier) for BGP.

System and method for interconnecting heterogeneous layer 2 VPN applications

A method and apparatus for configuring a network interface to support a virtual private network includes storing configuration data at a server on a host computer on the provider network. It is determined whether conditions are satisfied for sending the configuration data to a particular node at an edge of the provider network. If it is determined that conditions are satisfied, then the configuration data is sent to the particular node to cause the particular node to configure a particular interface for supporting a virtual private network over the provider network based on the configuration data without human intervention. The provider network is a packet-switched network and the particular virtual private network is a link layer virtual private network. The particular node is different from the host. The particular interface is for a direct communication link to a customer network node outside the provider network.

Techniques for zero touch provisioning of edge nodes for a virtual private network

A method and system for providing authentication in a virtual private network having a private AAA server is disclosed. The method generally includes receiving a request from a remote user for connection with a virtual private network at a virtual home gateway and associating the remote user with the virtual private network The virtual home gateway sends a request to authenticate the remote user to the AAA server. The remote user is then connected to the virtual private network if the AAA server authenticates the user.

Method and system for providing authorization, authentication, and accounting for a virtual private network

A smart card enabled mobile personal computing environment system stores a user's personalized, fully functional, computing environment in a smart card. The user to specifies information required to configure the client to the user's preferred personal computing environment. The user's personal computing environment data is also used for interfacing with the user's Web browser. As the user browses the Web, the Web pages are analyzed to determine if the Web page is a logon or registration form. If the form is a registration form, the system fills in the form using the user's information from the user's personal computing environment data. If the form is a logon form, the system either captures the user's user name and password if the system has not recorded them, or inserts the user name and password in the form if the information for the Web page is in the user's personal computing environment data.

Personal computing environment using mozilla

A method and apparatus for configuring a network interface to support a virtual private network includes storing configuration data at a server on a host computer on the provider network. It is determined without human intervention whether conditions are satisfied for sending the configuration data to a particular node at an edge of the provider network without receiving a request message from the particular node. If it is determined that conditions are satisfied, then the configuration data is sent to the particular node to cause the particular node to configure a particular interface for supporting a virtual private network over the provider network based on the configuration data. The particular node is different from the host. These techniques allow changes in configuration data to be pushed to provider edge nodes without human intervention.

Techniques for zero touch provisioning of edge nodes for a virtual private network by pushing configuration from a server

A multimedia intelligent business card system allows multimedia and Web content to be stored on a smart card. The invention automatically and selectively translates each file, URL, or file references as they should be when the contents of the smart card are read. The invention waits for a smart card to be inserted into a smart card reader attached to or resident in the host computer and intelligently distinguishes between a multimedia, Web-enabled, or combination smart card. A multimedia file/mp3 file/playlist or URL address is accessed from the smart card. The multimedia player required to play the accessed file/playlist or the browser required to display the accessed URL is determined and the accessed file/playlist is sent to the multimedia player and played to the user or the accessed URLA is sent to the browser and the Website is displayed to the user. The invention enables multiple auto play from multimedia files/MP3 playlist and multiple automatic connection with multiple URLs. A hotkey is defined on the host computer,for example, &#x3c;F12&#x3e;. If the user presses the hotkey during playback, then the invention will access the smart card for the next file, mp3 file in the playlist, or URL, if it exists.

Multimedia intelligent business card system

A polarization splitter and combiner for processing a beam containing a first polarization and a second polarization to spatially separate these polarizations by using a birefringent element for receiving the beam and walking off the first polarization from the second polarization by an initial walk-off distance. A first lensing element with an optical axis is oriented to admit the first polarization at a first input point and output the first polarization at a first output angle to the optical axis and the second polarization at a second output angle to the optical axis. A second lensing element positioned after the first lensing element is oriented to receive the polarizations at input angles equal to their respective output angles, and outputs both polarizations at a first and second output point respectively. In a symmetrical arrangement, the first and second output points are separated by the initial walk-off distance. Additional walk-off control elements and optics can be interposed between the first and second lensing elements, depending on the functionality of the beam splitter and combiner or optical device employing the same.

Polarization splitter and combiner and optical devices using the same

A method and system for providing an optical filter is disclosed. The method and system include providing a first fiber for carrying a first optical signal and a second fiber for carrying a second optical signal. The first fiber has an end. The method and system also include providing a filter and a lens disposed between the filter and the end of the first fiber. The filter has a surface and is for filtering the first optical signal to provide the second optical signal. The lens has an axis and is for collimating the first optical signal. A normal to the surface of the filter is disposed at a first nonzero angle to the axis. The first optical signal has a first direction of propagation at the surface of the filter. The first direction of propagation is disposed at a second nonzero angle from the normal to the surface of the filter. The filter can be tuned by rotating the filter around the axis. Furthermore, additional fibers can be added to simultaneously filter multiple channels.

Growing community of inventors

San Jose, CA, United States of America

Wei Luo