8151 results about "Network communication" patented technology

The present invention consists of a secure interactive electronic account statement delivery system suitable for use over open networks such as the Internet. The invention utilizes a certification hierarchy to insure that electronic bills, invoices, and other account statements can be securely sent over open networks. The participants in the system are a certification authority, certificated banks, billers, and customers. The certification authority grants digital certificates to the certificated banks, which in turn grant digital certificates to billers and customers. Digital certificates form the basis for encryption and authentication of network communications, using public and private keys. The certificates associate a customer and biller with a certificated bank and with the electronic billing system, much like payment cards associate a customer with a payment card issuer and a particular payment card system. Digital signatures are used for authentication and non-repudiation. The certificates may be stored as digital data on storage media of a customer's or biller's computer system, or may be contained in integrated circuit or chip cards physically issued to billers and customers. The electronic bill itself may be a simple text message containing the equivalent of summary information for the bill, or may be more elaborate. In one embodiment of the invention, the electronic bill contains a number of embedded links, for example an embedded URL of a biller's world wide web server that allows the customer to interactively bring up detailed billing information by activating the link. The e-mail message may also include links to third party websites.

An energy saving device for an LED lamp mounted to an existing fixture for a fluorescent lamp where the ballast is removed or bypassed. The LEDs are positioned within a tube and electrical power is delivered from a power source to the LEDs. The LED lamp includes means for controlling the delivery of the electrical power from the power source to the LEDs, wherein the use of electrical power can be reduced or eliminated automatically during periods of non-use. Such means for controlling includes means for detecting the level of daylight in the illumination area of said least one LED, in particular a light level photosensor, and means for transmitting to the means for controlling relating to the detected level of daylight from the photosensor. The photosensor can be used in operative association with an on-off switch in power connection to the LEDs, a timer, or with a computer or logic gate array in operative association with a switch, timer, or dimmer that regulates the power to the LEDs. An occupancy sensor that detects motion or a person in the illumination area of the LEDs can be also be used in association with the photosensor and the computer, switch, timer, or dimmer, or in solo operation by itself. Two or more such LED lamps with a computer or logic gate array used with at least one of the lamps can be in network communication with at least one photosensor and/or at least one occupancy sensor to control the power to all the LEDs.

An RF addressable sensor network architecture is provided. The RF addressable sensor network includes one or more RF addressable sensors, one or more wireless sensor readers coupled to a communications network, and one or more end user devices coupled to the communications network. The RF addressable sensor network may also include a sensor network processor. An RF addressable sensor includes one or more sensor elements, one or more antennas for communicating with the wireless sensor reader, an RF power and communications interface, and RFID control module, and a sensor interface. The wireless sensor reader includes one or more antennas, a user interface, a controller, a network communications module, and an RF addressable sensor logic module.

A service module incorporated within the network infrastructure intercepts packets communicated between a client and a server to determine whether the connection corresponds to an email service. If so, the service module breaks the connection by terminating the connection with the client at the service module and opening a separate connection between the service module and the server. Packets communicated between the client and the server may then be redirected to an email compression application that monitors messages communicated between the client and the server and processes the messages in accordance with the state of the email session. For messages corresponding to connection establishment, user authentication and other protocol-specific messages, for example, the email compression application may be configured to forward the messages to the originally intended destination. Messages corresponding to an email message data, however, are buffered within the email compression application. Once the entire message has been received, the email compression application may strip the message headers and any protocol-specific data, compress the data and attach new message headers corresponding to the compressed email message. The compressed and reformatted email message is then reinserted into the data stream for transmission to the intended destination. Because compression may occur between the server and client, compression may be performed without requiring special processing by the server before email messages are sent. Furthermore, because the email messages may be compressed in a format that can be readily decompressed using decompression libraries incorporated within the operating system of client devices, such as the CAB format or GZIP format, the client may decompress received email messages utilizing software already incorporated within the operating system of the client device, without requiring download or installation of special decompression software and/or coordination of compression/decompression of email messages with the server or sending party.

A system has a virtual overlay infrastructure mapped onto physical resources for processing, storage and network communications, the virtual infrastructure having virtual entities for processing, storage and network communications. Virtual infrastructures of different users share physical resources but are isolated and have their own management entities. An interface between infrastructures allows controlled relaxation of the isolation, using a gateway between virtual nets, or shared virtual storage devices. This can allow businesses to share data or applications, while maintaining control of security.

A system, method and computer program product are provided for network-based scanning for potentially malicious content. Incoming and/or outgoing network communications traveling over a network are monitored, preferably at a gateway. Potentially malicious content in the network communications is identified. The identified potentially malicious content of the network communications is quarantined to help prevent damage that could be caused if the content is indeed malicious. In one embodiment, a pattern for testing the potentially malicious content network communications for malicious code can be executed. The network communications are conditionally delivered over the network based on the testing. In other embodiments, the network communications are delivered over the network after a predetermined delay and/or upon receiving a user request to release the suspect content from quarantine.

The present invention generally relates to blockchain technology. Specifically, this invention relates to adapting blockchain technology for the storage of voting data in an electronic voting system. The system includes a distributed network of voting machines in communication with each other. Each voting machine has a barcode scanner, a network communications device and a computer system running a voting client. Votes are received through the barcode scanner or a voter interface system and stored securely on a blockchain. The tally for various candidates in the election is updated and stored as each vote is received and counted. This creates an auditable trail of votes and the tally which can be used to detect, correct, and prevent fraud and error in the vote counting process.

A system has a virtual overlay infrastructure mapped onto physical resources for processing, storage and network communications, the virtual infrastructure having virtual entities for processing, storage and network communications. Each virtual infrastructure can be passivated by suspending applications, stopping operating systems, and storing state, to enable later reactivation. This is simpler for a complete virtual infrastructure than for groups of virtual entities and physical entities. It enables cloned virtual infrastructure to be created for testing, upgrading or sharing without risk to the parent. On failure, reversion to a previous working clone is feasible.

In some embodiments, the invention involves protecting network communications in a virtualized platform. An embodiment of the present invention is a system and method relating to protecting network communication flow using packet encoding/certification and the network stack. One embodiment uses a specialized engine or driver in the network stack to encode packets before being sent to physical network controller. The network controller may use a specialized driver to decode the packets, or have a hardware implementation of a decoder. If the decoded packet is certified, the packet is transmitted. Otherwise, the packet is dropped. An embodiment of the present invention utilizes virtualization architecture to implement the network communication paths. Other embodiments are described and claimed.

A protocol, method, and apparatus for managing network communications which are particularly well suited for ATM communications across a wireless medium. Contiguous time slots within a frame are allocated to each node having traffic to send. Each node is assured a nominal bandwidth, and excess bandwidth is distributed by demand. The allocation of excess bandwidth can be dependent upon the size of the buffer at each node, as well as the time-criticality of each message. Nodes communicate their requests for allocation by appending such control information to the first of their transmitted packets. The allocation, of each node's transmit and receive time slots, is transmitted to all the nodes at the beginning of each frame. Thereafter, each node need not participate on the network until their allocated time periods, thereby allowing portable devices to enter inactive states to conserve power. The network is operated in a connection mode; connections are established in a relatively non-interfering manner by the use of periodically occurring beacons. Inactive, unconnected, nodes need only monitor the network during these beacon periods, further allowing for power conservation.

A policy agent of a network performs an out-of-band user authentication process to verify the identity of a user of a client computer and associates the network data received from the client computer with the user. When the client computer initiates a network data connection to or through the policy agent, the policy agent sends an encrypted challenge to the client computer. The challenge is encrypted with a private key of the policy agent. When the client computer receives the challenge, it decrypts the challenge and prepares a message digest value based on the challenge and the network data sent by the user. The message digest value is then encrypted with the private key of the user to form a response, and the response is sent to the policy agent. The policy agent decrypts the response with the public key of the user to obtain the message digest value and calculates a digest value based on the challenge and the received network data. The policy agent then compares the calculated digest value with the decrypted digest value. A match between the two digest values indicates that the user is successfully authenticated and that the received network data are associated with the user. The policy agent may then apply network policies based on the credentials of the authenticated user.

Private Multimedia Network (PMN) complements, and is an improved alternative to digital videoconferencing and multimedia delivery systems. PMN's desktop and meeting room delivery system is designed to support the exponential growth of enterprise team-based initiatives. PMN provides “one-stop-shopping” for the full multimedia rubric. It delivers user-friendly control and cost/effective TV and broadcast quality videoconferencing and other multimedia services to organizations with “critical mass” campuses and building complexes. Though digital systems dominate the videoconferencing marketplace, PMN's hybrid digital/analog architecture has no digital peer in breadth or quality of service within or between campuses. The novel architecture leverages advances in analog video short-haul technology, digital long-haul technology, and telephony audio and control technology to deliver four-level multimedia services: 1) premise; 2) campus; 3) multi-site; and 4) ubiquitous (any site with ITU compatible multimedia equipment (e.g., videoconferencing) and communication links). On balance, the price/performance afforded by PMN's centralized Telco-based control and audio delivery combined with its decentralized broadcast quality video distribution raise videoconferencing and other multimedia services to a new level of ubiquity. Just as telephones and PC LANs, PMN delivers expensive Boardroom and mobile cart videoconferencing capabilities to every desktop via existing multimedia wall plates. The key phases for this invention are: Lip-synchronization across differing network communication links and protocols; Ubiquitous multimedia service; Cost/effective room and desktop deployment; Telco control and audio; Broadcast quality video; Isochronous Quality; Centralized control and distributed operation; and Interoperable architecture.

Tagging techniques use user interface features such as face icons that can be manipulated by a variety of cursors to tag media items including but not limited to photos. Tagged items can be presented automatically in response to establishing network communications between two devices.

A remote programming method is provided for safe and secure programming of a medical device at a remote location. A centralized programming instrument for use by a clinician or third party is provided with a network communication connection with a remote external medical device, such as a home programmer or monitor. The external medical device is located in the vicinity of a patient having an implantable medical device (IMD) and is in bi-directional telemetric communication with the IMD to allow instructions received from the centralized programming instrument to be transferred to the IMD. The remote programming method used for transferring information between the central programming instrument and an IMD includes measures to promote safe and secure remote programming of the IMD, which measures may include authorization requirements, programming condition requirements, implementation of programmed data requirements, and maintenance of a remote programming log.

An apparent network interface permits one processor such as a processor embedded within a larger processing system (an embedded processor) to communicate to a host processor or other processors and devices on the network to which the embedded processor is attached, using standard network communication mechanisms/protocols such as TCP/IP, NFS, FTP, HTTP, etc. The web server protocol HTTP is particularly useful because it permits the embedded computer to publish a user interface for remote monitoring and remote control using a standard web browser application. The invention provides the host computer with an apparent network interface that appears to be a standard network device, such as an Ethernet interface card. This apparent interface communicates directly with the embedded processor, which appears to be a device on this apparent network. Significant cost savings and performance enhancements are realized by implementing the communication directly over the host computer's peripheral bus rather than using standard network hardware such as Ethernet hardware.

In an exemplary embodiment, digital content is mastered as a combination of encrypted data and data processing operations that enable use in approved playback environments. Player devices having a processing environment compatible with the content's data processing operations are able to decrypt and play the content. Players can also provide content with basic functions, such as loading data from media, performing network communications, determining playback environment configuration, controlling decryption/playback, and/or performing cryptographic operations using the player's keys. These functions allow the content to implement and enforce its own security policies. If pirates compromise individual players or content titles, new content can be mastered with new security features that block the old attacks. A selective decryption capability can also be provided, enabling on-the-fly watermark insertion so that attacks can be traced back to a particular player. Features to enable migration from legacy formats are also provided.

A wireless intrusion prevention system and method to prevent, detect, and stop malware attacks is presented. The wireless intrusion prevention system monitors network communications for events characteristic of a malware attack, correlates a plurality of events to detect a malware attack, and performs mitigating actions to stop the malware attack.

A security network for use in a building with an opening to be monitored for possible intrusion. The network includes an intrusion sensor monitoring the opening; an RFID transponder associated with the sensor; an RFID reader in wireless communication with the transponder; and a portable telephone handset having first keys activating conventional telephone capability and second keys activating interaction with the other security network components. The handset wirelessly communicates with the reader. The reader may take the form of a security cradle for the handset. Alternatively, the reader may take the form of a telephone console. The console has keys enabling a user to dial remote telephone numbers; circuitry adapted to receive wireless communications from the transponder; circuitry in wireless communication with the handset; circuitry in communication with an external network; and a processor executing program code enabling the handset to communicate with the external network via the telephone console.

A method for secure communications between a client and one of a plurality of servers performed on an intermediary device coupled to the client and said plurality of servers. In one aspect, the method comprises: establishing an open communications session between the intermediary device and the client via an open network; negotiating a secure communications session with the client; establishing an open communications session with said one of said plurality of servers via a secure network; receiving encrypted data from the client via the secure communications session; decrypting encrypted application data; forwarding decrypted application data to the server via the secure network; receiving application data from the server via the secure network; encrypting the application data; and sending encrypted application data to the client. In a further aspect, an apparatus including a network interface communicating with the public network and the secure network at least one processor, programmable dynamic memory addressable by the processor, and a communications channel coupling the processor, memory and the network communications interface is provided. The apparatus further includes a proxy TCP communications engine, a proxy SSL communications engine, a server TCP communications engine; and a packet data encryption and decryption engine.

The invention discloses a method, a device, a client end, a server and a system for live broadcasting interaction and belongs to the technical field of network communication. The method is used in the client end comprising an anchor client end or a user client end, which belong to the same room; the method comprises the steps of receiving a live broadcasting video sent by the server from the anchor client end and interaction data of at least one user client end from the room; generating an interaction display content according to the interaction data, wherein the interaction content is used for displaying the interaction between the anchor client end and the user client end; fusing all or part of the interaction display content with the live broadcasting video for displaying in the same area. The problems that a user switches sight among multiple areas as the live broadcasting interaction is displayed in the multiple areas, and when the sight of the user is switched to a certain display area, the user easily omits the display content in other areas, and the information accessing rate is low are solved, and the effect of improving the information accessing rate is achieved.

A gaming machine with a communication multiplexer device that allows communications between the gaming machine and one or more game service servers all within a single network interface is described. The single network interface may be a wireless or wired network interface. The communication multiplexer device converts messages in native communication protocols used by the gaming machine to a network communication protocol such as TCP/IP for transmission over the single wired or wireless network interface. The communication multiplexer is designed such that the gaming machine may receive messages that have been transmitted using the native communication protocols without modifying regulated gaming software on the gaming machine.

The present invention provides method and systems for dynamically mirroring network traffic. The mirroring of network traffic may comprise data that may be considered of particular interest. The network traffic may be mirrored by a mirror service portal from a mirror sender, referred to as a mirror source, to a mirror receiver, referred to as a mirror destination, locally or remotely over various network segments, such as private and public networks and the Internet. The network traffic may be mirrored to locations not involved in the network communications being mirrored. The present invention provides various techniques for dynamically mirroring data contained in the network traffic from a mirror source to a mirror destination.

An optical transceiver device is provided, including an O/E transceiver module, an optical switching module and a switching control module, for providing network communication services for a first and a second optical fiber network equipment. The O/E transceiver module is an integrated chip having multiple transceiver units integrated therein. The switching control module is connected to an in-line equipment and the optical switching module for controlling the optical switching module to execute corresponding optical path switching operation according to an optical path switching control signal output from the inline equipment. In comparison with conventional optical transceiver devices, the invention is advantageous of simple structure, smaller volume and more flexible optical path switching.

A communications passthrough mechanism for high availability network communications between a shared system resource and clients of the system resource. The system resource includes a control/processing sub-system including multiple peer blade processors. A port of each blade processor is connected to each client/server network path and each client is connected to a corresponding port of each blade processor. Each blade processor includes a network fault detector exchanging beacon transmissions with other blade processors through corresponding blade processor ports and network paths. Each blade processor includes response generator responsive to a failure to receive a beacon transmission from a failed port of an other blade processor for redirecting the client communications to the failed port on the other blade processor to the corresponding port of the blade processor. A path manager in the blade processor is responsive to operation of the response generator for modifying the communications routing table to correspond with the redirection message to route the client communications to the failed port of the other blade processor to the other blade processor through the inter-processor communications link. Each blade processor may also include an inter-blade communications monitor for detecting a failure in the inter-processor communications link between the blade processor and another blade processor, reading the communications routing table to select a functional network communications path to a port of the other blade processor, and modifying the communications routing table to redirect inter-processor communications to the selected functional network communications path.

A power saving device for a light emitting diode (LED) lamp mounted to an existing fixture for a fluorescent lamp having a ballast assembly and LEDs positioned within a tube and electrical power delivered from the ballast assembly to the LEDs. The LED lamp includes means for controlling the delivery of the electrical power from the ballast assembly to the LEDs wherein the use of electrical power can be reduced or eliminated automatically during periods of non-use. Such means for controlling can include an on-off switch mounted in the tube or can also include a current driver dimmer mounted in the tube that regulates the amount of power delivered to the LEDs. A computer or logic arrays control the dimmer or power switch. A sensor such as an occupancy motion detection sensor mounted external to the tube or within the tube can send signals to the computer or logic array to trigger a switch or control a dimmer. Two or more such LED lamps with one or more computers or logic arrays in network communication with sensors can be controlled, so as to reduce flickering between lamps when illumination areas are being alternately occupied. Preset or manually set timers can control switches or be used in combination with the computer, logic array, and dimmer.

A system automatically discovers and maintains geographic location information for entities and devices making up a computer network. The system preferably includes a computing unit and a geographic location generator, such as a Global Positioning System (GPS) receiver. The computing unit includes a location discovery entity and a message generator. The GPS receiver, which is mounted to and in communication with the computing unit, may be augmented with an inertial navigation unit to facilitate the generation of location information inside of buildings where GPS signals can be difficult to receive. The computing unit further includes a network communications facility so that it can communicate with one or more network devices, such as a network switch. The switch includes a location recording/reporting entity and a location database. Physical coordinates of network entities or devices are obtained by the GPS receiver and/or-inertial navigation unit and transmitted to the network switch, and the recording/reporting entity stores the physical coordinates at the location database.

A method for secure communications between a client and a server. The method includes the steps of managing a communications negotiation between the client and the server; receiving encrypted data packets from the client; decrypting each encrypted packet data; forwarding unencrypted data packets to the server; receiving data packets from the server; encrypting the data packets from the server; and forwarding encrypted data packets to the client. In a further embodiment, an apparatus communicating with a client via a public network and communicating with one of a plurality of servers via a secure network is disclosed. The apparatus includes a network communications interface, at least one processor, programmable dynamic memory, and a communications channel coupling the processor, memory and network communications interface. In addition, the apparatus includes a client/server open communications session manager, a client secure communication session manager, a client/server secure communications session tracking database; and a data packet encryption and decryption engine.

Methods, apparatus, and business techniques are disclosed for use in mobile network communication systems. A mobile unit such as a smart phone is preferably equipped with a wireless local area network connection and a wireless wide area network connection. The local area network connection is used to establish a position-dependent ecommerce network connection with a wireless peripheral supplied by a vendor. The mobile unit is then temporarily augmented with the added peripheral services supplied by the negotiated wireless peripheral. Systems and methods allow the mobile unit to communicate securely with a remote server, even when the negotiated wireless peripheral is not fully trusted. Also mobile units, wireless user peripherals, and negotiated wireless peripherals that project a non-area constrained user interface image on a display surface are taught.

A power saving device for a light emitting diode (LED) lamp mounted to an existing fixture for a fluorescent lamp having a ballast assembly and LEDs positioned within a tube and electrical power delivered from the ballast assembly to the LEDs. The LED lamp includes means for controlling the delivery of the electrical power from the ballast assembly to the LEDs wherein the use of electrical power can be reduced or eliminated automatically during periods of non-use. Such means for controlling include means for detecting the level of daylight in the illumination area of said least one LED in particular a light level photosensor and means for transmitting to the means for controlling a control signal relating to the detected level of daylight from the photosensor. The photosensor can be used in operative association with an on-off switch in power connection to the LEDs, or with a computer or logic gate array in operative association with a dimmer that controls the power to the LEDs. An occupancy sensor that detects motion or a person in the illumination area of the LEDs can be optionally used in association with the photosensor and the computer and dimmer. Two or more such LED lamps with one or more computers or logic gate arrays can be in network communication with the photosensors and the occupancy sensors to control the power to the LEDs.

A join process is disclosed for a wireless mesh topology network. In the network, nodes have multiple spatial coverage sub-sectors together covering a larger sector angle and a node can establish connection with other nodes located in directions covered by its sub-sectors. The join process adds a joining node to the network and includes having the joining node listen to sub-sectors at a specific receiving frequency for a defined time. Thereafter, the network node changes its sub sectors and its receiving frequencies according to a defined timing and sequence. Active network nodes transmit organized invitation data packets on defined sectors, frequencies and timing, based on relative location and relative angle orientation deduced from sub-sectors already in use for existing internal network communication. This reduces frequency interference in the network and reduces time required for the join process.