A plurality of computer nodes communicate using seemingly random Internet Protocol source and destination addresses. Data packets matching criteria defined by a moving window of valid addresses are accepted for further processing, while those that do not meet the criteria are quickly rejected. Improvements to the basic design include (1) a load balancer that distributes packets across different transmission paths according to transmission path quality; (2) a DNS proxy server that transparently creates a virtual private network in response to a domain name inquiry; (3) a large-to-small link bandwidth management feature that prevents denial-of-service attacks at system chokepoints; (4) a traffic limiter that regulates incoming packets by limiting the rate at which a transmitter can be synchronized with a receiver; and (5) a signaling synchronizer that allows a large number of nodes to communicate with a central node by partitioning the communication function between two separate entities.

Agile network protocol for secure communications with assured system availability

A secure data parser is provided that may be integrated into any suitable system for securely storing and communicating data. The secure data parser parses data and then splits the data into multiple portions that are stored or communicated distinctly. Encryption of the original data, the portions of data, or both may be employed for additional security. The secure data parser may be used to protect data in motion by splitting original data into portions of data, that may be communicated using multiple communications paths.

Secure data parser method and system

The present invention utilizes an aggregator for searching, packaging and delivering content. The aggregator processes requests, searches, provides search results and acquires content. The aggregator, operating in a communications network, includes a request and results processing server, a search engine server coupled to the request and results processing server and a content acquisition server coupled to the request and results processing server. A request and results processing server receives a request for content, the search engine server searches for the content and the content acquisition program acquires content for delivery to the user. The request and results processing server includes a search request processor that receives information related to a user's search request and provides the information to a search results form builder that creates an electronic search request.

Video and digital multimedia aggregator

A method and an apparatus are used to target interactive virtual objects to subscribers in a television delivery system. Programs are selected and virtual object locations are defined in the selected programs. The virtual objects (1265) available for targeting categorized and categories are correlated to subscriber information (1210) to determine the optimum targeting of the virtual objects (1260). The virtual objects may be targeted (1220) based on individual subscriber information (1210) or on information related to a group of subscribers. When a frame of program includes a virtual object location, a default or an alternate virtual objects is displayed. The virtual object location may change over space or time. The virtual object may be interactive, and may be used to link a subscriber to a remote location, such as an Internet web site. The television terminals record which virtual objects were displayed and report this information back to the headends and the operations center. The reported information is used to generate billing for commercial advertisers and to analyze viewer watching habits.

Method and apparatus for targeting of interactive virtual objects

A system ( 120 ) detects transmission of potentially unwanted e-mail messages. The system ( 120 ) may receive e-mail messages and generate hash values based on one or more portions of the e-mail messages. The system ( 120 ) may then determine whether the generated hash values match hash values associated with prior e-mail messages. The system ( 120 ) may determine that one of the e-mail messages is a potentially unwanted e-mail message when one or more of the generated hash values associated with the e-mail message match one or more of the hash values associated with the prior e-mail messages.

Hash-based systems and methods for detecting and preventing transmission of unwanted e-mail

A system and method allows portable, encrypted data to be accessible through multiple hosts, including new hosts (14), without requiring a secure link to the new hosts. A split key encryption system encrypts (52) data and stores the encrypted data on a portable device (10). A split of the encryption key is stored (54) in the portable device (10), and another split of the key is stored (54) in a home host (12) . A password-modified key is then made (58) by combining a password with the encryption key. This password-modified key is then reduced (58), with one split being stored on the host (12) and another split stored on the portable device (10) . Data can be accessed with a new host (14) by transferring (78) the host password-modified split to the new host (14) and entering (80) the password into the portable device (10).

Encryption method and system for portable data

A method for establishing a secure communications link between first and second terminals includes a step of exchanging a first message. The first message contains information describing encryption devices and communications modes available within the terminals and user authentication information. The method also includes a step of selecting, in at least one terminal, a common key generation and ciphering algorithm. The method further includes steps of exchanging a second message for providing data to form traffic keys, exchanging a third message for synchronizing secure communications and initiating secure communication.

Cryptographic key management apparatus and method

of EP0602335A method for establishing a secure communications link between first (103, 380) and second (109, 390) terminals includes a step of exchanging (210) a first message. The first message contains information describing encryption devices and communications modes available within the terminals and user authentication information. The method also includes a step of selecting (219, 221, 222, 224), in at least one terminal (103, 109), a common key generation and ciphering algorithm. The method further includes steps of exchanging (230) a second message for providing data to form traffic keys, exchanging (250) a third message for synchronizing secure communications and initiating (270) secure communication.

Cryptographic key management method

A system ( 20 ) transmits a digital data stream ( 22 ) using a lossy compression service ( 24 ) having a communication path ( 28 ) through which compressed signals propagate. The system includes a data conditioner ( 36 ) configured to condition the received digital data stream ( 22 ) to produce data subsets ( 66 ). A frame generator ( 36 ) expands each of the data subsets ( 66 ) to generate distinct signal sets ( 68 ). The distinct signal sets ( 68 ) are expressed in a data size greater than the data subsets ( 66 ) to compensate for lossy compression cause by the lossy compression service ( 24 ). A transmitter is in communication with the frame generator ( 36 ) and transmits digitized ones of the distinct signal sets ( 68 ) in frames of a digital bit stream ( 126 ) over the communication path ( 28 ).

Craig R Balogh

Papers

Encryption method and system for portable data

Cryptographic key management apparatus and method

Cryptographic key management method

Method and system for data transmission using a lossy compression service