摘要:
An apparatus and method for secure data handling in a distributed network is implemented by a secure agent connected by a secure channel to a primary communication unit, secondary communication unit, and clients. The primary communication unit and secondary communication units are connected to separate key-stores having keys. A method using distributed keys for encryption and decryption is disclosed. Another method utilizes multiple-time keys.
摘要:
An entertainment device is provided. The entertainment device includes a main processing station (7) which provides an output signal. The main processing station includes a control interface (20). A front panel (10) is removably connected to the control interface. The front panel includes a memory for storing multimedia content. The front panel provides control parameters to the main processing station. The content of the memory is provided to the main audio processing station for output. In addition, the front panel processes and presents the stored multimedia content as a portable device. Both control parameters and multimedia (e.g. audio or video) information may be exchanged between the front panel and the main processing station. The front panel also includes a telecommunications device and an alarm transponder
摘要:
Multiple media push engines communicate with the multimedia client through a multi casting network that may incorporate multiple delivery paths. The streaming data representing media selections for delivery are distributed across multiple media push engines using a non-hierarchial coding technique in which the data are represented as a set of substream components, capable of being reconstituted from fewer than all of the components of the original data stream. The higher the number of components used in reconstitution, the higher the quality of service is provided by the reconstituted stream. Admission control to the group multicast session is administered in a distributed fashion, where an admission control unit opens the multicast stream, with all subsequent admission control decisions being made by the media push engines themselves. Substream component data are sent using Real-Time transport protocol while session management and the distributed admission control process are administered under the Real-Time Control Protocol.
摘要:
A vehicle data archive system is provided. An instrumentation interface receives at least one sensory data signal of the vehicle. A memory stores the at least one sensory data signal. A first transponder responds to a periodic provider signal of a trusted third party (TTP)/service provider for creating a corresponding shared encryption key, which is used to generate a digital signature from the stored data, the signature may be stored with the data or returned to the TTP/service provider. The signature is used to authenticate the data stored in the archive system. The encryption value used to generate the signature may be stored locally in the data archive or obtained from the TTP/service provider. The data in the data archive may also be stored without encryption. The system also allows an authorized user to delete a portion of the stored encrypted sensory data.
摘要:
The admission control algorithm implements measurement-based connection admission control using effective envelopes of an arriving traffic aggregate and the service curves of the corresponding departing traffic aggregate. The approach provides the statistical service guarantees to a variety of service classes. According to the admission control algorithm, arriving traffic is admitted if the sum of the effective envelopes of the arriving traffic entering a network and admitted traffic currently in the network is less than or equal to the service curve.
摘要:
A device is provided for storing signals in minimal format, which includes a controller for processing signals and a non-volatile storage medium. The device provides output signals in one of a plurality of digital formats. The output signals may be video signals, encrypted data, etc. In one embodiment, the device provides video signals in one of two digital video Standards, DV and MPEG-2, each Standard providing for discrete cosine transform (DCT) compressed signals which include macroblocks containing a plurality of DCT blocks. When raw video signals are received by the device, the DCT blocks are quantized according to one of the two quantization methods defined by the respective Standard, i.e., either DV or MPEG-2 and stored on the non-volatile storage medium in a minimal storage format consisting of DCT coefficients. Further, when signals are received in DV or MPEG-2 formats by the device for storage, such signals are decoded to obtain DCT coefficients and stored on storage medium in this minimal storage format. Upon a request for output of such stored signals, the controller selectively encodes the data in minimal storage format to either DV or MPEG-2 formats and outputs the encoded data to the requestor.
摘要:
The trusted computer network is protected behind a gateway that includes a bastion host and screening router which blocks all URLs associated with the trusted network. The bastion host includes a remote client authentication mechanism and web proxy component that verifies and translates incoming URL requests from authenticated remote clients. Authentication is performed using one-time passwords that are stored on a portable storage device. The user configures the portable storage device by operating configuration software from the protected side of the gateway. The portable storage device also stores plugin software to enable the client computer to properly retrieve the one-time password and exchange authentication messages with the bastion host. Further security is obtained by basing the one-time password on an encrypted version of the user's PIN. A symmetric key used to encrypt the PIN is stored in a protected area within the portable storage device.