text:
Patent US7853785 - System and method for implementing digital certificate revocation in an ad ... - Google PatentsSearch Images Maps Play YouTube News Gmail Drive More »Sign in<nobr>Advanced Patent Search</nobr>PatentsA computer-implemented system for implementing maintenance and distribution of revocation information within an ad-hoc network. The system includes at least one network node. The network node includes a computer implemented application configured to maintain revocation information in computer memory...http://www.google.com/patents/US7853785?utm_source=gb-gplus-sharePatent US7853785 - System and method for implementing digital certificate revocation in an ad-hoc networkAdvanced Patent SearchPublication numberUS7853785 B1Publication typeGrantApplication numberUS 11/223,607Publication dateDec 14, 2010Filing dateSep 9, 2005Priority dateSep 9, 2005Publication number11223607, 223607, US 7853785 B1, US 7853785B1, US-B1-7853785, US7853785 B1, US7853785B1InventorsSally C. Thurman, Karl F. Hoech, Frank A. HummerOriginal AssigneeRockwell Collins, Inc.Export CitationBiBTeX, EndNote, RefManPatent Citations (10), Non-Patent Citations (1), Referenced by (3), Classifications (6), Legal Events (2) External Links: USPTO, USPTO Assignment, EspacenetSystem and method for implementing digital certificate revocation in an ad-hoc networkUS 7853785 B1Abstract A computer-implemented system for implementing maintenance and distribution of revocation information within an ad-hoc network. The system includes at least one network node. The network node includes a computer implemented application configured to maintain revocation information in computer memory and distribute the revocation information to other network nodes using a two stage distribution method. The distribution method includes a first stage wherein the revocation message is transmitted to all certifier nodes within the ad-hoc network, and a second stage wherein each certifier node distributes the revocation message to at least one non-certifier node associated with the certifier node.
1. A computer-implemented system for implementing maintenance and distribution of revocation information within an ad-hoc network, comprising:
at least one network node configured to serve as a certifier node for the ad-hoc network, wherein the network node includes a computer implemented application configured to maintain revocation information in computer memory and distribute the revocation information to other network nodes using four types of revocation message, including individual revocation messages, incremental revocation messages, differential revocation messages, and cumulative revocation messages, wherein the at least one network node is further configured to determine whether a region of the ad-hoc network should be assigned another certifier node, and wherein the network node is configured to create a new certifier node and to establish a parent-child relationship between the network node and the new certifier node by updating the digital certificates of both the network node and the new certifier node to indicate the parent node status of the network node and the child node status of the new certifier node.
2. The system of claim 1, wherein the individual revocation message is transmitted based on revocation of a digital certificate by a certifier node for a single network node.
3. The system of claim 1, wherein each of the four types of revocation message is configured to include a sequence number for the revocation message.
4. The system of claim 3, wherein maintaining revocation information in computer memory includes receiving the revocation messages from other nodes and verifying the sequence number in a received revocation message.
5. The system of claim 3, wherein a sequence number for a cumulative revocation message is configured to reference a periodic-differential sequence number.
6. The system of claim 1, wherein the certifier node stores the hierarchical structure for the child parent relationship for the certifier node only.
7. The system of claim 1, wherein distribution of the revocation information to other network nodes include a two stage distribution process including a first stage wherein the revocation message is transmitted to all certifier nodes within the ad-hoc network and a second stage wherein each certifier node distributes the revocation message to at least one non-certifier node associated with the certifier node.
8. A computer-implemented system for implementing maintenance and distribution of revocation information within an ad-hoc network, comprising:
at least one network node configured to serve as a certifier node for the ad-hoc network, wherein the network node includes a computer implemented application configured to maintain revocation information in computer memory and distribute the revocation information to other network nodes using a two stage distribution method, the distribution method using three types of revocation message, including individual revocation messages, incremental revocation messages, and periodic attempt type of revocation messages, wherein the two stage distribution method includes
a first stage wherein the revocation information is transmitted to all certifier nodes within the ad-hoc network, and
a second stage wherein the network node distributes the revocation message to at least one non-certifier node associated with the network node,
wherein node the network node stores a parent child relationship associated with a parent node of the network node, the parent node certifying the network node.
9. The system of claim 8, wherein the distribution method is configured to be utilized based on revocation of a digital certificate by a certifier node for a single network node.
10. The system of claim 8, wherein distribution of the revocation information to other network nodes include four types of revocation message, including individual revocation messages, incremental revocation messages, differential revocation messages, and cumulative revocation messages.
11. The system of claim 10, wherein each of the four types of revocation message is configured to include a sequence number for the revocation message.
12. The system of claim 11, wherein maintaining revocation information in computer memory includes receiving the revocation messages from other nodes and verifying the sequence number in a received revocation message.
13. The system of claim 11, wherein a sequence number for a cumulative revocation message is configured to reference a periodic-differential sequence number.
14. The system of claim 8, wherein the network nodes are nodes within an ad-hoc network and wherein the network nodes are configured into a plurality of certifier regions.
15. A computer implemented method for distribution of revocation information within an ad-hoc network, comprising:
receiving a revocation message at a first certifier node within the ad-hoc network, three types of revocation message, including individual revocation messages, incremental revocation messages, and periodic attempt type of revocation messages and
distributing the received revocation message to at least one non-certifier node associated with the first certifier node, wherein the first certifier node is further configured to determine whether a region of the ad-hoc network should be assigned another certifier node, and wherein the network node is configured to create a new certifier node and to establish a parent-child relationship between the network node and the new certifier node by updating the digital certificates of both the network node and the new certifier node to indicate the parent node status of the network node and the child node status of the new certifier node.
16. The method of claim 15, wherein the revocation message is a revocation of a digital certificate for a single network node transmitted by a second certifier node.
17. The method of claim 15, wherein received revocation message is one of four types of revocation message, including an individual revocation message, an incremental revocation message, a differential revocation message, and a cumulative revocation message.
18. The method of claim 17, wherein receiving a revocation message includes verifying the revocation message based on a sequence number contained in the revocation message.
19. The method of claim 15, wherein verifying the revocation message includes determining that a sequence number for a cumulative revocation message references a latest periodic-differential sequence number.
20. The method of claim 15, wherein distributing the received revocation message to at least one non-certifier node associated with the first certifier node includes utilizing a limited broadcast algorithm. Description
GOVERNMENT LICENSE RIGHTS The U.S. Government has a paid-up license in this invention and the right in limited circumstances to require the patent owner to license others on reasonable terms as provided for by the terms of Government Contract No. N00014-03-C-0322 awarded by the Office of Naval Research�Tactical Network Security.
BACKGROUND OF THE INVENTION The present invention relates generally to the field of ad-hoc network implementation. More particularly, the present invention relates to systems and methods for managing digital certificate revocation for a public key infrastructure in an ad-hoc network.
An ad-hoc network is a cooperative engagement of a collection of mobile nodes without the required intervention of any centralized access point or existing infrastructure. The lack of a centralized access point or infrastructure, although increasing robustness, can create difficulties in implementing a centralized certifier hierarchy for a public key infrastructure.
In cryptography, a public key infrastructure (PKI) is an arrangement which provides for third-party vetting of, and vouching for, user identities. It also allows binding of public keys to users. This is usually carried by software at a central location together with other coordinated software at distributed locations. The public keys are typically embodied in certificates.
Traditional use of PKI assumes a fixed network architecture. In the fixed network, nodes that fill the role of certificate authority are manually paced in an organization for efficient distribution of certificates throughout the network. This distribution normally uses a single certificate authority within the network to create, distribute, and revoke certificates for all of the members of the network. Accordingly, the single certificate authority may be configured to maintain all certificate information such that each node, upon encountering a certificate, will query the certificate authority to verify the authenticity of the certificate.
Alternatively, an ad-hoc network may be configured such that each node maintains revocation information for the entire network, and the certificate network is configured to periodically transmit updated information. In this embodiment, the revocation list, and the corresponding updates can grow to be very large causing network overhead and reducing network throughput.
Both of these embodiment are dependent on maintaining error free functionality for the certificate authority. Further the certificate authority must constantly be updated to ensure that it is broadcasting the most recent revocation statuses.
Accordingly, there is a need for a system and method configured to implement maintenance and distribution of revocation information within an ad-hoc network. Yet further, there is a need for such a system and method configured to provide for multiple types of revocation information to reduce network traffic. There is further a need for such system and method wherein revocation information is distributed throughout the ad-hoc network in an efficient manner.
SUMMARY OF THE INVENTION One embodiment of the invention relates to a computer-implemented system for implementing maintenance and distribution of revocation information within an ad-hoc network. The system includes at least one network node. The network node includes a computer implemented application configured to maintain revocation information in computer memory and distribute the revocation information to other network nodes using four types of revocation message. The message types include individual revocation messages, incremental revocation messages, differential revocation messages, and cumulative revocation messages.
Another embodiment of the invention relates to a computer-implemented system for implementing maintenance and distribution of revocation information within an ad-hoc network. The system includes at least one network node. The network node includes a computer implemented application configured to maintain revocation information in computer memory and distribute the revocation information to other network nodes using a two stage distribution method. The distribution method includes a first stage wherein the revocation message is transmitted to all certifier nodes within the ad-hoc network, and a second stage wherein each certifier node distributes the revocation message to at least one non-certifier node associated with the certifier node.
Yet another embodiment of the invention relates to a computer implemented method for distribution of revocation information within an ad-hoc network. The method includes receiving a revocation message at a first certifier node within the ad-hoc network, and distributing the received revocation message to at least one non-certifier node associated with the first certifier node.
FIG. 1 is a block diagram illustrating a simple ad-hoc network, according to an exemplary embodiment;
FIG. 2 is a flowchart illustrating a method for generating a hierarchical set of certifiers nodes for a public key infrastructure within an ad-hoc network, according to an exemplary embodiment; and
FIG. 3 is a flowchart illustrating a method for maintaining and distributing revocation information in an ad-hoc network, according to an exemplary embodiment.
DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Before describing in detail the particular improved system and method, it may be observed that the invention includes, but is not limited to, a novel structural combination of conventional data/signal processing components and communications circuits, and not in the particular detailed configurations thereof. Accordingly, the structure, methods, functions, control, and arrangement of conventional components and circuits have, for the most part, been illustrated in the drawings by readily understandable block representations and schematic diagrams, in order not to obscure the disclosure with structural details which will be readily apparent to those skilled in the art, having the benefit of the description herein. Further, the invention is not limited to the particular embodiment depicted in the exemplary diagrams, but may be construed in accordance with the language in the claims.
Referring now to FIG. 1, a block diagram illustrating a simple ad-hoc network 100 is shown, according to an exemplary embodiment. Network 100 includes a first node 111, a second node 112, a third node 113, a fourth node 114, a fifth node 115, and a sixth node 116. Each node in the ad-hoc network may be one or more computing devices configured to communicate over the network. Each node further has a unique node id associated with it.
Embodiments of the present invention may be practiced in a networked environment using logical connections to one or more remote computing systems having processors. Logical connections may include a local area network (LAN) and a wide area network (WAN) that are presented here by way of example and not limitation. Such networking environments are commonplace in office-wide or enterprise-wide computer networks, intranets and the Internet and may use a wide variety of different communication protocols. Those skilled in the art will appreciate that such network computing environments will typically encompass many types of computer system configurations, including personal computers, hand-held devices, multi-processor systems, microprocessor-based or programmable consumer electronics, network PC's, minicomputers, mainframe computers, and the like. Embodiments of the invention may also be practiced in distributed computing environments where tasks are performed by local and remote processing devices that are linked (either by hardwired links, wireless links or by a combination of hardwired and wireless links) through a communications network. In a distributed computing environment, program modules may be located in both local and remote memory storage devices.
According to an exemplary embodiment, network 100 may be divisible into a series of network certifier regions. Each network certifier region may be any set of nodes selected from all available nodes. For example, referring to FIG. 1, a first certifier region may include nodes 111-113 and a second certifier region may include node 114-116. The set of nodes may include all of the nodes in the ad-hoc network. The selection criteria may be defined based on any information associated with the nodes or the network. Exemplary selection criteria may include network topology, network traffic, node function, node type, predicted traffic, network address, etc.
A network certifier region may be dynamically implemented within the ad-hoc network. Each node within the network certifier region may be configured to implement a network certifier region selection algorithm based on the selection criteria defining the neighborhoods. The algorithm may be implemented based on one or more than one of the selection criteria. For example, network certifier regions may be defined based on a combination of node function and network traffic. Each node may be configured to execute the network certifier region selection algorithm based on an elapsed period and/or based on the occurrence of an event such as addition of a new node, departure of a node, a change in network traffic loads, changes in tactical needs, etc.
One type of certifier region may be a network neighborhood that includes a subset of the nodes in the ad-hoc network. A neighborhood may be defined as all of the nodes within a predetermined number of hops from a given node. A hop is a direct connection between nodes that does not require messages pass through an intermediary node. Accordingly, in a 1-hop neighborhood, every node within the neighborhood is within one hop of any other node in the neighborhood. A 1-hop neighborhood for a given node includes all nodes that are within one hop of the given node. Certifier regions may alternatively be defined according to any other criteria such as a subnet in a fixed network, nodes with a certain role or type, etc.
Referring now to FIG. 2, a flowchart 200 illustrating a method for generating a hierarchical set of certifiers nodes for a public key infrastructure within an ad-hoc network is shown, according to an exemplary embodiment. After the selection criteria is selected for ad-hoc network 100, each node will execute the network certifier region selection algorithm to partition the nodes into the network certifier regions in a step 210. During partitioning, every node is partitioned into at least one certifier region. Execution of the network certifier region selection algorithm may be performed independently by each node, for example, where the selection algorithm is a node function selection algorithm, or may require intercommunication between nodes, for example, where the selection algorithm is a network traffic selection algorithm.
After nodes have been divided into network certifier regions, a determination must be made whether every network certifier region includes at least one certifier node in a step 220. The determination may be made by a root certifier node, made individually by potential certifier nodes, collectively by the certifier nodes, etc. The determination may be made based on any type of selection algorithm using any type of information available to the network nodes such as node topology, network resources, network traffic patterns, etc.
A certifier node is an entity which issues digital certificates for use by other nodes. A digital certificate uses a digital signature to bind together a public key with an identity�information such as the name of a person or an organization, their address, and so forth. The certificate can be used to verify that a public key belongs to an individual. A certifier node will issue a public key certificate which states that the certifier node attests that the public key contained in the certificate belongs to the person, organization, server, or other entity noted in the certificate. A certifier �signs� the certificate such that other nodes can examine the signature for validity.
If a network certifier region does not include a certifier node, a certifier node may be created from among the nodes in the network certifier region. Although all of the nodes may serve as certifiers, the eligibility of nodes to act as certifiers, hereinafter potential certifier nodes, is determined by policy. This potential is switched on only by existing certifiers through an update to the certificate of the newly designated potential certifier node. Potential certifier nodes within the certifier region are identified in a step 230.
After a determination has been made of the potential certifier nodes within a network certifier region, a certifier selection algorithm may be executed to select a certifier from among eligible nodes in a step 240. The certifier selection algorithm may select the certifier node based on network characteristics, potential node characteristics, or any other desired characteristic. Although at least one certifier node should be included within each network certifier region.
Upon creation, the certifier node that spawned the newly created certifier may further create a parent child relationship between the certifier node and the newly created certifier node in a step 250. The parent child relation may be created by updating the digital certificates of both the certifier node, to indicate a parent node status, and the newly created certifier node, to indicate a child node status.
The process of creating additional child nodes by a parent node may be iteratively performed as needed to create a hierarchy of certifier nodes defined by a series of parent child relationships. The hierarchical information may be stored at each certifier node. The hierarchical information may include information regarding all or any subset of the hierarchy information. For example, a certifier node may be configured to only maintain hierarchy information just for that node, i.e., related to its own parent child relationships, hierarchy information for the node's neighborhood, hierarchy information for an entire network, etc. By maintaining this information, the hierarchical structure becomes robust, even though it is not created or maintained by a root certifier.
Each newly created child certifier node may be granted up to all of the powers that are granted to the parent certifier node. Accordingly, the child certifier node may be granted less than all of the powers of the parent. For example, a parent certifier node may switch on a potential certifier node to create a certifier node, but may wish to limit the ability of the child node to switch on other certifier nodes. Accordingly, that power may be withheld from the child certifier node. The powers that are granted to a child certifier node may be defined in an update to the digital certificate of the child node in a step 260.
Advantageously, implementation of the certifier selection algorithm can greater increase the robustness of an ad-hoc network without requiring excessive redundant resources. Where the certifier nodes are created dynamically allocating memory and network bandwidth where needed, the ad-hoc network may be implemented with less consumption of resources and reduced buffer sizes.
Referring now to FIG. 3, a flowchart 300 illustrating a method for maintaining and distributing revocation information in an ad-hoc network is shown, according to an exemplary embodiment. Each node within the ad-hoc network may be configured to maintain revocation information. The revocation information may include all or a subset of the complete revocation information. Revocation information is received by a node in a step 310. The revocation information is processed by the node to determine how the information is used for maintenance of node revocation information and for distribution to other nodes. Maintaining and distributing revocation information may include distributing at least three different types of revocation messages. Although these message type are discussed within the context of network 100 which includes a hierarchical structure, it should be understood that the message types may equally be used within the context of any ad-hoc network.
A first type of revocation message may include an individual revocation message. This type of revocation is generally distributed based on an event such as an indication that a certificate issued to a node is invalid or should be revoked. For example, a certifier authority node or other node may determine that a node has become corrupted and shouldn't be trusted. Accordingly, the certifier authority may disseminate an individual revocation message to all of the nodes indicate that the corrupted nodes certificate is revoked. For an individual node, reinstatement and/or new certificates are similarly handled by a single message. These individual revocation and/or reinstatement messages generally only contain information related to the single event.
A second type of revocation message may include a cumulative revocation message. The cumulative revocation distribution may be either event driven or period driven. For example, a new node entering the network may request a cumulative list to have a complete listing of the revocation information. Alternatively, the cumulative list may be distributed periodically, perhaps during a time when network utilization is traditionally low. A cumulative list may include all of the revocation information for all of the nodes in the ad-hoc network.
A third type of revocation message may include a periodic revocation message that is distributed based on some defined schedule. Periodic messages are generally transmitted on the defined scheduled to maintain the stability of the ad-hoc network. Periodic messages may also be used by nodes to determine whether they have missed any previous individual and/or periodic messages. For example, each individual and/or periodic may include a sequence number, further discussed below, that can be monitored by each node to recognize missed messages.
Periodic messages may include both periodic differential messages and periodic incremental messages. A periodic differential message contains all revocation/reinstatement information that has occurred since the previous cumulative message distribution. A periodic incremental message contains all revocation/reinstatement information that has occurred since the previous message distribution of any type: cumulative, differential or incremental. Accordingly, a periodic incremental message is an aggregation of individual revocation messages that is sent on a periodic basis.
Each type of revocation message may be configured to include a sequence number to ensure continuity of messages. Upon receipt of a revocation message in step 310, each node within an ad-hoc network may be configured to compare the sequence number of a received revocation message with an expected revocation sequence number in a step 320. If the number matches, the expected revocation sequence number can be incremented and the revocation message processed. If the sequence number is not the expected revocation sequence number, the node may request re-transmission of the missing revocation number.
The implementation of the sequence number may be dependent on the type of revocation message being received. For example, sequence numbers may be implemented separately for the individual revocation and periodic-differential list messages. Further, cumulative revocation messages may be configured to contain reference to the latest periodic-differential sequence number that the cumulative list covers.
According to an exemplary embodiment, the revocation messages may be distributed in a two-stage process. In a first inter-certifier stage, revocation messages may be distributed among the certifiers in all regions in a step 330. A certifier node that determines that a certificate revocation is needed distributes the certificate revocation information to all other certifier nodes using the certifier hierarchy tree discussed above with reference to FIG. 2. In other words, each certifier node distributes the revocation information to its parent certifier and to all its children certifiers. In the second, intra-region stage, revocation messages may be distributed to the nodes within a region served by each certifier node in a step 340. Each certifier node distributes the revocation information throughout its own neighborhood using a repeated unicast, limited broadcast or multicast algorithm as appropriate for the underlying data link layer. The nodes may be configured to ignore messages that are not sent by nodes with their region. For example, if a revocation message is received by a node A in region A from a node B, that is not in the same region A, the node A ignores the message and information. Node A should receive the information from another node within its own region, thus completing the intra-region distribution of the revocation information.
Although the above methods and exemplary networks described execution of method within the context of an ad-hoc network, it should be understood that the methods and examples are equally applicable within any sub-network within the ad-hoc network.
It may be noted that although the flow charts provided herein show a specific order of method steps, it is understood that the order of these steps may differ from what is depicted. Also two or more steps may be performed concurrently or with partial concurrence. Such variation will depend on the software and hardware systems chosen and on designer choice. It is understood that all such variations are within the scope of the invention. Likewise, software and web implementations of the present invention could be accomplished with standard programming techniques with rule based logic and logic to accomplish the various database searching steps, correlation steps, comparison steps and decision steps. It may also be noted that the word �component� as used herein and in the claims is intended to encompass implementations using one or more lines of software code, and/or hardware implementations, and/or equipment for receiving manual inputs.
Embodiments within the scope of the present invention include program products comprising machine-readable media for carrying or having machine-executable instructions or data structures stored thereon. Such machine-readable media can be any available media which can be accessed by a general purpose or special purpose computer or other machine with a processor. By way of example, such machine-readable media can comprise RAM, ROM, EPROM, EEPROM, CD-ROM or other optical disk storage, magnetic disk storage or other magnetic storage devices, or any other medium which ca be used to carry or stored desired program code in the form of machine-executable instructions or data structures and which can be accessed by a general purpose or special purpose computer or other machine with a processor. When information is transferred or provided over a network or another communications connection (either hardwired, wireless, or a combination of hardwired or wireless) to a machine, the machine properly views the connection as a machine-readable medium. Thus, any such a connection is properly termed machine-readable medium. Combinations of the above are also included within the scope of machine-readable media. Machine-executable instructions comprise, for example, instructions and data which cause a general purpose computer, special purpose computer, or special purpose processing machines to perform a certain function or group of functions.
Patent CitationsCited PatentFiling datePublication dateApplicantTitleUS6134550 *Mar 18, 1998Oct 17, 2000Entrust Technologies LimitedMethod and apparatus for use in determining validity of a certificate in a communication system employing trusted pathsUS6748531 *Mar 28, 2000Jun 8, 2004Koninklijke Philips Electronics N.VMethod and apparatus for confirming and revoking trust in a multi-level content distribution systemUS7181614 *Oct 19, 2000Feb 20, 2007Telefonaktiebolaget Lm Ericsson (Publ)Method and arrangement in a communication networkUS7356329 *Aug 6, 2003Apr 8, 2008Certicom Corp.Mobile certificate distribution in a PKIUS7382762 *Jul 8, 2004Jun 3, 2008Samsung Electronics Co., Ltd.Method and system for distributed certificate management in ad-hoc networksUS7581095 *Jul 17, 2002Aug 25, 2009Harris CorporationMobile-ad-hoc network including node authentication features and related methodsUS20020082035Jul 6, 2001Jun 27, 2002Toru AiharaCommunication method, radio AD-HOC network, communication terminal, and bluetooth terminalUS20050053045 *Jul 8, 2004Mar 10, 2005Samsung Electronics Co., Ltd.Method and system for distributed certificate management in ad-hoc networksUS20050191990 *Aug 6, 2003Sep 1, 2005Willey William D.Mobile certificate distribution in a PKIUS20080034204 *May 20, 2005Feb 7, 2008Anantharaman LakshminarayananCommunications Network Security Certificate Revocation* Cited by examinerNon-Patent CitationsReference1Hadjichristofi et al., "A Framework for Key Management In Mobile Ad Hoc Networks," Information Technology: Coding and Computing, 2005, ITCC 2005, International Conference on vol. 2, Apr. 4-6, 2005 pp. 568-573.Referenced byCiting PatentFiling datePublication dateApplicantTitleUS8306026 *Sep 18, 2006Nov 6, 2012Toshiba America Research, Inc.Last hop topology sensitive multicasting key managementUS8478314 *Jul 2, 2010Jul 2, 2013Gangneung-Wonju National University Industry Academy Cooperation GroupCommunication method for a mobile sensor node in a wireless sensor networkUS20110001612 *Jul 2, 2010Jan 6, 2011Gangneung-Wonju National University Industry Academy Cooperation GroupCommunication method for a mobile sensor node in a wireless sensor network* Cited by examinerClassifications U.S. Classification713/158International ClassificationH04L9/00Cooperative ClassificationH04L9/3268, H04L2209/80, H04L9/007European ClassificationH04L9/32TLegal EventsDateCodeEventDescriptionApr 23, 2007ASAssignmentFree format text: CONFIRMATORY LICENSE;ASSIGNOR:ROCKWELL COLLINS INCORPORATED;REEL/FRAME:019210/0470Effective date: 20070308Owner name: NAVY, SECRETARY OF THE, UNITED STATES OF AMERICA,Sep 9, 2005ASAssignmentFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:THURMAN, SALLY C.;HOECH, KARL F.;HUMMER, FRANK A.;REEL/FRAME:016988/0272Effective date: 20050909Owner name: ROCKWELL COLLINS, INC., IOWARotateOriginal ImageGoogle Home - Sitemap - USPTO Bulk Downloads - Privacy Policy - Terms of Service - About Google Patents - Send FeedbackData provided by IFI CLAIMS Patent Services©2012 Google


text:
Little Rock, AR (563)
Conway, AR (142)
View all Goodwill Industries of Arkansas jobs in Little Rock, AR - Little Rock jobsSalary Search: Retail Store Associate salaries in Little Rock, ARLearn more about working at Goodwill Industries of ArkansasRelated forums: Little Rock, Arkansas - Goodwill Industries of Arkansas
View all Burlington Stores jobs in Little Rock, AR - Little Rock jobsSalary Search: Stock Merchandise Flow Associate salaries in Little Rock, ARLearn more about working at Burlington StoresRelated forums: Burlington Stores - Little Rock, Arkansas
The job of a Receptionist involves managing consumers, visitors, telephone messages and calls in professional and efficient manner. In addition to this, a
View all Washington Barber College jobs in Little Rock, AR - Little Rock jobsSalary Search: Receptionist salaries in Little Rock, ARLearn more about working at Washington Barber CollegeRelated forums: Washington Barber College - Receptionist - Little Rock, Arkansas
View all Justice jobs in Little Rock, AR - Little Rock jobsSalary Search: Floor Set Associate salaries in Little Rock, ARLearn more about working at JusticeRelated forums: Justice Tween Brands - Little Rock, Arkansas
View all Carter's | OshKosh B'gosh Retail jobs in North Little Rock, AR - North Little Rock jobsSalary Search: Temporary Sales Associate salaries in North Little Rock, ARLearn more about working at Carter's | Oshkosh B'gosh RetailRelated forums: North Little Rock, Arkansas - Sales Associate - Carter's | OshKosh B'gosh Retail
View all Justice jobs in Little Rock, AR - Little Rock jobsSalary Search: Lead Style Advisor salaries in Little Rock, ARLearn more about working at JusticeRelated forums: Justice Tween Brands - Little Rock, Arkansas
View all Justice jobs in Little Rock, AR - Little Rock jobsSalary Search: Store Sales Leader salaries in Little Rock, ARLearn more about working at JusticeRelated forums: Justice Tween Brands - Little Rock, Arkansas
View all Justice jobs in Little Rock, AR - Little Rock jobsSalary Search: Assistant Sales Leader salaries in Little Rock, ARLearn more about working at JusticeRelated forums: Justice Tween Brands - Little Rock, Arkansas
View all Justice jobs in Little Rock, AR - Little Rock jobsSalary Search: Style Advisor salaries in Little Rock, ARLearn more about working at JusticeRelated forums: Justice Tween Brands - Little Rock, Arkansas
Previous customer service or retail sales experience is preferred. Associates must have strong computer skills, and understanding for CAD like applications....
Rapidly growing Little Rock law firm seeks Director of First Impressions. This position will be responsible for, but not limited to: * Maintaining the overall

type: global

value: This website is an American worldwide employment website for job listings launched in November 2004. It is a subsidiary of Japan's Recruit Co.


text:
Situated near the airport, this hotel is 0.1 mi (0.2 km) from San Lazaro Stadium and within 3 mi (5 km) of Santiago de Compostela Cathedral and Obradoiro Square. Congress and Exposition Center of Galicia and Multiusos Fontes do Sar are also within 2 mi (3 km). Location
Room service (during limited hours) is available. El Cafe del Hotel - This bar specializes in international cuisine. Berenguela - This fine-dining restaurant specializes in Spanish cuisine and serves breakfast, lunch, and dinner. Breakfast is available for a surcharge and served each morning between 7 AM and 11 AM. Show dining options

value: This website is an online travel agency owned by Expedia Group, an American online travel shopping company based in Seattle.


text:
Qiuhe Wu - Semantic Scholar
Luis De Taboada8
Sulbha K. Sharma8
Esther Shohami7
Ying-Ying Huang7
11Juanita J. Anders
10Steven Jacques
10Scott Delapp
BACKGROUND AND OBJECTIVE Transcranial low-level laser therapy (LLLT) using near-infrared light can efficiently penetrate through the scalp and skull and could allow non-invasive treatment for traumatic brain injury (TBI). In the present study, we compared the therapeutic effect using 810-nm wavelength laser light in continuous and pulsed wave modes in a… (More)
BACKGROUND AND OBJECTIVES Traumatic brain injury (TBI) affects millions worldwide and is without effective treatment. One area that is attracting growing interest is the use of transcranial low-level laser therapy (LLLT) to treat TBI. The fact that near-infrared light can penetrate into the brain would allow non-invasive treatment to be carried out with a… (More)
Low-level laser (light) therapy (LLLT) has been clinically applied around the world for a spectrum of disorders requiring healing, regeneration and prevention of tissue death. One area that is attracting growing interest in this scope is the use of transcranial LLLT to treat stroke and traumatic brain injury (TBI). We developed a mouse model of severe TBI… (More)
The influence of temperature on 5-aminolevulinic acid-based photodynamic reaction in keratinocytes in vitro.
Jiabin Yang, Aaron C-H Chen, +4 authors Yumin Xia
BACKGROUND/PURPOSE Based on the observation that increasing skin temperature could improve 5-aminolevulinic acid (ALA) penetration and accumulation of protoporphyrin IX (PpIX) in the ALA-based photodynamic therapy (PDT), this study was designed to investigate how temperature change varied the therapeutic effect of ALA-based PDT in vitro. METHODS HaCat… (More)
Michael R Hamblin, Ronald W. Waynant, +4 authors Michael R Hamblin
Discoveries are rapidly being made in multiple laboratories that shed “light” on the fundamental molecular and cellular mechanisms underlying the use of low level light therapy (LLLT) in vitro, in animal models and in clinical practice. Increases in cellular levels of respiration, in cytochrome c oxidase activity, in ATP levels and in cyclic AMP have been… (More)
Ultraviolet-C light for treatment of Candida albicans burn infection in mice.
Tianhong Dai, Gitika B. Kharkwal, +7 authors Michael R Hamblin
Burn patients are at high risk of invasive fungal infections, which are a leading cause of morbidity, mortality, and related expense exacerbated by the emergence of drug resistant fungal strains. In this study, we investigated the use of UVC light (254 nm) for the treatment of yeast Candida albicans infection in mouse third degree burns. In vitro studies… (More)

value: This website is an artificial-intelligence backed search engine for academic publications developed at the Allen Institute for AI and publicly released in November 2015. It uses advances in natural language processing to provide summaries for scholarly papers.