text:
Imagine a Hillsborough without nudity. No strip clubs, topless contests or nudity permitted anywhere but in the privacy of hotel rooms and homes.
"Citizens for Decency," a grassroots organization created to outlaw public nudity and push for higher community standards, says in less than two months, already 10,000 people in Hillsborough County have signed petitions make this a reality.
The group is comprised of citizens and religious community leaders who believe that the law s...Read More


text:
The Leading eBooks Store Online
for Kindle Fire, Apple, Android, Nook, Kobo, PC, Mac, BlackBerry...
New to eBooks.com?Learn more
- Bestsellers - This Week
- Foreign Language Study
- Pets
- Bestsellers - Last 6 months
- Games
- Philosophy
- Archaeology
- Gardening
- Photography
- Architecture
- Graphic Books
- Poetry
- Art
- Health & Fitness
- Political Science
- Biography & Autobiography
- History
- Psychology & Psychiatry
- Body Mind & Spirit
- House & Home
- Reference
- Business & Economics
- Humor
- Religion
- Children's & Young Adult Fiction
- Juvenile Nonfiction
- Romance
- Computers
- Language Arts & Disciplines
- Science
- Crafts & Hobbies
- Law
- Science Fiction
- Current Events
- Literary Collections
- Self-Help
- Drama
- Literary Criticism
- Sex
- Education
- Literary Fiction
- Social Science
- The Environment
- Mathematics
- Sports & Recreation
- Family & Relationships
- Media
- Study Aids
- Fantasy
- Medical
- Technology
- Fiction
- Music
- Transportation
- Folklore & Mythology
- Nature
- Travel
- Food and Wine
- Performing Arts
- True Crime
- Foreign Language Books
Most popular at the top
Methodologies for MetabolomicsCambridge University Press 2013; US$ 132.00
Methodologies for Metabolomics provides comprehensive descriptions of the newest methodological strategies and techniques in metabolomic research. more...
SapiensRandom House 2014; US$ 39.98
100,000 years ago, at least six human species inhabited the earth. Today there is just one. Us. Homo sapiens . How did our species succeed in the battle for dominance? Why did our foraging ancestors come together to create cities and kingdoms? How did we come to believe in gods, nations and human rights; to trust money, books and laws; and to be... more...
The Immortal Life of Henrietta LacksCrown/Archetype 2010; US$ 16.00
#1 NEW YORK TIMES BESTSELLER Her name was Henrietta Lacks, but scientists know her as HeLa. She was a poor�black tobacco farmer whose cells?taken without her knowledge in 1951?became one of the most important tools in medicine, vital for developing the polio vaccine, cloning, gene mapping, and more.�Henrietta's cells�have been bought and sold by... more...
The Systems View of LifeCambridge University Press 2014; US$ 32.00
The first volume to integrate life's biological, cognitive, social, and ecological dimensions into a single, coherent framework. more...
After the Ice AgeUniversity of Chicago Press 2008; US$ 18.00
The fascinating story of how a harsh terrain that resembled modern Antarctica has been transformed gradually into the forests, grasslands, and wetlands we know today. "One of the best scientific books published in the last ten years."? Ottowa Journal "A valuable new synthesis of facts and ideas about climate, geography, and life during the... more...
Seaweed Ecology and PhysiologyCambridge University Press 2014; US$ 60.00
A synthesis of concepts and examples of how physiological processes influence seaweed communities worldwide, authored by experts in the field. more...
The Phylogenetic HandbookCambridge University Press 2009; US$ 56.00
A broad, hands on guide with detailed explanations of current methodology, relevant exercises and popular software tools. more...
Soil Ecology and Ecosystem ServicesOxford University Press 2013; US$ 59.99
This multi-contributor, international volume synthesizes contributions from the world's leading soil scientists and ecologists, describing cutting-edge research that provides a basis for the maintenance of soil health and sustainability. The book covers these advances from a unique perspective of examining the ecosystem services produced by soil... more...
The ChoanoflagellatesCambridge University Press 2015; US$ 100.00
A unique account of the biology, ecology and evolution of choanoflagellates - the closest, known, living, unicellular relatives of animals. more...
A User's Guide to the BrainKnopf Doubleday Publishing Group 2001; US$ 16.95
John Ratey, bestselling author and clinical professor of psychiatry at Harvard Medical School, here lucidly explains the human brain?s workings, and paves the way for a better understanding of how the brain affects who we are. Ratey provides insight into the basic structure and chemistry of the brain, and demonstrates how its systems shape our perceptions,... more...

subset: commoncrawl


text:
If you took all of the Missed Connections ever posted on Craigslist (except for the pervy ones and the ones that start with "I was taking a shit behind the dumpster when you came out the back door of the Arbys") and poured all of the tragic longing, and all of the searching loneliness into one short story, you'd have this ad. It's the Missed Connection of a lifetime. (Pasted below, in case it gets taken off CL by one of those horrible "flag" people.)
When you can't think of the words, just bring up one of these cards on your phone and hold it in the air >>
Via Craigslist


text:
[Israel's] Its history is fraught with the overuse of military force that has weakened the sovereignty of political entities with which it could have crystallized the rules of the game to improve its security. And the more these entities were weakened, the more Israel escalated its hits and weakened them still further. this is the crucial passage. Now, if country's elite does not learn from such experiences, one must really assume tha tit does not wish to and the strategy is deliberate.
If selected for publication, it will appear as soon as possible on Haaretz.com.


text:
Whole Rolled Oats, Dehydrated Apples, Organic Cinnamon Bark, Honey ...
We don't fry it (unhealthy). We don't bake it (undelicious). We take wholesome potatoes, add a little heat and pressure, and pop! It's a chip. The only thing added is a flavorful blend of seasonings for a snack so delicious and crispy, you won't even notice it's (we hesitate to say) healthier.
What's out? More than half the fat of fried potato chips, trans fats, and cholesterol. All gone. For good.
What's popped in? Only what's natural, tons of delicious, and plenty of crunch.
Health Benefits:
- 24/.8 oz bags
Availability: In stock
Add to Cart
* Required Fields


text:
A graphical user interface supports an interactive client-server authentication based on Random Partial Pattern Recognition algorithm (RPPR). In RPPR, an ordered set of data fields is stored for a client to be authenticated in secure memory on the server side. A graphical user interface presents a clue generated at the server to the client, such positions in the ordered set of a random subset of data fields from the ordered set. The client enters input data in multiple fields of the interface according to the clue, and the server accepts the input data from the client. The input data includes storage units representing alpha-numeric characters, images and colors corresponding to the field contents for the data fields. The interface includes indicators for elapsed time and status of the authentication session.
1. A graphical user interface for display by a data processing system, the data processing system including a display and one or more user input devices, comprising:
a graphical input construct adapted for display to a user to support entry of a pattern, the pattern comprising a data field having field contents, the field contents in the data field comprising a set of storage units having more than one member, wherein said storage units represent one or more of alpha-numeric characters, images and colors;
said input construct including a graphical field for user entry of said storage units, in which upon entry by a user of one of said storage units, a corresponding icon is displayed in the graphical field.
2. The interface of
3. The interface of
4. The interface of
5. The interface of
6. The interface of
7. The interface of
8. The interface of
9. The interface of
10. The interface of
11. The interface of
12. The interface of
13. A graphical user interface supporting a login session by a user having a user name and a user authentication pattern for accessing protected network resources, the graphical user interface for display by a data processing system, the data processing system including a display and one or more user input devices, comprising:
a graphical input construct adapted for display to a user to support entry of the user name and said user authentication pattern, said user name and said user authentication pattern comprising respective data fields having field contents, the field contents in the data fields comprising a set of storage units having more than one member, wherein said storage units represent one or more of alpha-numeric characters, images and colors; and
said input construct including a graphical field including a first graphical window for user entry of storage units representing said user name and a second graphical window for user entry of storage units representing said user authentication pattern, in which upon entry by a user of one of said storage units, a corresponding icon is displayed.
14. The interface of
15. The interface of
16. The interface of
17. The interface of
18. The interface of
19. The interface of
20. The interface of
21. The interface of
22. The interface of
23. The interface of
24. The interface of
25. The interface of
26. The interface of
27. A graphical user interface supporting a login session by a user having a user authentication pattern for access protected network resources, the graphical user interface for display by a data processing system, the data processing system including a display and one or more user input devices, comprising:
a graphical input construct adapted for display to a user to support entry of said user authentication pattern, said user authentication pattern including a random subset of data fields from an ordered set of data fields, said data fields in said random subset having field contents, the field contents in the data fields comprising a set of storage units having more than one member, wherein said storage units represent one or more of alpha-numeric characters, images and colors;
said input construct including a graphical field including a plurality of graphical windows for user entry of storage units representing respective data fields in said user authentication pattern, in which upon entry by a user of one of said storage units, a corresponding icon is displayed, and
a field indicating a clue to a user indicating which fields in said ordered set comprise said random subset.
28. The interface of
29. The interface of
30. The interface of
31. The interface of
32. A method for interactive authentication of a user, comprising:
presenting a graphical user interface to the user, the graphical user interface prompting the user to enter a user authentication pattern comprising at least one data field with data entry fields, the data fields having field contents comprising a set of storage units having more than one member;
accepting user input of storage units in said data entry fields, the storage units representing more than one of alpha-numeric characters, images and colors; and
displaying icons corresponding to the storage units input by the user in the data entry fields.
33. The method of
34. The method of
35. The method of
36. The method of
37. The method of
[0001] The present application is a continuation in part of my prior U.S. patent application Ser. No. 10/328640, filed 23 Dec. 2002, entitled �Authentication System and Method Based upon Random Partial Pattern Recognition.�
[0002] 1. Field of the Invention
[0003] The invention relates generally to user authentication interfaces for computer and network security access control systems and more particularly to graphical user interfaces supporting authentication systems in client-server network architectures and other architectures.
[0004] 2. Description of Related Art
[0005] The most widely used user authentication method is referred to herein as the Standard Static Password Recognition (SSPR) algorithm. The SSPR algorithm simply requires a user to enter a user name and a password for authentication.
[0006] Typical users select passwords for SSPR within a �comfort level� of complexity for memorization, usually in the range from one to seven (or eight) alphanumeric characters long. Often, the password is a simple word or an integer number (like, �patriot�, �London�, 11223344, etc.). Technological progress and demands of contemporary industrial society security lead to at least two serious issues related to the safety of typical passwords in SSPR, including:
[0007] 1. An intruder may employ a brute-force technique, known as a Dictionary attack, of successively trying all the words in an exhaustive list against a password file. Each consecutive tried word gets encrypted using the same algorithm that the login program under attack is using. Dictionary attacks, applied either to hashed passwords, intercepted on communication lines, or directly at the password entry devices, allow for quite easy password re-engineering.
[0008] 2. Another issue is related to password combinatorial capacities of typical passwords that are within a �comfort level� of complexity for most users. For larger organizations, a range of passwords within such comfort level may not be sufficient.
[0009] Typical enterprise level solutions (enterprise-wide IT department policies) in accounting for items 1 and 2 above, require users to have at least 4-5 (or more) alphanumeric case sensitive character passwords, which should not to be simple words (but rather something, like: 1patRIOT, Lon7Don, etc.). This approach leads to multiple password resets by users that forget or lose their passwords, which resets have become quite costly and annoying hurdles for organizations and enterprises (or service companies) striving for higher security levels.
[0010] Objective consideration shows that the minimum number of characters in a password is limited at a minimum by two factors: necessary combinatorial capacities and high susceptibility to combinatorial attacks. The maximum number of characters in static passwords is limited by users' �comfort level� for memorization. Eventually, one ends up with 4-8 alphanumeric characters range (no character case sensitivity), or 3-7 alphanumeric characters (having character case sensitivity). Until recently, organizations and enterprises (or service companies) have tolerated these well known deficiencies due to relative simplicity, low cost, and wide spread adoption of SSPR user authentication technology.
[0011] Meanwhile, emerging requirements are forcing the security industry (Authentication-Authorization-Accounting (AAA or 3A) programs, Encryption, Enterprise Software, Financial Service Providers, etc.) to re-consider SSPR based user authentication technology:
[0012] 1. The first issue is progress in ASIC chip data-processing power, which makes combinatorial attacks in breaking static passwords much more efficient. The apparent line of defense would be increasing static password lengths. Unfortunately, as we already discussed, this capability is already quite limited by users' �comfort level�. So, SSPR based security systems appeared to be in between a rock and a hard place, as the minimum password length (3-4 alphanumeric characters) must be increased to sustain more and more efficient combinatorial attacks, whereas the entire static password length has to be remained unchanged and limited to 6-7 alphanumeric characters range due to human being memory limitations.
[0013] 2. Also, a number of security problems arising in large scale systems, like deficiencies in state/country voting systems, credit card fraud, privacy and security breaches at health data banks and at financial service organizations, Microsoft 2000 and XP operating systems' vulnerabilities, etc., have led to the necessity to improve or re-build large scale security systems. Evolution of these systems will eventually require much higher static password combinatorial capacity, than may be required at an organization/enterprise level. Assuming, about 10 million users at a state level and about 100 million users nation wide, passwords having at least 5 characters are needed for a state-wide system, and passwords having at least 6 characters are needed for country wide password based security systems (assuming no character case sensitivity, or 4 and 5 characters respectively for a character sensitive case). As processing power in the hands of hacker increases, the minimum password size for a secure system approaches or exceeds the �comfort level�.
[0014] 3. Once national security systems, databases and various markets get integrated internationally (say US and EU), the number of users requiring unique passwords increases to the point that the combinatorial capacity of such systems would require at least 6 alphanumeric characters (case sensitive passwords), or 7 for systems without character case sensitivity. This is already at the boundary of users' �comfort level�.
[0015] Accordingly, SSPR is reaching the limits of its practical application for large-scale static password based security systems. That accounts for serious attention recently given to alternative high security user authentication methods, like biometrics, tokens, and smart cards. Of these techniques, biometrics is the only true user authentication method. The other ones can be a part of user authentication systems, but are insufficient by themselves.
[0016] Unfortunately, biometrics is great deal more expensive and difficult to deploy, than SSPR based systems. There is, also, a significant public reluctance against biometric authentication methods due to religious and cultural concerns. Another strong concern, if using biometrics, is private biometrics data safety. Once stolen, the biometric data can be re-used forever to impersonate the individual that the data is taken from.
[0017] B. Attacks Against SSPR Based Systems
[0018] Besides several issues listed above, static password technology is particularly vulnerable to a number of attacks, and defenses against such attacks have limited scope. Some of the possible attacks and defenses to the attacks, include the following:
[0019] 1. Password Guessing
[0020] An intruder tries to log in with a real user name while making password guesses based on the user personal knowledge.
[0021] Defense�automatic session lock out after several failed attempts; possible account revoke or a forced password reset
[0022] 2. Log-In Session Videotaping
[0023] Widely available micro audio and visual sensors, and other tools, facilitate hidden observations. Video- and/or audio-recording is possible from a significant distance and any time of the day, jeopardizing secret passwords or PINS entered by computer or network online users at public locations (ATM machines; customers at Point-Of-Sales; Internet terminals offered at various conferences, cafes, libraries; employees sharing large offices with desktop computer terminals within everybody's visual reach, and other places).
[0024] Defense�no standard protection technology except being vigilant.
[0025] 3. Shoulder Surfing
[0026] An intruder nearby the legitimate user watches password entering.
[0027] Defense�no standard protection technology except displaying echo dummy characters and different number of them.
[0028] 4. Social Engineering
[0029] An intruder pretends to be an administrator or a real user asking for a password disclosure/reset.
[0030] Defense�non disclosure/reset policy.
[0031] 5. Trojan Horse
[0032] Hidden downloaded software looking like a standard login session but collecting instead user names and passwords.
[0033] Defense�some protection is possible for vigilant users and administrators with antivirus protection and intrusion detection software.
[0034] 6. Keystroke Monitoring
[0035] Secretly downloaded software keeping a log of all keystrokes
[0036] Defense�employees are defenseless, if the employer is the attack originator; legal protection is a possible alternative.
[0037] 7. Con Artists
[0038] Can figure out the password while being quite far from the real user and having special hearing/observation skills/training.
[0039] Defense�no standard protection technology except being vigilant.
[0040] 8. Network Sniffing
[0041] An intruder records user names and passwords while in transit on communication lines.
[0042] Defense�encryption protocols: Kerberos, SSL, IPsec; challenge response, one time passwords with tokens or smart cards; biometrics instead of passwords.
[0043] 9. Keyboard Buffer Memory Sniffing
[0044] Some desktop operating systems do not have hardware protection against intruders' software copying passwords from a keyboard buffer.
[0045] Defense�no standard protection except making hardware protection at a microprocessor level.
[0046] 10. Password File Theft
[0047] Every user name has a password entry in a hashed form which can be read.
[0048] Defense�Needham-Guy algorithm is used: each password is an encryption key for itself to be hash encrypted.
[0049] All attacks above can be separated out into three different categories: communication line attacks (8, dictionary attack), attacks at input/output devices (1, 2, 3, 4, 5, 6, 7, 9), and database attacks (10).
[0050] C. Enhanced Security Requirements
[0051] As manifested by the list of attacks above, SSPR security technology is vulnerable to well known security breaches. SSPR is based on �what user knows�, as opposed to other authentication factors based on �what user has� (for instance, hardware tokens), or �what user is� (such as biometric traits, like, fingerprints, face, eye, and voice recognition). It is well known, �what user knows��based authentication systems are the most attractive due to being cheap, user friendly, easily electronically deployable, and requiring no additional hardware, as opposed to other authentication factors. That is why numerous attempts have been made to improve SSPR technology and satisfy the requirements of the Internet mass transaction and e-commerce community. Several enhanced user authentication security requirements include the following:
[0052] 1. Even without encryption, authentication secrets (like passwords or PINS) shared between a client and a server should not be revealed, if the data are intercepted by an intruder, while in transit on communication lines.
[0053] 2. Authentication system is to demonstrate strong resilience against attacks at input/output devices (see, for example, B1-B7, B9).
[0054] 3. �What user knows��based authentication system should use secret knowledge shared with a server, which is easier than, or of comparable difficulty for a human being to remember as compared to static passwords. Otherwise, the system does not have a chance to be widely adopted.
[0055] 4. Client and server have to perform mutual authentication to each other.
[0056] 5. Client should be able to get authenticated to by server and get access to protected resources from any computer platform on the Internet.
[0057] 6. Authentication system should have zero footprint downloaded software on the client computer platform.
[0058] 7. No additional hardware as compared to SSPR technology.
[0059] 8. Easy and cheap match to any other authentication factor in building �strong authentication� security systems (having two or more authentication factors).
[0060] 9. Compatible with security of message-oriented Web Services technologies (like SOAP, XML, WSDL, etc.).
[0061] Representative prior art authentication technologies are described in Juels, U.S. Ser. No. 2002/0,029,341; Boroditsky, U.S. Pat. No. 6,332,192; Azuma, U.S. Ser. No. 2001/0,039,618; Jalili, U.S. Pat. No. 6,209,104; Ozzie, U.S. Pat. No. 5,664,099; Davies, U.S. Pat. No. 5,608,387; Blonder, U.S. Pat. No. 5,559,961; Baker, U.S. Pat. No. 5,428,084; Cottrell, U.S. Pat. No. 5,465,084; and Martino U.S. Pat. No. 5,276,314.
[0062] Many approaches promise certain improvements toward meeting some of the requirements (1-9) listed above. However, no known approach (except SSPR) has experienced wide public and industry acceptance. Further, none allow for a comprehensively secure system and method of user authentication, covering the entire list of requirements listed above. Thus, what is needed is an authentication system and method allowing for highly elevated practical security against most of known attacks on communication lines and at data entry devices while assuring sufficient enough combinatorial capacity. In addition, user interfaces for such new authentication systems which contribute to ease of use and security are required.
[0063] The present invention provides a user interface system and method for a new Random Partial Pattern Recognition (RPPR) algorithm and similar algorithms, and for authentication systems and methods founded on the algorithm. RPPR authentication technology has the positive features of SSPR based security systems, but at the same time, is much stronger in terms of security. RPPR technology is extremely effective against computer data processing dictionary or brute force attacks, password guessing, password file theft, shoulder surfing, eavesdropping, videotaping, Trojan Horse attack, memory sniffing attacks, keystroke monitoring, and network sniffing. At the same time, RPPR provides a �what user knows� authentication method with enormous combinatorial capacity, while remaining within a user's �comfort level� for memorization.
[0064] The present invention is embodied by an interactive method for authentication of a client and a user interface for the method. The method is interactive in the sense that the server provides a clue to the client, and the client enters a pattern suggested by the clue. Embodiments of the method utilize a multiple field pattern for recognition, expanding the combinatorial capacity of the technique, and increasing security. Further, embodiments of the method utilize a random partial pattern of a full pattern stored in the server, along with a clue which suggests to the user the data fields from the full pattern to be used for the random partial pattern.
[0065] A graphical user interface according to the present invention is produced for display by a data processing system, the data processing system including a display and one or more user input devices. The graphical user interface includes a graphical input construct adapted for display to a user to support entry of a pattern, such as an authentication pattern as described above. The graphical input construct is embodied by computer instructions, stored in client or server memory accessible by the data processing system. The input construct is adapted for prompting users to input patterns comprising one or more data fields having respective field contents. The field contents in the data fields comprise a set of storage units having more than one member. Storage units in the data fields in representative embodiments represent one or more of alpha-numeric characters, images and colors.
[0066] The input construct includes one or more graphical fields for user entry of said storage units. Upon entry by a user of one of said storage units in a graphical field, a corresponding icon, such as a letter, number, or graphic shape, having a color, is displayed in the graphical field.
[0067] The graphical field in the graphical input construct in one embodiment of the invention includes a first window for storage units representing alphanumeric characters, and a second window for storage units representing images, and wherein said storage units representing color are indicated in one of said first and second windows. In various embodiments, the second window of the graphical input construct is coupled with a graphical menu displayed in response to input selecting the second window for input of a storage unit, the graphical menu presenting a set of candidate colors selectable by user input and a set of candidate images selectable by user input.
[0068] The input construct in some embodiments comprises a graphical object indicating elapsed time for a user session involving entry of said pattern, and acceptance of said pattern by an authentication server, a graphical object indicating status of a user session involving entry of said pattern, and acceptance of said pattern by an authentication server, and a field indicating a clue to a user concerning field contents of said pattern.
[0069] According to embodiments of the method, an ordered set of data fields is stored in secure memory. The data fields in the ordered set include respective field contents, according to a pattern in embodiments preferred for most environments. The server provides a user interface to the client via a communication medium including a clue, such as positions in the ordered set of a random subset of data fields from the ordered set, which identify a random partial pattern form the full pattern stored in the ordered set of data fields. For the purpose of clarity, the term �random� as used herein is meant to include pseudo-random.
[0070] In embodiments of the invention, the client enters using a graphical user interface, multiple fields of input data representing the random partial pattern, and the server accepts the input data from the client via a data communication medium. The input data corresponds to the field contents for the data fields at the identified positions in the ordered set. The server then determines whether the input data matches the field contents of corresponding data fields in a random subset. If the input data matches, successful authentication is signaled. Else, a failed authentication is signaled.
[0071] In some embodiments of the invention, the process involves presenting to the client an input construct for account set up. The input construct may comprise a graphical user interface presented using an Internet browser or a thin client software. A user provides field contents for an ordered set of data fields in a pattern. In various embodiments, the pattern comprises data based on a cognitive function of position in the ordered set. Also in some embodiments, the input construct enables the client to supply field contents for the data fields in the ordered set including alphanumeric characters, images and colors.
[0072] In yet other embodiments, the process includes presentation of a user interface prompting the user to input data for the data fields in the pattern, such as the random subset of the ordered set, by presenting to the user input construct, such as a graphical user interface. In some embodiments, the input construct enables the user to supply field contents for data fields, and the data fields comprise more than one storage unit. The storage units in the data fields in some embodiments represent respective more that one of alphanumeric characters, images and colors, or a combination consisting of storage units representing each of alphanumeric characters, images and colors.
[0073] The invention is also embodied by authentication systems based on the client/server architecture, and other architectures. In one embodiment, the process is extended to an authentication server for a large number of users. In this embodiment, the process involves maintaining a secure database of user accounts, including ordered sets of data fields as described above. In this system, attempts to access a protected network resource are detected or otherwise redirected to the server. The server then conducts an authentication session as described above to enable a client to have access to the protected resource.
[0074] Systems embodying the present invention include data processing resources including a processor, memory and network interfaces. Authentication server software being executed in the data processing resources carry out the processes for account set up and client authentication, as described above.
[0075] RPPR based authentication technology is as user friendly, as cost effective and as electronically deployable as Standard Static Password Technology (SSPR). At the same time, security is much higher using RPPR based authentication, as compared to SSPR. It allows for effective protection from multiple intruding attacks at data entry devices as well as on communication lines, while data are in transit. RPPR based authentication technology is applicable to hardware and human clients, while having scalable security allowing for trade offs involving cost, business requirements, and hardware resources.
[0076] Other aspects and advantages of the present invention can be seen on review of the drawings, the detailed description and the claims, which follow.
[0077]FIG. 1 illustrates client-server architecture for implementation of an authentication process according to the present invention.
[0078]FIG. 2 is a flowchart of a basic random partial pattern recognition RPPR authentication session according to the present invention.
[0079]FIG. 3 illustrates a graphical user interface supporting a log-in process at the user name entry state used in one example of an authentication program according to the present invention.
[0080]FIG. 4 illustrates a graphical user interface supporting a log-in process at the random partial pattern data entry state used in one example of an authentication program according to the present invention.
[0081]FIG. 5 illustrates a graphical user interface supporting a log-in process at the random partial pattern data entry state, in which field contents have been entered for a random subset of data fields, as used in one example of an authentication program according to the present invention.
[0082]FIG. 6 illustrates an �object repetition method� for pattern generation according to a cognitive function of position in an ordered set of data fields.
[0083]FIG. 7 illustrates a �conditional key method� for pattern generation according to a cognitive function of position in an ordered set of data fields.
[0084]FIG. 8 illustrates a �field compliant method� for pattern generation according to a cognitive function of position in an ordered set of data fields.
[0085]FIG. 9 illustrates an �even-odd method� for pattern generation according to a cognitive function of position in an ordered set of data fields.
[0086]FIG. 10 is a basic architecture diagram for an embodiment of a client-server system according to the present invention, including support for the RPPR authentication process.
[0087] FIGS. 11A-11B provide a process flowchart for online user account set up in support of the RPPR authentication process according to the present invention.
[0088] A detailed description of embodiments of the present invention is provided with reference to FIGS. 1 through 11A and 11B. FIG. 1 illustrates a basic communication set up for RPPR authentication processes according to the present invention. A client subsystem 1010 communicates by communication media, such as a local area network or wide area network communications subsystem 1020, with a server subsystem 1030. A protected network destination 1130 controls access to resources such as secure web sites identified by URLs, links to secure networks, and the like.
[0089] To set up access, a pre-authentication session 1040 is executed by the client subsystem 1010 and server subsystem 1030. In the pre-authentication session 1040, a user account is set up in the server subsystem 1030, the user name and a secret pattern that includes an ordered set of data fields is selected by the user and stored in the server subsystem 1030. The user account information, user name and ordered set of data fields are stored in a secure server database. A more detailed description of an embodiment of an account set up session is provided with reference to FIGS. 11A-11B.
[0090] To gain access to the protected network destination 1130, the client subsystem 1010 and server subsystem 1030 execute an authentication session 1050 that includes a client-server interactive communication protocol based on RPPR. A more detailed description of an embodiment of an authentication session 1050 is provided with reference to FIG. 2.
[0091] According to one basic flow, an authentication session is initiated when the user tries to reach a protected network destination (block 1060). The protected network destination redirects the user's attempted access to the authentication server, or the attempted access is otherwise detected at the authentication server 1030. In one example, where the user is attempting access using an Internet browser, a web page is returned to the user's browser including a graphical user interface including links to the authentication server 1030 (block 1070). The web page may be returned through redirection for example, by the authentication server or another network resource. Via the graphical user interface, the server prompts the user to enter a user name into a field in the graphical user interface (block 1080). The user enters the user name, which is returned to the authentication server (block 1090). If the user name is valid, then the authentication server identifies a random subset of data fields from the ordered set of data fields associated with that user name. The user is prompted to enter field contents for the random subset of data fields using the graphical user interface (block 1100). The user inputs data for the field contents in the identified fields, and the input data are returned to the server (block 1110). If the input data matches the field contents for the random subset, then successful authentication is signaled to the user via for example the graphical user interface, signaled to the protected network destination and/or signaled to other resources, such as authorization and accounting systems, that need to know that the authentication session has succeeded, and network connection to the requested protected network destination is allowed (block 1120).
[0092] FIGS. 3-5 illustrate input constructs based on graphical user interfaces presented using Web browsers for a log-in and authentication session based on RPPR. FIG. 3 illustrates an opening screen 2080 which is presented to the user at the beginning of an authentication session. In the opening screen 2080, data entry field 2010 is used for entry of the user name. A login button 2020 is indicated to initiate processing of field data and to start the login process. An operation mode button 2030 is included, which when indicated causes a pop-up menu of operation mode buttons, including a log-in session operation mode button 2040, an account set up operation mode button 2050, a pattern reset operation mode 2060, and an user name and pattern reset operation mode 2070. A first stoplight icon 2110 is included in the screen 2180. The stoplight icon 2110 shows red before the user name is entered, shows yellow during client/server communications, and turns green when user name is accepted. Also included in the screen 2110 is a session timer icon indicating elapsed time for the login session. The system administrator can set parameters in the server that cause reset of the login process if the timer expires, or otherwise react to timer expiry.
[0093]FIG. 4 illustrates a graphical user interface screen 2090, which is presented at the beginning of an authentication session after the user name is recognized by the server. In this example, two stoplight icons 2110, 2120 are presented. The first stoplight icon 2110 turns green after the user name has been recognized. The second stoplight icon 2120 appears during data entry for the random subset. It appears red before data has been entered into data fields, or before the log in button is indicated. The stoplight icon 2120 appears yellow during client/server communications and before acceptance of the input data representing field contents. The stoplight icon 2120 appears green to signal successful authentication.
[0094] The entered and accepted user name could be displayed in the user name field 2010, either as usual text or as sequence of echo dots for security reasons. Data entry fields (e.g. 2140) are presented for a pattern comprising a corresponding number of fields which will constitute the random subset of the ordered set of data fields stored for the user. In this example, the random subset is presented to the user by field number (e.g. 2160), and includes field number 2, field number 4, field number 7 and field number 8, out of an ordered set of for example 9 data fields. In this embodiment, associated with each of the data entry fields is a button 2170 with a corresponding window for entry of an image and color selected by the user. By indicating a button 2170, a pop-down menu 2180 of candidate colors and image icons is displayed which is used as a data entry tool for entry of the field contents for the ordered set of data fields. In this example, the pop-down menu 2180 includes a set of candidate colors, implemented in this example as background colors in the first two columns of the menu 2180 (except for the cross icon used for closing the menu), and a set of candidate image icons in the last seven columns of the menu 2180. The colors in this embodiment include W-white, Bl-blue, Gr-green, Or-orange, Pi-pink, LBl-light blue, Vi-violet, Ye-yellow, and Re-red. The user enters alphanumeric characters in a first window in the field 2140 using a keyboard or other input device, and may select an image icon and a background color in a second window as part of the field contents. In this example, the random subset includes four fields. Other numbers of fields may be used. Also, the number of fields may be varied from session to session for added security.
[0095]FIG. 5 illustrates the next screen 2100 presented to the user during the authentication session. In FIG. 5, the user has entered alphanumeric characters in the fields (e.g. 2130) and an image icon (Swan) with background color (White) in the field 2150 (the background color is indicated by the label �W� beneath the field in the drawing, but appears as the color of the background for the image icon, which is black, in the field 2150 in preferred embodiments). Other ways to include color in the field contents include providing a background color for field 2140, a color for the image icons, a color for the alphanumeric characters, and so on. A simple pattern which is a cognitive function of position in the ordered set is illustrated in this example, where the field contents for the data fields in the ordered set include the alphanumeric characters x(N)y, where (N) is a digit representing field position in ordered set, and the white Swan image icon. After entry of the input data representing field contents for the random subset, the user indicates the login button to initiate communication with server. After the server processes the input data, the authentication process is completed as described above.
[0096] The RPPR algorithm is based on a random subset of data fields from an ordered set of fields, where the field contents in some embodiments represent a pattern that is a function of position in the ordered set to facilitate user memorization. Of course, any pattern of field contents may be used, including purely random field contents, provided the client is able to recall the field contents for the random subset of the full pattern during login, as may be the case for authentication of hardware devices. A random subset that is usually less than the full ordered set is requested by the server from a client during each login/access session.
[0097] FIGS. 6-9 illustrate several methods for building patterns based on cognitive functions of position in the ordered set of data fields, which are easy to remember and operate.
[0098]FIG. 6 illustrates the basic Object Repetition Method (ORM). In the illustrated example, the field contains a single character �s� which is repeated for a number of times based on the field number within ordered set. Thus, the field contents of data field 1 is �s�, the field contents of data field 2 is �ss�, and so on until the field contents of data field 9 consists of �sssssssss�. More elaborate patterns may be made in this manner.
[0099] Basically, the object repetition method involves selecting a relatively simple object, which is easy to remember, like
[0100] 1. Any character: 1, a, . . .
[0101] 2. Any simple combination of characters: 12, ab, 1a, 2b, . . .
[0102] 3. Any color and one character combination: 1-Green, a-Red, . . .
[0103] 4. Any one character�image/background color combination: 1-YellowBed, 2-RedDog, . . .
[0104] 5. Any color and any several character combination: 12-Green, ab-Red, 1a-Green, 2b-Red, . . .
[0105] 6. Any two character combination and any image/background color combination: 12-YellowBed, ab-RedDog
[0106] 7. Any three character combination and any image/background color combination: 123-YellowBed, abc-RedDog
[0107] Representative n-field patterns for the object repetition methods outlined above (assuming 9 fields in the full pattern): look as follows
[0108] 1. 1, 11, . . . , 111111111; a, aa, aaa, . . . , aaaaaaaaa
[0109] 2. 12, 1212, 121212, . . . , 121212121212121212; ab, abab, ababab, . . . , ababababababababab; 1a, 1a1a, 1a1a1a, . . . , 1a1a1a1a1a1a1a1a1a
[0110] 3. 1-Green, 11-Green, 11-Green, . . . , 111111111-Green; a-Red, aa-Red, aaa-Red, . . . , aaaaaaaaa-Red
[0111] 4. 1-YellowBed, 11-YellowBed, 111-YelowBed, . . . , 111111111-YellowBed; 2-RedDog, 22-RedDog, 222-RedDog, . . . , 222222222-RedDog
[0112] 5. 12-Green, 1212-Green, 121212-Green, . . . , 121212121212121212-Green; ab-Red, abab-Red, ababab-Red, . . . , ababababababababab-Red; 1a-Green, 1a1a-Green, 1a1a1a-Green, . . . , 1a1a1a1a1a1a1a1a1a-Green; 2b-Red, 2b2b-Red, 2b2b2b-Red, . . . , 2b2b2b2b2b2b2b2b2b-Red
[0113] 6. 12-YellowBed, 1212-YellowBed, 121212-YellowBed, . . . , 121212121212121212-YellowBed; ab-RedDog, abab-RedDog, abababRedDog, . . . , ababababababababab-RedDog
[0114] 7. 123-YelowBed, 123123-YellowBed, 123123123-YellowBed, . . . , 123123123123123123123123123-YellowBed or abc-RedDog, abcabc-RedDog, abcabcabc-RedDog, . . . , abcabcabcabcabcabcabcabcabc-RedDog
[0115] Another method is referred to as the Conditional Key Method (CKM) is illustrated in FIG. 7. According to the conditional key method of FIG. 7, alphanumeric character N7 is entered into data field for each position in the pattern, and a graphical icon and background color are selected according to a simple pattern. Referring to FIG. 4, the pattern begins in data field 1 with the bed image icon and a white background. Data field 2 is the coffee cup with the blue background. Data field 3 (not shown) is the knife and fork image icon with the green background. Data field 4 is the martini glass image icon with the orange background. Data field 5 is the cigarette icon with the pink background. Data field 6 is an envelope image icon with the light blue background. Data field 7 is the telephone image icon with the violet background. Data field 8 is the airplane image icon with the yellow background. Data field 9 is the key image icon with the red background. In this example, image icons are selected by traversing the row that begins with the bed icon to the right, and then at the end of the row proceeding up the last column in the set of candidate image icons in a counter-clockwise direction. The background colors are also selected by following a simple pattern in the candidate background colors, preceding down the column that begins with the white background color to the bottom of the column, and then up the column of background colors in a clockwise direction, making an easy to remember cognitive function of position in the ordered set. Other conditional key codes are based on the process of selecting a relatively simple object, like any combination of alphanumeric characters (from 1 to 3 characters) and one color from the candidate image/color menu. For instance, one could choose 123-Pink or abc-Pink. The unchanging roots here are 123 or abc, which will be kept the same in all of the n data fields (without sacrificing any generality, we are assuming 9 fields pattern sizes here). One could then use and remember Pink and its color position in the menu as a conditional key and find others, changing along with field number, either clockwise or counter-clockwise (let's choose clockwise for clarity). One could then select any combination of alphanumeric characters (from 1 to 3 characters) and one image from the candidate image icon menu, for instance, 123-Sun or abc-Sun. For example, a user could use and remember the sun image and its position as a conditional key and find others, by proceeding either clockwise or counter-clockwise (let's choose counter-clockwise for clarity). An object pattern is built based on these techniques. For instance, 123-PinkSun. As fields are changing, so are colors and images with respect to conditional keys selected in the initial object 123-PinkSun. Assuming that colors will be changing clock-wise, whereas images will be changing counter-clockwise with respect to their conditional keys (Pink and Sun) positions, representative n-field patterns look as follows (assuming 9 fields full patterns):
[0116] 1. Static alphanumeric characters with conditional color: 123-Pink, 123-LightBlue, 123-Violet, 123-Yellow, 123Red, 123-White, 123-Blue, 123-Green, 123-Orange, or abc-Pink, abc-LightBlue, abc-Violet, abc-Yellow, abc-Red, abc-White, abc-Blue, abc-Green, abc-Orange
[0117] 2. Static alphanumeric characters with conditional image: 123-Sun, 123-Moon, 123-Stroller, 123-Rain, 123Umbrella, 123-Flower, 123-Telephone, 123-Jet, 123-Key, 123-Giutar, or abc-Sun, abc-Moon, abc-Rain, abc-Umbrella, abc-Flower, abc-Telephone, abc-Jet, abcKey, abc-Gitar
[0118] 3. Static alphanumeric characters with conditional color and conditional image: 123-PinkSun, 123-LightBlueMoon, 123-VioletStroller, 123-YellowRain, 123-RedUmbrella, 123-WhiteFlower, 123-BlueTelephone, 123-GreenJet, 123-OrangeKey
[0119] It is interesting to note that an SSPR implementation would have to utilize 20-21 character static PINS or passwords (totally unrealistic case) to achieve the same level of combinatorial security, as described above methods (assuming five objects per field and four out of nine fields partial patterns (an object is any of either a alphanumeric character, or a background color, or an image icon )).
[0120]FIG. 8 illustrates a basic even-odd method for defining field contents for an ordered set of data fields according to cognitive function of position in the ordered set. According to the even-odd method, the field contents for odd-numbered fields consists of the letter �z� any number equal to the field number plus 1. For even-numbered fields, the field contents consist of the letter �z� and a number equal to the field number minus 1. Thus, the field contents for data field 1 are z2. In data field 2, the field contents are z1. The pattern repeats so that in data field 8, the field contents are z7. In data field 9, the field contents are z10. According to one even-odd method, the user selects two secret algorithm meters�one for even and another one for odd fields. For example:
[0121] 1. Even fields algorithm: data field 2→2+1=3, data field 4→4+1=5, etc.; Odd fields algorithm: data field 1→1−1=0, data field 3→3−1=2, etc. Eventually the pattern looks as follows: 0, 3, 2, 5, 4, 7, 6, 9, 8.
[0122] 2. Even fields algorithm: 2→100−2=98, 4→100−4=96, etc. Odd fields algorithm: 1→1, 3→3, 5→5, etc. Eventually the pattern looks as follows: 1, 98, 3, 96, 5, 94, 7, 92, 9
[0123] 3. Even fields algorithm: 2→2{circumflex over ( )}2−2=2, 4→4{circumflex over ( )}2−4=12, 6→6{circumflex over ( )}2−=30, etc. Odd fields algorithm: 1→1{circumflex over ( )}2+1=2, 3→3{circumflex over ( )}2+3=12, 5→5{circumflex over ( )}2+5=30, etc. Eventually the pattern looks as follows: 2, 2, 12, 12, 30, 30, 56, 56, 90
[0124] 4. Even fields algorithm: 2→22, 4→44, etc. Odd fields algorithm: 1→11111, 3→33333, etc. Eventually the pattern looks as follows: 11111, 22, 33333, 44, 55555, 66, 77777, 88, 99999
[0125] The Even-Odd Method (EOM) could be easily combined with other functions of position, such as ORM and CKM. For instance, even fields algorithm: 2→222-White (conditional key; clockwise), 4→444-Green, 6→666-Pink, etc.; odd fields algorithm: 1→111-Umbrella (conditional key, counter-clockwise), 3→333-Stroller, 5→555-Sun, etc. Eventually the pattern looks as follows: 111-Umbrella, 222-White, 333-Stroler, 444-Green, 555-Sun, 666-Pink, 777-Flame, 888-Violet, 999-Bed.
[0126]FIG. 9 illustrates the basic Field Compliant Method (FCM) for assigning a cognitive function of position in the development of the field contents for the ordered set of data fields which constitutes the authentication codes. This can be seen in FIG. 9, the field contents for the data fields consists of x(N)y with a black swan on white background. The parameter (N) represents the field number. Thus, data field 1 includes the field contents x1y-WhiteSwan. Data field 2 includes the field contents x2y-WhiteSwan. The pattern repeats so that the data field 8 includes the field contents x8y-WhiteSwan and the data field 9 includes the field contents x9y-WhiteSwan.
[0127] Basically, FCM is based on selecting an object consisting of any combination of characters, colors and/or images to be a root object for all fields. Embed into this object a meter, changing in a strict correspondence to the field sequential number according to a certain secret algorithm. For instance,
[0128] 1. Root: ab-White. Meter�a number before �ab� corresponding to a field number: 1ab-White, 2ab-White, 3ab-White, . . . , 9ab-White
[0129] 2. Root: ab-White. Meter�a number after �ab� corresponding to a field number: ab1-White, ab2-White, ab3-White, . . . , ab9-White
[0130] 3. Root: ab-White. Meter�a number embedded between �a� and �b� corresponding to a field number: a1b-White, a2b-White, a3b,-White, . . . , a9b-White
[0131] 4. Root: ab-White. Meter�a number before �ab� corresponding to a field number plus 100: 101ab-White, 102ab-White, 103ab-White, . . . , 109ab-White
[0132] 5. Root: ab-White. Meter�a number after �ab� corresponding to a field number plus 100: ab101-White, ab102-White, ab103-White, . . . , ab109-White
[0133] 6. Root: ab-White. Meter�a number between �a� and �b� corresponding to a field number plus 100: a101b-White, a102b-White, a103b-White, . . . , a109b-White
[0134] 7. Root: ab-White. Meter�a number before �ab� corresponding to a field number multiplied by 2: 2ab-White, 4ab-White, 6ab-White, . . . , 18ab-White
[0135] 8. Root: ab-White. Meter�a number after �ab� corresponding to a field number multiplied by 2: ab2-White, ab4-White, ab6-White, . . . , ab18-White
[0136] 9. Root: ab-White. Meter�a number between �a� and �b� corresponding to a field number multiplied by 2: a2b-White, a4b-White, a6b-White, . . . , a18b-White
[0137] 10. Root: ab. Meter�a color found from the conditional key (White) clockwise in correspondence to the field number: ab-White, ab-Blue, ab-Green, ab-Orange, ab-Pink, ab-LightBlue, ab-Violet, ab-Yellow, ab-Red
[0138] 11. Root: ab-White. Meter�an image found from the conditional key (Key) counter-clockwise in correspondence with the field number multiplied by 2: ab-WhiteGuitar, ab-WhiteArm, ab-WhiteGirl, ab-WhiteDollar, ab-WhiteDog, ab-WhiteSee, ab-WhiteMoon, ab-WhiteRain, ab-WhiteFlower
[0139] 12. Root: Z. Meter�field number before �Z� and behind �Z�: oneZone, twoZtwo, threeZthree, . . . , nineZnine.
[0140] These patterns are as easy to remember as 4 character PINs/passwords. However, the combinatorial security is a great deal of stronger for the RPPR based technology, as compared with SSPR algorithm based security systems.
[0141]FIG. 10 illustrates a client/server system including authentication resources according to the present invention. The client subsystem 1010 includes data entry devices 4010 (keyboard, mouse, voice input, etc.), a display device 4020 (CRT, LCD panel, etc.), and a physical platform 4030 (personal computer, hand held computer, internet appliance, etc.) including a processing unit, memory, and other data processing resources. Software running in the client includes a browser 4050 or a �thin� software client 4060 such as may be provided on personal digital assistants, cell phones, and other simple internet appliances which may not support full browser functionality. The browser 4050 includes Java Virtual Machine or a NET environment which supports the client-server dialog. Likewise, the �thin� software client 4060 may support the client-server dialog. Finally, an interface 4040 to the network communication media 4130 is provided. The communication media 4130 may be a private or pubic, local area network or a wide area network using wired, wireless or optical media in representative systems.
[0142] The server subsystem 1030 includes network server resources 4070, an account management utility 4080 for the user accounts subject of the authentication process, and a platform 4090 including a processing unit, memory, disk space and other data processing resources. A core program 4100 supporting the authentication process is included in the server subsystem 1030. The core program may be implemented using Java or .NET object-oriented technology for examples. Also, a server database and database connector 4120 is included. Finally, an interface 4110 to communication media for server LAN/WAN communication lines 4130 is provided. In some embodiments, the server and server data are implemented with security features to protect user account information files from intruders.
[0143]FIGS. 11A and 11B illustrate one example online user account set up process flow. In the diagram, the process starts at block 5000 and a session timer 5001 is started. The online user first selects, using a graphical user interface, the account set up operation mode (block 5010). The user enters into a field of the graphical user interface the user's e-mail address (block 5020). Next, the user gets an e-mail from the server having a temporary username and a full pattern for use during account set up, provided the e-mail address input by the user exists and is allowed by security software in the server (block 5030). If the e-mail address does not exist, is incorrect, or is not allowed, then the process resets to block 5010. Likewise, if the session timer 5001 expires, then the process resets to block 5010. In an alternative flow, such as when the user's e-mail address is correct and accepted, then a second graphical user interface (block 5040) is presented allowing the user to enter personal information to create a personal information file (stored in the server side database�block 5050) supporting the authentication process. Once the personal information file has been created, it is sent to the server database and verified by a human resources department, or otherwise, in some systems (block 5050). If the personal file is not entered, or is entered incorrectly, then the process resets to block 5010.
[0144] Also, after receiving the temporary username and full pattern at block 5030, and in some embodiments, after the personal information file is successfully entered at block 5040, then the user is presented another graphical user interface for entry of the temporary username and random partial pattern requested by the server, based upon the full pattern provided at block 5030 (block 5060). If the user fails entry of the username and partial pattern requested at block 5060, then the process resets to block 5010. If the user successfully enters the temporary user name and the partial pattern requested at block 5060, then the process branches to block 5070 in FIG. 11B. At block 5070, the user gets another graphical user interface for entry of a permanent username and full pattern (block 5070). The full pattern is chosen by the user in some embodiments according to a cognitive function of position in the ordered set of data fields as described above. The user's permanent user name and full pattern are sent to the server database (block 5080). Alternatively, a new user account is activated based on the username and full pattern, provided the user personal information file received from block 5050 of FIG. 11A is verified (block 5090). Either after the account verification at block 5090, or after entry of the permanent username and pattern at block 5080, the user account is established and activated (block 5110). The process flow ends after user account activation (block 5003).
[0145] In various embodiments, the present RPPR system is used for user authentication in a client-server network architecture, for authentication of hardware devices (where the clients comprise peer routers for example) and in other environments supporting interactive authentication sessions. Interactive authentication based on the Random Partial Pattern Recognition (RPPR) algorithm provides significant security protection against multiple known intruder attacks. The interactive, multi-field pattern process of the present invention, such as the RPPR establishes a new paradigm, replacing standard static password technology. By capitalizing on modern high clock rate client-server CPU processing power and high network throughput, the RPPR process is easy to use. In the examples described above, user authentication begins with a client's initial request to a protected network destination. Then, the server, having known the client's user name, prompts the client through the client's GUI to fulfill a subset of the user's full pattern randomly selected by the server. Each field in the random subset requested from the client is associated with a displayed sequence number corresponding to a position in the full pattern. Each field in the GUI allows entering any combination of objects (at least one object per field is to be entered). In the example presented with reference to FIGS. 3-5, the objects entered in the field may be any number of alphanumeric characters, one image icon and one color background icon from a pop-down field menu fixed selection. The full pattern is a pre-set shared secret between the client and the server established during the client account set-up. The full pattern resides in the database on the server side. Upon receiving the client's response, the server compares internally computed expected combination with the client's input data, and makes a no/go authentication decision, provided the response is false/true.
[0146] For hardware devices, RPPR authentication is a significant communication line security enhancement over the commonly used Challenge Handshake Authentication Protocol (CHAP). The device-authenticator works as a server, while the device, being authenticated, plays a client role. Both devices have a secret (password like) key. According to RPPR, the authenticator generates a random subset of full pattern field sequence numbers and sends this request to the client device. The full pattern fields contain only alphanumeric characters in some embodiments (each field may contain any number of characters, unless it is restricted by the hardware protocol, but at least one character per field). However, the number of full pattern fields and their subset are not restricted by the human memory and/or human processing time and can be a great deal higher than in a user authentication case. Therefore, RPPR allows for scalable security on the communication lines during authentication of hardware devices (for instance, router to router authentication). The client device fulfills the requested fields. Then, it encrypts the response with its secret (password like) key and sends the response to the host (the device-authenticator). The host compares internally computed expected combination with the client's one, and makes a no/go authentication decision, provided the response is false/true.
[0147] While the present invention is disclosed by reference to the preferred embodiments and examples detailed above, it is to be understood that these examples are intended in an illustrative rather than in a limiting sense. It is contemplated that modifications and combinations will readily occur to those skilled in the art, which modifications and combinations will be within the spirit of the invention and the scope of the following claims.
Referenced by
Legal Events
Original Image


text:
A couple of days at Red Alert Skate Shop - Film by Michael Cirelli
Derek Lemoine
Keven Hammond
Tate Kokubo
Ralph Murphy
Cody Vaillant
Film by Michael Cirelli
Loading more stuff…
Hmm…it looks like things are taking a while to load. Try again?
TM + © 2015 Vimeo, LLC. All rights reserved.
Made with k in NYC.
Your content preferences apply to any Vimeo videos you view. Learn more about content preferences in our FAQ.


text:
Welcome to the official site of the
Annual Sundoll Clinic
March 22nd, 2014
12-1 pm - Registration
1-3 pm Session 1: Hip-hop (1 hour lunch break)
3:30-5:30 pm Session 2: Jazz
5:30-6 pm Poster signing, photographs and closing
CASH ONLY $40 PLEASE BRING EXACT CHANGE TO REGISTRATION a pen, and your health insurance card
All USF Students are Free! (you must present your USF ID) Maximum of 30
All High School Students & College Students are welcome (ages 13 and up)
Auditions 4/17, 4/18 and 4/19 (see Audition Tab)
The Sundolls are the premier dance team for the University of South Florida. All members are full time students with an interest in supporting USF athletics thus they participate in community events such as local hospital visits, charity events and campus activities. The Sun Dolls perform on the sidelines at every home football game at Raymond James Stadium and during the Winter/Spring season, the Sun Dome is their venue to dance at Men's and Women's basketball games.
Information about the SunDolls
Email Lori Moses
Enter your email address to receive updates on
workshops, performances, and other opportunities
Want to see what the USF Sundolls are up to?
Please follow us on Twitter @UsfSunDoll and Instagram @usfsundolls
This is an independent and private website not affiliated with the University of South Florida.


text:
LeBron: Heat can be a lot better
Updated: September 28, 2012, 9:33 PM ETBy Michael Wallace | ESPN.com
MIAMI -- The Miami Heat will open defense of LeBron James' first NBA championship with coach Erik Spoelstra vowing to remove at least one term from his motivational messages entering training camp.
"I'm not even going to use that word," Spoelstra said Friday during the Heat's media day at AmericanAirlines Arena. "We have a chance to win another title. Everyone will be gunning for us. Teams have loaded up. It's a different challenge for us us this year -- a completely ...
Read full story
You must be signed in to post a comment
You are fully responsible for the content you post. Content that includes profanity, personal attacks or antisocial behavior (such as "spamming" or "trolling"), or other inappropriate content or material will be removed. We reserve the right to block any user who violates our terms of use, including removing all content posted by that user.
- Thorpe: Watch Andrew Wiggins work
- Pelton: Real Plus-Minus All Stars
- Elhassan: Big bills looming for Memphis
- Doolittle: Middleton next Battier?
- Haberstroh: C'mon Doc, Jordan no DPOY


text:
The Elk Run Volunteer Fire Company took possession of its new 2011 Ferrara engine/pumper Thursday. The vehicle possesses a 1,500-gallon pump for 1,000 gallons of water, as well as a 30-gallon compressed air foam system. If the weather works out, you could see the new truck during ŌĆ£Touch the TruckŌĆØ as part of SaturdayŌĆÖs ŌĆ£Pizza & PreventionŌĆØ downtown.
PUNXSUTAWNEY ŌĆö A Pittsburgh man accused of shooting two Punxsy men last week had his bail set at $2 million during his arraignment Thursday, just hours after he was apprehended in the Pittsburgh area.
Christopher L. Thornhill, 24, faces two counts each of attempted criminal homicide; aggravated assault; recklessly endangering another person; and weapons violations stemming from the Sept. 22 incident near a residence along Cranberry Alley.
PUNXSUTAWNEY ŌĆö Having learned that the need is greater than ever among American forces stationed in Afghanistan, members of the Jefferson County chapter of the Pennsylvania Association of School Retirees (PASR) will conduct their third county-wide┬ĀŌĆ£Support the TroopsŌĆØ campaign.
PUNXSUTAWNEY ŌĆö The Torrence Street traffic light project was given a green light ŌĆö literally ŌĆö Wednesday, as the new traffic signals were put into service by sub-contractor Perram Electric of Ohio.
Roger Steele, chairman of Punxsutawney Borough CouncilŌĆÖs Public Works Committee, said through the project, council is exploring a way to decrease the traffic flow on Mahoning Street, with the widening of Torrence Street as part of a PennDOT traffic study.
PUNXSUTAWNEY ŌĆö For the 10th straight year, Scott Anthony, owner of FoxŌĆÖs Pizza Den in Punxsutawney, is sponsoring ŌĆ£Pizza and PreventionŌĆØ from 11 a.m. to 8 p.m. Saturday.
During Pizza and Prevention, FoxŌĆÖs is offering a Big Daddy Pepperoni Pizza for only $9.11.
Along with the fund-raiser, ŌĆ£Touch the TruckŌĆØ is back again this year with a twist, as the new $322,000 Elk Run fire engine ŌĆö financed by the borough ŌĆö will be delivered to the department today and on display Saturday with other Punxsutawney Fire Department equipment along South Findley Street.
BROOKVILLE ŌĆö The post-conviction appeal hearing for Robert G. Rega of Punxsutawney resumed Tuesday at the Jefferson County Courthouse, when RegaŌĆÖs attorneys requested a continuance on his contention that he would have been entitled to some type of legal assistance from the Italian consulate in Philadelphia because heŌĆÖs an Italian national.
PUNXSUTAWNEY ŌĆö Sept. 8, the PAHS senior class chose six senior girls to represent the 2011 Homecoming QueenŌĆÖs Court.
This yearŌĆÖs court includes Cenneca Dilts, Brooke Doney, Adrienne Hess, Alexandria Magill, Keaton Mohney, and Alissa Vite.
The senior girl with the highest number of votes will reign as queen, and the senior girl with the second highest number of votes will reign as princess, after the official crowning during halftime of FridayŌĆÖs homecoming football game against Karns City.
PUNXSUTAWNEY ŌĆö The Career WomenŌĆÖs Club named Colleen Means as its Career Woman of the Year during a dinner Tuesday evening.
Means, who teaches fifth-grade reading and language arts at Punxsutawney Area Middle School, has been a teacher for the past 28 years.
She is also the co-chairperson of the clubŌĆÖs Girl of the Month Committee.
Also, for the past 20 years, Means has been in charge of the groupŌĆÖs annual Teddy Bear Picnic, which is held as part of the Groundhog Festival.
Means said she was very surprised to receive the award, and she is very thankful.
BRADFORD ŌĆö Behind a pair of 79s and a pair of 87s, the Punxsy boys' golf team shot a team score of 332 to win the District IX championship Monday in Bradford. The Chucks even surprised their own coach a bit.
PUNXSUTAWNEY ŌĆö┬ĀThe desire to help others has no age limit.
Celebrating 40 years of community service, Community Action Inc.ŌĆÖs Senior Corps-RSVP held its annual recognition luncheon this past Thursday at the Eagles.
During the event, Janeen Love, Senior Corps RSVP director, named Ted Thompson, of Brookville, as the programŌĆÖs Volunteer of the Year. He received the award from Jefferson County Commissioners Jim McIntyre and Jeff Pisarcik.


text:
From the Vault
A look into the E-N archives.
Space monkey retires to San Antonio Zoo
I mentioned in a recent post that helping mySA with a slideshow on military folks with S.A. ties had created a wealth of ideas for this blog, which are still percolating. And then there's this article, which was a coincidental find while going through Zoo files: When we were working on the slideshow, I mentioned […] [Read More]
Pearl Brewery brought us Billy Beer
While trying to determine how the local papers played the Sex Pistols coming to town for last Sunday's look-back by Hector Saldaña, I came across this story in the Express on January 5, 1978: Billy Beer is usually held up as an example of a failed brand, much like Ford's Edsel. According to an article […] [Read More]
Former First Lady quite the pool shark
Former President George H.W. Bush's admonishment to "put the harps back in the closet" with his recent illness would have applied to us here as well. Not that we wish him ill, but we also want to be prepared to pay appropriate tribute if the worst occurs. My colleague Michael Knoop dug through our photo […] [Read More]
Merry Christmas to all…and to all: read the paper!
From this blog to you and yours (via the Dec. 25, 1987, edition of the Express-News): –Julie Domel [Read More]
Brooks first cadet, first San Antonian and first newspaperman to die in WWI
Working with mySA on a slideshow last week about San Antonio's connections to famous military figures, I found out all sorts of interesting facts about these San Antonians. Those facts are enough for several blog entries, but I'll just focus on one this week: Sidney J. Brooks Jr., for whom Brooks Field — afterward Brooks […] [Read More]
'Miz Lila' and McAllister break ground
Looking through a Lila Cockrell photo file for another purpose, I came across this photo and wondered what was up with the giant keys. The back of the photo mentions that Lila Cockrell and Walter McAllister are pictured. The date 1977 is written in parentheses, but the date stamp only has May 16 with no […] [Read More]
Tower of the Americas gets its name
For those of you in your 40s or younger and/or those who have a short history in San Antonio, the Tower of the Americas has always been in the San Antonio skyline. However, in terms of the missions and other historical structures, the tower is a mere child. Construction started only 45 years ago and the […] [Read More]
Blind woman robbed again .. .and again … and again
Staffer John W. Gonzalez wrote an OpEd piece for Thanksgiving about how a story he wrote years ago regarding "a destitute blind woman being robbed of the fixings for her Thanksgiving meal" was a lesson "on the enormity of San Antonio's generosity." He'd forwarded me a copy, and I was especially interested by the part […] [Read More]


text:
20% OFF Vintage Butterfly latch hook rug/wall display of folk art from the 1960-70s still in very good condition. The rug is 21 1/2" by 28 1/2". I saw only one missing square near the border. You can only see this from behind. The previous owner had the rug displayed by using a wood frame. We are selling just the rug not the frame.
Combined orders welcome to save on shipping!
For shipping, insurance and delivery confirmation within the USA please add $10.00 to this item.
For all International orders, please e-mail us for the shipping expenses.
We accept ALL major credit card payments directly through Paypal. We also accept Paypal payments and US Postal Money Orders only.
Thanks again for shopping with Appletree Junction Antiques and a special `Thank You' to all our wonderful customers!
Item ID: 14033
Celebrating Our 11th Year PLATINUM SELLERS. We Specialize In Reviving Your Past Memories
Australia, Canada & England Jewelry Orders over $60.00 Receive Free 1st Class International Shipping without Insurance
|Shipping/Handling :
Price for shipping to USA
change location
USPS Standard Post


text:
NEW YORK, NY - NOVEMBER 17: (L-R) Kevin Pemoulie, Ben Daitz, Wilson Tang, John Delucie, Mario Carbone, Elizabeth Karmel, Josh Capon, Dan Kluger, Dale Talde, Alex Guarnaschelli, Justin Blatstein, Rick Blatstein, Amanda Freitag, Paul Liebrandt, Elizabeth Faulkner, Michael Coury, Phillipe Bertneau, Marc Forgione, Amanda Cohen, Robert Caporuscio, Ike Aikasa, Jacque Torres and Alex Stupack attend OTG and United Airlines host an exclusive preview event with acclaimed chefs and renowned designers for the announcement of Newark Liberty International Airport's Terminal C Transformation on November 17, 2014 in New York City. (Photo by Cindy Ord/Getty Images for OTG)
Content engaging our readers now, with additional prominence accorded if the story is rapidly gaining attention. Our WSJ algorithm comprises 30% page views, 20% Facebook, 20% Twitter, 20% email shares and 10% comments.
Subscriber Content Read Preview


text:
The Senate is silent on bi-national couples divided by law.
|Scooped by Bret
You are the content you publish.
Sign up with Facebook Sign up with Twitter
I don't have a Facebook or a Twitter account
Start a free trial of Scoop.it Business
Your new post is loading...
Your new post is loading...


text:
SHAWNEE, OKLA. — Shawnee Milling Co., a 107-year-old family-owned flour and corn meal manufacturer located 40 miles east of Oklahoma City, escaped any damage from the tornado super cell that hit the area Sunday night, killing one person.
"We're fine and we sure appreciate everybody thinking of us," said Bill Ford, president of Shawnee Milling. He said the mill is located in downtown Shawnee, a community of 30,000, and was northwest of the tornado's path.
He said the tornado was a slow moving one and gave residents "plenty of time to get to shelters." Shawnee is located in what is often referred to as "tornado alley" and structures are usually built with that in mind.
Shelters and safe rooms are a common feature of building construction in the region. An employee at the mill said she waited out the storm in a safe room with 13 other people and "I was happy to be there."
Shawnee Milling produces 7,000 cwts a day of wheat flour and 3,000 cwts a day of corn meal, Mr. Ford said.
1Change is coming to the bread aisle
2Bimbo to close Canada Bread bakery
3Barilla to move Region Americas headquarters
4Certain cereals sparkle for General Mills
5Hot Pockets in hot seat at Nestle
( more )
2McKee in pact with Texas baker for c-stores
3Lancaster Colony acquires flatbread maker
4S.k.u. rationalization in North America cuts into Aryzta revenue
5Bimbo to close Canada Bread bakery
1Leaf Brands looks to revive Hydrox cookies
2Opportunity by the slice
3New startup to build baking plant in Indianapolis
4Kraft Foods to merge with H.J. Heinz
to the PRINT edition, or click below for free INSTANT ACCESS to valuable news and insights in the Digital Edition.


text:
But it doesn't have to be.
Continue Shopping.
iHerb Customer Reviews
Great product
5 people found the following review helpful
Posted by Reviewer2428554 on May 12, 2010
I've been taking ashwagandha for about a year now and I don't plan on stopping. I sleep better, I'm comer, and happier overall. Highly recommended.
Great Tonic!
5 people found the following review helpful
Posted by Reviewer2858212 on Jul 06, 2010
This is a highly effective tonic for both calming the mind and inducing a restful sleep when taken right before bed. I take 3 tablets total each day and noticed the above effects immediately.
Ashwagandha helps Myasthenia Gravis
5 people found the following review helpful
Posted by Reviewer2175564 on Oct 24, 2011
I have MG and was nearly debilitated by double vision. My ayurveda physician prescribed ashwagandha, which has stopped it. The brand she prescribed was very expensive though, but I shopped around and found the lowest price at iHerb and it works even better.
Great Product
4 people found the following review helpful
Posted by Reviewer2824479 on Jul 28, 2010
I got this product because of my thyroid condition. It works great. It seems to be helping my thyroid work more effectively. I only take one pill per day.
Well rested and Balanced
4 people found the following review helpful
Posted by Reviewer2918778 on Feb 13, 2009
I started taking Ashwagandha while going thru a break up this winter and having trouble fighting off colds and flus going around. I just couldn't seem to get good sleep and didn't want to take sleeping pills for fear of being groggy the next day. My friend suggested this which was suggested by an herbalist to her when she was having disturbing dreams that were keeping her up at night. Overall, it's just one of those healthy tonics that can revive and give rest to your system I guess.


text:
Browse the A-Z index
Summer Camps at Swaner EcoCenter
Registration for Swaner Preserve and EcoCenter's…
Mountain Lion! The Story of Pumas and People
The exhibition blends science, history, and art to…
Crafting a Continuum -- Art Exhibit
ARTsySTEM: The Changing Climates of the Arts and Sciences
This exhibits showcases works of art that share a…
If you need to create a new entry or update the current information, please contact us.
The following 28 result(s) start with U:
- Uintah Basin Campus
- Undergraduate Degree Plans
- Undergraduate Degrees
- Undergraduate Research
- Undergraduate Scholarships
- University Catalog
- University Inn
- University Press
- University Retention Committee
- University Studies
- USU Analytical Lab
- USU Botanical Center
- USU Eastern
- USU Greats
- USU Tree Identification
- Utah Agricultural Experiment Station
- Utah Assistive Technology Program
- Utah Climate Center
- Utah Conservation Corps
- Utah History Fair
- Utah Public Radio (KUSU)
- Utah Science, Technology And Research initiative (USTAR)
- Utah State Magazine
- Utah State Today
- Utah Statesman
- Utah Transportation Center
- Utah Veterinary Diagnostic Laboratory (UVDL)
- Utah Water Research Laboratory


text:
Walking is that one thing I have never given up. Whenever I travel, I always make it a point to take the long, scenic route on foot, especially that walking is the only form of exercise I get these days. Even when I'm not traveling, walking has been my therapy. Manila may not be the most walkable city on the planet, but there are a lot of things to see, find, and discover.
If you're Manila-bound, here are tips for an enjoyable bounce around the city!


text:
Winnipeg Free Press - PRINT EDITION
Bridge plaza needs vision
The Esplanade Riel, with its restaurant plaza looking out over the Red River, has become one of the city's iconic images, a favourite for TV news cameras, postcards and admiring visitors.
Although it will be overshadowed eventually by the Canadian Museum for Human Rights as the city's most recognizable image, the pedestrian bridge/restaurant will always be a vital landmark and an important link between downtown Winnipeg and the francophone community in St. Boniface.
Unfortunately, the same cannot be said of the restaurant itself, Salisbury House, which was selected by the city seven years ago following a competitive process. The chain is a Winnipeg institution and thousands of people love its food, but it has proven to be the wrong concept for that location. The company claims it is losing money on the bridge and it tried to negotiate a new deal with the city, which decided instead to issue expressions of interest for a new operator.
The selection of the restaurant disappointed many people who felt it was too low-end -- only a notch above a McDonald's, critics said -- and it would not attract many people.
It seems somewhat puzzling the city's most iconic destination has not been enough to sustain a 32-seat restaurant, but the idea a higher-end restaurant would be any more successful is also dubious.
A destination location and a destination restaurant don't necessarily add up to success.
The problem is the appeal of the site is also its weakness.
Winnipeggers won't walk too far in winter to reach a restaurant. They'll walk a long distance to get from their parked cars to the front door of IKEA, but restaurants are another matter, according to industry experts.
As a result, few people were prepared to brave the winter winds to reach the bridge eatery, and the same was probably true on rainy days. The restaurant even had a clause in its contract that allowed it to close for 90 days in the winter.
At the same time, however, another group of partners was announcing plans to open a so-called pop-up restaurant on the ice at the junction of the Red and Assiniboine rivers.
The steel-and-aluminum structure will only be open until Feb. 13, but the partners are confident they can sell 1,000 tickets at $85 a plate, plus beverages, in the 20-seat restaurant by that time. That would be enough to meet costs and possibly show a small profit.
Time will tell if it succeeds, but the proponents are optimistic, because what they are selling is different, unique and fun. People will walk across a frozen wasteland to get to it, or so they hope.
The same general concept should be applied to the restaurant plaza on the bridge. Instead of seeking a new restaurant operator -- or, more likely, the same one -- the city should look for new ways to maximize use of the space all year round.
Coun. Dan Vandal (St. Boniface) is suggesting something more versatile, much like the restaurant industry itself, which constantly reinvents itself to avoid becoming boring. In the winter, it could be leased for special events and functions, including the Festival du Voyageur, while serving as a place to purchase unique Manitoba foods or even a mini-library at other times, Mr. Vandal suggests.
It's an undeveloped idea, but the problem is no one has been thinking about how to turn it into authentic public space, or a place people go to meet, discuss issues, listen to music, have a beer and so on.
The city's call for expressions of interest expires in two weeks, but unless a remarkable idea steps out of the blue, the city should not settle for another fast-food outlet.
The Sals was only paying $2,000 a month in rent, and it won't pay that much if the city decides to renew the lease, so it's not like a fortune is at stake.
The decision to build an indoor plaza on the bridge showed remarkable courage and foresight, but stronger ideas are now needed to make it a vital part of the community.
Editorials are the consensus view of the Winnipeg Free Press' editorial board, comprising Catherine Mitchell, David O'Brien, Shannon Sampert, and Paul Samyn.
Republished from the Winnipeg Free Press print edition January 16, 2013 A10
Fact Check
Have you found an error, or know of something we've missed in one of our stories?
Please use the form below and let us know.
Having problems with the form?Contact Us Directly
More Latest News
You can comment on most stories on winnipegfreepress.com. You can also agree or disagree with other comments. All you need to do is be a Winnipeg Free Press print or e-edition subscriber to join the conversation and give your feedback.
You can comment on most stories on winnipegfreepress.com. You can also agree or disagree with other comments. All you need to do is be a Winnipeg Free Press print or e-edition subscriber to join the conversation and give your feedback.
Have Your Say
New to commenting? Check out our Frequently Asked Questions.
The Winnipeg Free Press does not necessarily endorse any of the views posted. By submitting your comment, you agree to our Terms and Conditions. These terms were revised effective April 16, 2010.
- Back to Top
- Return to Latest News
More Latest News
(1 of 50 articles for this week)
Sure things: Death, taxes and Pavelec in the pipes03/28/2015 7:16 PM 0
Photo Store Gallery
Most Popular
- Local businessman has a plan for a Winnipeg without rail lines
- Future Shop stores closing, some converting to Best Buys, 1,500 jobs lost
- For owners of dance club / 1980s-style arcade, finding vintage amusements was the hardest part
- There's been little progress in uniting the NDP since leadership turmoil
- Free Press to roll out affordable, user-driven access to news
- The XXX Factor: Sex and relationships in a digital world
- For cancer survivor Don Dietrich, heaven is a hockey rink in the Rockies
- Arts, shopping, nightlife... wait a minute, this is Saskatoon?
- Winnipeg's Nostalgia Radio finds supporters and success as non-profit co-op
- Sure things: Death, taxes and Pavelec in the pipes
- Zayn Malik says he was unhappy in One Direction but tried to keep going for the fans
- Maternity home to offer shelter to homeless pregnant women
- Local businessman has a plan for a Winnipeg without rail lines
- U of W approves indigenous course requirement
- Snowfall warning lifted, but be careful on morning commute
- Some schools closed due to snow, power outages
- Significant snowfall likely for southern Manitoba
- Man facing impaired driving charge after fatal ATV crash says he had alcohol after the crash
- Family shattered by loss of four young sons
- Brothers headed to prison after attacking their mother's dealer
- Police help pull man from burning car
- Father fined for not helping injured son
- Court gives woman right to seek settlement years after she divorced man who became millionaire
- No olive branches from Manitoba premier who escaped caucus revolt
- Kids of comedian killed in crash that injured Tracy Morgan get $10 million Wal-Mart settlement
- Moose's return to Winnipeg appears just days away
- Family shattered by loss of four young sons
- 'American Horror Story' cast member Ben Woolf dies at 34 after street accident
- The Hockey News proclaims Jets '2019 Stanley Cup champions' in annual Future Watch issue
- Selinger wins on second ballot at NDP leadership convention
Ads by Google


text:
Do you care?
(Looks like maybe the same ad agency that did that sweet 16th-and-Mission-themed Nike campaign.)
(Thanks for the photo, John S.)
Do you care?
(Looks like maybe the same ad agency that did that sweet 16th-and-Mission-themed Nike campaign.)
(Thanks for the photo, John S.)
Capp Street Crap, the best hard news source in the Mission, talked to the House of Jeans folks AND their new landlord:
A little over three decades ago, the clothing store at 2645 Mission near 22nd Street did such a gangbuster business that owner Norm Anand launched more than a dozen other stores along the street based on that success. Now, as the tony new condo project Vida takes shape and the Alamo Drafthouse Cinema prepares to open on the street next year, Anand is down to just three stores and working on shuttering the flagship business due to what he claims are the unscrupulous tactics of his new landlord.
On May 29, Mission 22nd LLC acquired 2639 to 2645 Mission Street, a three-story, 11-unit building, which is also home to a sports store and residential units. As a result, House of Jeans' rent went from $4,350 to $6,500. Then, a month ago, Anand said he received a 3-day notice to vacate and was told he owed back rent. Anand still has three-and-half years left on his lease and said he owes nothing save for September rent which he is withholding at the advice of his lawyer. He claims the landlord agreed to buy him out if the landlord terminated the lease early, is now reneging on that deal, and that the rent money he supposedly owes is for months before the sale of the building.
Read on for lots more ins and outs and quotes from both parties. (Including one about big pockets.)
Dolores Park Works reports:
Completion of the North Side of the Dolores Park improvement project is now expected to be early 2015, a 4 month delay. Jake Gilchrist, manager for the project told us that unforseen problems were discovered during excavation of the foundation for the new maintainance shed. Excessive ground water was uncovered and had to be extracted before the contractor could continue and the soil then had to be reinforced to stabilize the area.
When the north side is finally done, the south side will be closed off and slowly improved too. The whole thing is still supposed to be done by late 2015. Read on for more info and pics.
Whoa, there was a lot of helicopter noise all of a sudden and I looked up and my backyard was completely filled with smoke. It was like something out of Apocalypse Now. And then it passed. And then MonkeyBrains tweeted us this pic:
UPDATE: CBS has all the info.
UPDATE: From reader Jesse F., some striking photographs:
It's a legendary place. You know you wanna.
Here's the deal, according to Craigslist:
We are three women looking for a new officemate to share our unique space inside an incredibly unique arts collective space located in the Mission District. You are a full- or part-time creative freelancer type person, but we're also open minded.
The shared space is an open 25″ x 10″ room with two white walls, one bright sea green wall, and one black wall. We have built three desks into the space using redwood and welded rebar. We also created a small chill space with two chairs, a coffee table, a record player, and a bar set-up. We'd love your creative input and help in finishing the design of the space, if that's something that interests you.
We are not directly inside the arts space but rather right next door to it. We are considered part of the community and have access to the shared space inside, including a magical events space and kitchen/bar area. Other tenants include filmmakers and a community radio station. On the first floor is a gallery space that is currently being built out. Our space is on the second floor and there is a working elevator.
[via @eviloars]
Yeah, remember when this was Spanish-language beer ads for like ever? And oftentimes just blank?
Different times!
[Photo and title (and additional reporting) by Tanya Wheeler]
From our favorite Oakland personality Ryan Christopher Parks:
The Sears is being demolished and turned into lofts.
[Photo by Google Maps]


text:
We believe special moments deserve quality photos. Take your camera.
We are...
Home Lovers: USA handmade.
Great Teammates: Adults with disabilities package and ship our products.
Smarty Pants: Padded. Waterproof. Patented Design.
Free Domestic Shipping March 2015
Top Picks
On Sale
On Sale Best DSLR Camera Bag for Women Traveling | Ava *Waterproof Rain Slicky | USA Handmade $30.00 On Sale
On Sale DSLR Camera Bag for Women | *Waterproof Padded Rain Slicky DSLR Camera | USA Made Camera Gear $30.00 On Sale
On Sale Best Gear for Disneyland | Free Spirit Blue {*Waterproof} Rain Slicky | Mod Padded Camera Cover $30.00 On Sale


text:
Coming up in the next {{countdown}} {{countdownlbl}}
Coming up next:
Skip to this video now
Now Playing:
Related Videos
Now Playing: {{itm.title}}
Play Video
This transcript has been automatically generated and may not be 100% accurate.
Obama 'Pastor' Witnessed Faith in the White House
Joshua DuBois reveals details of the president's spirituality from inside his inner circle.
Celebrity Doubles Get Rich
Regular people who resemble celebrities can make a lot of money doing appearances.
Now Playing: Obama 'Pastor' Witnessed Faith in the White House
Now Playing: Celebrity Doubles Get Rich
Now Playing: Drug Overdose Suspected in Rapper's Death
Now Playing: 'Downton Abbey' is Coming to an End
Now Playing: Friday Rewind: Germanwings Plane Crash
Now Playing: Insomniac Theater: "Home"
Now Playing: Final Minutes of Germanwings Flight
Now Playing: Tom Kelly Talks About Facing UFC Champ Rhonda Rousey
Now Playing: Basketball Player Has Embarrassing Moment at Press Conference
Now Playing: Zayn Malik Leaves 'One Direction'
Now Playing: McDonald's Launches Big Mac Clothing Line
Now Playing: French Alps Crash Investigation
Now Playing: Germanwings Plane Crash Investigation
Now Playing: Gentle Giants to the Rescue!
Now Playing: Reactions to Angelina Jolie's Latest Surgery
Now Playing: 24 Hours After German Airbus A320 Plane Crashes in French Alps
Now Playing: Family Game Night
Now Playing: Happily Ever After
Now Playing: A Unique Twist On A Seafood Staple


text:
Change Font Size: Decrease Font Size Increase Font Size
fx: 'fade',
easing: 'backout',
delay: -4000
Have a question? Check our FAQ section for the answer.
Find and order the standards you need, quickly and easily.
NSAI wish you a Happy St Patrick's Day with festive artwork...
Get involved in the establishment of this Technical Committee. More...
LEO & NSAI EN 1090-1 regional workshops. Book your place.
Eurocode 3 - Design of steel structures. Read more...
Call for new members. Read more...
I.S. EN 1997-1:2004 + A1:2013, Eurocode 7: Geotechnical design – Part 1: General rules. Read the draft & submit your comments...
Look Out for Safety Standards on Toys this Christmas. Read more...
I.S. 399 will Save Businesses Millions on Investment Projects. Read more...
Period of public consultation. Read more...
Good Design Enables and Bad Design Disables. Read more...
Copyright © 2009 NSAI
1 Swift Square, Northwood, Santry, Dublin 9, Ireland
T: +353 1 807 3800 F: +353 1 807 3838 E: email@example.com
Follow Us
RSS Feed
Legal Policy |
Accessibility |
Site Map |
External Links |
Contact Us
This site is best viewed in Internet Explorer 7.0+, Firefox 3.0+ and Chrome 3.0+
esolution created by Elucidate - Web strategy


text:
I love to spend time outdoors. I enjoy fishing,snowboarding and spending a few hours on my motorcycle. I am fairly laid back and easy going. I love to keep things simple. I'm not really to sure about this online dating thing but here we Go.
Join OkCupid
Find better matches with our advanced
Find better matches with our advanced
matching system
—% Match
—% Enemy
26 • Derry, NH • Man
I'm looking for
- Women
- Ages 21–30
- Near me
- Who are single
- For new friends, long-term dating
My details
- Last online
- Apr 4, 2014
- Orientation
- Straight
- Ethnicity
- White
- Height
- 6′ 0″ (1.83m)
- Body type
- Athletic
- Diet
- Anything
- Smokes
- No
- Drinks
- Socially
- Drugs
- Never
- Religion
- —
- Sign
- —
- Education
- —
- Job
- Construction
- Income
- —
- Status
- Single
- Type
- —
- Offspring
- Doesn't have kids
- Pets
- —
- Speaks
- English
Similar Users
My self-summary
Write a little about yourself. Just a paragraph will do.
What I'm doing with my life
Don't overthink this one; tell us what you're doing day-to-day.
I finished school a couple years ago and now currently working as a Telecom tech down in Boston.
I'm really good at
Go on, brag a little (or a lot). We won't judge.
Creating awkward moments, making people laugh and making the best out of a bad situation.
The first things people usually notice about me
I'm an empty essay… fill me out!
My sense of humor.
Favorite books, movies, shows, music, and food
Help your potential matches find common interests.
The hang over, The sandlot, beerfest, I love watching the bruins and patriots. I'm a big fan of how I met your mother and scubs.
I love sushi. Never thought I would but i tryed it and haven't looked back.
I love sushi. Never thought I would but i tryed it and haven't looked back.
The six things I could never do without
Think outside the box. Sometimes the little things can say a lot.
The outdoors
The gym
My motorcycle
The outdoors
The gym
My motorcycle
On a typical Friday night I am
Netflix and takeout, or getting your party on — how do you let loose?
I'm out with friends killing a few pumpkinheads.
The most private thing I'm willing to admit
I'm an empty essay… fill me out!
I secretly enjoy nickelback when it comes on the radio. Ouch
You should message me if
Offer a few tips to help matches win you over.
You want to?
Connect your existing OkCupid account
Sign in
Welcome Back!
Restore your account to continue meeting new people.
Reset your password
We'll email you a link to reset it.
Email sent!
An email is on its way to . If you don't see it, try checking your Spam folder.