text:
Top Definition
The highest level of the Roman Catholic clergy. Rules over an area called a diocese. Can ordain priests. Wears a tall, pointed hat called a miter; carries a staff called a crosier; wears a large cross and a large ring. Answerable to the pope.
Did your bishop just checkmate my king?
από ScottX 15 Οκτώβριος 2005
25 more definitions
A term for Skunk.
Smoking a bish, got any bishop, wrap/ skin a bishop.
από ZZNA 21 Οκτώβριος 2009
A female in an upright or elevated position.
That ho fell over, and I had to help the Bishop!
από Magikid2 9 Νοέμβριος 2013
(Spoiler) Shoots all of his friends in the movie Juice
Man I think Bishop lost it
από Ron Jermy 22 Ιούνιος 2014
bishop is usually known as an asshole. he doesnt know how to treat girls right. he will make a girl feel like they are on top of the world & in a flash he will make a girl feel like shit. he only wants to get in someone pants. hes rude & gets jealous very easily. he is usually very annoying. & very very very perverted.
bishop: "hey, has anyone ever told you, you're beautiful?"
girl: "awe thanks!"
bishop: "im just kidding, you're fucking annoying & ugly."
girl: "awe thanks!"
bishop: "im just kidding, you're fucking annoying & ugly."
από ilikepink337 7 Ιανουάριος 2012
a loving , careing , sweet person with a great sence of humer.The lady's man
that bishop was soo sweet
από dhggkegdl 25 Οκτώβριος 2009
Another Word For A Penis.
"Oh My God, Your Bishop's HUGE"
από Cal Hanley 22 Αύγουστος 2006


text:
Riches to Rags: 6 Celebs Evicted From Their Mansions
Caitlyn Jenner Shares Magnificent Father's Day Photo
This Girl's Fake Pregnancy Prank Totally Backfired
Michael Jackson's Daughter Paris Reveals Her Boyfriend
Hollywood's Weirdest Couple Is Staying Strong
This 9-Year-Old Model Is Being Called the "Most Beautiful Girl in the World"
The Science of Willow & Jaden Smith
Halle Berry Just Dropped Major Surgery News
How Older Women Are Losing Weight
Emma Watson's Intentional "Side Boob"
Celebrities with Diseases: You'll Be Surprised by Who Has Been Diagnosed
Miley Cyrus and Her New Man Caught in The Act
10 Celebrity Eccentricities
Did You know These Stars Were Born Rich?
What Does Kylie Jenner Look Like Without Makeup?
Best Celebrity Beach Bodies of 2015
5 Celebrities You Didn't Know Where Adopted
Watch Miley Cyrus Fall Down on Stage Wearing a Fake Butt
Taylor Swift's BFFs Majorly Betrayed Her
You Won't Believe How Brad and Angie Travel
Weighing in on 8 Celebrities Weight
Famous Kids: Where Are They Now?
The 5 Most Devastating Celebrity Break-Ups
Inside The Lavish World of 1 Year Old North West
Caitlyn Jenner Shows Off Her Tomboy Side
Halle Berry Can't Keep it Together: The Latest Drama Unveiled
Teresa Giudice Comes Clean About Posh Prison Life
It Turns Out Paris Hilton Can Actually Act
9 Crazy Ways Sia Has Covered Her Face
The Worst Celebrity Beach Bodies

subset: commoncrawl


text:
Steaks With Mushroom Wine Sauce
|2 Tablespoon
|2 Large, cut into 1/2 inch-thick slices
|Beef rib eye steaks/Boneless top loin steaks
|2 (Each About 3/4 Inch Thick)
|To Taste
|To Taste
|Medium mushrooms
|1⁄4 Pound, sliced
|Dry red wine
|1⁄3 Cup (5.33 tbs)
|1⁄4 Cup (4 tbs)
|1⁄2 Teaspoon
|1⁄4 Teaspoon
|Parsley sprigs
|2 (Garnish)
1. In 12-inch skillet over medium heat, in 3 tablespoons hot butter or margarine, cook onions, stirring occasionally, until tender and golden. Push onions to side of skillet.
2. Place steaks in skillet; over medium-high heat, cook steaks until browned on both sides, about 8 minutes for rare or until of desired doneness. Sprinkle with salt and pepper to taste. With slotted pancake turner, remove steaks and onions to warm platter.
3. In drippings in skillet, over medium heat, heat 1 tablespoon butter or margarine until melted; add mushrooms; cook until mushrooms are tender, stirring occasionally. Stir in wine, water, sugar, and basil; over high heat, heat to boiling, stirring to loosen brown bits from bottom of skillet. Pour sauce over steaks. Garnish with parsley sprigs.


text:
SAN ANTONIO — Becky Hammon is about to become the first woman to serve as the head coach of
After missing targets at the start of free agency, the Sacramento Kings finally filled out their
Derrick Williams is headed to New York looking for another chance to fulfill the promise he once
ORLANDO, Fla.
Becky Hammon had known for some time that she was going to be coaching San Antonio's summer l
LaMarcus Aldridge got the answers he needed from the San Antonio Spurs.
ORLANDO, Fla. — On the first day of free agency, Goran Dragic committed to return.
DALLAS — DeAndre Jordan has chosen the Mavericks over the Los Angeles Clippers in what turned in
LOS ANGELES — The Los Angeles Clippers secured a giant lure in their pursuit of DeAndre Jor
PHOENIX — The Phoenix Suns took care of their top offseason priority by bringing back Brandon Kn
INDIANAPOLIS — The Indiana Pacers got the shooting guard they coveted.
OAKLAND, Calif. — No need to seek out an offer sheet in restricted free agency.
As one of the most coveted big men on the free agent market, Greg Monroe had his choice of destin
SAN ANTONIO — Tim Duncan is returning to San Antonio for a 19th season.
The Sacramento Kings have agreed to send Nik Stauskas, Jason Thompson and Carl Landry to the Phil
MIAMI — After 12 years with the Miami Heat, Dwyane Wade needed a reminder of how much the franch
NEW YORK — Arron Afflalo is about to team up with Carmelo Anthony again.


text:
Pakistani actress Mahira Khan, known in India for her role in Shoaib Mansoor's "Bol", is satisfied with her small screen work back in her homeland. Even while many from her nation have come and carved a niche in the multi-billion dollar Indian film industry, she says she has no such aspirations.
"I don't want to be a Bollywood star for sure because the kind of stardom that we get from Pakistan, I am very happy with that. So becoming a Bollywood actress is not something I am aspiring to do," Mahira, who played Ayesha in "Bol", told IANS.
Pakistani actresses like Salma Agha, Zeba Bakhtiar, Somy Ali, Meera and Veena Malik, and actor Ali Zafar are among those from across the border who have pursued their love for acting here.
The Indian film industry is growing by leaps and bounds, and the film industry in Pakistan is not as big, but Mahira is nonchalant. She says their television industry is stronger, and has given her a chance to play strong characters.
The 27-year-old essayed the role of Khirad Ehsan in TV serial drama "Humsafar", which became one of the most widely-known dramas of the Pakistani TV industry. She was praised for her performance by critics and fans alike.
"After 'Bol', I did a serial called 'Humsafar' which was bigger than any movie that has come out in Pakistan and it did extremely well. It was maddening to see the reaction of both critics and fans, so I thought let's just give it a break for sometime and then take another project.
"Also in Pakistan, movies are not bigger as our industry is not that big. One movie coming out in five years is not tremendous. What we have is TV, which is at par. Stars there are TV stars, so I am enjoying that and honing my skills as an actress," she said.
The actress was born in Karachi and pursued her higher education in Santa Monica Community College, Los Angeles. Her first tryst with showbiz came as a video-jockey when she was 16 years old. She had no dreams of becoming an actress.
But Indian dancing diva Madhuri Dixit's performance and dance moves in the 1989 film "Ram Lakhan", tempted her towards the art.
"I became an actress only because of Madhuri Dixit. I was watching 'Ram Lakhan' and her song "Bada dukh dina o ramji" was coming. The moment I saw it, I told my mother, 'I want to do it, I want to be on TV'," said Mahira.
She was recently in the capital to attend the opening of PFDC-The Boulevard, a one-stop shop for designer wear from Pakistan. She feels welcome whenever she comes to India.
"I don't feel like I am in some other country or neighbouring country. I just feel like I am in another city. Starting from the cab driver to the immigration officers to the truck driver, it's so so warm to be here. I hope this remains with me everytime," she said.
A fan of Ranbir Kapoor and Vidya Balan, she also feels happy that "India is becoming a hub of good scripts".
"Films like 'Rockstar' and 'Ishqiya' brought revolution in the Hindi film industry. There are many movies today that are nicely written. I love the kind of cinema Vishal Bhardwaj makes," she said.
"When it comes to stars, Ranbir Kapoor is my favourite. The way he has managed to mould his career at such a young age is just unbelievable. Also Vidya Balan is just too good. For me, she is an actor," she added.
Mahira said her future plans include one project from India and a few Pakistani projects -- but she did not reveal any details.
Do you like this article?
|User Rating
|(73 Votes)
|princeadeel2012, fairy2008, dot3, annieeee, xoxmehekxox, Fatima82, aanopaari, sonisaim, Aisha_Nisar, prernade, Nu_Adu, fk_sb_ak, Moody_Barbie, mahirakhan9, arnav_addicted, Anfal, Mrinmoyee, KaSh-Rox, saba_90, ashi4567, doc42, -Siaa-, blue-eye, desigrl414, Princess13., huny.thebest, shivani_gupta, Teh_Batman, Goonies4Ever, nikki.171, aquariun26, -Gunners-, goldrush, Innocent02, InvisibleSmile, Koolsmile, MsLuscious, --Iqra--, Bye_Bye_if, -Alina-, IndefiniteLOVE, samicute, sanu3108, MagicLantern, koolgurl, .SilentPrincess, crysind, -Sadiaa-, Raindrops., Ameres, sehar mehrotra, sofiaaax., XSilentPrayersX, Yum_SR, Huma-, -Muskii-, nneeiill, sonu-monu, CandYlicious_S, rahmona_pakswe, .Sad.But.True., Sandy-Naz, Billu-Maamma, -Marie-, _Maggie_, -Maha-, sonia_koolkhan, -MamuKiBhanji-, ZumSrK., pickachu, Silent.Dreamer, serendipity., undisclosed
thanks for the article IF :)
Mahira you beauty, you rock girl!
so proud of you :D
Love u Gorgeous!!
u rock!!
She was too good in Humsafar, Really one of the best Pakistani Drama.
Nice article
God bless her...
@dspandana she talking abt serials not actress &actors ...!
Mahira, you are a great actress. Loved you in Humsafar, Bol and now in Shehr-e-Zaat
Edit: I'm so sorry I forgot to say thank you IF for getting an article on Mahira
Edited on:23 September 2012 at 1:52am
@crystalalena: oh really then wat r u dng in india forums with drashtis Dp...
mahira u are doing a very good jbo in pakistani serials...pakistane serials are way better than indian serials..they have some unique and different story.we can get lesson from every serial.all the best for future girl.
MAHIRA...LOVEDDD YOUUU AS KHIRAD... <3 i hope to watch shehr e zaat on dvd soon ! u r amazing !! xox all the best wid future projects.
After Salman its time for Shah Rukh to give Eidi to his fans.
Deepika Padukone feels that her on-screen chemistry works better with ... 2
Views : 1829
Comments :1
Views : 1240
Comments :0
Views : 804
Comments :0
Views : 592
Comments :0


text:
Stores »
Organize the food you like to order. nuff said.
We are a community of shoppers sharing our best finds from across the web.
© 2015 ThisNext, Inc. ThisNext is a member of BUZZMEDIA Entertainment, a division of BUZZMEDIA.
Create your own free digital magazine at our new site Glossi.com


text:
Exotic Eastern Canada-Northern Latitudes 2010. Trans-Taiga, Trans- Labrador & beyond.
View Single Post
Gravel Runner
Joined: Jul 2007
Oddometer: 4,591
Day 14:
ate year="2010" day="3" month="9">
Friday 9/3/10
, NL to Baie Verte, NL, 382 miles
I got up at 5 eastern time, but it already
local, I still dont know about that extra 30 minute deal. The only comment Ive heard about it so far was Those bastards over in
St. Johns
did it, but that wasnt an explanation of why. The day is clear this morning, the sky as blue as it gets, and will make a great start. When I strap the spare TKC on the back, I realize that Im sick of this stupid tire. One way or another Im getting rid of this thing today, I aint carrying it around no mo even though the mounted rear has some miles left on it.
I backtrack down 430 and find time to stop to look at some things I couldnt when I was northbound in the rain. The 430 points to at least two activities peculiar to this road. One is the unbelievable quantity of firewood that is cut and stacked along the road. Its all spruce and cut free on Crown land, an economical way to heat if you dont count your time.
The second is the highway garden, small plots along the road, usually fenced, and sometimes a good long ways from the nearest house. Im not sure why these small gardens are out there rather than next to the house, but theyre plentiful.
Traffic has started very light on this sunny day, but builds gradually as the morning progresses. The road passes through a series of small towns dotting the coast, the towns all having a connection to the water. Conspicuous in all of these towns are the new homes, some with designs straight from the pages of Stateside magazines, indicating money coming home from the
oil and gas operations. I was never able to get a handle on how many Newfys moved west permanently, or are working out there and flying back and forth, but it must be a significant number.
There are lobster pots stacked along the road, some guys are still around working the water. The land between the road and the water seems to be used as a general storage area for pots, firewood, and equipment.
Some old wooden skiffs have survived the transition to aluminum and fiberglass, but most were probably burned when they got in the way. You rarely find the graceful lines of these old boats in anything new. Back in the day, no waterman wanted to work out of an ugly boat, but now most are utilitarian designs so that issue is not as important.
Not all the small towns have fuel, so when I find an open station, its time to stop. Three ADV bikes go by in a blur northbound and I dont get a good look at them, could be the
boys, but missing one of the crew. Two older fellas are running the store, and we get a good run of stories going out at the pumps. One of the guys asks Do ya have another pair of boots on under those or are those your feet? Now hold on a minute here, what are these guys trying to tell me? No boots, just feet and socks, and they both start laughing, I guess they havent seen size 14s lately. We move story hour into the store, drink a bunch of their coffee, and try to outdo each other in the lies department. It was two agin one, but I was holdin my own. One of the old guys was a rider and complained that all the Harley riders around there would only give the low peace to other Harleys, except that some of those bikes were Jap look-alikes. Couldnt say, most everyone waves to me. Gotta go my friends, and Im southbound.
This is a scenic bike road and follows the coast closely enough to see the water most of the time.
Some small lakes are east of the road if you get tired of looking at the ocean.
The ocean to the west is spectacular on this sunny day.
The topography becomes more rugged again the farther south I get and closer to
National Park
Fishing shacks are clustered on level ground with access, but some dont look like theyre used much or at all anymore, too many men gone.
In the distance are huge headlands that must be landmarks for those at sea, but impressive by land also.
More fishing shacks and lobster pots as I move south along with more traffic, and its getting less convenient to stop.
(To be continued )
View Public Profile
Find More Posts by jdrocks


text:
Lindsay Lohan is currently here on the east coast "working," and she's apparently so bored that she's busy posting topless photos of herself on Twitter. Kinky, yes – but do you expect anything less from the girl who poses in a sparkly crop top while licking her lips? Our favorite washed-up starlet partied at the AXE Lounge in the Hamptons over the weekend, in an outfit that surely did her native Long Island proud. [Photo: GettyImages]
View Photo Gallery


text:
The certificate revocation lists at access points of a wireless access network can be reduced. In one embodiment, an Internet Service Provider ("ISP") connected to the wireless access network can receive a subscription request from a user terminal capable of accessing the ISP using the wireless access network. When the ISP assigns a subscription identifier to the user terminal, it also provides a service certificate signed by a certificate authority including the subscription identifier. In addition, the ISP also provides the user terminal one or more session certificates to be used to access the wireless access network, where the session certificates having a shorter validity period than the service certificate.
1. A method comprising:
receiving a subscription request at an Internet Service Provider (ISP) from a user terminal through an access point of an access network;
assigning a subscription identifier to the user terminal at the ISP in response to the subscription request;
generating at the ISP a service certificate signed by a certificate authority and that includes the subscription identifier to identify a subscription of the user terminal with the ISP;
adding the service certificate to a certificate revocation list (CRL) maintained by the ISP;
receiving the service certificate from the user terminal at the ISP;
checking the service certificate against the certificate revocation list (CRL) maintained by the ISP; and
providing from the ISP, to the user terminal, if the service certificate is valid, a session certificate to be used to access the access network through the access point, the session certificate having a shorter validity period than the service certificate.
2. The method of
3. The method of
4. The method of
5. The method of
6. A method comprising:
receiving a digital certificate at an access point of an access network from a user terminal seeking access to the access network, the digital certificate to be used to authenticate the user terminal;
determining, at the access point, a type of the digital certificate;
if the certificate is a session certificate, then determining the validity of the digital certificate by searching a certificate revocation list (CRL) at the access point that is associated with session certificates; and
if the certificate is a service certificate, then sending the certificate to an Internet Service Provider (ISP) to determine the validity of the certificate.
7. The method of
8. The method of
9. The method of
10. A user terminal capable of communicating with an access network, the user terminal comprising:
a memory to store:
a service certificate issued by an Internet Service Provider ("ISP") and signed by a certificate authority, the service certificate having a first validity period, the service certificate corresponding with a subscription of the user terminal with the ISP and including a subscription identifier, the service certificate to be used by the access network to authenticate the user terminal with the ISP; and
a session certificate issued by the ISP and signed by the certificate authority, the session certificate having a second validity period that is shorter in duration than the first validity period, the session certificate corresponding with a session subscribed to by the user terminal and to be used by the access network to authenticate the user terminal to an access point of the access network.
11. The user terminal of
12. The user terminal of
13. A machine-readable storage medium having stored thereon data representing instructions that, when executed by a processor of an Internet Service Provider ("ISP"), cause the processor to perform operations comprising:
receiving a subscription request at an Internet Service Provider (ISP) from a user terminal through an access point of an access network;
assigning a subscription identifier to the user terminal at the ISP in response to the subscription request;
generating at the ISP a service certificate signed by a certificate authority and that includes the subscription identifier to identify a subscription of the user terminal with the ISP;
adding the service certificate to a certificate revocation list (CRL) maintained by the ISP;
receiving the service certificate from the user terminal at the ISP;
checking the service certificate against the certificate revocation list (CRL) maintained by the ISP; and
providing from the ISP, to the user terminal, if the service certificate is valid, a session certificate to be used to access the access network through the access point, the session certificate having a shorter validity period than the service certificate.
14. The machine-readable storage medium of
15. The machine-readable storage medium of
16. The machine-readable storage medium of
17. The machine-readable storage medium of
18. The method of
19. The user terminal of
20. The user terminal of
1. Field of the Invention
The present invention applies to the field of hardware authentication, in particular to terminal authentication in a wireless network.
2. Description of the Prior Art
Hardware authentication, also sometimes referred to as entity authentication, is the process of verifying a claimed or presumed identity. In the context of a wireless access network, hardware authentication is used to verify that a an entity is indeed the entity it is claiming to be. For example, a hardware authentication can verify that a terminal claiming to have a certain MAC address really has the claimed MAC address. Without hardware authentication, unauthorized user terminals could steal the resources of the wireless access network, and uplink and downlink communications between legitimate user terminals and access points may be intercepted and eavesdropped.
Hardware authentication in wireless networks is currently accomplished by time varying challenge-response protocols. In a typical challenge-response protocol a claimant proves its identity to a verifier by demonstrating knowledge of a secret known to be associated with the claimant.
One problem with challenge-response protocols is that the verifier needs access to a secure database to identify the secret the claimant should have. Furthermore, such protocols require several message exchanges and on-the-fly encryption that can slow down network access.
The certificate revocation lists at access points of a wireless access network can be reduced. In one embodiment, an Internet Service Provider ("ISP") connected to the wireless access network can receive a subscription request from a user terminal capable of accessing the ISP using the wireless access network. When the ISP assigns a subscription identifier to the user terminal, it also provides a service certificate signed by a certificate authority including the subscription identifier. In addition, the ISP also provides the user terminal one or more session certificates to be used to access the wireless access network, where the session certificates having a shorter validity period than the service certificate.
The present invention is illustrated by way of example, and not by way of limitation, in the figures of the accompanying drawings in which like reference numerals refer to similar elements and in which:
Wireless Access Network
An example system that can implement embodiments of the present invention is now described with reference to
The wireless access network 100 includes wireless access points 104 ("AP") to allow end user devices 106 ("EUD") to communicate using wireless user terminals 108 ("UT"). An EUD 106 is generally a mobile computing device, such as a laptop or notebook computer, a personal digital assistant ("PDA"), or a cellular telephone. However, an EUD 106 can be any other computing device, such as a desktop computer or a workstation.
A UT 108 can be implemented as a stand-alone unit, such as a PCMCIA card or box, or be integrated into the body of the EUD 106. One UT 108 can provide communications for just one EUD 106 or a group of EUDs 106. The UT 108 is a communications device analogous to a modem. The UT 108 can be responsible for radio communications and physical layer signal processing. Higher lever processing can be performed by either the UT 108 or a host EUD 106.
The UT 108 communicates wirelessly, e.g. using radio signals, with an AP 104. An AP can be a cellular base station, an 802.11 access point, or other wireless system access point, such as an i-Burst™ base station. Multiple APs can be connected by a switch 110 or router to centralize the connection to an Internet Service Provider ("ISP") 112 and to facilitate handoffs when a UT 108 moves from one AP 104 zone into another.
The ISP, such as America Online, Prodigy, and SBC among others, facilitates access to the Internet 102. Users of the EUDs 106 subscribe to Internet service with the ISP 112. The Wireless Access Network 100 allows these users to access the Internet 102 wirelessly.
In one embodiment, the switch 110 is also coupled with a management server ("MS") 114. The MS 114 can perform various network management functions, such as service authorization, statistics gathering, and over-the-air configuration for UTs 108.
Authentication Protocol
An example authentication protocol in which embodiments of the present invention can be used is shown in
When at a UT 108 arrives in the coverage area of an AP 104 it begins the registration process. Registration is a relationship that enables the UT 108 to exchange communications streams with the AP 104. The authentication protocol described with reference to
Since the authentication protocol described with reference to
To verify a certificate, one decrypts the signature with the published CA public key and computes the digest from the text message. If these two text strings match, then the certificate was indeed signed by the CA. There are commercial CAs, such as VeriSign, Inc., or a network operator can create its own CAs. Public key cryptography and its use to create and verify digital certificates is well known.
In one embodiment, the UT 108 has no independent time reference and receives its sense of time from the AP 104. For example, the AP 104 can include an absolute frame number in a broadcast burst or some communication addressed to the UT 104.
The authentication protocol can begin when the UT 104 receives the AP certificate in block 202. The AP certificate can include an identity of the AP 104, such as a media access control (MAC) address of the AP 104, which identifies the AP 104 either uniquely or network-wide. The certificate also includes the AP public key that corresponds with the private key of the AP 104. The AP 104 may use different public/private key pairs for different UTs 108. As explained above, the AP certificate is signed by a CA trusted by the UT 108.
In block 204, the UT 108 generates a shared secret. This shared secret is only known by the UT 108 at this point and will only be shared with the AP 104. The shared secret can be generated as a random sequence using a random number sequence generator. In one embodiment, at least a part of this shared secret will later be used as a master secret to encrypt communications between the UT 108 and the AP 104 using symmetric key cryptography. The necessity of establishing such a secret for symmetric key cryptography is well known.
In block 206, the UT 108 generates an authenticator string. One key purpose of the authenticator string is to demonstrate that the UT 108 is in possession of the UT private key corresponding to the UT public key contained in the UT certificate. Since the CA certifies that the public key belongs to the UT 108, any device having the corresponding private key is the authentic UT 108.
There are numerous possible authenticator strings that can demonstrate possession of the UT private key. For example, the UT can encrypt a part of the shared secret with the private key. In one embodiment, the UT 108 can generate an authenticator message and sign it with the UT private key. If the AP 104 can independently generate the authenticator message, the authenticator string can be the signature only.
In block 208, the UT 108 scrambles the UT certificate given to it by the CA. The UT certificate includes an identifier of the UT 108, such as its MAC address, and a public key associated with the private key used to sign the authenticator string. The certificate can include various other data fields containing information about the UT 108. One reason for scrambling the UT certificate is to hide the UT identifier. This makes tracking the UT 108 difficult.
In one embodiment, the UT certificate is scrambled using at least a part of the shared secret. In one embodiment, the bits of the shared secret that are used for scrambling are not reused for symmetric key cryptography later on. For example, the designated scrambling bits of the shared secret can be used to seed a linear feedback shift register whose output can be used to scramble the UT certificate. In one embodiment, the bits generated by the linear feedback shift register are XOR-ed with the bits of the UT certificate.
In block 210, the UT 108 encrypts the shared secret generated in block 204 with the AP public key contained in the AP certificate received in block 202. In one embodiment, the UT also generates a timestamp in block 212. The timestamp represents time as known by the UT 108. In one embodiment, the UT 108 derives its sense of time from the AP 104 as explained above.
In block 214, the UT 108 sends a message to the AP 104 that the AP 104 can use to authenticate the UT 108. In one embodiment, the message includes the shared secret generated in block 204 and encrypted in block 210, the UT certificate issued by the CA and scrambled in block 208, and the authenticator string generated in block 206. Furthermore, the message can also include the timestamp generated in block 212 to protect against replay attacks.
In one embodiment, the message is a UT parameters message, which in addition to the above, also includes a variety of other information, some of which may be encrypted with the AP public key. For example, the UT parameters message can also include such parameters of the UT 108 as the communication capabilities and preferences of the UT 108.
The ordering of the blocks in
In one embodiment, the UT 108 generates the shared secret in block 204 before registration even begins. In other embodiments, multiple shared secrets can be generated to be used for different access points 104. In one embodiment, The UT 108 generates the shared secret, block 204, and encrypts it with several stored AP public keys stored in memory, block 210, before ever receiving the AP certificate in block 202. Furthermore, once the shared secret is generated, block 204, it can be used to scramble the UT certificate, block 208, before registration even begins, and certainly before receiving the AP certificate in block 202. In other embodiments, the authenticator string can be generated in block 206 prior to receiving the AP certificate in block 202.
As demonstrated above, the blocks of
Referring again to
In block 222, the AP verifies the UT certificate by checking the CA signature and any validity period associated with the UT certificate. The UT certificate, as explained above, contains the UT public key, and the CA signature assures that this UT public key is assigned to a UT having the identifier, e.g., MAC address, also included in the UT certificate.
In block 224, the AP 104 authenticates the UT 108. This can be accomplished by using the authenticator string to verify that the UT 104 is in possession of the UT private key corresponding to the UT public key in the UT certificate. In one embodiment, the authenticator string is the UT signature over an authenticator message. The UT signature can be a digest, i.e. hash, of the authenticator message encrypted with the UT private key. Other digital signatures are also possible, such as encrypting the entire authenticator message, or a part thereof, with the UT private key.
In one embodiment, the AP 104 can generate the authenticator message and the authenticator message digest independently. In this case, the AP 104 decrypts the authenticator string with the UT public key, generates a digest of the authenticator message, and compares the decrypted authenticator string to the independently generated authenticator message digest. In this manner, the AP 104 can verify that the UT 108 is in possession of the UT private key paired with the UT public key in the UT certificate.
In one embodiment, the UT 108 can also request time certification. In such an embodiment, the UT's 108 sense of time is derived from the AP 104 when the UT powers up. Thus, at least when a cold-start is performed but in other situations as well, an unauthorized AP could use an expired certificate and give a UT a false time reference that makes the certificate appear valid. To mitigate this problem, the UT 108 can ask the AP 108 to certify the timestamp generated by the UT 104 in block 212.
If the UT 108 requests time verification, in block 226, the AP can certify the timestamp. The timestamp can be included in the UT parameters message as a protection against replay attacks, but it can also be used for time certification. In one embodiment, the AP 104 performs time certification in block 226 by forwarding the timestamp to a trusted time server ("TS"). The TS is trusted by the UT 108, and can be a CA, or any server known to be operated by the network operator or some other trusted entity.
In one embodiment, the TS certifies the timestamp and sends it back to the AP 104, which in turn forwards it on the UT 108. In one embodiment, in block 228, the AP 104 sends a registration parameters message to the UT 108 including various registration parameters—such as random access channels, a paging identifier, and a registration identifier—and the certified timestamp is included in this message. In other embodiments, the TS may communicate the certification directly to the UT 108, or by some other means besides the AP 104.
According to one embodiment described with reference to
User Terminal Certificates
The UT certificate signed by the CA that the UT 108 presents to the AP 104 during the authentication procedure has been described above in some detail. In one embodiment, there can be various different UT certificates used at different times. In one embodiment, the original UT certificate possessed by a UT 108 can be called the identity certificate.
In one embodiment, the identity certificate is tied to the hardware of the UT 108. One hardware identifier of the UT 108 is its serial number. More specifically, the hardware of a UT 108 is uniquely identified by its Ethernet address, or its hardware identity according to some other global addressing system. In one embodiment, this unique hardware identity, such as the serial number, is included in the plaintext of the identity certificate. An example identity certificate can contain fields such as:
Field 5 of this example identity certificate ties the certificate to the hardware of the UT 108. Such an identity certificate is unique, and can thus prevent cloning of—unauthorized masquerading as—the UT 108 the having the identity certificate. Furthermore, because the identity certificate requires no knowledge about the ISP 112 subscribed to by the user of the EUD 106, or the wireless access network 100 to be used to access the ISP 112, the identity certificate can be factory seeded into the UT 108 by the UT's manufacturer. As such, it can be used for initial authentication.
Such an authentication is described with reference to
In block 320, the identity certificate is sent to the AP 104 from the UT 108, for example as part of the message sent in block 214 of
Another type of UT certificate can be called a service certificate. In one embodiment, the service certificate is obtained in addition to the identity certificate. In other embodiments it can be the exclusive UT certificate. The service certificate is also signed by a CA, and can be issued to the UT 108 from the ISP 112.
The service certificate includes the subscription identifier of the UT 108 that corresponds to its subscription with the ISP 112. An example service certificate can contain, in addition to the fields of the identity certificate shown above, a field including the International Mobile Service Identifier (IMSI) of the UT 108, as assigned by the ISP 112. Other identifiers can also be used.
In one embodiment, the service certificate indicates the quality—or grade—of service granted to the UT 108 by the subscription. For example, if a user of an EUD 206 connection to the ISP 112 using a UT 108 chooses to subscribe to one high-speed data and one voice session, a code representing this grade of service can be included in the service certificate, either in the same field, or in a separate field than the subscription identifier.
Since the subscription identifier and the grade of service are not known at manufacture of the UT 108, they need to be downloaded at a later time. In one embodiment, this is done using the identity certificate, or some other factory seeded UT certificate. One embodiment of such a process is described with reference to
In block 420, the UT 108 is authenticated in a manner similar to that described above with reference to block 330 of
After the user exchanges subscription information with the ISP 112, for example, a selected level of service and a credit card number, the ISP 112 uses the certificate it received from the UT 108 to create a service certificate from the UT 108. To do this, the ISP 112 assigns a subscription identifier, such as an IMSI, to the UT 108. Furthermore, the ISP 112 can also assign a code representing the grade of service of the subscription to the UT 108. These values are added to the plaintext of the new certificate, which is then signed by a CA trusted by the ISP 112.
In block 440, this new certificate—the service certificate—is sent from the ISP 112 to the AP 104 facilitating the initial connection. In block 450, the AP 104 forwards the service certificate to the UT 108, which stores it in a memory for future authentications. Using the service certificate, the UT 108 can authenticate itself to the AP 104 and the ISP 112 in a single communication. Furthermore, the AP 104 can tell what quality of service it should provide to the UT 108 based on the service certificate. This would otherwise not be possible with a factory-seeded certificate.
In a certificate-based authentication scheme, the access network 100 must keep a certificate revocation list (CRL) at various nodes—such as the APs 104, switches 110, or MSs 114—to keep track of certificates that have not yet expired, but have become invalid. For example, if the user of a UT 108 allows his subscription to lapse, his downloaded service certificate will have to be revoked, even though its validity period has not expired. Therefore, the longer the validity periods of the service certificates, the longer the CRLs need to be.
Since CRLs consume physical resources, such as memory, and computational resources, such as search, it is desirable to keep CRLs shorter rather than longer. However, keeping the CRLs short by reducing the validity periods of the service certificates would require the frequent downloading of service certificates using the process described with reference to
The CLRs at the APs 104 can be reduced without shortening the validity period of the service certificate, according to some embodiments of the present invention. In one embodiment, the UT 108 is assigned one or more session certificates by the ISP 112, depending on the number of authorized sessions a UT 108 is allowed to maintain simultaneously. A session certificate can include, in addition to the other fields of the service certificate, a session identifier associated with a session to be had by the UT 108. For example, the session identifier can uniquely identify a Point to Point Protocol (PPP) Session within the UT 108.
One embodiment of authentication using the session certificates is described with reference to
In addition to the service certificate, in block 540, the ISP 112 also provides two session certificates, one for each allowed session, each having a unique session identifier. The session certificates have shorter validity periods than the service certificate.
In one embodiment, each session certificate is only valid for a single session. Having a session certificate, among other things, helps prevent session theft during handover, since each authorized session must be authenticated by a certificate.
When the UT 108 requests more session certificates, e.g., because they have expired, the UT provides the ISP 112 with the service certificate. In block 550, the ISP 112 determines whether the service certificate is valid by checking the CRL in the ISP 112 management entity. If it is still valid, then the ISP 112 creates new session certificates and provides them to the UT, as in block 540.
If the service certificate is not valid because it has been revoked, then the ISP 112 denies service to the UT 108 in block 560. The UT 108 can then be prompted to produce the identity certificate to be authenticated and granted a new subscription. Thus, when a potentially lengthy CRL—the one for the service certificates—needs to be examined, the search is performed by the ISP 112. Most of the time, the APs 104 only have to search the relatively short session certificate CRLs when authenticating a UT 108.
Access Point Structure
Embodiments of an AP 104 and a UT 108 of a wireless access network are now described.
A set of spatial multiplexing weights for each subscriber station are applied to the respective modulated signals to produce spatially multiplexed signals to be transmitted by the bank of four antennas. The host DSP 31 produces and maintains spatial signatures for each subscriber station for each conventional channel and calculates spatial multiplexing and demultiplexing weights using received signal measurements. In this manner, the signals from the current active subscriber stations, some of which may be active on the same conventional channel, are separated and interference and noise suppressed. When communicating from the AP to the subscriber stations, an optimized multi-lobe antenna radiation pattern tailored to the current active subscriber station connections and interference situation is created. Suitable smart antenna technologies for achieving such a spatially directed beam are described, for example, in U.S. Pat. Nos. 5,828,658, issued Oct. 27, 1998 to Ottersten et al. and 5,642,353, issued Jun. 24, 1997 to Roy, III et al. The channels used may be partitioned in any manner. In one embodiment the channels used may be partitioned as defined in the GSM (Global System for Mobile Communications) air interface, or any other time division air interface protocol, such as Digital Cellular, PCS (Personal Communication System), PHS (Personal Handyphone System) or WLL (Wireless Local Loop). Alternatively, continuous analog or CDMA channels can be used.
The outputs of the antennas are connected to a duplexer switch 7, which in a TDD embodiment, may be a time switch. Two possible implementations of the duplexer switch are as a frequency duplexer in a frequency division duplex (FDD) system, and as a time switch in a time division duplex (TDD) system. When receiving, the antenna outputs are connected via the duplexer switch to a receiver 5, and are converted down in analog by RF receiver ("RX") modules 5 from the carrier frequency to an FM intermediate frequency ("IF"). This signal then is digitized (sampled) by analog to digital converters ("ADCs") 9. Final down-converting to baseband is carried out digitally. Digital filters can be used to implement the down-converting and the digital filtering, the latter using finite impulse response (FIR) filtering techniques. This is shown as block 13. The invention can be adapted to suit a wide variety of RF and IF carrier frequencies and bands.
There are, in the present example, eight down-converted outputs from each antenna's digital filter 13, one per receive timeslot. The particular number of timeslots can be varied to suit network needs. While GSM uses eight uplink and eight downlink timeslots for each TDMA frame, desirable results can also be achieved with any number of TDMA timeslots for the uplink and downlink in each frame. For each of the eight receive timeslots, the four down-converted outputs from the four antennas are fed to a digital signal processor (DSP) 17 (hereinafter "timeslot processor") for further processing, including calibration, according to one aspect of this invention. Eight Motorola DSP56300 Family DSPs can be used as timeslot processors, one per receive timeslot. The timeslot processors 17 monitor the received signal power and estimate the frequency offset and time alignment. They also determine smart antenna weights for each antenna element. These are used in the SDMA scheme to determine a signal from a particular remote user and to demodulate the determined signal.
The output of the timeslot processors 17 is demodulated burst data for each of the eight receive timeslots. This data is sent to the host DSP processor 31 whose main function is to control all elements of the system and interface with the higher level processing, which is the processing which deals with what signals are required for communications in all the different control and service communication channels defined in the system's communication protocol. The host DSP 31 can be a Motorola DSP56300 Family DSP. In addition, timeslot processors send the determined receive weights for each UT to the host DSP 31. The host DSP 31 maintains state and timing information, receives uplink burst data from the timeslot processors 17, and programs the timeslot processors 17. In addition it decrypts, descrambles, checks error correcting code, and deconstructs bursts of the uplink signals, then formats the uplink signals to be sent for higher level processing in other parts of the AP. Furthermore DSP 31 may include a memory element to store data, instructions, or hopping functions or sequences. Alternatively, the AP may have a separate memory element or have access to an auxiliary memory element. With respect to the other parts of the AP it formats service data and traffic data for further higher processing in the AP, receives downlink messages and traffic data from the other parts of the AP, processes the downlink bursts and formats and sends the downlink bursts to a transmit controller/modulator, shown as 37. The host DSP also manages programming of other components of the AP including the transmit controller/modulator 37 and the RF timing controller shown as 33.
The RF timing controller 33 interfaces with the RF system, shown as block 45 and also produces a number of timing signals that are used by both the RF system and the modem. The RF controller 33 reads and transmits power monitoring and control values, controls the duplexer 7 and receives timing parameters and other settings for each burst from the host DSP 31.
The transmit controller/modulator 37, receives transmit data from the host DSP 31. The transmit controller uses this data to produce analog IF outputs which are sent to the RF transmitter (TX) modules 35. Specifically, the received data bits are converted into a complex modulated signal, up-converted to an IF frequency, sampled, multiplied by transmit weights obtained from host DSP 31, and converted via digital to analog converters ("DACs") which are part of transmit controller/modulator 37 to analog transmit waveforms. The analog waveforms are sent to the transmit modules 35. The transmit modules 35 up-convert the signals to the transmission frequency and amplify the signals. The amplified transmission signal outputs are sent to antennas 3 via the duplexer/time switch 7.
User Terminal Structure
The user terminal has a corresponding transmit chain in which data or voice to be transmitted is modulated in a modulator 57. The modulated signal to be transmitted 59, output by the modulator 57, is up-converted and amplified by a transmitter 60, producing a transmitter output signal 61. The transmitter output 61 is then input to the duplexer 46 for transmission by the antenna 45.
The demodulated received data 52 is supplied to a user terminal central processing unit 68 (CPU) as is received data before demodulation 50. The user terminal CPU 68 can be implemented with a standard DSP (digital signal processor) device such as a Motorola series 56300 Family DSP. This DSP can also perform the functions of the demodulator 51 and the modulator 57. The user terminal CPU 68 controls the receiver through line 63, the transmitter through line 62, the demodulator through line 52 and the modulator through line 58. It also communicates with a keyboard 53 through line 54 and a display 56 through line 55. A microphone 64 and speaker 66 are connected through the modulator 57 and the demodulator 51 through lines 65 and 66, respectively for a voice communications user terminal. In another embodiment, the microphone and speaker are also in direct communication with the CPU to provide voice or data communications. Furthermore user terminal CPU 68 may also include a memory element to store data, instructions, and hopping functions or sequences. Alternatively, the user terminal may have a separate memory element or have access to an auxiliary memory element.
In one embodiment, the speaker 66, and the microphone 64 are replaced or augmented by digital interfaces well-known in the art that allow data to be transmitted to and from an external data processing device (for example, a computer). In one embodiment, the user terminal's CPU is coupled to a standard digital interface such as a PCMCIA interface to an external computer and the display, keyboard, microphone and speaker are a part of the external computer. The user terminal's CPU 68 communicates with these components through the digital interface and the external computer's controller. For data only communications, the microphone and speaker can be deleted. For voice only communications, the keyboard and display can be deleted.
General Matters
In the description above, for the purposes of explanation, numerous specific details are set forth in order to provide a thorough understanding of the present invention. It will be apparent, however, to one skilled in the art that the present invention may be practiced without some of these specific details. In other instances, well-known structures and devices are shown in block diagram form.
The present invention includes various steps. The steps of the present invention may be performed by hardware components, such as those shown in
In portions of the description above, only the AP is described as performing spatial processing using an antenna array. However, the UTs can also contain antenna arrays, and can also perform spatial processing both on receiving and transmitting (uplink and downlink) within the scope of the present invention.
Embodiments of the present invention may be provided as a computer program product, which may include a machine-readable medium having stored thereon instructions, which may be used to program a computer (or other electronic devices) to perform a process according to the present invention. The machine-readable medium may include, but is not limited to, floppy diskettes, optical disks, CD-ROMs, and magneto-optical disks, ROMs, RAMs, EPROMs, EEPROMs, magnet or optical cards, flash memory, or other type of media/machine-readable medium suitable for storing electronic instructions. Moreover, the present invention may also be downloaded as a computer program product, wherein the program may be transferred from a remote computer to a requesting computer by way of data signals embodied in a carrier wave or other propagation medium via a communication link (e.g., a modem or network connection).
Many of the methods and calculations are described in their most basic form, but steps can be added to or deleted from any of the methods and information can be added or subtracted from any of the described message signals without departing from the basic scope of the present invention. It will be apparent to those skilled in the art that many further modifications and adaptations can be made. The particular embodiments are not provided to limit the invention but to illustrate it. The scope of the present invention is not to be determined by the specific examples provided above but only by the claims below.
It should also be appreciated that reference throughout this specification to "one embodiment" or "an embodiment" means that a particular feature may be included in the practice of the invention. Similarly, it should be appreciated that in the foregoing description of exemplary embodiments of the invention, various features of the invention are sometimes grouped together in a single embodiment, figure, or description thereof for the purpose of streamlining the disclosure and aiding in the understanding of one or more of the various inventive aspects. This method of disclosure, however, is not to be interpreted as reflecting an intention that the claimed invention requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the Detailed Description are hereby expressly incorporated into this Detailed Description, with each claim standing on its own as a separate embodiment of this invention.
Patent Citations
Non-Patent Citations
Referenced by
Legal Events
Original Image


text:
In 2008 a small group of community members met and formed the North Branch Area Education Foundation with the vision of providing resources to enhance education. In October of 2010, A Perfect 10 event was created and granted over $11,000 to area educators. Since that time, NBAEF has awarded grants o...Read More
North Branch Area Middle School Principal Todd Tetzlaff, middle school band teacher Dave Enyart and Kitty Eichholz, president of the North Branch Area Education Foundation (NBAEF), are pleased to announce the middle school has a new public address system, made possible by the NBAEF. The syste...Read More
North Branch Area Education Foundation (NBAEF) is a foundation that was started in 2008, by a small group of volunteers who saw a need. They wanted to help North Branch Area Schools, enhance academic excellence in the classroom by raising money to provide grants to educators in North Branch. Today...Read More


text:
Tybee LIVE CAMS: Check July 4th holiday beach crowds and trafficClick here for more
By: Larry Peterson on June 10, 2010 - 6:30pm - Add new comment
Granted, this won't prompt anyone to yell, "stop the presses and replate."
But it was enough to make me stop what I was doing and blog.
Eric Johnson, Republican candidate for governor, today announced what he called a first round of endorsements from Chatham County, his home base.The campaign for the form
By: Larry Peterson on November 17, 2011 - 8:05pm - Add new comment
Pre-election polls take lots of flak.
Especially from folks who don't do well in them.
One common criticism: They don't do a very good job of identifying people who will actually cast ballots on Election Day, especially in low-turnout local contests.
Another: Surveys seldom if ever include respondents from the increasing ranks of people who use only cell phones. Some studies suggest that their demographic profile contrasts with that of voters at large.
By: Larry Peterson on May 28, 2010 - 3:59pm - Add new comment
The latest poll on the race for the Democratic nomination for governor has been greeted with widespread skepticism.
To recap, it's a tale of former Gov.
By: Larry Peterson on September 11, 2012 - 7:21pm - Add new comment
When U.S. Rep. John Barrow's staff updated his campaign website bio earlier this year, there were lots of additions and subtractions.
One subtraction has raised eyebrows, especially in Republican circles.
Barrow, an Augusta Democrat, is seeking re-election in the recently reshaped 12th Congressional District, which now tilts toward the GOP. Republicans are doing their best to link him to Democratic President Barack Obama.
By: Larry Peterson on March 9, 2011 - 7:43pm - Add new comment
There's speculation about what bills will – or won't – survive Crossover Day in the General Assembly.
It's the 40-day session's 30th day, and is due next Wednesday.
By: Larry Peterson on October 12, 2010 - 7:43pm - Add new comment
Republican governor hopeful Nathan Deal is under scrutiny — this week, at least — because of his income taxes.
Democrat Roy Barnes, among others, doesn't think Deal paid enough.
Published accounts say he paid only about 2 percent of his adjusted gross income in 2006 and 2007. The average for his bracket, it's been reported, is around 17 percent.
Deal says he's paid all the taxes he's required to.
By: Larry Peterson on October 25, 2010 - 8:01pm - Add new comment
The numbers will be dissected soon enough, but something stands out in new SurveyUSA poll in five statewide races.
Republicans lead in all five, sometimes by overwhelming margins.
But the most striking thing about the results is Democrats' inability to win the support of white voters.
It's a problem that the party has had for the last eight years or so, but it's apparently worsened.
The Democratic U.S.
By: Larry Peterson on August 15, 2012 - 7:53pm - Add new comment
The local Democrats' major annual fundraiser, the Buttimer Dinner, is tentatively set for Oct. 5 at the Savannah International Trade and Convention Center.
As usual , the group has named in advance those it will honor at the fete.
Here are the honorees and what the Chatham County Democratic Committee and its chairman, Tony Center, had to say about them.
By: Larry Peterson on June 8, 2011 - 7:59pm - Add new comment
Finally, the moment we've waited for, sort of: A local angle on the Anthony Weiner pants drop.
By: Larry Peterson on May 21, 2010 - 6:44pm - Add new comment
You can call this "How dumb do they think we are?


text:
Press release from PR Newswire
Turn Over a Nutritious New Leaf: 'Start Right, End Right' With White and Chocolate Milk
Thursday, January 06, 2011
Turn Over a Nutritious New Leaf: 'Start Right, End Right' With White and Chocolate Milk14:00 EST Thursday, January 06, 2011Dean Foods Kicks off New Year with $25,000 Sweepstakes, $5,000 School Prize and Improved Chocolate Milk FormulasDALLAS, Jan. 6, 2011 /PRNewswire/ -- Many moms begin the new year with goals to improve their family's eating habits and do what's best for their kids. Dean Foods (NYSE: DF), together with its local and regional family of dairies, offers a solution to do both with Start Right End Right featuring the company's flavored milks newly reformulated with 10-15 percent fewer calories and 20-25 percent less sugar. Geared toward helping families make wholesome milk part of everyday nutrition, Start Right End Right includes tips and facts found at www.StartRightEndRight.com and on Facebook at www.facebook.com/puremilkfun. In addition, a national sweepstakes gives families the chance to win $25,000 for themselves and a $5,000 prize for their school of choice. (Logo: http://photos.prnewswire.com/prnh/20110106/DA26020LOGO)Importance of Milk Start Right End Right is about doing just that: starting the day right with white milk and ending the day right with a delicious and nutritious chocolate milk treat. "Nutrition experts confirm that flavored milk combines the same essential nutrients as white milk with a taste that kids love," said Andrea Carrothers, MS, RD, registered dietitian and Nutrition Communications Manager for Dean Foods. "Children need the goodness of dairy, and studies show that drinking flavored milk helps them meet more of their nutrient needs. Our new, 150-calorie flavored milk products satisfy kids, but avoid the unnecessary sugar and calories that moms worry about."Carrothers continued, "With the new formula, Dean Foods chocolate milk is an excellent option after school or on the go and certainly beats sugary sports drinks and carbonated sodas. It is made from the same nutritious white milk that comes from your local dairy and is cold shipped within hours, ensuring wholesome quality. As a leading dairy company, our commitment to research and development brings innovation to our formulas and makes the chocolate milk decision easier for moms."More about the ReformulationFlavored milk from Dean Foods most popular brands now contains 150 calories and 22 grams of sugar per serving, in addition to being low-fat. A fat-free version is also available. The change represents a 10-15 percent reduction in calories and a 20-25 percent reduction in sugar. The new chocolate milk formulation also contains pure cocoa powder and meets or exceeds the nutritional standards recommended by leading authorities such as the School Nutrition Association, the Institute of Medicine, and the Alliance for a Healthier Generation.About the SweepstakesOne winning family and school will get a financial boost in the new year, receiving $25,000 and $5,000 for a school of his or her choosing. Entering is as easy as collecting sweepstakes-labeled milk caps from Dean Foods milk brands and entering the contest code online at www.StartRightEndRight.com. "Liking" the contest page on Facebook at www.facebook.com/puremilkfun will reveal a one-time free online entry. The contest runs from Jan. 1 through Feb. 28, 2011, and the winner will be announced in early March. Full contest rules are available at www.StartRightEndRight.com. Participating Dean Foods BrandsBrands across the country participating in the sweepstakes include: Alta Dena® DairyBarber's?Berkeley Farms®Borden®Broughton?Country Fresh®CreamlandDean's®Gandy'sGarelick Farms®Hygeia®Knudsen®Lehigh Valley Dairy Farms®Louis Trauth Dairy, Inc.®Mayfield Dairy Farms®McArthur® DairyMeadow Brook®Meadow Gold®/Viva®Model Dairy®Oak Farms® DairyPET® DairyPurity DairiesReiter DairyShenandoah's Pride®Swiss Dairy?Swiss Premium DairyT.G. Lee®Tuscan® DairyABOUT DEAN FOODSDean Foods is one of the leading food and beverage companies in the United States and a European leader in branded soy foods and beverages. The Company's Fresh Dairy Direct-Morningstar segment is the largest U.S. processor and distributor of milk, creamer, and cultured dairy products. These offerings are marketed under more than 50 local and regional dairy brands, as well as through private labels. The WhiteWave-Alpro segment produces and sells an array of branded dairy, soy and plant-based beverages and foods. WhiteWave brands, including Silk® soy and almond milk, Horizon Organic® milk and dairy products, International Delight® coffee creamers, and LAND O LAKES® creamers, are category leaders and consumer favorites. Alpro is the pan-European leader in branded soy food products. CONTACT: Corporate Communications, Jamaison Schuler, +1-214-303-3472.SOURCE Dean FoodsFor further information: Jamaison Schuler, Corporate Communications of Dean Foods, +1-214-303-3472


text:
Newegg has the ENERMAX ECA3212-BL Black ATX Mid Tower Computer Case for $45 - 10% off with coupon code EMXAPR10FS [Exp 4/30] - $25 rebate [Exp 4/30] = $15 with free... More Details
Deal has expired
You will find the best computer case sales from some of the most prominent computer names in the country here! Find great computer case offers and deals with these coupons. Computer case coupons are usually valid for a short time only, and the duration can differ, being available for the first days of the month, for a limited time or can expire at the end of the month. Be sure to check the dates as coupons you see here one day can expire the next.
The best deals, product reviews, and giveaway announcements emailed directly to you!
Sign up now for the Ben's Bargains newsletter!
Thanks! You can also register an account with us to be eligible for Giveaway Entries, Deal Alerts, and Comments.


text:
- About Us
- Book Recommendations
- Signed Editions
- Winter Catalog
- Bestsellers
- Staff Picks
- Award Winners
- Kepler's Events
- Community Partners
- Book Clubs
- Literary Circle Membership
The Road to Oz (Hardcover)
Usually Ships in 1-5 Days
L. Frank Baum is best known for his "Oz" books, starting with "The Wonderful Wizard of Oz," Baum wrote a total of fourteen Oz books during his lifetime, plus a collection of stories.
"The Road to Oz" is the fifth book in the Oz series. It's the birthday of Princess Ozma, ruler of Oz, and a birthday celebration is being held in the Emerald City. Dorothy's adventures begin when she tries to help a stranger find the road he is seeking. On the way, they encounter the boy Button Bright, get lost, and find themselves in Oz.
Once in Oz they encounter a variety of new characters, good, bad, and amusing, as they try to reach the Emerald City in time for Ozma's birthday.


text:
Complete your Avatar Jake Sully costume with this officially licensed child's Jake Sully wig.
Prevail at the party in this amazingly authentic and officially licensed Avatar Neytiri child costume! The blue on blue striped, 100% polyester character jumpsuit comes complete with attached tail and apron. Not only will you look the part, but you'll have fun in the process.
Transform yourself into the beautiful Na'vi Neytiri from Avatar in this officially licensed child's wig.


text:
A Little Bit About Recording Audio
The guys over at Stillmotion have been a huge source of inspiration to us at Fstoppers. If you haven't checked out their vimeo channel , head over there and be prepared to watch hundreds of well shot wedding videos. They have also released a really informative video on how to use different microphones for your video projects and BTS videos. Once you start getting into filming video, capturing good audio is going to be of up most importance to you. Anyone remember those horrible audio tracks on some of our BTS contest videos? Well now you have no excuse for getting good audio of your own.
introduction to audio with DSLRs from stillmotion on Vimeo .


text:
Good - a staple.
Excellent service as always
Photo is the best hair care range ever. Wouldn't use anything else. It will take years off your hair
very good products.
Best Conditioner I have ever used.
love the products from phyto
Love this conditioner.
Wouldnt buy my products from anywhere else; excellent choice and value; always well packaged and speedy delivery too. Great!
Quick dispatch with well packaged goods.
Nice smell, worked well
Have used phyto hair products for about 3 years now my hair is in the best condition it has ever been, i wont use anything else.
Prompt delivery, goods as described.
Easy to use website, extensive product range and quick delivery.
Good prices, free delivery and prompt arrival. Very happy.
Excellent service
Really disappointed. Definitely does not do what its supposed to. Can i return it?
Have used Phyto products for awhile now and i think they are very good.
Ratings Guide Read about our product rating system


text:
A curious journey - 1
Hey everyone, first post here, please be gentle :)
When I graduated high school I was hungry for adventure. I wanted to drive the perimeter of the US over the summer after my senior year. At the time I allowed my friends and family to talk me out of it. It would be dangerous, and I didn't have the means on my own to make it without their support. I worked that summer (lifeguarding) instead, saving up as much cash as I could before going away to college in the fall of 2003.
I did have the luxury of choosing my focus for higher learning. I chose graphic design... Having developed a love of photography, with an artistic and technologically adaptable brain it seemed like the perfect fit. And it was.
I have been working in the visual arts and communication industry since 2005 and graduated in Portland Oregon in the spring of 2007. I have chosen career over my personal life at every point along the way. That's not to say I'm a hermit... Just that I've been sprinting on that treadmill of life knowing that if I work hard enough good things will happen.
3 months ago I had a breakthrough.
After working for a small, local ad agency here in Olympia Washington for 4 years, I met a person who ran a very successful law firm. He was in need of a marketing director, and offered me nearly double my previous salary to go to work for him. I was ready for the challenge and hungry for the cash so I jumped ship just after thanksgiving 2012.
I had so much to be thankful for.
The new job started off great, lots of interesting work, and my ideas and observations about the business were being well received and implemented with a reasonable amount of fanfare and success... The company website (responsible for roughly 70% of all our leads and clients) was next up on the list. I was excited to dig into this project most of all. I had been building and managing the digital design department for my previous company... This project was in my comfort zone to make something awesome happen.
This is where everything turned ugly.
Within a month my boss had become so frustrated and irrational with the process that I was being treated like garbage every day. After two weeks of trying to maintain a positive attitude and move the website process forward I snapped. I walked out without a word. Just an email giving him my reasons for leaving.
I love my work, but I realized that day that my integrity and self-worth was more valuable to me than earning a paycheck. If you know anyone in the creative services industry ask the, about clients from hell... We all have stories. Just so happened my breakthrough opportunity was for the most hellacious client I've ever encountered. Nice guy... Bad client.
Now I'm unemployed for the first time since being a student. it's time to go back and do what I wanted to do 10 years ago after graduating high school.
I'm riding solo from the north west to the south east United States. I'll be keeping a ride log along the way and look forward to contributing to the adv rider community.
I am camping and couch surfing with friends and family along the way, so stay tuned for what should be a pretty good time!
I leave tomorrow.
Enjoy your new adventure :clap:clap
Good luck and post some pics! :thumb
I'm using tapatalk for iPad and iPhone on the rout (and right now) is using imgur to host images acceptable? Or is it better to do it another way?
The only way to post pics on this forum is to host them on a pic hosting site and then hotlink them to your report.
Thanks GB - imgur it shall be then! Will post some pics when I pick up my bike in a bit.... New tires, chain and sprockets.
You are lucky (unlimited time) and unlucky (limited funds) but do you mean you are heading to KW: Key West ?
can't wait until you are on the road and posting up some photos, then we can find out what bike/setup you have
most ride reports are to the South and I don't speak Spanish so I was contemplating a ride like yours too
@bESS here is a link to my rough route. http://bit.ly/YW2Wxe Will send some pics of the bike and my packing setup today as I do my preparations. You're right about the unlucky and lucky parts... Good thing I've got room on my credit card! :)
Looks like a good ride:clap
Best, cheapest camping in Montery is at the Veterans Memorial Park.
How come you're going inland at Monterey and taking the Freeway to Santa Barbara? 1 South shouldn't be too crowded this time of year and Big Sur probably won't be fogged in until a little later in the spring.
Jamala Beach is another good camp ground near Santa Barbara, a little out of the way, but I'm told they have a killer hamberger joint there. Might be a little pricey for camping though.
Good luck, have fun and keep us posted.
thanks for the reply airride. that map is just my rough route. google maps ran out of waypoints I have another file going with better roads to take which will ultimately put me in the same places you mentioned. 1 through big sur is definitely on that other one. ill be avoiding interstates as much as possible.
http://imgur.com/d9OiHPK tent and table of stuff...
http://imgur.com/FQua2k4 stuff on the table
looks like it's going to be a nice trip.
can't wait until you get rolling. I'm heading East in Mid July but not unlimited time like you. I am heading from BC to the Atlantic Ocean so I'm looking at maps too
Go Paul Go
Have fun keep us posted .Relax and enjoy the ride and the people .
will head down us1 this summer to Laguna Seca motogp. Paul
Looking forward to your trip and what you encounter along the way. I am starting one next month, opposite of you. I'll be leaving from the SE and heading West. Good Luck and Safe Riding.
I am subscribed and wish you a safe journey. Are you really taking the Interstate from Florence SC to Atlanta?
Head north out of SC and hit the Blue Ridge area then come down through Helen, Ga to Atlanta. You could spend two weeks and not ride the same twistie twice, some of the best riding around. You cannot live where you live, hit the Southeast and miss the mountains.
Just saying, zoom that map in and look at those squiggly lines.
Be safe, update often.
I covered a lot of those same miles 11 months ago. Don't miss Cape Perpetua OR and the Barber Museum in Birmingham AL.
This link helped me avoid quite a bit of rain.: http://www.wunderground.com/roadtrip/
|Times are GMT -7. It's 09:22 PM.
Powered by vBulletin® Version 3.8.5
Copyright ©2000 - 2015, Jelsoft Enterprises Ltd.
Copyright ADVrider 2011-2015


text:
Reviews, reviews, reviews...
FreakScore is a weighted average of all aggregated professional and user review scores.
Read more
This product has a FreakScore of 6.9
out of 10 based on 157 scores.
Based on the third episode of the Star Wars trilogy, Star Wars E
Read more
Best Price at Amazon


text:
ZHIWEI TU (Chinese, b. 1951). Seeing More, 2012. Oil on canvas. 24 x 20 inches (61.0 x 50.8 cm). Signed and dated upper ...
2012 September 12 - 13 The Estate Signature Auction- Dallas #5101
|Sold for:
|Sign-in or Join (free & quick)
|Claim Item:
|Sign-in or Join (free & quick)
|Auction Ended On:
|Sep 12, 2012
|Item Activity:
4 Internet/mail/phone bidders
1,171 page views
Heritage Auctions - Design District Annex
1518 Slocum Street
Dallas, TX
|Printable auction results for all items in the 2012 September 12 - 13 The Estate Signature Auction- Dallas.
Seeing More, 2012
Oil on canvas
24 x 20 inches (61.0 x 50.8 cm)
Signed and dated upper right: Tu Zhiwei / Opam / 2012
Titled and signed verso: "Seeing More / by Zhiwei Opam"
Growing up in rural China, Zhiwei Tu's passion for art began when a skilled artist was hired to come to his village to paint a portrait of Mao Zedong. Tu saw this as a challenge and began to excel at his craft. Over the past 40 years he has received many awards and is one of the only living artists to have a museum named after him. He currently resides in Chicago, Illinois.
Condition Report*:Very good condition. Not framed.
*Heritage Auctions strives to provide as much information as possible but encourages in-person inspection by bidders. Statements regarding the condition of objects are only for general guidance and should not be relied upon as complete statements of fact, and do not constitute a representation, warranty or assumption of liability by Heritage. Please note that we do not de-frame lots estimated at $1,000 or less and may not be able to provide additional details for lots valued under $500. All lots are sold "AS IS" under the Terms & Conditions of Auction.
View large image(s) of this item
Service and Handling Description: Requires 3rd Party Shipping (view shipping information)
Sales Tax information | Terms and Conditions


text:
Vote No In Gravette
Posted: September 3, 2014 at 3:56 p.m.
The Gravette School Board voted 4-3 to propose a millage increase of 3.6 mills to build a new elementary school in Bella Vista. After I attended school board meetings and read through the school board's documentation, it became clear we do not need a new elementary school. The following facts come from the Gravette School Board packet, "Bella Vista Elementary School Project Plan 2013-2014," the state of Arkansas and the Gravette schools website.
This story is only available from our archives.
« Previous Story
PUBLIC VIEWPOINT Obama: Leading From Behind
Gary Boyd's insightful letter (Aug. 24) about socialism was exactly on the mark. My dad was on the Benton County Quorum Court more than 30 years and very intense about just... Read »
Next Story »
Commentary: Springdale Students Show Prize Li...
The grin on Ben Anderson's face got bigger each time the auctioneer yelled. "Hup! Hup! Hup!" Read »