text: Home Gallery Interactive (video) Macy's Yes Virginia, The Musical Macy's: Yes Virginia, The Musical New campaign spreads Virginia's X-mas spirit to kids around the country Published on Aug 22, 2012 Editor's Pick Macy's and JWT contributed to the pop culture that surrounds Christmas when in 2009 they launched "Yes Virginia," an award-winning animated special produced out of The Ebeling Group that illustrated the tale of a young girl who wrote to The New York Sun wondering if there really was a Santa Claus. The paper's editor Francis P. Church responded to her with a moving piece about the importance of believing. The retailer now invites children around the country to become part of that story, with the launch of "Yes, Virginia, The Musical," the latest addition to Macy's ongoing "Believe" holiday campaign. The online program available at yesvirginiamusical.com, gives schools access to a stage adaptation of the film, including scripts, scores, production reference materials as well as advice from the pros. Macy's will also give $1,000 grants to 100 schools to help out with their productions. Rate this Ad You must be registered to rate the ad. Please Login or Register Now About CreditsDateAug 22, 2012Agency:JWT New YorkCCO:Jeff BenjaminClient:Macy'sCo-Chief Creative Officer:Matt MacDonaldCo-Chief Creative Officer:Ryan KutscherChief Integration Officer:Mike GeigerVP/Creative Director:William SchermerhornCD:Craig LoveCD:Shayne MillingtonCreative Director:Wesley WhatleyAD:Raihana HalimAD:Ben ChiangCW:Justine CotterPlanning Director:Jonathan FletcherUser Experience:Jon FishelHead of Production:Sergio LopezDirector of Digital Production:Paul SuttonEP:Robin FeldmanExecutive Digital Producer:Margaret McLaughlinDigital Producer:Vanessa ScanlanSenior Broadcast Producer:Andrea CurtinSenior Line Producer:Atalie KesslerDirector of Technology:Ricky BaconTechnical Lead:David WuQA Manager:Jane IrzhakGlobal Business Director:Claire CapeciProject Manager:Lindsey AllenDigital Production Company:Stopp LAProduction Company:Greenpoint PicturesDirector:Jacob LincolnPost-production:Greenpoint PicturesDirector:Jacob LincolnEditor:David EtkinEditor:Thomas ZoranskiEditor:Adam PorterEditing House:Greenpoint PicturesMusic:JWTwo EntertainmentPost Production:Macy's StudiosEditor:Danny AbelEditor:Eric GrushMedia Agency:MECSee more credits CategoryWeb FilmWebsite GenreKidsVFX/Animation Latest Creativity News on Ad Age Video: Cannes Is Too Costly, WPP CEO Says, but There Might Be a Fix Kathryn Bigelow Joins Smuggler, Public Record Signs Daisy Zhou Agency Brief: Where Is Everybody? Related work Macy's: The Power of Santa Figliulo & Partners Macy's: Old Friends BBH New York Macy's: Back to School


text:
Tibetan Studies Outreach Lecture Series
A series of lectures and events related to Tibet and Tibetan Buddhism aimed at the general public.
This series of lectures and events proposes to bridge the gap which sometimes exists between the academic study of Tibet and Tibetan Buddhism and the general or popular interest in these subjects among the public. These talks are frequently organised jointly between SOAS and other London based Tibet related charities and NGOs.
Previous Events in this series
Tibet Foundation Day: Secret Temple of Tibet's Dalai Lamas
Ian Baker with performances from Ngawang Lodup and Chinese and Mongolian musicians
This event will coincide with Tibet Foundation's 30th Anniversary and will include a lecture from Ian Baker on the Secret Temple of Tibet's Dalai Lamas, as well as a variety of musicians from China, Mongolia and Tibet, including renowned singer Ngawang Lodup. Entry is free, and refreshments will be served.20 November 2015, Russell Square: College Buildings, Khalili Lecture Theatre, 7:30 PM - 11:00 PM
Tibet's minority languages: mapping Tibet's linguistic diversity and its contemporary transformation
Dr Gerald Roche (Uppsala)
This talk will focus on Tibet's non-Tibetan minority languages. In addition to providing basic information about these languages, the talk examines the complex sociolinguistic context faced by their speakers as enclaves within larger Tibetan communities, inside the Chinese state, in an interconnected and globalized world. These languages are subject to several unexpected sociolinguistic trends. Some languages are thriving, while others are likely to disappear in the near future.7 May 2015, Russell Square: College Buildings, G51, 6:30 PM - 8:00 PM
The current status of Tibetan Language Processing in China: from encoding to machine translation
Prof. Jiang Di (Chinese Academy of Social Sciences)
Tibetan language information processing involves three main domains: information technology (e.g. font encoding, language keyboards, etc.); resource collection and development (e.g. e-texts, e-dictionaries, OCR, etc.); and natural language processing (e.g lemmatization, sorting and retrieval, word segmentation and annotation/tagging, machine translation, etc.) This report will give a brief survey of these domains and their developments in China.20 April 2015, 21/22 Russell Square, T102, 5:30 PM - 7:00 PM
The fortunes and misfortunes of the Tibetan army's reforms during the first half of the 20th century (1895-1951)
Dr Alice Travers (CNRS)
The Tibetan army's expansion and reform was part of a modernisation programme undertaken by the 13th Dalai-lama. Troop numbers, organisation and equipment were improved in the context of Tibet's de facto independence and increasing military threat to the east. Based on biographies, archives and interviews, this talk analyses the military reforms (recruitment, hierarchy, training, uniform, arms, ammunitions) in tandem with the political national and international context.26 March 2015, Vernon Square, V211, 6:30 PM - 8:00 PM
Cloth cleansed in fire, animals with incombustible fur, and how it all comes together in India and Eurasia
Dr Péter-Dániel Szántó (Oxford)
This talk will eluciate the meaning of the Sanskrit word agniśauca ('cleansed in/by fire'), which can denote a kind of cloth and a kind of small animal. However, one cannot identify the true referent by relying on Indic sources alone. Looking to China, Inner Asia, and Mediaeval Europe, a remarkable shared belief emerges: the cloth cleansed in fire and the fur of small animals are actually one and the same thing.29 January 2015, Vernon Square, V211, 6:30 PM - 8:00 PM
Development in Tibet: A Tibetan perspective
Phuntsog Wangyal, Tibet Foundation10 December 2014, Russell Square: College Buildings, 116, 6:00 PM - 8:00 PM
Dr Fabian Sanders (Venice)
Scholars usually regard the sku-bla as a mountain deity, with differing views on whether this cult is a foreign import or central to Imperial Tibetan religion. A re-examination of the relevant passages shows that the sku-bla is a ceremony central to the ideology of sacral kingship in the Old Tibetan Empire. It created a bond of vassalage between the celebrant and the Tibetan emperor, and was performed by vassals of the emperor rather than the royal court itself.27 November 2014, Vernon Square, V211, 6:30 PM - 8:00 PM
Understanding emptiness: rang stong and gzhan stong perspective
Dr Artur Przybysławski (Jagiellonian University)21 November 2014, Vernon Square, V121, 1:00 PM - 2:30 PM
The Shugden Controversy and the 14th Dalai Lama
This panel discussion will address the controversy surrounding the propitiation of Dorje Shugden in the Geluk school of Tibetan Buddhism. It will include presentations by traditional exponents of both sides of the controversy and by academic authorities. This event is free and open to the public, but registration is required.15 August 2014, Vernon Square, V211, 6:00 PM - 8:00 PM
Nathan W. Hill
Scholars usually regard the sku-bla as a mountain deity, with differing views on whether this cult is a foreign import or central to Imperial Tibetan religion. A re-examination of the relevant passages shows that the sku-bla is a ceremony central to the ideology of sacral kingship in the Old Tibetan Empire. It created a bond of vassalage between the celebrant and the Tibetan emperor, and was performed by vassals of the emperor rather than the royal court itself.12 June 2014, Vernon Square, V211, 6:30 PM - 8:00 PM
Nyepas: The three humors in Tibetan Medicine
Dr Rigzin Sangmo
According to traditional Tibetan medicine, health is determined by five elements (earth, water, fire, wind, space) and three humors (rlung 'wind', mkhris-pa 'bile' and bad-kan 'phlegm'). This talk will introduce the three humors and explain their composition and function in the regulation of health.29 May 2014, Vernon Square, V211, 5:30 PM - 7:00 PM
An illustrated Introduction to the Pema Kathang, or 'Life and Liberation of Padmasambhava', as revealed in a series of twenty-six wall paintings from Mindrolling Stupa in India
Robert Beer
These twenty-six magnificent frescos appear on the ground floor of the world's largest stupa, the Great Stupa of Mindrolling in Dehra Dun, India. The interior frescos of the stupa were painted by a group of around two hundred thangka painters between 2000 and 2002. They were then meticulously photographed by Gabriel Berde from New York, who spent almost as long in digitally capturing all the painted imagery within this Great Stupa between 2008 and 2010.24 April 2014, Vernon Square, V211, 6:30 PM - 8:00 PM
The Endurance of the Past in Modern Tibetan Literature
Lama Jabb
Existing research on modern Tibetan writing takes the 1980s as starting point. However, this interpretation ignores the styles, themes and concepts derived from Tibet's rich and diverse oral traditions. This talk highlights this impact of the past on the present showing the influence of mgur, kāvya and oral poetry in the works of contemporary Tibetan poets.20 March 2014, Vernon Square, V211, 6:30 PM - 8:00 PM
Lama Jampa Thaye6 February 2014, Vernon Square, V211, 6:30 PM - 8:00 PM
Between Buddhism and Science, Between Mind and Body
Prof Geoffrey Samuel
Since the late 19th century Buddhism has been seen as compatible with Western science. The Buddhist influence on the ecology movement has strengthened this perception. Yet the 'Buddhism' brought into relation with science has undergone rewriting under modernist influences, and critical aspects of Buddhist thought and practice are ignored. This lecture presents a different kind of dialogue, in which a Tibetan Buddhism confronts Western scientists and scholars on more equal terms.5 December 2013, Vernon Square, V211, 6:30 PM - 8:00 PM
The Art of Thangkas: From Monastery to Museums, an Integrated Approach to Conservation and Display
Teresa Heady
This talk will cover basic uses of thangkas, their provenance and styles and how to make them. Concentrating at the on the preservation and conservation of thangkas as they relate to display and storage in museums. All of the talk will be from work carried out while teaching thangkas conservation workshops in Nepal and Tibet and how this helped make decisions for the display, storage and care of thangkas that are now housed in the different museum's collections I have worked with.14 November 2013, Vernon Square, V211, 6:30 PM - 8:00 PM
Padmasambhava: Different Aspects
This one-day conference, hosted jointly by SOAS and the London Shang Shung Institute, will explore different aspects of Padmasambhava.14 September 2013, Vernon Square, V211, 10:00 AM - 5:00 PM
Tantric Arts and Crafts in Bhutan
Timea Tallian
Timea Tallian discusses her work in Bhutan as a conservation supervisor for artwork exhibited in the Ta Dzong Museum in Trongsa. This work involved the restoration of important ancient Buddhist artifacts and sacred objects from the Royal collection.9 May 2013, Vernon Square, V211, 6:30 PM - 8:00 PM
The Origins and Meaning of Om Manipadme Hum
Dr Alex Studholme
'Oṃ Maṇipadme Hūṃ' is first recorded the Kāraṇḍavyūha Sūtra, one of the first Buddhist books to arrive in Tibet, this work reflects an early stage of Buddhist tantrism in India. The mantra reflects creative religious synthesis. Its meaning, "in the jewel-lotus" expresses a central symbol of Mahāyāna: rebirth in the Pure Land of Amitābha.7 March 2013, Vernon Square, V211, 6:30 PM - 8:00 PM
Himalayan Ascetism and Mysticism
Dr Sondra Hausner (Oxford University)
This talk will describe contemporary South Asian sadhus, or ascetics, and consider whether they live up to the legendary roles that have been attributed to them. Certainly their religious practices, or tapas, are modelled after those of the great mahasiddhas in Himalayan mythology, but being an ascetic in real life poses particular kinds of challenges. Do all ascetics necessarily aspire towards mysticism -- and do all mystics practice an ascetic lifestyle?28 February 2013, Vernon Square, V211, 6:30 PM - 8:00 PM
Sbyin-pa (Compassionate Giving), one of the six Paramitras
Arjia Rinpoche21 February 2013, Vernon Square, V211, 6:30 PM - 8:00 PM
18th-20th century Mongolian Buddhist paintings and appliques
Zara Fleming
The most profound and long lasting influence on Mongolian art is that of Vajrayana Buddhism. This flourished for centuries under the patronage of the Khans, but in the 20th century it was all but annihilated under communism. This lecture explores this rich tradition of Buddhist art, identifying particular Mongolian characteristics in their thangkhas and appliques from the 18th to the 20th century.31 January 2013, Vernon Square, V211, 6:30 PM - 8:00 PM
Theory and Practice of Urine Analysis in Tibetan Medicine
Dr Pema Dorjee
Urine is like a clear mirror. It reflects the state of health and makes it easier for a physician to understand the nature of a disease. Diseases of the vital organs can be understood more clearly from pulse reading while diseases of the vessel organs and hot and cold nature of a disease can be understood more accurately through urinalysis.6 December 2012, Vernon Square, V211, 6:30 PM - 8:00 PM
The Legends of the 84 Mahasiddhas of early Indian Buddhism
Robert Beer
The Mahasiddhas, literally the 'Greatly Attained Ones', lived in India between the 8th and 12th centuries and were the instigators of the highly esoteric Yoga Tantra systems that were finally transmitted into Tibet. The Mahasiddhas came from all walks of life, and the diversity of their often-outlandish legends reveals much about the different approaches to enlightenment. Robert Beer gives this illustrated talk which will explore some of their pithy life stories.15 November 2012, Vernon Square, V211, 6:30 PM - 8:00 PM
Consciousness and its transformation in Tibetan Buddhism
Dr Artur Przybyslawski (Jagiellonian University)Tibetan Buddhist philosophy distinguishes four different kinds of consciousness, which can be philologically and philosophically analyzed in relationship to one another.8 November 2012, Vernon Square, V211, 6:30 PM - 8:00 PM
Women Lineage Holders in the Bonpo Tradition
Dmitry Ermakov
This talk treats female lineage-holders of Bönpo Dzogchen. These women came from all over Inner Asia, received Dzogchen teachings and became renown for spiritual accomplishment. Their instructions are said to have been recorded by the 8th century Bönpo master Lachen Drenpa Namkha. The last in this lineage, Chöza Bönmo, played a role in saving Bön teachings from the 8th century persecution under the Tibetan emperor Trisong Deutsen.26 October 2012, 21/22 Russell Square, T102, 6:30 PM - 8:00 PM
A Critical Passage according to the Tibetan Book of the Dead
Elio Guarisco
The Tibetan Book of the Dead, attributed to Padmasambhava, the legendary eighth century figure who introduced Tantric Buddhism to Tibet, was 'rediscovered' by Karma Lingpa in the fourteenth century. From that time one, its renown spread throughout the Himalayan regions where The Tibetan Book of the Dead became the focus of funerary rites. The Book is aimed specifically at aiding the dying person in the critical passage from life to death.4 October 2012, 21/22 Russell Square, T102, 6:30 PM - 8:00 PM
Introduction to Ancient Mongolian Buddhist Scriptures
Prof. Delger Borjigin17 May 2012, Vernon Square, V211, 6:30 PM - 8:00 PM
Indo-Tibetan Classical Learning according to Jamgon Kongtrul's Treasury of Knowledge
Dr Gyurme Dorje
This talk will examine the assimilation of four distinct disciplines of Indian origin, which have all contributed richly to the formation of the Indo-Tibetan cultural milieu: language, logic, art and astro-medical studies. Reference will be made to the key literary sources representing each of these genres, and their content will be summarised from the perspective of Jamgon Kongtrul's 19th century Treasury of Knowledge (Shes bya kun khyab mdzod).26 April 2012, Vernon Square, V211, 6:00 PM - 8:00 PM
Dr Paola Zamperini (Amherst)
This talk will present the lives of prominent female teachers in Tibetan Buddhism, in order to reconstruct the trajectories to realization that women undertook, often at high personal and societal cost. By utilizing biographical and autobiographical records, Professor Zamperini will analyze the narrative and social aspects of these women's choice to privilege the Vajrayana path to enlightenment at the expense of more conventional and socially accepted lifestyles.16 March 2012, Vernon Square, V211, 6:00 PM - 8:00 PM
Nourishment for the Dead: Early Buddhist Funeral Rites in Tibet
Dr Martin Boord
Taking his cue from the dBa' bzhed chronicle of the Tibetan Imperial period, Martin Boord will look at some of the ways in which Buddhist funeral rites departed from previously established customs. While the new system of imported Buddhism certainly introduced creative innovations in harmony with what had been done before, there were also conflicts of view concerning the spirits of the other world that gave rise to some amusing rivalries.23 February 2012, Vernon Square, V211, 6:00 PM - 8:00 PM
Termas and Tertons: Refreshing the Teachings
Dr Fabian Sanders (Venice)
In the Tibetan tradition, time is not linear. Time changes its intrinsic quality through the ages. Sentient beings living in the ups and downs of time have different problems and needs. In Tibet an unusual and unique feature has been developed in order for the Dharma to continue to be useful and effective in shifting times: Termas. This lecture presents various kinds of termas and the biographies of some of the most important terma discoverers.27 January 2012, Vernon Square, V211, 6:00 PM - 8:00 PM
Wrathful Deities and Their Symbolism
Robert Beer
This talk explores the iconography and symbolism of the Nyingma Dharmapalas depicted on ten murals of the Great Stupa of Mindrolling in Dehradun, India. These contemporary gold on black protector deity assemblies have only recently been photographically archived and these images have never been presented before.15 December 2011, Vernon Square, V211, 6:00 PM - 8:00 PM
The First World Newah Convention concluded successfully on 31st of October with delegates from around the world participated in the convention.9 November 2011, Vernon Square, V211, 9:00 AM - 5:00 AM
The Five Aggregates and Primordial Wisdom
Dr Jim Valby3 November 2011, Vernon Square, V211, 6:00 PM - 8:00 PM
Buddhism and a Sustainable World: Some Reflections
Prof. Geoffrey Samuel (Cardiff)Buddhist thought through its stress on the mutual dependence of all phenomena contains resources that have been important for those working towards a more ecologically awareness. But Buddhist literature had relatively little explicit concern with environmental awareness, protection or sustainability. Nonetheless, the practice of Buddhist societies, particularly in Tibet and the Himalayas, did engage with environmental issues.7 October 2011, Russell Square: College Buildings, 116, 6:00 PM - 8:00 PM
Where does the Dalai Lama's political retirement leave the issue of Tibet?
A panel discussion on the Dalai Lama's renunciation of political powers, changes in the Tibetan government in exile and the implications for Tibet's future.3 June 2011, Vernon Square, V211, 6:30 PM - 8:00 PM
Tibetan Medicine and Dzogchen: a Perspective on Relaxation
Elio Guarisco27 May 2011, Vernon Square, V111, 6:00 PM - 8:00 PM
Padmasambhava from the early sources: a re-examination
Dr Robert Mayer (Oxford)
Padmasambhava became a densely mythologised figure in Tibetan literature. Modern scholarship has so far remained uncertain to what extent this tendency existed before the time of Nyang ral nyi ma'i 'od zer (1124-1192). However, recently discovered evidence from the Dunhuang texts now strengthens the evidence for elements of the Padmasambhava cult existing within some circles of Tibetan Mahāyoga practitioners, more than a hundred years earlier.12 May 2011, Vernon Square, V211, 6:00 PM - 8:00 PM
The teacher-student relationship in the Kagyu School of Tibetan Buddhism
Tomek Lehnert
The Kagyu School of Tibetan Buddhism is referred to as the "lineage of oral transmission" because of its emphasis on the close relationship between teacher and student. In this lecture Tomek Lehnert will discuss the importance of the teacher-student relationship in practising the Buddhist path, drawing on his 20 years of experience of constant travel as Lama Ole's personal assistant, helping to establish Kagyu Buddhism in the west.31 March 2011, Russell Square: College Buildings, Khalili lecture theatre, 6:00 PM - 8:00 PM
Images of Tibet: Two presentations by photographers of contemporary Tibet
Ryan Pyle and Dianne Aigaki
At this event two leading photographers of contemporary Tibet present their work. Ryan Pyle in 'Development & Change in China's Tibet' demonstrates the remarkable pace of development and urbanization in contemporary Tibet. Dianne Aigaki in 'Dream of the Turquoise Bee' presents photos of Eastern Tibet's natural beauty and changing society. Ms. Aigaki's presentation also includes her botanical drawings of indigenous plants.23 February 2011, Russell Square: College Buildings, L67, 3:00 PM - 5:00 PM
Bhutanese Losar/New Year celebration: Norbu my beloved Yak
A screening of the film 'Norbu: My Beloved Yak' with a question and answer session and reception, in honour of the Buthanese new year. Cost is £20 (£15 concessions) at the door.5 February 2011, Russell Square: College Buildings, Khalili lecture theatre, 5:45 PM - 9:00 PM
Tibetan Oracles and Himalayan Shamans
Dr Fabian Sanders (Venice)
Dr. Sanders presents recent research in the field including attention to the religio-philosophical and cosmological background to Tibetan Oracles. He will also discuss some of its unique and distinguishing cultural characteristics. Finally Dr. Sanders will compare Oracles with the more common and widespread Himalayan phenomena generally labelled as 'Shamanism' highlighting differences and similarities.21 January 2011, Vernon Square, V211, 6:00 PM - 8:00 PM
The Place of Ritual Dance in Tibetan Tantric Practice
Dr Cathy Cantwell (Oxford)
The lecture will review the contexts of Tibetan ritual dance. In particular, the integration of the dance performance into tantric ritual practice will be delved into, with special focus on the structure of Major Practice Sessions (sgrub chen), with fieldwork examples from a Bhutanese monastery in Kalimpong, and a Tibetan exile monastery in Himachal Pradesh.11 November 2010, Vernon Square, V111, 6:00 PM - 8:00 PM
Leaving Fear Behind: Film screenings and Q&A
A screening of Leaving Fear Behind, a film by political prisoner Dhondup Wangchen, and Behind the Sea, a film profile of Dhondup's wife Lhamo Tso. To be followed by a panel discussion and Q&As.21 October 2010, Russell Square: College Buildings, Khalili Lecture Theatre, 7:00 PM - 9:00 PM
Manjusrimitra's Primordial Experience
Khyentse Yeshi Namkhai
The speaker, Khyentse Yeshi Namkhai, will be discussing the Dzogchen tradition of Tibetan Buddhism, particularly from the perspective of Manjusrimitra influence.7 October 2010, Vernon Square, V211, 6:00 PM - 8:00 PM
Consciousness from the Tibetan Buddhist Perspective
H.H. Sakya Trizin11 June 2010, Russell Square: College Buildings, G2, 3:00 PM - 4:30 PM
Tibetan Film Festival 2009: Images and Reflections on Tibet

subset: commoncrawl


text:
Honey French Dressing
Recipe by dontfencemein
French dressing is a proportion thing (at least the way I like it) Ive measured it this time around so you can make it for yourself. Hope You like it. It makes a little more than 1 1/2 cups, approximately 13 oz.
Top Review by Lori Mama
This is delicious! I loved the fact that there wasn't all that oil, which can be found in a lot of bottled dressings. I did half the recipe though, as I'm the only one who likes French dressing. I made no substitutions, but will try the posters suggestion and use fresh onion/garlic next time. Made for PAC Fall '08. :)
See Discussion:1 Review
Ingredients Nutrition
- 1⁄2 cup ketchup
- 1⁄2 cup Miracle Whip
- 1⁄2 cup honey
- 2 tablespoons vinegar
- 1 tablespoon salad oil (I use grape seed)
- 3⁄4 teaspoon salt
- 1⁄8 teaspoon pepper
- 1⁄4 teaspoon celery seed
- 1⁄4 teaspoon onion powder
- 1⁄8 teaspoon garlic powder
Directions See How It's Made
- Mix all ingredients as listed in a small bowl, or in blender.
- Chill before using, and Enjoy!
- If you prefer, try substituting fresh onion and garlic for the powdered, to taste.


text:
by clicking the arrows at the side of the page, or by using the toolbar.
by clicking anywhere on the page.
by dragging the page around when zoomed in.
by clicking anywhere on the page when zoomed in.
web sites or send emails by clicking on hyperlinks.
Print Page
Email this page to a friend
Search this issue
Index - jump to page or section
Archive - view past issues
FLEXO Magazine : June 2008
INDUSTRY INDICATORS RUSSO: Prepress providers exist to provide counsel to us, the cpc. Their role is to ensure that any concerns from the printer are valid, and if needed, addressed. SANEL: I prefer an independent prepress provider, although this is not always an option when printing registered shrink pack- aging or specialized foil stocks. The reason for this is having the flexibility to run jobs at different plants and have them come out matching as closely as possible. Really good prepress providers use proofing materials that simulate the flexo process on the proof, which is great when you are managing brand expectations. THOMPSON: They need to be able to define the printer's platform and translate that into an output capable of providing the printer with the best possible opportunity to meet the client's design expectations. Their proofing and output must be keyed into the equipment on which the design will be reproduced. Q . How can the printer, prepress house and desi9ner better worlc . t09ether to create a hi9h-quality printed paclcage? DUTTER: Printers can become our true partners, will- ingly participate in prepro meetings and move out to deliver on expectations. MARQUARDT: All should meet as early as possible and discuss design and print limitations. RUSSO: Everyone needs to understand the variables (equip- ment, anilox, and ink) and partner to tackle them in the most ap- propriate manner. We plan to continue educating the designers and design managers, so that graphics are designed correctly upfront. SANEL: The prepress provider should submit, well in advance, some kind of target file to fingerprint on the actual press, in or- der to figure out the curve. This info should be kept on file. This should be at no cost to the CPC and preferably there should be a good relationship with the printers. There is nothing worse than having the printer point a finger at the prepress provider when we are on-press. Also, this sounds old-fashioned, but I still like to look at color keys, if at all possible. Why? Because they are a little easier to read when looking for things like trap. Separated PDF files make it too easy to miss something and you don't always have your lap- top with you at the press. Another missing element is the customer; better design firms have the know-how to manage the process, but many still disre- gard the printing process when designing. I am not comfortable at all having an agency manage the execution. There needs to be customer input to get the design where it needs to be. Flexo print- ing can be tricky if not managed properly. THOMPSON: In a collaborative setting, the designer, prepress house and printer will communicate to create a printable design and work toward achieving the best possible reproduction of the client's expectations. The communication begins very early in the Committees: Councils: Awards Committee Emerging Technologies Committee FIRST (Flexographic Image Reproduction Specifications & Tolerances) Committee Flexo Editorial Advisory Committee Flexo in High School Advisory Committee Flexographic Quality Consortium Forum Committee Graphic Design Awards Committee Health & Safety Committee Latin American Committee Membership Committee Professional Development Committee Project Evaluation Committee Scholarship Committee Solicitations Committee Sustainable Green Printing Committee Technical Innovations Awards Committee Join a FTAIFFTA Committee or Council and Get Involved! Consumer Product Company Leadership Council Corrugated Leadership Council Education Leadership Council Envelope Leadership Council Narrow Web Leadership Council Newspaper Leadership Council Prepress Leadership Council Supplier Leadership Council Wide Web Leadership Council For more information and to join, contact Doreen Monteleone, FTA director of EHS & special projects, at 631-737-6020 x30. I:: TEST _ :: ::: ::e :r: prø, PIt,
May 2008
July 2008
Previous Page
Next Page


text: Check out this article from Nccivitas.org! He's been on G105 for more than 24 years!! That's 24 years of YOU saying' "Oh my God! I can't believe he just said that!" and "That is SO freakin' FUNNY!" and "Gosh he's a idiot!" He's part of your family. He's BOB! Contact Call 1-855-SHOWGRAM Email email@example.com Social


text:
|Publication number
|Publication type
|Application number
|Publication date
|Sep 2, 2008
|Filing date
|May 5, 2003
|Priority date
|May 5, 2003
|Fee status
|Also published as
|Publication number
|Jose Costa-Requena, Jukka Immonen, Markus Aholainen, Juha Hietasarka, Ossi Korhonen, Jussi Ruutu
|Original Assignee
|Nokia Corporation
|Export Citation
|BiBTeX, EndNote, RefMan
|Patent Citations (8), Referenced by (32), Classifications (9), Legal Events (4)
|External Links: USPTO, USPTO Assignment, Espacenet
This invention relates in general to providing generic Internet Protocol (IP) authentication, and more particularly, to providing authorization and authentication for an IP Multimedia Subsystem (IMS).
The mobile industry has experienced a period of exceptional growth during the last several years, where mobile voice and simple SMS text messaging have provided some of the primary drivers for that growth. As the next generation of mobile network growth evolves, services will be offered, where rich content as well as voice will be transported throughout a combination of mobile and internet environments, using an integrated IP network layer.
An ALL-IP network enables seamless network integration of different access options, e.g., broadband, mobile Internet, fixed Internet, and existing mobile systems, into a single IP layer. As such, all communication services may be carried over a single network infrastructure, thus enabling the integration of voice, data, and multimedia services. Carriers on the ALL-IP networks will glean a number of important benefits as well, including cost savings, scalability, flexibility, efficient network operations, and new revenue opportunities.
The ALL-IP communication system is to be fully compliant with the Third Generation Partnership Project (3GPP) release 5 and 6 standards, with open interfaces and IP Version 6 (IPv6) support. Accordingly, Session Initiation Protocol (SIP) is introduced as a key ingredient in providing support for multimedia services across the Web and Internet domain for IP enabled terminals. For a consumer, for example, this means integrated voice, video, and browsing experience in a single call. With SIP, numerous applications can be implemented which combine traditional telephony with messaging and multimedia. In particular, SIP applications and services may be combined in order to complement and supplement each other in order to provide a more fulfilling and reduced workload experience for the consumer. As applications and services become integrated, they each become readily available to supplement each other's shortcomings. Additionally, however, authentication and authorization of users that access those applications and services becomes increasingly challenging.
Authenticating the identity and authorization of users with a high degree of certainty in open environments has been one of the most significant functional problems encountered when developing services accessible over the Internet. Many different schemes for establishing the desired result have been devised, with varying degrees of certainty, security and user friendliness. Properties of every good identity authentication and authorization mechanism should at least possess, for example: correctness; preservation of anonymity; speed; resistance to attack; low expense; user friendliness; and universality. In order to preserve anonymity, the user authentication and authorization mechanisms should not have direct access to the security credentials of each user. They should, rather, be implemented via Subscriber Identity Module (SIM) or Application Protocol Data Unit (APDU) servers that have direct communications with the associated operating systems.
Within IMS, however, varying signaling protocols exist for authenticating the user, where each protocol may implement its own algorithm, such as the Advanced Encryption Standard (AES) or Digest. The signaling protocols that require authentication when accessing the network include Session Initiation Protocol (SIP), HyperText Transfer Protocol (HTTP), IP via Wireless Local Area Network (WLAN), Extensible Authentication Protocol (EAP), etc. Currently, these IMS protocols implement their own security solutions, where access to the security credentials is facilitated through the use of separated systems such as the Public Key Infrastructure (PKI).
As the ALL-IP communication system develops, a consolidated authentication system is desired, which is able to adapt to the specific bearer mechanism being used. Additionally, the consolidated authentication system should be able to perform multiple algorithms and create the appropriate messages that encapsulate the results of those algorithms depending upon the bearer protocol that requested the authentications. Thus, the consolidated authentication system should have access to the SIM information and other algorithm data within the same platform in order to perform the right calculation. The different applications installed on the platform should register the security algorithms, protocols and credentials that are required for performing each authentication procedure. Once registered, the security information may be accessed by the requesting party from the platform. Such an access would then result in the execution of the correct algorithm and correct result delivery encapsulated into the correct envelope as required by the requesting entity.
Accordingly, there is a need in the communications industry for a system, apparatus and method that facilitates consolidated authentication. The consolidated authentication should have the capability to service authentication procedures from any number of IP bearer protocols and return the results of the authentication procedures in the correct format as required by the requesting entities.
To overcome limitations in the prior art, and to overcome other limitations that will become apparent upon reading and understanding the present specification, the present invention discloses a system, apparatus, and method for providing generic authentication services in an IP network.
In accordance with one embodiment of the invention, a method is provided for facilitating generic authentication within an IP network. The network comprises receiving an authentication request, detecting an authentication mechanism associated with the received authentication request, selecting one of a plurality of authentication modules in response to the detected authentication mechanism, and accessing data that is required to support the authentication module.
In accordance with another embodiment of the invention, an authentication system is provided. The authentication system comprises a plurality of network elements each employing a different authentication protocol. The authentication system further comprises an authentication server arranged to provide authentication service in response to received authentication requests from the network elements. The authentication server further comprises a data server arranged to provide data to the authentication server to support the authentication service. The authentication service performed depends upon the authentication protocol employed by the requesting network element, which is detected by an Application Programming Interface (API) that allows the applications to utilize the services provided by the authentication system.
In accordance with another embodiment of the invention, a server within a network is provided to authenticate network elements within an IP network. The server comprises means for receiving authentication requests having various protocol types from the network elements, means for detecting the various protocol types, means for invoking an authentication mechanism depending upon the protocol type of the authentication request, and means for accessing data in support of the authentication of the network elements.
In accordance with another embodiment of the invention, a computer-readable medium having instructions stored thereon which are executable by an authentication server for facilitating authentication of network elements is provided to perform steps comprising receiving authentication requests having various protocol types from the network elements, detecting the various protocol types, invoking an authentication mechanism depending upon the protocol type of the authentication request, and accessing data in support of the authentication of the network elements.
These and various other advantages and features of novelty which characterize the invention are pointed out with greater particularity in the claims annexed hereto and form a part hereof. However, for a better understanding of the invention, its advantages, and the objects obtained by its use, reference should be made to the drawings which form a further part hereof, and to accompanying descriptive matter, in which there are illustrated and described specific examples of a system and method in accordance with the invention.
The invention is described in connection with the embodiments illustrated in the following diagrams.
In the following description of the exemplary embodiment, reference is made to the accompanying drawings which form a part hereof, and in which is shown by way of illustration various embodiments in which the invention may be practiced. It is to be understood that other embodiments may be utilized, as structural and operational changes may be made without departing from the scope of the present invention.
Generally, the present invention is directed to a system, apparatus, and method to provide authorization and authentication services within an IP based network. Identification and authentication are critical functions for practically all services offered by the IP based network. A consumer and a client, for example, need to be identified and authenticated before gaining access to services offered by mobile networks, WLANs, corporate intranets, and valuable Wireless Application Protocol (WAP) and Web sites on the Internet. It is equally important that the consumer trust the service, so that no sensitive information is provided to unknown parties.
The present invention provides a mechanism through which a number of protocols and standards for authentication may be serviced. The mechanism according to the principles of the present invention is intended to provide an open standard and API for identification and authentication for a variety of service types. In so doing, the present invention enables subscribers to: identify themselves with an appropriate level of traceability and security; disclose some of their private data to various services in a controlled and confidential manner so that personal services can be provided; authorize services and other agents to use brokers; and achieve single sign-on.
The identification and authentication system provides client authentication that has adequate security to satisfy the carrier or service provider policies for service access or for the transaction being undertaken. Additionally, the identification and authentication system provides management and authorization tools to simplify provisioning and configuration of the consumer accounts and devices. Further, the identification and authentication system provides development tools to aid smooth deployment of the authentication and identification system and to enable third-party application developers to use the system more easily.
An exemplary system level diagram of ALL-IP system 100 architecture in accordance with the present invention is shown in
ALL-IP system 100 is optimized to support multimedia services, where Call State Control Function (CSCF) 110 implementing SIP is a key ingredient in providing the multimedia services to all IP enabled devices. Although SIP's primary objective was meant for multimedia sessions, its scope may be extended to presence, gaming, and IM, as well. Numerous applications can be implemented using SIP, allowing the combination of traditional telephony with messaging and multimedia. For example, SIP can enhance the concept of caller identification from one of simply displaying the number of the calling party to terminal 108, for example, to one of rich content identification. The calling party may, for example, display his personalized logo or business card information to terminal 108 and deliver the subject of the pending call in text, video, or picture format, depending upon the capabilities of terminal 108.
The wireless terminal 108 may represent any of a number of ALL-IP mobile communication devices, such as a cellular telephone 114, a personal digital assistant (PDA) 116, a notebook or laptop computer 118, or any other type of ALL-IP wireless terminal represented by device 120. 3G Radio Access Network (RAN) 132 represents a combination of all mobile radio standards, such as Global System for Mobile Communications (GSM)/Enhanced Data Rates for Global Evolution (EDGE) and Wideband Code Division Multiple Access (WCDMA). Each mobile radio standard having its own distinct network architectures and transport mechanisms that are fully integrated using the IP protocol, where Serving General Packet Radio Service (GPRS) Support Node (SGSN) 130 and Gateway GPRS Support Node 140 provides the RAN interface to ALL-IP core 112.
Network 144 provides WLAN, Digital Subscriber Line (DSL), and cable access to ALL-IP core 112 by Remote Access Server (RAS) 142. RAS 142 may include, for example, a Digital Subscriber Line Access Multiplexer (DSLAM) or a cable head end controller. To provide access to ALL-IP core 112 over a cable network, a head-end controller device (not shown) within RAS 142 connects to an IP router (not shown) that sends and receives the data from ALL-IP core 112. The controller interprets the data it receives from individual customers and keeps track of the services offered to each of them. The controller also modulates the data received from ALL-IP core 112 so that the head-end equipment can send it to a specific cable subscriber within network 144.
ALL-IP system 100 supports Legacy Cellular systems 104 that offers communication support to non ALL-IP terminal 102, for example. Signaling gateway 122 performs all necessary Signaling System No. 7 (SS7) and Mobile Application Part (MAP) signaling conversions as necessary to provide SS7 over IP access from PSTN 124 and MAP over IP access from Legacy Cellular system 104 to ALL-IP core 112. In addition, signaling gateway 122 provides Short Message Service Center (SMSC) support and Multimedia Message Service Center (MMSC) support for any SMS and MMS operations as required by mobile terminal 102.
Internet 138 access from ALL-IP core 112 is provided through internet gateway 136 to allow accesses defined by Uniform Resource Locator (URL) and Uniform Resource Identifier (URI) address definitions. Home Subscriber Server (HSS) 128 provides ALL-IP core 112 with the many database functions that are required in ALL-IP networks. HSS 128, for example, includes Home Location Register (HLR) and Domain Name Server (DNS).
Service capability servers 106 provide consumer applications and services that are not easily provided within the circuit switched or packet core networks by themselves. Service groups having major relevance in 3G ALL-IP networks include information and entertainment content providers, communication, productivity enhancing services and business solutions. Accordingly, services that are timely, personalized, simple to complete, and location specific are provided to all consumers of ALL-IP system 100.
Authentication server 134 provides localized identification, authentication, and authorization functions for any terminal having access to ALL-IP core 112. Authentication server 134 is hierarchically attached to ALL-IP core via, for example, the IP, SIP, EAP, or HTTP stacks and it provides the required authentication mechanisms depending upon the bearer's capability used at any particular instant. Authentication server 134 performs the multiple algorithms and creation of the appropriate messages that encapsulate the results of those algorithms depending on the protocol that requested the authentications. For example, if authentication is requested from a WLAN access point, e.g., RAS 142, authentication server 134 receives information about the algorithm and protocol and will return the security tokens formatted into the indicated protocol, such as the Extensible Authentication Protocol (EAP).
Similarly, if the requesting protocol is SIP, authentication server 134 accesses the SIM information, either directly or via a SIM server (not shown), and performs the appropriate calculation for obtaining the integrity and confidentiality keys requested by the IMS. The integrity and confidentiality keys are then formatted into the correct SIP structure that is included in the SIP header. Alternately, if authentication is requested via a SIP procedure for accessing services provided within ALL-IP core 112, then calculation of the security credentials may involve a different algorithm and the results would involve a different structure that would be placed into the SIP header.
SIP enabled call/authentication control within ALL-IP system 100 is provided by CSCF 110, where SIP is hierarchically located in the session layer of the Open System Integration (OSI) model of protocol stack communication.
A multicasting agent, IP Multicasting 240, also resides within the IP layer which allows, for example, a mobile subscriber to deliver a packet simultaneously to multiple receivers, easing the scalability of large conferences or media streaming. Security is also provided within the IP layer, i.e., IPSec 212, which provides confidentiality and integrity protection for all traffic. RSVP 218 is a signaling protocol for flow state establishment. A flow is a stream of packets classified by a flow classifier where each packet is subject to a queuing policy. Each packet may be considered individually, for example, to check their conformance to the bandwidth limit associated with each packet in the packet stream.
Above the IP layer resides transport protocol layer 204, which operates end-to-end between hosts or terminals. Exemplary transport protocols include Transmission Control Protocol (TCP) 220 that allows connection-oriented reliable delivery with congestion control and retransmission for data recovery. Another transport protocol is User Datagram Protocol (UDP) 222, which allows a connectionless datagram service where connection setup is not needed or when overhead should be reduced. Another transport within transport layer 204 is the Stream Control Transmission Protocol (SCTP) (not shown) which provides connection-oriented service to multiple interfaces/IP addresses. SCTP allows multiple streams to avoid head of line blocking and is also message oriented, so that protocols running on top of SCTP do not need to worry about message alignment. Transport Layer Security (TLS) 242 provides communications privacy over connection-oriented transport protocols. TLS 242 allows one or both of the end points to be authenticated with certificates and provides keys enabling encryption of all the data in the transport connection. A common use for TLS 242 and its predecessor, Secure Sockets Layer (SSL), is to secure Web transactions.
Above transport protocol layer 204 resides session protocol layer 206. HTTP 232 performs session control for browsing and enables management of transport layer connections for content transfer. The connections are addressed either to a proxy HTTP server or directly to the server identified by the host part of the Uniform Resource Locator (URL). E-mail type store and retrieve messaging sessions are managed with Simple Mail Transfer Protocol (SMTP) 226 and the Internet Message Access Protocol (IMAP) 224. Layers above transport layer 204 can utilize the Internet Domain Name System (DNS) to translate mnemonic names to numeric addresses required by those layers. Voice and other multimedia content, such as video or animation for example, are transported by Real-Time Transport Protocol/Real-Time Transport Control Protocol (RTP/RTCP) 230, which runs on top of UDP transport 222. RTP/RTCP 230 also offers synchronization of data streams it carries by including a sequence number and a timestamp header.
Session Initiation Protocol/Session Description Protocol (SIP/SDP) 228 is utilized for instant messaging and rich call session control. SIP/SDP 228 facilitates end-to-end capability negotiation for real-time multimedia communication sessions, where the real-time media is transported over RTP with the aid of RTP/RTCP 230. Addressing for SIP sessions is based on the SIP URLs. SIP user agents are reachable through their registration to the rich session control element in the home network, which is identified by the domain portion of the consumer's SIP URL. Real time transport resources are managed independently by each session participant for his or her own access network.
Presentation layer 208 comprises Multipurpose Internet Mail Extensions (MIME) 236, which defines the rules for labeling and transmission of different data types within SMTP messages and their attachments. MIME 236 also forms the basis for the transmission of streaming data, such as audio and video messages. RTP Payload Formats 238 supports grouping of payload types for specific applications, such as for audio/video conferencing. Payload types identify specific codecs, such as for Moving Pictures Expert Group Version 4 (MPEG-4) streams, or Enhanced Variable Rate Codec (EVRC) speech. Application layer 210 is situated on top of the transport and session layer protocols, providing the various mobile applications with basic application domain independent services, such as user interface, application inter-working, and service access security.
The protocol hierarchy of
Communications subsystem 306 incorporates the operating system abstraction (not shown) and transport protocols SCTP 332, TCP 334, UDP 336 and TLS 344. Application Programming Interfaces (API) 312-316 supports the end-to-end application environment that includes both server side and terminal side application environments. On the terminal side, the application environment includes the APIs provided by the terminal. The standard, easy to use APIs allow developers to write applications once and run them easily in a large variety of terminals compliant with the endorsed standards. Use of technologies, such as Java 2 Micro Edition (J2ME), make it possible for developers to write applications that automatically adapt to different types of mobile devices, screen sizes, colors, and other device properties. On the server side, software architecture 300 includes the APIs provided by the Service Provisioning Infrastructure (SPI), which includes the software for hosting applications and content. Portability across multi-vendor SPIs and different hardware platforms is a major benefit that is provided by the APIs.
Authentication module 302 and associated API 310 provides a centralized authorization and authentication function according to the present invention. Various authentication mechanisms, e.g. 318-326, are contained within authentication module 302 and they are invoked depending upon the bearer mechanisms requesting them. For example, if authentication is requested from a WLAN network 144 via RAS 142 in
In case the authentication module is unable to identify the specific authentication mechanism required, or is unable to access the required user information, e.g., security credentials, authentication module 302 will return an error notification indicating the reason of the failure. Such failure reasons may include, for example, the inability of authentication module 302 to access SIM information, or the inability to access specific user information that is required by the authentication mechanism of the request, etc. The application or protocol stack that receives the error notification may then treat the error accordingly and prompt the user to supply additional information, or simply just inform the user about the error. It is apparent to one of ordinary skill in the art that actions based on the reported errors from authentication module 302 are implementation dependant and may include any number of options.
IPsec Security Associations (SA) Manager 326 of authentication module 302 uses two protocols to provide traffic security: Authentication Header (AH) and Encapsulating Security Payload (ESP). The IP Authentication Header (AH) provides connectionless integrity, data origin authentication, and an optional anti-replay service. The Encapsulating Security Payload (ESP) protocol may provide confidentiality, e.g., encryption, and limited traffic flow confidentiality. Both AH and ESP are vehicles for access control, based on the distribution of cryptographic keys and the management of traffic flows relative to these security protocols.
IMS/Authentication and Key Agreement (AKA) 320 of authentication module 302 produces an Authentication Vector (AV), based on a shared secret K and a sequence number (SQN). The AV contains a random challenge (RAND), network authentication token (AUTN), expected authentication result (XRES), a session key for integrity check (IK), and a session key for encryption (CK), each of which is contained within key storage 342. The authentication module 302 creates an authentication request, which contains the random challenge RAND, and the network authenticator token AUTN and is then delivered to the requesting client in the format required by the requesting client. Using the shared secret K and the sequence number SQN, the client verifies the AUTN. If the verification is successful, the network has been authenticated. The client then produces an authentication response RES, using the shared secret K and the random challenge RAND.
The PPP (Point-Point Protocol) Extensible Authentication Protocol (EAP) 318 of authentication module 302 is a general protocol for PPP authentication, which supports multiple authentication mechanisms. EAP 318 does not select a specific authentication mechanism at link control phase, but rather postpones the selection until the authentication phase. This allows API 310 to request more information before determining the specific authentication mechanism. After the link establishment phase is complete, authentication module 302 sends one or more requests to authenticate the client. The request has a type field to indicate what is being requested. Examples of request types include Identity, Message Digest 5 (MD5) challenge, One-Time Passwords, Generic Token Card, etc. Typically, authentication module sends an initial identity request followed by one or more requests for authentication information. However, an initial identity request is not required, and may be bypassed in cases where the identity is presumed, e.g., leased lines, dedicated dial-ups, etc. The client sends a response packet in reply to each request. Authentication module 302 ends the authentication phase with a success or failure packet.
Liberty Manager 324 of authentication module 302 specifies mechanisms for achieving identity federation, single sign-on, termination of identity federation, as well as single logout. When a single sign-on service is made available, for example, a user who has already authenticated himself with one service provider, need not authenticate himself with a second service provider. Instead, the sign-on at the first service provider lends itself to the second service provider, thus allowing a single sign-on. Liberty manager 324 separates the message schemas from their associated profiles and bindings. Message schemas are proposed for the single sign-on and federation protocol, the federation termination notification protocol, as well as the single log-out protocol. Associated with the single message schema, liberty manager 324 specifies several profiles and bindings. Depending on the particular scenario, the appropriate liberty profile may be applied. Such scenarios include cases where the client is using either a Web browser, a Wireless Application Protocol (WAP) browser, or a liberty-enabled browser.
HTTP/Digest 322 of authentication module 302 is based on a simple challenge-response paradigm. The digest scheme challenges by using a nonce value. The response contains a checksum, e.g., MD5 checksum of the username, password, the given nonce value, the HTTP method, and the requested URI. In this way, the password is never sent in the clear. HTTP/Digest 322 utilizes modified WWW-Authenticate and WWW-Authorization headers along with the WWW-Authentication-Info header to perform authorization on requests for access-protected objects. It should be noted that the authentication mechanisms are not limited only to those illustrated to be within authentication module 302. It is apparent to one of ordinary skill in the art that other mechanisms such as HTTP/Basic or Kerberos, for example, may also be implemented within authentication module 302.
According to one embodiment of the present invention, authentication module 302, key storage 342, and API 310 are each co-located within a SIM server, user security profile storage, or other implementation specific storage for secure user information, e.g., Pretty Good Privacy (PGP) ring, etc., such as may be exemplified by authentication server 134 of
The specific modules that perform the authentication procedure within authentication module 302 should register their API to the authentication module in a plug in approach. Initially, for example, authentication module 302 may perform an older version of Liberty Alliance Identity checking, but when new versions are available, authentication module 302 may incorporate a new plug in that will perform the newest version of Liberty Alliance. Thus, new security modules could be embedded within authentication module 302, thus requiring that the modules be trusted, e.g., appropriately certificated in order to ensure that the module is legitimate and can be incorporated to the authentication module. Similarly, the applications requesting authentication service from authentication module 302 should be checked for legitimacy, where the channel between the applications and the authentication module is secure and tamper resistant by TOE standards.
Authentication server 134, employing authentication modules 318-326, provides generic IP authentication to ALL-IP system 100 according to the present invention. Any protocol requiring authentication prior to its access of ALL-IP system 100 is able to initiate an authentication algorithm according to its particular protocol. Once initiated, API 310 of
In accordance with an exemplary mode of operation, authentication server 134 provides SIP authentication support using SIP digest, plain text and AKA procedure. The authentication server may also provide an authorization token that may be requested by the SIP protocol to be included in the SDP messages for media authorization. SIP messages have substantially the same structure as HTTP messages, and contain a request line or status line followed by at least six header fields. SIP supports the Multi-Purpose Internet Mail Extension (MIME) for describing the content in the message body. In most cases, the message body consists of an SDP message that describes the media transfer after the call setup signaling is completed. The SDP message has a MIME subtype of application/sdp and other MIME subtypes such as text/plain or image/gif may also exist within the message body. The SDP also contains a "k=" parameter that allocates security information used for authorizing the media transaction or access to the service specified in the SDP message.
All requests from a SIP User Agent (UA) contain a method in the request line as shown in Table 1. The response from a UA server has the same structure as in HTTP responses and contains response codes that belong to one of six response code classes that are listed in Table 2. Other SIP applications that can handle SIP messages include proxy servers, redirect servers, registration servers, and gateways. Proxy servers
Invites UA server to a call and establishes
a new connection. Media capabilities may
also be contained within the message.
Used to acknowledge a received INVITE
Terminates the media session between two
Used for registering information about
a UA client's location.
Terminates a non-acknowledged
Used to get information about supported
Used to exchange messages and may
include plain text or MIME types.
Used for media negotiation and may
include SDP with media
authorization data.
Used to subscribe to certain events.
Used to notify about certain events.
TABLE 2 CLASS DESCRIPTION 1xx Provisional or informational: Request is progressing, but not yet complete. 2xx Success: Request has completed successfully. 3xx Redirection: Request should be tried at another location. 4xx Client error: Request was not completed due to error in request, can be retried when connected. 5xx Server error: Request was not completed due to error in recipient, can be retried at another location. 6xx Global failure: Request has failed and should not be retried again.
have the task of forwarding the request from the UA client to the SIP address specified in the SIP message. Proxy servers also have the ability to modify portions of the SIP message, e.g., the Via header field. Proxy servers may also require authentication prior to forwarding the SIP message to the intended recipient.
In particular, the message flow diagram of
User Agent A sends an INVITE message to its designated proxy server (not shown) via message 402. The INVITE message, however, contains no authorization credentials, but is forwarded anyway to authentication server 134 via message 404. The proxy server submits a 100 TRYING message back to User Agent A via message 406 to indicate call set-up progression. API 310 executing on authentication server 134 detects that a SIP INVITE message is pending and, therefore, invokes HTTP/DIGEST module 322 to support the authentication session. Since the INVITE request submitted by user agent A attempts to access a restricted domain within User Agent B, authentication server 134 provides a 401 UNAUTHORIZED challenge via message 408 to the proxy server. The proxy server then proxies the 401 UNAUTHORIZED challenge to User Agent A via message 410. Each 401 UNAUTHORIZED challenge is acknowledged via ACK messages 412 and 414.
The 401 UNAUTHORIZED challenge message from authentication server 134 contains the WWW-Authenticate header field as described in Table 3. User Agent B may have several protected domains and, therefore, the realm field specifies the challenge for the specific protected domain within User Agent B. The realm value cannot be excluded because the User Agent A's credentials are based on it. The optional domain field specifies each URI that is a party to the specific protected domain within User Agent B. The nonce value is important because it specifies the current challenge. The format of the nonce value is implementation dependant with the restriction that it should be unique. The nonce value is effective against replay attacks when used in conjunction with the stale parameter. In such an instance, if the nonce value is changed for each new request, then the stale parameter may be set to indicate a rejected message due to a stale nonce value. The algorithm parameter is an optional parameter which may be used to specify which algorithm is to be used for checksum calculations, e.g., MD5. The qop-options parameter is optional depending upon backward compatibility with older versions of Digest authentication. It should be used, however, because it
TABLE 3 NAME OF PARAMETER DESCRIPTION realm String associated with the protection domain. domain (optional) List of URIs that define the protection domain. nonce Unique string that is created by the server for each 401 response. opaque (optional) A string of data specified by the server which should be returned by the client unchanged. stale (optional) A flag that specifies if the previous request from the client is rejected because the nonce was stale. algorithm (optional) Specifies the algorithm to use for the checksum calculations. qop-options (optional) Specifies the quality of protection that the server supports. It can either be "auth-int" or "auth" depending on the server's capabilities. auth-param (optional) Future extensions.
provides mutual authentication and some message integrity protection. The mutual authentication means that authentication server also has to verify that it knows the username and password for User Agent A. If the qop-options="auth-int", then both authentication and message integrity protection is used. If the value is "auth", then only authentication is used. It is important to note that if authentication server 134 to User Agent A authentication is used, it is done with the Authentication-Info header field.
When User Agent A receives the 401 UNAUTHORIZED challenge via message 410, it uses its password and some of the parameters contained within the WWW-Authenticate header field to calculate the checksum. The checksum is then included in the response portion of the Authorization header field as illustrated in Table 4. An exemplary
TABLE 4 NAME OF PARAMETER DESCRIPTION username Client's username for specified realm. realm String associated with the protection domain. Must contain the same value as the realm value of the 401 UNAUTHORIZED response from authentication server. nonce Unique string that is created by the authentication server for each 401 response. Should contain that same value as the nonce value in the 401 response from the authentication server. digest URI The URI from the request URI of the request line. response The calculated checksum that is hexadecimal encoded. algorithm (optional) Specifies the algorithm to use for the checksum calculations. cnonce (optional) If the qop-options in the received 401 response is not empty, this value is used by the authentication server to authenticate itself to User Agent A by using the Authentication-Info header field. The value is generated by the client and it should be unique. If the qop-options is empty in the received 401 response, then this value must not be used. opaque (optional) A string of data specified by the authentication server that should be returned by User Agent A unchanged. message-qop (optional) Specifies the quality of protection that User Agent A has applied to the message. It must be equal to one of the qop-options values specified in the 401 response from the server. nonce count (optional) Specifies the number of requests that have used the nonce specified in this header field. auth-param (optional) Future extensions.
Authorization header field with credentials that is included in the INVITE message 416 is illustrated in Table 5.
INVITE sip:email@example.com SIP/2.0
Method = INVITE;
SIP URI = sip:firstname.lastname@example.com
SIP Version = 2.0
Via:SIP/2.0/TCP firstname.lastname@example.com
Originator = firstname.lastname@example.com at port
branch = sipproxy.domain.com 5061.
Forwarding server = sipproxy.domain.com
at port 5061
To: User B
Display Name = User B
<sip: email@example.com>
Destination URL = <firstname.lastname@example.com>
From: User A
Display Name = User A
<sip: email@example.com>
Origination URL = <firstname.lastname@example.com>
Call-ID: email@example.com
Unique Identifier = asd88asd77a
Globally Unique IP Address = 220.127.116.11
CSeq: 1 INVITE
Command Sequence Number = 1
Request Method = INVITE
Authorization: Digest username = "User A",
Authorization header field as defined in
realm = "User B", nonce =
Table 4
"e288df84f1cec434lade6e5a359", digest
URI = "sip:firstname.lastname@example.com", response =
algorithm = " ", cnonce = " ", opaque = " ",
message-qop = " ", nonce count = " ", auth-
param = " "
The first line of the SIP message shown in Table 5 does not contain headers, but starts with the name of the method, e.g., INVITE, followed by the INVITE URI, e.g., "sip:email@example.com", which is the destination address of the message. The current version of SIP used then follows, e.g., version 2.0. The next line of Table 5 displays the Via header, which also indicates the SIP version and transport mode, e.g., TCP, followed by the host name, e.g., "firstname.lastname@example.com", of the originator of the message followed by the originator's port number, e.g., 5060. Each server that forwards the message enters its own forwarding address, e.g., "sipproxy.domain.com", to the header as well as its designated port number. Any responses as a result of the message then are able to follow the Via path, thus obviating the need for address resolution in the reverse direction.
Next, the To/From headers display the display name, e.g., UserB/UserA, and the URL of the destination/origination enclosed in brackets < >. The Call-ID header contains a unique identifier for the current call. All subsequent requests and responses during the call will contain the same unique identifier. CSeq represents the command sequence number of the current command, followed by the request method, e.g., INVITE. Each successive request or response will have a higher CSeq number, where the called and calling parties each maintain there own CSeq counts. The Authorization header field follows (as defined in Table 4), where the response portion contains User A's response to the challenge presented by authentication server 134. The INVITE response message is proxied to authentication server 134 via message 418. Authentication server 134 then compares User A's response by calculating its own checksum using the parameters sent to User A in message 410. If the checksum value matches User A's response value, then User A is authenticated to access the protected domain within User B and access is granted by the 200 OK message sent via message 420.
Since authentication server 134 is trusted by User Agent B, the INVITE message illustrated in Table 5 is proxied to User Agent B via message 422 and is signaled as progressing through 100 TRYING message 424. User Agent B provides 180 RINGING message 426 to the proxy server, which is then proxied to User Agent A via message 428. After several handshaking messages occur (not shown), the authenticated media session commences as in message 430.
It should be noted that the authentication service that is provided in accordance with the present invention, contemplates both an apparatus that may reside within the proxy server, as part of the proxy server or collocated with the proxy server, and an apparatus included in the terminal, e.g. user agent A, for providing multiple authentication mechanisms that may be required in the terminal. When considering the authentication service provided in the terminal, it can be implemented as any other support module, such as the keyboard server that receives all the inputs from the keyboard and passes it to the application that is running. When any application running on the terminal requires calculation of some authentication procedure: it contacts the authentication server through the authentication server's API; the authentication server then calculates the necessary credentials; and then returns them to the application running on the terminal.
Similarly, the same authentication procedure applies when the authentication server is implemented as a module collocated with the proxy server, as depicted for example, by the message flow of
The authentication service according to the present invention is offered either on the client side in response to the received authentication requests from the network elements, or on the network side. When the authentication service is operating on the network side, the authentication server provides the authentication service to a network element that is being accessed by a client, who must first be authenticated. In that case, the network element receives the attempt to access the network from another user supplying his own security credentials, and then forwards them to the authentication server for validation. The authentication server will insure that the security credentials provided are correct according to the specific authentication protocol selected for the process.
The message flow diagram of
In one embodiment according to the present invention, for example, a non-SIP scheme of transaction security is required at the transport layer. IPsec SA Manager 326 of authentication module 302 is invoked to interact with the corresponding IPsec layer of its communication peer. In such a case, API 310 recognizes that an IP-layer security scheme is desired, where encryption and signing of IP packets is implemented to support secure transmission across ALL-IP system 100 of
In another embodiment according to the present invention, SIM authentication is supported by authentication server 134, whereby Virtual Private Network (VPN) certificates may be kept by key storage 342. In such an instance, the VPN certificates are used for WLAN authentication, whereby the 802.11 b standard provides link level authentication between stations. In addition, authentication server 134, in conjunction with the 802.11b authentication standards of the WLAN, supports shared key authentication with the Wired Equivalent Privacy (WEP) option.
In order to provide the necessary key, certificate and signature information to support the various authentication mechanisms, a local repository of SIM data is defined to exist in accordance with the present invention.
Hardware (HW) driver 526 facilitates information transfer from SIM card 530 to APDU server 518 via serial link 528. The information is transferred via data records called Application Protocol Data Units (APDU), the format of which is illustrated in Table 6.
TABLE 6 CODE NAME DESCRIPTION CLA Class Class of instruction INS Instruction Instruction code P1 Parameter Instruction Parameter #1 P2 Parameter Instruction Parameter #2 P3 Parameter Instruction Parameter #3 Lc Length Number of bytes present in the data field of the command DATA Data String of bytes sent in the data field of the command Le Length Maximum number of bytes expected in the data field of the response to the command
"CLA" is a one byte field that indicates to what extent the data unit complies with International Organization for Standardization/International Electrotechnical Commission (ISO/IEC) 7816 and when applicable, the format of secure messaging and the logical channel number. "INS" is a one byte instruction code associated with the APDU and it indicates the command initiated by the APDU. Exemplary actions initiated by the INS code are: "SELECT FILE"; "READ RECORDS"; "GET DATA"; and "PUT DATA" to name only a few. Parameters P1-P3 are one byte fields that may contain any value associated with the "INS" instruction code.
Links 522 and 524 represent APDU flow via Operating System (OS) messaging between HW driver 526 and APDU server 518. Connection manager 514 connects to connectivity layer 508 via path 510 and encapsulates the APDU message received from SIM card 530 into an ISI message. Once encapsulated, the ISI message may transfer to connection manager 516 of SIM server 520 via path 512. The data portion of the APDU encapsulated within the ISI message may then be stored within SIM server 520 for subsequent access by applications 502-506. Applications 502-506 may represent any application executing on authentication server 134 of
A generic authentication method is thus implemented by the present invention in which any number of protocols may complete an authentication session no matter what authentication mechanism is being employed by the protocol. In particular,
In operation according to the principles of the present invention, an authentication request is received in step 602. The authentication request may use any IP based authentication protocol previously registered in step 600. The receiving API, e.g. API 310 of
Using the description provided herein, the invention may be implemented as a machine, process, or article of manufacture by using standard programming and/or engineering techniques to produce programming software, firmware, hardware or any combination thereof. Any resulting program(s), having computer-readable program code, may be embodied on one or more computer-usable media, such as disks, optical disks, removable memory devices, semiconductor memories such as RAM, ROM, PROMS, etc. Articles of manufacture encompassing code to carry out functions associated with the present invention are intended to encompass a computer program that exists permanently or temporarily on any computer-usable medium or in any transmitting medium which transmits such a program. Transmitting mediums include, but are not limited to, transmissions via wireless/radio wave communication networks, the Internet, intranets, telephone/modem-based network communication, hard-wired/cabled communication network, satellite communication, and other stationary or mobile network systems/communication links. From the description provided herein, those skilled in the art will be readily able to combine software created as described with appropriate general purpose or special purpose computer hardware to create an authentication system, apparatus, and method in accordance with the present invention.
The network servers or other systems for providing authentication functions in connection with the present invention may be any type of computing device capable of processing and communicating digital information. The network servers utilize computing systems to control and manage the authentication activity. An example of a representative computing system capable of carrying out operations in accordance with the invention is illustrated in
The example computing arrangement 700 suitable for performing the authentication activity in accordance with the present invention includes authentication server 701, which includes a central processor (CPU) 702 coupled to random access memory (RAM) 704 and read-only memory (ROM) 706. The ROM 706 may also be other types of storage media to store programs, such as programmable ROM (PROM), erasable PROM (EPROM), etc. The processor 702 may communicate with other internal and external components through input/output (I/O) circuitry 708 and bussing 710, to provide control signals and the like. For example, a SIP INVITE message such as that exemplified in Table 5 may be received by authentication server 701, which invokes authentication module HTTP/Digest 322 of
Authentication server 701 may also include one or more data storage devices, including hard and floppy disk drives 712, CD-ROM drives 714, and other hardware capable of reading and/or storing information such as DVD, etc. In one embodiment, software for carrying out the authentication operations in accordance with the present invention may be stored and distributed on a CD-ROM 716, diskette 718 or other form of media capable of portably storing information. These storage media may be inserted into, and read by, devices such as the CD-ROM drive 714, the disk drive 712, etc. The software may also be transmitted to authentication server 701 via data signals, such as being downloaded electronically via a network, such as the Internet. Authentication server 701 is coupled to a display 720, which may be any type of known display or presentation screen, such as LCD displays, plasma display, cathode ray tubes (CRT), etc. A user input interface 722 is provided, including one or more user interface mechanisms such as a mouse, keyboard, microphone, touch pad, touch screen, voice-recognition system, etc.
The authentication server 701 may be coupled to other computing devices, such as the landline and/or wireless terminals via a network. The server may be part of a larger network configuration as in a global area network (GAN) such as the Internet 728, which allows ultimate connection to the various landline and/or mobile client/watcher devices.
The foregoing description of the various embodiments of the invention has been presented for the purposes of illustration and description. It is not intended to be exhaustive or to limit the invention to the precise form disclosed. Many modifications and variations are possible in light of the above teaching. Thus, it is intended that the scope of the invention be limited not with this detailed description, but rather determined from the claims appended hereto.
|Cited Patent
|Filing date
|Publication date
|Jan 29, 1999
|Nov 18, 2003
|International Business Machines, Corp.
|Authentication framework for multiple authentication processes and mechanisms
|Apr 27, 2000
|Jan 13, 2004
|General Atomics
|System of and method for transparent management of data objects in containers across distributed heterogenous resources
|Dec 3, 1999
|Aug 31, 2004
|Qualcomm Incorporated
|Method and apparatus for authentication in a wireless telecommunications system
|Feb 24, 2003
|Mar 21, 2006
|Bea Systems, Inc.
|System and method for enterprise authentication
|Apr 1, 2002
|Oct 3, 2002
|Prokoski Francine J.
|Personal biometric key
|Jul 3, 2002
|Mar 6, 2003
|Satyam Bheemarasetti
|Secure remote access to data between peers
|Apr 10, 2002
|Apr 24, 2003
|Mitsuaki Kakemizu
|Service control network, server, network device, service information distribution method, and service information distribution program
|Jan 21, 2003
|Oct 21, 2004
|Henry Haverinen
|Method and apparatus for authentication in a wireless telecommunications system
|Citing Patent
|Filing date
|Publication date
|Mar 31, 2004
|May 19, 2009
|Microsoft Corporation
|Signing and validating session initiation protocol routing headers
|May 21, 2004
|Sep 20, 2011
|Microsoft Corporation
|Efficient message routing when using server pools
|Apr 19, 2010
|Jan 29, 2013
|Ipc Systems, Inc.
|Session initiation protocol extensions for call control and resource status monitoring in turrets and turret switching systems
|Feb 16, 2007
|Mar 5, 2013
|Cisco Technology, Inc.
|Decoupling radio resource management from an access gateway
|Nov 20, 2006
|Mar 12, 2013
|Aol Inc.
|Promoting interoperability of presence-based systems through the use of ubiquitous online identities
|Mar 6, 2007
|Jun 25, 2013
|Cisco Technology, Inc.
|Performance optimization with integrated mobility and MPLS
|Dec 3, 2012
|Jul 9, 2013
|Cisco Technology, Inc.
|Decoupling radio resource management from an access gateway
|Oct 22, 2009
|Jul 22, 2014
|Gemalto Sa
|Method for establishing a link between the applications of an authentication card of a subscriber and an IMS network
|May 13, 2010
|Aug 5, 2014
|Microsoft Corporation
|One time passwords with IPsec and IKE version 1 authentication
|Dec 18, 2007
|Feb 24, 2015
|Verizon Patent And Licensing Inc.
|Dynamic authentication gateway
|Nov 20, 2006
|Mar 31, 2015
|Aol Inc.
|Promoting interoperability of presence-based systems through the use of ubiquitous online identities
|Mar 6, 2007
|Sep 8, 2015
|Cisco Technology, Inc.
|Capability exchange during an authentication process for an access terminal
|Nov 20, 2006
|Jul 12, 2016
|Aol Inc.
|Promoting interoperability of presence-based systems through the use of ubiquitous online identities
|May 27, 2015
|Sep 6, 2016
|Cisco Technology, Inc.
|Capability exchange during an authentication process for an access terminal
|Oct 2, 2014
|Jan 31, 2017
|Microsoft Technology Licensing, Llc
|Service denial and termination on a wireless network
|Mar 31, 2004
|Oct 6, 2005
|Sankaran Narayanan
|Signing and validating Session Initiation Protocol routing headers
|May 21, 2004
|Feb 9, 2006
|Microsoft Corporation
|Efficient message routing when using server pools
|Jun 24, 2004
|Jan 4, 2007
|Vesa Torvinen
|Method for distributing passwords
|Sep 20, 2006
|May 24, 2007
|Lg Electronics Inc.
|Security protocol model for ubiquitous networks
|Nov 20, 2006
|Jul 5, 2007
|Aol Llc
|Promoting interoperability of presence-based systems through the use of ubiquitous online identities
|Nov 20, 2006
|Jul 12, 2007
|Aol Llc
|Promoting interoperability of presence-based systems through the use of ubiquitous online identities
|Mar 6, 2007
|Sep 6, 2007
|Cisco Technology, Inc.
|Capability exchange during an authentication process for an access terminal
|Feb 16, 2007
|Oct 25, 2007
|Cisco Technology, Inc.
|Decoupling radio resource management from an access gateway
|Aug 16, 2006
|Feb 21, 2008
|Van Der Gaast Tjietse
|Controlled access to a video recording over an IP multimedia subsystem, IMS, telecommunications network
|Jul 12, 2007
|Jan 15, 2009
|Motorola, Inc.
|Method and apparatus for data transmission in an unlicensed mobile access network
|Dec 18, 2007
|Jun 18, 2009
|Verizon Business Network Services Inc.
|Dynamic authentication gateway
|Mar 10, 2010
|Dec 30, 2010
|Kabushiki Kaisha Toshiba
|Communication System and Server Unit Thereof
|Oct 22, 2009
|Oct 13, 2011
|Gemalto Sa
|Method for establishing a link between the applications of an authentication card of a subscriber and an ims network
|Apr 19, 2010
|Oct 20, 2011
|Ipc Systems, Inc.
|Session initiation protocol extensions for call control and resource status monitoring in turrets and turret switching systems
|Oct 2, 2014
|Jan 22, 2015
|Microsoft Corporation
|Service Denial and Termination on a Wireless Network
|Oct 22, 2015
|May 5, 2016
|Ricoh Company, Ltd.
|Information processing system and authentication method
|Sep 9, 2014
|Mar 19, 2015
|Csidentity Corporation
|Authentication systems and methods for on-demand products
|U.S. Classification
|International Classification
|Cooperative Classification
|European Classification
|Jul 18, 2003
Owner name: NOKIA CORPORATION, FINLAND
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:COSTA-REQUENA, JOSE;IMMONEN, JUKKA;AHOLAINEN, MARKUS;ANDOTHERS;REEL/FRAME:014280/0715;SIGNING DATES FROM 20030515 TO 20030519
|Apr 16, 2012
|Maintenance fee reminder mailed
|Sep 2, 2012
|Lapse for failure to pay maintenance fees
|Oct 23, 2012
|Expired due to failure to pay maintenance fee
Effective date: 20120902


text:
Compare Debt Collection attorneys near you. Read reviews, see Avvo Ratings, and contact them directly.
Tell us what kind of legal help you need and get quotes from local lawyers.
Tell us what kind of legal help you need and local available attorney will contact you.
Connect your case with local attorneys who are qualified to help you.
Every legal need is unique; describe yours and find a lawyer that fits you and your case.
5.0 stars 6 reviews
Avvo Rating: 10
Are you seeking a fresh start? Let our experience work for you. Call today
Practice areas: Debt Collection, Chapter 7 Bankruptcy, Bankruptcy & Debt, Chapter 11 Bankruptcy
4.5 stars 5 reviews
Avvo Rating: 10
Bar Associations:Coral Gables Bar Association Miami-Dade County Bar AssociationAmerican Bar AssociationThe Florida Bar (Sections Member for Business, Small Practice and Taxation)Bankruptcy Associations: Bankruptcy Bar Association for the Southern ...
Practice areas: Debt Collection, Debt Settlement, Bankruptcy & Debt, Foreclosure, Chapter 11 Bankruptcy
5.0 stars 1 review
Avvo Rating: 9.5
Glenn has tried cases in both federal and state courts to judges and juries, prosecuted appeals in Florida's Third District Court of Appeals and in the U.S. Eleventh Circuit, mediated disputes, and arbitrated before the American Arbitration Ass...
Practice areas: Debt Collection, Litigation, Insurance, Real Estate
5.0 stars 1 review
Avvo Rating: 8.4
Review: "Armando advised me on several issues regarding construction lien law, in doing so, I appreciated the fact that he took in consideration my specific line of business and practical impact that our actions will have on the r...
Practice areas: Debt Collection, Trademark Application, Tax, Corporate & Incorporation, Employment & Labor
5.0 stars 6 reviews
Avvo Rating: 8.4
Harassed by Debt Collectors? Sued on a Credit Card? Contact me today.
Practice areas: Debt Collection, Bankruptcy & Debt, Credit Repair, Landlord & Tenant, Identity Theft
Not yet reviewed
Avvo Rating: 9.1
Practice areas: Debt Collection, Bankruptcy & Debt
5.0 stars 2 reviews
Avvo Rating: 7.7
I was born and raised in the Northern Mariana Islands, a chain of U.S. Commonwealth located in the Western Pacific south east of Japan and North of Australia. I come from a family of five and my father and most of my relatives have been predomina...
Practice areas: Debt Collection, Family, Commercial, Adoption, Divorce & Separation
Not yet reviewed
Avvo Rating: 8.3
Practice areas: Debt Collection, Appeals, Banking, Business, Litigation
Not yet reviewed
Avvo Rating: 8.1
Gary W. Pollack been practicing law in South Florida for 35 years. Gary W. Pollack is the Senior Litigation Partner and Managing Member of Pollack, Pollack & Kogan, LLC. Mr. Pollack has been a practicing attorney in Miami, Florida since 1980, when...
Practice areas: Debt Collection, Business, Litigation, Arbitration, Probate
Not yet reviewed
Avvo Rating: 8.1
Born in and raised in Miami. FL, in 2005 Mr. Somodevilla graduated from the University of Miami Business School with a Bachelors in Business Administrations with a focus on Business Management. In 2008 he graduated from Nova Southeastern Universit...
Practice areas: Debt Collection, Bankruptcy & Debt, Real Estate
If you are part of a legal case involving debt collection, you may want to hire a debt collection attorney. A lawyer with experience in debt collection can help fight for your rights as a consumer, defending you against a debt collector or creditor. Conversely, if you have successfully sued someone but still haven't been paid, a debt collection lawyer can help you recover money you are owed. Many laws detail consumer protection laws as well as debt collection regulations, requirements, and procedures, and a debt collection attorney can help determine which legal strategies will be most effective in your case. In some cases, debt collection attorneys work for a percentage of the amount owed and only receive payment when you collect your money.


text:
February 13 2015
NPH talks about Dr. Horrible's Sing-Along Blog on Inside the Actor's Studio. In this video clip Neil demonstrates his lip-syncing gym rehearsal technique!
You need to log in to be able to post comments.
About membership.
This site will work and look better in a browser that supports web standards, but it is accessible to any browser or Internet device.