All The Claims

1. A method to optimize authenticated multi-session establishment for a single supplicant, comprising:
authenticating the supplicant with an authentication server using an authenticator of the supplicant, wherein the supplicant is a wireless access point, the authenticator is a switch port coupling the access point to a backbone network coupling the switch port to the authentication server;
determining by the authentication server at least one other session for the supplicant;
initiating by the authentication server the at least one other session for the supplicant with an authenticator for the at least one other session, wherein a one of the at least one other session is established as a session between a wireless domain server and the access point;
distributing a first session key by the authentication server to the switch port for establishing a session between the access point and the switch port;
the initiating the at least one other session with the wireless domain server further comprises distributing a second session key by the authentication server to the wireless domain server; and
distributing a set of keys to the access point by the authentication server;
wherein the set of keys comprises a first key corresponding to the first session key and a second key corresponding to the second session key.
2. A method according to claim 1, wherein the determining at least one other session further comprises sending a list of the at least one other session from the supplicant to the authentication server.
3. A method according to claim 1, wherein the determining at least one other session further comprises determining that the supplicant is authorized to be initiated with the at least one other session.
4. A method according to claim 1, wherein the determining at least one other session further comprises retrieving a database entry for the supplicant by the authentication server from a database accessible to the authentication server.
5. A method according to claim 1, wherein the at least one other session is authenticated with the authentication server before the supplicant is authenticated.
6. A system, comprising:
means for authenticating a supplicant with an authentication server using an authenticator of the supplicant, wherein the supplicant is a wireless access point, the authenticator is a switch port coupling the access point to a backbone network coupling the switch port to the authentication server;
means for determining by the authentication server at least one other session for the supplicant;
means for initiating by the authentication server the at least one other session for the supplicant by the authentication server with an authenticator for the at least one other session, wherein the one of the at least one other session is established with a wireless domain server for the access point;
means for distributing a first session key by the authentication server to the switch port for establishing a session between the access point and the switch port;
the means for initiating the at least one other session with the wireless domain server further comprises means for distributing a second session key by the authentication server to the wireless domain server; and
means for distributing a set of keys to the access point by the authentication server;

wherein the set of keys comprises a first key corresponding to the first session key and a second key corresponding to the second session key.
7. A system according to claim 6, wherein the means for determining at least one other session further comprises means for sending a list of the at least one other session from the supplicant to the authentication server.
8. A system according to claim 6, wherein the means for determining at least one other session further comprises means for retrieving a database entry for the supplicant by the authentication server from a database accessible to the authentication server.
9. A system according to claim 6, wherein the means for initiating at least one other session further comprises:
means for distributing a first key for the at least one other session to an authenticator of the at least one other session; and
means for distributing a second key corresponding to the first key for the at least one other session to the supplicant.

The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.

1. An integrated optical device comprising:
a planar substrate,
a Mach-Zehnder modulator integrated on said substrate characterized in that it further comprises
a Y-branch optical attenuator integrated on said substrate to provide an attenuation range, said Y-branch attenuator being optically coupled to said Mach-Zehnder modulator, and
means for reducing a crosstalk between said Y-branch attenuator and said Mach-Zehnder modulator, whereby the extinction ratio of the optical device is at least 18 dB on an attenuation range of at least 6 dB.
2. An integrated optical device as in claim 1, characterized in that the extinction ratio of the optical device is at least 20 dB on an attenuation range of at least 6 dB.
3. An integrated optical device as in claim 1 or 2, characterized in that said Mach-Zehnder modulator is optically coupled to one arm of said Y-branch attenuator.
4. An integrated optical device as in claim 1 or 2, characterized in that said Mach-Zehnder modulator is optically coupled to the common waveguide of said Y-branch attenuator.
5. An integrated optical device as in claims 1 to 4, characterized in that said means for reducing comprises one arm of said Y-branch attenuator disposed parallel with respect to a longitudinal direction.
6. An integrated optical device as in claims 1 to 5, characterized in that said means for reducing comprises a filter of an unguided radiation spreading on said substrate, the filter being arranged in a region between said Y-branch attenuator and said Mach-Zehnder modulator.
7. An integrated optical device as in claim 6, characterized in that said filter comprises metal strips disposed on the side of a connecting optical waveguide coupling said Y-branch attenuator and said Mach-Zehnder modulator.
8. An integrated optical device as in claim 7, characterized in that a gap between said metal strips is about 170% of the MFD of said connecting optical waveguide.
9. An integrated optical device as in claim 7, characterized in that the length of said metal strips is about 4 mm.
10. An integrated optical device as in claim 7, characterized in that said metal strips are integrated in an extension of the electrodes of said Y-branch attenuator, so that the gap between said electrodes progressively increases from about 100% to about 170% of the MFD of said optical waveguide in a first portion of said extension and is about 170% of the MFD of said optical waveguide in a second portion of said extension.
11. An integrated optical device as in claim 10, characterized in that said second portion of said extension has a length of about 4 mm.
12. An integrated optical device as in claims 1 to 11, characterized in that said means for reducing comprises waveguides for said Y-branch attenuator having a width lower between 5% and 16% with respect to the width of the waveguides of said Mach-Zehnder modulator.
13. An integrated optical device as in claim 12, characterized in that the width of the waveguides of said Y-branch attenuator is 8% less than the width of the waveguides of said Mach-Zehnder modulator.
14. An integrated optical device comprising:
a substrate,
a Mach-Zehnder modulator integrated on said substrate characterized in that it further comprises
a Y-branch attenuator integrated on said substrate,
said Mach-Zehnder modulator being optically coupled to one arm of said Y-branch attenuator.
15. A method for reducing the crosstalk between at least two devices including optical waveguides integrated on a substrate, each of said optical devices including at least one multimodal section of optical waveguide, said crosstalk being generated by unguided optical radiation propagating on said substrate in a region comprised between said optical devices, said method comprising filtering said unguided radiation in said region.
16. A transmitting module comprising:
a laser source for emitting an optical signal,
an integrated optical device for modulating the intensity of said optical signal,
comprising a Mach-Zehnder modulator formed on a substrate,
characterized in that
said integrated optical device further comprises a Y-branch optical attenuator formed on said substrate optically coupled to said modulator, to provide an attenuation range, and
means for reducing a crosstalk between said Y-branch attenuator and said Mach-Zehnder modulator, whereby the extinction ratio of the optical device is at least 18 dB on an attenuation range of at least 6 dB.
17. A transmitting module comprising:
a laser source for emitting an optical signal,
an integrated optical device for modulating the intensity of said optical signal,
comprising a Mach-Zehnder modulator formed on a substrate,
characterized in that
said integrated optical device further comprises a Y-branch optical attenuator formed on said substrate, and
said Mach-Zehnder modulator is optically coupled to one arm of said Y-branch attenuator.
18. A transmitting module as in claim 17, characterized in that said Y-branch attenuator is located upstream with respect to said Mach-Zehnder modulator.
19. A transmitting module as in claim 17, characterized in that said Y-branch attenuator is located downstream with respect to said Mach-Zehnder modulator.
20. A transmitting module as in claim 18, characterized by that said integrated optical device comprises a dummy waveguide coupled to the second arm of said Y-branch attenuator and a feedback circuit optically connected to said dummy waveguide, said feedback circuit comprising electrical control circuits for controlling the wavelength of said emitted signal.

1. An apparatus for securing a communication, the apparatus comprising:
a memory;
a processor executing instructions stored in the memory and that prepares the communication for transmission;
a network communication interface; and
a display that displays a user interface including a plurality of settings, one or more of which is a user selectable biometric setting that identifies one or more biometric inputs required to be input by a recipient, wherein the recipient is an addressee identified in the communication, and the recipient inputs the one or more required biometric inputs over one or more sensors at a recipient electronic device before at least a portion of the communication can be opened by the recipient.
2. The apparatus of claim 1, wherein the user interface includes a plurality of selectable communication types.
3. The apparatus of claim 2, wherein the plurality of selectable communication types are at least one of a text, an email, a document, an instant message, a group message, a video telephonic communication, an online meeting communication, a Cloud communication, a VPN communication, a calendar communication, a video communication, a voice mail, and a voice communication.
4. The apparatus of claim 2, wherein a particular selectable communication type of the plurality of communication types included in the user interface corresponds to an icon of the particular selectable communication type.
5. The apparatus of claim 1, wherein the one or more biometric inputs is at least one of a fingerprint, a voice input, an image of a face, a retinal input, and an iris input.
6. The apparatus of claim 1, wherein the plurality of settings are operating system settings.
7. The apparatus of claim 1, wherein the apparatus is at least one of a mobile phone, a smart phone, a tablet computer, a desk computer, and a set top box.
8. A method for securing a communication, the method comprising:
receiving the communication composed by a user of an a user electronic device, wherein the communication is composed over a user interface at the user electronic device;
displaying a plurality of settings on the user interface, wherein one or more of the plurality of settings is a user selectable biometric setting;
receiving a selection over the user interface of one or more biometric inputs, wherein the one or more biometric inputs lock at least a portion of the communication, and the one or more biometric inputs are required to be input by a recipient of the communication before the at least portion of the communication can be opened by the recipient at a recipient electronic device; and
transmitting the communication over a network communication interface at the user electronic device, wherein the recipient cannot access the at least portion of the communication until after the recipient enters the one or more biometric inputs over one or more sensors at the recipient electronic device.
9. The method of claim 8, wherein the user interface includes a plurality of selectable communication types.
10. The method of claim 9, wherein the plurality of selectable communication types are at least one of a text, an email, a document, an instant message, a group message, a video telephonic communication, an online meeting communication, a Cloud communication, a VPN communication, a calendar communication, a video communication, a voice mail and a voice communication.
11. The method of claim 9, wherein a particular selectable communication type of the plurality of communication types included in the user interface corresponds to an icon of the particular selectable communication type.
12. The method of claim 8, wherein the one or more biometric inputs is at least one of a fingerprint, a voice input, an image of a face, a retinal input, and an iris input.
13. The method of claim 8, wherein the plurality of settings are operating system settings.
14. The method of claim 13, wherein the user electronic device is at least one of a mobile phone, a smart phone, a tablet computer, a desktop computer, and a set top box.
15. A non-transitory computer readable storage medium having embodied thereon a program executable by a processor to perform a method for securing a communication, the method comprising:
receiving the communication composed by a user of an a user electronic device, wherein the communication is composed over a user interface at the user electronic device;
displaying a plurality of settings on the user interface, wherein one or more of the plurality of settings is a user selectable biometric setting;
receiving a selection over the user interface of one or more biometric inputs, wherein the one or more biometric inputs lock at least a portion of the communication, and the one or more biometric inputs are required to be input by a recipient of the communication before the at least portion of the communication can be opened by the recipient at a recipient electronic device; and
transmitting the communication over a network communication interface at the user electronic device, wherein the recipient cannot access the at least portion of the communication until after the recipient enters the one or more biometric inputs over one or more sensors at the recipient electronic device.
16. The non-transitory computer readable storage medium of claim 15, wherein the user interface includes a plurality of selectable communication types.
17. The non-transitory computer readable storage medium of claim 16, wherein the plurality of selectable communication types are at least one of a text, an email, a document, an instant message, a group message, a video telephonic communication, an online meeting communication, a Cloud communication, a VPN communication, a calendar communication, a video communication, a voice mail, and a voice communication.
18. The non-transitory computer readable storage medium of claim 16, wherein a particular selectable communication type of the plurality of communication types included in the user interface corresponds to an icon of the particular selectable communication type.
19. The non-transitory computer readable storage medium of claim 15, wherein the one or more biometric inputs is at least one of a fingerprint, a voice input, an image of a face, a retinal input, and an iris input.
20. The non-transitory computer readable storage medium of claim 15 wherein the plurality of settings are operating system settings.

The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.

1. A nonvolatile semiconductor storage comprising:
memory cells, each of which is configured using a field effect transistor and includes n (n is an integer equal to or larger than 2) anti-fuse elements, one ends of which are connected in common;
an internal potential generating circuit that generates a program voltage for breaking down a gate insulating film of the field effect transistor;
a program voltage selection circuit that selects, out of the n anti-fuse elements, an anti-fuse element to which the program voltage is applied;
a sense amplifier that is provided for each of the memory cells and determines, based on data stored in the n anti-fuse elements, three or more readout levels;
a barrier transistor that is provided for each of the memory cells and protects the sense amplifier from the voltage for breaking down the gate insulating film; and
a selection transistor that is provided for each of the memory cells and selects a memory cell to which the program voltage is applied.
2. The nonvolatile semiconductor storage of claim 1, wherein transistor sizes or silicide densities of gate electrodes of the field effect transistors of the n anti-fuse elements are different from one another or same one another or field effect transistors having different transistor sizes or silicide densities of gate electrodes and field effect transistors having same transistor sizes or silicide densities of gate electrodes are mixed.
3. The nonvolatile semiconductor storage of claim 1, further comprising a threshold variable circuit that changes a threshold of the sense amplifier according to the three or more readout levels of the memory cell.
4. The nonvolatile semiconductor storage of claim 1, wherein the sense amplifier includes a plurality of sense amplifiers having thresholds different from one another according to the three or more readout levels of the memory cell.
5. The nonvolatile semiconductor storage of claim 1, further comprising:
a fuse data register that is provided for each of the memory cells and stores data read out by the sense amplifier; and
a selector that selects the data read out by the sense amplifier or a value stored in a fuse data register at a pre-stage and outputs the data or the value to the fuse data register at an own stage.
6. The nonvolatile semiconductor storage according to claim 1, wherein the program voltage selection circuit is n switching transistors that are connected in series for each of the anti-fuse elements and switch the anti-fuse element to which the program voltage is applied.
7. The nonvolatile semiconductor storage of claim 6, wherein transistor sizes or silicide densities of gate electrodes of the field effect transistors of the n anti-fuse elements are different from one another or same one another or field effect transistors having different transistor sizes or silicide densities of gate electrodes and field effect transistors having same transistor sizes or silicide densities of gate electrodes are mixed.
8. The nonvolatile semiconductor storage of claim 6, further comprising a threshold variable circuit that changes a threshold of the sense amplifier according to the three or more readout levels of the memory cell.
9. The nonvolatile semiconductor storage of claim 6, wherein the sense amplifier includes a plurality of sense amplifiers having thresholds different from one another according to the three or more readout levels of the memory cell.
10. The nonvolatile semiconductor storage of claim 6, further comprising:
a fuse data register that is provided for each of the memory cells and stores data read out by the sense amplifier; and
a selector that selects the data read out by the sense amplifier or a value stored in a fuse data register at a pre-stage and outputs the data or the value to the fuse data register at an own stage.
11. A nonvolatile semiconductor storage comprising:
memory cells, each of which is configured using a field effect transistor and includes n (n is an integer equal to or larger than 2) anti-fuse elements, one ends of which are connected in common;
an internal potential generating circuit that generates a program voltage for breaking down a gate insulating film of the field effect transistor;
a program voltage selection circuit that selects, out of the n anti-fuse elements, an anti-fuse element to which the program voltage is applied;
a sense amplifier that determines, based on data stored in the n anti-fuse elements, three or more readout levels;
a writing transistor that is provided for each of the memory cells and performs writing in the n anti-fuse elements;
a readout transistor that is provided for each of the memory cells and performs readout from the n anti-fuse elements;
a writing control transistor that is provided for each of the memory cells and connected to the writing transistor in series; and
a readout barrier transistor that is provided for each of the memory cells and connected to the readout transistor in series.
12. The nonvolatile semiconductor storage of claim 11, wherein transistor sizes or silicide densities of gate electrodes of the field effect transistors of the n anti-fuse elements are different from one another or same one another or field effect transistors having different transistor sizes or silicide densities of gate electrodes and field effect transistors having same transistor sizes or silicide densities of gate electrodes are mixed.
13. The nonvolatile semiconductor storage of claim 11, further comprising a threshold variable circuit that changes a threshold of the sense amplifier according to the three or more readout levels of the memory cell.
14. The nonvolatile semiconductor storage of claim 11, wherein the sense amplifier includes a plurality of sense amplifiers having thresholds different from one another according to the three or more readout levels of the memory cell.
15. The nonvolatile semiconductor storage of claim 11, wherein
the memory cells are arranged in a matrix shape in a row direction and a column direction, and
the sense amplifier is provided for the each column.
16. A nonvolatile semiconductor storage comprising:
memory cells, each of which is configured using a field effect transistor and includes n (n is an integer equal to or larger than 2) anti-fuse elements, one ends of which are connected in common;
an internal potential generating circuit that generates a program voltage for breaking down a gate insulating film of the field effect transistor;
n switching transistors that are connected in series for each of the anti-fuse elements and switch an anti-fuse element to which the program voltage is applied;
a sense amplifier that determines, based on data stored in the n anti-fuse elements, three or more values of readout levels;
a writing transistor that is provided for each of the memory cells and performs writing in the n anti-fuse elements;
a readout transistor that is provided for each of the memory cells and performs readout from the n anti-fuse elements;
a writing control transistor that is provided for each of the memory cells and connected to the writing transistor in series; and
a readout barrier transistor that is provided for each of the memory cells and connected to the readout transistor in series.
17. The nonvolatile semiconductor storage of claim 16, wherein transistor sizes or silicide densities of gate electrodes of the field effect transistors of the n anti-fuse elements are different from one another or same one another or field effect transistors having different transistor sizes or silicide densities of gate electrodes and field effect transistors having same transistor sizes or silicide densities of gate electrodes are mixed.
18. The nonvolatile semiconductor storage of claim 16, further comprising a threshold variable circuit that changes a threshold of the sense amplifier according to the three or more readout levels of the memory cell.
19. The nonvolatile semiconductor storage of claim 16, wherein the sense amplifier includes a plurality of sense amplifiers having thresholds different from one another according to the three or more readout levels of the memory cell.
20. The nonvolatile semiconductor storage of claim 16, further comprising:
a fuse data register that is provided for each of the memory cells and stores data read out by the sense amplifier; and
a selector that selects the data read out by the sense amplifier or a value stored in a fuse data register at a pre-stage and outputs the data or the value to the fuse data register at an own stage.