摘要:
A method, apparatus and system extend a mobile home agent functionality to enable mobile nodes to use private address to correspond with nodes having public addresses. Specifically, according to an embodiment of the present invention, a home agent may be configured to assign a private address to a mobile node according to predetermined policies. In one embodiment, the packets from the mobile node may be destined for other mobile nodes that belong to the same administrative domain as the home agent. If so, the home agent may decapsulate and forward the packet directly to the destination mobile node. In an alternate embodiment, the packets from the mobile node may be destined for mobile nodes belonging to a different administrative domain than the home agent. If so, the home agent may decapsulate and perform address and port translation on the packet prior to transmission.
摘要:
A method, apparatus and system enable mobile nodes to determine their location and register with an appropriate home agent to provide seamless roaming between disparate networks. More specifically, according to one embodiment, a mobile node may include a policy engine, which may select one of a plurality of location modules. The mobile node may apply the selected location module to determine its location with respect to a corporate demilitarized zone (“DMZ”). If the mobile node determines that it is located on an intranet behind the corporate DMZ, it may register with an internal home agent on the intranet. If the mobile node determines that it is located on an external network, it may register with an external home agent on the external network and/or the corporate DMZ, establish a Virtual Private Network (“VPN”) tunnel to the corporate DMZ, and register with the internal home agent via the tunnel.
摘要:
A mobile node may dynamically and intelligently route mobile IP packets. In one embodiment of the present invention, a method, apparatus and system are disclosed whereby a mobile node may include a policy manager to determine how to route mobile IP packets. Specifically, the policy manager may include various filters that provide information to a mobile IP driver on the mobile node to enable the driver to determine whether to apply mobile IP headers to outgoing packets prior to transmission.
摘要:
A method, apparatus and system enable a mobile node to dynamically discover configuration information while roaming. In one embodiment, Dynamic Host Control Protocol (“DHCP”) servers may respond to a mobile node DHCP request with information pertaining to home agents. The mobile node may register with the home agent and receive a registration reply. Based on extensions within the registration reply, the mobile node may determine whether it is roaming on an internal or an external network. The mobile node may then utilize and/or store other information contained within the registration reply extensions to ensure that the mobile node is registered with the appropriate home agent.
摘要:
A method, apparatus and system which enable a mobile node to request dynamic allocation of a home address and to maintain that home address when roaming between a home subnet and a foreign subnet. According to one embodiment, the mobile node may acquire a home address from its home agent by using a Network Access Identifier (“NAI”) extension in a registration request. The mobile node may send out this registration request when it first starts up, regardless of whether it is on its home subnet or a foreign subnet. Additionally, the mobile node may set a bit in the registration request to inform the home agent that it is on its home network. If the bit is not set, the home agent may deduce that the mobile node is on a foreign network. In either instance, the mobile node may continue to use its originally acquired home address.
摘要:
Apparatus and methods associated with providing secure credential management are described. One apparatus embodiment includes a data store to store authentication data and an authentication supplicant (AS) logic to provide a response to an authentication communication (ACM) received from an authentication process. An authentication management (AM) logic may receive the ACM from a connection management (CM) logic associated with a host operating system (HOS), provide the ACM to the AS logic, and provide the response back to the CM logic. The apparatus may include a device management (DM) client logic to provide a secure connection to an operator DM server associated with the authentication process and to store authentication data provided by the operator DM server in the data store. The AS logic, AM logic, and DM logic may reside in firmware that is not accessible to the HOS.
摘要:
Apparatus and methods associated with providing secure credential management are described. One apparatus embodiment includes a data store to store authentication data and an authentication supplicant (AS) logic to provide a response to an authentication communication (ACM) received from an authentication process. An authentication management (AM) logic may receive the ACM from a connection management (CM) logic associated with a host operating system (HOS), provide the ACM to the AS logic, and provide the response back to the CM logic. The apparatus may include a device management (DM) client logic to provide a secure connection to an operator DM server associated with the authentication process and to store authentication data provided by the operator DM server in the data store. The AS logic, AM logic, and DM logic may reside in firmware that is not accessible to the HOS.
摘要:
Structures and methods for conserving power in wireless, multi-homed communication devices includes powering down unused network communication devices while leaving an active or most desired network communication device active. A prioritized list of the available network communication devices, based on user preferences, is used to activate the desired network communication device(s) and power down the other network communication devices.
摘要:
In a computing device that includes a host operating system and a management engine separate from the host operating system, if the primary operating system is not operating, a management engine may obtain from a credential server via a first network connection logon information for a secured network and the management engine connects to the secure network through a secured connection using the logon information. If the operating system is operating the operating system provides the logon information to the management engine. Certificate verification may be performed by a remote server on behalf of the management engine. Other embodiments are disclosed and claimed.
摘要:
Methods, systems, and apparatus for communicatively pairing and securing an electronic device to a vehicle based electronic system. The pairing can enable the electronic device to seamlessly communicate with the electronic device and can provide infotainment to users of the vehicle.