公开(公告)号：US08385263B2

公开(公告)日：2013-02-26

申请号：US12521519

申请日：2007-12-19

申请人： Jun Hirano ,  Takashi Aramaki ,  Chun Keong Benjamin Lim ,  Chan Wah Ng ,  Tien Ming Benjamin Koh ,  Pek Yew Tan

发明人： Jun Hirano ,  Takashi Aramaki ,  Chun Keong Benjamin Lim ,  Chan Wah Ng ,  Tien Ming Benjamin Koh ,  Pek Yew Tan

IPC分类号： H04W4/00

CPC分类号： H04W8/087 ,  H04W80/04

摘要： A technique disclosed enables a node having a plurality of interfaces to conduct connection of the plurality of interfaces simultaneously in a communication network domain. A mobile node having a plurality of interfaces connects one of the interfaces with a MAG (mobile access gateway) 11a to take part in a NetLMM domain 18 using a NetLMM protocol, and a LMA (local mobility anchor) 13 includes association information with the MAG 11a registered therein. When the mobile node connects another interface with another MAG 11b, the LMA receives a registration request for association information of this mobile node with the MAG 11b, and makes an inquiry to the already registered MAG 11a as to whether link with the mobile node is still valid or not. If the link is valid, the LMA keeps association information of the mobile node with both of the MAGs 11a and 11b.

摘要翻译： 所公开的技术使得具有多个接口的节点能够在通信网络域中同时进行多个接口的连接。 具有多个接口的移动节点将接口之一与MAG（移动接入网关）11a连接，以使用NetLMM协议参与NetLMM域18，并且LMA（本地移动锚）13包括与MAG的关联信息 11a登记。 当移动节点与另一个MAG 11b连接另一个接口时，LMA向MAG 11b接收该移动节点的关联信息的注册请求，并且向已登记的MAG 11a询问关于与移动节点的链路是否仍然存在 是否有效。 如果链路有效，则LMA保持移动节点与MAG 11a和11b两者的关联信息。

公开(公告)号：US20100275253A1

公开(公告)日：2010-10-28

申请号：US12743805

申请日：2008-11-18

申请人： Jun Hirano ,  Chan Wah Ng ,  Mohana Dhamayanthi Jeyatharan ,  Tien Ming Benjamin Koh ,  Chun Keong Benjamin Lim ,  Pek Yew Tan

发明人： Jun Hirano ,  Chan Wah Ng ,  Mohana Dhamayanthi Jeyatharan ,  Tien Ming Benjamin Koh ,  Chun Keong Benjamin Lim ,  Pek Yew Tan

IPC分类号： H04L9/32 ,  G06F21/00

CPC分类号： H04L9/3234 ,  H04L9/3226 ,  H04L67/02 ,  H04L2209/80 ,  H04W12/06 ,  H04W60/005 ,  H04W80/04

摘要： There is provided a technique for reducing the number of messages handled in a Return Routability (RR) procedure for performing authentication between a mobile node (MN) and a peer communication node (CN). According to the technique, an MN 1 pairs two or more care-of addresses assigned respectively to one or more interfaces, and sends a CN 3 one or more first messages including a second care-of address by setting a first care-of address in each pair of care-of addresses as a source address. The CN 3 receives the one or more first messages, generates signature tokens for the first and second care-of addresses, and sends one or more second messages including the generated signature tokens to the second care-of address of the MN 2.

摘要翻译： 提供了一种用于减少在用于在移动节点（MN）和对等通信节点（CN）之间执行认证的返回可路由性（RR）过程中处理的消息的数量的技术。 根据该技术，MN 1对分别分配给一个或多个接口的两个或更多转交地址，并且通过将第一转交地址设置在第一转交地址中来发送CN 3一个或多个包括第二转交地址的第一消息 每对转交地址作为源地址。 CN 3接收一个或多个第一消息，为第一转交地址和第二转交地址生成签名令牌，并将包括所生成的签名令牌的一个或多个第二消息发送到MN 2的第二转交地址。

公开(公告)号：US20100246484A1

公开(公告)日：2010-09-30

申请号：US12438467

申请日：2007-08-24

申请人： Jun Hirano ,  Keigo Aso ,  Tien Ming Benjamin Koh ,  Chun Keong Benjamin Lim ,  Chan Wah Ng ,  Pek Yew Tan

发明人： Jun Hirano ,  Keigo Aso ,  Tien Ming Benjamin Koh ,  Chun Keong Benjamin Lim ,  Chan Wah Ng ,  Pek Yew Tan

IPC分类号： H04W8/00

CPC分类号： H04W8/065 ,  H04W80/04 ,  H04W84/005 ,  H04W88/14

摘要： The present invention provides a new technique, according to which a mobile router can fulfill functions as a dynamic home agent, in a system where a plurality of mobile routers are in operation, under the management of a service provider belonging to the home agent. According to this technique, the home agent verifies the legitimacy of the mobile router when it receives a Query message and a binding update message requesting permission to fulfill functions as dynamic home agent. Then, after confirming that no other mobile router is currently present, which is fulfilling the functions as dynamic home agent in a set of a plurality of mobile routers, to which this mobile router belongs, it allows said mobile router to operate as the dynamic home agent. Then, even when other mobile router requests the permission to fulfill functions as the dynamic home agent, the request is rejected, and said other mobile router utilizes the mobile router, which is fulfilling functions of the dynamic home agent, as its home agent.

摘要翻译： 本发明提供了一种新技术，根据该技术，移动路由器可以在属于归属代理的服务提供商的管理下，在多个移动路由器正在运行的系统中履行作为动态归属代理的功能。 根据这种技术，当移动路由器接收到查询消息和请求许可作为动态归属代理的功能的绑定更新消息时，归属代理验证其合法性。 然后，在确认没有其他移动路由器当前存在的情况下，其将履行作为该移动路由器所属的多个移动路由器的一组中的动态归属代理的功能，其允许所述移动路由器作为动态家庭 代理商 然后，即使其他移动路由器请求作为动态归属代理的功能的请求，该请求被拒绝，并且所述其他移动路由器利用履行动态归属代理的功能的移动路由器作为其归属代理。

公开(公告)号：US20100214998A1

公开(公告)日：2010-08-26

申请号：US12527540

申请日：2008-02-22

申请人： Jun Hirano ,  Takashi Aramaki ,  Tien Ming Benjamin Koh ,  Chan Wah Ng ,  Chun Keong Benjamin Lim ,  Pek Yew Tan

发明人： Jun Hirano ,  Takashi Aramaki ,  Tien Ming Benjamin Koh ,  Chan Wah Ng ,  Chun Keong Benjamin Lim ,  Pek Yew Tan

IPC分类号： H04W72/04

CPC分类号： H04W8/087 ,  H04L45/02 ,  H04W8/085 ,  H04W80/04

摘要： A technique to optimize packet transfer in a network is disclosed. According to this technique, a mobile node (MN) 1000 having a plurality of interfaces transmits a filter rule where setting conditions are defined to each of MAG (motility access gateway) 1060 and MAG 1080 connected for the purpose of setting the packet received by each of the interfaces. MAG transfers the received filter rule to a local mobility anchor (LMA) 1010. After analyzing the filter rule, LMA specifies the network node where the filter rule should be reflected and updates the filter rule only to this specific network node. For instance, in case MN desires that a packet from CN 1090 is received via a path 1002, LMA manages that a packet destined to MN as transmitted from CN is to be transferred to MAG 1060 with respect to MAG 1020.

摘要翻译： 公开了一种优化网络中的分组传输的技术。 根据该技术，具有多个接口的移动节点（MN）1000发送滤波器规则，其中设置条件被定义为MAG（运动接入网关）1060和MAG 1080连接的每一个，用于设置由每个接收的分组接收的分组 的接口。 MAG将接收到的过滤规则传送到本地移动锚点（LMA）1010.在分析过滤规则之后，LMA指定应反映过滤规则的网络节点，并将过滤规则更新到该特定网络节点。 例如，在MN希望经由路径1002接收到来自CN 1090的分组的情况下，LMA管理将从CN发送的去往MN的分组相对于MAG 1020传送到MAG 1060。

公开(公告)号：US20100208663A1

公开(公告)日：2010-08-19

申请号：US12738972

申请日：2008-10-22

申请人： Jun Hirano ,  Takashi Aramaki ,  Chun Keong Benjamin Lim ,  Chan Wah Ng ,  Tien Ming Benjamin Koh ,  Pek Yew Tan ,  Keigo Aso

发明人： Jun Hirano ,  Takashi Aramaki ,  Chun Keong Benjamin Lim ,  Chan Wah Ng ,  Tien Ming Benjamin Koh ,  Pek Yew Tan ,  Keigo Aso

IPC分类号： H04W40/00

CPC分类号： H04W40/02 ,  H04L45/308 ,  H04W80/04 ,  H04W88/06

摘要： The invention discloses a technique to efficiently realize a routing based on preference of a mobile terminal in case the mobile terminal is connected to a mobility management domain of network base different from a home network domain. According to this technique, a mobile terminal (mobile node; MN) 101 has two interfaces, and these interfaces are connected to a mobility management domain (local mobility domain) 11 under the condition that these interfaces are connected to MAG 111 and MAG 112 respectively. In case MN itself decides one of the interfaces to be used for a specific packet flow communication, a routing preference to instruct that the packet flow is to be sent on a routing via the interface is notified to MAG. When MAG notifies the routing preference to LMA (filtering agent) 110, filtering based on the routing preference is carried out.

摘要翻译： 本发明公开了一种在移动终端连接到不同于家庭网络域的网络基地的移动性管理域的情况下，基于移动终端的偏好来有效地实现路由的技术。 根据该技术，移动终端（移动节点; MN）101具有两个接口，并且这些接口在这些接口分别连接到MAG 111和MAG 112的条件下连接到移动性管理域（本地移动性域）11 。 在MN本身决定要用于特定分组流通信的接口之一的情况下，通知经由接口在路由上发送分组流的路由选择。 当MAG向LMA（过滤代理）110通知路由选择时，执行基于路由选择的过滤。

公开(公告)号：US20100208706A1

公开(公告)日：2010-08-19

申请号：US12676847

申请日：2008-09-19

申请人： Jun Hirano ,  Chan Wah Ng ,  Tien Ming Benjamin Koh ,  Chun Keong Benjamin Lim ,  Pek Yew Tan

发明人： Jun Hirano ,  Chan Wah Ng ,  Tien Ming Benjamin Koh ,  Chun Keong Benjamin Lim ,  Pek Yew Tan

IPC分类号： H04W36/00

CPC分类号： H04W60/005 ,  H04W36/0027 ,  H04W36/0033 ,  H04W76/20 ,  H04W80/04

摘要： Disclosed is a technique of, in a network conducting network based local mobility management, suppressing generation of signaling and an increase of processing load on a network entity and preventing a delay. According to this technique, a mobile node (MN 130) receives specific information (a token) including an interface identifier and a binding identifier, for example, from a network side (MAG 120) when connecting therewith first. When the mobile node conducts a handover, the mobile node notifies a next connecting MAG 122 of the token. The MAG receiving the token can judge based on this token whether the connection by the mobile node is due to a handover changing a connection point for a certain interface or due to a new connection using a different interface without making an inquiry to other network nodes.

摘要翻译： 本发明公开了一种在进行基于网络的本地移动性管理的网络中抑制信令的产生和网络实体上的处理负荷的增加并防止延迟的技术。 根据该技术，移动节点（MN 130）首先从网络侧（MAG 120）接收包括接口标识符和绑定标识符的特定信息（令牌）。 当移动节点进行切换时，移动节点通知令牌的下一个连接MAG 122。 接收令牌的MAG可以基于该令牌判断移动节点的连接是否由于切换改变特定接口的连接点，或者由于使用不同接口的新连接而不对其他网络节点进行查询。

公开(公告)号：US20090238080A1

公开(公告)日：2009-09-24

申请号：US12090972

申请日：2006-10-30

申请人： Jun Hirano ,  Chan Wah Ng ,  Pek Yew Tan ,  Tien Ming Benjamin Koh ,  Chun Keong Benjamin Lim

发明人： Jun Hirano ,  Chan Wah Ng ,  Pek Yew Tan ,  Tien Ming Benjamin Koh ,  Chun Keong Benjamin Lim

IPC分类号： H04L12/26

CPC分类号： H04L12/4633 ,  H04L45/00 ,  H04L45/18

摘要： Disclosed is a technique whereby a tunnel entry point, which encapsulates a packet (generates a tunnel packet), can detect the presence of a tunneling loop causing a packet to loop the same path while encapsulated. According to this technique, upon receipt of a packet from a source node (source) 1100, TEP (tunnel entry point) 1120 inserts it into a tunnel packet header for encapsulation. Upon receipt of tunnel packets from TEP 1120 and TEP 1140, each of TEP 1140 and TEP 1160 copies the identifier of the original tunnel packet header to a new tunnel packet header for encapsulation. When this tunnel packet returns to TEP 1120 due to a tunneling loop, the tunneling loop is detected by referring to the identifier in the received tunnel packet.

摘要翻译： 公开了一种技术，其中封装分组（生成隧道分组）的隧道入口点可以检测出存在引导分组在封装时循环相同路径的隧道循环。 根据该技术，当从源节点（源）1100接收到分组时，TEP（隧道入口点）1120将其插入隧道分组报头以进行封装。 在接收到来自TEP 1120和TEP 1140的隧道分组时，TEP 1140和TEP 1160中的每一个将原始隧道分组报头的标识符复制到新的隧道分组报头以进行封装。 当该隧道报文由于隧道循环而返回给TEP 1120时，通过参考接收到的隧道报文中的标识符来检测隧道环路。

公开(公告)号：US08731547B2

公开(公告)日：2014-05-20

申请号：US12678729

申请日：2008-09-19

申请人： Keigo Aso ,  Jun Hirano ,  Chan Wah Ng ,  Pek Yew Tan ,  Chun Keong Benjamin Lim ,  Tien Ming Benjamin Koh

发明人： Keigo Aso ,  Jun Hirano ,  Chan Wah Ng ,  Pek Yew Tan ,  Chun Keong Benjamin Lim ,  Tien Ming Benjamin Koh

IPC分类号： H04W36/34

CPC分类号： H04W36/14 ,  H04L45/22 ,  H04W12/08 ,  H04W28/08 ,  H04W36/0055 ,  H04W36/36 ,  H04W60/005 ,  H04W76/20 ,  H04W88/06 ,  H04W92/02

摘要： A technique is disclosed, according to which a mobile node, having a plurality of interfaces and performing communication according to flow information when an operator is performing communication based on the flow information as defined by a policy, can select an interface suitable for the flow and can perform communication. According to this technique, a mobile node (MN 10) having a plurality of interfaces has a list to indicate domain limited flows to be transmitted only within a specific network (a trusted network), and a list to indicate the trusted networks. When a certain interface performs handover, and in case there is a domain limited flow that uses the interface, it is decided whether the network of handover destination is a trusted network or not, and in case the network of the handover destination is not a trusted network, it is decided whether it is possible or not to transmit and receive the domain limited flow via another interface that is connected to the trusted network.

摘要翻译： 公开了一种技术，根据该技术，根据该技术，具有多个接口的移动节点并且当运营商基于由策略定义的流信息进行通信时根据流信息执行通信，可以选择适合于流的接口，以及 可以进行通信。 根据该技术，具有多个接口的移动节点（MN 10）具有列表，用于指示仅在特定网络（可信网络）内发送的域限制流，以及用于指示可信网络的列表。 当某个接口执行切换时，在存在使用该接口的域限制流的情况下，确定切换目的地的网络是否为可信网络，并且在切换目的地的网络不是可信任的情况下 网络，决定是否可能通过连接到可信网络的另一接口来发送和接收域限制流。

公开(公告)号：US08539554B2

公开(公告)日：2013-09-17

申请号：US12158968

申请日：2006-12-26

申请人： Jun Hirano ,  Keigo Aso ,  Chun Keong Benjamin Lim ,  Chan Wah Ng ,  Tien Ming Benjamin Koh ,  Pek Yew Tan

发明人： Jun Hirano ,  Keigo Aso ,  Chun Keong Benjamin Lim ,  Chan Wah Ng ,  Tien Ming Benjamin Koh ,  Pek Yew Tan

IPC分类号： G06F7/04

CPC分类号： H04W12/08 ,  H04L12/2818 ,  H04L12/283 ,  H04L12/2898 ,  H04L12/4633 ,  H04L63/0272 ,  H04L63/104 ,  H04L63/20 ,  H04W76/10 ,  H04W80/04 ,  H04W84/005

摘要： Disclosed is a technique capable of proper execution of access control based on various security policies set by a home user with regards to a packet sent from a visitor node. According to the technique, a MR (Mobile Router) 10 which manages a mobile PAN 30 determines whether a sender of a packet from a communication terminal connected to the mobile PAN is a home user's node which is allowed direct access into a home network or a visitor node (VN 31), and forwards the packet from the home user's node to an HA 20 while forwarding the packet from the visitor node to a policy server 36 located in a DMZ 35. This allows the policy server to perform access control on every packet from a visitor node which attempts to gain access into the home network based on a security policy 36a.

摘要翻译： 公开了一种能够基于由用户对由访问者节点发送的分组设置的各种安全策略来适当地执行访问控制的技术。 根据该技术，管理移动PAN30的MR（移动路由器）10确定来自连接到移动PAN的通信终端的分组的发送者是否是被允许直接访问家庭网络的家庭用户节点，或者 访问节点（VN31），并且将分组从归属用户节点转发到HA 20，同时将分组从访问节点转发到位于DMZ 35中的策略服务器36.这允许策略服务器对每个 来自访问节点的分组，其尝试基于安全策略36a来访问归属网络。

公开(公告)号：US08249086B2

公开(公告)日：2012-08-21

申请号：US12302845

申请日：2007-06-14

申请人： Jun Hirano ,  Keigo Aso ,  Chun Keong Benjamin Lim ,  Chan Wah Ng ,  Tien Ming Benjamin Koh ,  Pek Yew Tan

发明人： Jun Hirano ,  Keigo Aso ,  Chun Keong Benjamin Lim ,  Chan Wah Ng ,  Tien Ming Benjamin Koh ,  Pek Yew Tan

IPC分类号： H04L12/56

CPC分类号： H04L47/2491 ,  H04L12/66 ,  H04L29/12226 ,  H04L45/38 ,  H04L61/2015 ,  H04L61/2061 ,  H04W8/26 ,  H04W28/10 ,  H04W60/005 ,  H04W80/04 ,  H04W84/005

摘要： Disclosed is a technique which enables a mobile node (MN) connected to a mobile router (MR) to carry out flow filtering in a mobile network. This technique allows an MN 25 in a mobile network 24 to set a policy needed for the flow filtering in an MR 10 and, in the present invention, an MR inserts an egress characteristic thereof into, for example, a router advertisement message so that the egress characteristic, a node in a mobile network cannot grasp originally, can be advertised to the interior of the mobile network. Thus, the MN can grasp a characteristic of an access network (characteristic of access system 20) even in a case in which it is connected to the MR, which achieves intelligent flow filtering.

摘要翻译： 公开了一种使与移动路由器（MR）连接的移动节点（MN）能够在移动网络中进行流量过滤的技术。 该技术允许移动网络24中的MN 25设置MR 10中的流量过滤所需的策略，并且在本发明中，MR将其出口特性插入到例如路由器通告消息中，使得 出口特性，移动网络中的一个节点最初无法掌握，可以通告给移动网络的内部。 因此，即使在连接到MR的情况下，MN也可以掌握接入网络的特性（接入系统20的特性），从而实现智能流量过滤。