公开(公告)号：US20050044362A1

公开(公告)日：2005-02-24

申请号：US10644987

申请日：2003-08-21

Applicant: Wassim Haddad ,  Suresh Krishnan

Inventor： Wassim Haddad ,  Suresh Krishnan

IPC: H04L29/06 ,  H04L9/00 ,  G06F15/173

CPC classification number: H04L63/06 ,  H04L63/12 ,  H04W8/04 ,  H04W12/10 ,  H04W28/06 ,  H04W60/00 ,  H04W80/04

Abstract: Methods and home agent for building a plurality of individual binding updates in the home agent on behalf of a mobile node. One of the methods and the home agent is directed to receiving an Aggregated Binding Update (ABU) at the home agent from the mobile node, building the plurality of individual binding updates from the ABU and sending from the home agent each of the plurality of individual binding updates toward each of the different destination addresses. Each of the plurality of individual binding updates has a different destination address, which is specified in the ABU. Another of the methods and the home agent is directed to intercepting a plurality of binding acknowledgments destined to the mobile node, building an Aggregated Binding Acknowledgment (ABA) from the plurality of binding acknowledgments and sending the ABA toward the mobile node.

Abstract translation: 代表移动节点在归属代理中构建多个单独绑定更新的方法和归属代理。 方法和归属代理之一是针对从移动节点在归属代理处接收聚合绑定更新（ABU），构建来自ABU的多个单独绑定更新，并从归属代理发送多个个体中的每一个 将更新绑定到每个不同的目标地址。 多个单独绑定更新中的每一个具有在ABU中指定的不同的目的地址。 另一种方法和归属代理涉及截取目的地为移动节点的多个绑定确认，从多个绑定确认中构建聚合绑定确认（ABA），并向移动节点发送ABA。

公开(公告)号：US20190116031A1

公开(公告)日：2019-04-18

申请号：US16095072

申请日：2016-05-05

Applicant: Catherine TRUCHAN ,  Stere PREDA ,  Suresh KRISHNAN ,  Telefonaktiebolaget LM Ericsson (publ)

Inventor： Catherine Truchan ,  Stere Preda ,  Suresh Krishnan

IPC: H04L9/08 ,  H04L29/06 ,  H04W12/04 ,  H04W36/00 ,  H04W36/12

Abstract: Methods, systems, and computer program products for security context escrowing are provided herein. According to one aspect, a method of operation of a network node for a telecommunications network comprises storing security context information associated with a small data, fast path connection between a wireless device and a first gateway that is serving the wireless device, determining a change in the gateway that is serving the wireless device from the first gateway to a second gateway, and, in response to determining the change, providing the stored security context information to the second gateway for use with the wireless device.

公开(公告)号：US20170142577A1

公开(公告)日：2017-05-18

申请号：US14760370

申请日：2015-06-29

Applicant: Suresh KRISHNAN ,  TELEFONAKTIEBOLAGET LM ERICSSON (PUBL)

Inventor： Stere Preda ,  Suresh Krishnan ,  Catherine Truchan

IPC: H04W12/02 ,  H04L29/06

CPC classification number: H04W12/02 ,  H04L63/0442 ,  H04L63/0471 ,  H04L2209/80 ,  H04W84/045 ,  H04W88/16

Abstract: In one aspect of the teachings herein, a radio node provides a local loopback mode of operation in at least some operational instances, in which it loops “local” traffic between wireless devices operating within a local radio cell or cells, rather than forwarding such traffic along to a controlling gateway for handling. The wireless devices operating within the cell(s) and involved in the loopback operation switch over from symmetric encryption that involves the controlling gateway as a secure endpoint for their traffic, to asymmetric or public-private key pair encryption. The radio node uses a correspondingly derived loopback encryption key to enable security on the loopback traffic flow between the involved local devices. Use of the loopback encryption key means that the radio node need not know or otherwise have access to the symmetric encryption keys used by the involved devices and the controlling gateway for “normal” non-loopback operation.

公开(公告)号：US09083705B2

公开(公告)日：2015-07-14

申请号：US13849362

申请日：2013-03-22

Applicant: Suresh Krishnan ,  Meral Shirazipour ,  Catherine Truchan

Inventor： Suresh Krishnan ,  Meral Shirazipour ,  Catherine Truchan

IPC: H04L12/28 ,  H04L29/06 ,  H04L29/12 ,  H04L12/24 ,  H04L12/721

CPC classification number: H04L61/2514 ,  H04L41/0813 ,  H04L41/0816 ,  H04L45/38 ,  H04L61/2517 ,  H04L63/0892

Abstract: The present disclosure describes methods and apparatus for differentiating subscriber devices of a subscriber hidden by a network address translation device and enables traffic flow steering on a per device basis rather than a per subscriber basis. Identification of subscriber devices is achieved by assigning a reserved set of external ports to each subscriber device. Different service paths can be defined for different subscriber devices to provide a subscriber with a different experience for each subscriber device of the subscriber.

Abstract translation: 本公开描述了用于区分由网络地址转换设备隐藏的用户的用户设备的方法和设备，并且使得能够在每个设备的基础上而不是每个用户的基础上进行业务流控制。 用户设备的识别是通过将预留的一组外部端口分配给每个用户设备来实现的。 可以为不同的订户设备定义不同的服务路径，以向订户提供与订户的每个订户设备不同的体验。

公开(公告)号：US07508793B2

公开(公告)日：2009-03-24

申请号：US11229680

申请日：2005-09-20

Applicant: Wassim Haddad ,  Suresh Krishnan

Inventor： Wassim Haddad ,  Suresh Krishnan

IPC: H04Q7/00

CPC classification number: H04L29/1232 ,  H04L61/2092 ,  H04W8/085 ,  H04W8/087 ,  H04W36/0011 ,  H04W80/04

Abstract: A MN, a method and a VMAP for increasing efficiency of handover of the MN from a AR1 to a AR2. The VMAP is hierarchically below a MAP and above the AR1. The MN has a RCoA valid under the MAP and a LCoA valid under the AR1. The VMAP comprises an OMM Function capable of receiving a PathUM thereby informing the VMAP that the MN 412 is handing over to the AR2, computing a LCoA2 valid under the AR2 and forwarding traffic received on the LCoA to the LCoA2. A VMAP Binding Cache Entry for the MN comprises at least the MN's RCoA, the MN's LCoA and a unique value associated with the MN. The VMAP, therewith, computes the LCoA2 using a same function as in the MN. Prior to receiving the PathUM, the VMAP could receive an E-LBA issued from the MAP and addressed to the LCoA comprising the MN's RCoA and the unique value associated with the MN and thereafter, creating or updating the VBCE for the MN using information included therein.

Abstract translation: MN，用于提高MN从AR1到AR2的切换的效率的方法和VMAP。 VMAP分层地在MAP之下并且在AR1之上。 MN在MAP下具有RCoA有效，在AR1下有一个LCoA有效。 VMAP包括能够接收Path​​UM的OMM功能，从而向VMAP通知MN 412正在切换到AR2，计算在AR2下有效的LCoA2，并将在LCoA上接收的业务转发到LCoA2。 MN的VMAP绑定缓存条目至少包括MN的RCoA，MN的LCoA和与MN相关联的唯一值。 因此，VMAP使用与MN中相同的功能来计算LCoA2。 在接收到PathUM之前，VMAP可以接收从MAP发出的E-LBA，并发送到包括MN的RCoA的LCoA和与MN相关联的唯一值，此后，使用包括在其中的信息创建或更新MN的VBCE 。

公开(公告)号：US20070287472A1

公开(公告)日：2007-12-13

申请号：US11738819

申请日：2007-04-23

Applicant: Wassim Haddad ,  Suresh Krishnan

Inventor： Wassim Haddad ,  Suresh Krishnan

IPC: H04Q7/20

CPC classification number: H04L45/00 ,  H04L29/06 ,  H04W8/26 ,  H04W24/00 ,  H04W28/06 ,  H04W40/36 ,  H04W80/04 ,  H04W84/12 ,  H04W92/24

Abstract: Systems and methods are described which delegate reachability testing for mobility signaling in communication networks. A mobile node transmits a mobility signaling package to other network nodes, which can use the information contained therein to perform the delegated reachability testing.

Abstract translation: 描述了在通信网络中委托移动性信令的可达性测试的系统和方法。 移动节点将移动性信令包发送到其他网络节点，其可以使用其中包含的信息来执行委托的可达性测试。

公开(公告)号：US07228431B2

公开(公告)日：2007-06-05

申请号：US10644987

申请日：2003-08-21

Applicant: Wassim Haddad ,  Suresh Krishnan

Inventor： Wassim Haddad ,  Suresh Krishnan

IPC: G06F1/24

CPC classification number: H04L63/06 ,  H04L63/12 ,  H04W8/04 ,  H04W12/10 ,  H04W28/06 ,  H04W60/00 ,  H04W80/04

Abstract: Methods and home agent for building a plurality of individual binding updates in the home agent on behalf of a mobile node. One of the methods and the home agent is directed to receiving an Aggregated Binding Update (ABU) at the home agent from the mobile node, building the plurality of individual binding updates from the ABU and sending from the home agent each of the plurality of individual binding updates toward each of the different destination addresses. Each of the plurality of individual binding updates has a different destination address, which is specified in the ABU. Another of the methods and the home agent is directed to intercepting a plurality of binding acknowledgments destined to the mobile node, building an Aggregated Binding Acknowledgment (ABA) from the plurality of binding acknowledgments and sending the ABA toward the mobile node.

Abstract translation: 代表移动节点在归属代理中构建多个单独绑定更新的方法和归属代理。 所述方法和所述归属代理之一涉及从所述移动节点在所述归属代理处接收聚合绑定更新（ABU），从所述ABU构建所述多个个体绑定更新，并且从所述归属代理发送所述多个个体中的每一个 将更新绑定到每个不同的目标地址。 多个单独绑定更新中的每一个具有在ABU中指定的不同的目的地址。 另一种方法和归属代理涉及截取目的地为移动节点的多个绑定确认，从多个绑定确认中构建聚合绑定确认（ABA），并向移动节点发送ABA。

公开(公告)号：US20060198370A1

公开(公告)日：2006-09-07

申请号：US11229680

申请日：2005-09-20

Applicant: Wassim Haddad ,  Suresh Krishnan

Inventor： Wassim Haddad ,  Suresh Krishnan

IPC: H04L12/28 ,  H04L12/56

CPC classification number: H04L29/1232 ,  H04L61/2092 ,  H04W8/085 ,  H04W8/087 ,  H04W36/0011 ,  H04W80/04

Abstract: A MN, a method and a VMAP for increasing efficiency of handover of the MN from a AR1 to a AR2. The VMAP is hierarchically below a MAP and above the AR1. The MN has a RCoA valid under the MAP and a LCoA valid under the AR1. The VMAP comprises an OMM Function capable of receiving a PathUM thereby informing the VMAP that the MN 412 is handing over to the AR2, computing a LCoA2 valid under the AR2 and forwarding traffic received on the LCoA to the LCoA2. A VMAP Binding Cache Entry for the MN comprises at least the MN's RCoA, the MN's LCoA and a unique value associated with the MN. The VMAP, therewith, computes the LCoA2 using a same function as in the MN. Prior to receiving the PathUM, the VMAP could receive an E-LBA issued from the MAP and addressed to the LCoA comprising the MN's RCoA and the unique value associated with the MN and thereafter, creating or updating the VBCE for the MN using information included therein.

Abstract translation: MN，用于提高MN从AR 1到AR 2的切换的效率的方法和VMAP。 VMAP分层地在MAP之下并且在AR 1之上。 MN在MAP下具有RCoA有效，而在AR 1下有一个LCoA有效。 VMAP包括能够接收路径的OMM功能，从而向VMAP通知MN 412正在移交给AR 2，计算在AR 2下有效的LCoA 2，并将在LCoA上接收到的业务转发到LCoA 2。 MN的VMAP绑定缓存条目至少包括MN的RCoA，MN的LCoA和与MN相关联的唯一值。 其中，VMAP使用与MN中相同的功能来计算LCoA 2。 在接收到PathUM之前，VMAP可以接收从MAP发出的E-LBA，并发送到包括MN的RCoA的LCoA和与MN相关联的唯一值，此后，使用包括在其中的信息创建或更新MN的VBCE 。

公开(公告)号：US08750303B2

公开(公告)日：2014-06-10

申请号：US11738819

申请日：2007-04-23

Applicant: Wassim Haddad ,  Suresh Krishnan

Inventor： Wassim Haddad ,  Suresh Krishnan

IPC: H04L12/28 ,  H04L12/56 ,  H04L29/06 ,  H04W84/12

CPC classification number: H04L45/00 ,  H04L29/06 ,  H04W8/26 ,  H04W24/00 ,  H04W28/06 ,  H04W40/36 ,  H04W80/04 ,  H04W84/12 ,  H04W92/24

Abstract: Systems and methods are described which delegate reachability testing for mobility signaling in communication networks. A mobile node transmits a mobility signaling package to other network nodes, which can use the information contained therein to perform the delegated reachability testing.

Abstract translation: 描述了在通信网络中委托移动性信令的可达性测试的系统和方法。 移动节点将移动性信令包发送到其他网络节点，其可以使用其中包含的信息来执行委托的可达性测试。

公开(公告)号：US20140140344A1

公开(公告)日：2014-05-22

申请号：US13849362

申请日：2013-03-22

Applicant: Suresh Krishnan ,  Meral Shirazipour ,  Catherine Truchan

Inventor： Suresh Krishnan ,  Meral Shirazipour ,  Catherine Truchan

IPC: H04L12/741

CPC classification number: H04L61/2514 ,  H04L41/0813 ,  H04L41/0816 ,  H04L45/38 ,  H04L61/2517 ,  H04L63/0892

Abstract: The present disclosure describes methods and apparatus for differentiating subscriber devices of a subscriber hidden by a network address translation device and enables traffic flow steering on a per device basis rather than a per subscriber basis. Identification of subscriber devices is achieved by assigning a reserved set of external ports to each subscriber device. Different service paths can be defined for different subscriber devices to provide a subscriber with a different experience for each subscriber device of the subscriber.

Abstract translation: 本公开描述了用于区分由网络地址转换设备隐藏的用户的用户设备的方法和设备，并且使得能够在每个设备的基础上而不是每个用户的基础上进行业务流控制。 用户设备的识别是通过将预留的一组外部端口分配给每个用户设备来实现的。 可以为不同的订户设备定义不同的服务路径，以向订户提供与订户的每个订户设备不同的体验。