Validating a system with multiple subsystems using trusted platform modules and virtual platform modules
    32.
    发明授权
    Validating a system with multiple subsystems using trusted platform modules and virtual platform modules 有权
    使用可信平台模块和虚拟平台模块验证具有多个子系统的系统

    公开(公告)号:US08793504B2

    公开(公告)日:2014-07-29

    申请号:US13402109

    申请日:2012-02-22

    摘要: Software validation is provided for a breakout system having multiple subsystems at the edge of a mobile data network. The software validation utilizes one or more trusted platform modules (TPM) to secure multiple subsystems including virtual machines in the breakout system. Hash values for the software in the various subsystems are placed in Platform Configuration Registers (PCRs) of the TPM. The TPM cryptographically signs quotes, which are a collection of hash values from the PCRs. The breakout system produces an extensible markup language (XML) file with the signed quotes related to the subsystems and sends them to a network management system for verification. The network management system validates the software configured on the breakout system using a public key to access the quotes and compares the values to known good values stored in an inventory record associated with the specific breakout system being validated.

    摘要翻译: 为在移动数据网络边缘具有多个子系统的突围系统提供软件验证。 软件验证利用一个或多个可信平台模块(TPM)来保护多个子系统,包括突发系统中的虚拟机。 各种子系统中的软件的哈希值被放置在TPM的平台配置寄存器(PCR)中。 TPM加密地标记引号,这是PCR中的哈希值的集合。 突破系统使用与子系统相关的签名引号生成可扩展标记语言(XML)文件,并将其发送到网络管理系统进行验证。 网络管理系统使用公钥验证在分组系统上配置的软件,以访问报价,并将值与存储在与要验证的特定分支系统相关联的库存记录中的已知良好值进行比较。

    CHARGING AND POLICY FOR SERVICES AT THE EDGE OF A MOBILE DATA NETWORK
    33.
    发明申请
    CHARGING AND POLICY FOR SERVICES AT THE EDGE OF A MOBILE DATA NETWORK 有权
    移动数据网络边缘服务的收费和政策

    公开(公告)号:US20140043984A1

    公开(公告)日:2014-02-13

    申请号:US13568823

    申请日:2012-08-07

    IPC分类号: H04W40/00 H04W24/00

    摘要: Mobile network services are performed at the edge of a mobile data network in a way that is transparent to most of the existing equipment in the mobile data network. The mobile data network includes a radio access network and a core network. A first service mechanism in the radio access network breaks out data coming from a basestation, and performs one or more mobile network services at the edge of the mobile data network based on the broken out data. A second service mechanism in the core network receives data monitored during attach and Packet Data Protocol (PDP) context activation, and establishes sessions with components in the mobile data network that support charging and policy control for sessions broken out by the first service mechanism.

    摘要翻译: 在移动数据网络的边缘以对移动数据网络中的大多数现有设备是透明的方式执行移动网络服务。 移动数据网络包括无线电接入网络和核心网络。 无线电接入网络中的第一服务机制突破了基站的数据,并根据分解的数据在移动数据网络边缘执行一个或多个移动网络业务。 核心网络中的第二个服务机制接收在连接和分组数据协议(PDP)上下文激活期间监视的数据,并且建立与支持由第一服务机制分解的会话的计费和策略控制的移动数据网络中的组件的会话。

    Using the maintenance channel in a mobile data network to provide subscriber data when a cache miss occurs
    35.
    发明授权
    Using the maintenance channel in a mobile data network to provide subscriber data when a cache miss occurs 失效
    使用移动数据网络中的维护通道在发生高速缓存未命中时提供用户数据

    公开(公告)号:US08521153B1

    公开(公告)日:2013-08-27

    申请号:US13525889

    申请日:2012-06-18

    IPC分类号: H04W24/00

    摘要: A mobile data network includes a radio access network and a core network. A first service mechanism in the radio access network breaks out data coming from a basestation. When data is broken out by the first service mechanism, the data is delivered at the edge, which means the true activity of the channel is not visible to the core network. In order to maintain the high-speed channel, channel maintenance data packets are sent to and from the radio network controller on the network tunnel. The maintenance channel is also used to send cache miss data to a subscriber when a cache miss occurs at the edge of the mobile data network, without regard to a need for channel maintenance data packets.

    摘要翻译: 移动数据网络包括无线电接入网络和核心网络。 无线电接入网络中的第一个服务机制突破了基站的数据。 当数据由第一个服务机制分解时,数据在边缘传送,这意味着信道的真实活动对于核心网络是不可见的。 为了保持高速通道,在网络隧道上向无线网络控制器发送信道维护数据包。 当移动数据网络的边缘发生高速缓存未命中时,维护信道也用于向用户发送高速缓存未命中数据,而不考虑对信道维护数据分组的需要。

    KEY STORAGE AND RETRIEVAL IN A BREAKOUT COMPONENT AT THE EDGE OF A MOBILE DATA NETWORK
    36.
    发明申请
    KEY STORAGE AND RETRIEVAL IN A BREAKOUT COMPONENT AT THE EDGE OF A MOBILE DATA NETWORK 有权
    移动数据网络边缘的突破性组件中的关键存储和检索

    公开(公告)号:US20130156020A1

    公开(公告)日:2013-06-20

    申请号:US13329517

    申请日:2011-12-19

    IPC分类号: H04W12/00

    摘要: Mobile network services are performed in a mobile data network in a way that is transparent to most of the existing equipment in the mobile data network. The mobile data network includes a radio access network and a core network. A breakout component in the radio access network breaks out data coming from a basestation, and performs one or more mobile network services at the edge of the mobile data network based on the broken out data. These services may require the use of keys. Keys are stored and retrieved from a non-volatile key storage in a way that assures subsystems that need the keys have access to the keys. The keys retrieved from the non-volatile key storage are stored in a shared memory in the requesting subsystem, which allows any applications that requires access to the keys to directly access the keys in the shared memory.

    摘要翻译: 移动网络服务在移动数据网络中以对移动数据网络中的大多数现有设备是透明的方式执行。 移动数据网络包括无线电接入网络和核心网络。 无线电接入网络中的突围组件突破来自基站的数据,并且基于分解的数据在移动数据网络的边缘执行一个或多个移动网络服务。 这些服务可能需要使用密钥。 密钥以非易失性密钥存储器存储和检索,以确保需要密钥的子系统具有访问密钥的方式。 从非易失性密钥存储器检索的密钥存储在请求子系统中的共享存储器中,这允许任何需要访问密钥的应用程序直接访问共享存储器中的密钥。