公开(公告)号：US07653813B2

公开(公告)日：2010-01-26

申请号：US11275982

申请日：2006-02-08

申请人： Narayanan Venkitaraman ,  Vidya Narayanan

发明人： Narayanan Venkitaraman ,  Vidya Narayanan

IPC分类号： H04L9/32

CPC分类号： H04L61/2092 ,  H04L9/0838 ,  H04L9/3226 ,  H04L29/12311 ,  H04L29/1232 ,  H04L61/2084 ,  H04L63/0407 ,  H04L63/08 ,  H04L2209/80 ,  H04W12/06

摘要： All nodes within a communication system (100) will create an IP address based on a shared-secret key. The shared-secret key is unique for every node within the communication system and is known only to the node (102) and a server (103). The router (101) can validate that the node (102) owns the IP address.

摘要翻译： 通信系统（100）内的所有节点将基于共享秘密密钥创建IP地址。 共享秘密密钥对于通信系统中的每个节点是唯一的，并且仅对节点（102）和服务器（103）是已知的。 路由器（101）可以验证节点（102）拥有IP地址。

公开(公告)号：US20080298595A1

公开(公告)日：2008-12-04

申请号：US12131039

申请日：2008-05-31

申请人： Vidya Narayanan ,  Fatih Ulupinar ,  Jun Wang ,  Lakshminath Reddy Dondeti ,  Raymond Tah-Sheng Hsu

发明人： Vidya Narayanan ,  Fatih Ulupinar ,  Jun Wang ,  Lakshminath Reddy Dondeti ,  Raymond Tah-Sheng Hsu

IPC分类号： H04L9/14

CPC分类号： H04L63/06 ,  H04L9/0836 ,  H04L2209/76 ,  H04L2209/80 ,  H04W12/04 ,  H04W12/06 ,  H04W80/04 ,  H04W88/02

摘要： A method is provided for securing a PMIP tunnel between a serving gateway and a new access node through which an access terminal communicates. A PMIP key hierarchy unique to each access terminal is maintained by the gateway. The gateway uses a first node key to secure PMIP tunnels when authentication of the access terminal has been performed. A PMIP key is generated based on the first node key and the PMIP key is sent to the new access node to assist in establishing and securing a PMIP tunnel between the gateway and the new access node. Otherwise, when authentication of the access terminal has not been performed, the gateway generates a second node key and sends it to an intermediary network node which then generates and sends a PMIP key to the new access node. This second key is then used to secure the PMIP tunnel.

摘要翻译： 提供了一种用于保护服务网关和接入终端通过的新接入节点之间的PMIP隧道的方法。 每个接入终端唯一的PMIP密钥层级由网关维护。 当已经执行接入终端的认证时，网关使用第一节点密钥来保护PMIP隧道。 基于第一节点密钥生成PMIP密钥，并将PMIP密钥发送到新的接入节点，以协助建立和保护网关与新接入节点之间的PMIP隧道。 否则，当接入终端的认证尚未被执行时，网关生成第二节点密钥并将其发送到中间网络节点，然后生成PMIP密钥并将其发送到新的接入节点。 然后第二个密钥用于保护PMIP隧道。

公开(公告)号：US20080175201A1

公开(公告)日：2008-07-24

申请号：US11870294

申请日：2007-10-10

申请人： Kalle I. Ahmavaara ,  Vidya Narayanan ,  Wolfgang Granzow

发明人： Kalle I. Ahmavaara ,  Vidya Narayanan ,  Wolfgang Granzow

IPC分类号： H04Q7/00

CPC分类号： H04W8/02 ,  H04W80/04 ,  H04W80/045 ,  H04W88/182

摘要： A method for using Internet mobility protocols with non Internet mobility protocols is described. A first gateway node communicates with a second gateway node using a first protocol. The first protocol is a non Internet mobility protocol. A home address (HoA) for a mobile node is managed by the second gateway node. Updates regarding the location of the mobile node within a domain are received using a second protocol. The second protocol is an Internet mobility protocol. Intra-domain mobility for the mobile node is managed by the second gateway node using the second protocol.

摘要翻译： 描述了使用具有非互联网移动性协议的因特网移动性协议的方法。 第一网关节点使用第一协议与第二网关节点进行通信。 第一个协议是非互联网移动协议。 用于移动节点的归属地址（HoA）由第二网关节点管理。 使用第二协议接收关于域内的移动节点的位置的更新。 第二个协议是互联网移动协议。 移动节点的域内移动性由第二网关节点使用第二协议进行管理。

公开(公告)号：US20080159227A1

公开(公告)日：2008-07-03

申请号：US11941873

申请日：2007-11-16

申请人： Fatih Ulupinar ,  Jun Wang ,  Parag Arun Agashe ,  Raymond Tah-Sheng Hsu ,  Vidya Narayanan

发明人： Fatih Ulupinar ,  Jun Wang ,  Parag Arun Agashe ,  Raymond Tah-Sheng Hsu ,  Vidya Narayanan

IPC分类号： H04Q7/00

CPC分类号： H04W8/04 ,  H04W8/085 ,  H04W8/26 ,  H04W60/00

摘要： A method for implementing proxy mobile Internet protocol (PMIP) in mobile IP foreign agent care-of-address mode may include determining a home address of an access terminal. The method may also include communicating with a home agent in order to bind an address of the network node with the home address of the access terminal and establish a tunnel between the network node and the home agent. The method may also include receiving first packets destined for the access terminal from the home agent via the tunnel and sending the first packets to the access terminal. The method may also include receiving second packets sent by the access terminal that are destined for a correspondent node and sending the second packets to the home agent via the tunnel.

摘要翻译： 用于在移动IP异地转交地址模式中实现代理移动因特网协议（PMIP）的方法可以包括确定接入终端的归属地址。 该方法还可以包括与归属代理进行通信，以便将网络节点的地址与接入终端的归属地址进行绑定，并在网络节点和归属代理之间建立隧道。 该方法还可以包括经由隧道从归属代理接收去往接入终端的第一分组，并将第一分组发送到接入终端。 该方法还可以包括接收由接入终端发送的目的地为通信节点的第二分组，并经由隧道向归属代理发送第二分组。

公开(公告)号：US20070082673A1

公开(公告)日：2007-04-12

申请号：US11248982

申请日：2005-10-12

申请人： Christope Janneteau ,  Vidya Narayanan ,  Alexandru Petrescu

发明人： Christope Janneteau ,  Vidya Narayanan ,  Alexandru Petrescu

IPC分类号： H04Q7/20

CPC分类号： H04W8/065 ,  H04L45/00 ,  H04W8/26 ,  H04W40/34 ,  H04W60/00

摘要： A method for enabling autonomous mode routing between mobile entities in a plurality of nested mobile networks includes the steps of: announcing (305) a root mobile entity address; in response to the announcing, receiving (310) a registration request comprising routing information from each mobile entity in at least a portion of a plurality of mobile entities comprising a plurality of nested mobile networks, wherein at least one of the registration requests is received while in an autonomous mode; and generating (315) a root mobile entity binding cache using the routing information from the registration requests, for enabling routing within the plurality of nested mobile networks.

摘要翻译： 一种用于在多个嵌套移动网络中的移动实体之间进行自主模式路由的方法包括以下步骤：通知（305）根移动实体地址; 响应于通知，接收（310）注册请求，其包括在包括多个嵌套移动网络的多个移动实体的至少一部分中来自每个移动实体的路由信息​​，其中，接收至少一个注册请求，同时 在自主模式下 以及使用来自所述注册请求的所述路由信息来生成（315）根移动实体绑定高速缓存，用于启用所述多个嵌套移动网络内的路由。

公开(公告)号：US20070081494A1

公开(公告)日：2007-04-12

申请号：US11245847

申请日：2005-10-07

申请人： Alexandru Petrescu ,  Christophe Janneteau ,  Vidya Narayanan

发明人： Alexandru Petrescu ,  Christophe Janneteau ,  Vidya Narayanan

IPC分类号： H04Q7/00

CPC分类号： H04W36/0016 ,  H04W8/26

摘要： A method and apparatus for facilitating handoff for a mobile entity in a wireless communication network is provided (100). The method comprising obtaining a first internet protocol (IP) address for the mobile entity (105) when the mobile entity is attached to a first access node, identifying at least one target access node (110), the target access node being a potential access node for handoff for the mobile entity, sending a trigger message corresponding to the mobile entity to the identified target access node (115) and acquiring a second IP addresses for the mobile entity at the target access node (120). The invention also proposes a method for creating a tunnel for facilitating the handoff for a mobile entity from the first access node to the target access node (205, 210, 215, 220).

摘要翻译： 提供了一种用于促进无线通信网络中的移动实体的切换的方法和装置（100）。 所述方法包括当所述移动实体附接到第一接入节点时识别所述移动实体（105）的第一网际协议（IP）地址，识别至少一个目标接入节点（110），所述目标接入节点是潜在接入 节点，用于向所述移动实体进行切换，向所识别的目标接入节点（115）发送与所述移动实体相对应的触发消息，并获取所述移动实体在所述目标接入节点（120）处的第二IP地址。 本发明还提出了一种用于创建用于促进移动实体从第一接入节点到目标接入节点（205,210,215,220）的切换的隧道的方法。

公开(公告)号：US20070006296A1

公开(公告)日：2007-01-04

申请号：US11169406

申请日：2005-06-29

申请人： Madjid Nakhjiri ,  Vidya Narayanan ,  Narayanan Venkitaraman

发明人： Madjid Nakhjiri ,  Vidya Narayanan ,  Narayanan Venkitaraman

IPC分类号： G06F15/16

CPC分类号： H04L63/0272 ,  H04L9/083 ,  H04L9/0844 ,  H04L63/061 ,  H04L63/0892 ,  H04L2209/80 ,  H04L2463/061

摘要： An Authentication, Authorization, and Accounting (AAA) key, defining a first shared secret between a mobile node (108) and an AAA server (110), is acquired. A shared key becomes associated with the mobile node (108) and the VPN server (104). The shared key is formed, at least in part, from the AAA key. The shared key defines a second shared secret, which is between the mobile node (108) and the VPN server (104). A secure data tunnel is then established between the mobile node (108) and the VPN server (104) using the shared key.

摘要翻译： 获取在移动节点（108）和AAA服务器（110）之间定义第一共享秘密的认证，授权和计费（AAA）密钥。 共享密钥与移动节点（108）和VPN服务器（104）相关联。 共享密钥至少部分地由AAA密钥形成。 所述共享密钥定义在所述移动节点（108）和所述VPN服务器（104）之间的第二共享密钥。 然后使用共享密钥在移动节点（108）和VPN服务器（104）之间建立安全数据隧道。

公开(公告)号：US10171998B2

公开(公告)日：2019-01-01

申请号：US12048883

申请日：2008-03-14

申请人： Jun Wang ,  Arungundram C. Mahendran ,  Vidya Narayanan

发明人： Jun Wang ,  Arungundram C. Mahendran ,  Vidya Narayanan

IPC分类号： H04W12/06 ,  H04L29/06 ,  H04W12/02 ,  H04W80/04

摘要： An authentication server may be adapted to (a) authenticate an authentication peer seeking to establish communications via a first network access node; (b) retrieve user profile information associated with the authentication peer; and/or (c) send the user profile information to a network gateway node that facilitates communication services for the authentication peer. A PMIP network node may be adapted to (a) provide wireless network connectivity to an authentication peer via a first network access node; (b) provide a PMIP key to both ends of a PMIP tunnel between the first network access node and a PMIP network node used to provide communications to the authentication peer; (c) provide the PMIP key to a first authenticator associated the first network access node; (d) receive a request at the PMIP network node from a requesting entity to reroute communications for the authentication peer; and/or (e) verify whether the requesting entity knows the PMIP key.

公开(公告)号：US09495760B2

公开(公告)日：2016-11-15

申请号：US13235847

申请日：2011-09-19

申请人： Ashwin Swaminathan ,  Piyush Sharma ,  Bolan Jiang ,  Murali R. Chari ,  Serafin Diaz Spindola ,  Pawan Kumar Baheti ,  Vidya Narayanan

发明人： Ashwin Swaminathan ,  Piyush Sharma ,  Bolan Jiang ,  Murali R. Chari ,  Serafin Diaz Spindola ,  Pawan Kumar Baheti ,  Vidya Narayanan

IPC分类号： G06K9/00 ,  G06T7/20 ,  G06T7/00

CPC分类号： G06T7/246 ,  G06K9/00671 ,  G06T7/73 ,  G06T2207/10004

摘要： A mobile platform efficiently processes sensor data, including image data, using distributed processing in which latency sensitive operations are performed on the mobile platform, while latency insensitive, but computationally intensive operations are performed on a remote server. The mobile platform acquires sensor data, such as image data, and determines whether there is a trigger event to transmit the sensor data to the server. The trigger event may be a change in the sensor data relative to previously acquired sensor data, e.g., a scene change in an image. When a change is present, the sensor data may be transmitted to the server for processing. The server processes the sensor data and returns information related to the sensor data, such as identification of an object in an image or a reference image or model. The mobile platform may then perform reference based tracking using the identified object or reference image or model.

摘要翻译： 移动平台使用在移动平台上执行延迟敏感操作的分布式处理来有效地处理包括图像数据的传感器数据，而延迟不敏感，但在远程服务器上执行计算密集型操作。 移动平台获取诸如图像数据的传感器数据，并且确定是否存在将传感器数据传送到服务器的触发事件。 触发事件可以是传感器数据相对于先前获取的传感器数据的变化，例如图像中的场景变化。 当存在变化时，传感器数据可以被发送到服务器进行处理。 服务器处理传感器数据并返回与传感器数据相关的信息，例如图像中的对象或参考图像或模型的识别。 然后，移动平台可以使用所识别的对象或参考图像或模型来执行基于参考的跟踪。

公开(公告)号：US09444823B2

公开(公告)日：2016-09-13

申请号：US12343988

申请日：2008-12-24

申请人： Vidya Narayanan ,  Lakshminath Reddy Dondeti

发明人： Vidya Narayanan ,  Lakshminath Reddy Dondeti

IPC分类号： H04L29/06 ,  H04L29/08

CPC分类号： H04L63/105 ,  H04L63/102 ,  H04L63/205 ,  H04L67/14

摘要： A system and method are provided that allow an application on a first terminal to inquire about available network communication associations that it can use to send data to another terminal, thereby avoiding the establishment of a new network communication association with the other terminal. A security information module may serve to collect and/or store information about available network communication associations between the first terminal and another terminal across different layers. The security information module may also assess a trust level for the network communication associations based on security mechanisms used to establish each association and/or past experience information reported for these network communication associations. Upon receiving a request for available network communication associations, the security information module provides this to the requesting application which can use it to establish communications with a corresponding application on the other terminal.

摘要翻译： 提供一种系统和方法，其允许第一终端上的应用查询可用于向另一终端发送数据的可用网络通信关联，从而避免与另一终端建立新的网络通信关联。 安全信息模块可以用于收集和/或存储关于在不同层之间的第一终端和另一终端之间的可用网络通信关联的信息。 安全信息模块还可以基于用于建立每个关联的安全机制和/或为这些网络通信关联报告的过去体验信息来评估网络通信关联的信任级别。 在接收到可用的网络通信关联的请求时，安全信息模块将该信息提供给请求应用，该应用可以使用它来建立与另一终端上的相应应用的通信。