Security optimization for IMS/MMD architecture
    5.
    发明授权
    Security optimization for IMS/MMD architecture 有权
    IMS / MMD架构的安全优化

    公开(公告)号:US09025771B2

    公开(公告)日:2015-05-05

    申请号:US11900619

    申请日:2007-09-11

    IPC分类号: H04K1/00 H04W36/00 H04L29/06

    摘要: A mechanism by which handoff delay can be minimized while not compromising the IMS/MMD security and also protecting the media if required by certain applications is presented. Methods for mitigating delay during SA re-association and mitigating the IPSec tunnel overhead for signaling and media at the Mobile Node are given. In one embodiment, SA keys can be transferred from the old P-CSCF to new P-CSCF, enabling the establishment of SAs before Mobile Node physically moves to the new subnet in a network. Proactive handover is used. In another embodiment, SA keys are transferred from S-CSCF to new P-CSCF. In this case, the SA keys are transferred to the new P-CSCF by S-CSCF through a context transfer mechanism well in advance so that SAs may be established before Mobile Node physically moves to new subnet. In another embodiment, methods for mitigating IPSec tunnel overhead are presented.

    摘要翻译: 呈现切换延迟最小化的机制,同时不影响IMS / MMD安全性,并且在某些应用需要时还可以保护媒体。 给出了在SA重新关联过程中减轻延迟并减轻移动节点上用于信令和媒体的IPSec隧道开销的方法。 在一个实施例中,SA密钥可以从旧的P-CSCF传送到新的P-CSCF,使得能够在移动节点物理移动到网络中的新子网之前建立SA。 使用主动切换。 在另一实施例中,SA密钥从S-CSCF传送到新的P-CSCF。 在这种情况下,SA密钥由S-CSCF通过上下文传送机制预先传送到新的P-CSCF,以便SA可以在移动节点物理移动到新的子网之前被建立。 在另一个实施例中,提出了用于减轻IPSec隧道开销的方法。

    Security optimization for IMS/MMD architecture
    7.
    发明申请
    Security optimization for IMS/MMD architecture 有权
    IMS / MMD架构的安全优化

    公开(公告)号:US20080072310A1

    公开(公告)日:2008-03-20

    申请号:US11900619

    申请日:2007-09-11

    IPC分类号: H04L9/00

    摘要: A mechanism by which handoff delay can be minimized while not compromising the IMS/MMD security and also protecting the media if required by certain applications is presented. Methods for mitigating delay during SA re-association and mitigating the IPSec tunnel overhead for signaling and media at the Mobile Node are given. In one embodiment, SA keys can be transferred from the old P-CSCF to new P-CSCF, enabling the establishment of SAs before Mobile Node physically moves to the new subnet in a network. Proactive handover is used. In another embodiment, SA keys are transferred from S-CSCF to new P-CSCF. In this case, the SA keys are transferred to the new P-CSCF by S-CSCF through a context transfer mechanism well in advance so that SAs may be established before Mobile Node physically moves to new subnet. In another embodiment, methods for mitigating IPSec tunnel overhead are presented.

    摘要翻译: 呈现切换延迟最小化的机制,同时不影响IMS / MMD安全性,并且在某些应用需要时还可以保护媒体。 给出了在SA重新关联过程中减轻延迟并减轻移动节点上用于信令和媒体的IPSec隧道开销的方法。 在一个实施例中,SA密钥可以从旧的P-CSCF传送到新的P-CSCF,使得能够在移动节点物理移动到网络中的新子网之前建立SA。 使用主动切换。 在另一实施例中,SA密钥从S-CSCF传送到新的P-CSCF。 在这种情况下,SA密钥由S-CSCF通过上下文传送机制预先传送到新的P-CSCF,以便SA可以在移动节点物理移动到新的子网之前被建立。 在另一个实施例中,提出了用于减轻IPSec隧道开销的方法。

    Proxy mobile IP
    9.
    发明授权
    Proxy mobile IP 有权
    代理移动IP

    公开(公告)号:US08670407B2

    公开(公告)日:2014-03-11

    申请号:US12012014

    申请日:2008-01-30

    IPC分类号: H04W4/00

    摘要: A system and method for route optimization in PMIP having a first mobile node having a local mobility anchor and anchored at an access router and a second mobile node anchored at an access router is presented. The method includes establishing a binding cache at one access router comprising a mapping of mobile node addresses to access router addresses, populating the binding cache, and updating the mapping of the mobile node addresses in response to a handoff of a mobile node from one access router to another access router, so that a packet is transmitted from the first mobile node to the second mobile node using the mapping in the binding cache. The second access router address is obtained by either transmitting the packet from the first mobile node to the local mobility anchor, or querying neighboring access routers, or broadcasting access router addresses from the local mobility anchor.

    摘要翻译: 提出了一种具有第一移动节点的PMIP中的路由优化的系统和方法,所述第一移动节点具有本地移动锚点并锚定在接入路由器处,并且锚定在接入路由器处的第二移动节点。 该方法包括在一个接入路由器上建立绑定高速缓存,其包括移动节点地址到接入路由器地址的映射,填充绑定高速缓存,以及响应于移动节点从一个接入路由器的切换更新移动节点地址的映射 到另一个接入路由器,使得使用绑定高速缓存中的映射将分组从第一移动节点发送到第二移动节点。 第二接入路由器地址是通过从第一移动节点向本地移动锚点发送分组,或者查询相邻接入路由器,或者从本地移动锚点广播接入路由器地址获得的。

    Flexible mobility framework for heterogeneous roaming in next generation wireless networks
    10.
    发明授权
    Flexible mobility framework for heterogeneous roaming in next generation wireless networks 有权
    灵活的移动性框架,用于下一代无线网络中的异构漫游

    公开(公告)号:US08625551B2

    公开(公告)日:2014-01-07

    申请号:US12004580

    申请日:2007-12-21

    IPC分类号: H04Q7/20

    CPC分类号: H04W12/06 H04W8/26 H04W80/10

    摘要: A system and method for mobility support of a mobile node having a home network in a heterogeneous roaming environment is presented. The method comprises the steps of authenticating the mobile node in a visited network and obtaining an address for the mobile node in the visited network, establishing a security connection between a functional component in the visited network and an agent in the home network, creating a home address for the mobile node, and using the home address to generate a SIP signaling address, a SIP media address, and a non-SIP media address, such that SIP non-media is transmitted using the security connection to the SIP signaling address, SIP media is transmitted using the security connection to the SIP media address, and non-SIP media is transmitted using the security connection to the non-SIP media address.

    摘要翻译: 提出了一种在异构漫游环境中具有家庭网络的移动节点的移动性支持的系统和方法。 该方法包括以下步骤:对受访网络中的移动节点进行认证,并获得访问网络中的移动节点的地址,建立受访网络中的功能组件与家庭网络中的代理之间的安全连接, 移动节点的地址,以及使用家庭地址生成SIP信令地址,SIP媒体地址和非SIP媒体地址,使得使用与SIP信令地址的安全连接来发送SIP非媒体,SIP 使用安全连接将媒体发送到SIP媒体地址,并且使用与非SIP媒体地址的安全连接来发送非SIP媒体。