Method, system and apparatus to support mobile IP version 6 services
    4.
    发明授权
    Method, system and apparatus to support mobile IP version 6 services 有权
    支持移动IP版本6服务的方法,系统和设备

    公开(公告)号:US07934094B2

    公开(公告)日:2011-04-26

    申请号:US10595019

    申请日:2004-06-15

    申请人: Johnson Oyama

    发明人: Johnson Oyama

    IPC分类号: H04L9/32

    摘要: For establishing a MIPv6 security association between the mobile node (10) roaming in a foreign network (20) and a home agent (36) and for simplifying MIPv6-related configuration, MIPv6-related information is transferred in an end-to-end procedure over an AAA infrastructure by means of an, preferably extended, authentication protocol. A preferred embodiment uses EAP as basis for the extended authentication protocol, creating EAP extensions by incorporating the MIPv6-related information as additional data in the EAP protocol stack, for example as EAP attributes in the EAP method layer of the EAP protocol stack or transferred in a generic container attribute on the EAP layer or the EAP method layer. A major advantage of the proposed MIPv6 authentication/authorization mechanism lies in the fact that it is transparent to the visited domain (20), allowing AAA client (22) and AAAv (24) to act as mere pass-through agents during the procedure.

    摘要翻译: 为了在外部网络(20)和归属代理(36)之间漫游的移动节点(10)之间建立MIPv6安全关联,并且为了简化MIPv6相关配置,MIPv6相关信息以端对端的过程 通过优选扩展的认证协议通过AAA基础设施。 优选实施例使用EAP作为扩展认证协议的基础,通过将作为附加数据的MIPv6相关信息合并到EAP协议栈中来创建EAP扩展,例如作为EAP协议栈的EAP方法层中的EAP属性或传送到 EAP层或EAP方法层上的通用容器属性。 所提出的MIPv6认证/授权机制的主要优点在于它对访问域(20)是透明的,允许AAA客户端(22)和AAAv(24)在过程期间仅作为直通代理。

    Method, system and apparatus to support hierarchical mobile ip services
    5.
    发明申请
    Method, system and apparatus to support hierarchical mobile ip services 审中-公开
    支持分级移动ip服务的方法,系统和设备

    公开(公告)号:US20060185013A1

    公开(公告)日:2006-08-17

    申请号:US10595009

    申请日:2004-06-15

    IPC分类号: G06F12/14

    摘要: A basic feature of the invention is to rely on an AAA infrastructure to “bootstrap” the HMIPv6 service for a mobile node (130) that “roams” in a visited network or the home network. In accordance with a preferred embodiment of the invention, bootstrapping the HMIPv6 service involves authenticating and authorizing the mobile node (130) for HMIPv6 service based on an AAA infrastructure. In an important scenario, the mobile node is roaming in a visited network, and the AAA infrastructure (110, 120, 122) links the visited network with the home network of the mobile node. The invention also supports the possibility of having the MAP (125) located in the home network or other network than the visited network. The reliance on the AAA infrastructure preferably involves transferring HMIPv6-related information required for authenticating and authorizing the mobile node for HMIPv6 service over the AAA infrastructure.

    摘要翻译: 本发明的一个基本特征是依靠AAA基础设施来为在受访网络或家庭网络中“漫游”的移动节点(130)“引导”HMIPv6服务。 根据本发明的优选实施例,引导HMIPv6服务包括基于AAA基础设施来认证和授权用于HMIPv6服务的移动节点(130)。 在重要的情况下,移动节点在受访网络中漫游,并且AAA基础设施(110,120,122)将受访网络与移动节点的归属网络链接。 本发明还支持使MAP(125)位于家庭网络或其他网络中比被访问网络的可能性。 对AAA基础设施的依赖优选涉及传送HMIPv6相关信息,用于通过AAA基础设施来认证和授权用于HMIPv6服务的移动节点所需的信息。

    IMS COMMUNICATION NODE PROXIES AND METHODS
    6.
    发明申请
    IMS COMMUNICATION NODE PROXIES AND METHODS 审中-公开
    IMS通信节点代码和方法

    公开(公告)号:US20080254791A1

    公开(公告)日:2008-10-16

    申请号:US11733938

    申请日:2007-04-11

    IPC分类号: H04Q7/20

    摘要: Systems and methods for splitting communication nodes to provide inter-domain functionality are described. For example, a home subscriber services (HSS) node can be split into a proxy node in a first domain and a non-proxy node in a second domain. The proxy node may or may not include a subset of the data available on the corresponding non-proxy node. An inter-domain interface, e.g., a GUP interface, can be employed between the proxy node and the non-proxy node and the inter-domain protocol server can be used to facilitate other interfaces, e.g., between a home location register (HLR) and other entities.

    摘要翻译: 描述了用于分割通信节点以提供域间功能的系统和方法。 例如,家庭订户服务(HSS)节点可以被拆分为第一域中的代理节点和第二域中的非代理节点。 代理节点可以包括也可以不包括在相应的非代理节点上可用的数据的子集。 可以在代理节点和非代理节点之间采用域间接口,例如GUP接口,并且可以使用域间协议服务器来促进其他接口,例如,归属位置寄存器(HLR) 和其他实体。

    Network mobility support and access control for movable networks
    7.
    发明授权
    Network mobility support and access control for movable networks 有权
    网络移动支持和移动网络的访问控制

    公开(公告)号:US07990935B2

    公开(公告)日:2011-08-02

    申请号:US10598491

    申请日:2004-11-24

    IPC分类号: H04B7/00

    摘要: The invention relates to access control for a movable network (15) managed by a mobile router (10), wherein said mobile route is interconnected through a bi-directional link (40) with a mobility anchoring agent (20) that anchors the network mobility for the mobile router. According to the invention, access control enforcement points (11, 21) are located at both the mobile router (10) and the mobility anchoring agent (20). Access control is exercised at the mobility agent (20) to filter downlink packets to the mobile router (10) and access control is exercised at the mobile router (10) to filter uplink packets to the mobility anchoring agent (20). In this way, unauthorized packets, both uplink and downlink, do not have to cross the air interface before being filtered away, thereby preventing waste of valuable radio resources. The access control modules are typically provisioned with access control filter information, preferably by means of a hierarchical provisioning structure.

    摘要翻译: 本发明涉及由移动路由器(10)管理的可移动网络(15)的访问控制,其中所述移动路由通过具有锚定网络移动性的移动性锚定代理(20)的双向链路(40)互连。 为移动路由器。 根据本发明,访问控制执行点(11,21)位于移动路由器(10)和移动锚定代理(20)两者处。 移动代理(20)对移动代理(20)进行访问控制,以便向移动路由器(10)过滤下行链路分组,并且在移动路由器(10)处进行访问控制,以过滤上行分组到移动性锚定代理(20)。 以这种方式,上行链路和下行链路的未经授权的分组在被过滤之前不必跨越空中接口,从而防止浪费有价值的无线电资源。 访问控制模块通常被提供有访问控制过滤器信息,优选地通过分层供应结构。

    Method, System And Apparatus To Support Mobile Ip Version 6 Services in Cdma Systems
    8.
    发明申请
    Method, System And Apparatus To Support Mobile Ip Version 6 Services in Cdma Systems 审中-公开
    支持Cdma系统中移动Ip V6服务的方法,系统和设备

    公开(公告)号:US20070274266A1

    公开(公告)日:2007-11-29

    申请号:US10595014

    申请日:2004-06-15

    IPC分类号: H04L29/06

    CPC分类号: H04L63/08 H04W12/06 H04W80/04

    摘要: The invention provides authentication and authorization support for MIPv6 in a CDMA framework by transferring MIPv6-related information in an, preferably extended, authentication protocol in an end-to-end procedure between a mobile node in a visited network and the home network of the mobile node over an AAA infrastructure. Preferably, the end-to-end procedure is executed between the mobile node and an AAA server (34) of the home network In the visited network, after lower-layer setup, point-to-point communication is established between the mobile node and an internetworking access server (22). The access server then communicates with the AAA home server for MIPv6 authentication and authorization of the mobile node. A preferred embodiment uses EAP as basis for the extended authentication protocol. EAP extensions are then used for MIPv6 initiation and re-authentication, while CHAP can be beneficial for MIPv6 hand-in.

    摘要翻译: 本发明通过在访问网络中的移动节点与移动台的归属网络之间的端到端过程中以优选扩展的认证协议传送MIPv6相关信息来为CDMA框架中的MIPv6提供认证和授权支持。 节点超过AAA基础设施。 优选地,终端到终端过程在移动节点和归属网络的AAA服务器(34)之间执行。在被访问网络中,在较低层建立之后,在移动节点与移动节点之间建立点到点通信 互联访问服务器(22)。 然后,接入服务器与AAA家庭服务器进行通信,用于移动节点的MIPv6认证和授权。 优选实施例使用EAP作为扩展认证协议的基础。 然后,EAP扩展用于MIPv6启动和重新认证,而CHAP可以有益于MIPv6手动。

    METHOD, SYSTEM AND APPARATUS TO SUPPORT MOBILE IP VERSION 6 SERVICES
    9.
    发明申请
    METHOD, SYSTEM AND APPARATUS TO SUPPORT MOBILE IP VERSION 6 SERVICES 有权
    支持移动IP版本6服务的方法,系统和设备

    公开(公告)号:US20070124592A1

    公开(公告)日:2007-05-31

    申请号:US10595019

    申请日:2004-06-15

    申请人: Johnson Oyama

    发明人: Johnson Oyama

    IPC分类号: H04L9/00

    摘要: For establishing a MIPv6 security association between the mobile node (10) roaming in a foreign network (20) and a home agent (36) and for simplifying MIPv6-related configuration, MIPv6-related information is transferred in an end-to-end procedure over an AAA infrastructure by means of an, preferably extended, authentication protocol. A preferred embodiment uses EAP as basis for the extended authentication protocol, creating EAP extensions by incorporating the MIPv6-related information as additional data in the EAP protocol stack, for example as EAP attributes in the EAP method layer of the EAP protocol stack or transferred in a generic container attribute on the EAP layer or the EAP method layer. A major advantage of the proposed MIPv6 authentication/authorization mechanism lies in the fact that it is transparent to the visited domain (20), allowing AAA client (22) and AAAv (24) to act as mere pass-through agents during the procedure.

    摘要翻译: 为了在外部网络(20)和归属代理(36)之间漫游的移动节点(10)之间建立MIPv6安全关联,并且为了简化MIPv6相关配置,MIPv6相关信息以端对端的过程 通过优选扩展的认证协议通过AAA基础设施。 优选实施例使用EAP作为扩展认证协议的基础,通过将作为附加数据的MIPv6相关信息合并到EAP协议栈中来创建EAP扩展,例如作为EAP协议栈的EAP方法层中的EAP属性或传送到 EAP层或EAP方法层上的通用容器属性。 所提出的MIPv6认证/授权机制的主要优点在于它对访问域(20)是透明的,允许AAA客户端(22)和AAAv(24)在过程期间仅作为直通代理。