公开(公告)号：US07668145B2

公开(公告)日：2010-02-23

申请号：US10859556

申请日：2004-06-03

申请人： Franck Le ,  Stefano Faccin ,  Rene Purnadi ,  Sandro Grech

发明人： Franck Le ,  Stefano Faccin ,  Rene Purnadi ,  Sandro Grech

IPC分类号： H04W4/00 ,  G06F11/00

CPC分类号： H04L63/0236 ,  H04L29/06027 ,  H04L63/0254 ,  H04L63/029 ,  H04L65/1006 ,  H04L65/1016 ,  H04L65/80 ,  H04W80/04 ,  H04W80/10

摘要： The invention proposes a method for controlling a connection between a first network node and a second network node, wherein the connection is controlled by a packet filtering function filtering packets such that a packet is discarded in case a source address and/or a destination address do not comply with a filtering rule, wherein the packet filtering function is configured at a connection set up, and at least one of the first or second network node is adapted to change its address, the method comprising the steps of informing, the packet filtering function about the new address of the network node having changed its address, and updating the packet filter of the packet filtering function by using the new address of the network node having changed its address. The invention also proposes a corresponding network system comprising at least a network node and a packet filtering network element. Furthermore, the invention proposes a corresponding packet filtering network device.

摘要翻译： 本发明提出了一种用于控制第一网络节点和第二网络节点之间的连接的方法，其中所述连接由过滤分组的分组过滤功能控制，使得在源地址和/或目的地地址做的情况下丢弃分组 不符合过滤规则，其中，所述包过滤功能被配置在建立的连接处，并且所述第一或第二网络节点中的至少一个适于改变其地址，所述方法包括以下步骤：通知所述包过滤功能 关于网络节点已经改变其地址的新地址，以及通过使用已经改变其地址的网络节点的新地址来更新分组过滤功能的分组过滤器。 本发明还提出了至少包括网络节点和分组过滤网络元件的对应网络系统。 此外，本发明提出了一种相应的分组过滤网络设备。

公开(公告)号：US20070253417A1

公开(公告)日：2007-11-01

申请号：US11412515

申请日：2006-04-27

申请人： Rene Purnadi ,  Franck Le

发明人： Rene Purnadi ,  Franck Le

IPC分类号： H04L12/56

CPC分类号： H04L65/1016 ,  H04L65/1069

摘要： A controller for a communications system comprises an input and an output for communicating with nodes connected to the communications system. The controller is provided with a processor for determining presence of an address translator entity between a first node and a second node. The controller is further configured for generating an indication of the presence of the translator entity for sending to another node.

摘要翻译： 用于通信系统的控制器包括用于与连接到通信系统的节点进行通信的输入和输出。 控制器设置有用于确定第一节点和第二节点之间的地址转换器实体的存在的处理器。 控制器还被配置为生成用于发送到另一个节点的转换器实体的存在的指示。

公开(公告)号：US07697471B2

公开(公告)日：2010-04-13

申请号：US11412515

申请日：2006-04-27

申请人： Rene Purnadi ,  Franck Le

发明人： Rene Purnadi ,  Franck Le

IPC分类号： H04W4/00 ,  H04L12/28

CPC分类号： H04L65/1016 ,  H04L65/1069

摘要： A controller for a communications system comprises an input and an output for communicating with nodes connected to the communications system. The controller is provided with a processor for determining presence of an address translator entity between a first node and a second node. The controller is further configured for generating an indication of the presence of the translator entity for sending to another node.

摘要翻译： 用于通信系统的控制器包括用于与连接到通信系统的节点进行通信的输入和输出。 控制器设置有用于确定第一节点和第二节点之间的地址转换器实体的存在的处理器。 控制器还被配置为生成用于发送到另一个节点的转换器实体的存在的指示。

公开(公告)号：US20050165917A1

公开(公告)日：2005-07-28

申请号：US10859556

申请日：2004-06-03

申请人： Franck Le ,  Stefano Faccin ,  Rene Purnadi ,  Sandro Grech

发明人： Franck Le ,  Stefano Faccin ,  Rene Purnadi ,  Sandro Grech

IPC分类号： H04L29/06 ,  G06F15/177

CPC分类号： H04L63/0236 ,  H04L29/06027 ,  H04L63/0254 ,  H04L63/029 ,  H04L65/1006 ,  H04L65/1016 ,  H04L65/80 ,  H04W80/04 ,  H04W80/10

摘要： The invention proposes a method for controlling a connection between a first network node and a second network node, wherein the connection is controlled by a packet filtering function filtering packets such that a packet is discarded in case a source address and/or a destination address do not comply with a filtering rule, wherein the packet filtering function is configured at a connection set up, and at least one of the first or second network node is adapted to change its address, the method comprising the steps of informing, the packet filtering function about the new address of the network node having changed its address, and updating the packet filter of the packet filtering function by using the new address of the network node having changed its address. The invention also proposes a corresponding network system comprising at least a network node and a packet filtering network element. Furthermore, the invention proposes a corresponding packet filtering network device.

摘要翻译： 本发明提出了一种用于控制第一网络节点和第二网络节点之间的连接的方法，其中所述连接由过滤分组的分组过滤功能控制，使得在源地址和/或目的地地址做的情况下丢弃分组 不符合过滤规则，其中，所述包过滤功能被配置在建立的连接处，并且所述第一或第二网络节点中的至少一个适于改变其地址，所述方法包括以下步骤：通知所述包过滤功能 关于网络节点已经改变其地址的新地址，以及通过使用已经改变其地址的网络节点的新地址来更新分组过滤功能的分组过滤器。 本发明还提出了至少包括网络节点和分组过滤网络元件的对应网络系统。 此外，本发明提出了一种相应的分组过滤网络设备。

公开(公告)号：US09312990B2

公开(公告)日：2016-04-12

申请号：US13614203

申请日：2012-09-13

申请人： Dakshi Agrawal ,  Bruce O. Anthony, Jr. ,  Franck Le ,  Robert B. Nicholson ,  Vasileios Pappas ,  Dinesh C. Verma

发明人： Dakshi Agrawal ,  Bruce O. Anthony, Jr. ,  Franck Le ,  Robert B. Nicholson ,  Vasileios Pappas ,  Dinesh C. Verma

IPC分类号： H04L1/00 ,  H04L1/18

CPC分类号： H04L1/1877 ,  H04L1/0084

摘要： Methods and apparatus are provided for recovering from packet loss in an end-to-end network connection having at least one wireless segment. A packet on a wireless segment of an end-to-end network connection is processed by determining whether the packet comprises one or more of a lost packet and a malformed packet; and generating a modified packet for an application associated with the packet to replace one or more of the lost packet and the malformed packet if the application is substantially tolerant to one or more of lost and malformed data. The modified packet comprises, for example, a non-original packet and/or a corrected packet. Link layer information or information from a deep packet inspection can be used to determine whether the packet comprises a lost packet or a malformed packet.

摘要翻译： 提供了用于在具有至少一个无线段的端到端网络连接中从分组丢失中恢复的方法和装置。 通过确定分组是否包括丢失分组和畸形分组中的一个或多个来处理端到端网络连接的无线段上的分组; 以及如果所述应用基本上容忍丢失和畸形数据中的一个或多个，则为与所述分组相关联的应用生成修改的分组以替换所述丢失分组和所述畸形分组中的一个或多个。 修改的分组包括例如非原始分组和/或校正分组。 可以使用来自深度分组检查的链路层信息或信息来确定分组是否包括丢失分组或畸形分组。

公开(公告)号：US20080212478A1

公开(公告)日：2008-09-04

申请号：US12149789

申请日：2008-05-08

申请人： Vijay Devarapalli ,  Meghana Sahasrabudhe ,  Basavaraj Patil ,  Kengatharan Sivalingam ,  Franck Le

发明人： Vijay Devarapalli ,  Meghana Sahasrabudhe ,  Basavaraj Patil ,  Kengatharan Sivalingam ,  Franck Le

IPC分类号： H04L12/56

CPC分类号： H04L29/12009 ,  H04L61/00 ,  H04W8/02 ,  H04W8/26 ,  H04W24/02 ,  H04W28/06 ,  H04W40/00 ,  H04W80/00 ,  H04W80/04 ,  H04W80/10 ,  H04W88/16

摘要： A method for updating filters, at a Packet Data Serving Node, with a care-of-address associated with at least one of a mobile station or a correspondent node. The method includes the steps of implementing a soft filtering rule at a Packet Data Serving Node and receiving, by the Packet Data Serving Node, a care-of-address that is associated with at least one the mobile station and a correspondent node. The method also includes updating, by the Packet Data Serving Node, filters with the care-of-address to correctly identify flows belonging to a particular session during Mobile IP use. The method further includes filtering, by the Packet Data Serving Node, packets including a care-of-address that is associated with one of the mobile station and the correspondent node.

摘要翻译： 一种用于在分组数据服务节点处更新与至少一个移动台或通信节点相关联的转交地址的过滤器的方法。 该方法包括以下步骤：在分组数据服务节点处实现软过滤规则，并由分组数据服务节点接收与至少一个移动台和通信节点相关联的转交地址。 该方法还包括由分组数据服务节点更新转交地址的过滤器，以在移动IP使用期间正确地识别属于特定会话的流。 该方法还包括由分组数据服务节点过滤包括与移动台和通信节点之一相关联的转交地址的分组。

公开(公告)号：US07349377B2

公开(公告)日：2008-03-25

申请号：US09986602

申请日：2001-11-09

申请人： Franck Le ,  Stefano M. Faccin

发明人： Franck Le ,  Stefano M. Faccin

IPC分类号： H04Q7/24

CPC分类号： H04W12/02 ,  H04L29/12009 ,  H04L61/00 ,  H04L63/0407 ,  H04L63/0428 ,  H04L63/107 ,  H04W8/065 ,  H04W8/082 ,  H04W8/16 ,  H04W80/00 ,  H04W80/04

摘要： The present invention concerns a method for providing location privacy for a terminal node (MN) in communication with a communication partner node (CN) in a communication network system comprising at least a first communication network (HN, VN), wherein a respective node (MN) communicating via said communication network system is identified by its permanent network address (MN_PA) and addressable by a temporary network address (MN_CoA), at least one server entity (LPS), a plurality of agent entities (LPA1, . . . , LPAn), wherein each of said at least one server entities (LPS) maintains a record of said plurality of agent entities (LPA1, . . . , LPAn) and their respective location within the network system, said method comprising the steps of: requesting (S41), by said terminal node (MN), said at least one server entity (LPS) for location privacy, selecting (S42), at said at least one server entity (LPS), a specific one of said plurality of agent entities (LPA1, . . . , LPAn), based on data maintained in said record of said server entity and said temporary network address of said requesting terminal node, and communicating (S46) messages between said terminal node (MN) and said communication partner node (CN) via said selected one (LPA) of said agent entities. The present invention also, concerns corresponding network systems, server entities, agent entities and terminal nodes.

摘要翻译： 本发明涉及一种用于为包括至少第一通信网络（HN，VN）的通信网络系统中的与通信伙伴节点（CN）通信的终端节点（MN）提供位置隐私的方法，其中相应节点 MN）通过其永久网络地址（MN_PA）识别并且可由临时网络地址（MN_CoA），至少一个服务器实体（LPS），多个代理实体（LPA 1，...， ，LPAn），其中所述至少一个服务器实体（LPS）中的每一个维护所述多个代理实体（LPA 1，...，LPA n）的记录及其在网络系统内的相应位置，所述方法包括以下步骤： ：由所述终端节点（MN）向所述至少一个服务器实体（LPS）请求（S 41）用于位置隐私，在所述至少一个服务器实体（LPS）处选择（S42），所述至少一个服务器实体 多个代理实体（LPA 1，...，LPAn），b 根据在所述服务器实体的所述记录中保存的数据和所述请求终端节点的所述临时网络地址，并且经由所选择的一个（LPA）在所述终端节点（MN）和所述通信伙伴节点（CN）之间通信（S 46）消息 ）所述代理实体。 本发明还涉及相应的网络系统，服务器实体，代理实体和终端节点。

公开(公告)号：US07343490B2

公开(公告)日：2008-03-11

申请号：US10000173

申请日：2001-11-30

申请人： Khiem Le ,  Franck Le

发明人： Khiem Le ,  Franck Le

IPC分类号： H04L9/00 ,  H04K1/00 ,  G06F7/04

CPC分类号： H04W12/06 ,  H04L63/0884 ,  H04L65/1006 ,  H04L65/105 ,  H04L65/1073

摘要： Apparatus, and an associated method, facilitates authentication of a mobile station operable in a 3G cellular communication system having a core network and a plurality of access networks. A standard signaling protocol is used to communicate between an access network and the core network. When a request for authentication of a mobile station is generated, a signaling protocol message is generated at a proxy of the access network within which the mobile station is to be authenticated. Detection of the authentication request is made at the proxy, and a message is generated at the proxy which includes indicia associated with the authentication center associated with the access network. The signaling protocol message is sent to the core network, and the information indicia contained therein is used to facilitate authentication procedures to authenticate the mobile station.

摘要翻译： 装置和相关联的方法有助于在具有核心网络和多个接入网络的3G蜂窝通信系统中可操作的移动台的认证。 标准信令协议用于在接入网和核心网之间进行通信。 当生成对移动台的认证请求时，在要认证移动台的接入网络的代理处生成信令协议消息。 在代理处进行认证请求的检测，并且在代理处生成包括与与接入网络相关联的认证中心相关联的标记的消息。 信令协议消息被发送到核心网络，并且其中包含的信息标记用于促进认证过程来认证移动台。

公开(公告)号：US20060185008A1

公开(公告)日：2006-08-17

申请号：US11129273

申请日：2005-05-12

申请人： Franck Le ,  Yogesh Swami ,  Gabor Bajko

发明人： Franck Le ,  Yogesh Swami ,  Gabor Bajko

IPC分类号： G06F15/16

CPC分类号： H04L41/28 ,  H04L63/02 ,  H04L63/1441 ,  H04L63/20

摘要： Disclosed are examples of a method, system, devices and nodes to conduct communications between a device coupled to a communication network and a network security enforcement node, such as a firewall. An illustrative method includes, with a device coupled to a network security enforcement node through a communication network, requesting from the network security enforcement node information comprised of at least one of supported and enabled features and, in response to receiving the request, sending information descriptive of at least one of network security enforcement node supported and enabled features. The method may further include requesting by the device that at least one network security enforcement node feature be one of enabled or disabled.

摘要翻译： 公开了在耦合到通信网络的设备和诸如防火墙的网络安全执行节点之间进行通信的方法，系统，设备和节点的示例。 一种说明性方法包括：通过通信网络耦合到网络安全执行节点的设备，从所述网络请求安全执行节点包括被支持和启用的特征中的至少一个的信息，并且响应于接收到所述请求，发送信息描述 至少一个网络安全执行节点支持和启用的功能。 该方法还可以包括：由设备请求至少一个网络安全执行节点特征是启用或禁用之一。

公开(公告)号：US06999436B2

公开(公告)日：2006-02-14

申请号：US09834877

申请日：2001-04-16

申请人： Haihong Zheng ,  Franck Le ,  Marc Greis

发明人： Haihong Zheng ,  Franck Le ,  Marc Greis

IPC分类号： H04Q7/00

CPC分类号： H04L45/00 ,  H04W8/26 ,  H04W28/26 ,  H04W36/0016 ,  H04W40/02 ,  H04W40/36 ,  H04W48/08

摘要： Method and apparatus for efficient routing of mobile node packets. Nodes in a network are configured to classify a received flow from a mobile node to a second node based upon a home address option in a packet in the flow if the address is present. The address is a home address of the mobile node. The classification has associated reserved resources at each node for the received flow. Therefore, the Quality of Service is maintained for the flow between the mobile node and the second node if the mobile node moves to a new location. Resources reserved in nodes in the old path are torn down and released, while reserved resources in nodes in the old and the new path need not be reserved again.