公开(公告)号：US08254249B2

公开(公告)日：2012-08-28

申请号：US12537115

申请日：2009-08-06

申请人： Renhua Wen ,  Brian Kean

发明人： Renhua Wen ,  Brian Kean

IPC分类号： H04L12/28

CPC分类号： H04L49/254 ,  H04L49/30

摘要： A method for managing a plurality of subscriber sessions tied to mobile devices in a router, each subscriber session of the plurality of subscriber sessions assigned to a line card in the router, the line card implementing a data plane entity and a control card implementing a control plane entity, the method comprising: redistributing each subscriber session in the plurality of subscriber sessions assigned to a failed line card in the router to minimize packets lost and maximize subscriber session retention, redistributing including classifying each subscriber session in the plurality of subscriber sessions into a plurality of priority queues, in response to detection of the failed line card, transferring each subscriber session in the plurality of subscriber sessions assigned to the failed line card to one of a plurality of operating line cards in priority queue order.

摘要翻译： 一种用于管理与路由器中的移动设备绑定的多个订户会话的方法，分配给路由器中的线路卡的多个用户会话中的每个订户会话，实现数据平面实体的线路卡和实现控制的控制卡 该方法包括：在分配给路由器中的故障线路卡的多个订户会话中重新分配每个订户会话，以最小化丢包并最大化订户会话保持，重新分配包括将多个订户会话中的每个订户会话分类为 多个优先级队列响应于故障线路卡的检测，以分配给故障线路卡的多个用户会话中的每个用户会话以优先级排队顺序传送到多个操作线路卡之一。

公开(公告)号：US20110032814A1

公开(公告)日：2011-02-10

申请号：US12537115

申请日：2009-08-06

申请人： Renhua Wen ,  Brian Kean

发明人： Renhua Wen ,  Brian Kean

IPC分类号： H04J3/14 ,  H04L12/56

CPC分类号： H04L49/254 ,  H04L49/30

摘要： A method for managing a plurality of subscriber sessions tied to mobile devices in a router, each subscriber session of the plurality of subscriber sessions assigned to a line card in the router, the line card implementing a data plane entity and a control card implementing a control plane entity, the method comprising: redistributing each subscriber session in the plurality of subscriber sessions assigned to a failed line card in the router to minimize packets lost and maximize subscriber session retention, redistributing including classifying each subscriber session in the plurality of subscriber sessions into a plurality of priority queues, in response to detection of the failed line card, transferring each subscriber session in the plurality of subscriber sessions assigned to the failed line card to one of a plurality of operating line cards in priority queue order.

摘要翻译： 一种用于管理与路由器中的移动设备绑定的多个订户会话的方法，分配给路由器中的线路卡的多个订户会话中的每个订户会话，实现数据平面实体的线路卡和实现控制的控制卡 该方法包括：在分配给路由器中的故障线路卡的多个订户会话中重新分配每个订户会话，以最小化丢包并最大化订户会话保持，重新分配包括将多个订户会话中的每个订户会话分类为 多个优先级队列响应于故障线路卡的检测，以分配给故障线路卡的多个用户会话中的每个用户会话以优先级排队顺序传送到多个操作线路卡之一。

公开(公告)号：US08402454B2

公开(公告)日：2013-03-19

申请号：US12888405

申请日：2010-09-22

申请人： Dawei Wang ,  Rajeev Gupta ,  Renhua Wen

发明人： Dawei Wang ,  Rajeev Gupta ,  Renhua Wen

IPC分类号： G06F9/44

CPC分类号： G06F8/65 ,  G06F8/656

摘要： A method within network element, for directing traffic away from cards of first virtual partition, before changing software on cards of first virtual partition, until after cards of first virtual partition have session data, while network element services sessions. Redistribute sessions, serviced by cards of first virtual partition, to cards of second virtual partition. Each of virtual partitions has control card and line card. Direct traffic away from cards of first virtual partition, prior to taking line card of first virtual partition offline. After redistributing sessions, change software on line card of first virtual partition, while cards of second virtual partition service sessions, including redistributed sessions. After changing software, synchronize session data, for sessions serviced by cards of second virtual partition to cards of first virtual partition. Traffic is directed away from cards before changing software on line card, and until after synchronizing session data to cards of first partition.

摘要翻译： 网络元件内的方法，用于在第一虚拟分区的卡上改变软件之前，直到第一虚拟分区的卡具有会话数据，同时在网络元件服务会话之前将流量从第一虚拟分区的卡引导。 将由第一虚拟分区的卡服务的会话重新分配给第二虚拟分区的卡。 每个虚拟分区都有控制卡和线卡。 在第一个虚拟分区的线路卡脱机之前，直接流量远离第一个虚拟分区的卡。 在重新分配会话后，更改第一个虚拟分区的线卡上的软件，同时更改第二个虚拟分区服务会话的卡，包括重新分发的会话。 在更改软件之后，将第二个虚拟分区的卡服务的会话同步到第一个虚拟分区的卡中。 在更换线卡上的软件之前，直到将会话数据同步到第一个分区的卡之后，流量就被指示远离卡。

公开(公告)号：US08166527B2

公开(公告)日：2012-04-24

申请号：US11985801

申请日：2007-11-16

申请人： Renhua Wen ,  Alfred C. Lindem, III ,  Anand K. Oswal

发明人： Renhua Wen ,  Alfred C. Lindem, III ,  Anand K. Oswal

IPC分类号： G06F21/00

CPC分类号： H04W12/06 ,  H04L63/20

摘要： Techniques for security association management on a home and foreign agent are described. In one embodiment, in response to a first mobile network registration request from a mobile node, a remote authentication facility is accessed to retrieve a security association for the mobile node for authenticating and providing a first network connectivity to the mobile node, wherein the security association is associated with a lifespan. The security association is inserted in a local security association database (SADB) to create a security association entry, wherein the security association entry includes the lifespan. A second mobile network registration request from the mobile node after the first connectivity is terminated is received and the security association entry in the local SADB that corresponds to the mobile node is used to provide authentication of the mobile node without having to access the remote authentication facility again if the lifespan associated with the security association entry is valid.

摘要翻译： 描述了家庭和外国代理人的安全关联管理技术。 在一个实施例中，响应于来自移动节点的第一移动网络注册请求，访问远程认证设备以检索用于移动节点的安全关联，用于认证并向移动节点提供第一网络连接，其中安全关联 与寿命相关联。 安全关联被插入到本地安全关联数据库（SADB）中以创建安全关联条目，其中安全关联条目包括寿命。 接收到在第一连接终止之后来自移动节点的第二移动网络注册请求，并且使用与移动节点对应的本地SADB中的安全关联条目来提供移动节点的认证，而不必访问远程认证设备 如果与安全关联条目相关联的寿命有效，则再次。

公开(公告)号：US20120072894A1

公开(公告)日：2012-03-22

申请号：US12888405

申请日：2010-09-22

申请人： Dawei Wang ,  Rajeev Gupta ,  Renhua Wen

发明人： Dawei Wang ,  Rajeev Gupta ,  Renhua Wen

IPC分类号： G06F9/44 ,  G06F13/00

CPC分类号： G06F8/65 ,  G06F8/656

摘要： A method within network element, for directing traffic away from cards of first virtual partition, before changing software on cards of first virtual partition, until after cards of first virtual partition have session data, while network element services sessions. Redistribute sessions, serviced by cards of first virtual partition, to cards of second virtual partition. Each of virtual partitions has control card and line card. Direct traffic away from cards of first virtual partition, prior to taking line card of first virtual partition offline. After redistributing sessions, change software on line card of first virtual partition, while cards of second virtual partition service sessions, including redistributed sessions. After changing software, synchronize session data, for sessions serviced by cards of second virtual partition to cards of first virtual partition. Traffic is directed away from cards before changing software on line card, and until after synchronizing session data to cards of first partition.

摘要翻译： 网络元件内的方法，用于在第一虚拟分区的卡上改变软件之前，直到第一虚拟分区的卡具有会话数据，同时在网络元件服务会话之前将流量从第一虚拟分区的卡引导。 将由第一虚拟分区的卡服务的会话重新分配给第二虚拟分区的卡。 每个虚拟分区都有控制卡和线卡。 在第一个虚拟分区的线路卡脱机之前，直接流量远离第一个虚拟分区的卡。 在重新分配会话后，更改第一个虚拟分区的线卡上的软件，同时更改第二个虚拟分区服务会话的卡，包括重新分发的会话。 在更改软件之后，将第二个虚拟分区的卡服务的会话同步到第一个虚拟分区的卡中。 在更换线卡上的软件之前，直到将会话数据同步到第一个分区的卡之后，流量就被指示远离卡。

公开(公告)号：US09001836B2

公开(公告)日：2015-04-07

申请号：US13473543

申请日：2012-05-16

申请人： Suraj Jaiswal ,  Renhua Wen

发明人： Suraj Jaiswal ,  Renhua Wen

IPC分类号： H04W8/00 ,  H04W88/16 ,  H04W8/08 ,  H04W76/02

CPC分类号： H04W88/16 ,  H04W8/085 ,  H04W76/11

摘要： A network element that acts as a local mobility anchor (LMA) in a communications network efficiently distributes signaling messages using a data plane and a control plane having a plurality of processes executing on a plurality of processing units. When a network connection ID of a received signaling message is not mapped to a host process in a steering table, the signaling message is sent to a process in the control plane. A second process is assigned to be the host process for the network connection, and the steering table is updated to indicate this assignment. Upon receipt of a second signaling message with the network connection ID, it is efficiently sent to the second process because of the updated steering table. A mobility access gateway (MAG) also utilizes a steering table with network connection ID to host process mappings to efficiently distribute signaling messages.

摘要翻译： 充当通信网络中的本地移动锚点（LMA）的网络元件使用数据平面和具有在多个处理单元上执行的多个处理的控制平面有效地分配信令消息。 当接收到的信令消息的网络连接ID未映射到转向表中的主机进程时，该信令消息被发送到控制平面中的进程。 第二个进程被分配为网络连接的主机进程，并且更新指导表以指示该分配。 在接收到具有网络连接ID的第二信令消息时，由于更新的转向表，它被有效地发送到第二进程。 移动性接入网关（MAG）还利用具有网络连接ID的转向表来主持过程映射以有效地分配信令消息。

公开(公告)号：US07269727B1

公开(公告)日：2007-09-11

申请号：US10639053

申请日：2003-08-11

申请人： Arghya T. Mukherjee ,  Hancang Wang ,  Renhua Wen

发明人： Arghya T. Mukherjee ,  Hancang Wang ,  Renhua Wen

IPC分类号： H04L9/32 ,  H04L12/66 ,  H04M1/66 ,  G06F15/173 ,  H04L9/00

CPC分类号： H04L67/306 ,  H04L63/08 ,  H04L63/0892 ,  H04L63/102

摘要： A method for executing authentication in a network environment is provided that includes retrieving a group profile from an authentication, authorization, and accounting (AAA) server in response to receiving a request from a first end user and locally caching the group profile. A service may be provided to the first end user based on information included within the group profile and associated with the first end user. A request may be received from a second end user. It is then determined if the second end user is included within the group profile such that in cases where the second end user is included in the group profile the group profile can be locally cached in order to provide a service to the second end user without having to communicate with the AAA server.

摘要翻译： 提供了一种用于在网络环境中执行认证的方法，包括响应于接收到来自第一最终用户的请求并且本地缓存所述组简档，从认证，授权和计费（AAA）服务器检索组简档。 可以基于包括在组简档内并与第一最终用户相关联的信息向第一终端用户提供服务。 可以从第二最终用户接收请求。 然后确定第二最终用户是否包括在组简档内，使得在第二最终用户被包括在组简档中的情况下，组简档可以被本地高速缓存，以便向第二终端用户提供服务而不具有 与AAA服务器进行通信。

公开(公告)号：US20120294277A1

公开(公告)日：2012-11-22

申请号：US13111141

申请日：2011-05-19

申请人： Suraj Jaiswal ,  Renhua Wen

发明人： Suraj Jaiswal ,  Renhua Wen

IPC分类号： H04W36/00

CPC分类号： H04W36/023 ,  H04W36/14 ,  H04W88/16

摘要： Empty GRE packets are used to provide in-order delivery of data packets for a session to a UE during inter-RAT handover. In particular, an empty GRE packet sent from a source gateway in a source RAN to a target gateway in a target RAN indicates to the target gateway the end of forwarded data packets from the source gateway. The target gateway sends data packets received from the source gateway to the UE until the empty GRE packet is received. Upon receipt of the empty GRE packet, the target gateway begins sending data packets received directly from a home network gateway to the UE.

摘要翻译： 空间GRE分组用于在RAT间切换期间向UE提供用于会话的数据分组的按顺序传送。 特别地，从源​​RAN中的源网关发送到目标RAN中的目的网关的空GRE分组向目标网关指示来自源网关的转发数据分组的结束。 目标网关将从源网关接收的数据包发送给UE，直到接收到空的GRE数据包为止。 在接收到空的GRE分组后，目标网关开始直接从家庭网络网关接收的数据包发送给UE。

公开(公告)号：US20120294276A1

公开(公告)日：2012-11-22

申请号：US13111130

申请日：2011-05-19

申请人： Suraj Jaiswal ,  Renhua Wen

发明人： Suraj Jaiswal ,  Renhua Wen

IPC分类号： H04W36/00

CPC分类号： H04W36/023 ,  H04W36/14 ,  H04W88/16

摘要： An empty GRE packet along with a sequence number provides in-order delivery of data packets for a session to a UE during inter-RAT handover. In particular, an empty GRE packet sent from a source gateway in a source RAN (Radio Access Network) to a target gateway in a target RAN includes a sequence number to indicate to the target gateway the end of forwarded data packets from the source gateway. The target gateway sends data packets received from the source gateway to the UE until the empty GRE packet with the expected sequence number is received. Upon receipt of the empty GRE packet containing the expected sequence number, the target gateway begins sending data packets received directly from a home network gateway to the UE.

摘要翻译： 一个空的GRE分组连同一个序列号在RAT间切换期间提供一个会话到UE的数据分组的按顺序传送。 特别地，从源​​RAN（无线电接入网络）中的源网关向目标RAN中的目标网关发送的空GRE分组包括向目标网关指示来自源网关的转发数据分组的结束的序列号。 目标网关将从源网关接收的数据包发送给UE，直到接收到具有预期序列号的空GRE分组。 当接收到包含预期序列号的空GRE分组时，目标网关开始向家庭网络网关发送直接从家庭网络网关接收的数据分组。

公开(公告)号：US20100042712A1

公开(公告)日：2010-02-18

申请号：US12192566

申请日：2008-08-15

申请人： Alfred C. Lindem, III ,  Anand Oswal ,  Sachin Desai ,  Chandru Sargor ,  Renhua Wen

发明人： Alfred C. Lindem, III ,  Anand Oswal ,  Sachin Desai ,  Chandru Sargor ,  Renhua Wen

IPC分类号： G06F15/16

CPC分类号： G06F15/16 ,  G06F9/50 ,  G06F9/546

摘要： A method and apparatus for a distributed control plane. In one embodiment of the invention, a primary control card distributes control plane process instances among one or more secondary cards, including a secondary control card and/or one or more Advanced Service Engine (ASE) cards. The primary control card associates particular control messages with particular control plane process instances. Upon a line card receiving a control message that is associated with a particular control plane instance, the line card forwards the control message directly to that particular control plane instance.

摘要翻译： 一种分布式控制平面的方法和装置。 在本发明的一个实施例中，主控卡在一个或多个辅助卡中分配控制平面处理实例，包括辅助控制卡和/或一个或多个高级服务引擎（ASE）卡。 主控制卡将特定控制消息与特定的控制平面过程实例相关联。 在线卡接收到与特定控制平面实例相关联的控制消息时，线卡将控制消息直接转发到该特定控制平面实例。