公开(公告)号：US20050055576A1

公开(公告)日：2005-03-10

申请号：US10689851

申请日：2003-10-22

申请人： Risto Mononen ,  Sandro Grech

发明人： Risto Mononen ,  Sandro Grech

IPC分类号： H04L20060101 ,  H04L9/00 ,  H04L12/56 ,  H04L29/06

CPC分类号： H04L63/0407 ,  H04L63/0442 ,  H04L63/061 ,  H04L63/0823 ,  H04L63/20 ,  H04W8/082 ,  H04W8/16 ,  H04W8/26 ,  H04W80/04

摘要： A mechanism for providing a mobile node with reliable information for location privacy decisions in connection with an address update process that gives the correspondent node a chance to deduce the location of the mobile node is provided. According to one embodiment of the invention, an indication is given when an address update process needs to be performed for optimizing routing between a mobile node and a correspondent node. In response to the indicating step, the correspondent node may be authenticated, the authentication yielding identity information about the correspondent node. Based on the identity information, a route optimization decision may be made based on whether or not the address update process is to be performed, and the address update process may be carried out depending on the decision.

摘要翻译： 提供了一种机制，用于向移动节点提供与给予对端节点有机会推断移动节点的位置的地址更新过程相关的位置隐私决定的可靠信息。 根据本发明的一个实施例，当需要执行地址更新处理以优化移动节点和通信节点之间的路由时给出指示。 响应于指示步骤，通信节点可以被认证，认证产生关于对端节点的身份信息。 基于身份信息，可以基于是否要执行地址更新处理来进行路由优化决定，并且可以根据决定来执行地址更新处理。

公开(公告)号：US07426746B2

公开(公告)日：2008-09-16

申请号：US10689851

申请日：2003-10-22

申请人： Risto Mononen ,  Sandro Grech

发明人： Risto Mononen ,  Sandro Grech

IPC分类号： G06F9/00

CPC分类号： H04L63/0407 ,  H04L63/0442 ,  H04L63/061 ,  H04L63/0823 ,  H04L63/20 ,  H04W8/082 ,  H04W8/16 ,  H04W8/26 ,  H04W80/04

摘要： A mechanism for providing a mobile node with reliable information for location privacy decisions in connection with an address update process that gives the correspondent node a chance to deduce the location of the mobile node is provided. According to one embodiment of the invention, an indication is given when an address update process needs to be performed for optimizing routing between a mobile node and a correspondent node. In response to the indicating step, the correspondent node may be authenticated, the authentication yielding identity information about the correspondent node. Based on the identity information, a route optimization decision may be made based on whether or not the address update process is to be performed, and the address update process may be carried out depending on the decision.

摘要翻译： 提供了一种机制，用于向移动节点提供与给予对端节点有机会推断移动节点的位置的地址更新过程相关的位置隐私决定的可靠信息。 根据本发明的一个实施例，当需要执行地址更新处理以优化移动节点和通信节点之间的路由时给出指示。 响应于指示步骤，通信节点可以被认证，认证产生关于对端节点的身份信息。 基于身份信息，可以基于是否要执行地址更新处理来进行路由优化决定，并且可以根据决定来执行地址更新处理。

公开(公告)号：US20110302643A1

公开(公告)日：2011-12-08

申请号：US13202116

申请日：2009-03-31

申请人： Roman Pichna ,  Sandro Grech

发明人： Roman Pichna ,  Sandro Grech

IPC分类号： H04W12/06 ,  G06F15/16 ,  G06F21/20 ,  H04W12/08

CPC分类号： H04W12/06 ,  H04L63/0892 ,  H04W12/08

摘要： There is proposed a network access authentication and authorization mechanism in which an authentication session in an authentication, authorization and accounting procedure for a user equipment for providing an initial network access is executed. A first identification element related to the user equipment is obtained. Then, a user credential validation procedure is performed wherein a second identification element related to the user equipment or related to a user of the user equipment is obtained. The obtained first and second identification elements are processed for determining whether a match between the first and second identification elements exists. In addition, the authentication session executed for the user equipment is identified on the basis of the result of the processing of the first and second identification elements. Then, a change of an authorization of the user equipment is executed for providing a modified network access.

摘要翻译： 提出了一种网络访问认证和授权机制，其中执行用于提供初始网络访问的用户设备的认证，授权和计费过程中的认证会话。 获得与用户设备相关的第一识别元件。 然后，执行用户凭证验证过程，其中获得与用户设备相关或与用户设备的用户相关的第二识别元素。 所获得的第一和第二识别元件被处理以确定是否存在第一和第二识别元件之间的匹配。 此外，基于第一和第二识别元素的处理结果来识别为用户设备执行的认证会话。 然后，执行用户设备的授权的更改以提供修改的网络访问。

公开(公告)号：US07668145B2

公开(公告)日：2010-02-23

申请号：US10859556

申请日：2004-06-03

申请人： Franck Le ,  Stefano Faccin ,  Rene Purnadi ,  Sandro Grech

发明人： Franck Le ,  Stefano Faccin ,  Rene Purnadi ,  Sandro Grech

IPC分类号： H04W4/00 ,  G06F11/00

CPC分类号： H04L63/0236 ,  H04L29/06027 ,  H04L63/0254 ,  H04L63/029 ,  H04L65/1006 ,  H04L65/1016 ,  H04L65/80 ,  H04W80/04 ,  H04W80/10

摘要： The invention proposes a method for controlling a connection between a first network node and a second network node, wherein the connection is controlled by a packet filtering function filtering packets such that a packet is discarded in case a source address and/or a destination address do not comply with a filtering rule, wherein the packet filtering function is configured at a connection set up, and at least one of the first or second network node is adapted to change its address, the method comprising the steps of informing, the packet filtering function about the new address of the network node having changed its address, and updating the packet filter of the packet filtering function by using the new address of the network node having changed its address. The invention also proposes a corresponding network system comprising at least a network node and a packet filtering network element. Furthermore, the invention proposes a corresponding packet filtering network device.

摘要翻译： 本发明提出了一种用于控制第一网络节点和第二网络节点之间的连接的方法，其中所述连接由过滤分组的分组过滤功能控制，使得在源地址和/或目的地地址做的情况下丢弃分组 不符合过滤规则，其中，所述包过滤功能被配置在建立的连接处，并且所述第一或第二网络节点中的至少一个适于改变其地址，所述方法包括以下步骤：通知所述包过滤功能 关于网络节点已经改变其地址的新地址，以及通过使用已经改变其地址的网络节点的新地址来更新分组过滤功能的分组过滤器。 本发明还提出了至少包括网络节点和分组过滤网络元件的对应网络系统。 此外，本发明提出了一种相应的分组过滤网络设备。

公开(公告)号：US20060203787A1

公开(公告)日：2006-09-14

申请号：US11209836

申请日：2005-08-24

申请人： Sandro Grech ,  Kalle Ahmavaara

发明人： Sandro Grech ,  Kalle Ahmavaara

IPC分类号： H04Q7/24

CPC分类号： H04L61/2007 ,  H04L29/12216 ,  H04W4/18 ,  H04W80/04 ,  H04W92/02

摘要： A method for configuring a device for communication is disclosed. In the method the device accesses a communication network where after it may be detected at a network element that the device needs to be provided with at least one configuration parameter. Information regarding the at least one configuration parameter is then determined and sent to the device. The device can then be configured in accordance with information received from the network element.

摘要翻译： 公开了一种用于配置通信设备的方法。 在该方法中，设备访问通信网络，其中可以在网络元件处检测到该通信网络，该设备需要被提供至少一个配置参数。 然后确定关于至少一个配置参数的信息并将其发送到设备。 然后可以根据从网络元件接收的信息来配置该设备。

公开(公告)号：US20120087338A1

公开(公告)日：2012-04-12

申请号：US12936115

申请日：2009-04-03

申请人： Achim Von Brandt ,  Aik Chindapol ,  Sandro Grech ,  Roman Pichna ,  Yi Zhang ,  Shun Liang Zhang ,  Wei Hua Zhou

发明人： Achim Von Brandt ,  Aik Chindapol ,  Sandro Grech ,  Roman Pichna ,  Yi Zhang ,  Shun Liang Zhang ,  Wei Hua Zhou

IPC分类号： H04W36/08

CPC分类号： H04W36/0011 ,  H04W36/0055

摘要： According to one example embodiment, a method may include determining whether each of a plurality of target base stations is capable of providing a fast ranging opportunity to a mobile station served by the serving base station, and, for each of the plurality of target base stations which is capable of providing the fast ranging opportunity to the mobile station, determining an action time after which the target base station can send an uplink map to the mobile station, the uplink map indicating when the mobile station should send a fast ranging request. The method may also include sending a handover message to the mobile station, the handover message indicating whether each of the plurality of target base stations is capable of providing the fast ranging opportunity to the mobile station and, for each of the plurality of target base stations which is capable of providing the fast ranging opportunity to the mobile station, indicating the action time after which the target base station can send the uplink map to the mobile station.

摘要翻译： 根据一个示例性实施例，一种方法可以包括确定多个目标基站中的每一个是否能够向由服务基站服务的移动站提供快速测距机会，并且对于多个目标基站中的每一个 其能够向移动台提供快速测距机会，确定目标基站能够向移动台发送上行链路映射的动作时间，上行链路映射表示移动台何时应该发送快速测距请求。 该方法还可以包括向移动台发送切换消息，切换消息指示多个目标基站中的每一个是否能够向移动台提供快速测距机会，并且对于多个目标基站中的每一个 其能够向移动台提供快速测距机会，指示目标基站能够向移动台发送上行链路映射的动作时间。

公开(公告)号：US20090252116A1

公开(公告)日：2009-10-08

申请号：US12098156

申请日：2008-04-04

申请人： Achim von Brandt ,  Sandro Grech ,  Roman Pichna ,  Aik Chindapol

发明人： Achim von Brandt ,  Sandro Grech ,  Roman Pichna ,  Aik Chindapol

IPC分类号： H04Q7/00

CPC分类号： H04W36/0055

摘要： A base station and a method for handover of a mobile station from a serving base station to a target base station of a mobile telecommunication network. Invitations may be sent from a base station to the mobile station, and the invitations may be invitations to send a request for a fast handover procedure from the mobile station to a base station.

摘要翻译： 一种用于将移动台从服务基站切换到移动电信网络的目标基站的基站和方法。 邀请可以从基站发送到移动台，并且邀请可以邀请来自移动台向基站发送快速切换过程的请求。

公开(公告)号：US07733824B2

公开(公告)日：2010-06-08

申请号：US11159128

申请日：2005-06-23

申请人： Vesa Hellgren ,  Sandro Grech ,  Roman Pichna

发明人： Vesa Hellgren ,  Sandro Grech ,  Roman Pichna

IPC分类号： H04W4/00

CPC分类号： H04W12/06 ,  H04L63/08 ,  H04W12/12 ,  H04W36/14 ,  H04W36/18 ,  H04W48/17 ,  H04W80/04

摘要： The invention allows providing a fixed access point for a terminal device. One of multiple access points is assigned to serve as a fixed access point for a terminal device based on a received identifier of the terminal device. A notification about the assignment of the fixed access point is transmitted to at least one of the terminal device and a gateway node serving the terminal device. As a result, Mobile IP based handover between GPRS and WLAN will be seamless. Furthermore, the invention allows using a dedicated gateway for infected terminals to provide quarantined access to network services.

摘要翻译： 本发明允许为终端设备提供固定接入点。 根据所接收的终端设备的标识符，将多个接入点中的一个分配给终端设备的固定接入点。 关于固定接入点的分配的通知被发送到终端设备和服务终端设备的网关节点中的至少一个。 因此，GPRS和WLAN之间的基于移动IP的切换将是无缝的。 此外，本发明允许使用用于感染终端的专用网关来提供对网络服务的隔离访问。

公开(公告)号：US20090067381A1

公开(公告)日：2009-03-12

申请号：US12269454

申请日：2008-11-12

申请人： Sandro Grech

发明人： Sandro Grech

IPC分类号： H04B7/14

CPC分类号： H04L29/12311 ,  H04L61/2084 ,  H04L69/04 ,  H04L69/10 ,  H04L69/16 ,  H04L69/161 ,  H04L69/22 ,  H04W8/082 ,  H04W28/06 ,  H04W80/04

摘要： The present invention concerns a method and system for optimizing transport efficiency between a Mobile Node and a Correspondent Node in a Mobile IP network. A short Mobile Node Identifier is assigned to the Mobile Node. A Mobile Node Identifier Destination Option header comprising the assigned Mobile Node Identifier is used instead of the prior art Home Address Destination Option header in subsequent packets between the Mobile Node and the Correspondent Node.

摘要翻译： 本发明涉及用于优化移动节点和移动IP网络中的通信节点之间的传输效率的方法和系统。 移动节点标识符被分配给移动节点。 使用包括分配的移动节点标识符的移动节点标识符目的地选项报头来代替移动节点和对应节点之间的后续分组中的现有技术的归属地址目的地选项报头。

公开(公告)号：US20060039407A1

公开(公告)日：2006-02-23

申请号：US11003479

申请日：2004-12-06

申请人： Sandro Grech ,  Roman Pichna

发明人： Sandro Grech ,  Roman Pichna

IPC分类号： H04J3/16

CPC分类号： H04W36/14 ,  H04L67/14 ,  H04W36/0011 ,  H04W76/20 ,  H04W80/00 ,  H04W80/04 ,  H04W80/10

摘要： Session continuity is supported by placing suitable functionality in a communications device and a communications system. In a communications device, a first interface is provided for transmitting data via an access network. A virtual interface corresponding to the first interface also is provided. Communications via the access network take place using the first interface and sending data between the first interface and the virtual interface. In a communications network, it is detected that a communications device is establishing communications via an access network. A network address used earlier by the communications device is determined, and the network address is retained when the communications device communicates via the access network.

摘要翻译： 通过在通信设备和通信系统中放置合适的功能来支持会话连续性。 在通信设备中，提供用于经由接入网络发送数据的第一接口。 还提供了与第一接口对应的虚拟接口。 通过接入网络进行通信，使用第一个接口进行通信，并在第一个接口和虚拟接口之间发送数据。 在通信网络中，检测到通信设备正在经由接入网络建立通信。 确定由通信设备较早使用的网络地址，并且当通信设备经由接入网络进行通信时，网络地址被保留。