公开(公告)号：US20110039592A1

公开(公告)日：2011-02-17

申请号：US12540982

申请日：2009-08-13

申请人： Wassim Haddad ,  Georgios Tsirtsis ,  Vincent D. Park

发明人： Wassim Haddad ,  Georgios Tsirtsis ,  Vincent D. Park

IPC分类号： H04B7/00

CPC分类号： H04W12/06 ,  H04L9/0866 ,  H04L9/14 ,  H04L9/3236 ,  H04L9/3263 ,  H04L63/0823 ,  H04L63/126 ,  H04L63/1466 ,  H04L2209/26 ,  H04L2209/80 ,  H04L2463/081

摘要： Methods and apparatus for generating, communicating, and/or verifying ownership of expressions are described. Various embodiments are well suited for use in a wireless peer to peer communications systems in which expressions are communicated, e.g., broadcast, in discovery intervals. A first communications device generates an expression from a first public key and an additional input, said first public key corresponding to a private key known to said first communications device. The first device transmits the generated expression on a communications channel used for discovery. A second communications device receives the transmitted expression from the first device. The second device transmits a request signal to the first device associated with the expression; and receives from the first device a signed communication signed using a private key known to said first communications device. The second device uses information from the signed communication to determine if said first communication device owns said expression.

摘要翻译： 描述用于生成，通信和/或验证表达所有权的方法和装置。 各种实施例非常适用于在发现间隔中传送表达（例如广播）的无线对等通信系统中。 第一通信设备从第一公共密钥和附加输入生成表达式，所述第一公共密钥对应于所述第一通信设备已知的专用密钥。 第一个设备在用于发现的通信信道上传送生成的表达式。 第二通信设备从第一设备接收所发送的表达。 第二设备向与表达相关联的第一设备发送请求信号; 并且从所述第一设备接收使用所述第一通信设备已知的私钥签名的签名通信。 第二设备使用来自签名通信的信息来确定所述第一通信设备是否拥有所述表达式。

公开(公告)号：US20100318795A1

公开(公告)日：2010-12-16

申请号：US12482827

申请日：2009-06-11

申请人： Wassim Haddad ,  Michaela Vanderveen ,  Georgios Tsirtsis ,  Vincent D. Park

发明人： Wassim Haddad ,  Michaela Vanderveen ,  Georgios Tsirtsis ,  Vincent D. Park

IPC分类号： G06F15/177 ,  H04L9/32

CPC分类号： H04W12/06 ,  G06F21/31

摘要： Aspects describe enabling two peers that have already paired together under some circumstances to re-identify themselves under different circumstances so that the peers can bypass performing another pairing only to discover that they are already paired. A Bloom filter is constructed from an available pool of locally selected identifiers and is sent to a peer node in a first message. Upon receiving the message with the Bloom filter, peer node checks all its known identifiers. If peer node finds that one of its identifiers is a member of the Bloom filter, peer node sends a reply in order to achieve a mutual identification.

摘要翻译： 方面描述使得在某些情况下已经配对在一起的两个对等体在不同情况下重新识别自身，使得对等体可以绕过执行另一配对以发现它们已经被配对。 Bloom过滤器由可用的本地选择的标识符池构成，并且在第一消息中被发送到对等节点。 在使用Bloom过滤器接收到消息后，对等节点将检查其所有已知的标识符。 如果对等节点发现其标识符之一是Bloom过滤器的成员，则对等节点发送回复，以实现相互识别。

公开(公告)号：US08769285B2

公开(公告)日：2014-07-01

申请号：US12540982

申请日：2009-08-13

申请人： Wassim Haddad ,  Georgios Tsirtsis ,  Vincent D. Park

发明人： Wassim Haddad ,  Georgios Tsirtsis ,  Vincent D. Park

IPC分类号： H04L29/06

CPC分类号： H04W12/06 ,  H04L9/0866 ,  H04L9/14 ,  H04L9/3236 ,  H04L9/3263 ,  H04L63/0823 ,  H04L63/126 ,  H04L63/1466 ,  H04L2209/26 ,  H04L2209/80 ,  H04L2463/081

摘要： Methods and apparatus for generating, communicating, and/or verifying ownership of expressions are described. Various embodiments are well suited for use in a wireless peer to peer communications systems in which expressions are communicated, e.g., broadcast, in discovery intervals. A first communications device generates an expression from a first public key and an additional input, said first public key corresponding to a private key known to said first communications device. The first device transmits the generated expression on a communications channel used for discovery. A second communications device receives the transmitted expression from the first device. The second device transmits a request signal to the first device associated with the expression; and receives from the first device a signed communication signed using a private key known to said first communications device. The second device uses information from the signed communication to determine if said first communication device owns said expression.

摘要翻译： 描述用于生成，通信和/或验证表达所有权的方法和装置。 各种实施例非常适用于在发现间隔中传送表达（例如广播）的无线对等通信系统中。 第一通信设备从第一公共密钥和附加输入生成表达式，所述第一公共密钥对应于所述第一通信设备已知的专用密钥。 第一个设备在用于发现的通信信道上传送生成的表达式。 第二通信设备从第一设备接收所发送的表达。 第二设备向与表达相关联的第一设备发送请求信号; 并且从所述第一设备接收使用所述第一通信设备已知的私钥签名的签名通信。 第二设备使用来自签名通信的信息来确定所述第一通信设备是否拥有所述表达式。

公开(公告)号：US09179305B2

公开(公告)日：2015-11-03

申请号：US12482827

申请日：2009-06-11

申请人： Wassim Haddad ,  Michaela Vanderveen ,  Georgios Tsirtsis ,  Vincent D. Park

发明人： Wassim Haddad ,  Michaela Vanderveen ,  Georgios Tsirtsis ,  Vincent D. Park

IPC分类号： G06F21/00 ,  H04W12/06 ,  G06F21/31

CPC分类号： H04W12/06 ,  G06F21/31

摘要： Aspects describe enabling two peers that have already paired together under some circumstances to re-identify themselves under different circumstances so that the peers can bypass performing another pairing only to discover that they are already paired. A Bloom filter is constructed from an available pool of locally selected identifiers and is sent to a peer node in a first message. Upon receiving the message with the Bloom filter, peer node checks all its known identifiers. If peer node finds that one of its identifiers is a member of the Bloom filter, peer node sends a reply in order to achieve a mutual identification.

摘要翻译： 方面描述使得在某些情况下已经配对在一起的两个对等体在不同情况下重新识别自身，使得对等体可以绕过执行另一配对以发现它们已经被配对。 Bloom过滤器由可用的本地选择的标识符池构成，并且在第一消息中被发送到对等节点。 在使用Bloom过滤器接收到消息后，对等节点将检查其所有已知的标识符。 如果对等节点发现其标识符之一是Bloom过滤器的成员，则对等节点发送回复，以实现相互识别。

公开(公告)号：US08547835B2

公开(公告)日：2013-10-01

申请号：US12909041

申请日：2010-10-21

申请人： Wassim Haddad ,  Samy Touati

发明人： Wassim Haddad ,  Samy Touati

IPC分类号： H04J1/16 ,  H04J3/16 ,  H04L12/28 ,  H04W4/00 ,  H04W40/00

CPC分类号： H04L61/2528 ,  H04L29/12405 ,  H04L69/14 ,  H04L69/16 ,  H04L69/163 ,  H04W80/06 ,  Y02D50/30

摘要： A network element can include a proxy element that is configured to receive a request from a source node to establish a Transmission Control Protocol (TCP) connection from a first network address of the source node through a Packet Data Network Gateway (PDN GW) to a destination node for an IP flow. The proxy element applies an IP flow offloading policy function to determine that the requested TCP connection for the IP flow should bypass the PDN GW. The proxy element responds to the determination by communicating to the destination node a request for TCP connection with a second network address substituted for the first network address of the source node to establish the TCP connection for the IP flow from the source node to the destination node through a broadband network without passing through the PDN GW.

摘要翻译： 网络元件可以包括代理元件，其被配置为从源节点接收来自源节点的第一网络地址的传输控制协议（TCP）连接通过分组数据网络网关（PDN GW）建立到 IP流的目标节点。 代理元件应用IP流卸载策略功能来确定IP流请求的TCP连接应该绕过PDN GW。 代理元件通过向目的地节点传送与连接到源节点的第一网络地址的第二网络地址的TCP连接的请求，以建立从源节点到目的地节点的IP流的TCP连接来响应该确定 通过宽带网络而不经过PDN GW。

公开(公告)号：US08533455B2

公开(公告)日：2013-09-10

申请号：US12129419

申请日：2008-05-29

申请人： Wassim Haddad ,  Karl Norrman ,  Conny Larsson

发明人： Wassim Haddad ,  Karl Norrman ,  Conny Larsson

IPC分类号： H04L9/32

CPC分类号： H04L9/0844 ,  H04L9/3297 ,  H04L63/0823 ,  H04L2209/76 ,  H04L2209/80 ,  H04W80/02 ,  H04W80/04

摘要： Methods and apparatuses for combining internet protocol layer authentication and mobility signaling are disclosed. Various embodiments for providing authentication and mobility signaling when a mobile node moves from a 3GPP access network to a non 3GPP access network and vice versa are described.

摘要翻译： 公开了用于组合互联网协议层认证和移动性信令的方法和装置。 描述了当移动节点从3GPP接入网络移动到非3GPP接入网络时提供认证和移动性信令的各种实施例，反之亦然。

公开(公告)号：US08509185B2

公开(公告)日：2013-08-13

申请号：US12819074

申请日：2010-06-18

申请人： Wassim Haddad

发明人： Wassim Haddad

IPC分类号： H04J3/22

CPC分类号： H04W76/25 ,  H04L29/12358 ,  H04L61/251 ,  H04W8/26 ,  H04W80/045

摘要： A method for maintaining connectivity between a mobile node and a corresponding node when the mobile node connects to a foreign network, where the foreign network and the home network are Internet protocol version 6 (IPv6) networks but the corresponding node is an Internet protocol version 4 (IPv4) node. The method includes receiving at the home agent node an IPv6 care-of address, determining that the IPv6 care-of address belongs to the foreign network and that the foreign NAT64 node has a prefix to to generate virtual IPv6 addresses and sending a prefix binding request message to a home NAT64 node to bind the prefix to the home address of the mobile node for translation between IPv6 and IPv4.

摘要翻译： 一种用于在移动节点连接到外部网络（其中外部网络和家庭网络是因特网协议版本6（IPv6））但是对应的节点是因特网协议版本4的外部网络时保持移动节点和对应节点之间的连接的方法 （IPv4）节点。 该方法包括在归属代理节点处接收IPv6转交地址，确定IPv6转交地址属于外部网络，外部NAT64节点具有生成虚拟IPv6地址的前缀，并发送前缀绑定请求消息 到家庭NAT64节点，以将前缀绑定到移动节点的归属地址以用于IPv6和IPv4之间的转换。

公开(公告)号：US08495377B2

公开(公告)日：2013-07-23

申请号：US13112771

申请日：2011-05-20

申请人： Wassim Haddad ,  Samita Chakrabarti

发明人： Wassim Haddad ,  Samita Chakrabarti

IPC分类号： H04L9/32

CPC分类号： H04L63/065 ,  H04L63/0823

摘要： A method implemented in a network element for controlling access to a set of resources on a per-application basis, the set of resources including subsets of the resources where each subset is accessible to a set of one or more applications through the use of a separate group key, the method comprising the steps of receiving an authentication request from a node communicatively connected to the network element through a first network interface of the network element, the authentication request including a certificate for the node, validating the certificate for the node, determining that the certificate has been authorized for the set of one or more applications through a query of a certificate database, retrieving each group key that corresponds to the set of one or more applications through a query of a group key database, and returning each group key retrieved from the group key database to the node.

摘要翻译： 一种在网络元件中实现的用于在每个应用程序的基础上控制对一组资源的访问的方法，该资源集合包括资源的子集，其中每个子集可通过使用单独的一个或多个应用来访问一个或多个应用的​​集合 组密钥，所述方法包括以下步骤：通过所述网元的第一网络接口从通信地连接到所述网元的节点接收认证请求，所述认证请求包括所述节点的证书，验证所述节点的证书，确定 证书已通过证书数据库的查询授权给一组或多个应用程序集，通过组密钥数据库的查询检索与一组或多个应用程序集相对应的每个组密钥，并返回每个组密钥 从组密钥数据库检索到节点。

公开(公告)号：US08442006B2

公开(公告)日：2013-05-14

申请号：US12743694

申请日：2007-11-23

申请人： Wassim Haddad ,  Karl Norrman

发明人： Wassim Haddad ,  Karl Norrman

IPC分类号： H04W4/00

CPC分类号： H04L63/0823 ,  H04L63/0807 ,  H04W12/06 ,  H04W36/0011 ,  H04W84/12

摘要： A method of performing hand-off of a Mobile Node from a previous Access Point to a new Access Point within a WLAN domain, where the previous and new Access Points are connected respectively to previous and new Access Routers. The method comprises, following a MAC authentication exchange between the Mobile Node and the new Access Point, sending a MAC Reassociation Request from the Mobile Node to the New Access Point, forwarding said Reassociation Request to said new Access Router, and sending the Reassociation Request from said new Access Router to said previous Access Router within an IP hand-off request, and authenticating the Reassociation Request at the previous Access Router and initiating the tunnelling of IP packets received at the previous Access Router and destined for said Mobile Node, towards said new Access Router.

摘要翻译： 执行移动节点从先前接入点切换到WLAN域内的新接入点的方法，其中先前和新的接入点分别连接到先前和新的接入路由器。 该方法包括：在移动节点和新的接入点之间的MAC认证交换之后，从移动节点向新的接入点发送MAC重新关联请求，将所述重新关联请求转发到所述新的接入路由器，并将所述重新关联请求从 在IP切换请求中将所述新的接入路由器表示到所述先前的接入路由器，并且在先前的接入路由器上认证重新发送请求，并且发起在先前的接入路由器接收并发往所述移动节点的IP分组的隧道，朝向所述新的 接入路由器

公开(公告)号：US20130091279A1

公开(公告)日：2013-04-11

申请号：US13271056

申请日：2011-10-11

申请人： Wassim Haddad ,  Joel Halpern

发明人： Wassim Haddad ,  Joel Halpern

IPC分类号： G06F15/173

CPC分类号： H04L41/0816 ,  H04L12/2807 ,  H04L12/2832 ,  H04L12/2834 ,  H04L63/08 ,  H04L2012/5618 ,  H04W12/06 ,  H04W84/12

摘要： A method implemented by a network element of an Internet service provider to provide network access through a visited network associated with a visited network owner to a device of a visiting user connecting to the visited networker. The visited network owner is a customer of the Internet service provider. The network element configures the visited network to provide access to resources of a remote home network to the device of the visiting user. The remote home network is in communication with the visited network over a wide area network. Connecting to a virtual gateway controller of the remote home network to obtain configuration information to establish a connection between the device and the remote home network. Establishing a connection between the device of the visiting user and a second access point. Providing access to the resource of the remote home network through the second access point.

摘要翻译： 由互联网服务提供商的网络元件实现的方法，通过与访问网络所有者相关联的访问网络向访问用户连接的访问​​用户的设备提供网络访问。 受访网络所有者是互联网服务提供商的客户。 网络元件配置访问网络以向远程归属网络的资源提供对访问用户的设备的访问。 远程家庭网络通过广域网与被访问的网络进行通信。 连接到远程家庭网络的虚拟网关控制器，以获取配置信息，以在设备和远程家庭网络之间建立连接。 在访问用户的设备和第二接入点之间建立连接。 通过第二接入点提供对远程家庭网络的资源的访问。