Abstract: A system and method for user certificate initiation, distribution, and provisioning in converged WLAN-WWAN interworking networks. A computing device operable in a wireless local area network sends a public key to a mobile device operable in a wireless cellular wide area network. The mobile device performs a bootstrapping procedure with a cellular operator in the wireless cellular wide area network to obtain a user certificate based on the public key. The mobile device sends the user certificate to the computing device for installation on the computing device. The user certificate may be used for digital signature, verification, and encryption purposes. The user certificate is also used in both the wireless local area network and the wireless wide area network for authenticating a subscriber when accessing services from both networks.

Abstract: A method of securing a local link may involve exchange of initiation messages and negotiation of ciphersuites across a local link. The method then transmits a server authentication and receives a client authentication. Upon validation of the server and client authentication, information from the cipher is used to encrypt communications across the local link. In addition, there is a method of providing intra-platform security. The method performs authentication between two endpoints on a platform and then generates keys between the two endpoints to form a trusted tunnel. The keys are used to encrypt communications between the endpoints.

Abstract: An apparatus comprising at least one credential token interfaced with the apparatus and capable of enabling access by the apparatus to at least one network; and a peripheral link from the apparatus to at least one additional apparatus, wherein the at least one credential token enables access by the at least one additional apparatus to at least one additional network.

Abstract: Authentication from a first independently authenticable communication link may be “transferred” to a second unauthenticable communication link and thereby used for authentication in the second communication link.

Abstract: A method is described for maintaining a seamless communication session while switching devices. A user requests a communication session with a colleague device. The request for a communication session triggers a communication server to establish a first connection with the first device, and a second connection with the colleague device. When the user requests a switch from the first communication device to a second communication device, the request triggers the communication server to verify that the user of the second communication device is the same as the user of the first communication device. If the users are the same, then the communication server establishes a third connection with the second communication device, and then terminates the first connection with the first communication device. The second connection between the communication server and the colleague device is maintained such that entire process is transparent to the colleague.

Abstract: A method is described for adaptive load-balancing and graceful termination of access points in a network having a plurality of access points. The method includes determining a need to reduce a load of a first access point, and increasing a beacon interval corresponding to the first access point in order to detract clients. Correspondingly, beacon intervals for other access points may be reduced in order to attract more clients.

Abstract: A computerized system includes a user interface component operable to specify user preferences; and a policy manager component capable of receiving the user preferences, selecting a network interface from a plurality of network interfaces by matching the user preferences to a set of characteristics for a network interface, and modifying a routing table entry according to the selected network interface.