Abstract: A method for obtaining authentication credentials for attaching a wireless device to a foreign wireless domain in a 3rd Generation Partnership Project (3GPP) communication system, which includes: receiving an attach request message from the wireless device; and responsive to the attach request message, authenticating the wireless device and retrieving a set of authentication vectors, wherein the authentication vectors are for authenticating the wireless device to the foreign wireless domain. The method further includes encrypting the set of authentication vectors using a first security key of a home wireless domain of the wireless device. In addition, the method includes encrypting the first security key using a second security key of the foreign wireless domain and sending the encrypted set of authentication vectors and the encrypted first security key to the wireless device.

Abstract: Methods for establishing secure point-to-point communications in a trunked radio system include receiving, at a trunking controller, a request from a source endpoint for a traffic channel for confidential communications between the source endpoint and a destination endpoint using a shared unique first symmetric key. The trunking controller provides keying material related to the symmetric key over the secured control channel to at least one of the source or destination endpoints and assigns a traffic channel. Moreover, in response to the request, the controller assigns a traffic channel. The keying material enables the unique first symmetric key to be securely established between the source and destination endpoints.

Abstract: The disclosure relates to techniques and technologies for providing mobile wireless broadband coverage. In one implementation, Wireless Wide Area Broadband (WWAB) network elements are provided in a Vehicular Area Network (VAN) that also includes a Mobile Network Controller (MNC). The WWAB network elements in the VAN include at least one WWAB base station (BS). A mobility protocol tunnel is provided between a Mobility Management Server (MMS) and the MNC to make mobility of the WWAB network elements in the VAN transparent to the WWAB network elements in the fixed infrastructure. The WWAB BS and the MNC can allow a WWAB-enabled mobile station (MS) to connect to WWAB network elements in the fixed infrastructure.

Abstract: A method for minimizing tunnels in a network, apparatus and computer-readable storage medium having computer readable code stored thereon for programming a computer to perform the method. The method includes the steps of: obtaining state information associated with a first node connected to a mobile network behind a mobile node; receiving a first message sent between the first node and a correspondent node, wherein a first header was removed from the first message prior to sending the first message; recreating, in one of the mobile node and a mobility agent, the first header using the state information; and sending the first message with the first header.

Abstract: A method as provided enables mutual authentication of nodes in a wireless communication network. The method includes processing at a first node a beacon message received from a second node, wherein the beacon message comprises a first nonce value (step 405). An association request message comprising a certificate of the first node, a first signed block of authentication data, and a second nonce value is then transmitted from the first node to the second node (step 410). The second node can then verify a signature of the certificate of the first node and verify a signature of the first signed block of authentication data. An association reply message received from the second node is then processed at the first node (step 415), whereby the first node verifies a signature of a certificate of the second node and verifies a signature of a second signed block of authentication data.

Abstract: A method for is disclosed in which a first message is received from a first device. Upon receipt of the first message, a registration request is transmitted via the first device to a home agent for pre-registration of a co-located care-of address associated with a second device. The registration request includes the co-located care-of address associated with the second device. If the first message is received again from the first device prior to attaching to the second device, the registration request is re-transmitted via the first device.

Abstract: System and method are provided for establishing internet protocol (IP) communication between a mobile node (MN) and one or more mobile networks. The method includes receiving (100) a request from a MN when the MN joins a first mobile network, creating (105) routing information indicating a home address of the MN, and announcing (110) the home address to the nodes of the mobile network(s). The request indicates the home address of the MN.

Abstract: A method and apparatus for multicast communication, wherein the apparatus is configured for performing the method that includes the steps of: communicating (210) a request to a server to join a first multicast group, the first multicast group associated with a first multicast address; determining (220) a second multicast group corresponding to the first multicast group, the second multicast group having a second multicast address; joining (230) the second multicast group to create a corresponding multicast tunnel; receiving (240) a first multicast packet from the server using the multicast tunnel, the first multicast packet comprising the first and second multicast addresses; removing (250) the second multicast address from the first multicast packet; and forwarding (260) the first multicast packet comprising the first multicast address to an entity.

Abstract: A communication network (10, 12, 14) and method for route optimization between two mobile entities (20, 30) includes at least one home agent (40) that determines an optimized route between the two mobile entities (20, 30), and delivers the route optimization information to either (or both) of the mobile entities (20, 30). That mobile entity (20) configures itself using the route optimization information to enable routing of data packets to the other mobile entity (30) bypassing the at least one home agent (40).

Abstract: A method (300, 350) and a mobile system (140) of persisting a mobile communication session over a mobile virtual private network (MVPN) (170). Cognitive radio state information (150) representing a present state of at least one available cognitive radio communication link (180, 182) can be processed to determine whether the cognitive radio communication link is a preferred communication link. An active radio communication link with which to communicate over the MVPN can be selected.

Abstract: A method as provided enables mutual authentication of nodes in a wireless communication network. The method includes processing at a first node a beacon message received from a second node, wherein the beacon message comprises a first nonce value (step 405). An association request message comprising a certificate of the first node, a first signed block of authentication data, and a second nonce value is then transmitted from the first node to the second node (step 410). The second node can then verify a signature of the certificate of the first node and verify a signature of the first signed block of authentication data. An association reply message received from the second node is then processed at the first node (step 415), whereby the first node verifies a signature of a certificate of the second node and verifies a signature of a second signed block of authentication data.

Abstract: An apparatus and method for multicast data stream selection in a communication system includes a first step 300 of providing an intermediate server between a service entity and mobile clients. A next step 302 includes receiving a join request from a mobile client. A next step 304 includes deriving subgroups with each subgroup having at least one associated multicast data stream. A next step 310 includes deriving subgroup outer tunnels. A next step 316 includes encoding different data streams for the associated subgroups. A next step 320 includes mapping each data stream to the respective outer tunnels for each subgroup. A next step 322 includes sourcing the mapped streams to each subgroup. A next step 324 includes converting the mapped streams to a form that can be recognized by the mobile clients.

Abstract: An intermediate device of a network includes network and transport layers, a dispatcher, a splitter and a connections database. The splitter intercepts a message packet in the network layer and modifies the network routing header and transport header of the message packet to form a modified message packet. The dispatcher receives modified message packets from the transport layer, recovers information from the message packets, passes the modified message packets back to the transport layer and adapts the transport layer to adapt communication dependent upon the information recovered from the message packets. The connections database stores the original source address, the original destination address, the original source port identifier and the original destination port identifier of an incoming message packet. A message packet is modified, with reference to the connections database, so that message packets from the first and second nodes are routed through the dispatcher.

Abstract: A method for multicast packet communication by mobile entities (113) using one or more radio access networks (RANs) (107, 109, 111) that include receiving a multicast message at a router (105) and then determining multicast capabilities of a mobile entity (ME) (113). An optimal multicast delivery mode is selected for delivering a multicast message to the ME (113) at the radio access network (107, 109, 111). The multicast message is then delivered to the ME (113) at the radio access network (107, 109, 111) according to the selected delivery mode.

Abstract: A method (200, 300, 400) of communicating an IPv6 packet (120) over an IPv4 based network (102). The method can include receiving the IPv6 packet to be communicated to a remote unit (104), encapsulating the IPv6 packet in an IPv4 transition packet (122), and communicating the IPv4 transition packet to an IPv4 MVPN (114) server configured to communicate the packet to the remote unit via infrastructure of an IPv4 radio access network. Another aspect of the present invention relates to a method of processing an IPv6 packet received over an IPv4 based network. The method can include receiving from an MVPN server an IPv4 formatted packet that is being communicated to a remote unit, and removing from the packet at least one IPv4 header to result in the packet being formatted in accordance with IPv6.

Abstract: The disclosure relates to techniques and technologies for providing mobile wireless broadband coverage. In one implementation, Wireless Wide Area Broadband (WWAB) network elements are provided in a Vehicular Area Network (VAN) that also includes a Mobile Network Controller (MNC). The WWAB network elements in the VAN include at least one WWAB base station (BS). A mobility protocol tunnel is provided between a Mobility Management Server (MMS) and the MNC to make mobility of the WWAB network elements in the VAN transparent to the WWAB network elements in the fixed infrastructure. The WWAB BS and the MNC can allow a WWAB-enabled mobile station (MS) to connect to WWAB network elements in the fixed infrastructure.

Abstract: The disclosure relates to techniques and technologies for providing mobile wireless broadband coverage. In one implementation, Wireless Wide Area Broadband (WWAB) network elements are provided in a Vehicular Area Network (VAN) that also includes a Mobile Network Controller (MNC). The WWAB network elements in the VAN include at least one WWAB base station (BS). A mobility protocol tunnel is provided between a Mobility Management Server (MMS) and the MNC to make mobility of the WWAB network elements in the VAN transparent to the WWAB network elements in the fixed infrastructure. The WWAB BS and the MNC can allow a WWAB-enabled mobile station (MS) to connect to WWAB network elements in the fixed infrastructure.

Abstract: Techniques are provided for enabling application steering/blocking in a secure network which includes a network entity, and a first tunnel endpoint coupled to the network entity over an encrypted tunnel. The first tunnel endpoint associates at least a first Security Parameter Index (SPI) to a first application identifier to generate first mapping information (MI), communicates the first MI to the network entity, and transmits an encrypted message to the network entity over the encrypted tunnel. The encrypted message includes an encrypted packet and an unencrypted header including the first SPI. The network entity determines the first SPI from the unencrypted header, determines the first application identifier based on the first SPI and the first MI, and identifies a first application associated with the first application identifier. The network entity can still perform application steering/blocking even though traffic passing through the tunnel is encrypted.

Abstract: A method for minimizing tunnels in a network, apparatus and computer-readable storage medium having computer readable code stored thereon for programming a computer to perform the method. The method includes the steps of: obtaining state information associated with a first node connected to a mobile network behind a mobile node; receiving a first message sent between the first node and a correspondent node, wherein a first header was removed from the first message prior to sending the first message; recreating, in one of the mobile node and a mobility agent, the first header using the state information; and sending the first message with the first header.

Abstract: System and method are provided for establishing internet protocol (IP) communication between a mobile node (MN) and one or more mobile networks. The method includes receiving (100) a request from a MN when the MN joins a first mobile network, creating (105) routing information indicating a home address of the MN, and announcing (110) the home address to the nodes of the mobile network(s). The request indicates the home address of the MN.