Abstract: An intelligent system and a method in a packet network to utilize the radio network resource and the core network resource in an optimized way so that more high priority, critical devices are granted access to the network while throttling the low priority, non-critical devices with the same given resource. The system collects all the necessary information from the signaling exchange between the radio access network and the core network and takes the device subscription characteristics and statically or dynamically defined throttling behavior rules into consideration to choose the optimal behavior to handle the requests from devices at any given time including deciding to reject the requests for certain types of devices under certain network conditions while granting the requests for other types of devices.

Abstract: A mechanism to allow provisioning and use of BYOD (Bring Your Own Device) for authorized access in the enterprise network through a 3G/4G/Wi-Fi access network is provided. A brokering entity in the mobile packet core is provisioned for each authorized employee with enterprise specific rules for security and steering of user traffic. An Enterprise Container is defined as entity on the User Equipment that is self-contained virtual machine with enterprise sanctioned applications. An intelligent mechanism for and steering of signaling and traffic from such BYOD devices to the brokering entity is defined. At any time by using the personal container or the default behavior of the user equipment the user can get mobile service as if the Enterprise Container did not exist. Further, when such employment relationship is terminated the user's BYOD needs to be restored to its pre-employment functionality.

Abstract: An intelligent system and a method in a packet network to utilize the radio network resource and the core network resource in an optimized way so that more high priority, critical devices are granted access to the network while throttling the low priority, non-critical devices with the same given resource. The system collects all the necessary information from the signaling exchange between the radio access network and the core network and takes the device subscription characteristics and statically or dynamically defined throttling behavior rules into consideration to choose the optimal behavior to handle the requests from devices at any given time including deciding to reject the requests for certain types of devices under certain network conditions while granting the requests for other types of devices.

Abstract: A mechanism to allow provisioning and use of BYOD (Bring Your Own Device) for authorized access in the enterprise network through a 3G/4G/Wi-Fi access network is provided. A brokering entity in the mobile packet core is provisioned for each authorized employee with enterprise specific rules for security and steering of user traffic. An Enterprise Container is defined as entity on the User Equipment that is self-contained virtual machine with enterprise sanctioned applications. An intelligent mechanism for and steering of signaling and traffic from such BYOD devices to the brokering entity is defined. At any time by using the personal container or the default behavior of the user equipment the user can get mobile service as if the Enterprise Container did not exist. Further, when such employment relationship is terminated the user's BYOD needs to be restored to its pre-employment functionality.

Abstract: An intelligent system and a method in a packet network to utilize the radio network resource and the core network resource in an optimized way so that more high priority, critical devices are granted access to the network while throttling the low priority, non-critical devices with the same given resource. The system collects all the necessary information from the signaling exchange between the radio access network and the core network and takes the device subscription characteristics and statically or dynamically defined throttling behavior rules into consideration to choose the optimal behavior to handle the requests from devices at any given time including deciding to reject the requests for certain types of devices under certain network conditions while granting the requests for other types of devices.

Abstract: A system and an algorithm in a mobile core network to distribute the data load across multiple data processing entities. The system is seen as having one data plane entity to the external entities like routers; hence the system can scale without needing to update the external nodes. In general when a data plane processing entity is added or removed, a new distribution rule is provided to the remaining data plane processing entities. Only after some number of sessions have been migrated does the new distribution get provided to the data distribution entities. This delay allows sufficient sessions to be migrated to minimize the overall number of packets that have to be forwarded for processing. This benefit can be maximized by taking advantage of cellular network's idle mode behavior and by migrating the sessions while they are in idle mode.

Abstract: A mechanism to allow provisioning and use of BYOD (Bring Your Own Device) for authorized access in the enterprise network through a 3G/4G/Wi-Fi access network is provided. A brokering entity in the mobile packet core is provisioned for each authorized employee with enterprise specific rules for security and steering of user traffic. An Enterprise Container is defined as entity on the User Equipment that is self-contained virtual machine with enterprise sanctioned applications. An intelligent mechanism for and steering of signaling and traffic from such BYOD devices to the brokering entity is defined. At any time by using the personal container or the default behavior of the user equipment the user can get mobile service as if the Enterprise Container did not exist. Further, when such employment relationship is terminated the user's BYOD needs to be restored to its pre-employment functionality.

Abstract: An intelligent system and an algorithm at a packet network to reduce the amount of signaling in the radio access network and core network is defined. The system collects all the necessary information from the signaling exchange between the radio access network and the core network and takes the subscription characteristics and policy information into consideration to choose the optimal way of reducing the amount of signaling including selecting the optimal bearers for certain types of communications and paging selected area instead of the whole area for each device. The bearer selection algorithm takes several things as input to choose the optimal bearer to perform the task.

Abstract: An intelligent mechanism to map the public user identity into the private user identity inside the mobile network is defined. The identity mapping logic supports M:N mapping where M and N can be any natural number while a user or device can still be identified without ambiguity in the network and all the protocols are handled according to the standard specifications. Such ID mapping can be used to create virtual private networks, to provide flexibility in usage of identities, to save the scarce type of identities, and to map the identities between private enterprise identity and mobile network identity. As a result MSIDSN translation, support of private static IP address and support for network initiated communication becomes much easier.

Abstract: A system and an algorithm in a mobile core network to distribute the data load across multiple data processing entities. The system is seen as having one data plane entity to the external entities like routers; hence the system can scale without needing to update the external nodes. In general when a data plane processing entity is added or removed, a new distribution rule is provided to the remaining data plane processing entities. Only after some number of sessions have been migrated does the new distribution get provided to the data distribution entities. This delay allows sufficient sessions to be migrated to minimize the overall number of packets that have to be forwarded for processing. This benefit can be maximized by taking advantage of cellular network's idle mode behavior and by migrating the sessions while they are in idle mode.

Abstract: A system and method in a packet network for optimally separating control and data in the context of mobile networking. The embodiments disclosed herein utilize virtualization and elastic computing in the context of a control plane while the user plane flexibility is realized by application programming interfaces (APIs) between a control and user plane. The control plane is configured to receive a notification that a mobile device is done sending or receiving a communication; store in a flow table flow information associated with the communication; receive a trigger for resumption of flow when the communication is to be resumed; and pass the flow information to a cache in a data plane.

Abstract: An intelligent system and an algorithm at a packet network to reduce the amount of signaling in the radio access network and core network is defined. The system collects all the necessary information from the signaling exchange between the radio access network and the core network and takes the subscription characteristics and policy information into consideration to choose the optimal way of reducing the amount of signaling including selecting the optimal bearers for certain types of communications and paging selected area instead of the whole area for each device. The bearer selection algorithm takes several things as input to choose the optimal bearer to perform the task.

Abstract: A mechanism to allow provisioning and use of BYOD (Bring Your Own Device) for authorized access in the enterprise network through a 3G/4G/Wi-Fi access network is provided. A brokering entity in the mobile packet core is provisioned for each authorized employee with enterprise specific rules for security and steering of user traffic. An Enterprise Container is defined as entity on the User Equipment that is self-contained virtual machine with enterprise sanctioned applications. An intelligent mechanism for and steering of signaling and traffic from such BYOD devices to the brokering entity is defined. At any time by using the personal container or the default behavior of the user equipment the user can get mobile service as if the Enterprise Container did not exist. Further, when such employment relationship is terminated the user's BYOD needs to be restored to its pre-employment functionality.

Abstract: A wireless access network including a wireless base station configured to, for Iu-CS voice traffic, act as a network controller, by, terminating Iu-b signals from user equipment, and relaying the voice traffic over Iu-CS via an IP sec tunnel. And for data traffic, wireless base station is configured to act as the network controller, by, terminating Iu-b signals from the user equipment, striping IP payload, and sending the data traffic inside IPsec. Further, the wireless access network includes a wireless gateway configured to act as a security gateway for Iu-CS voice traffic, by, establishing the IP sec tunnel with the femtocell base station without the support of a GPRS Tunneling Protocol (GTP) as defined over Iu-PS. Also receiving and forwarding the tunneled Iu-CS voice traffic to a mobile switching center, and for data traffic, encapsulate the IP payload and send it via Gn to GGSN.

Abstract: A hierarchical data structure for signaling and data handling at a packet core network is defined. A hierarchical data structure is applied to both persistent and dynamic information to support a type of devices that share the same characteristics. Subscription database, context information, and policy rule information is comprised of group level information and device level information. Group level information contains the information the devices that belong to the group share. Device level information contains the device specific information that is different from group level information. When a device belonging to a group requests access to a packet network or performs a procedure that changes the mobility or session state of the device, context management unit works with authentication unit, subscription database unit, and policy decision unit to construct a right information for the device to handle the control and user data traffic.

Abstract: A system and method in a packet network for optimally separating control and data in the context of mobile networking. The embodiments disclosed herein utilize virtualization and elastic computing in the context of a control plane while the user plane flexibility is realized by application programming interfaces (APIs) between a control and user plane. The control plane is configured to receive a notification that a mobile device is done sending or receiving a communication; store in a flow table flow information associated with the communication; receive a trigger for resumption of flow when the communication is to be resumed; and pass the flow information to a cache in a data plane.

Abstract: An intelligent system and a method in a packet network to utilize the radio network resource and the core network resource in an optimized way so that more high priority, critical devices are granted access to the network while throttling the low priority, non-critical devices with the same given resource. The system collects all the necessary information from the signaling exchange between the radio access network and the core network and takes the device subscription characteristics and statically or dynamically defined throttling behavior rules into consideration to choose the optimal behavior to handle the requests from devices at any given time including deciding to reject the requests for certain types of devices under certain network conditions while granting the requests for other types of devices.

Abstract: A wireless access network including a wireless base station configured to, for Iu-CS voice traffic, act as a network controller, by, terminating Iu-b signals from user equipment, and relaying the voice traffic over Iu-CS via an IP sec tunnel. And for data traffic, wireless base station is configured to act as the network controller, by, terminating Iu-b signals from the user equipment, striping IP payload, and sending the data traffic inside IPsec. Further, the wireless access network includes a wireless gateway configured to act as a security gateway for Iu-CS voice traffic, by, establishing the IP sec tunnel with the femtocell base station without the support of a GPRS Tunneling Protocol (GTP) as defined over Iu-PS. Also receiving and forwarding the tunneled Iu-CS voice traffic to a mobile switching center, and for data traffic, encapsulate the IP payload and send it via Gn to GGSN.

Abstract: Methods and systems for providing voice and date services in a femtocell wireless network. The proposed approach integrates IWLAN architecture into femtocell architecture by introducing a gateway to serve both IWLAN and femtocell users. The proposed approach handles the voice and data in a different way so that it enhances the data handling efficiency while re-using existing MSC investment. The proposed approach carries the data traffic from a femtocell base station to the gateway in native IP packet, instead of encapsulating them in 3G data, thus enhancing the efficiency and performance for the data traffic. The data traffic can then be sent to GGSN or directly to packet data network. The approach tunnels voice traffic to MSC through the gateway as in conventional Iu-CS approach.

Abstract: According to one aspect of the invention, packets of a first type within a first data flow are routed to a destination through a packet core network. In response to a detection that packets of a second type are to be routed while routing the first data flow, a second data flow is created which is a sub-flow of the first data flow. Packets of the second type are routed via the second data flow to the destination without traversing the packet core network, while packets of the first type are routed via the first data flow traversing the packet core network.