Abstract: Techniques and systems for server farm load balancing and resource allocation are disclosed. In one embodiment, a method of load balancing can include: arranging servers into service groups; receiving an access request with information related to a differentiation between the service groups; selecting one of the service groups based on a mapping comparison to the information; and selecting one of the servers within the selected service group based on a hardware utilization comparison. The servers can include GPRS (General Packet Radio Service) Gateway Support Node (GGSN) or Remote Authentication Dial In User Service (RADIUS) servers, for example. The information can include an Access Point Name (APN) or Calling Station ID, for example.

Abstract: In one embodiment, techniques provide quality of service (QoS) for services using a gateway. The techniques include receiving one or more control signaling messages from a subscriber station at the gateway. The gateway is in a signaling path for the subscriber station where the subscriber station communicates through a wireless network. The gateway determines a policy to apply for the service based on the one or more control signaling messages. QoS parameters may be determined for the service based on the policy. For example, QoS parameters are determined for a session that is created for a media stream. The media stream may flow from the subscriber station to a base station to the gateway, and vice versa. The gateway may communicate the QoS parameters to the base station to cause the base station to reserve resources in the wireless network. Accordingly, a session for the subscriber station is created and resources are reserved to provide a QoS for a media stream.

Abstract: In one embodiment, a network device receives an Internet protocol (IP) registration request, such as a mobile IP registration request, from an access terminal. The network device may be a home agent that is configured to register the access terminal for IP services at the network layer. In addition to registering the access terminal at the network layer, the network device may facilitate registration at another layer, such as the application layer. In one example, registration information for the access terminal for an application layer registration, such as information needed to register for a session initiation protocol (SIP) services, is determined. The network device then facilitates registration at the application layer automatically using the registration information.

Abstract: In one embodiment, sessions are synced from an active device to a standby device according to a priority. One or more attributes are determined for a plurality of sessions that need to be synced between an active device and a standby device. The attributes may be used to determine a value of syncing a session. A priority for syncing the sessions based on the attributes is then determined. The sessions are then synced based on the priority. For example, a portion of sessions considered to be of a higher priority may be synced before a portion of sessions considered to be of a lower priority. Because the sessions considered of a higher priority are synced first, if a double failure occurs where the active device fails during the syncing process, at least the higher priority sessions have been synced with the standby device and the standby device can take over these sessions.

Abstract: In one embodiment, a security gateway receives an IPSec Initiation (IPSec INIT) request from a client. The security gateway may communicate with a AAA server to authenticate the client. After authentication, the security gateway intercepts a URR Discovery request from the client. The security gateway determines registration information for a response to the registration request. The registration information may be information on where the client can locate a D-GANC. A response is generated using the determined information and sent to the client. The response to the discovery request is performed without communicating with a P-GANC. Accordingly, a security gateway is used to authenticate the client and also to respond to the discovery request. This does not require that a P-GANC function be deployed in a network. Thus, cost and processing power may be saved.

Abstract: A method for detecting and directing traffic in a network environment is provided that includes receiving a packet included within a communication flow that is initiated by a mobile terminal and setting a flag within the packet. The method further includes directing the packet to a next destination by recognizing that the flag included within the packet was set and therefore is associated with a mobile-to-mobile communication session.

Abstract: Managing network service access includes receiving a packet data service request. The packet data service request is associated with a mobile subscriber and a service identifier that can bypass validation for accessing a traffic destination. Access is requested from an access node in response to the packet data service request. The access node maps a target access point to the mobile subscriber, where the target access point provides the mobile subscriber with access to the traffic destination. An access acceptance message is received from the access node, where the access acceptance message identifies the target access point. A packet data context is created by associating the target access point with the mobile subscriber to allow the mobile subscriber to access the traffic destination.

Abstract: In one embodiment, a method for supporting backward compatibility in a mobile network can include: receiving a packet in a first device that can support a first protocol; forming a modified packet by adding a field to the packet, where the field is related to a context for a second protocol; and providing the modified packet to a second device, where the second device can support the first and second protocols. The context can include a Packet Data Protocol (PDP) context and the field can include a PDP identifier. The mobility layer can include Mobile IP, for example. The first and second protocols can be Mobile IP and PDP, respectively.

Abstract: Techniques for exchanging capabilities in a wireless network are provided. In one embodiment, a first device receives a capability message over a communication link from a second device in a WiMAX network. The communication link may be between any combination of base stations and gateways. For example, the R4, R6, or R8 interface may be used. Other interfaces may also be appreciated in a WiMAX network. The capability message includes one or more capabilities supported by a second device in the WiMAX network. Capabilities to support are then determined based on the one or more capabilities. These capabilities will be supported by the first device for communications with the second device. The first device is then configured to support the determined capabilities. Accordingly, the first device is dynamically configured based on the capability message received.

Abstract: Techniques for allowing a home agent to provide location/presence-based services are provided. In one embodiment, a point of attachment of an access network receives a discovery request from a mobile node. A mobile node is associated with a home agent in a home network different from the access network. Location/presence-based information is determined at the point of attachment. The location/presence-based information is added to a registration request at the layer 3 protocol layer. The registration request is then sent from the point of attachment to the home agent. When the registration request is received at the home agent, the home agent parses the registration request to determine the location/presence information from the request. The home agent then performs a location/presence service using the location/presence information.

Abstract: In one embodiment, techniques provide quality of service (QoS) for services using a gateway. The techniques include receiving one or more control signaling messages from a subscriber station at the gateway. The gateway is in a signaling path for the subscriber station where the subscriber station communicates through a wireless network. The gateway determines a policy to apply for the service based on the one or more control signaling messages. QoS parameters may be determined for the service based on the policy. For example, QoS parameters are determined for a session that is created for a media stream. The media stream may flow from the subscriber station to a base station to the gateway, and vice versa. The gateway may communicate the QoS parameters to the base station to cause the base station to reserve resources in the wireless network. Accordingly, a session for the subscriber station is created and resources are reserved to provide a QoS for a media stream.

Abstract: An Unlicensed Mobile Access (UMA) network architecture. In a specific embodiment, the network architecture includes a mobile station and an access point in communication with the mobile station. A UMA Controller (UNC) communicates with the access point. A Service GateWay (SGW) communicates with the UMA controller. The SGW includes functionality to route user-plane packets in the UMA. In a more specific embodiment, the functionality includes UNC user-plane functionality offloaded from the UNC to the SGW; Serving GPRS Support Node (SGSN) user-plane functionality; access-authentication functionality sufficient to enable the SGW to enable the SGW to bypass a legacy SGSN control plane; and/or Radio Network Controller (RNC) user-plane functionality sufficient to enable communications between the SGW and the RNC.

Abstract: A system for enhancing functionality of a network. In a specific embodiment, the system employs strategic communications between a network controller and a security gateway. The strategic communications occur via a feedback communications channel between the network controller and the security gateway. The feedback communications channel facilitates transferring security information, such as International Mobile Subscriber Identity (IMSI) and other information, between the network controller and the security gateway. The security information may facilitate enabling the SGW to make intelligent decisions as to how to treat a client communications session. In the specific embodiment, the feedback communications channel includes an intervening Authentication, Authorization, and Accounting (AAA) server that is coupled between the UMA and the network controller.

Abstract: Techniques and systems for server farm load balancing and resource allocation are disclosed. In one embodiment, a method of load balancing can include: arranging servers into service groups; receiving an access request with information related to a differentiation between the service groups; selecting one of the service groups based on a mapping comparison to the information; and selecting one of the servers within the selected service group based on a hardware utilization comparison. The servers can include GPRS (General Packet Radio Service) Gateway Support Node (GGSN) or Remote Authentication Dial In User Service (RADIUS) servers, for example. The information can include an Access Point Name (APN) or Calling Station ID, for example.

Abstract: Authenticating a registration request from a mobile node includes an authenticator operable to facilitate a communication session for the mobile node. Access authentication to provide the mobile node access to an Internet Protocol (IP) network is facilitated. A mobility key is obtained from the access authentication. A registration request is received from the mobile node, and is authenticated using the mobility key.

Abstract: Facilitating a graceful restart operation includes initiating the graceful restart operation at a gateway of an access service network. A graceful restart request is sent to a helper device. The graceful restart request requests that the helper device recognize the gateway as adjacent during a specified grace period. If the helper device supports the graceful restart operation, information is received from the helper device in response to the graceful restart request. The graceful restart operation is terminated.

Abstract: A system for efficiently reauthenticating a client of a network. In a specific embodiment, the system includes an authentication server and a Security GateWay (SGW) in communication with the client. The SGW includes reauthentication information associated with the client. In a more specific embodiment, the authentication server includes an Authentication, Authorization, and Accounting (AAA) server. The SGW further includes one or more routines for employing the reauthentication information to reauthenticate the client. The AAA server performs initial authentication of the client to enable client access to the network, which yields the reauthentication information. The reauthentication information includes one or more keys and/or counters, such as an authorization key, an encryption key, and a master key, which is/are predetermined by the AAA server.

Abstract: Particular embodiments provide an access gateway that facilitates communication between a plurality of access technologies. The access gateway facilitates data communication with an access terminal through a bearer path. A radio resource manager is configured to provide radio resource management functions for the communications. The radio resource manager is decoupled from the bearer path and provides control of radio transmission characteristics for the bearer path to the gateway. Because the radio resource manager is not in the bearer path, the access gateway may be access technology agnostic. Thus, the access gateway does not need to have access-specific modules based on the radio technology for each bearer path.

Abstract: A system and method is provided for authenticating access in a mobile wireless network. The system and method comprise exchanging an extensible authentication protocol (EAP) packet with an access terminal over a high rate packet data radio link and a signaling interface through a radio access network, encapsulating the EAP packet in an authentication authorization and accounting (AAA) packet, and sending the AAA packet to an authentication server for authentication.

Abstract: In one embodiment, during an authentication process between a network device and an access terminal, an authentication message for access to the network is received. The network device is configured to allow access to an IP network. The network device determines one or more capabilities of the access terminal from the authentication message. An action is then performed based on the one or more capabilities of the access terminal. The action may include using the capabilities to set up a session with the access terminal. Also, the network device may send its own capabilities to the access terminal in an authentication response. Accordingly, a capability negotiation between the access terminal and network device may be provided during an authentication process. This may facilitate a faster session setup as capabilities are exchanged during authentication can be used in the configuration of the session.