Abstract: A system and method for discovering capabilities of a network interface prior to a handover. The mobile node detects a beacon with a radio interface identifier that identifies a new access router (NR). Using the radio interface identifier, the mobile node obtains interface information on the NR through a current access router (CR). The interface information identifies the capabilities of the NR.

Abstract: An apparatus and method are provided in which multiple options are configured to deliver a base-station ID (BSID), which acts as a trigger for an initiation of a handover at an access gateway level. The handover triggers may be based on a proactive handover between at least one mobile station and a gateway and base station in a serving and target networks or on a reactive handover in which the at least one mobile station does not perform any handover preparation prior to the handover. In addition, the handover trigger may be based on a network initiating and controlling the handover.

Abstract: There is disclosed a system comprising a plurality of wireless piconets, each piconet including one or more wireless devices, each device being provided with an Internet protocol, IP, address such that the devices of the plurality of piconets form a wireless subnetwork. There is also disclosed a device for connection in a wireless piconet configured to receive a prefix for generation of an IP address, and further configured to generate an IP address in dependence on the prefix and a unique identifier of the device.

Abstract: A method is disclosed for a router to provide random assignments of three priorities, each signifying a drop precedence, to packets on a per customer basis. The router determines a sending rate estimate. Then the router marks a packet a priority level based on the sending rate estimate.

Abstract: There is proposed a mechanism for establishing a secure communication between network elements in a communication network. The network nodes execute an authentication procedure with an authentication network element. The authentication network may also one of the network elements as a gateway element. Then, a respective data key for the network elements authenticated is generated and distributed to the gateway element by using a secure channel between the authentication network element and the gateway element. The data keys are stored the data keys in the gateway element. When a secure communication is to be setup, a respective session key is generated in the network elements intending to participate in the secure communication. The session keys are exchanged between the network elements intending to participate in the secure communication via secure channels between the gateway element and the network elements.

Abstract: The present invention relates to a mobile node, router device and method of providing to a first type of traffic an enhanced handover function specified for a second type of traffic, wherein a predetermined set of handover destination address parameters is derived from a protocol signaling related to the second type of traffic. This derived set of handover destination address parameters is then used to generate for the first type of traffic a new destination address in accordance with the second type of traffic, and a binding update is initiated for binding at least one original destination address of the first type of traffic to the generated new destination address of the second type of traffic. Thus, handover support can be provided for the first kind of traffic without requiring a dedicated handover protocol for the first kind of traffic.

Abstract: There is proposed a mechanism for establishing a secure communication between network elements in a communication network. The network nodes execute an authentication procedure with an authentication network element. The authentication network may also one of the network elements as a gateway element. Then, a respective data key for the network elements authenticated is generated and distributed to the gateway element by using a secure channel between the authentication network element and the gateway element. The data keys are stored the data keys in the gateway element. When a secure communication is to be setup, a respective session key is generated in the network elements intending to participate in the secure communication. The session keys are exchanged between the network elements intending to participate in the secure communication via secure channels between the gateway element and the network elements.

Abstract: A system and method is provided that enables the transfer of policy resource tokens (PRT) in the process of a handover of a mobile node in a wireless network. The system includes a granting agent that grants the PRT to a first access router to enable the mobile node to access network resources. In one embodiment, in the process of handing over the mobile node, the first access router provides the PRT to the second access router, thereby reducing data latency, and a disruption for an application executing on the mobile node. In another embodiment, the mobile node provides the PRT to the second access router after connectivity is established. A PRT data structure also is provided that includes a data field of profile types. A profile type describes context authorization information for granting access to a network resource.

Abstract: There is disclosed a personal area network comprising a plurality of wireless piconets, each piconet including one or more wireless devices, each device being provided with an Internet protocol, IP, address such that the devices of the plurality of piconets form a wireless subnetwork. There is also disclosed a device for connection in a wireless piconet configured to receive a prefix for generation of an IP address, and further configured to generate an IP address in dependence on the prefix and a unique identifier of the device.

Abstract: When mobile node is connected to an access point outside the private network, a tunnel is formed between the mobile node and a home agent on the private network for the transfer of packets. When, the mobile node roams into a region accessible to the private network, the mobile node is connected to the private network using a private network access point while maintaining the tunnel between the mobile node and the home agent.

Abstract: A method and apparatus which permits access, by intermediate nodes between source and destination nodes, to selected information such as transport level information, normally included in a payload of a packet upon which encrypting security processing has been performed according to an encrypting security protocol. In the present invention, prior to performing encrypting security processing on the packet, according to the security protocol, information related to selected information normally included in a payload of the packet is stored in a field in the header of the packet where the field is not subject to the encrypting security processing. Thereafter, encrypting security processing according to the security protocol is performed on the packet.

Abstract: In an exemplary embodiment of this invention contexts are transferred at an appropriate time depending on the context type. As a result, link layer (PPP) delay can be substantially eliminated during Mobile IP handoff, without introducing additional packet loss. By way of example, all MS contexts (both static and dynamic) are maintained during the inter-PDSN handoff procedure, and any executing applications are not impacted by the inter-PDSN handoff.

Abstract: A method of configuring routers facilitates handoff of user equipment from a router to another router. The method includes configuring a virtual interface in a current router used by user equipment. The method also includes assigning a global address to the virtual interface. The global address is assigned to the virtual interface that is used to facilitate handoff of the user equipment from a current router to a new router. A system, router and user equipment are configured to implement the method.

Abstract: An apparatus, system, and method are directed to managing connectivity in a network by expediting the ability of a mobile node to send Internet Protocol (IP) packets subsequent to a handover. The mobile node is configured to determine an unconfirmed address for use on an access router. Upon establishing a link-layer connection, and before establishing a network-layer connection with the access router, the mobile node employs the unconfirmed address to send an IP packet to the access router. Employing the unconfirmed address prior to network-layer connectivity enables the reduction of handover latencies. If the access router determines that the unconfirmed address conflicts with an existing address, the access router provides a message to the mobile node indicating the conflict in addresses. In response to the message, the mobile node performs actions to resolve the address conflict.

Abstract: The present invention provides location privacy against third parties while allowing route-optimized communication between the correspondent node and the mobile node. The mobile node's home address is hidden from an external observer thereby thwarting traffic analysis based attacks where a Home Address is correlated with a Care of Address of a mobile node (MN). A “privacy label” is used in place of a home address associated with the mobile node. The privacy label is supplied by the mobile node to the correspondent node in a way that that allows the privacy label to be bound to the home address, but does not allow the home address to be visible during the exchange. The privacy label may be also used to help prevent against replay attacks.

Abstract: A system and method for discovering capabilities of a network interface prior to a handover. The mobile node detects a beacon with a radio interface identifier that identifies a new access router (NR). Using the radio interface identifier, the mobile node obtains interface information on the NR through a current access router (CR). The interface information identifies the capabilities of the NR.

Abstract: An apparatus, system, and method are directed to managing connectivity in a network by expediting the ability of a mobile node to send Internet Protocol (IP) packets subsequent to a handover. The mobile node is configured to determine an unconfirmed address for use on an access router. Upon establishing a link-layer connection, and before establishing a network-layer connection with the access router, the mobile node employs the unconfirmed address to send an IP packet to the access router. Employing the unconfirmed address prior to network-layer connectivity enables the reduction of handover latencies. If the access router determines that the unconfirmed address conflicts with an existing address, the access router provides a message to the mobile node indicating the conflict in addresses. In response to the message, the mobile node performs actions to resolve the address conflict.

Abstract: A system and method is provided that enables the transfer of policy resource tokens (PRT) in the process of a handover of a mobile node in a wireless network. The system includes a granting agent that grants the PRT to a first access router to enable the mobile node to access network resources. In one embodiment, in the process of handing over the mobile node, the first access router provides the PRT to the second access router, thereby reducing data latency, and a disruption for an application executing on the mobile node. In another embodiment, the mobile node provides the PRT to the second access router after connectivity is established. A PRT data structure also is provided that includes a data field of profile types. A profile type describes context authorization information for granting access to a network resource.

Abstract: A method, computer program, and apparatus for allowing endpoints to move between zones of a packet-switched network. In the invention, a communication between local and remote endpoints are established via a first gatekeeper, which services a first zone of the packet-switched network, when the local endpoint is at a location serviced by the first zone of the packet-switched network. When the local endpoint moves to a location serviced by a second zone of the packet-switched network, subsequent to the initial hand-off, communication between the local and remote endpoints is maintained via the first gatekeeper and a second gatekeeper which services the second zone of the packet-switched network, by performing an initial hand-off communication control functions from the first gatekeeper to the second gatekeeper.

Abstract: A method and apparatus for avoiding packet reordering in multiple-class, multiple-priority networks. The present invention provides a queue implementation technique that can be used in multiple-class, multiple-priority networks such as Differentiated Services networks to ensure that packets are serviced without reordering. The queue implementation technique maintains performance isolation between different classes under some scheduling disciplines and can identify scheduling disciplines which do not degrade the performance seen by the lower priority traffic classes.