Abstract: In some of the preferred embodiments, methods for converting XML data to TLV format are provided for use in, e.g., query and/or response in, e.g., network discovery and the like applications.

Abstract: In a telecommunications network in which a mobile handset is capable of communicating in both an IP-domain and a non-IP domain, the handoff of an existing communications session between the mobile handset and a fixed user is facilitated by a handoff controller implemented in a service control point. The handoff controller implements different handoff methods depending on the status of the fixed user and the transition of the mobile user. Additionally 802.21 Media Independent Handover Function in conjunction with SIP is used to facilitate handover between IP and Non-IP points in the system.

Abstract: The present invention, among other things, obviates the effects of an attack on a wireless network through appropriate isolation and recovery. An aspect of the present invention can include a system and method of isolating a victim of malicious behavior in a wireless access network, and in particular WLAN networks. By having software on the victim's device, the system provides the capability of recovering the victim from the effects of the intruder, and prevents the victim from being affected by subsequent attacks by the intruder. The preferred embodiments include two key components: a local monitor and a global monitor.

Abstract: In some of the preferred embodiments, a method for network discovery of a mobile device to use at least one of a plurality of access networks within an IP network includes: obtaining specified network information in the vicinity of a given location based on a set of criteria when a mobile is connected to the IP network from any location.

Abstract: Methods and systems are provided for facilitating intra-domain mobility. A first network or domain includes a home agent or SIP proxy of a mobile node. A second network includes two or more subnetworks and at least one dynamic tunneling agent (DTA). Each subnetwork includes an associated subnet agent. To communicate, the mobile node first registers with a subnet agent, receives a local care-of-address and a global care-of-address, and then registers with a DTA. The local care-of-address received from the subnet agent may enable communication with the mobile node without determining a specific route to the mobile node. The global care-of-address received from the subnet agent may include the address of the DTA with which to register. On registering with the DTA, the DTA may provide the mobile node with a unique, globally reachable global care-of-address, which the mobile node may then forward to a home agent, SIP proxy, or a correspondent node.

Abstract: Methods and systems are provided for facilitating intra-domain mobility. A first network or domain includes a home agent or SIP proxy of a mobile node. A second network includes two or more subnetworks and at least one mobility agent (MA). Each subnetwork includes an associated subnet agent. To communicate, the mobile node first registers with a subnet agent, receives a local care-of-address and a global care-of-address, and then registers with an MA. The mobile node may then provide the global care-of-address to the home agent. The local care-of-address may enable communication with the mobile node without determining a specific route to the mobile node. The global care-of-address received from the subnet agent may include the address of the MA.

Abstract: In some illustrative embodiments, a novel system and method is provided that includes a quarantining architecture for quarantining of clients, including: a) an unauthenticated network; b) a quarantine network; and c) a safe network.

Abstract: The Dynamic Registration and Configuration Protocol (DRCP) provides a framework for registering and passing configuration information to roaming mobile hosts. DRCP is compatible with DHCP can switch to using DHCP protocol if only DHCP servers are present in the network. Most importantly, DRCP allows rapid configuration by moving address consistency checking from the critical path. Other novel features of DRCP allow: a) clients to know when to get a new address independent of the layer-2 access technology, b) efficient use of scarce wireless bandwidth, c) clients to be routers, d) dynamic addition or deletion of address pools to any DRCP node, and e) message exchange without broadcast.

Abstract: A system and method are provided for establishing a network communication session using fast authentication. In a network system a client or user device may establish a communication session with a server using full authentication. If the session is interrupted or discontinued and resumption of the session is requested, a session identifier of the previously established session may be compared to the session identifier of the requested session. If a match is detected, the session may be resumed using a fast authentication (or re-authentication) procedure such that the session is resumed more efficiently and expediently. Fast authentication may be performed, for example, even when the first session and the resumed second session are of different authentication layers, different types of network interfaces and/or different locations. Thus, a session, such as a TLS session, may resume functionality among multiple defined authentication protocols or technologies such as 802.1X, PANA or cellular based systems.

Abstract: Methods and systems are provided for facilitating intra-domain mobility. A first network or domain includes a home agent or SIP proxy of a mobile node. A second network includes two or more subnetworks and at least one mobility agent (MA). Each subnetwork includes an associated subnet agent. To communicate, the mobile node first registers with a subnet agent, receives a local care-of-address and a global care-of-address, and then registers with an MA. The mobile node may then provide the global care-of-address to the home agent. The local care-of-address may enable communication with the mobile node without determining a specific route to the mobile node. The global care-of-address received from the subnet agent may include the address of the MA.

Abstract: Methods and systems are provided for facilitating intra-domain mobility. A first network or domain includes a home agent or SIP proxy of a mobile node. A second network includes two or more subnetworks and at least one dynamic tunneling agent (DTA). Each subnetwork includes an associated subnet agent. To communicate, the mobile node first registers with a subnet agent, receives a local care-of-address and a global care-of-address, and then registers with a DTA. The local care-of-address received from the subnet agent may enable communication with the mobile node without determining a specific route to the mobile node. The global care-of-address received from the subnet agent may include the address of the DTA with which to register. On registering with the DTA, the DTA may provide the mobile node with a unique, globally reachable global care-of-address, which the mobile node may then forward to a home agent, SIP proxy, or a correspondent node.

Abstract: A method and system for fast intra-domain handoffs. In accordance with the method a mobility agent performs a duration limited multicast of packets destined for a mobile node to a well-defined set of subnet agents that form a multi-cast group. The well defined set includes the neighboring subnet agents of the subnet agent currently serving the mobile node. Once the multicast group is established the mobility agent then tunnels packets destined for the mobile node to each member of the multicast group. The members of the multicast group, i.e., the current subnet agent and its neighboring agents, then buffer the packets destined for the mobile node for a limited. When the mobile node then requests an IP address on the new subnet it is moving to, i.e., a local care-of address, the corresponding subnet agent then transmits the packets destined for the mobile node to the mobile node.