Abstract: The present invention provides a system, method and apparatus for securely exchanging security keys and monitoring links in an IP communications network. The apparatus is disposed between the local device and the remote device and receives a security key associated with the secure communication(s) for the local device. The apparatus then uses the security key to decode one or more messages transmitted between the local device and the remote device. The apparatus may initiate one or more security protocols whenever the decoded message(s) satisfy one or more criteria. Note that the present invention can be implemented as a computer program embodied on a computer readable medium wherein each step is performed by one or more code segments.

Abstract: The present invention provides a system, method and apparatus for providing security in an IP-based end user device, such personal computer clients, hard phones, soft phones, cellular phones, dual-mode phones, handheld communication devices, wireless communications devices and any other device capable of supporting real time IP-based applications. An application layer, a TCP/IP layer and a datalink layer of the IP-based end user device are monitored. Whenever an incoming session is detected and analyzed, the incoming session is accepted whenever one or more session security parameter(s) are satisfied and the incoming session is denied whenever the session security parameter(s) are not satisfied. Whenever an incoming packet is detected and analyzed, the incoming packet is processed whenever one or more packet security parameter(s) are satisfied and the incoming packet is dropped whenever the packet security parameter(s) are not satisfied.

Abstract: A proxy at the interface between a wireless communications system and a packet network intercepts all traffic between the wireless communications systems and the packet network and re-formats the intercepted traffic according to an optimal maximum transmission unit size between the interception point and the final destination, excluding the wireless link from computation of the optimal maximum transmission unit size. Typically this will result in packets from the wireless communications system being aggregated into a larger maximum transmission unit size, while packets from the packet network are fragmented into a smaller maximum transmission unit size. Congestion at intermediate nodes within the packet network is reduced, while end-to-end bandwidth utilization and latency at the final destination are improved.

Abstract: A zone-based behavior service is supported by a small area wireless transmitter to communicate behaviors, encoded as attribute-value pairs, to wireless devices within the service area of the small area transmitter. In response to entering the service area and discovering the zone-based behavior service, operation of a wireless communications device is automatically customized to conform to the specified behaviors according to corresponding user preferences. For example, audible ring tones are automatically disabled when proscribed by the zone-based behavior service and such proscription is accepted by the user in previously defined attribute options, but automatic re-routing of incoming calls suggested by the behavior service may be rejected by the user or require manual acceptance from the user. Upon leaving the service area of the small area transmitter, the wireless communications device automatically restores prior operational parameters.

Abstract: A mobile station location server determines the mobile station's location through various location techniques or by receiving the location information from the mobile station over an encrypted channel. The server stores the location in memory that may be access by authorized client access devices. A requesting client access device transmits a request to the server over the Internet. The server authenticates the request to verify that the client access device is authorized to receive the location information. If the client access device is authorized, the server can then transmit the information in either an encrypted or decrypted form to the device.

Abstract: There is disclosed a method and apparatus for filtering HTML data into a format that is optimized for the capabilities of a mobile station. The HTML filter generates the reformatted data using the capabilities and limitations of the mobile station and an HTML translation script that is associated with a desired Web site content.

Abstract: There is disclosed a method and apparatus for filtering HTML data into a format that is optimized for the capabilities of a mobile station. The HTML filter generates the reformatted data using the capabilities and limitations of the mobile station and an HTML translation script that is associated with a desired Web site content.

Abstract: A zone-based behavior service is supported by a small area wireless transmitter to communicate behaviors, encoded as attribute-value pairs, to wireless devices within the service area of the small area transmitter. In response to entering the service area and discovering the zone-based behavior service, operation of a wireless communications device is automatically customized to conform to the specified behaviors according to corresponding user preferences. For example, audible ring tones are automatically disabled when proscribed by the zone-based behavior service and such proscription is accepted by the user in previously defined attribute options, but automatic re-routing of incoming calls suggested by the behavior service may be rejected by the user or require manual acceptance from the user. Upon leaving the service area of the small area transmitter, the wireless communications device automatically restores prior operational parameters.

Abstract: A mobile station location server determines the mobile station's location through various location techniques or by receiving the location information from the mobile station over an encrypted channel. The server stores the location in memory that may be access by authorized client access devices. A requesting client access device transmits a request to the server over the Internet. The server authenticates the request to verify that the client access device is authorized to receive the location information. If the client access device is authorized, the server can then transmit the information in either an encrypted or decrypted form to the device.

Abstract: A proxy at the interface between a wireless communications system and a packet network intercepts all traffic between the wireless communications systems and the packet network and re-formats the intercepted traffic according to an optimal maximum transmission unit size between the interception point and the final destination, excluding the wireless link from computation of the optimal maximum transmission unit size. Typically this will result in packets from the wireless communications system being aggregated into a larger maximum transmission unit size, while packets from the packet network are fragmented into a smaller maximum transmission unit size. Congestion at intermediate nodes within the packet network is reduced, while end-to-end bandwidth utilization and latency at the final destination are improved.

Abstract: Wireless software downloads for resource-constrained wireless devices capable of Internet access are performed by connecting the wireless device to an auxiliary device and downloading the software through the wireless device to storage within the auxiliary device. Once downloaded, the software is installed on the wireless device from the auxiliary device. Use of the wireless device as a download conduit allows security and other features integrated into the wireless device to be directly employed during the download and installation.