Abstract: Systems and methods provide for authenticating a device. A method for authenticating a device can include receiving, at communications node, a first message, wherein the first message includes a first Extensible Authentication Protocol (EAP) packet which includes an EAP (Identify) ID response and a first destination address; generating, by the communications node, a second message, wherein the second message includes the first EAP ID response and a second destination address which is different from the first destination address; and transmitting, by the communications node, the second message toward the second destination address.

Abstract: Methods and nodes are provided for efficiently establishing a route between a mobile node and a correspondent node in a Proxy Mobile Internet Protocol network. A return routability procedure is used between a local mobility anchor and a media access gateway on one hand, and the correspondent node on the other hand. The procedure is made without involvement from the mobile node. The procedure is such that the correspondent node handles return routability as per standard mobile IP mechanisms. Following this return routability procedure, a binding of an address of the mobile node with an address of the media access gateway is stored in the correspondent node. This binding allows data traffic to flow between the mobile node and the correspondent node without passing through the local mobility anchor.

Abstract: A method, a correspondent node and a mobile node provide anonymity and unlinkability to a mobile node in a session with a correspondent node. Sequence values, calculated based on secret data, are added to updates sent from the mobile node towards the correspondent node and are used by the correspondent node to authenticate updates from the mobile node. A home address of the mobile node is not explicitly disclosed. An expected care-of address is calculated at the correspondent node and used by the correspondent node to send data packets to the mobile node.

Abstract: The present invention relates to a method and apparatus for preventing endless tunnel looping in a mobile communication network. An originating home agent inserts an extended TEL option into a packet that is being forwarded by the originating home agent. The extended TEL option includes an address of the originating home agent and indicates the original tunnel entry point of the packet. When another home agent receives the forwarded packet containing the extended TEL option, the receiving home agent may send a loop risk indicator (LRI) to the originating home agent to inform the originating home agent of the tunnel looping risk. The originating home agent may then use the conventional TEL option for subsequent packets forwarded during that particular mobility session for the mobile terminal.

Abstract: Devices, systems, methods and software are described which provide identity assignment and redistribution capabilities for software components of a distributed application. Identity value ranges can be fixed or variable. Identity assignment schemes according to exemplary embodiments facilitate the continuation of traffic between the components and clients during redistribution of the identities.

Abstract: Antenna sharing techniques are described. A mobile computing device may comprise an antenna, a switch to couple to the antenna, and multiple transceivers to couple to the switch. The mobile computing device may also comprise an antenna management module to couple to the switch and the transceivers. The antenna management module may control the switch to electrically connect one of the transceivers to the antenna. Other embodiments may be described and claimed.

Abstract: Reduction of overhead normally caused by the addition of a second IP header in case of tunneling between a home agent and a mobile node located in a foreign network is achieved by replacing an encapsulated first IP header by a tunnel identifier. The home agent and the mobile node agree on a tunnel identifier value at the time of binding update and acknowledgement. The tunnel identifier may be used independently at the home agent and at the mobile node to reconstruct the first IP header, which identifies a correspondent node. Because the encapsulated first IP header is not terminated at either of the home agent or mobile node, overhead reduction is not impacted by eventual transmission error or loss between these two nodes.

Abstract: A method for revoking a binding from a mobile node, having a least one binding, comprises providing a target binding with the binding revocation message, so that after the revocation, the mobile node can be reached through the target binding.

Abstract: Methods and nodes are provided for supporting session continuity for terminals capable of having simultaneous accesses while served by a plurality of gateways. Distinct binding cache entries (BCE) are stored for a terminal, each BCE being related to one of the gateways serving the terminal. The BCEs identify the terminal, provide an address allocated thereto for getting access at a gateway, and identify the gateway providing the access. When detection is made that two of more BCEs relate to the same terminal for distinct gateways, address information is sent to each other gateway.

Abstract: Methods, a data source and a router are provided to fragment packets that are to be sent in multicast mode towards a plurality of destinations comprised in a multicast group. Each router along a path leading from the data source towards some of the destinations sends its maximum transmission unit value in an uplink direction. Each router directly connected to the data source calculates a lowest maximum transmission unit based on various maximum transmission unit values received from downstream routers. The data source receives from each of the directly connected routers a maximum transmission unit value, which is certain to be acceptable to all routers and destinations of the multicast group downstream of that directly connected router. The data source selects a lowest one of the received maximum transmission unit values and fragments data contents accordingly.

Abstract: A method, a proxy and a host are provided for securing neighbor discovery (ND) signaling between hosts when the hosts are connected through the proxy. A first host sends an original ND message comprising a first signature based on an address of the first host. The proxy removes the address of the first host and substitutes its own address in a modified ND message. The proxy then places a copy of the address of the first host in a new field and builds a proxy signature based on the own address of the proxy and on the new field. The new field and the proxy signature are added to the modified ND message. A second host receives the modified ND message from the proxy and verifies the proxy signature. The second host reconstructs the original ND message content and then verifies the first signature.

Abstract: A method and nodes are provided for registering a terminal. The terminal is capable of connecting in two distinct networks. The registration process for the terminal maps an identity and traffic handling policies of the terminal in a first network with an address prefix of the terminal obtained from the second network. The address prefix is obtained from the second network following authorization of the terminal in the first network. As traffic is exchanged between the terminal and a correspondent node while the terminal is accessing the second network, the mapping is used to ensure that policies for the terminal in the first network are applied in the second network.

Abstract: Methods and nodes are provided for supporting session continuity for terminals capable of having simultaneous accesses while served by a plurality of gateways. Distinct binding cache entries (BCE) are stored for a terminal, each BCE being related to one of the gateways serving the terminal. The BCEs identify the terminal, provide an address allocated thereto for getting access at a gateway, and identify the gateway providing the access. When detection is made that two of more BCEs relate to the same terminal for distinct gateways, address information is sent to each other gateway.

Abstract: Methods and network node in a network for receiving a network access request related to a subscriber via at least one external network interface and treating the network access request by using at least a first function and second function. A failure indication related to the subscriber is obtained from at least one of the first function or the second function. The network access request is thereafter denied by sending an access result via the external network interface. The access result comprises a cause of failure indicating the at least one of the first function or the second function as a source for the failure. The first and second functions may be, for instance, an AAA function and a DHCP function.

Abstract: Methods and nodes are provided for efficiently establishing a route between a mobile node and a correspondent node in a Proxy Mobile Internet Protocol network. A return routability procedure is used between a local mobility anchor and a media access gateway on one hand, and the correspondent node on the other hand. The procedure is made without involvement from the mobile node. The procedure is such that the correspondent node handles return routability as per standard mobile IP mechanisms. Following this return routability procedure, a binding of an address of the mobile node with an address of the media access gateway is stored in the correspondent node. This binding allows data traffic to flow between the mobile node and the correspondent node without passing through the local mobility anchor.

Abstract: Methods, a data source and a router are provided to fragment packets that are to be sent in multicast mode towards a plurality of destinations comprised in a multicast group. Each router along a path leading from the data source towards some of the destinations sends its maximum transmission unit value in an uplink direction. Each router directly connected to the data source calculates a lowest maximum transmission unit based on various maximum transmission unit values received from downstream routers. The data source receives from each of the directly connected routers a maximum transmission unit value, which is certain to be acceptable to all routers and destinations of the multicast group downstream of that directly connected router. The data source selects a lowest one of the received maximum transmission unit values and fragments data contents accordingly.

Abstract: Devices, systems, methods and software are described which provide identity assignment and redistribution capabilities for software components of a distributed application. Identity value ranges can be fixed or variable. Identity assignment schemes according to exemplary embodiments facilitate the continuation of traffic between the components and clients during redistribution of the identities.

Abstract: A method, a proxy and a host are provided for securing neighbor discovery (ND) signaling between hosts when the hosts are connected through the proxy. A first host sends an original ND message comprising a first signature based on an address of the first host. The proxy removes the address of the first host and substitutes its own address in a modified ND message. The proxy then places a copy of the address of the first host in a new field and builds a proxy signature based on the own address of the proxy and on the new field. The new field and the proxy signature are added to the modified ND message. A second host receives the modified ND message from the proxy and verifies the proxy signature. The second host reconstructs the original ND message content and then verifies the first signature.

Abstract: A plurality of networked devices on a communication network host services and instances of those services. These services and service instances are mapped onto destination addresses within a given address space. Thus, the destination addresses provide information about the location of the networked devices, as well as the functional topology of the network. Data packets may be routed to a desired service instance using these destination addresses.

Abstract: A method and nodes are provided for localizing traffic between communication nodes receiving service from a same network. A local mobility anchor informs media access gateways providing access to two communication nodes of each other's addresses. Traffic exchanged between the two communication nodes connected to the same network via these media access gateways are routed directly between the gateways, bypassing the local mobility anchor.