Abstract: A system and method for chaining one or more services in a service provider network. A service chaining policy and associated Service Path Identifier (SPID) are determined at an ingress node with respect to a particular data packet flow. If the service chaining policy involves one or more service nodes to be traversed by the data packet flow, each service node's EIDs and RLOCs are determined. A sequential data exchange process with the service nodes is effectuated using encapsulation of data packets based on the EIDs and RLOCs for obtaining services in accordance with the order of services set forth in the chaining policy.

Abstract: A system for re-establishing a session between first and second hosts attached to respective first and second access routers. A connection request is sent from the first host to the first access router, the request containing an EP address claimed by the second host, a new care-of-address for the first host, and a session identifier. Upon receipt of the connection request, the first router obtains a verified IP address for the second access router and sends an on link presence request to the second access router, the request containing at least an Interface Identifier part of the second host's claimed IP address, the cue-of-address. and the session identifier. The second access router confirms that the second host is attached to the second access router. The second access router then reports the presence status to the first access router.

Abstract: There is disclosed a method, and a communication system, and a communication node for implementing the claimed method, for attempting to enhance legitimacy assessment and thwart a man-in-the middle or similar false-location attack by evaluating the topology of a communication-session requesting node relative to the proposed communication path through a network between the requesting node and the requested node. Upon receiving the request, a PRD (Prefix Reachability Detection) protocol is initiated, either after or during a secure key exchange, if any, which if performed preferably includes an ART (address reachability text). The PRD is executed by sending a message to the communication node challenging the location-authenticity of the requesting device. The communication node, which may be for example an access router through which the requesting node accesses the network, determines if the requesting node is positioned behind the communication node topologically, and reports the result to the requested node.

Abstract: A method implemented by a network element of an Internet service provider to provide network access through a visited network associated with a visited network owner to a device of a visiting user connecting to the visited network. The visited network owner is a customer of the Internet service provider. The network element configures the visited network to provide access to resources of a remote home network to the device of the visiting user. The remote home network is in communication with the visited network over a wide area network. Connecting to a virtual gateway controller of the remote home network to obtain configuration information to establish a connection between the device and the remote home network. Establishing a connection between the device of the visiting user and a second access point. Providing access to the resource of the remote home network through the second access point.

Abstract: A method is implemented by a nano-box for providing processing resources to support application execution to a set of devices connected to a network of the nano-box. The method includes receiving application data for an application for a mobile or fixed device. The application is executed using the application data of the mobile or fixed device to generate an output. A handoff notification is received indicating that the root controller has reassigned the application to another nano-box in the set of nano-boxes based on best resource availability and minimum latency. In response, the nano-box updates the application data with a current state of the application and transmits the updated application data over the network to be provided to the other nano-box.

Abstract: A method implemented by a network element of an Internet service provider to provide network access through a visited network associated with a visited network owner to a device of a visiting user connecting to the visited networker. The visited network owner is a customer of the Internet service provider. The network element configures the visited network to provide access to resources of a remote home network to the device of the visiting user. The remote home network is in communication with the visited network over a wide area network. Connecting to a virtual gateway controller of the remote home network to obtain configuration information to establish a connection between the device and the remote home network. Establishing a connection between the device of the visiting user and a second access point. Providing access to the resource of the remote home network through the second access point.

Abstract: A method is implemented in a network element functioning as a control node for a mobile node (MN) communicating with a corresponding node (CN). The method includes selecting a virtual agent in the network to provide mobility services to the MN. The virtual agent represents a set of mobile resources proximate to the MN. The virtual agent is selected such that the MN receives a better quality of service when communicating with the CN through the virtual agent. A provisioning message is sent to the selected virtual agent including parameters for a session between the MN and CN. The provisioning message initiates a flow redirection at the virtual agent. A provisioning acknowledgement message is received from the virtual agent indicating that the virtual agent is receiving data packets from the CN and forwarding the data packets to the MN at the care-of address.

Abstract: Methods of assigning radio resources in a wireless communications network with user equipment are provided. The methods include connecting a user equipment unit to a vehicle having a mobile communication module associated therewith. The user equipment unit is authenticated at the vehicle and is associated with the user equipment unit with the vehicle. Connection credentials are received at the mobile communication module from the user equipment unit if the user equipment unit is authenticated and associated. At least one wireless interface is activated at the mobile communication module responsive to the received connection credentials. A local wireless connection is established between the user equipment unit and the mobile communication module associated with the vehicle using the at least one wireless interface. Related mobile communication modules and intermediary devices are also provided.

Abstract: Methods and apparatus for generating, communicating, and/or verifying ownership of expressions are described. Various embodiments are well suited for use in a wireless peer to peer communications systems in which expressions are communicated, e.g., broadcast, in discovery intervals. A first communications device generates an expression from a first public key and an additional input, said first public key corresponding to a private key known to said first communications device. The first device transmits the generated expression on a communications channel used for discovery. A second communications device receives the transmitted expression from the first device. The second device transmits a request signal to the first device associated with the expression; and receives from the first device a signed communication signed using a private key known to said first communications device.

Abstract: A method implemented by a network element to track IPv6 addresses of devices in a home network, wherein the network element provides DHCPv6 service to the home network and a home network router on the home network assigns IPv6 address to the devices using a prefix provided by the DHCPv6 service, the method including receiving a DHCPv6 request for a prefix delegation from a home network router, sending a DHCPv6 message including an assigned prefix to the home network router, the DHCPv6 message including a request for notification of configured IPv6 addresses, receiving a first ICMP message from the home network router, including a MAC address and corresponding IPv6 address for a configured device, and sending the home network router a second ICMP message to acknowledge recording the IPv6 address for the configured device, enabling the network element to provide services and forward traffic directly to the configured device.

Abstract: Systems and methods are described which delegate reachability testing for mobility signaling in communication networks. A mobile node transmits a mobility signaling package to other network nodes, which can use the information contained therein to perform the delegated reachability testing.

Abstract: A network element is described. In one embodiment includes receiving a packet from the host in the first domain at the network element in the first domain, the packet including a destination address to the host in the second domain, the destination address being formed by replacing an Interface Identifier of an IP address by a second domain label and a shortened Media Access Control (MAC) address, the second domain label identifying the second domain. A routing label and the shortened MAC address are attached to the received packet, and the packet is sent on a label switched path indicated by the label to the second domain.

Abstract: A method implemented by a network element functioning as a home agent (HA) for a mobile node (MN) communicating with a corresponding node (CN) using Mobile Internet Protocol version 6 (MIPv6), the method including selecting by the HA a virtual home agent (VHA) in the network to provide home agent services to the MN with a better quality of service than the HA, sending a flow switch request (FSR) message to the selected VHA, the FSR message including a home keygen token, an address of the CN and a care-of address of the MN, the FSR message to cause the selected VHA to direct the CN to send data traffic for the MN to the selected VHA instead of the HA, and receiving a flow switch acknowledgement (FSA) message from the VHA indicating that the selected VHA has successfully redirected the data traffic from the CN to the MN.

Abstract: Before actually communicating information/data between two endpoints (C, S) connected to a network a secure and confidential distribution of a special key (K h) is performed to nodes (R j) along a path in the network. This is allowed by performing a path handshaking procedure in which first a hint token is forwarded along the path in a first direction and then a disclosure token is forwarded in the opposite direction. In forwarding the disclosure token it is verified in the nodes against the already received hint token. This assures that only nodes on-the particular path will receive the special key or possibly some other information related thereto.

Abstract: A method implemented by a Broadband Network Gateway (BNG) of an Internet service provider to provide accessibility to a wide area network for a Residential Gateway (RG) upon a failure of a wireline connectivity between the BNG and the RG, the method including receiving a failure detect message indicating a connectivity failure at the BNG from the RG, deciding whether to re-route traffic by the BNG, sending a failure acknowledge message by the BNG to the RG notifying the RG that re-routing has been initiated, sending a traffic re-route request message by the BNG to a Packet Data Network Gateway (PDN GW) of a Long-Term Evolution (LTE) network requesting the PDN GW to re-route traffic, receiving a traffic re-route acknowledgement by the BNG from the PDN GW, and re-routing traffic between the RG and the BNG through the PDN GW by the BNG.

Abstract: A method is implemented in a host node for communicating with a corresponding node. The host node has connections to a plurality of networks, where each of the plurality of networks includes a network address translation 64 (NAT64) node, each NAT64 node utilizes a distinct prefix to generate virtual Internet Protocol version 6 (IPv6) addresses, each of the plurality of networks is an IPv6 network, but the corresponding node is an Internet protocol version 4 (IPv4) node. The host node implementing this method is able to maintain connectivity with the corresponding node despite having connections to the plurality of networks that each have NAT64 nodes that utilize distinct prefixes for virtual IPv6 addresses.

Abstract: A method for maintaining connectivity between a mobile node and a corresponding node when the mobile node connects to a foreign network, where the foreign network and the home network are Internet protocol version 6 (IPv6) networks but the corresponding node is an Internet protocol version 4 (IPv4) node. The method includes receiving at the home agent node an IPv6 care-of address, determining that the IPv6 care-of address belongs to the foreign network and that the foreign NAT64 node has a prefix to generate virtual IPv6 addresses and sending a prefix binding request message to a home NAT64 node to bind the prefix to the home address of the mobile node for translation between IPv6 and IPv4.

Abstract: A method and apparatus taught herein provide for transfer of a data flow between two mobile nodes from a cellular connection supported by a cellular communication network to a non-cellular, ad-hoc connection between the mobile nodes. In one embodiment, a network node configured for operation in the cellular communication network detects that the two mobile nodes have moved within an ad-hoc communication range and transfers the data flow from the cellular connection to the ad-hoc connection responsive to the detection. The network node may include a control circuit to perform the detection, and a communication interface to send control signaling to effectuate the transfer. As a non-limiting example, the network node is a base station in the cellular communication network.

Abstract: A network element can include a proxy element that is configured to receive a request from a source node to establish a Transmission Control Protocol (TCP) connection from a first network address of the source node through a Packet Data Network Gateway (PDN GW) to a destination node for an IP flow. The proxy element applies an IP flow offloading policy function to determine that the requested TCP connection for the IP flow should bypass the PDN GW. The proxy element responds to the determination by communicating to the destination node a request for TCP connection with a second network address substituted for the first network address of the source node to establish the TCP connection for the IP flow from the source node to the destination node through a broadband network without passing through the PDN GW.

Abstract: Methods and apparatuses for combining internet protocol layer authentication and mobility signaling are disclosed. Various embodiments for providing authentication and mobility signaling when a mobile node moves from a 3GPP access network to a non 3GPP access network and vice versa are described.