Abstract: This invention proposes an integrated process for AAA (Authentication, Authorisation, and Accounting) with the order reversed whereby L2 follows L3. The L3 process treats the wireless link as any normal IP access link, and the L3 authorisation provides L3 processing, but also includes the L2 terminal authentication identifiers so that the L2 security parameters can also be returned. This means that the wireless link and the IP layer are not secured until after the L3 authorisation has completed and therefore the first IP messages that trigger authorisation are sent insecurely. This invention also provides methods to avoid these insecure messages presenting any opportunities to an attacker. Finally, the inventions include methods to enable L3 before L2 authorisation when a user is roaming in a foreign network.

Abstract: Methods and apparatus for storing, manipulating, retrieving, and forwarding state, e.g., context and other information, used to support communications sessions with one or more end nodes, e.g., mobile devices, are described. Various features are directed to a mobile node controlling the transfer of state from a first access node to a second access node during a handoff operation thereby eliminating any need for state transfer messages to be transmitted between the second access node and the first access node during handoff. Other features of the invention are directed to the use of a core network node to store state information. State information stored in the core node can be accessed and used by access nodes in cases where a mobile node does not send a state transfer message during a handoff, e.g., because communication with the first access node is lost or because such messages are not supported.

Abstract: The claimed subject matter relates to systems and methods for roaming in a wireless communications environment. A method for roaming between networks is provided in one aspect. This includes receiving a request for network access at a visited network and receiving a profile from a home network in response to the request. Upon receiving the profile, selectively offering services to one or more access terminals based at least in part on the profile.

Abstract: MIP Home Agent (HA) architectures are described that decompose, e.g., split, packet forwarding control functionality from actual data packet forwarding operations performed by a conventional MIP HA. This places MIP routing control in a node which is distinct from the tunnel end-points which perform packet forwarding operations to direct packets including a mobile's Home Address. Tunneling establishment and control functionality is implemented by what is referred to herein as decomposed HA (DHA) while data packet forwarding and redirection is performed, under the control of the DHA, by a tunneling agent (TA) node. The tunneling agent node serves as the data packet redirection node for a mobile as it moves from one location to another and may be located outside of a firewall used to protect the DHA. Tunnel endpoint nodes (Mobile Nodes and/or Access Nodes) send tunnel packets to the tunnel agent whilst directing control signaling packets to the DHA.

Abstract: Methods and apparatus for storing, manipulating, retrieving, and forwarding state, e.g., context and other information, used to support communications sessions with one or more end nodes, e.g., mobile devices, are described. Various features are directed to a mobile node controlling the transfer of state from a first access node to a second access node during a handoff operation thereby eliminating any need for state transfer messages to be transmitted between the second access node and the first access node during handoff. Other features of the invention are directed to the use of a core network node to store state information. State information stored in the core node can be accessed and used by access nodes in cases where a mobile node does not send a state transfer message during a handoff, e.g., because communication with the first access node is lost or because such messages are not supported.

Abstract: This application describes how Session Description Protocol (SDP) preconditions signaling can be enhanced to support lead role negotiation, precondition capability exchange, premature precondition attempts and concatenated preconditions processing. The application describes the use of send and receive tags in an SDP message for a given media line. In a given message, a success or failure tag may be associated with a send or receive tag in addition to an optional or mandatory condition indicator tag. A lead role indicator may also be associated with a send or receive tag to indicate a desired preference with regard to the sender or receiver taking the lead role. These additions lead to a greater chance of successful session set-up completion, reduce the number of signaling exchanges in general, and enable precondition attempts to be started earlier and to be executed in parallel.

Abstract: Methods and apparatus for extending Mobile IP to enable a Mobile IP Home Agent to forward to a default proxy MN server when it does not have a current binding for a MN home address. This can be used to route traffic when the MN is absent and to add processes onto the Proxy MN server that enables application intelligence at the Proxy MN server to act on behalf of the MN when the MN so wishes, e.g., substituting for the MN while the MN is in sleep mode or otherwise unavailable.

Abstract: Utilization of resources used to provide a service, and/or costs associated with providing system resources for a service, are tracked in a system where the available resources vary depending on a variety of conditions including resource utilization by other users. The methods are well suited for systems such as mobile communications systems, where the amount of resources and/or costs to a system of providing a service are dynamic and can change on a relatively rapid time scale. Resource unitization is tracked on a per subscriber basis. Service charges can be determined as a function of both the amount of resources consumed and the amount of data delivered, with the amount of resources being used to deliver a fixed amount of data units varying as a function of environmental and/or other conditions. Service charges are sometimes determined as a function of the impact of providing the service to a first user on other system users.

Abstract: Methods and apparatus for extending Mobile IP to enable a Mobile IP Home Agent to forward to a default proxy MN server when it does not have a current binding for a MN home address. This can be used to route traffic when the MN is absent and to add processes onto the Proxy MN server that enables application intelligence at the Proxy MN server to act on behalf of the MN when the MN so wishes, e.g., substituting for the MN while the MN is in sleep mode or otherwise unavailable.

Abstract: Utilization of resources used to provide a service, and/or costs associated with providing system resources for a service, are tracked in a system where the available resources vary depending on a variety of conditions including resource utilization by other users. The methods are well suited for systems such as mobile communications systems, where the amount of resources and/or costs to a system of providing a service are dynamic and can change on a relatively rapid time scale. Resource utilization is tracked on a per subscriber basis. Service charges can be determined as a function of both the amount of resources consumed and the amount of data delivered, with the amount of resources being used to deliver a fixed amount of data units varying as a function of environmental and/or other conditions. Service charges are sometimes determined as a function of the impact of providing the service to a first user on other system users.

Abstract: Extending Mobile IP to support both local and remote access by using two MIP client stacks in the end node, a roaming Node in the local access network, a standard Home Agent in the remote network. Messages between the AR and the MN, and between the internal modules of the MN, are then used to control hand-off for each MIP client and to enable backwards compatibility with legacy remote access clients.

Abstract: This document describes a way to extend Mobile IP Authentication Authorization and Accounting (AAA) signaling to enable a node to request from a network operator combinations of home and local service capabilities (when roaming) in an efficient and scalable manner. It also enables the home and foreign service providers to constrain and account for actual services provided based on a combination of the foreign and home operator policy.

Abstract: Aggregated signaling methods and apparatus which can be used to support the aggregation of Mobile IP binding registration information corresponding to multiple forwarding tunnels are described. Aggregated binding update message are used to enable multiple home addresses from one or more home agents to be installed, refreshed and deleted using a single MIP signaling phase. The single MIP signaling phase may correspond to a single MIP binding update message. Aggregated message techniques can also be used to retrieve multiple home address specific policy profiles via AAA signaling thereby reducing the number of AAA messages required to retrieve AAA information, e.g., profiles, corresponding to multiple home addresses.

Abstract: This invention describes how combined session and resource tracking in a mobile node (MN) and/or basestation in a dynamic network resource environment can be used to control reactions to resource shortages. The session that is to experience a resource shortage is detected either by the MN, or communicated to the MN where session signaling is used to modify the session according to MN and basestation policy/configuration. The basestation can alternatively modify the session itself with all the session peers, on behalf of the MN. The specific new reaction to resource shortages that is then enabled is to place the session on hold such that the resources are freed, but so that the session state is maintained in the peers. This is preferable to dropping the session, as is generally the case in dynamic environments, if the likely period of resource loss is short and the session modifications require less overhead than restarting the session when the resources return after dropping the session.

Abstract: This document describes a way to extend Mobile IP Authentication Authorization and Accounting (AAA) signaling to enable a node to request from a network operator combinations of home and local service capabilities (when roaming) in an efficient and scalable manner. It also enables the home and foreign service providers to constrain and account for actual services provided based on a combination of the foreign and home operator policy.

Abstract: Extending Mobile IP to support both local and remote access by using two MIP client stacks in the end node, a roaming Node in the local access network, a standard Home Agent in the remote network. Messages between the AR and the MN, and between the internal modules of the MN, are then used to control hand-off for each MIP client and to enable backwards compatibility with legacy remote access clients.

Abstract: A way to deliver traffic to a mobile node that is undergoing a hand-off between two Access Routers (AR) is described. The method of the present invention operates to perform some or all of the following. Decrease, e.g., minimize, delays between the time the old link breaks and the first packet is sent from the new link. Reduce and/or eliminate packet bursts from old to new AR when an old (existing) link breaks. Ensure that packets are neither lost nor duplicated during hand-off. Maintain QoS control of delivery order to the MN. Make good or best use of multiple links during Make before break hand-off. Support both uplink and downlink traffic.

Abstract: Session signaling register message transmission methods and apparatus well suited for use in a communication system which supports mobile nodes capable of moving between domains and access nodes in a domain are described. Broadcasting of session signaling register messages is supported to reduce the number of registration messages which need to be transmitted between a mobile node and an access node. A paging and location server is used to reduce the number of session signaling register messages transmitted between domains. A visiting node registers with a paging and location server. The session signaling address of the paging and location server being used by a visiting mobile node is registered with the visiting node's home session signaling server. As the visiting node moves between access nodes in the visited domain the paging and location server it uses remains the same eliminating the need to update the home session signaling servers.

Abstract: Methods and apparatus for aggregating IP packets over an access link between a wireless access router and a core node and for managing resource allocation to access link packet aggregates, e.g., as a function of the status of wireless communications links used to couple mobile nodes to the access router are described. Improved aggregate resource control messages and use of such messages are described. Some of the new messages allow aggregate resources for both upstream and downstream aggregates to be controlled in a single message. A single message may include information corresponding to multiple aggregates and/or multiple constituent flows included in an aggregate with aggregate direction information being included. Use of tunnels to communicate management messages, e.g., messages used to control resource allocation to aggregates is also described. Propagation of access link aggregate information is communicated to tunnel end nodes which generate packets that are communicated over the access link.

Abstract: A method to deliver traffic to a mobile node that is undergoing a hand-off between two Access Routers (AR) is described. The method of the present invention operates to perform the following. Decrease or minimize, delays between the time the old link breaks and the first packet is sent from the new link. Reduce or eliminate packet bursts from old to new Access Router (AR) when an old (existing) link breaks. Ensure that packets are neither lost nor duplicated during hand-off. Maintain Quality of Service (QoS) control of delivery order to the Mobile Node (MN). Make best use of multiple links during Make before break hand-off. Support both uplink and downlink traffic.