Abstract: A computer-implemented method, system and computer program product for providing secure access to devices enabled for connectivity using access control are disclosed. The computer-implemented method for providing secure access to devices enabled for connectivity comprises dynamically associating each of the one or more devices to at least one user account; assigning an IP address to each of the one or more devices enabled for connectivity; dynamically generating at least one access-control list (ACL) for each of the one or more devices associated with the at least one user account; and restricting access only to the at least one user account via ACL generated for the one or more devices.

Abstract: A computer-implemented method, system and computer program product for buying and selling service for transferring a quantity of data using cellular network in a market allowing real-time pricing is disclosed. The computer-implemented method for buying and selling service for transferring a quantity of data using cellular network includes receiving and storing one or more offers to transfer a quantity of data using cellular service; receiving and processing one or more discovery requests to transfer a quantity of data using cellular service; matching at least one of the one or more discovery requests with at least one of the one or more stored offers; and facilitating buying and selling of the service to transfer a quantity of data.

Abstract: A computer-implemented method, system, and computer program product for providing distributed policy-based security for one or more devices enabled for connectivity over a communications network are disclosed. The computer-implemented method for providing distributed policy-based security for one or more devices enabled for connectivity over a communications network includes providing a policy enforcement agent for each of one or more devices enabled for connectivity; providing policy rules to the policy enforcement agent, wherein the policy rules comprise one or more of: traffic filter policy rules, network access policy rules, power management policy rules and application management policy rules; and managing policy-based security for the one or more devices by the policy enforcement agent by applying the provided policy rules immediately or based on the provided criteria evaluated on the device.

Abstract: A computer-implemented system and method for Over The Air delivery of firmware to devices enabled for connectivity using static and dynamic information about the devices are disclosed. The computer-implemented method for Over The Air delivery of firmware to devices enabled for connectivity using static and dynamic information about the devices comprises receiving static device information for the one or more devices; receiving dynamic device information for the one or more devices; dynamically grouping the one or more devices based on the static device information, the dynamic device information or the combination thereof; and dynamically scheduling Over The Air delivery of firmware using the grouping to the one or more devices enabled for connectivity.

Abstract: A computer-implemented method, system and computer program product for providing secure access to devices enabled for connectivity using access control are disclosed. The computer-implemented method for providing secure access to devices enabled for connectivity comprises dynamically associating each of the one or more devices to at least one user account; assigning an IP address to each of the one or more devices enabled for connectivity; dynamically generating at least one access-control list (ACL) for each of the one or more devices associated with the at least one user account; and restricting access only to the at least one user account via ACL generated for the one or more devices.

Abstract: Some embodiments are implemented in a communication system that includes a first wireless communication system and a second wireless communication system that includes a Femtocell access point (FAP) and a network controller that can communicatively couple the FAP to the first wireless communication system. In some embodiments, the network controller can communicatively couple to the first wireless communication system through a UTRAN Iu interface. In some embodiments, the FAP can communicatively couple to a user equipment using a short-range licensed wireless frequency. Some embodiments provide a method of performing a user equipment (UE) registration. The method establishes a unique connection dedicated to the UE between the FAP and the network controller. The method receives a register request message at the network controller from the FAP through the dedicated connection.

Abstract: Some embodiments are implemented in a communication system that includes a first wireless communication system and a second wireless communication system that includes a Femtocell access point (FAP) and a network controller that can communicatively couple the FAP to the first wireless communication system. In some embodiments, the network controller can communicatively couple to the first wireless communication system through a UTRAN Iu interface. Some embodiments provide a resource management method that determines that a user equipment (UE) has roved in a region serviced by the FAP. The FAP includes a generic access resource control (GA-RC) protocol sub-layer. The method creates a separate GA-RC state dedicated to the UE in the GA-RC protocol sub-layer. The method also sets the GA-RC state dedicated to the UE to a deregistered state to indicate that the UE is not registered to use the services of the second wireless communication system.

Abstract: Some embodiments are implemented in a communication system that includes a first wireless communication system and a second wireless communication system that includes a Femtocell access point (FAP) and a network controller that can communicatively couple the FAP to the first wireless communication system. In some embodiments, the network controller can communicatively couple to the first wireless communication system through a UTRAN Iu interface. In some embodiments, the FAP can communicatively couple to a user equipment using a short-range licensed wireless frequency. Some embodiments provide method of securing communication between the FAP and the network controller. The method establishes a secure tunnel between the FAP and the network controller. The method communicatively couples the FAP and several user equipments (UEs) to the network controller by using the secure tunnel. The UEs are communicatively coupled to the FAP through an air interface.

Abstract: Some embodiments are implemented in a communication system that includes a first communication system comprised of a licensed wireless radio access network and a core network, and a second communication system comprising a plurality of user hosted access points and a network controller. In some embodiments, each access point operates using short range licensed wireless frequencies to establish a service region. In some embodiments, the network controller communicatively couples the core network to the plurality of access points. The method enables an unauthorized user equipment to call from an access point it is not allowed to use for emergency purposes. The method receives at an access point a service request from an unauthorized user equipment with an establishment cause of emergency call. The method sends a registration request to the network controller. The method sends a message to the core network indicating the location of the user equipment.

Abstract: Some embodiments are implemented in a communication system that includes a first wireless communication system that includes a Femtocell access point (FAP) and a network controller that can communicatively couple the FAP to a second wireless communication system. In some embodiments, the network controller can communicatively couple to the second wireless communication system through a UTRAN Iu interface. In some embodiments, the FAP can communicatively couple to a user equipment using a short-range licensed wireless frequency. Some embodiments provide method that determines whether a user equipment (UE) has roved-out of the first wireless communication system. The method receives a periodic message at the FAP from the UE. When the FAP fails to receive a pre-determined number of the periodic messages, the method sends a deregister message to the network controller over a unique connection dedicated to the UE and releases the dedicated connection.

Abstract: Some embodiments of the invention provide a communication system that includes a first communication network, a second communication network, and a core network. The second communication network includes a network controller and a group of two or more access areas that are communicatively coupled to the core network by the network controller. Some embodiments service the second network access areas by providing access area identifiers to each access area while communicating with the first network or core network using a single are identifier assigned to the network controller. Some embodiments provide access control by sending a series of invalid messages to a user equipment (UE) that is not authorized to access services of the second network to reject the UE. Some embodiments reject the UE by sending a message to ban a UE from an access area with a particular access area identifier.

Abstract: Some embodiments provide a method of registering a user equipment (UE) in a communication system that includes a licensed wireless communication system and a generic access network (GAN) that has a generic access network controller (GANC). The method sends a register request message from the UE to the GANC that indicates a GAN mode capability of A/Gb only for the UE. When the GANC has a GAN mode capability of A/Gb, the GANC registers the UE with the GAN. When the GANC has a GAN mode capability of Iu only, the GANC rejects the register request message. When the GANC has a GAN mode capability of both A/Gb and Iu, the GANC registers the UE based on a set of GANC mode selection rules that the GANC applies for registering UEs with the GAN.

Abstract: A method of preventing theft of service in a communication system that includes a first wireless communication system and a second wireless communication system that includes a Femtocell access point (FAP) and a network controller that can communicatively couple the FAP to the first wireless communication system. The method creates an authorized session that includes a session identify for a first user equipment (UE). The UE is recognized by the first communication as an authorized UE to use the FAP. The method rejects a request by the FAP to register a second UE when the identity of the second UE does not match any identity in the set of first UE identities. The rejected request includes the session identity of the authorized session and the identity of the second UE. The second UE is not recognized by the first communication system as an authorized UE to use the FAP.

Abstract: Some embodiments provide a method of activating a packet transport channel (PTC) in a communication system that includes a first licensed wireless communication system and a second generic access network (GAN) that has a generic access network controller (GANC). The GANC is communicatively coupled to the first communication system through a universal mobile telecommunication system (UMTS) terrestrial radio access network (UTRAN) Iu interface. The method sends a GA-PSR activate PTC request message from the GANC to a user equipment (UE). The message comprises a terminal endpoint identifier (TEID) that the GANC assigns to the UE. The message also receives a GA-PSR activate PTC acknowledge message from the UE at the GANC.

Abstract: Some embodiments provide a communication system that includes a first licensed wireless communication system, a second generic access network (GAN) that includes a generic access network controller (GANC). The GANC is communicatively coupled to the first communication system through a universal mobile telecommunication system (UMTS) terrestrial radio access network (UTRAN) Iu interface. The communication system also includes a user equipment (UE). The GANC includes a UDP protocol layer and a GTP-U protocol layer over the UDP protocol layer of the GANC. The UE includes a UDP protocol layer and a GTP-U protocol layer over said UDP protocol layer of the UE. The UDP protocol layer of the GANC is communicatively coupled to the UDP protocol layer of the UE. The GTP-U protocol layer of the GANC is communicatively coupled to the GTP-U protocol layer of the UE.

Abstract: A method of handing over in a communication system that includes a first wireless communications system that has a core network and a second wireless communications system that includes several short range access points using licensed wireless frequencies and a network controller for communicatively coupling a user equipment to the core network. The method receives a relocation required message when a first access point determines to handover the UE to a second access point. The UE has at least one ongoing session with the core network through the first access point, the relocation required message includes a domain identifier for the session. The method sends a relocation request message including the domain identifier to the second access point. The method sends a relocation command message to the first access point for sending to the UE to handover from the first access point to the second access point.

Abstract: A method of distributing user equipment identifiers in a communication system that includes a first wireless communications system that has a core network and a second wireless communications system that includes several short range access points using licensed wireless frequencies and a network controller for communicatively coupling a user equipment to the core network. The method sends a temporary identifier of the UE that is allocated by the core network to a first access point. The UE is registered on the first access point. The method receives a register update message from the first access point. The register update message includes a permanent identifier of the UE, a previous temporary identifier of the UE, and the temporary identifier. The method sends a register update message from the network controller to a second access point to cause the second access point to update the previous temporary identifier with the temporary identifier.

Abstract: A method of managing user equipment (UE) identifiers in a communication system that includes a first wireless communications system that has a core network and a second wireless communications system that includes several short range access points using licensed wireless frequencies and a network controller for communicatively coupling a user equipment to the core network. The method receives a radio resource control (RRC) connection request message from the UE. The method allocates a first identifier to the UE. The method sends an RRC connection setup message that includes the first identifier from the access point to the UE. The method sends a connection management services request message and the first identifier. The network controller determines the first identifier is in use. The method sends a mobility info message that includes a second identifier which is different than the first identifier from the access point to the UE.

Abstract: A method of cell updating system that includes a first wireless communications system that has a core network and a second wireless communications system that includes several short range access points using licensed wireless frequencies and a network controller for communicatively coupling a user equipment to the core network. The UE has one or more active sessions on a first access point. There is no dedicated radio channel between the ULE and the first access point. The method receives a cell update message from the UE. The method sends a cell update request message from the second access point to the network controller. The cell update request message is for sending from the network controller to the first access point to request information for handling the cell update message received by the second access point. The method receives a cell update response message from the network controller.

Abstract: A method of handing over in a communication system that includes a first wireless communications system that has a core network and a second wireless communications system that includes several short range access points using licensed wireless frequencies and a network controller for communicatively coupling a user equipment to the core network. The method determines, by a first access point, to handover the UE to a second access point. The UE has at least one ongoing session with the core network through the first access point. The method sends a relocation required message to the network controller. The relocation required message includes a domain identifier for said message. The method receives a relocation request message from the network controller. The method receives a relocation command message from the network controller for causing the UE to handover from the first access point to the second access point.