Abstract: A portable boundary system (PBS), which is a complete pre-measured boundary-line system used for sport specific boundary lines/markings. Whether tennis, pickleball, basketball, badminton or other sports requiring boundary lines/markings, the PBS's of the present disclosure allow a single user to accurately set-up and define a sport's court/playing area. Assembly and disassembly of PBS's and “pop-up” nets takes a fraction of the overall time and cost of traditional court assembly methods. Since PBS's and “pop-up” nets are portable, they can be packaged efficiently and moved to varying locations. PBS's do not mark or mar gym floors, concrete, asphalt, grass or other hard or soft surfaces. PBS's are made from PVC/Vinyl and are durable and re-usable.

Abstract: Each application executing on an application server uses an extended version of the Berkeley Packet Filter (BPF) language to define an application-specific rule set. The application server also includes a Just-In-Time compiler to compile the BPF rule set. The compiled rule set is downloaded to a Packet Forwarding Entity (PFE) in the network, and used to control how the PFE steers data packets generated by the application through a communications network.

Abstract: A method performed in a network element of a provider edge network to determine a downlink service path for a downlink packet. The method includes preserving an indication of the downlink service path while processing an uplink packet that has been transmitted from a subscriber end station toward a provider end station. The method also includes receiving the downlink packet at a line card of the network element. The downlink packet has been transmitted from the provider end station toward the subscriber end station. The method further includes determining, at the line card, the downlink service path for the downlink packet by using the indication of the downlink service path that was preserved while processing the uplink packet. The downlink service path is operable to identify a plurality of services and an order in which the plurality of services are to be performed on the downlink packet.

Abstract: Embodiments of the disclosure provide systems and methods for identifying devices by a trusted service manager. According to one example embodiments of the disclosure, a method for identifying communications is provided. The method can include receiving, by a service provider from a device, a message comprising card production life cycle (CPLC) information associated with a secure element incorporated into the device; and evaluating, by the service provider, the received CPLC information in order to identify the secure element.

Abstract: A packet gateway (PGW) receives a plurality of IP packet fragments from a network. The IP packet fragments comprise a head fragment and one or more trailing fragments, and are associated with a first IP packet. As the fragments are received, a controller at the PGW classifies the fragments. The controller applies a same selected service treatment to the head fragment and to each of the trailing fragments based on the classification of the head fragment. The PGW then sends each treated packet fragment to an end user device.

Abstract: Embodiments of the disclosure can provide systems, methods, and apparatus for remote secure transactions. In one embodiment, a payment processing system can be provided, which can include a network interface communicating with a memory, the memory communicating with a processor for executing payments, and the processor, when executing a computer program, performing operations. The operations can include storing, by the processor and to a memory associated with the payment processing system, account information associated with the consumer mobile system, and receiving, by the processor and from a consumer mobile device, a request, wherein the request comprises an account identifier associated with the consumer mobile device. The operations can also include validating, by the processor and from a consumer mobile device, the consumer mobile device based at least in part on the account identifier, and sending, by the processor, payment processing data, based on the validation.

Abstract: A set of forwarding elements act as a gateway to a data network for a subscriber end station. A controller network element includes a control plane operable to communicate with the forwarding elements, which are operable to communicate with the subscriber end station. The controller network element includes a quota management module, which determines a quota amount to be assigned to the forwarding elements for a traffic flow. The quota management module assigns portions of the quota amount to the forwarding elements. The quota management module determines to change the distribution of an unconsumed quota amount amongst the forwarding elements for the traffic flow, determine the unconsumed quota amount, and determine and assign portions of the unconsumed quota amount to the forwarding elements.

Abstract: Embodiments of the invention can provide systems and methods for encrypting mobile device communications. According to one example embodiment of the invention, a method for encrypting mobile device communications is provided. The method can include generating, by a first application stored on a first memory of a mobile device, a message to be communicated to an intended recipient; providing, by the first application to an authentication application stored on a second memory of the mobile device, the message; encrypting, by the authentication application, the message; providing, by the authentication application to the first application, the encrypted message; and directing, by the first application, communication of the message to the intended recipient.

Abstract: A method and apparatus for brokering a transmission control protocol (TCP) session between two clients that are each situated behind a firewall that blocks incoming TCP session requests is described. Each of the two clients transmits a TCP session request to the other client in order to establish a TCP session between these clients. This brokering allows the two clients to establish the TCP session between the two clients.

Abstract: Methods and apparatus are disclosed for defining an optimized media path. In one exemplary method, a proxy session controller registers, for a plurality of realms, a plurality of Border Gateway Functions (BGFs) residing on a plurality of network nodes, with the registration including registering a preferred BGF colocated with a data network gateway on a single network node for a selected set of the realms. A request message is received from a user terminal, and if a realm associated with the request message is included in the selected set of realms, the controller assigns the preferred BGF to the user terminal to provide an optimized media path that includes the user terminal, the preferred BGF, and the data network gateway.

Abstract: Embodiments of the invention provide systems and methods for authenticating mobile devices. Device identifying information may be received for a mobile device. A base level key may also be communicated to the mobile device. The base level key may be utilized by the mobile device to derive unique transaction specific keys to encrypt subsequent communications output by the mobile device. A communication encrypted with a unique transaction specific key may be received from the mobile device. Based at least in part upon the device identifying information and the base level key, a derived key may be generated, and the derived key may be utilized to decrypt the received communication and authenticate the mobile device. In certain embodiments, the above operations may be performed by one or more computers associated with a service provider.

Abstract: A network element acts as a gateway to a data network for a subscriber end station. The network element includes control plane operable to communicate with a first network processing unit (NPU) and a second NPU, which are operable to communicate with the subscriber end station. The control plane includes a quota management module, which determines a quota amount to be assigned to the first NPU and the second NPU. The quota management module assigns a portion of the quota amount to the first NPU and another portion of the quota amount to the second NPU. The quota management module may determine to change the distribution of an unconsumed quota amount between the first NPU and the second NPU, determine the unconsumed quota amount, and assign a portion of the unconsumed quota amount to the first NPU and another portion of the unconsumed quota amount to the second NPU.

Abstract: Embodiments of the invention provide systems and methods for authenticating mobile devices. A registration request and identifying information for a mobile device or a secure element associated with the mobile device may be received. Based upon the received identifying information and a base level key, a rotated key for the mobile device may be determined. The determined rotated key may then be provided to the mobile device, and the rotated key may be utilized for subsequent authentication of the mobile device.

Abstract: Embodiments of the disclosure provide systems and methods for identifying devices by a trusted service manager. According to one example embodiments of the disclosure, a method for identifying communications is provided. The method can include receiving, by a service provider from a device, a message comprising card production life cycle (CPLC) information associated with a secure element incorporated into the device; and evaluating, by the service provider, the received CPLC information in order to identify the secure element.

Abstract: Embodiments of the invention provide systems and methods for identifying devices by a trusted service manager. According to one example embodiment of the invention, a method for identifying communications is provided. The method can include receiving, by a service provider from a device, a message comprising card production life cycle (CPLC) information associated with a secure element incorporated into the device; and evaluating, by the service provider, the received CPLC information in order to identify the secure element.

Abstract: A method performed in a network element of a provider edge network to determine a downlink service path for a downlink packet. The method includes preserving an indication of the downlink service path while processing an uplink packet that has been transmitted from a subscriber end station toward a provider end station. The method also includes receiving the downlink packet at a line card of the network element. The downlink packet has been transmitted from the provider end station toward the subscriber end station. The method further includes determining, at the line card, the downlink service path for the downlink packet by using the indication of the downlink service path that was preserved while processing the uplink packet. The downlink service path is operable to identify a plurality of services and an order in which the plurality of services are to be performed on the downlink packet.

Abstract: Methods and apparatus are disclosed for defining an optimized media path. In one exemplary method, a proxy session controller registers, for a plurality of realms, a plurality of Border Gateway Functions (BGFs) residing on a plurality of network nodes, with the registration including registering a preferred BGF colocated with a data network gateway on a single network node for a selected set of the realms. A request message is received from a user terminal, and if a realm associated with the request message is included in the selected set of realms, the controller assigns the preferred BGF to the user terminal to provide an optimized media path that includes the user terminal, the preferred BGF, and the data network gateway.

Abstract: A packet gateway (PGW) receives a plurality of IP packet fragments from a network. The IP packet fragments comprise a head fragment and one or more trailing fragments, and are associated with a first IP packet. As the fragments are received, a controller at the PGW classifies the fragments. The controller applies a same selected service treatment to the head fragment and to each of the trailing fragments based on the classification of the head fragment. The PGW then sends each treated packet fragment to an end user device.

Abstract: Each application executing on an application server uses an extended version of the Berkeley Packet Filter (BPF) language to define an application-specific rule set. The application server also includes a Just-In-Time compiler to compile the BPF rule set. The compiled rule set is downloaded to a Packet Forwarding Entity (PFE) in the network, and used to control how the PFE steers data packets generated by the application through a communications network.

Abstract: A network element acts as a gateway to a data network for a subscriber end station. The network element includes control plane operable to communicate with a first network processing unit (NPU) and a second NPU, which are operable to communicate with the subscriber end station. The control plane includes a quota management module, which determines a quota amount to be assigned to the first NPU and the second NPU. The quota management module assigns a portion of the quota amount to the first NPU and another portion of the quota amount to the second NPU. The quota management module may determine to change the distribution of an unconsumed quota amount between the first NPU and the second NPU, determine the unconsumed quota amount, and assign a portion of the unconsumed quota amount to the first NPU and another portion of the unconsumed quota amount to the second NPU.