Abstract: Embodiments for network virtualization of user equipment (UE) in a wireless communication network. A trigger may be received from a user equipment (UE) indicating potential UE mobility away from a remote virtual machine (VM) instance on a host server collocated on an eNodeB in the wireless communication network. One or more identifiers (ID) of one or more potential host servers collocated on one or more alternative eNodeBs may be determined for receiving the UE. VM replication may be provided to the one or more potential host servers to enable continuation of the remote VM instance.

Abstract: Embodiments for network virtualization of user equipment (UE) in a wireless communication network. A trigger may be received from a user equipment (UE) indicating potential UE mobility away from a remote virtual machine (VM) instance on a host server collocated on an eNodeB in the wireless communication network. One or more identifiers (ID) of one or more potential host servers collocated on one or more alternative eNodeBs may be determined for receiving the UE. VM replication may be provided to the one or more potential host servers to enable continuation of the remote VM instance.

Abstract: Secure virtualizing of a mobile cellular device uses a cellular communication network having base transceiver station edge node servers. A virtualized-instance host server contains a virtualized instance of an enterprise environment. Base station controllers are in communication with and control the base transceiver stations. A mobile switching center in communication with the base station controllers contains the virtualized-instance host server. A cellular communication device is in communication with an edge node server, and an auxiliary data display entry device is in communication with the cellular communication device such that the virtualized instance of the enterprise environment is on the edge node server. Communications between the auxiliary display and data entry device are encrypted.

Abstract: A processor-implemented method, apparatus, and/or computer program product move Open Systems Interconnection (OSI) layer 4 connections between wirelessly-connected user equipment to a series of cell-towers, wherein an OSI layer 4 connection is extracted out of the underlying cellular protocols at the series of cell-towers. A detection is made that user equipment, which has a broken-out layer 4 connection, has moved from a first cell-tower to a second cell-tower. Traffic for an existing layer 4 connection from the user equipment is tunnelled between the first cell-tower and the second cell-tower. In response to a predetermined trigger event occurring, an ongoing bidirectional flow of data packets is migrated from the user equipment over to layer 4 connections maintained at the second cell-tower. Furthermore, OSI layer 4 connections for all server ports other than the proxied active layer 4 connections that are proxied in the web cache are byte cached.

Abstract: A processor-implemented method, apparatus, and/or computer program product move Open Systems Interconnection (OSI) layer 4 connections between wirelessly-connected user equipment to a series of cell-towers, wherein an OSI layer 4 connection is extracted out of the underlying cellular protocols at the series of cell-towers. A detection is made that user equipment, which has a broken-out layer 4 connection, has moved from a first cell-tower to a second cell-tower. Traffic for an existing layer 4 connection from the user equipment is tunnelled between the first cell-tower and the second cell-tower. In response to a predetermined trigger event occurring, an ongoing bidirectional flow of data packets is migrated from the user equipment over to layer 4 connections maintained at the second cell-tower. Furthermore, OSI layer 4 connections for all server ports other than the proxied active layer 4 connections that are proxied in the web cache are byte cached.

Abstract: A processor-implemented method, apparatus, and/or computer program product move Open Systems Interconnection (OSI) layer 4 connections between wirelessly-connected user equipment to a series of cell-towers, wherein an OSI layer 4 connection is extracted out of the underlying cellular protocols at the series of cell-towers. A detection is made that user equipment, which has a broken-out layer 4 connection, has moved from a first cell-tower to a second cell-tower. Traffic for an existing layer 4 connection from the user equipment is tunnelled between the first cell-tower and the second cell-tower. A predetermined trigger event is identified. In response to the predetermined trigger event occurring, an ongoing bidirectional flow of data packets is migrated from the user equipment over to layer 4 connections maintained at the second cell-tower.

Abstract: Secure virtualizing of a mobile cellular device uses a cellular communication network having base transceiver station edge node servers. A virtualized-instance host server contains a virtualized instance of an enterprise environment. Base station controllers are in communication with and control the base transceiver stations. A mobile switching center in communication with the base station controllers contains the virtualized-instance host server. A cellular communication device is in communication with an edge node server, and an auxiliary data display entry device is in communication with the cellular communication device such that the virtualized instance of the enterprise environment is on the edge node server. Communications between the auxiliary display and data entry device are encrypted.

Abstract: Secure virtualizing of a mobile cellular device uses a cellular communication network having base transceiver station edge node servers. A virtualized-instance host server contains a virtualized instance of an enterprise environment. Base station controllers are in communication with and control the base transceiver stations. A mobile switching center in communication with the base station controllers contains the virtualized-instance host server. A cellular communication device is in communication with an edge node server, and an auxiliary data display entry device is in communication with the cellular communication device such that the virtualized instance of the enterprise environment is on the edge node server. Communications between the auxiliary display and data entry device are encrypted.

Abstract: Methods and apparatus are provided for recovering from packet loss in an end-to-end network connection having at least one wireless segment. A packet on a wireless segment of an end-to-end network connection is processed by determining whether the packet comprises one or more of a lost packet and a malformed packet; and generating a modified packet for an application associated with the packet to replace one or more of the lost packet and the malformed packet if the application is substantially tolerant to one or more of lost and malformed data. The modified packet comprises, for example, a non-original packet and/or a corrected packet. Link layer information or information from a deep packet inspection can be used to determine whether the packet comprises a lost packet or a malformed packet.

Abstract: Methods and apparatus are provided for recovering from packet loss in an end-to-end network connection having at least one wireless segment. A packet on a wireless segment of an end-to-end network connection is processed by determining whether the packet comprises one or more of a lost packet and a malformed packet; and generating a modified packet for an application associated with the packet to replace one or more of the lost packet and the malformed packet if the application is substantially tolerant to one or more of lost and malformed data. The modified packet comprises, for example, a non-original packet and/or a corrected packet. Link layer information or information from a deep packet inspection can be used to determine whether the packet comprises a lost packet or a malformed packet.

Abstract: Embodiments of the present invention provide a method, system and computer program product for split transport control protocol (TCP) flow control management in a cellular broadband network. In an embodiment of the invention, a method for split TCP flow control management in a cellular broadband network is provided. The method includes first determining a context for a packet received as part of a data flow in a base station of a cellular broadband network and then selecting either an end-to-end TCP connection or a split TCP connection to support the data flow. Thereafter, the data flow is routed using the selected connection.

Abstract: Mobile network services are performed in a mobile data network in a way that is transparent to most of the existing equipment in the mobile data network. The mobile data network includes a radio access network and a core network. A first service mechanism in the radio access network breaks out data coming from a basestation, and performs one or more mobile network services at the edge of the mobile data network based on the broken out data. These services may include caching of data, data or video compression techniques, push-based services, charging, application serving, analytics, security, data filtering, and new revenue-producing services, as well as others. This architecture allows performing new mobile network services at the edge of a mobile data network within the infrastructure of an existing mobile data network.

Abstract: Secure virtualizing of a mobile cellular device uses a cellular communication network having base transceiver station edge node servers. A virtualized-instance host server contains a virtualized instance of an enterprise environment. Base station controllers are in communication with and control the base transceiver stations. A mobile switching center in communication with the base station controllers contains the virtualized-instance host server. A cellular communication device is in communication with an edge node server, and an auxiliary data display entry device is in communication with the cellular communication device such that the virtualized instance of the enterprise environment is on the edge node server. Communications between the auxiliary display and data entry device are encrypted.

Abstract: Mobile network services are performed in a mobile data network in a way that is transparent to most of the existing equipment in the mobile data network. The mobile data network includes a radio access network and a core network. A first service mechanism in the radio access network breaks out data coming from a basestation, and performs one or more mobile network services based on the broken out data. A second service mechanism in the core network performs one or more mobile network services based on the network traffic remaining after the first service mechanism performs its breakout. An optional third service mechanism coupled to the core network provides one or more mobile network services in the mobile data network. An overlay network allows the first, second and third service mechanisms to communicate with each other. The overlay network is preferably a private virtual network.

Abstract: Mobile network services are performed in a mobile data network in a way that is transparent to most of the existing equipment in the mobile data network. The mobile data network includes a radio access network and a core network. A first service mechanism in the radio access network breaks out data coming from a basestation, and performs one or more mobile network services at the edge of the mobile data network based on the broken out data. These services may include caching of data, data or video compression techniques, push-based services, charging, application serving, analytics, security, data filtering, and new revenue-producing services, as well as others. This architecture allows performing new mobile network services at the edge of a mobile data network within the infrastructure of an existing mobile data network.

Abstract: A method and system supports subscriber based IP data breakout at the edge of a mobile data network without monitoring the use of security keys or breaking into ciphered message exchanges. The system employs a first service mechanism operating at the edge of the mobile data network a second service mechanism operating at the core on the S11 interface. The second service mechanism at the core collects subscriber related data, subscriber identifiers and tunnel identifiers and sends this data to the first service mechanism. The second service mechanism at the core collects subscriber related data, subscriber identifiers and tunnel identifiers and sends this data to the first service mechanism. The first service mechanism uses the tunnel identifiers received from the second service mechanism to identify sessions and tunnels carrying subscriber dependent data packets (S1-U packets) in order to perform subscriber-based IP data breakout, offloading and optimization.

Abstract: A mobility event is supported on a flat or next generation mobile data networks with data breakout or offload at the edge of the mobile data network. Packet data is buffered while a complete set of the PDP context information is transferred from the source eNodeB to the target eNodeB and the mobile core network is updated with the information about the handover in a timely manner to prevent packet loss and thus provide a seamless user experience. The breakout system supports the PDP context transfer by shifting the end point of the TCP communication from the local breakout entity (MIOP@eNodeB) to the core breakout entity (MIOP@GW), transferring the TCP connection to the core breakout entity, and supporting the network initiated control flows in a way that is seamless from the perspective of the UE and the core network.

Abstract: A mobility event is supported on a flat or next generation mobile data networks with data breakout or offload at the edge of the mobile data network. Packet data is buffered while a complete set of the PDP context information is transferred from the source eNodeB to the target eNodeB and the mobile core network is updated with the information about the handover in a timely manner to prevent packet loss and thus provide a seamless user experience. The breakout system supports the PDP context transfer by shifting the end point of the TCP communication from the local breakout entity (MIOP@eNodeB) to the core breakout entity (MIOP@GW), transferring the TCP connection to the core breakout entity, and supporting the network initiated control flows in a way that is seamless from the perspective of the UE and the core network.

Abstract: Mobile network services are performed at the edge in a flat mobile data network in a way that is transparent to most of the existing equipment in the mobile data network to reduce the load and increase efficiency on the mobile data network by breaking out data at the edge based on specific IP data flows. The mobile data network includes a radio access network and a core network. A first service mechanism in the radio access network breaks out data coming from a basestation based on breakout conditions, and performs one or more mobile network services. The second service mechanism determines what traffic satisfies breakout authorization criteria and informs the first service mechanism. The message from the second service mechanism triggers the first service mechanism to perform IP flow based breakout. An overlay network allows the first and second mechanisms to communicate with each other.

Abstract: Mobile network services are performed at the edge in a flat mobile data network in a way that is transparent to most of the existing equipment in the mobile data network to reduce the load and increase efficiency on the mobile data network by breaking out data at the edge based on specific IP data flows. The mobile data network includes a radio access network and a core network. A first service mechanism in the radio access network breaks out data coming from a basestation based on breakout conditions, and performs one or more mobile network services. The second service mechanism determines what traffic satisfies breakout authorization criteria and informs the first service mechanism. The message from the second service mechanism triggers the first service mechanism to perform IP flow based breakout. An overlay network allows the first and second mechanisms to communicate with each other.