Abstract: The present invention describes a novel security model in which security context is pre-negotiated and is used at future instances to secure messaging between nodes involved in sending and receiving data during the execution of the protocol. This anticipatory pre-negotiation of security context avoids expensive handshakes to establish security contexts that occur at future instances to secure sessions during the execution of the protocol.

Abstract: A method and system for routing messages between hosts while maintaining end-to-end location privacy are disclosed. In order to make routing more efficient, while maintaining location privacy, an encapsulation cache may be created in access routers that have a trust relationship with the respective home networks of the hosts. The encapsulation cache can be used to store home-address to care-of-address correspondences so that the access router, when a host is roaming, can route a message directly to the message's intended recipient, yet still maintain location privacy for the sending host by replacing the host's care-of address at the roaming network with the host's home address.

Abstract: Apparatus, and an associated method, for facilitating performance of location services for a mobile station that roams beyond its home network. A cache is provided at the mobile station. The cache is populated with a value identifying the address of the serving position server. When a location service is requested, the cache is accessed, and a message is sent to the address identified in the cache. The cache is updatable, such as through the generation and forwarding of a message to the mobile station by the home position server responsive to registration of the mobile station.

Abstract: A method for ensuring continuity of a communication session when a user equipment hands over from a first communication network to a second cellular communication network is provided. The method, in one embodiment, includes the steps of performing an authentication procedure for a packet data session with the second network while still being attached to the first network and simultaneously performing a packet data session establishment procedure with the second network while still being attached to the first network.

Abstract: A method and system for transferring contexts from a previous access router (PR) to a new access router (NR) that is subsequently associated with a Mobile Node (MN). For example, transferred contexts may include, but are not limited to, Security, Quality of Service (QOS), Header Compression, and Buffers. A context is transferred from the PR to the NR. Any change in an element of the context is conveyed by the NR to the MN in a secure fashion, even though a Security Association does not yet exist between the NR and MN. The NR provides an authenticated security context update to the MN, e.g., advising when the type of encryption has changed from Triple Data Encryption Standard (DES) to DES. The NR utilizes the Security Association between the PR and the MN, to provide such an authenticated security context update to the MN over a RAN or a wireless LAN.

Abstract: Systems and methods for recovering and managing location information in mobile communication networks using a fast recovery protocol and load balanced query and update processes. According to the fast recovery protocol, if a location update processor does not receive a message from a global database server acknowledging receipt by the global database server of a location update message after a predetermined retry interval has elapsed since the location update message was sent by the location update processor, the location update processor sends a location update retry message after each predetermined retry interval elapses until the location update processor receives an acknowledgement message from the global database server. The global database server can use the location update retry messages and the predetermined retry interval to recover from a database or link failure. The recovery period using the fast recovery protocol is bounded by the predetermined retry interval.

Abstract: A method and system reduces denial-of-service attacks malicious mobile nodes in a mobile IP environment. The method and system includes maintaining, by each of a plurality of access routers within the mobile IP environment, a cache of neighboring access routers as candidates and their associated access points. The caches are populated in response to actions initiated by mobile nodes. Each cache entry is tagged with the identity of the action initiating mobile node. The identity is based on information that is verifiable by the access routers and which cannot be modified arbitrarily by the mobile node. The total number of entries that can be tagged and thus introduced into a cache by any given node is limited.

Abstract: A method and system for routing messages between hosts while maintaining end-to-end location privacy are disclosed. In order to make routing more efficient, while maintaining location privacy, an encapsulation cache may be created in access routers that have a trust relationship with the respective home networks of the hosts. The encapsulation cache can be used to store home-address to care-of-address correspondences so that the access router, when a host is roaming, can route a message directly to the message's intended recipient, yet still maintain location privacy for the sending host by replacing the host's care-of address at the roaming network with the host's home address.

Abstract: A solution for supporting relocation of an IP session of a mobile node during a network layer handover in a mobile communication system. In the method, from the application context information on the mobile node is detected a first set of capabilities of a network node that that facilitate maintaining the IP session. This first set of capabilities is queried from one or more potential next network node. Applicability of the potential next network node to the relocation of the IP session is determined by the capability information on the first set of capabilities.

Abstract: A method and system for transferring contexts from a previous access router (PR) to a new access router (NR) that is subsequently associated with a Mobile Node (MN). For example, transferred contexts may include, but are not limited to, Security, Quality of Service (QOS), Header Compression, and Buffers. A context is transferred from the PR to the NR. Any change in an element of the context is conveyed by the NR to the MN in a secure fashion, even though a Security Association does not yet exist between the NR and MN. The NR provides an authenticated security context update to the MN, e.g., advising when the type of encryption has changed from Triple Data Encryption Standard (DES) to DES. The NR utilizes the Security Association between the PR and the MN, to provide such an authenticated security context update to the MN over a RAN or a wireless LAN.