Abstract: In some embodiments, a method assigns an assigned user location to a device identifier of a device of a user and receives a time series of measurements of a signal associated with the device identifier. Each measurement is between the device and a set of spatially disposed radio monitors. The method filters one or more measurements from the time series of measurements based on a characteristic to generate a set of measurements. The set of measurements is associated with the assigned user location. Different sets of measurements are associated with different assigned user locations for use in location tracking of a subject client.

Abstract: In some embodiments, a method assigns an assigned user location to a device identifier of a device of a user and receives a time series of measurements of a signal associated with the device identifier. Each measurement is between the device and a set of spatially disposed radio monitors. The method filters one or more measurements from the time series of measurements based on a characteristic to generate a set of measurements. The set of measurements is associated with the assigned user location. Different sets of measurements are associated with different assigned user locations for use in location tracking of a subject client.

Abstract: In some embodiments, a method assigns an assigned user location to a device identifier of a device of a user and receives a time series of measurements of a signal associated with the device identifier. Each measurement is between the device and a set of spatially disposed radio monitors. The method filters one or more measurements from the time series of measurements based on a characteristic to generate a set of measurements. The set of measurements is associated with the assigned user location. Different sets of measurements are associated with different assigned user locations for use in location tracking of a subject client.

Abstract: Security monitoring for wireless sensor nodes. Specifically, the method and wireless sensor network disclosed herein entail the retrieval and analysis of log information immutably consolidated in one or more wireless sensor nodes, to detect intrusions (i.e., attacks) on the wireless sensor node(s) by unauthorized entities. The log information in any given wireless sensor node may record events, pertaining to pairing activities, connection activities, and/or data transfer activities, between the given wireless sensor node and other devices (including both authorized devices and unauthorized devices (if any)). Further, upon detection of an intrusion based on the analysis of log information, one or more actions designed to reactively address the intrusion may be performed. Moreover, a proactive approach for preventing the phishing of static passcodes used in the pairing authentication process across Bluetooth and/or Bluetooth Low Energy (BLE) wireless communications is proposed.

Abstract: A method for smart mobile devices monitoring in wireless local area networks. The method includes installing a wireless security monitoring system or a wireless access system in a local area network. The method includes configuring the wireless security monitoring system or the wireless access system to communicate with a mobile device management (MDM) system. The method includes detecting a wireless client connecting to the wireless local area network and identifying the wireless client to be a smart mobile device. Moreover, the method includes receiving an indication at the wireless security monitoring system or the wireless access system from the MDM system regarding whether the wireless client is a managed device or not. The method also includes classifying the wireless client as approved or unapproved smart mobile device based at least upon the indication received from the MDM system.

Abstract: A method for smart mobile devices monitoring in wireless local area networks. The method includes installing a wireless security monitoring system or a wireless access system in a local area network. The method includes configuring the wireless security monitoring system or the wireless access system to communicate with a mobile device management (MDM) system. The method includes detecting a wireless client connecting to the wireless local area network and identifying the wireless client to be a smart mobile device. Moreover, the method includes receiving an indication at the wireless security monitoring system or the wireless access system from the MDM system regarding whether the wireless client is a managed device or not. The method also includes classifying the wireless client as approved or unapproved smart mobile device based at least upon the indication received from the MDM system.

Abstract: Service provisioning in mobile terminals is provided through registering and transferring of application context, which permits substantially seamless transfer of application functionality across administrative service domains. An architecture for providing application context transfer may include access routers, transcoder proxy servers, and gateway routers. A mobile terminal served by a current access router creates an application context for a session and registers it with the current access router. Around the time of handoff, the current access router transfers the application context to a new access router associated with a new administrative domain and a new access network. The new access router evaluates the application context and takes steps to provide application functionality for the mobile terminal and current sessions.

Abstract: A method for monitoring a selected region of an airspace associated with local area networks of computing devices is provided. The method includes providing one or more segments of a legacy local area network to be protected in a selected geographic region. The legacy local area network is characterized by an unsecured airspace within the selected geographic region. The method includes determining a security policy associated with the one or more segments of the legacy local area network. The security policy at least characterizes a type of wireless activity in the unsecured airspace to be permitted, denied, or ignored. Additionally, the method includes connecting one or more sniffer devices into the legacy local area network. The one or more sniffer devices are spatially disposed within the selected geographic region to cause at least a portion of the unsecured airspace to be secured according to the security policy.

Abstract: A system and method is provided for detecting wireless access devices coupled to local area network of computers. The method includes coupling a sniffer device to a local area network. The method includes transferring one or more packets to be directed to a selected device over the local area network. The selected device is preferably coupled to the local area network. The method includes intercepting the one or more packets to be directed to the selected device at the sniffer device. Moreover, the method includes deriving information from the intercepted one or more packets using the sniffer device. The method can generate one or more marker packets in a selected format using the sniffer device. The marker packets are provided based upon at least a portion of the information derived from the intercepted packets.

Abstract: Disclosed are a method and a system that operates in accordance with the method to set up a TCP session between a MS and an end point destination via a wireless network and the Internet. The method includes sending a split TCP connection request from the MS to a PEP located in the network, where the split TCP request includes information for identifying a network address of the MS and a network address of the end point destination. The method further includes, in response to receiving the split TCP connection request from the MS, establishing a split TCP connection that includes a wireless TCP (WTCP) connection between the MS and the PEP, and a TCP connection at least part way between the PEP and the end point destination. In one embodiment the end point destination is an application server that is coupled to the Internet, and the TCP connection is established between the PEP and the application server.

Abstract: A system and method is provided for detecting wireless access devices coupled to local area network of computers. The method includes coupling a sniffer device to a local area network. The method includes transferring one or more packets to be directed to a selected device over the local area network. The selected device is preferably coupled to the local area network. The method includes intercepting the one or more packets to be directed to the selected device at the sniffer device. Moreover, the method includes deriving information from the intercepted one or more packets using the sniffer device. The method can generate one or more marker packets in a selected format using the sniffer device. The marker packets are provided based upon at least a portion of the information derived from the intercepted packets.

Abstract: A system and method is provided for detecting wireless access devices coupled to local area network of computers. The method includes coupling a sniffer device to a local area network. The method includes transferring one or more packets to be directed to a selected device over the local area network. The selected device is preferably coupled to the local area network. The method includes intercepting the one or more packets to be directed to the selected device at the sniffer device. Moreover, the method includes deriving information from the intercepted one or more packets using the sniffer device. The method can generate one or more marker packets in a selected format using the sniffer device. The marker packets are provided based upon at least a portion of the information derived from the intercepted packets.

Abstract: A method, system and computer program are disclosed to perform a low latency inter-technology handoff of a MN from a WLAN to a cellular network. The method includes transmitting a Bearer Context from the MN for use by the cellular network, the Bearer Context containing information required to establish access network bearers in the cellular network for an ongoing Internet session of the MN; and responding to the Bearer Context with a Router Advertisement that is forwarded to the MN. The Bearer Context may be piggybacked on another message, or it may be sent as a separate message. The Bearer Context includes information expressive of: (a) a QoS requirement of an ongoing application or applications of the MN; (b) a unique identity of the MN that is recognizable by the cellular network; (c) parameters to facilitate the creation of a Point-to-Point Protocol state in the cellular network; and (d) parameters to enable establishment of packet filters in the cellular network.

Abstract: This invention provides a messaging interface between a Mobile Node (MN) and an Access Router (AR) that enables the registration of MN preferences with a current AR (AR_current) and, when appropriate, the notification of the MN of the discovery of an AR in the proximity of AR_current that matches MN-specified preference criteria. The notifying AR_current may be the one that the MN originally registered its preferences with, or it could be another AR that, due to movement by the MN, has assumed the role of AR_current. In this case the MN preference data set to be transferred from one AR to another in response to the movement of the MN. The presently preferred messaging interface has two main modes of operation. In a first mode of operation, a “Query” mode, the MN explicitly queries AR_current for information descriptive of the capabilities of nearby ARs. AR_current responds to the MN query after examining the information stored in its PNL.

Abstract: A method for monitoring a selected region of an airspace associated with local area networks of computing devices is provided. The method includes providing one or more segments of a legacy local area network to be protected in a selected geographic region. The legacy local area network is characterized by an unsecured airspace within the selected geographic region. The method includes determining a security policy associated with the one or more segments of the legacy local area network. The security policy at least characterizes a type of wireless activity in the unsecured airspace to be permitted, denied, or ignored. Additionally, the method includes connecting one or more sniffer devices into the legacy local area network. The one or more sniffer devices are spatially disposed within the selected geographic region to cause at least a portion of the unsecured airspace to be secured according to the security policy.

Abstract: A method and system is disclosed to provide a personalized, location related service to a user of a mobile terminal. The method includes: (A) generating a service specification object that comprises a user-specified location and a message to be generated when the user arrives at the location with the MT; and (B) storing the service specification object for later use. The method further entails: (C) tracking the location of the mobile terminal; and when the location of the mobile terminal matches the location in the stored service creation object, (D) generating the message for activating a user-specified action.

Abstract: A method for monitoring a selected region of an airspace associated with local area networks of computing devices is provided. The method includes providing one or more segments of a legacy local area network to be protected in a selected geographic region. The legacy local area network is characterized by an unsecured airspace within the selected geographic region. The method includes determining a security policy associated with the one or more segments of the legacy local area network. The security policy at least characterizes a type of wireless activity in the unsecured airspace to be permitted, denied, or ignored. Additionally, the method includes connecting one or more sniffer devices into the legacy local area network. The one or more sniffer devices are spatially disposed within the selected geographic region to cause at least a portion of the unsecured airspace to be secured according to the security policy.

Abstract: Apparatus, and an associated method, for facilitating implementation of a location service in a radio communication system. When a location service is initiated, a network-based entity is alerted to the service initiation. The network-based entity generates a message to inquire of network-based information that facilitates the location determination of the mobile station pursuant to the location service. When the information is obtained, the information is forwarded to the mobile station. The information is used at the mobile station to facilitate the effectuation of the location service.

Abstract: A method for monitoring a selected region of an airspace associated with local area networks of computing devices is provided. The method includes providing one or more segments of a legacy local area network to be protected in a selected geographic region. The legacy local area network is characterized by an unsecured airspace within the selected geographic region. The method includes determining a security policy associated with the one or more segments of the legacy local area network. The security policy at least characterizes a type of wireless activity in the unsecured airspace to be permitted, denied, or ignored. Additionally, the method includes connecting one or more sniffer devices into the legacy local area network. The one or more sniffer devices are spatially disposed within the selected geographic region to cause at least a portion of the unsecured airspace to be secured according to the security policy.

Abstract: According to an embodiment of the present invention, security exposure analysis of wireless network within a selected local geographic area is provided. A computer model of the selected local geographic region comprising a layout is generated. Information regarding wireless network components is provided to the computer model. Using the computer model, signal intensity characteristics of at least one of the wireless network components are determined over at least a portion of the selected geographic region. Based at least on the signal intensity characteristics, security exposure information associated with the wireless network is determined. The security exposure information is graphically displayed on the computer screen in relation to the layout of the selected geographic region. The security exposure information includes sniffer detection and prevention coverage, access point vulnerability regions, and signal uncertainty and variability views.