Abstract: The present invention relates to mobile data communications in general, and more specifically, the present invention describes a route optimization technique requiring no awareness of the Mobile IP protocol by a Correspondent Node when forwarding traffic using the shortest path between a Mobile Node and the Correspondent Node in a visiting domain. The invention describes the management of route entries, network address translations and firewall filters in order to provide a secure, yet, flexible deployment of Mobile IP route optimization. Specific considerations are described for the case of separate Foreign Agent and co-located care-of address respectively.

Abstract: The present invention describes a network-based mobile workgroup system allowing a selected set of users from two or more mobile virtual private networks to form an extranet workgroup in a secure manner. The invention is based on the limited private address scenario, which entitles mobile nodes having private, possibly overlapping, addresses as defined in RFC 1918, while home and foreign agents have public IP addresses. Each home agent is dedicated to one mobile virtual private network (M-VPN), while a foreign agent may be shared by multiple M-VPNs. The system also entails a mobile service manager that has a public IP address and a set of mobile nodes that all have a UFQDN (user fully qualified domain name) within the overall mobile workgroup system. The main benefits, compared to existing solution for extranet workgroup creation, are that extranets can be created despite overlapping address realms. Even fine-granular workgroups within the extranet can be created with any set of users from any set of M-VPNs.

Abstract: A network-based mobile workgroup system has considerably wider appeal and application than normal virtual private networks in that it provides seamless mobility across a number of access technologies at the same time as it offers a granular security separation down to workgroup level. The mobile workgroup system is an access management system for mobile users with VPN and firewall functionality inbuilt. The mobile user can access the mobile workgroup system over a set of access technologies and select server resources and correspondent nodes to access pending their workgroup membership approvals. All workgroup policy rules are defined in a mobile service manager and pushed down to one or more mobile service routers for policy enforcement. The mobile service router closest to the mobile client, and being part of the mobile virtual private network, performs regular authentication checks of the mobile client during service execution.

Abstract: A system and method for scheduling packet transmissions, whereby a Base Station System (BSS) part provides scheduling-related information to a Switching System (SS) part for scheduling of LLC frames, which includes information about the total number of packet data service radio links in the cell, and for each user, the bandwidth per link. Consequently, the SS can determine the required link utilization and hence the transmission time for each data packet the SS submits for transmission over the radio links. As such, the SS can control all end-to-end QoS quantities for each data packet, and how these quantities are affected by the SS scheduling of the LLC frames to the BSS. In this way, the SS can completely control how QoS agreements with users are met.