Abstract: A method for handing off a connection of a mobile device from a first access point to a second access point in an Internet Protocol-based multimedia mobile network includes the steps of scanning the network for available access points, comparing a connection strength of each available access point to a pre-determined margin, authenticating access points determined to be above the pre-determined margin, adding the authenticated access points to an association table; checking a connection strength to the first access point to the pre-determined margin, selecting an authenticated access point as the second access point if the connection strength to the first access point is below the pre-determined margin, and removing the first access point from the association table.

Abstract: A method for handing off a connection of a mobile device from a primary VPN to which the mobile device is connected to an angel VPN to which the mobile device may be connected in an Internet Protocol-based multimedia mobile network includes the steps of searching for alternative available routes to a peer, creating the angel VPN for storage in the mobile device and replacing the primary VPN with the angel VPN in a case where the primary VPN is disrupted.

Abstract: A system and method for providing continuous media messaging during a handoff procedure in an IP-based mobile communication network is disclosed. The system for providing continuous media messaging during a handoff procedure in an IP-based mobile communication network includes an RTP proxy coupled between clients in a session, the RTP proxy operable to (a) detect the handoff procedure and (b) notify a media server with updated client information. The method includes the steps of (a) providing an RTP proxy coupled between clients in a session, (b) detecting a handoff procedure, and (c) notifying a media server with updated client information.

Abstract: A system and method of optimizing handoff in a mobile communication network is disclosed. The method includes the steps of (a) making a first determination of a direction of movement of a mobile station relative to each of a plurality of access points or base stations, (b) for each of the plurality of access points or base stations that the mobile station is moving toward, making a second determination of the signal quality of each of the plurality of access points or base stations, and (c) handing off to an access point or base station of choice based upon a best signal quality. A mobile station processor is operable to execute method steps stored as executable instructions in a mobile station storage device coupled to the mobile station processor.

Abstract: A system and method for providing continuous AAA functionality in an IP-based mobile communication network is disclosed. The system includes an RTP proxy coupled between clients in a session, the RTP proxy operable to (a) detect the handoff procedure and (b) notify a AAA server with updated client information. The method includes the steps of providing an RTP proxy coupled between clients in a session, detecting a handoff procedure, and notifying a AAA server with updated client information.

Abstract: A method for handing off a connection of a mobile device from a first access point to a second access point in an Internet Protocol-based multimedia mobile network includes the steps of scanning the network for available access points, comparing a connection strength of each available access point to a pre-determined margin, authenticating access points determined to be above the pre-determined margin, adding the authenticated access points to an association table; checking a connection strength to the first access point to the pre-determined margin, selecting an authenticated access point as the second access point if the connection strength to the first access point is below the pre-determined margin, and removing the first access point from the association table.

Abstract: A method for handing off a connection of a mobile device from a primary VPN to which the mobile device is connected to an angel VPN to which the mobile device may be connected in an Internet Protocol-based multimedia mobile network includes the steps of searching for alternative available routes to a peer, creating the angel VPN for storage in the mobile device and replacing the primary VPN with the angel VPN in a case where the primary VPN is disrupted.

Abstract: A method for providing front line defense against intrusion includes the steps of intercepting packets flowing into a machine from a NIC, passing the intercepted packets to a front line advanced intrusion avoidance engine for analysis, passing, cleaning, rejecting or deleting the intercepted packets based upon the front line advanced intrusion avoidance engine's analysis, performing socket layer functions on passed and cleaned packets, intercepting packets passed to a socket layer, passing the intercepted packets to the front line advanced intrusion avoidance engine for application layer security analysis, and passing the packets which pass the application layer security analysis to an application from a socket system call.

Abstract: A method for ensuring mobile device data and content security includes the steps of intercepting an active file process, reading a user credential, a process credential and a parent process, reading a pre-set credential, comparing the user credential and the process credential with the pre-set credential, allowing the active file process to proceed if the user credential and the process credential match the pre-set credential, and denying the active file process to proceed if the user credential and the process credential do not match the pre-set credential.

Abstract: A method for automatically adjusting the security level for a given application and specific user includes the steps of determining a security level assigned to the application, determining whether the security level is dependent upon a type of specific user, executing the application without security if no security level is assigned to the application and if the security level is not dependent upon the type of specific user, executing the application with security if the application has an assigned security level and if the security level is not dependent upon the type of specific user, assigning the security level if the security is dependent upon the type of specific user, and executing the application with the assigned security level dependent upon the type of specific user.