Abstract: An electronic device has a communication subsystem with a power saving mode and an active mode. The communication subsystem is set to switch between the power saving mode and the active mode depending on thresholds of communication traffic. The settings for the thresholds depend on the activity detected on the electronic device.

Abstract: An electronic device has a communication subsystem with a power saving mode and an active mode. The communication subsystem is set to switch between the power saving mode and the active mode depending on thresholds of communication traffic. The settings for the thresholds depend on the activity detected on the electronic device.

Abstract: The present invention advantageously provides a method, system and apparatus for aggregating multiple site-specific routes, by determining a first aggregate-aware route that includes a prefix of a site-specific address and a prefix length of an aggregate route address of a first service provider. The method and system can be implemented as an enhancement to existing IP protocols such as BGP and other inter-domain routing protocols. The method and apparatus may further include applying a routing protocol policy in which an aggregate route may serve as a proxy for an aggregate-aware route when the address of the aggregate route matches the address of the aggregate-aware route. The method and system may yet further include determining a second aggregate-aware route that includes the prefix of the aggregate route address of the first service provider and a prefix length of a second aggregate route address of a second service provider.

Abstract: An electronic device has a communication subsystem with a power saving mode and an active mode. The communication subsystem is set to switch between the power saving mode and the active mode depending on thresholds of communication traffic. The settings for the thresholds depend on the activity detected on the electronic device.

Abstract: Described are systems and methods for managing data transfer from a communication device to a communication network over a wireless connection comprising determining that a requesting process on the communication device is authorized to establish a protected connection to the communication network; and, configuring a network interface on the communication device to allow data packets to be transmitted from the requesting process to the communication network over the protected connection, wherein the network interface is associated with the protected connection.

Abstract: In some implementations, a method for routing a communication includes receiving, from an application running on a user equipment (UE), a request to access a forwarding information base (FIB). The UE includes a plurality of FIBs and a plurality of communication interfaces. Each of the plurality of FIBs includes communication interface information. An assigned FIB from the plurality of FIBs is determined. The assigned FIB has been assigned to the application. An appropriate communication interface for communication is determined based on a destination of the communication and the communication interface information of the assigned FIB. The communication is transmitted to the destination using the communication interface.

Abstract: A method of defending against a denial-of-service (DoS) attack on an IPv6 neighbor cache includes steps of determining a number of neighbor cache entries currently stored in the neighbor cache and then determining whether the number of entries exceeds a neighbor cache threshold that is less than a neighbor cache limit defining a maximum capacity of the neighbor cache. When the number of entries in the neighbor cache exceeds the neighbor cache threshold, stateless neighbor resolution is triggered. Stateless neighbor resolution entails sending a neighbor solicitation to resolve an address for an incoming packet without logging a corresponding entry in the neighbor cache. Additional techniques that complement the above method involve purging of neighbor cache entries designated as incomplete, prioritization of the entries based on trustworthiness, shortening the incomplete-status timer to less than 3 seconds, and curtailing the number of retransmissions of the neighbor solicitations.

Abstract: A method of defending against a denial-of-service (DoS) attack on an IPv6 neighbor cache includes steps of determining a number of neighbor cache entries currently stored in the neighbor cache and then determining whether the number of entries exceeds a neighbor cache threshold that is less than a neighbor cache limit defining a maximum capacity of the neighbor cache. When the number of entries in the neighbor cache exceeds the neighbor cache threshold, stateless neighbor resolution is triggered. Stateless neighbor resolution entails sending a neighbor solicitation to resolve an address for an incoming packet without logging a corresponding entry in the neighbor cache. Additional techniques that complement the above method involve purging of neighbor cache entries designated as incomplete, prioritization of the entries based on trustworthiness, shortening the incomplete-status timer to less than 3 seconds, and curtailing the number of retransmissions of the neighbor solicitations.

Abstract: Systems, methods, and software can be used to process a link on a device. In some aspects, a link is received on a device. The link can be a link to content stored external to the device. The link can be selected by a user and associated with a first perimeter on the device.

Abstract: Described are systems and methods for managing data transfer from a communication device to a communication network over a wireless connection comprising determining that a requesting process on the communication device is authorized to establish a protected connection to the communication network; and, configuring a network interface on the communication device to allow data packets to be transmitted from the requesting process to the communication network over the protected connection, wherein the network interface is associated with the protected connection.

Abstract: In some implementations, a method for routing a communication includes receiving, from an application running on a user equipment (UE), a request to access a forwarding information base (FIB). The UE includes a plurality of FIBs and a plurality of communication interfaces. Each of the plurality of FIBs includes communication interface information. An assigned FIB from the plurality of FIBs is determined. The assigned FIB has been assigned to the application. An appropriate communication interface for communication is determined based on a destination of the communication and the communication interface information of the assigned FIB. The communication is transmitted to the destination using the communication interface.

Abstract: An electronic device has a communication subsystem with a power saving mode and an active mode. The communication subsystem is set to switch between the power saving mode and the active mode depending on thresholds of communication traffic. The settings for the thresholds depend on the activity detected on the electronic device.

Abstract: A method of defending against a denial-of-service (DoS) attack on an IPv6 neighbor cache includes steps of determining a number of neighbor cache entries currently stored in the neighbor cache and then determining whether the number of entries exceeds a neighbor cache threshold that is less than a neighbor cache limit defining a maximum capacity of the neighbor cache. When the number of entries in the neighbor cache exceeds the neighbor cache threshold, stateless neighbor resolution is triggered. Stateless neighbor resolution entails sending a neighbor solicitation to resolve an address for an incoming packet without logging a corresponding entry in the neighbor cache. Additional techniques that complement the above method involve purging of neighbor cache entries designated as incomplete, prioritization of the entries based on trustworthiness, shortening the incomplete-status timer to less than 3 seconds, and curtailing the number of retransmissions of the neighbor solicitations.

Abstract: A method of defending against a denial-of-service (DoS) attack on an IPv6 neighbor cache includes steps of determining a number of neighbor cache entries currently stored in the neighbor cache and then determining whether the number of entries exceeds a neighbor cache threshold that is less than a neighbor cache limit defining a maximum capacity of the neighbor cache. When the number of entries in the neighbor cache exceeds the neighbor cache threshold, stateless neighbor resolution is triggered. Stateless neighbor resolution entails sending a neighbor solicitation to resolve an address for an incoming packet without logging a corresponding entry in the neighbor cache. Additional techniques that complement the above method involve purging of neighbor cache entries designated as incomplete, prioritization of the entries based on trustworthiness, shortening the incomplete-status timer to less than 3 seconds, and curtailing the number of retransmissions of the neighbor solicitations.

Abstract: The present invention advantageously provides a method, system and apparatus for aggregating multiple site-specific routes, by determining a first aggregate-aware route that includes a prefix of a site-specific address and a prefix length of an aggregate route address of a first service provider. The method and system can be implemented as an enhancement to existing IP protocols such as BGP and other inter-domain routing protocols. The method and apparatus may further include applying a routing protocol policy in which an aggregate route may serve as a proxy for an aggregate-aware route when the address of the aggregate route matches the address of the aggregate-aware route. The method and system may yet further include determining a second aggregate-aware route that includes the prefix of the aggregate route address of the first service provider and a prefix length of a second aggregate route address of a second service provider.

Abstract: A method of defending against a denial-of-service (DoS) attack on an IPv6 neighbor cache includes steps of determining a number of neighbor cache entries currently stored in the neighbor cache and then determining whether the number of entries exceeds a neighbor cache threshold that is less than a neighbor cache limit defining a maximum capacity of the neighbor cache. When the number of entries in the neighbor cache exceeds the neighbor cache threshold, stateless neighbor resolution is triggered. Stateless neighbor resolution entails sending a neighbor solicitation to resolve an address for an incoming packet without logging a corresponding entry in the neighbor cache. Additional techniques that complement the above method involve purging of neighbor cache entries designated as incomplete, prioritization of the entries based on trustworthiness, shortening the incomplete-status timer to less than 3 seconds, and curtailing the number of retransmissions of the neighbor solicitations.