Abstract: Methods and systems are provided for securing integrated base stations, such as base station routers (BSRs), in which a SIM card is operatively coupled with a secured portion of a base station and a secure association is established therebetween to facilitate encryption key exchange between the secured portion of the base station and a core network.

Abstract: In one embodiment, a method comprises identifying, by an orchestrator executed by a physical machine, a plurality of virtualized network functions required for implementation of a virtualized network service for a customer, each virtualized network function having a corresponding and distinct virtualized container specifying attributes for defining execution of the corresponding virtualized network function within one or more physical machines; and setting by the orchestrator an interdependency indicator within each virtualized container based on association with the virtualized network service, enabling identification of each of the virtualized network functions as interdependent for coordinated execution of the virtualized network service.

Abstract: The present invention provides improved security in a virtual machine. By extending the capabilities of modern secure processors, privacy of computation is provided from both the owner of the equipment and other users executing on the processor, which is an advantageous feature for rentable, secure computers. In addition to the hardware extensions required to secure a virtualizable computer, an infrastructure for the deployment of such processors is also provided. Furthermore, a signaling flow to establish the various relationships between the owner, user and manufacturer of the equipment is disclosed.

Abstract: The invention includes a method and apparatus for reconfiguring a first base station element to attempt to serve at least a portion of the plurality of wireless terminals served by a second base station element in response to detection of a failure condition at a second base station element that was serving the plurality of wireless terminals prior to the occurrence of the failure condition.

Abstract: Example embodiments provide methods for handling the transition of a mobile device from a first network to a second network, the second network operating according to a different communications protocol from the first network. One example embodiment includes terminating forwarding of the data packets from the first network to the mobile device; rebuilding headers of unforwarded data packets at the first network; and sending the rebuilt data packets from the first network to the second network. Another example embodiment includes resetting a header compression state at the second network; receiving unforwarded data packets from the first network at the second network, the unforwarded data packets being data packets the first network had not yet forwarded to the mobile device; and sending the unforwarded data packets from the second network to the mobile device.

Abstract: A method for mitigating buffering delay in a TCP-encapsulated data stream transmitted over a network includes, at a node in the network, receiving a first packet through a first interface. The first packet includes data of the TCP-encapsulated data stream. A second packet is received through a second interface. The second packet includes an acknowledgment of segments of the TCP-encapsulated data stream. The method further includes analyzing the first packet and the second packet to estimate an amount of outstanding data, using the amount of outstanding data to determine a state of buffer occupancy, updating a TCP Window field in the second packet in function of the state of buffer occupancy, and transmitting the updated second packet through the first interface.

Abstract: Methods and systems are provided for securing integrated base stations, such as base station routers (BSRs), in which a SIM card is operatively coupled with a secured portion of a base station and a secure association is established therebetween to facilitate encryption key exchange between the secured portion of the base station and a core network.

Abstract: A method is disclosed for routing packets in an intermediate node between a mobile node and a correspondent node in a packet-switched network, only one of said nodes being macro-mobility enabled, comprising at the intermediate node: -exchanging lower-layer-address-update-related messages with said macro-mobility enabled node; -mapping source address, destination address and potentially protocol parameters of lower-layer packets exchanged between the mobile node and the correspondent node in such a way that the macro-mobility enabled node can communicate with the other node as if the other node is also macro-mobility enabled, and such that the other node can communicate with the intermediate node as if the intermediate node is a non-macro-mobility-enabled node. Also associated devices, update methods for devices, and servers are disclosed.

Abstract: Not Mobile IP (NMIP) comprises methods for implementing macro-mobility in an IP network, wherein macro-mobility means the ability of an endpoint node to change its network-layer, e.g., IP, address without disturbing existing transport-layer and application-layer sessions, e.g., conversations. When two NMIP endpoint nodes establish a new NMIP session, they exchange pseudo-random numbers, or nonces, and store the nonces in a session table. When a first endpoint node changes its IP address, the first endpoint node sends to the second endpoint node an address-update message that contains the new IP address and the first endpoint node's nonce. If the received nonce matches a nonce in the session table, then the second endpoint node updates its protocol control blocks with the new IP address, and sends an address-update reply message to the first endpoint node. Internet Protocol Security (IPsec) can be used to secure or replace the exchange of nonces.

Abstract: The invention pertains to a method for providing access to a mobile communication network comprising at least one base transceiver station, wherein the communication network is being visited by a piece of user equipment having a home operator in a home network. The method comprises at the base transceiver station: receiving a channel request from said user equipment, creating a virtual machine associated with said home operator of said user equipment, establishing a channel using said virtual machine, and allocating channel resources of said at least one base station to accommodate said channel. The invention also pertains to a base station system to carry out the method of the invention.

Abstract: Example embodiments provide methods for handling the transition of a mobile device from a first network to a second network, the second network operating according to a different communications protocol from the first network. One example embodiment includes terminating forwarding of the data packets from the first network to the mobile device; rebuilding headers of unforwarded data packets at the first network; and sending the rebuilt data packets from the first network to the second network. Another example embodiment includes resetting a header compression state at the second network; receiving unforwarded data packets from the first network at the second network, the unforwarded data packets being data packets the first network had not yet forwarded to the mobile device; and sending the unforwarded data packets from the second network to the mobile device.

Abstract: Example embodiments provide methods for handling the transition of a mobile device from a first network to a second network, the second network operating according to a different communications protocol from the first network. One example embodiment includes terminating forwarding of the data packets from the first network to the mobile device; rebuilding headers of unforwarded data packets at the first network; and sending the rebuilt data packets from the first network to the second network. Another example embodiment includes resetting a header compression state at the second network; receiving unforwarded data packets from the first network at the second network, the unforwarded data packets being data packets the first network had not yet forwarded to the mobile device; and sending the unforwarded data packets from the second network to the mobile device.

Abstract: Not Mobile IP (NMIP) comprises methods for implementing macro-mobility in an IP network, wherein macro-mobility means the ability of a node to change its network-layer, e.g., IP, address without disturbing existing transport-layer and application-layer sessions, e.g., conversations. When two NMIP nodes establish a new NMIP session, they exchange pseudo-random numbers, or nonces, and store the nonces in a session table. When a first node changes its IP address, the first node sends to the second node an address-update message that contains the new IP address and the first node's nonce. If the received nonce matches a nonce in the session table, then the second node updates its protocol control blocks with the new IP address, and sends an address-update reply message to the first node. Internet Protocol Security (IPsec) can be used to secure or replace the exchange of nonces.

Abstract: The invention includes methods and apparatuses for supporting mobility management and packet routing in ad hoc wireless networks. A method for mobility management includes detecting, at a first base station, a request by a wireless device to establish an association with the first base station where the first base station comprises a mobile base station, updating an association table of the first base station to include an association of the wireless device to the first base station, and propagating, toward a second base station, a message adapted to update an association table of the second base station, wherein the second base station is a mobile base station, wherein the message is propagated toward the second base station wirelessly. The packet routing functions of the present invention may be used independent of, or in conjunction with, the mobility management functions of the present invention.

Abstract: Methods and systems are provided for securing integrated base stations, such as base station routers (BSRs), in which a SIM card is operatively coupled with a secured portion of a base station and a secure association is established therebetween to facilitate encryption key exchange between the secured portion of the base station and a core network.

Abstract: A method in one example has: establishing communication between two mobile terminals in a base station routing architecture network; and optimizing routing between the two mobiles terminals without requiring all traffic to traverse an anchor point in the base station routing architecture network. An IP base station transceiver architecture utilizes network controlled mobility to provide a transparent connection between a mobile terminal and an anchor point in the network. This transparency hides the mobility associated with changing IP base station transceivers from the mobile terminal and reduces over-the-air signaling.

Abstract: Techniques are disclosed for in-line storage of message authentication codes with respective encrypted data blocks. In one aspect, a given data block is encrypted and a message authentication code is generated for the encrypted data block. A target address is determined for storage of the encrypted data block in a memory. The target address is then modified to permit in-line storage of the message authentication code with the encrypted data block in the memory, and the encrypted data block and the message authentication code are transferred to the memory for storage at the modified address. Illustrative embodiments of the techniques advantageously facilitate secure off-chip storage of data in a processing system.

Abstract: Methods and systems are provided for securing integrated base stations, such as base station routers (BSRs), in which a SIM card is operatively coupled with a secured portion of a base station and a secure association is established therebetween to facilitate encryption key exchange between the secured portion of the base station and a core network.

Abstract: Methods and systems are provided for securing integrated base stations, such as base station routers (BSRs), in which a SIM card is operatively coupled with a secured portion of a base station and a secure association is established therebetween to facilitate encryption key exchange between the secured portion of the base station and a core network.

Abstract: The present invention provides improved security in a virtual machine. By extending the capabilities of modern secure processors, privacy of computation is provided from both the owner of the equipment and other users executing on the processor, which is an advantageous feature for rentable, secure computers. In addition to the hardware extensions required to secure a virtualizable computer, an infrastructure for the deployment of such processors is also provided. Furthermore, a signaling flow to establish the various relationships between the owner, user and manufacturer of the equipment is disclosed.