Abstract: The presently disclosed privacy enhancing networks (PENs) comprises a network of gateways in communication with one or more controllers. By dynamically creating and tearing down unique data flow paths through a network of gateways for each individual data flow, the privacy enhancing network makes it more difficult for an adversary to glean information about communicating parties. Since each flow in a single data session may be routed through a different path, adversaries may find it more difficult to determine which data flows are associated with each data session. This in turn, makes it more difficult for adversaries to gather enough data traffic to break any encryption applied to the data flows. Furthermore, since each flow in a single data session can be directed along a different path, a privacy enhancing network may make it difficult for adversaries to even determine that the communicating parties are communicating at all.

Abstract: Systems and methods are described for IP Address allocation. A computerized method includes receiving at a wireless access gateway a request from a subscriber to connect to a network, allocating a first IP address to the subscriber from a first pool of IP addresses at the wireless access gateway, and assigning a second IP address to the subscriber from a second pool of IP addresses at the wireless access gateway when the subscriber requests a network service.

Abstract: Systems and methods are described for providing cloud-based virtual local networks. A computerized method for providing cloud-based virtual local networks includes receiving at a network gateway a request for a network address from a network switch, communicating with a user device management entity (uDME) server to authorize the network switch, receiving an authorization response from the uDME server for the network switch, receiving a network address pool at the network gateway from the uDME server, and creating at the network gateway a virtual home router containing a virtual home router context that is unique to the virtual home router and associated with the network address pool.

Abstract: The presently disclosed privacy enhancing networks (PENs) comprises a network of gateways in communication with one or more controllers. By dynamically creating and tearing down unique data flow paths through a network of gateways for each individual data flow, the privacy enhancing network makes it more difficult for an adversary to glean information about communicating parties. Since each flow in a single data session may be routed through a different path, adversaries may find it more difficult to determine which data flows are associated with each data session. This in turn, makes it more difficult for adversaries to gather enough data traffic to break any encryption applied to the data flows. Furthermore, since each flow in a single data session can be directed along a different path, a privacy enhancing network may make it difficult for adversaries to even determine that the communicating parties are communicating at all.

Abstract: Systems and methods are described for providing application and content awareness for self-optimizing networks. A computerized method includes receiving at a mobile gateway a session request from a mobile device, establishing a session between the mobile device and the mobile gateway, receiving a request from the mobile device at the mobile gateway to access a remote resource, establishing a connection between the mobile device and the remote resource via the mobile gateway, detecting application and content information of a service data flow of the connection, and sending the application and content information of the service data flow to a network server for network optimization.

Abstract: A computing system for processing network traffic includes a plurality of network ports configured to receive network traffic, a plurality of processing blades, not directly coupled with the plurality of network ports, configured to process the network traffic, a switch coupled with the plurality of processing blades and configured to support inter-blade communications among the plurality of processing blades, a router coupled with the switch and the plurality of network ports, the router configured to forward the network traffic to one or more of the plurality of processing blades based on resource information of the plurality of the processing blades, and a system controller coupled to the router and the plurality of processing blades, the system controller configured to receive and maintain the resource information from the plurality of the processing blades and further configured to update the router with the resource information of the plurality of the processing blades.

Abstract: A computing system for processing network traffic includes a plurality of network ports configured to receive network traffic, a plurality of processing blades, not directly coupled with the plurality of network ports, configured to process the network traffic, a switch coupled with the plurality of processing blades and configured to support inter-blade communications among the plurality of processing blades, a router coupled with the switch and the plurality of network ports, the router configured to forward the network traffic to one or more of the plurality of processing blades based on resource information of the plurality of the processing blades, and a system controller coupled to the router and the plurality of processing blades, the system controller configured to receive and maintain the resource information from the plurality of the processing blades and further configured to update the router with the resource information of the plurality of the processing blades.

Abstract: Computerized systems and computerized methods are provided for internet protocol (IP) address allocation for Wi-Fi clients in a manner that avoids assigning a public IP address to a device if the device is not first activated to use services provided by the network. A private IP network address is allocated to a device, wherein the private IP network address is only valid for a predetermined period, and only allows the device to activate itself with the network instead of providing the device full access to the network. The device is monitored during the predetermined period so that if the device is activated to use the network during the predetermined period, the computing device assigns a public IP address to the device so that the device can access a full set of services provided by the network.

Abstract: Systems and methods are described for providing cloud-based virtual local networks. A computerized method for providing cloud-based virtual local networks includes receiving at a network gateway a request for a network address from a network switch, communicating with a user device management entity (uDME) server to authorize the network switch, receiving an authorization response from the uDME server for the network switch, receiving a network address pool at the network gateway from the uDME server, and creating at the network gateway a virtual home router containing a virtual home router context that is unique to the virtual home router and associated with the network address pool.

Abstract: Systems and methods are described for extending multicast/broadcast service to wide area networks. A computerized method includes receiving a multicast/broadcast discovery message from a client, encapsulating the multicast/broadcast discovery message at a gateway, forwarding the encapsulated multicast/broadcast discovery message to a multicast/broadcast server, receiving a multicast/broadcast discovery response message from the multicast/broadcast server with a server IP address, generating a server alias IP address for the multicast/broadcast server at the gateway, replacing the server IP address with the server alias IP address in the multicast/broadcast discovery response message, encapsulating the multicast/broadcast discovery response message at the gateway, and forwarding the encapsulated multicast/broadcast discovery response message to the client.

Abstract: Systems and methods are described for providing application and content awareness for self-optimizing networks. A computerized method includes receiving at a mobile gateway a session request from a mobile device, establishing a session between the mobile device and the mobile gateway, receiving a request from the mobile device at the mobile gateway to access a remote resource, establishing a connection between the mobile device and the remote resource via the mobile gateway, detecting application and content information of a service data flow of the connection, and sending the application and content information of the service data flow to a network server for network optimization.

Abstract: Systems and methods are described for IP Address allocation. A computerized method includes receiving at a wireless access gateway a request from a subscriber to connect to a network, allocating a first IP address to the subscriber from a first pool of IP addresses at the wireless access gateway, and assigning a second IP address to the subscriber from a second pool of IP addresses at the wireless access gateway when the subscriber requests a network service.

Abstract: A computing system for processing network traffic includes a plurality of network ports configured to receive network traffic, a plurality of processing blades, not directly coupled with the plurality of network ports, configured to process the network traffic, a switch coupled with the plurality of processing blades and configured to support inter-blade communications among the plurality of processing blades, a router coupled with the switch and the plurality of network ports, the router configured to forward the network traffic to one or more of the plurality of processing blades based on resource information of the plurality of the processing blades, and a system controller coupled to the router and the plurality of processing blades, the system controller configured to receive and maintain the resource information from the plurality of the processing blades and further configured to update the router with the resource information of the plurality of the processing blades.

Abstract: A computing system for processing network traffic includes a plurality of network ports configured to receive network traffic, a plurality of processing blades, not directly coupled with the plurality of network ports, configured to process the network traffic, a switch coupled with the plurality of processing blades and configured to support inter-blade communications among the plurality of processing blades, a router coupled with the switch and the plurality of network ports, the router configured to forward the network traffic to one or more of the plurality of processing blades based on resource information of the plurality of the processing blades, and a system controller coupled to the router and the plurality of processing blades, the system controller configured to receive and maintain the resource information from the plurality of the processing blades and further configured to update the router with the resource information of the plurality of the processing blades.

Abstract: A computing system for processing network traffic includes a plurality of network ports configured to receive network traffic, a plurality of processing blades, not directly coupled with the plurality of network ports, configured to process the network traffic, a switch coupled with the plurality of processing blades and configured to support inter-blade communications among the plurality of processing blades, a router coupled with the switch and the plurality of network ports, the router configured to forward the network traffic to one or more of the plurality of processing blades based on resource information of the plurality of the processing blades, and a system controller coupled to the router and the plurality of processing blades, the system controller configured to receive and maintain the resource information from the plurality of the processing blades and further configured to update the router with the resource information of the plurality of the processing blades.