Abstract: Quality of service information can be used to facilitate wireless communication. A network entity, such as a terminal, as well as a network can initialize an authorization to establish a link using quality of service information. Various features can be integrated with the use of quality of service information, such as having quality of service reservation before a call and supplying a permanent identity for use in correlation.

Abstract: In a 3GPP2 Converged Access Network (CAN), IPv6 stateless auto configuration can be used to configure an IPv6 address of an access terminal (AT) for Simple IPv6 operation. A domain name system (DNS) update is triggered by IPv6 Neighbor Advertisement addresses a need for a DNS update when the full IPv6 address (128 bits) has not yet been sent in IPv6 packets from the AT. Upon receipt of the full address in response to the IPv6 Neighbor Advertisement, provision is made for prompting this DNS update even when the requesting network entity (e.g., access gateway (AGW) or home agent (HA)) does not have security authentication with a responsible home DNS server by utilizing access to an authentication, authorization, and accounting (AAA) function, perhaps via a local visited AAA, to submit an Accounting Request (Start) message that prompts the home DNS server to perform the DNS update.

Abstract: A method and apparatus for dynamic home address assignment by a home agent in multiple network interworking. The invention provides a method and apparatus send a key authorization request from a mobile station to a network device, the request indicating that the mobile station wishes to use a foreign agent care-of address to continue to receive data. The network device assigns a temporary address to the mobile station and creates a security policy database for the mobile station. The mobile station receives agent advertisements from foreign agents that may be able to provide service. The mobile station registers with a foreign agent. The network device then modifies the security policy database to reflect the information of the foreign agent. The Home Agent then assigns a home address to the mobile station and the network device updates the security policy database to include only the mobile device's home address as a selector.

Abstract: Systems and methodologies are described that effectuate establishment of an IPSec tunnel for utilization in a wireless communication environment. IPSec establishment procedures on home base stations can be used to establish IPSec tunnels between home base stations situated on open access sectors of wireless communication environments and packet data interworking function components positioned at the contiguity of secured segments of the wireless communication environments. Moreover, high rate packet data point-to-point protocol challenge-handshake authentication protocols can be directed through the IPSec tunnels to facilitate authentication of access terminals associated with the home base stations in order to facilitate further communications with components dispersed within secure areas of wireless communication environments.

Abstract: Disclosed is a method for efficient transport of packets between a mobile station and a secure gateway over a wireless local area network for accessing home services. In the method, a first encryption security association is established for transporting first-type packets from the secure gateway to the mobile station, and a second encryption security association is established for transporting first-type packets from the mobile station to the secure gateway. Next, a first null-encryption security association is established for transporting second-type packets from the secure gateway to the mobile station, and a second null-encryption security association is established for transporting second-type packets from the mobile station to the secure gateway. Second-type packets are selected for transport using the second null-encryption security association based on a traffic selector.

Abstract: Methods and apparatus for compression of headers in broadcasting BCMCS services in a wireless communication system are described. Techniques used in BCMCS systems without feedback include sending static context information during BCMCS service initialization for use in a decompressor in a mobile station. Techniques used in BCMCS systems with feedback include receiving feedback from distributed mobile station decompressors and adjusting the broadcasting compressor in response to the feedback. Techniques that reduce the number of operating states in both the compressor and the decompressor are described. Techniques to classify flows so that a reduced number of contexts are used to compress/decompress session packet headers in a push-to-talk service are described.

Abstract: A method and apparatus for dynamic home address assignment by a home agent in multiple network interworking. The invention provides a method and apparatus send a key authorization request from a mobile station to a network device, the request indicating that the mobile station wishes to use a foreign agent care-of address to continue to receive data. The network device assigns a temporary address to the mobile station and creates a security policy database for the mobile station. The mobile station receives agent advertisements from foreign agents that may be able to provide service. The mobile station registers with a foreign agent. The network device then modifies the security policy database to reflect the information of the foreign agent. The Home Agent then assigns a home address to the mobile station and the network device updates the security policy database to include only the mobile device's home address as a selector.

Abstract: A communication session between a node seeking network access and a NAS (Network Access Server) is established by having only few exchanges of messages. Upon detecting a physical link between the node and the NAS, the NAS immediately sends an authentication request message to the node. In response, the node sends a request message which includes all parameters options, in addition to responding to the authentication request message, for link configuration and network access control. The NAS then picks and chooses the parameter options and sends back the selected options in a reply message to the node. If the selected options in the reply message meet a threshold, the node straightforwardly transmits user data for network access via the NAS.

Abstract: A method of allowing interworking authorization of dual stack operation is provided. The method allows for simultaneous operation in both IPv4 and IPv6 if a terminal is authorized and authenticated to use both versions. The method utilizes the following steps: requesting authentication from an authorization entity in a wireless communication system; and receiving an authentication message from the authorization entity if the authentication is successful, wherein the authentication message contains an authorization to use at least one internet protocol version to establish at least one secure tunnel for communication.

Abstract: Efficient transmission of cryptographic information in secure real time protocol. A transmitting terminal may be used to encrypt data with a session key derived from a bit-stream. The bit-stream may be sent with header information to the receiving terminal. To conserve bandwidth, the information may be divided into portions, and each portion transmitted with an encrypted data packet. The receiving terminal may be used to recover the bit-stream from the information portions in the packet headers, and use the bit-stream to derive the session key. The session key may be used to decrypt the data.

Abstract: Systems and techniques are disclosed relating to wireless communications. The systems and techniques involve wireless communications wherein a packet data session may be established between a wireless communications device and a packet data serving node to support a network connection to a packet-switched network. The wireless communications device may be configured to receive a notification of an incoming call from a circuit-switched network even when the network connection is active.

Abstract: In a wireless communications system in which a mobile node seeks a communication session with a correspondent node by first signaling for initialization of the communication session through a first data path via an intermediate node. Thereafter, contents of the communication is established through a second data path in which the mobile node and the correspondent node communicate straightforwardly without going through the intermediate node.

Abstract: A method is provided for securing a PMIP tunnel between a serving gateway and a new access node through which an access terminal communicates. A PMIP key hierarchy unique to each access terminal is maintained by the gateway. The gateway uses a first node key to secure PMIP tunnels when authentication of the access terminal has been performed. A PMIP key is generated based on the first node key and the PMIP key is sent to the new access node to assist in establishing and securing a PMIP tunnel between the gateway and the new access node. Otherwise, when authentication of the access terminal has not been performed, the gateway generates a second node key and sends it to an intermediary network node which then generates and sends a PMIP key to the new access node. This second key is then used to secure the PMIP tunnel.

Abstract: Disclosed is a method for efficient transport of packets between a mobile station and a secure gateway over a wireless local area network for accessing home services. In the method, a first encryption security association is established for transporting first-type packets from the secure gateway to the mobile station, and a second encryption security association is established for transporting first-type packets from the mobile station to the secure gateway. Next, a first null-encryption security association is established for transporting second-type packets from the secure gateway to the mobile station, and a second null-encryption security association is established for transporting second-type packets from the mobile station to the secure gateway. Second-type packets are selected for transport using the second null-encryption security association based on a traffic selector.

Abstract: An apparatus and method for verification of a DHCPRELEASE message comprising extracting a IP address from the ciaddr field of the DHCPRELEASE message, determining a tunnel-associated IP address, comparing the IP address and the tunnel-associated IP address to determine if there is a match, and releasing the IP address if there is a match, and wherein the tunnel-associated IP address is the IP address associated with the tunnel from which the server receives the DHCPRELEASE message.

Abstract: The packets generated by each of multiple packet data applications are provided to a single Point-to-Point Protocol (PPP) stack and a single High-level Data Link Control (HDLC) framing layer to convert data packets into byte streams suitable for transmission through Radio Link Protocol (RLP) connections. Each of the resultant multiple byte streams is then provided to one of multiple RLP connections having different retransmission and delay properties. The RLP connection selected for sending data from each application is based on the grade of service most appropriate for the application. At the receiver, the data from the multiple RLP connections is provided to a single PPP stack.

Abstract: Disclosed is a method for efficient transport of packets between a mobile station and a secure gateway over a wireless local area network for accessing home services. In the method, a first encryption security association is established for transporting first-type packets from the secure gateway to the mobile station, and a second encryption security association is established for transporting first-type packets from the mobile station to the secure gateway. Next, a first null-encryption security association is established for transporting second-type packets from the secure gateway to the mobile station, and a second null-encryption security association is established for transporting second-type packets from the mobile station to the secure gateway. Second-type packets are selected for transport using the second null-encryption security association based on a traffic selector.

Abstract: Method and apparatus for processing packet flows in a communication system. In one embodiment, a resource reservation message includes packet flow parameter information used to determine flow treatment of the associated packet flow. The packet flow mapping is based on the quality of service of the associated packet flow. In another embodiment, a bearer connection is established and monitored for information relating to flow treatment.

Abstract: A method for implementing proxy mobile Internet protocol (PMIP) in mobile IP foreign agent care-of-address mode may include determining a home address of an access terminal. The method may also include communicating with a home agent in order to bind an address of the network node with the home address of the access terminal and establish a tunnel between the network node and the home agent. The method may also include receiving first packets destined for the access terminal from the home agent via the tunnel and sending the first packets to the access terminal. The method may also include receiving second packets sent by the access terminal that are destined for a correspondent node and sending the second packets to the home agent via the tunnel.

Abstract: A method and apparatus for requesting Point-to-Point Protocol (PPP) instances from a packet data services network includes a mobile station configured to send an origination message to a packet data service node (PDSN) at which it has arrived upon leaving the vicinity of another PDSN. The message informs the new PDSN of the new location of the mobile station and indicates both the number of dormant PPP instances associated with the mobile station and a service reference identifier for each such PPP instance. A flag within the message may be used to indicate whether the PPP instances are dormant (i.e., whether the mobile station is engaged in a call). Communications channel resources of packet data services nodes are optimized by reducing the information included in messages from the Packet Control Function network element to the Packet Data Service Node network element, and by reducing the use of Mobile Internet Protocol agent advertisement.