Abstract: A baseboard management controller (BMC) can physically partition the computing resources of a physical host into different resource groups for concurrently running a different operating system per resource group. The BMC can allocate a first processor of the host to a first resource group and a second processor of the host to a second resource group. The BMC can separate the memory of the host into a first memory range for the first processor and a second memory range for the second processor, and the BMC can limit access to the first memory range to the first processor and limit access to the second memory range to the second processor. The BMC can also distribute physical or virtual peripheral devices of the host between the first processor and the second processor.

Abstract: A baseboard management controller (BMC) can physically partition the computing resources of a physical host into different resource groups for concurrently running a different operating system per resource group. The BMC can allocate a first processor of the host to a first resource group and a second processor of the host to a second resource group. The BMC can separate the memory of the host into a first memory range for the first processor and a second memory range for the second processor, and the BMC can limit access to the first memory range to the first processor and limit access to the second memory range to the second processor. The BMC can also distribute physical or virtual peripheral devices of the host between the first processor and the second processor.

Abstract: A baseboard management controller (BMC) can physically partition the computing resources of a physical host into different resource groups for concurrently running a different operating system per resource group. The BMC can allocate a first processor of the host to a first resource group and a second processor of the host to a second resource group. The BMC can separate the memory of the host into a first memory range for the first processor and a second memory range for the second processor, and the BMC can limit access to the first memory range to the first processor and limit access to the second memory range to the second processor. The BMC can also distribute physical or virtual peripheral devices of the host between the first processor and the second processor.

Abstract: A method is disclosed for routing packets in an intermediate node between a mobile node and a correspondent node in a packet-switched network, only one of said nodes being macro-mobility enabled, comprising at the intermediate node: —exchanging lower-layer-address-update-related messages with said macro-mobility enabled node; —mapping source address, destination address and potentially protocol parameters of lower-layer packets exchanged between the mobile node and the correspondent node in such a way that the macro-mobility enabled node can communicate with the other node as if the other node is also macro-mobility enabled, and such that the other node can communicate with the intermediate node as if the intermediate node is a non-macro-mobility-enabled node. Also associated devices, update methods for devices, and servers are disclosed.

Abstract: The invention pertains to a method for providing access to a mobile communication network comprising at least one base transceiver station, wherein the communication network is being visited by a piece of user equipment having a home operator in a home network. The method comprises at the base transceiver station: receiving a channel request from said user equipment, creating a virtual machine associated with said home operator of said user equipment, establishing a channel using said virtual machine, and allocating channel resources of said at least one base station to accommodate said channel. The invention also pertains to a base station system to carry out the method of the invention.

Abstract: The present invention provides improved security in a virtual machine. By extending the capabilities of modern secure processors, privacy of computation is provided from both the owner of the equipment and other users executing on the processor, which is an advantageous feature for rentable, secure computers. In addition to the hardware extensions required to secure a virtualizable computer, an infrastructure for the deployment of such processors is also provided. Furthermore, a signaling flow to establish the various relationships between the owner, user and manufacturer of the equipment is disclosed.

Abstract: Method of failure detection in an operating system, the method comprising sending a request from a client to a server through a router, storing a token at the router, carrying out the request at the server, and returning a reply from the server to the client through the router, wherein the method comprises the alternative steps of, in response to a failure in the server, generating at the router an error reply based on the token and returning the error reply from the router to the client.

Abstract: Method for providing access to private digital content installed on a content server C(s), wherein a content manager server C(a) has a number of clients potentially interested in the private content; the method comprising the following steps performed at the content management server C(a): establishing a first communication channel with a client C(b) of the number of clients; receiving a query for private digital content from the client C(b) and sending an appropriate response, causing the client to establish a second communication channel with the content server; establishing a secure session with the content server C(s) over the first and second communication channel; establishing a new session key for the secure session and transmitting said new session key to the client C(b), so that the client can obtain the queried private digital content from the content server as if the client is the content management server.

Abstract: A method is disclosed for routing packets in an intermediate node between a mobile node and a correspondent node in a packet-switched network, only one of said nodes being macro-mobility enabled, comprising at the intermediate node: -exchanging lower-layer-address-update-related messages with said macro-mobility enabled node; -mapping source address, destination address and potentially protocol parameters of lower-layer packets exchanged between the mobile node and the correspondent node in such a way that the macro-mobility enabled node can communicate with the other node as if the other node is also macro-mobility enabled, and such that the other node can communicate with the intermediate node as if the intermediate node is a non-macro-mobility-enabled node. Also associated devices, update methods for devices, and servers are disclosed.

Abstract: The invention pertains to a method for providing access to a mobile communication network comprising at least one base transceiver station, wherein the communication network is being visited by a piece of user equipment having a home operator in a home network. The method comprises at the base transceiver station: receiving a channel request from said user equipment, creating a virtual machine associated with said home operator of said user equipment, establishing a channel using said virtual machine, and allocating channel resources of said at least one base station to accommodate said channel. The invention also pertains to a base station system to carry out the method of the invention.

Abstract: The invention concerns a method of managing computer memory, the method comprising the steps of maintaining (101) a page table entry for mapping a virtual address to a physical address and a cache comprising a plurality of data blocks and, in response to a reference to the virtual address, translating (102) the virtual address into the physical address by means of the page table entry and fetching (103) data from the physical address into the cache, wherein the page table entry comprises a plurality of indicators, each data block corresponding to an indicator, and, upon fetching the-data into the cache, the method comprises the further step of, in response to an indicator being set, zeroing (104) the corresponding data block. The invention further concerns a computer program product and a device therefor.

Abstract: Method for providing access to private digital content installed on a content server C(s), wherein a content manager server C(a) has a number of clients potentially interested in the private content; the method comprising the following steps performed at the content management server C(a): establishing a first communication channel with a client C(b) of the number of clients; receiving a query for private digital content from the client C(b) and sending an appropriate response, causing the client to establish a second communication channel with the content server; establishing a secure session with the content server C(s) over the first and second communication channel; establishing a new session key for the secure session and transmitting said new session key to the client C(b), so that the client can obtain the queried private digital content from the content server as if the client is the content management server.

Abstract: The present invention provides improved security in a virtual machine. By extending the capabilities of modern secure processors, privacy of computation is provided from both the owner of the equipment and other users executing on the processor, which is an advantageous feature for rentable, secure computers. In addition to the hardware extensions required to secure a virtualizable computer, an infrastructure for the deployment of such processors is also provided. Furthermore, a signaling flow to establish the various relationships between the owner, user and manufacturer of the equipment is disclosed.

Abstract: In an embodiment of the present invention, a scheduling operation is performed at a lower layer based on upper layer information. In another embodiment of the present invention, an action is performed at an upper layer based on received lower layer information. Also, a scheduling operation may be performed on at least one upper layer data packet at a lower layer based on a lower layer analysis of the upper layer data packet.

Abstract: Integrated base stations and a method of transmitting data units in a communications system for mobile devices. In one embodiment, an integrated base station includes a communications processor having a protocol stack configured with a media access control layer and a physical layer.

Abstract: In one embodiment, a dedicated channel (e.g., is a coded composite transport channel) is configured for each user equipment in a broadcast group based on a first spreading code and a second spreading code. A same first spreading code is assigned to each user equipment in the broadcast group, and the second spreading code is assigned uniquely to each user equipment in the broadcast group. In another embodiment, a transport format combination set is generated for each user equipment in a broadcast group of user equipment. Each transport format combination set indicates valid transport formats for the associated user equipment, and each transport format combination set is configured to support selectively broadcasting and uni-casting over dedicated channels to the broadcast group of user equipment.

Abstract: The present invention provides a method involving a tamper-resistant module and an authentication server. The method includes receiving, at the tamper-resistant module, information encrypted using a first secret key stored in the authentication server. The method also includes authenticating the authentication server in response to decrypting the information using a second secret key stored in the tamper-resistant module.

Abstract: A method of synchronizing with an uplink channel and a method of determining a propagation delay in a wireless communications system are provided. In the example method of synchronizing, a propagation delay between a target base station and a mobile station is calculated. Then, the calculated propagation delay is sent to the target base station. In the example method of determining a propagation delay, a first signal is received indicating a first measured chip offset between a downlink channel of a serving base station and a pilot signal of the target base station. A second signal indicating a second measured chip offset between an uplink channel of the mobile station and a pilot signal of the target base station is then received. A propagation delay between the target base station and the mobile station is calculated based at least in part on the first and second measured chip offsets.

Abstract: The present invention provides a method of wireless communication with a mobile unit and a base station router. The method may include providing, over a first channel, configuration information indicative of a second channel associated with the base station router and the mobile unit. The method may also include providing state information associated with the mobile unit to the base station router.

Abstract: In a method of communication, a first type of data packet is received. The first type of data packet is at least a portion of a second type of data packet. Based on the received first type of data packet, a determination is made as to whether to expect receipt of a subsequent first type of data packet in a given time interval. A status signal is sent if the subsequent first type of data packet is not received in the given time interval as determined in the determining step. In another method of communication, a data packet is received at a physical layer over a circuit switched physical channel. A status of the data packet is determined at the physical layer. A status report is sent to a higher protocol layer based on the determination.