Abstract: The invention is concerned with transmission of speech information over mixed networks, particularly over a segment using packet transmission in an otherwise circuit switched data transmission network. According to the invention, PCM transmission lines are connected with a packet based network such as an IP network in such a way, that data from one or more channels of a first PCM transmission line is collected in the payload part of a data packet. Further, the destination address of the data packet is constructed in such a way, that the packet network entity being connected to the second PCM transmission line can determine based on the destination address of the packet, to which channel or channels of the second PCM transmission line the data should be transmitted.

Abstract: An apparatus and method is provided for facilitating the handoff of a mobile terminal from a first access device in a first network to a second access device in a second network. Prior to performing a handoff operation, the first access device inquires as to whether the mobile terminal is authorized to be handed off to the second access device and, in response thereto, completes the handoff. If the mobile terminal is not authorized to be handed off to the second access device, the handoff operation is inhibited, preferably without using any radio frequency resources of the second access device.

Abstract: A General Packet Radio System (GPRS)-based communications network that includes a Serving GPRS Support Node (SGSN) and a Gateway GPRS Support Node (GGSN) assigns an IPv4 address to a mobile station in a GPRS-based network that conserves IPv4 addresses and simultaneously maintains end-to-end security and application friendliness. The SGSN receives from a mobile station an Activate PDP Context Request message having an APN field that requests a private or a public network address. The SGSN then sends a Create PDP Context Request message to the GGSN. The GGSN assigns a private or a public network address to the mobile station, and sends a Create PDP Context Response message to the SGSN. In turn, the SGSN sends an Activate PDP Context Accept message to the mobile station assigning a private or a public network address to the mobile station.

Abstract: A method and system for adding and monitoring a server to an existing server pool are disclosed. A joining server registers with a server within the server pool. The joining server is authenticated by a server within the server pool. When the joining server receives the list of all active servers within the server pool, the joining server computes a new identification for itself, assigns that identification to itself, and then determines a caretaker server to monitor the joining server. Once the registration is successful, the newly joined server can communicate within the server pool and keep current of all events and changing conditions of the server pool.

Abstract: A method and apparatus for providing resource discovery using multicast scope selection is disclosed. The method includes the discoverer sending a first request message having a first selected scope to a known multicast group, setting a timer after the first request message is sent, detecting whether a confirm message is received from an endpoint before the timer expires, terminating when a confirm message is received from an endpoint prior to the expiration of the timer, determining whether a scope increase is allowed when a confirm message is not received from an endpoint before the expiration of the timer, terminating when a scope increase is not allowed, increasing the scope to the second selected scope when a scope increase is allowed, resetting the timer and sending a second request message having the second selected scope when a confirm message is not received from an endpoint in response to the first request message, the second selected scope being greater than the first selected scope.

Abstract: A method and system for authenticating messages received from users across multiple remote devices are provided. A residential gateway authenticates a user using a modified digest authentication scheme by storing a sequence number in the nonce field. Access encryption keys and sequence number spaces may be assigned based on user or on user/remote device pairs. When sequence number spaces are assigned based on user, and the user uses multiple remote devices to access the residential gateway, the sequence number space may be divided into mini-sequence number spaces for each of the multiple remote devices. Access encryption may be two-tiered, such that a secondary key is generated based on a user's primary key, and the secondary key is only valid for a limited amount of time before it expires and a new secondary key must be generated.

Abstract: Additions of extensions to SyncML protocol to incorporate PKI-based and XML-based security mechanisms. The present invention involves the partial incorporation of the PKI based mechanisms present in the Rights Object Acquisition Protocol (ROAP) suite of OMA DRMv2 model into the SyncML protocol, resulting in security enhancements for SyncML.

Abstract: A method and apparatus which permits access, by intermediate nodes between source and destination nodes, to selected information such as transport level information, normally included in a payload of a packet upon which encrypting security processing has been performed according to an encrypting security protocol. In the present invention, prior to performing encrypting security processing on the packet, according to the security protocol, information related to selected information normally included in a payload of the packet is stored in a field in the header of the packet where the field is not subject to the encrypting security processing. Thereafter, encrypting security processing according to the security protocol is performed on the packet.

Abstract: A method and apparatus to provide encryption and authentication of a mini-packet in a multiplexed real time protocol (RTP) payload. Mini-packets are assembled into a payload wherein each mini-packet includes an associated mini-header for ensuring proper processing of each mini-packet. Padding is added to mini-packets when the mini-packets are encrypted to insure each mini-packet is an integral multiple of a predetermined block size. Padding for each mini-packet is determined according to p=n?k*floor((n?1)/k), wherein p is the amount of padding added to each mini-packet, n is the actual data size, and k is the block size. The padding added to the data for each packet comprises p?1 units of padding and a final padding unit for indicating the amount of padding. An authenticator may also be added to each mini-packet. A length indicator is set in each mini-header for indicating a total length of the mini-packet including the authenticator.

Abstract: A method and system for transferring contexts from a previous access router (PR) to a new access router (NR) that is subsequently associated with a Mobile Node (MN). For example, transferred contexts may include, but are not limited to, Security, Quality of Service (QOS), Header Compression, and Buffers. A context is transferred from the PR to the NR. Any change in an element of the context is conveyed by the NR to the MN in a secure fashion, even though a Security Association does not yet exist between the NR and MN. The NR provides an authenticated security context update to the MN, e.g., advising when the type of encryption has changed from Triple Data Encryption Standard (DES) to DES. The NR utilizes the Security Association between the PR and the MN, to provide such an authenticated security context update to the MN over a RAN or a wireless LAN.

Abstract: A method and system for authenticating messages received from users across multiple remote devices are provided. A residential gateway authenticates a user using a modified digest authentication scheme by storing a sequence number in the nonce field. Access encryption keys and sequence number spaces may be assigned based on user or on user/remote device pairs. When sequence number spaces are assigned based on user, and the user uses multiple remote devices to access the residential gateway, the sequence number space may be divided into mini-sequence number spaces for each of the multiple remote devices. Access encryption may be two-tiered, such that a secondary key is generated based on a user's primary key, and the secondary key is only valid for a limited amount of time before it expires and a new secondary key must be generated.

Abstract: A method and system for transferring contexts from a previous access router (PR) to a new access router (NR) that is subsequently associated with a Mobile Node (MN). For example, transferred contexts may include, but are not limited to, Security, Quality of Service (QOS), Header Compression, and Buffers. A context is transferred from the PR to the NR. Any change in an element of the context is conveyed by the NR to the MN in a secure fashion, even though a Security Association does not yet exist between the NR and MN. The NR provides an authenticated security context update to the MN, e.g., advising when the type of encryption has changed from Triple Data Encryption Standard (DES) to DES. The NR utilizes the Security Association between the PR and the MN, to provide such an authenticated security context update to the MN over a RAN or a wireless LAN.

Abstract: A method and system for adding and monitoring a server to an existing server pool are disclosed. A joining server registers with a server within the server pool. The joining server is authenticated by a server within the server pool. When the joining server receives the list of all active servers within the server pool, the joining computes a new identification for itself, assigns that identification to itself, and then determines a caretaker server to monitor the joining server. Once the registration is successful, the newly joined server can communicate within the server pool and keep current of all events and changing conditions of the server pool.

Abstract: A General Packet Radio System (GPRS)-based communications network that includes a Serving GPRS Support Node (SGSN) and a Gateway GPRS Support Node (GGSN) assigns an IPv4 address to a mobile station in a GPRS-based network that conserves IPv4 addresses and simultaneously maintains end-to-end security and application friendliness. The SGSN receives from a mobile station an Activate PDP Context Request message having an APN field that requests a private or a public network address. The SGSN then sends a Create PDP Context Request message to the GGSN. The GGSN assigns a private or a public network address to the mobile station, and sends a Create PDP Context Response message to the SGSN. In turn, the SGSN sends an Activate PDP Context Accept message to the mobile station assigning a private or a public network address to the mobile station.

Abstract: An apparatus and method is provided for facilitating the handoff of a mobile terminal from a first access device in a first network to a second access device in a second network. Prior to performing a handoff operation, the first access device inquires as to whether the mobile terminal is authorized to be handed off to the second access device and, in response thereto, completes the handoff. If the mobile terminal is not authorized to be handed off to the second access device, the handoff operation is inhibited, preferably without using any radio frequency resources of the second access device.

Abstract: A method and apparatus for improving call setup efficiency in multimedia communication systems is disclosed. The present invention performs call setup in H.323 systems using fewer message exchanges, thereby resulting in a more efficient call setup mechanism. Moreover, no call setup functionality is sacrificed by resorting to fewer message exchanges. The method includes placing a call at a first endpoint to a remote endpoint, requesting admission from a gatekeeper for the call, returning an accept message to the first endpoint, the accept message including a token for providing information to the remote endpoint alleviating the need of the remote endpoint to request admission from a gatekeeper, routing a setup message to the remote endpoint, the setup message including the token and completing a call setup based upon information in the token.

Abstract: A method and apparatus for providing resource discovery using multicast scope selection is disclosed. The method includes the discoverer sending a first request message having a first selected scope to a known multicast group, setting a timer after the first request message is sent, detecting whether a confirm message is received from an endpoint before the timer expires, terminating when a confirm message is received from an endpoint prior to the expiration of the timer, determining whether a scope increase is allowed when a confirm message is not received from an endpoint before the expiration of the timer, terminating when a scope increase is not allowed, increasing the scope to the second selected scope when a scope increase is allowed, resetting the timer and sending a second request message having the second selected scope when a confirm message is not received from an endpoint in response to the first request message, the second selected scope being greater than the first selected scope.

Abstract: A method and apparatus for providing resource discovery using multicast scope selection is disclosed. The method includes the discoverer sending a first request message having a first selected scope to a known multicast group, setting a timer after the first request message is sent, detecting whether a confirm message is received from an endpoint before the timer expires, terminating when a confirm message is received from an endpoint prior to the expiration of the timer, determining whether a scope increase is allowed when a confirm message is not received from an endpoint before the expiration of the timer, terminating when a scope increase is not allowed, increasing the scope to the second selected scope when a scope increase is allowed, resetting the timer and sending a second request message having the second selected scope when a confirm message is not received from an endpoint in response to the first request message, the second selected scope being greater than the first selected scope.

Abstract: A method and apparatus for providing mini packet switching in IP networks, e.g., IP based cellular access networks and IP telephony (IPTEL) gateway networks. The method and apparatus provide a signaling scheme that establishes a connection between the source and destination node, wherein channels at each intermediate node are associated for a single end-to-end connection. This enables demultiplexing and multiplexing mini packets at intermediate nodes in a RAN and CN. The method includes receiving a payload at a node, the payload including a plurality of multiplexed mini packets, each mini packet having a header, wherein the header identifies a user and a connection associated therewith, demultiplexing the mini packets, analyzing the header of each mini packet to determine a processing for the mini packet and multiplexing packets having a common next hop in a new RTP payload.