Abstract: Systems and methods include receiving a request, in a cloud system from a user device, to access an application, wherein the application is in one of a public cloud, a private cloud, and an enterprise network, and wherein the user device is remote over the Internet; determining if the user device is permitted to access the application; if the user device is not permitted to access the application, notifying the user device the application does not exist; and if the user device is permitted to access the application, stitching together connections between the cloud system, the application, and the user device to provide access to the application.

Abstract: Systems and methods include receiving a request, in a cloud system from a user device, to access an application, wherein the application is in one of a public cloud, a private cloud, and an enterprise network, and wherein the user device is remote over the Internet; determining if the user device is permitted to access the application; if the user device is not permitted to access the application, notifying the user device the application does not exist; and if the user device is permitted to access the application, stitching together connections between the cloud system, the application, and the user device to provide access to the application.

Abstract: A virtual private access method implemented by a cloud system, includes receiving a request to access resources from a user device, wherein the resources are located in one of a public cloud and an enterprise network and the user device is remote therefrom on the Internet; forwarding the request to a central authority for a policy look up and for a determination of connection information to make an associated secure connection through the cloud system to the resources; receiving the connection information from the central authority responsive to an authorized policy look up; and creating secure tunnels between the user device and the resources based on the connection information.

Abstract: A virtual private access method implemented by a cloud system, includes receiving a request to access resources from a user device, wherein the resources are located in one of a public cloud and an enterprise network and the user device is remote therefrom on the Internet; forwarding the request to a central authority for a policy look up and for a determination of connection information to make an associated secure connection through the cloud system to the resources; receiving the connection information from the central authority responsive to an authorized policy look up; and creating secure tunnels between the user device and the resources based on the connection information.

Abstract: A method includes connecting to a client at a Virtual Private Network (VPN) device in a cloud system; forwarding requests from the client for the Internet or public clouds accordingly; and, for requests for an enterprise associated with the client, contacting a topology controller to fetch a topology of the enterprise, causing a tunnel to be established from the enterprise to the VPN device, and forwarding the requests for the enterprise through the tunnel. A cloud system and VPN system are also described. Advantageously, connections between the cloud and on-premises proxy are dynamic, on-demand and orchestrated by the cloud. Security is provided at the edge—there is no need to punch any holes in the existing on-premises firewalls.

Abstract: A method includes connecting to a client at a Virtual Private Network (VPN) device in a cloud system; forwarding requests from the client for the Internet or public clouds accordingly; and, for requests for an enterprise associated with the client, contacting a topology controller to fetch a topology of the enterprise, causing a tunnel to be established from the enterprise to the VPN device, and forwarding the requests for the enterprise through the tunnel. A cloud system and VPN system are also described. Advantageously, connections between the cloud and on-premises proxy are dynamic, on-demand and orchestrated by the cloud. Security is provided at the edge—there is no need to punch any holes in the existing on-premises firewalls.

Abstract: A wireless communication device for accessing a wireless network and downloading a software upgrade file. The wireless communication device comprises: i) a CPU for controlling wireless communications with the wireless network; ii) a first memory associated with the first CPU; iii) a CPU for executing at least one end-user application on the wireless communication device; and iv) a second memory associated with the second CPU. The first CPU downloads the software upgrade file from the wireless network and stores the downloaded software upgrade file in the second memory for subsequent execution. The first CPU and the second CPU share resources in order to carry out software upgrades for either or both CPUs.

Abstract: A method for reducing power consumption in a mobile station is provided. The method includes holding data associated with a first polling message until a first scheduled RF wake-up of the mobile station. The method also includes sending the data associated with the first polling message at substantially the same time as the first scheduled RF wake-up of the mobile station. The method further includes holding a second polling message until a second scheduled RF wake-up of the mobile station. The scheduled RF wake-ups of the mobile station are determined according to a schedule established by a service provider of the wireless communication network. In certain embodiments, the polling messages are associated with an ActiveSync® Ping command.

Abstract: A mobile station capable of being upgraded by a delta file received from a software upgrade server via a wireless network. The mobile station comprises: 1) a memory for storing an original image file and the delta file, wherein the delta file is suitable for upgrading the original image file; and 2) a controller for modifying the original image file according to instructions stored in the delta file to thereby generate an upgraded image file.

Abstract: A wireless communication network is provided. The network includes a plurality of mobile stations and at least one radio network controller (RNC) in communication with at least one of the mobile stations. The RNC is configured to receive a PDP context message from a first one of the mobile stations, the PDP context message having a traffic class associated with an idle connection. The RNC is also configured, in response to receiving the PDP context message, to send a connection release message to the first mobile station. The connection release message directs the first mobile station to move to a dormant state.

Abstract: A wireless communication device stores a system GUI configuration file and a downloaded service provider GUI configuration file, each of which contains a text name checksum value that is calculated using the text names of the GUI parameter data stored either the system GUI configuration file or the service provider GUI configuration file. The text name checksum values are based on the text names of the GUI parameter data. After the download operation is complete, a text name checksum comparator program compares the downloaded text name checksum value to the initial text name checksum value in the system GUI configuration file. If the two text name checksum values do not match, the downloaded service provider GUI configuration file is rejected.

Abstract: There is disclosed a security device for use in a wireless network comprising a group of base stations that communicate with numerous mobile stations. The security device prevents an unprovisioned one of the mobile stations from accessing an Internet protocol (IP) data network through the wireless network. The security device comprises a first controller for receiving from the unprovisioned mobile station an IP data packet comprising an IP packet header and an IP packet payload. The first controller replaces the IP packet header with a replacement IP packet header containing an IP address of a selected provisioning server of the wireless network. The first controller selects the provisioning server by selecting the IP address in the replacement IP packet header according to a load spreading algorithm.

Abstract: A method for reducing power consumption in a mobile station is provided. The method includes holding data associated with a first polling message until a first scheduled RF wake-up of the mobile station. The method also includes sending the data associated with the first polling message at substantially the same time as the first scheduled RF wake-up of the mobile station. The method further includes holding a second polling message until a second scheduled RF wake-up of the mobile station. The scheduled RF wake-ups of the mobile station are determined according to a schedule established by a service provider of the wireless communication network. In certain embodiments, the polling messages are associated with an ActiveSync® Ping command.

Abstract: A wireless communication device capable of downloading a software update file from a wireless network. The wireless communication device comprises a non-volatile memory that is re-programmed by sectors. The non-volatile memory stores: i) a target file to be updated, ii) the downloaded software update file, and iii) a journal comprising a plurality of entries, each of the entries containing status information associated with a re-programmed sector of the non-volatile memory. The wireless communication device also comprises a random access memory and a main processor that replaces target code in the target file with replacement code from the downloaded software update file. The main processor creates a first block of replacement code in the random access memory and re-programs a first target sector of the non-volatile memory by storing the first block of replacement code into the first target sector.

Abstract: A software upgrade server that remotely links a software upgrade file as a DLL and transmits the DLL to a mobile station via a wireless network. The mobile station comprises a memory for storing the software file and a controller that communicates with the software upgrade server. The controller receives a message from the software upgrade server indicating a software file is available for upgrading. The controller determines an available space in the memory where the available software file may be installed and transmits to the software upgrade server a target address at the start of the available memory space. The server uses the target address to link a plurality of object files into a DLL and transmits the DLL to the mobile station.

Abstract: For use in a mobile ad hoc network (MANET), a first MANET node for routing data packets using Layer 2 information. The first MANET node comprises: 1) a radio frequency (RF) transceiver for wirelessly communicating with other MANET nodes; and 2) a controller for receiving incoming data packets from the RF transceiver and sending outgoing data packets to the RF transceiver. The controller receives a first data packet from an Internet protocol (IP) layer associated with the first MANET node, determines a first medium access control (MAC) layer address associated with the first data packet, and adds the first MAC layer address to the first data packet.

Abstract: A segmented linker for generating from an original binary file an upgraded binary file suitable for replacing a copy of the original binary file installed in a target device. The segmented linker receives as inputs a plurality of objects, the original binary file, and a memory map input file associated with a target device. The segmented linker preserves in the upgraded binary file at least some of the spatial locality of reference of code in the original binary file. The segmented linker further receives as an input a linker guideline file that defines the layout of objects having spatial locality of reference in the original binary file. The segmented linker uses the linker guideline file to limit the propagation of cascading address references in the upgraded binary file.

Abstract: A method of generating a composite delta file based on the differences between an original file and an upgraded file. The method comprises the steps of: 1) segmenting the original binary file into segments of size N; 2) segmenting the upgraded binary file into segments of size N; 3) detecting a first set of differences between a first segment from the original binary file and a first segment from the upgraded binary file; and 4) generating a first delta file from the detected first set of differences. The method further comprises the steps of: 4) detecting a second set of differences between a second segment from the original binary file and a second segment from the upgraded binary file; and 5) generating a second delta file from the detected second set of differences. The first and second delta files are combined to form the composite delta file.

Abstract: A software upgrade server capable of upgrading a wireless mobile station via a wireless network. The software upgrade server comprises: 1) a database for storing a plurality of software upgrade files as a plurality of object files and a plurality of image files suitable for use in the wireless mobile station; and 2) an upgrade controller associated with the database for communicating with the mobile station via the wireless network. The upgrade controller receives from the mobile station a select message selecting one of the software upgrade files and a target address associated with an original image file in a memory of the mobile station. The upgrade controller links selected object files to form a dynamically linked library (DLL) file based on the target address.

Abstract: An access point for communicating with mobile stations in an integrated wireless network. The access point comprises a first transceiver for communicating with selected mobile stations within a short distance of the access point and an input/output interface that couples the access point to an external mobile station via a communication bus. The externally coupled mobile station communicates with a first base station in a wireless public network. The access point further comprises a data processor that communicates with the externally coupled mobile station via the input/output interface and interconnection circuitry that transfers data traffic between the first transceiver and the data processor. The access point enables the selected mobile stations to communicate with the first base station via the externally coupled mobile station.