Abstract: A non-transitory computer readable medium and a method for gathering user equipment (UE) location information from a radio access network (RAN), the method may include: intercepting a UE location message sent from the RAN towards a core network element configured to process UE location messages, wherein the intercepting is executed by an intermediate entity positioned between the RAN and the core network element; extracting UE location information from the UE location message; and preventing the core network element from receiving the location information embedded in the UE location message.

Abstract: A method for updating filters, at a Packet Data Serving Node, with a care-of-address associated with at least one of a mobile station or a correspondent node. The method includes the steps of implementing a soft filtering rule at a Packet Data Serving Node and receiving, by the Packet Data Serving Node, a care-of-address that is associated with at least one the mobile station and a correspondent node. The method also includes updating, by the Packet Data Serving Node, filters with the care-of-address to correctly identify flows belonging to a particular session during Mobile IP use. The method further includes filtering, by the Packet Data Serving Node, packets including a care-of-address that is associated with one of the mobile station and the correspondent node.

Abstract: A method, a computer program product and a device, the method is for evaluating a state of a radio access network (RAN), and may include parsing control plane massages that are exchanged between the RAN and a core network that is coupled to the RAN; and determining, by an edge bandwidth manager, a current state of the RAN based on the control plane massages.

Abstract: When mobile node is connected to an access point outside the private network, a tunnel is formed between the mobile node and a home agent on the private network for the transfer of packets. When, the mobile node roams into a region accessible to the private network, the mobile node is connected to the private network using a private network access point while maintaining the tunnel between the mobile node and the home agent.

Abstract: The present invention provides location privacy against third parties while allowing route-optimized communication between the correspondent node and the mobile node. The mobile node's home address is hidden from an external observer thereby thwarting traffic analysis based attacks where a Home Address is correlated with a Care of Address of a mobile node (MN). A “privacy label” is used in place of a home address associated with the mobile node. The privacy label is supplied by the mobile node to the correspondent node in a way that that allows the privacy label to be bound to the home address, but does not allow the home address to be visible during the exchange. The privacy label may be also used to help prevent against replay attacks.

Abstract: A method, terminal, backend network entity, and system for discovering a network element in a communication system for a terminal, wherein the terminal is establishing a connection to a first part of the communication system, the discovering of the network element comprising a step of retrieving a network address of the network element from a backend network entity of the communication system, wherein the step of retrieving constitutes a part of an authentication of the terminal at the first part of the communication system by means of the backend network entity. Further, the retrieving can be based on a subscription profile of the terminal and/or a database at the backend network entity.

Abstract: A system for selectively updating an address of a mobile node capable of roaming in a home communication network and at least one visited network. The system including a database for storing at least one data entry which is a mapping between a humanly-readable identifier indicating the mobile node and a machine-readable identifier indicating a physical address at which the mobile node can be reached. A home agent in the home network has a connection to the database, and is operable to receive an update message from the mobile node when the mobile node roams into the visited network. Also there are units for determining whether the machine-readable identifier of the at least one entry in the database should be updated, wherein the database is updated if the update message additionally includes the humanly-readable identifier.

Abstract: A method for updating filters, at a Packet Data Serving Node, with a care-of-address associated with at least one of a mobile station or a correspondent node. The method includes the steps of implementing a soft filtering rule at a Packet Data Serving Node and receiving, by the Packet Data Serving Node, a care-of-address that is associated with at least one the mobile station and a correspondent node. The method also includes updating, by the Packet Data Serving Node, filters with the care-of-address to correctly identify flows belonging to a particular session during Mobile IP use. The method further includes filtering, by the Packet Data Serving Node, packets including a care-of-address that is associated with one of the mobile station and the correspondent node.

Abstract: A method for updating filters, at a Packet Data Serving Node, with a care-of-address associated with at least one of a mobile station or a correspondent node. The method includes the steps of implementing a soft filtering rule at a Packet Data Serving Node and receiving, by the Packet Data Serving Node, a care-of-address that is associated with at least one the mobile station and a correspondent node. The method also includes updating, by the Packet Data Serving Node, filters with the care-of-address to correctly identify flows belonging to a particular session during Mobile IP use. The method further includes filtering, by the Packet Data Serving Node, packets including a care-of-address that is associated with one of the mobile station and the correspondent node.

Abstract: A method and system for supporting mobile routers in Internet Protocol version 6 (IPv6) is provided. A mobile router obtains a care-of-address associated with an address configuration. The mobile router registers the care-of-address with a home agent. A bi-directional tunnel is established between the mobile router and the home agent. Packets are then forwarded via the bi-directional tunnel.

Abstract: A method for auto-configuring a home address by a mobile node, the method includes transmitting an update message from a mobile node to a home agent. The update message includes at least a nonce and an option for requesting a home prefix from the home agent. The method further includes processing the update message, by the home agent, and transmitting a home prefix message with the home prefix, from the home agent to the mobile node. The home prefix message is protected by a configuration key derived from the nonce. The method also includes deriving, by the mobile node, a home address from the home prefix and transmitting the home address to the home agent for verification of the uniqueness of the home address and sending an acknowledgement message, from the home agent to the mobile, upon successful verification of the uniqueness of the home address.

Abstract: A method and system for supporting mobile routers in Internet Protocol version 6 (IPv6) is provided. A mobile router obtains a care-of-address associated with an address configuration. The mobile router registers the care-of-address with a home agent. A bi-directional tunnel is established between the mobile router and the home agent. Packets are then forwarded via the bi-directional tunnel.

Abstract: A system and method is provided that enables the transfer of policy resource tokens (PRT) in the process of a handover of a mobile node in a wireless network. The system includes a granting agent that grants the PRT to a first access router to enable the mobile node to access network resources. In one embodiment, in the process of handing over the mobile node, the first access router provides the PRT to the second access router, thereby reducing data latency, and a disruption for an application executing on the mobile node. In another embodiment, the mobile node provides the PRT to the second access router after connectivity is established. A PRT data structure also is provided that includes a data field of profile types. A profile type describes context authorization information for granting access to a network resource.

Abstract: A method, mobile station, system, network entity and computer program product are provided for enabling a mobile station (MS) to select which home agent (HA) in a visited network the mobile station will use when accessing packet data services, such as CDMA2000 Packet Data Services. In particular, one or more local home agent addresses are transmitted to the mobile station in response to the generation and transmittal, by the mobile station, of a tunnel setup request. The one or more addresses transmitted may be based on an IP Service Identifier generated by the mobile station and included in the tunnel setup request (i.e., in response to the mobile station requesting a local home agent). Alternatively, the one or more addresses may be based on a Network Access Identifier associated with the mobile station, as well as an IP address associated with the tunnel termination endpoint that received the tunnel setup request (i.e.

Abstract: When mobile node is connected to an access point outside the private network, a tunnel is formed between the mobile node and a home agent on the private network for the transfer of packets. When, the mobile node roams into a region accessible to the private network, the mobile node is connected to the private network using a private network access point while maintaining the tunnel between the mobile node and the home agent.

Abstract: An approach is provided for minimizing tunnel overhead across wireless networks. a method comprises accessing a first wireless network. Using a first wireless network, an address of a security gateway resident within a second wireless network is discovered. A key exchange is initiated with the security gateway to establish a secure tunnel, wherein the security gateway communicates with a home agent configured to allocate a home address for establishing a mobile tunnel within the secure tunnel. The security gateway and the home agent are within the second wireless network.

Abstract: A method, terminal, backend network entity, and system for discovering a network element in a communication system for a terminal, wherein the terminal is establishing a connection to a first part of the communication system, the discovering of the network element comprising a step of retrieving a network address of the network element from a backend network entity of the communication system, wherein the step of retrieving constitutes a part of an authentication of the terminal at the first part of the communication system by means of the backend network entity. Further, the retrieving can be based on a subscription profile of the terminal and/or a database at the backend network entity.

Abstract: A method for updating filters, at a Packet Data Serving Node, with a care-of-address associated with at least one of a mobile station or a correspondent node. The method includes the steps of implementing a soft filtering rule at a Packet Data Serving Node and receiving, by the Packet Data Serving Node, a care-of-address that is associated with at least one the mobile station and a correspondent node. The method also includes updating, by the Packet Data Serving Node, filters with the care-of-address to correctly identify flows belonging to a particular session during Mobile IP use. The method further includes filtering, by the Packet Data Serving Node, packets including a care-of-address that is associated with one of the mobile station and the correspondent node.

Abstract: A method of communication includes the step of providing an address for a mobile node. The method also includes assigning a lifetime to the provided address and storing the assigned lifetime.

Abstract: A method of configuring routers facilitates handoff of user equipment from a router to another router. The method includes configuring a virtual interface in a current router used by user equipment. The method also includes assigning a global address to the virtual interface. The global address is assigned to the virtual interface that is used to facilitate handoff of the user equipment from a current router to a new router. A system, router and user equipment are configured to implement the method.