Abstract: A method for enabling a mobile node to transmit encrypted data over a path including a wireless link and an untrusted link, while avoiding double encryption on any link. The data on the end-to-end path is encrypted using an application specific security mechanism, or an L2 mechanism is used for encrypting the data on the wireless link as mandated by the wireless standards, and an application specific security mechanism is used for encrypting the data on the untrusted link. By avoiding redundant double encryption, the method of the invention results in optimizing the use of network resources in bandwidth-limited wireless networks and increases the life of the mobile node battery.

Abstract: A system and method are provided for management of access security for access by a multimodal device to a converged fixed/mobile network. An inter-technology change-off monitoring entity (ICME) is provided to monitor an inter-technology change-off of the multimodal device and to notify a policy manager of the inter-technology change-off. The policy manager looks up in a policy database, security policies applicable to the user of the multimodal device and the particular technology being used by the multimodal device. The policy manager conveys to various policy enforcement points throughout the converged fixed/mobile network the applicable security policies which take into account the user's identity and the access technology being used.

Abstract: Apparatus, and an associated method for facilitating routing of a datagram sourced at a content source to a mobile node. The mobile node is selectably operable in a heterogeneous network having two or more network parts operable pursuant to different operating protocols. An ARP broadcast is generated either gratuitously or by proxy mechanism on behalf of the mobile by the GGSN, Access Router or by the Home Agent indicating the network element that is responsible for forwarding of datagrams to the mobile and thereby implying the network part with which the mobile node is resident. And, the datagram is forwarded from the gateway network to the network element that is responsible for forwarding of datagrams to the mobile node. The datagrams are then routed through the network part identified by the broadcast to be the network part with which the mobile node is resident.

Abstract: Apparatus, and an associated method, for facilitating routing of packet-formatted data in a packet radio communication system. When a mobile node roams out of its home network and into a foreign network, data routing is facilitated. A UPA (unique private address) tunnel, is selectably formed between the mobile node and a foreign agent. And, a UDP/MIP (User Datagram Protocol/Mobile IP) tunnel is selectably formed between the foreign agent and a home agent. Problems otherwise associated with the private address conflict and NAT/NAPT device traversal are avoided.

Abstract: A system and method are provided for management of access security by user and device. A security policy enforcement point is provided with a user policy module to receive user credentials from an access device of the user and a point for setting device dependent security policy to receive device credentials from the access device. A user policy is retrieved from a user database with use of the user credentials while a device policy is retrieved from a device database with use of the device credentials. The user policy and device policy are combined and used in the SPEP to enforce a user and device based security policy.

Abstract: Transparent caller name authentication is provided to authorized third parties by creating an Public Key Infrastructure (PKI) certificate chain. An owner of a registered caller name can authorize third parties to use the caller name by issuing a PKI sub-certificate to each authorized third party. An authenticated caller name displays the owner's name to the called party. Outsourcing and mobile employment is thereby facilitated, and called party confusion is reduced.

Abstract: An impersonation detection system for a wireless node of a wireless communication network is described. The system comprises an intrusion detection module for correlating the original data frames transmitted by the wireless node with incoming data frames received over the air interface. The wireless node is connected to the intrusion detection module over a secure link, for receiving a copy of the original data frames. A method for detecting impersonation based attacks at a wireless node is also disclosed.

Abstract: A method and apparatus are provided for authenticating a user attempting to establish a service which uses SIP. The user registers with the SIP server by providing the digital otoacoustic signature of the user. Thereafter, when the user attempts to initiate a session through the SIP server, the SIP server sends an Authorization Request message to the SIP client of the user. The SIP client reads the user's digital otoacoustic signature, generates a response based on the digital otoacoustic signature, and embeds the response in a second Invite message sent back to the SIP server. Meanwhile, the SIP server determines an expected response, based on the digital otoacoustic signature registered by the user. If the response provided by the SIP client matches the response expected by the SIP server, the SIP server allows establishment of the server.

Abstract: A system and method are provided for supporting storage and analysis by law enforcement agency premises equipment of intercepted network traffic. The system and method provide integrity of the intercepted network traffic stored in an archive in accordance with lawful intercept requirements by storing all of the intercepted traffic, both benign and malicious, in the archive in its original form. The system and method furthermore provide for security from any malicious data packets of the archive by separating the malicious packets from the benign packets and forwarding only the benign packets to analysis applications of the law enforcement agency premises equipment.

Abstract: A micro-mobility network routing system and method implementing a protocol that extends the macro mobility support of Mobile IP to support micro mobility is disclosed which permits a more efficient and easily implemented Internet routing protocol for network devices to be affected. The macro mobility feature herein refers to the notion in which the mobile node gains access to the Internet, while retaining the same IP address. This concept is used only once when the mobile node enters the coverage area of a foreign domain (eventually its home domain). The concept of micro mobility within this context eases routing packets to the mobile node while its moves within the foreign network. The present invention implements these new features via the use of message compositions and protocol extensions that extend the prior art Mobile IP protocols.

Abstract: A method and apparatus are provided for authenticating a user of a mobile phone. While the user holds the phone to his or her ear, a microphone near the earpiece emits clicks into the user's ear. The speaker of the phone measures the response from the ear as an otoacoustic signal. A processor digitizes the measured otoacoustic signal to produce a received digital otoacoustic signature, and compares this with a stored digital otoacoustic signature of a legitimate user. If the signatures match, the phone is enabled. The invention allows secure authentication of mobile phones in a manner very natural and convenient to users.

Abstract: A network paging system and method implementing a Mobile IP protocol that allows transparent routing of IP datagrams sent by a Correspondent Node (CN) (any Internet node that wants to communicate with a Mobile Node) to a Mobile Node (MN) in the Internet is disclosed. The IP paging protocol disclosed is an extension to Mobile IP to allow dormant mode operation permitting conservation of battery power when not receiving/sending IP datagrams. The disclosed technique permits a mobile node to alternate between dormant and active modes to conserve its power resources. In the disclosed invention, the mobile node does not perform location updates as long as it is in dormant mode. In a preferred embodiment, the implement IP paging protocol is a Layer-3 protocol used to find the paging area, in which the MN is located and to alert MN to come out of dormant mode, whenever there is an incoming traffic.

Abstract: The invention is a method and apparatus for registering a mobile node in both home and in foreign domains. A base station informs a base station router of the presence of a mobile entering the base station's coverage area by sending a mobile node advertisement message to a base station router. In addition, the mobile node sends a mobile IP registration request to the base station router. The base station router appends a base station router extension message to the mobile IP registration request (which contains an IP address of the base station router) and forwards the mobile IP registration request to a main access router. The main access router appends a multicast address extension to the mobile IP registration reply. The multicast address extension contains the multicast address allocated for the mobile node.

Abstract: The Internet Protocol mobility supporting method deals with supporting of roaming of a Mobile Node in a Mobile Internet Protocol Network from a home network towards a Visited Network. The home network comprises a home agent. The Mobile Internet Protocol Network excluding the visited network comprises a Foreign Agent. The method of the present invention comprises the step of forwarding a destination address towards the Home Agent by the Mobile Node at roaming of the Mobile Node from the home network to the visited network. Additionally, the Foreign Agent assigning entity, at request of the Mobile node assigns the Foreign Agent to the Mobile Node. Subsequently, the Home Agent establishes a path between the Home Agent and the Foreign Agent. Finally, a path between the Foreign Agent and the Mobile Node is established by the Foreign Agent based on the destination address.

Abstract: Apparatus, and an associated method, for facilitating routing of packet-formatted data in a packet radio communication system. When a mobile node roams out of its home network and into a foreign network, data routing is facilitated. A UPA (unique private address) tunnel, is selectably formed between the mobile node and a foreign agent. And, a UDP/MIP (User Datagram Protocol/Mobile IP) tunnel is selectably formed between the foreign agent and a home agent. Problems otherwise associated with the private address conflict and NAT/NAPT device traversal are avoided.

Abstract: Apparatus, and an associated method for facilitating routing of a datagram sourced at a content source to a mobile node. The mobile node is selectably operable in a heterogeneous network having two or more network parts operable pursuant to different operating protocols. An ARP broadcast is generated either gratuitously or by proxy mechanism on behalf of the mobile by the GGSN, Access Router or by the Home Agent indicating the network element that is responsible for forwarding of datagrams to the mobile and thereby implying the network part with which the mobile node is resident. And, the datagram is forwarded from the gateway network to the network element that is responsible for forwarding of datagrams to the mobile node. The datagrams are then routed through the network part identified by the broadcast to be the network part with which the mobile node is resident.

Abstract: A network paging system and method implementing a Mobile IP protocol that allows transparent routing of IP datagrams sent by a Correspondent Node (CN) (any Internet node that wants to communicate with a Mobile Node) to a Mobile Node (MN) in the Internet is disclosed. The IP paging protocol disclosed is an extension to Mobile IP to allow dormant mode operation permitting conservation of battery power when not receiving/sending IP datagrams. The disclosed technique permits a mobile node to alternate between dormant and active modes to conserve its power resources. In the disclosed invention, the mobile node does not perform location updates as long as it is in dormant mode. In a preferred embodiment, the implement IP paging protocol is a Layer-3 protocol used to find the paging area, in which the MN is located and to alert MN to come out of dormant mode, whenever there is an incoming traffic.