Abstract: An improvement in the compilation of classification tables from across control lists increases the efficiency of memory utilization by fragments in the lower level tables and using the classification ID's from a pair of higher-level tables as pointers to the fragments and as indicators of the depth of the entries in the fragments. A further improvement makes use of aggregate bit vectors, thereby simplifying construction of the lower-level tables. The bit-vector sections preferably coincide with the cache lines of the processing, thereby maximizing the speed with which the relevant bits in the bit vector can be identified from the aggregate bit vectors.

Abstract: A service selection gateway (SSG) which receives data indicating tariff switching points, and sends accounting records enabling accurate computation of traffic volumes in each switching duration is described. In one embodiment, a counter value indicating the traffic volume for each tariff duration is sent. In an alternative embodiment, at least one accounting record containing two counters is sent in each duration, with one counter indicating an aggregate count of traffic volume (e.g., since the subscriber started a session) and another counter containing a marginal (or incremental) value since a switching point. Such an accounting record can be sent at any time point in a tariff duration, and the traffic volume in each tariff duration can be computed accurately.

Abstract: A service selection gateway (SSG) which allows a subscriber to access services operating using a changing set of access addresses. The SSG may be initially configured to forward packets related to a set of addresses associated with a service. The SSG may then accept a request to a change the set of addresses. In response to the request, the SSG may be configured to forward packets related to the changed set of addresses.

Abstract: A method is disclosed for authorizing a prepaid network service in a data network. A network end station issues a request for a prepaid network service. At a network node, such as a router serving as a gateway for selecting services, a determination is made about whether a user associated with the end station is authorized to access the prepaid network service. Network traffic from the end station is forwarded to a service provider only when the user is authorized to use the prepaid network service. Specific embodiments provide message flows among a mobile station, gateway support node, router, and authentication server that support providing prepaid services in a packet-switched network for mobile communication. In certain embodiments, a connection is held open for an end station while a prepaid quota value is refreshed at a portal, thereby reducing overhead and precluding the need to repeat user logon steps.