Abstract: In some of the preferred embodiments, methods for converting XML data to TLV format are provided for use in, e.g., query and/or response in, e.g., network discovery and the like applications.

Abstract: The preferred embodiments herein relate to methods and systems for controlling a handoff decision related to switch back of a mobile node between a first network and a second network in a media independent pre-authentication framework and/or to methods and systems for mitigating effects of undesired switch back of a mobile node between a first network and a second network in a media independent pre-authentication framework.

Abstract: According to some of the preferred embodiments, a method for proactively establishing a security association between a mobile node in a visiting network and an authentication agent in another network to which the mobile node can move includes: negotiating pre-authentication using a flag in a message header that indicates whether the communication is for establishing a pre-authentication security association; and one of the mobile node and the authentication agent initiating pre-authentication by transmitting a message with the flag set in its message header, and the other of the mobile node and the authentication agent responding with the flag set in its message header only if it supports the pre-authentication.

Abstract: In some illustrative embodiments, a novel system and method is provided that can, for example, extend concepts of pre-authentication (such as, e.g., IEEE 802.11i pre-authentication) so as to operate across networks or subnetworks (such as, e.g., IP subnets). In preferred embodiments, a novel architecture includes one or both of two new mechanisms that substantially improve, e.g., higher-layer handoff performance. A first mechanism is referred to as “pre-configuration,” which allows a mobile to pre-configure higher-layer information effective in candidate IP subnets to handoff. A second mechanism is referred to as “virtual soft-handoff,” which allows a mobile to send or receive packets through the candidate IP subnets even before it is actually perform a handoff to any of the candidate IP subnets.

Abstract: A system and method is disclosed for dynamically and securely establishing a tunnel for a mobile device. In the preferred embodiments, the system and method operate to dynamically assign one or more tunnel endpoint addresses to a client which is not on the same IP-link as an authentication agent depending on an authentication result based on using an authentication protocol source port number in order to address communications.

Abstract: According to some embodiments, systems and methods for binding dynamic host configuration and network access authentication are provided related to, inter alia, interactions between a PAA (PANA Authentication Agent) and a DHCP (Dynamic Host Configuration Protocol) server, such as, e.g., for synchronization between the PANA SA state and the DHCP SA state, such as, e.g., maintaining synchronization when a connection is lost. In some embodiments, systems and methods for binding network bridge and network access authentication are also provided related to, inter alia, interactions between a PAA and a layer-2 switch, such as, e.g., for avoiding service thefts and the like (such as, e.g., MAC address and/or IP address spoofing) in the context of, e.g., the above. In some other embodiments, systems and methods for bootstrapping multicast security from network access authentication protocol are also provided related to, inter alia, key management for protected IP multicast streams, such as, e.g.

Abstract: In some illustrative embodiments, an IP-layer based network selection and multihoming method is provided that enables a flexible and secure dynamic selection of one or more serving networks for use by a client node. The method is independent of any link-layer technology. A serving network can be an ISP network, a NAP network exchange facility, a VLAN, or the like. Network information is advertised to a client node, the client node is authenticated and authorized for use of an access router, and a secure tunnel is established between the client node and the access router. The method can be implemented by using standard protocols, and can work over any existing or future link-layer technologies that are able to carry IP datagrams, without any modification.

Abstract: In some illustrative embodiments, a novel system and method is provided that can, for example, extend concepts of pre-authentication (such as, e.g., IEEE 802.11i pre-authentication) so as to operate across networks or subnetworks (such as, e.g., IP subnets). In preferred embodiments, a novel architecture includes one or both of two new mechanisms that substantially improve, e.g., higher-layer handoff performance. A first mechanism is referred to as “pre-configuration,” which allows a mobile to pre-configure higher-layer information effective in candidate IP subnets to handoff. A second mechanism is referred to as “virtual soft-handoff,” which allows a mobile to send or receive packets through the candidate IP subnets even before it is actually perform a handoff to any of the candidate IP subnets.

Abstract: A computing node accesses toll-free or at a reduced toll, a subscriber server through an access network and a global communications network, i.e., the Internet. A computing node generates a plurality of network packets including at least one packet having destination identification information. A client within the computing device receives the at least one packet and transmits the destination identification information from the at least one packet to a management server. The management server verifies the destination identification information corresponds to a registered subscriber and sends an authorization signal to the client. The client allows the plurality of network packets, which have the destination identification information corresponding to a registered subscriber server, to be transmitted to a registered subscriber server.

Abstract: A label switched path set up scheme which is capable of detecting a loop of the label switched path efficiently and quickly, and which can enable the switching of the label switched path even in the case where conventionally a label switch path loop would be erroneously detected at a time of the route change, without requiring a label set up retry operation from a previous hop node device of the node device that have erroneously detected the loop which would have been necessary conventionally. A label switched path set up request message is transferred up to a node that can confirm that the path does not form a loop, while each node through which the message passes stores the fact that it is in a message processing state. Then, in a process where a response message is returned from that node, the message processing state of each node on the route of the path is released sequentially, and this releasing establishes the path set up.

Abstract: A packet scheduling scheme capable of realizing a fair scheduling regardless of weights of connections. A packet scheduler has a plurality of packet queues for temporarily storing entered packets, to each of which a weight is set up; a packet input unit for entering packets into the packet queues; a scheduling information management unit for managing scheduling information for specifying an order to read out packets stored in the packet queues, according to a queue length of each packet queue and the weight set up for each packet queue; and a packet output unit for reading out and outputting desired packets from the packet queues according to the scheduling information.

Abstract: A biaxially oriented polyester film for magnetic recording media improved in slipperiness, shaving resistance and scratch resistance by protrusions formed on the film surface, namely, a polyester film for magnetic recording media wherein the film is a biaxially oriented polyester film which contains (I) heat resistant high molecular particles having an average particle size of 0.3 to 1.5 .mu.m in 0.001 to 0.5% by weight of the polyester, and(II) alumina particles having an independent existence rate of 80% or more and an average particle size of 0.06 to 0.2 .mu.m in 0.05 to 1.0% by weight of the polyester and/or colloidal silica particles having an independent existence rate of 80% or more and an average particle size of 0.3 .mu.m or less in 0.05 to 2.0% by weight of the polyester;wherein the distribution curve, in the range where the height (x : .mu.m) is 0.05 .mu.m or more and the number of the protrusions (y : per mm.sup.2) is 30 protrusions/mm.sup.