专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20070256120A1 System and method for implementing fast reauthentication 有权
标题翻译：实现快速重新认证的系统和方法
公开(公告)号：US20070256120A1
公开(公告)日：2007-11-01
申请号：US11411482
申请日：2006-04-26
申请人： Kevin Shatzkamer , Anand Oswal , Mark Grayson , Jayaraman Iyer , Navan Narang
发明人： Kevin Shatzkamer , Anand Oswal , Mark Grayson , Jayaraman Iyer , Navan Narang
IPC分类号： H04L9/32
CPC分类号： H04L63/0892 , H04L63/08 , H04L63/164 , H04W12/06 , H04W88/16
摘要： A system for efficiently reauthenticating a client of a network. In a specific embodiment, the system includes an authentication server and a Security GateWay (SGW) in communication with the client. The SGW includes reauthentication information associated with the client. In a more specific embodiment, the authentication server includes an Authentication, Authorization, and Accounting (AAA) server. The SGW further includes one or more routines for employing the reauthentication information to reauthenticate the client. The AAA server performs initial authentication of the client to enable client access to the network, which yields the reauthentication information. The reauthentication information includes one or more keys and/or counters, such as an authorization key, an encryption key, and a master key, which is/are predetermined by the AAA server.
摘要翻译：一种用于有效地重新认证网络客户端的系统。在具体实施例中，系统包括与客户端通信的认证服务器和安全门禁（SGW）。 SGW包括与客户端相关联的重新认证信息。在更具体的实施例中，认证服务器包括认证，授权和计费（AAA）服务器。 SGW还包括用于使用重新认证信息重新认证客户端的一个或多个例程。 AAA服务器执行客户端的初始认证，以使客户端能够访问网络，从而产生重新认证信息。重新认证信息包括由AAA服务器预先确定的一个或多个密钥和/或计数器，例如授权密钥，加密密钥和主密钥。

2. 发明授权

US08411650B2 Method and system for providing virtual private network services through a mobile IP home agent 有权
标题翻译：通过移动IP归属代理提供虚拟专用网络服务的方法和系统
公开(公告)号：US08411650B2
公开(公告)日：2013-04-02
申请号：US11108560
申请日：2005-04-18
申请人： Jayaraman R. Iyer , Navan Narang , Michael L. Shannon , Arghya T. Mukherjee
发明人： Jayaraman R. Iyer , Navan Narang , Michael L. Shannon , Arghya T. Mukherjee
IPC分类号： H04W4/00
CPC分类号： H04L12/4641 , H04L63/0272 , H04W8/04 , H04W12/02
摘要： A method for providing a virtual private network by home agent in a mobile IP environment includes providing a home agent operable to receive a registration request from a foreign agent and negotiate conditions of attachment of a mobile node to the foreign agent and further operable to store an IP address of the foreign agent in response to the negotiated conditions. The method also includes receiving, at the home agent, from the foreign agent, a registration request for the mobile node. The method also includes determining, by the home agent, a virtual private network membership of the mobile node based on a characteristic associated with the mobile node. The method further includes mapping the mobile node to an identifier associated with the home agent and transmitting the mapping to the foreign agent. The identifier is indicative of the virtual private network membership of the mobile subscriber. The method also includes receiving packets containing the identifier from the foreign agent and, in response, directing the packets to an IP address associated with the virtual private network.
摘要翻译：一种用于在移动IP环境中由归属代理提供虚拟专用网络的方法包括提供归属代理，其可操作以从外部代理接收注册请求，并且协商将移动节点附接到外部代理的条件，并进一步可操作以存储外部代理人的IP地址响应协商条件。该方法还包括在归属代理处从外部代理接收针对移动节点的注册请求。该方法还包括基于与移动节点相关联的特征，由归属代理确定移动节点的虚拟专用网络成员资格。该方法还包括将移动节点映射到与归属代理相关联的标识符并将该映射发送到外部代理。该标识符指示移动用户的虚拟专用网络成员资格。该方法还包括从外部代理接收包含标识符的分组，并且作为响应，将分组指向与虚拟专用网络相关联的IP地址。

3. 发明授权

US08356171B2 System and method for implementing fast reauthentication 有权
标题翻译：实现快速重新认证的系统和方法
公开(公告)号：US08356171B2
公开(公告)日：2013-01-15
申请号：US11411482
申请日：2006-04-26
申请人： Kevin Shatzkamer , Anand K. Oswal , Mark Grayson , Jayaraman Iyer , Navan Narang
发明人： Kevin Shatzkamer , Anand K. Oswal , Mark Grayson , Jayaraman Iyer , Navan Narang
IPC分类号： G06F21/00
CPC分类号： H04L63/0892 , H04L63/08 , H04L63/164 , H04W12/06 , H04W88/16
摘要： A system for efficiently reauthenticating a client of a network. In a specific embodiment, the system includes an authentication server and a Security GateWay (SGW) in communication with the client. The SGW includes reauthentication information associated with the client. In a more specific embodiment, the authentication server includes an Authentication, Authorization, and Accounting (AAA) server. The SGW further includes one or more routines for employing the reauthentication information to reauthenticate the client. The AAA server performs initial authentication of the client to enable client access to the network, which yields the reauthentication information. The reauthentication information includes one or more keys and/or counters, such as an authorization key, an encryption key, and a master key, which is/are predetermined by the AAA server.
摘要翻译：一种用于有效地重新认证网络客户端的系统。在具体实施例中，系统包括与客户端通信的认证服务器和安全门禁（SGW）。 SGW包括与客户端相关联的重新认证信息。在更具体的实施例中，认证服务器包括认证，授权和计费（AAA）服务器。 SGW还包括用于使用重新认证信息重新认证客户端的一个或多个例程。 AAA服务器执行客户端的初始认证，以使客户端能够访问网络，从而产生重新认证信息。重新认证信息包括由AAA服务器预先确定的一个或多个密钥和/或计数器，例如授权密钥，加密密钥和主密钥。

4. 发明授权

US08315246B2 System and method employing strategic communications between a network controller and a security gateway 有权
标题翻译：采用网络控制器和安全网关之间的战略通信的系统和方法
公开(公告)号：US08315246B2
公开(公告)日：2012-11-20
申请号：US11437058
申请日：2006-05-18
申请人： Kevin Shatzkamer , Anand K. Oswal , Navan Narang , Jayaraman Iyer , Richard Kyle Forster
发明人： Kevin Shatzkamer , Anand K. Oswal , Navan Narang , Jayaraman Iyer , Richard Kyle Forster
IPC分类号： H04L12/66
CPC分类号： H04L63/08 , H04L63/0272 , H04L63/0892 , H04L63/164 , H04W12/02 , H04W12/06 , H04W92/04
摘要： A system for enhancing functionality of a network. In a specific embodiment, the system employs strategic communications between a network controller and a security gateway. The strategic communications occur via a feedback communications channel between the network controller and the security gateway. The feedback communications channel facilitates transferring security information, such as International Mobile Subscriber Identity (IMSI) and other information, between the network controller and the security gateway. The security information may facilitate enabling the SGW to make intelligent decisions as to how to treat a client communications session. In the specific embodiment, the feedback communications channel includes an intervening Authentication, Authorization, and Accounting (AAA) server that is coupled between the UMA and the network controller.
摘要翻译：一种用于增强网络功能的系统。在具体实施例中，系统采用网络控制器和安全网关之间的战略通信。战略通信通过网络控制器和安全网关之间的反馈通信信道进行。反馈通信信道有助于在网络控制器和安全网关之间传送诸如国际移动用户标识（IMSI）等安全信息。安全信息可能有助于SGW做出关于如何处理客户端通信会话的智能决定。在具体实施例中，反馈通信信道包括耦合在UMA和网络控制器之间的中间认证，授权和计费（AAA）服务器。

5. 发明申请

US20060233141A1 Method and system for providing virtual private network services through a mobile IP home agent 有权
公开(公告)号：US20060233141A1
公开(公告)日：2006-10-19
申请号：US11108560
申请日：2005-04-18
申请人： Jayaraman Iyer , Navan Narang , Michael Shannon , Arghya Mukherjee
发明人： Jayaraman Iyer , Navan Narang , Michael Shannon , Arghya Mukherjee
IPC分类号： H04L12/56 , H04L12/28 , H04Q7/24 , H04Q7/00
CPC分类号： H04L12/4641 , H04L63/0272 , H04W8/04 , H04W12/02
摘要： A method for providing a virtual private network by home agent in a mobile IP environment includes providing a home agent operable to receive a registration request from a foreign agent and negotiate conditions of attachment of a mobile node to the foreign agent and further operable to store an IP address of the foreign agent in response to the negotiated conditions. The method also includes receiving, at the home agent, from the foreign agent, a registration request for the mobile node. The method also includes determining, by the home agent, a virtual private network membership of the mobile node based on a characteristic associated with the mobile node. The method further includes mapping the mobile node to an identifier associated with the home agent and transmitting the mapping to the foreign agent. The identifier is indicative of the virtual private network membership of the mobile subscriber. The method also includes receiving packets containing the identifier from the foreign agent and, in response, directing the packets to an IP address associated with the virtual private network.

6. 发明申请

US20080235783A1 P-GANC OFFLOAD OF URR DISCOVERY MESSAGES TO A SECURITY GATEWAY 有权
标题翻译： P-GANC将URR发送消息发送到安全网关
公开(公告)号：US20080235783A1
公开(公告)日：2008-09-25
申请号：US11688113
申请日：2007-03-19
申请人： Kevin Shatzkamer , Anand K. Oswal , Jayaraman Iyer , Mark Grayson , Navan Narang
发明人： Kevin Shatzkamer , Anand K. Oswal , Jayaraman Iyer , Mark Grayson , Navan Narang
IPC分类号： G06F17/00
CPC分类号： H04W12/06 , H04L29/12113 , H04L61/1541 , H04L63/0272 , H04L63/0892 , H04L63/164 , H04W12/02
摘要： In one embodiment, a security gateway receives an IPSec Initiation (IPSec INIT) request from a client. The security gateway may communicate with a AAA server to authenticate the client. After authentication, the security gateway intercepts a URR Discovery request from the client. The security gateway determines registration information for a response to the registration request. The registration information may be information on where the client can locate a D-GANC. A response is generated using the determined information and sent to the client. The response to the discovery request is performed without communicating with a P-GANC. Accordingly, a security gateway is used to authenticate the client and also to respond to the discovery request. This does not require that a P-GANC function be deployed in a network. Thus, cost and processing power may be saved.
摘要翻译：在一个实施例中，安全网关从客户端接收IPSec启动（IPSec INIT）请求。安全网关可以与AAA服务器进行通信，以验证客户端。认证后，安全网关从客户端拦截URR发现请求。安全网关确定用于对注册请求的响应的注册信息。注册信息可以是客户端可以在哪里定位D-GANC的信息。使用确定的信息产生响应并发送给客户端。在不与P-GANC通信的情况下执行对发现请求的响应。因此，安全网关用于认证客户端并且还响应于发现请求。这不需要在网络中部署P-GANC功能。因此，可以节省成本和处理能力。

7. 发明授权

US08018948B2 P-GANC offload of URR discovery messages to a security gateway 有权
标题翻译： P-GANC将URR发现消息卸载到安全网关
公开(公告)号：US08018948B2
公开(公告)日：2011-09-13
申请号：US11688113
申请日：2007-03-19
申请人： Kevin Shatzkamer , Anand K. Oswal , Jayaraman Iyer , Mark Grayson , Navan Narang
发明人： Kevin Shatzkamer , Anand K. Oswal , Jayaraman Iyer , Mark Grayson , Navan Narang
IPC分类号： H04L12/28 , H04L12/56 , H04J3/16 , H04J3/22 , G06F9/00 , G06F15/16 , G06F17/00
CPC分类号： H04W12/06 , H04L29/12113 , H04L61/1541 , H04L63/0272 , H04L63/0892 , H04L63/164 , H04W12/02
摘要： In one embodiment, a security gateway receives an IPSec Initiation (IPSec INIT) request from a client. The security gateway may communicate with a AAA server to authenticate the client. After authentication, the security gateway intercepts a URR Discovery request from the client. The security gateway determines registration information for a response to the registration request. The registration information may be information on where the client can locate a D-GANC. A response is generated using the determined information and sent to the client. The response to the discovery request is performed without communicating with a P-GANC. Accordingly, a security gateway is used to authenticate the client and also to respond to the discovery request. This does not require that a P-GANC function be deployed in a network. Thus, cost and processing power may be saved.
摘要翻译：在一个实施例中，安全网关从客户端接收IPSec启动（IPSec INIT）请求。安全网关可以与AAA服务器进行通信，以验证客户端。认证后，安全网关从客户端拦截URR发现请求。安全网关确定用于对注册请求的响应的注册信息。注册信息可以是客户端可以在哪里定位D-GANC的信息。使用确定的信息生成响应并发送给客户端。在不与P-GANC通信的情况下执行对发现请求的响应。因此，安全网关用于认证客户端并且还响应于发现请求。这不需要在网络中部署P-GANC功能。因此，可以节省成本和处理能力。

8. 发明申请

US20070268888A1 System and method employing strategic communications between a network controller and a security gateway 有权
标题翻译：采用网络控制器和安全网关之间的战略通信的系统和方法
公开(公告)号：US20070268888A1
公开(公告)日：2007-11-22
申请号：US11437058
申请日：2006-05-18
申请人： Kevin Shatzkamer , Anand K. Oswal , Navan Narang , Jayaraman Iyer , Richard Kyle Forster
发明人： Kevin Shatzkamer , Anand K. Oswal , Navan Narang , Jayaraman Iyer , Richard Kyle Forster
IPC分类号： H04L12/66
CPC分类号： H04L63/08 , H04L63/0272 , H04L63/0892 , H04L63/164 , H04W12/02 , H04W12/06 , H04W92/04
摘要： A system for enhancing functionality of a network. In a specific embodiment, the system employs strategic communications between a network controller and a security gateway. The strategic communications occur via a feedback communications channel between the network controller and the security gateway. The feedback communications channel facilitates transferring security information, such as International Mobile Subscriber Identity (IMSI) and other information, between the network controller and the security gateway. The security information may facilitate enabling the SGW to make intelligent decisions as to how to treat a client communications session. In the specific embodiment, the feedback communications channel includes an intervening Authentication, Authorization, and Accounting (AAA) server that is coupled between the UMA and the network controller.
摘要翻译：一种用于增强网络功能的系统。在具体实施例中，系统采用网络控制器和安全网关之间的战略通信。战略通信通过网络控制器和安全网关之间的反馈通信信道进行。反馈通信信道有助于在网络控制器和安全网关之间传送诸如国际移动用户标识（IMSI）等安全信息。安全信息可能有助于SGW做出关于如何处理客户端通信会话的智能决定。在具体实施例中，反馈通信信道包括耦合在UMA和网络控制器之间的中间认证，授权和计费（AAA）服务器。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式