专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08688970B2 Access-network to core-network trust relationship detection for a mobile node 有权
标题翻译：接入网到移动节点的核心网信任关系检测
公开(公告)号：US08688970B2
公开(公告)日：2014-04-01
申请号：US12665006
申请日：2008-06-12
申请人： Jens Bachmann , Kilian Weniger , Takashi Aramaki , Jon Schuringa , Jun Hirano , Shinkichi Ikeda
发明人： Jens Bachmann , Kilian Weniger , Takashi Aramaki , Jon Schuringa , Jun Hirano , Shinkichi Ikeda
IPC分类号： H04L29/06
CPC分类号： H04L63/164 , H04L63/029 , H04L63/0428 , H04L63/0471 , H04W12/02 , H04W36/0011 , H04W60/00 , H04W80/04 , H04W88/16
摘要： The invention provides a method for trust relationship detection between a core and access network for a user equipment. The gist is that a security tunnel establishment procedure is used so one entity, be it part of the core network or be it the user equipment itself, is provided with information to determine whether the access network is trusted or untrusted. The information may comprise a first IP address/prefix, which is initially assigned to the user equipment, upon attaching to the access network. The necessary information may further comprise a second IP address/prefix, which is an address/prefix that is allocated at a trusted entity of the core network. Depending which entity determines the trust relationship of the access network, it might be necessary to transmit either the first IP address/prefix or the second IP address/prefix or the first and the second IP address/prefix using the security tunnel establishment procedure.
摘要翻译：本发明提供了一种用于用户设备的核心和接入网络之间的信任关系检测的方法。要点是使用安全隧道建立过程，因此一个实体（作为核心网络的一部分，或者是用户设备本身）被提供有用于确定接入网络是可信任还是不受信任的信息。信息可以包括在附接到接入网络时最初分配给用户设备的第一IP地址/前缀。必要的信息还可以包括第二IP地址/前缀，其是在核心网络的可信实体处分配的地址/前缀。根据哪个实体确定接入网络的信任关系，可能需要使用安全隧道建立过程来发送第一IP地址/前缀或第二IP地址/前缀或第一和第二IP地址/前缀。

2. 发明授权

US08094565B2 Loop detection for mobile IP home agents 有权
标题翻译：移动IP归属代理的环路检测
公开(公告)号：US08094565B2
公开(公告)日：2012-01-10
申请号：US12529299
申请日：2008-02-22
申请人： Jon Schuringa , Jens Bachmann , Kilian Weniger , Takashi Aramaki
发明人： Jon Schuringa , Jens Bachmann , Kilian Weniger , Takashi Aramaki
IPC分类号： H04L12/26
CPC分类号： H04L45/00 , H04L45/18 , H04L63/164 , H04L69/22 , H04L2212/00 , H04W12/02 , H04W80/04
摘要： The present invention relates to a method and computer-readable medium for loop detection in data packet communication utilizing a tunnel in a network comprising a plurality of nodes. The method comprises the steps of, when a first node transmits a data packet, encoding an identification of the first node in at least two header fields of the data packet to be transmitted, and when the first node receives a data packet, analyzing the at least two header fields of the data packet, deciding if a loop exists by determining if the data packet was sent by the first node itself, based on the analysis of the at least two header fields of the data packet.
摘要翻译：本发明涉及利用包括多个节点的网络中的隧道的数据分组通信中的环路检测的方法和计算机可读介质。该方法包括以下步骤：当第一节点发送数据分组时，在要发送的数据分组的至少两个报头字段中对第一节点的标识进行编码，并且当第一节点接收到数据分组时，分析基于对数据分组的至少两个报头字段的分析，确定数据分组的至少两个报头字段，通过确定数据分组是否由第一节点本身发送来确定是否存在循环。

3. 发明申请

US20100199332A1 Access-Network to Core-Network Trust Relationship Detection for a Mobile Node 有权
标题翻译：移动节点的核心网络信任关系检测的接入网络
公开(公告)号：US20100199332A1
公开(公告)日：2010-08-05
申请号：US12665006
申请日：2008-06-12
申请人： Jens Bachmann , Kilian Weniger , Takashi Aramaki , Jon Schuringa , Jun Hirano , Shinkichi Ikeda
发明人： Jens Bachmann , Kilian Weniger , Takashi Aramaki , Jon Schuringa , Jun Hirano , Shinkichi Ikeda
IPC分类号： G06F17/30 , H04J1/16 , H04L12/56
CPC分类号： H04L63/164 , H04L63/029 , H04L63/0428 , H04L63/0471 , H04W12/02 , H04W36/0011 , H04W60/00 , H04W80/04 , H04W88/16
摘要： The invention provides a method for trust relationship detection between a core and access network for a user equipment. The gist is that a security tunnel establishment procedure is used so one entity, be it part of the core network or be it the user equipment itself, is provided with information to determine whether the access network is trusted or untrusted. The information may comprise a first IP address/prefix, which is initially assigned to the user equipment, upon attaching to the access network. The necessary information may further comprise a second IP address/prefix, which is an address/prefix that is allocated at a trusted entity of the core network. Depending which entity determines the trust relationship of the access network, it might be necessary to transmit either the first IP address/prefix or the second IP address/prefix or the first and the second IP address/prefix using the security tunnel establishment procedure.
摘要翻译：本发明提供了一种用于用户设备的核心和接入网络之间的信任关系检测的方法。要点是使用安全隧道建立过程，因此一个实体（作为核心网络的一部分，或者是用户设备本身）被提供有用于确定接入网络是可信任还是不受信任的信息。信息可以包括在附接到接入网络时最初分配给用户设备的第一IP地址/前缀。必要的信息还可以包括第二IP地址/前缀，其是在核心网络的可信实体处分配的地址/前缀。根据哪个实体确定接入网络的信任关系，可能需要使用安全隧道建立过程来发送第一IP地址/前缀或第二IP地址/前缀或第一和第二IP地址/前缀。

4. 发明授权

US08230076B2 Method and apparatus for simultaneous location privacy and route optimization for communication sessions 有权
标题翻译：用于通信会话的同时位置隐私和路由优化的方法和装置
公开(公告)号：US08230076B2
公开(公告)日：2012-07-24
申请号：US12302826
申请日：2007-05-24
申请人： Kilian Weniger , Jens Bachmann , Jon Schuringa
发明人： Kilian Weniger , Jens Bachmann , Jon Schuringa
IPC分类号： G06F15/16 , H04W4/00
CPC分类号： H04W8/082 , H04W8/16 , H04W80/04 , H04W80/10
摘要： The invention relates to a method for routing packets in a system of packet-switched networks comprising a plurality of home agents, at least one mobile node and at least one correspondent node, the mobile node having at least a first home address and communicating with the correspondent node over a first of the plurality of home agents. The method comprises the following steps carried out by the mobile node: receiving an application layer request message from the correspondent node; looking up a correspondent node address in a part of the application layer request message; locating a second of the plurality of home agents in proximity to a direct path between the mobile node and the correspondent node using the correspondent node address; bootstrapping with the second home agent to obtain a second home address; including the second home address in a part of an application layer response message to the correspondent node to enable the correspondent node to use the second home address for data communications with the mobile node.
摘要翻译：本发明涉及一种用于在分组交换网络的系统中路由分组的方法，包括多个归属代理，至少一个移动节点和至少一个对应节点，所述移动节点具有至少第一归属地址并与多个归属代理中的第一个的代理节点。该方法包括由移动节点执行的以下步骤：从通信节点接收应用层请求消息; 在应用层请求消息的一部分中查找通信节点地址; 使用所述对应节点地址将所述多个归属代理中的第二个定位在所述移动节点和所述通信节点之间的直接路径附近; 与第二家庭代理进行自举以获得第二家庭住址; 将应用层响应消息的一部分中的第二归属地址包括在通信节点中，以使通信节点能够使用第二归属地址进行与移动节点的数据通信。

5. 发明申请

US20100284331A1 MOBILE IP ROUTE OPTIMIZATION IN IP VERSION TRANSITION SCENARIOS 审中-公开
公开(公告)号：US20100284331A1
公开(公告)日：2010-11-11
申请号：US12740586
申请日：2007-11-07
申请人： Kilian Weniger , Jon Schuringa , Jens Bachmann
发明人： Kilian Weniger , Jon Schuringa , Jens Bachmann
IPC分类号： H04W4/00 , H04L12/56
CPC分类号： H04W8/082 , H04W80/045
摘要： The invention relates to a method for routing packets in a system of packet-switched networks using different internet protocol versions. The system comprises a plurality of home agents, at least one mobile node and at least one correspondent node. A first mobile node is configured with at least one topologically correct internet protocol address of a first internet protocol version and is located in a network supporting at least routing of packets having a header of the first internet protocol version. The method comprises the following steps. Communication is requested with a first correspondent node being configured with at least an internet protocol address of a second internet protocol version and being located in a network supporting at least the routing of packets having a header of the second internet protocol version, by an application on the first mobile node. A first of the plurality of home agents is located in proximity to a direct path between the first mobile node and the first correspondent node, the first home agent being located in a network supporting at least the routing of packets to the first mobile node with the packets having a header of the first internet protocol version and the routing of packets to the first correspondent node with the packets having a header of the second internet protocol version. Bootstrapping is carried out with the first home agent to obtain a first home address of the second internet protocol version and other communication parameters. The first mobile node's location is registered with the first home agent by sending a first binding update message comprising a first mobile node's topologically correct address of the first internet protocol version as care-of address and the first home address as home address; and the first home agent is used in bi-directional tunnelling mode, the outer header of the tunnelled packets using the first internet protocol version and the inner header of the tunnelled packets using the second internet protocol version, for communication with the first correspondent node, with the communication parameters set up in the bootstrapping step and the first home address as home address.

6. 发明申请

US20090168698A1 METHOD AND APPARATUS FOR SIMULTANEOUS LOCATION PRIVACY AND ROUTE OPTIMIZATION FOR COMMUNICATION SESSIONS 有权
标题翻译：方法和装置同步定位隐私和路由优化通信会议
公开(公告)号：US20090168698A1
公开(公告)日：2009-07-02
申请号：US12302826
申请日：2007-05-24
申请人： Kilian Weniger , Jens Bachmann , Jon Schuringa
发明人： Kilian Weniger , Jens Bachmann , Jon Schuringa
IPC分类号： H04W40/02
CPC分类号： H04W8/082 , H04W8/16 , H04W80/04 , H04W80/10
摘要： The invention relates to a method for routing packets in a system of packet-switched networks comprising a plurality of home agents, at least one mobile node and at least one correspondent node, the mobile node having at least a first home address and communicating with the correspondent node over a first of the plurality of home agents. The method comprises the following steps carried out by the mobile node: receiving an application layer request message from the correspondent node; looking up a correspondent node address in a part of the application layer request message; locating a second of the plurality of home agents in proximity to a direct path between the mobile node and the correspondent node using the correspondent node address; bootstrapping with the second home agent to obtain a second home address; including the second home address in a part of an application layer response message to the correspondent node to enable the correspondent node to use the second home address for data communications with the mobile node.
摘要翻译：本发明涉及一种用于在分组交换网络的系统中路由分组的方法，包括多个归属代理，至少一个移动节点和至少一个对应节点，所述移动节点具有至少第一归属地址并与多个归属代理中的第一个的代理节点。该方法包括由移动节点执行的以下步骤：从通信节点接收应用层请求消息; 在应用层请求消息的一部分中查找通信节点地址; 使用所述对应节点地址将所述多个归属代理中的第二个定位在所述移动节点和所述通信节点之间的直接路径附近; 与第二家庭代理进行自举以获得第二家庭住址; 将应用层响应消息的一部分中的第二归属地址包括在通信节点中，以使通信节点能够使用第二归属地址进行与移动节点的数据通信。

7. 发明申请

US20100046434A1 NETWORK-BASED AND HOST-BASED MOBILITY MANAGEMENT IN PACKET-BASED COMMUNICATION NETWORKS 审中-公开
标题翻译：基于分组通信网络的基于网络和基于主机的移动性管理
公开(公告)号：US20100046434A1
公开(公告)日：2010-02-25
申请号：US12524686
申请日：2008-01-29
申请人： Kilian Weniger , Genadi Velev , Jens Luis Bachmann , Jon Schuringa , Takashi Aramaki
发明人： Kilian Weniger , Genadi Velev , Jens Luis Bachmann , Jon Schuringa , Takashi Aramaki
IPC分类号： H04W8/02
CPC分类号： H04W8/06 , H04W80/04
摘要： The present invention describes a method for signalling to a mobility anchor point a position of a mobile node in a network using a network-based mobility management scheme for managing the mobility of the mobile node, said method comprising receiving, by a network element, from the mobile node, during or after network authentication of the mobile node, a sequence number used by a process implementing a mobile node-based mobility management scheme for managing the mobility of the mobile node, and transmitting, by the network element, to the mobility anchor point a message on a position of the mobile node in the network, wherein said message comprises the received sequence number. A common sequence number variable for BU and PBU messages is used, so that the HA is able to determine a correct transmission order of PBU/BU messages based on the sequence number in the message.
摘要翻译：本发明描述了一种用于使用基于网络的移动性管理方案向移动锚点向移动锚定点发信号的方法，所述移动节点用于管理移动节点的移动性，所述方法包括：由网元从移动节点在移动节点的网络认证期间或之后，由实现基于移动节点的移动性管理方案的处理使用的序列号，用于管理移动节点的移动性，并且由网络元件将其发送到移动性定位在网络中的移动节点的位置上的消息，其中所述消息包括接收到的序列号。使用BU和PBU消息的公共序列号变量，使得HA能够基于消息中的序列号来确定PBU / BU消息的正确传输顺序。

8. 发明申请

US20100054133A1 Loop Detection For Mobile IP Home Agents 有权
标题翻译：移动IP归属代理的环路检测
公开(公告)号：US20100054133A1
公开(公告)日：2010-03-04
申请号：US12529299
申请日：2008-02-22
申请人： Jon Schuringa , Jens Bachmann , Killan Luis Weniger , Takashi Aramaki
发明人： Jon Schuringa , Jens Bachmann , Killan Luis Weniger , Takashi Aramaki
IPC分类号： H04L12/26
CPC分类号： H04L45/00 , H04L45/18 , H04L63/164 , H04L69/22 , H04L2212/00 , H04W12/02 , H04W80/04
摘要： The present invention relates to a method and computer-readable medium for loop detection in data packet communication utilizing a tunnel in a network comprising a plurality of nodes. The method comprises the steps of, when a first node transmits a data packet, encoding an identification of the first node in at least two header fields of the data packet to be transmitted, and when the first node receives a data packet, analysing the at least two header fields of the data packet, deciding if a loop exists by determining if the data packet was sent by the first node itself, based on the analysis of the at least two header fields of the data packet.
摘要翻译：本发明涉及利用包括多个节点的网络中的隧道的数据分组通信中的环路检测的方法和计算机可读介质。该方法包括以下步骤：当第一节点发送数据分组时，在要发送的数据分组的至少两个报头字段中对第一节点的标识进行编码，并且当第一节点接收到数据分组时，分析基于对数据分组的至少两个报头字段的分析，确定数据分组的至少两个报头字段，通过确定数据分组是否由第一节点本身发送来确定是否存在循环。

9. 发明申请

US20100313024A1 Methods in Mixed Network and Host-Based Mobility Management 审中-公开
标题翻译：混合网络和基于主机的移动性管理方法
公开(公告)号：US20100313024A1
公开(公告)日：2010-12-09
申请号：US12600237
申请日：2008-04-11
申请人： Kilian Weniger , Jun Hirano , Jens Luis Bachmann , Genadi Velev , Jon Schuringa
发明人： Kilian Weniger , Jun Hirano , Jens Luis Bachmann , Genadi Velev , Jon Schuringa
IPC分类号： H04L9/32 , H04L9/08
CPC分类号： H04L63/0823 , H04L63/1466 , H04W8/082 , H04W12/06 , H04W80/04 , H04W88/182
摘要： A first aspect of the invention relates to a method for verifying an attachment of a mobile node to a network element in a network. A second aspect of the invention relates to a method to be implemented in a mobility anchor node, which detects whether a race condition between registration messages occurs and resolves the most recent location of a mobile node. A third aspect of the invention relates to a method for detecting whether a binding cache entry for a mobile at a correspondent node has been spoofed and to a method for registering a care-of address of a mobile node at a correspondent node. A fourth aspect of the invention relates to a method for providing from a mobile node to a local mobility anchor information on an attachment of a mobile node to a network element.
摘要翻译：本发明的第一方面涉及一种用于验证移动节点对网络中的网元的附件的方法。本发明的第二方面涉及一种在移动锚节点中实现的方法，其检测注册消息之间的竞争条件是否发生并且解决移动节点的最近位置。本发明的第三方面涉及一种用于检测在相应节点处的移动台的绑定高速缓存条目是否已经被欺骗的方法以及用于在通信节点处注册移动节点的转交地址的方法。本发明的第四方面涉及一种用于从移动节点向移动节点附加到网络元件的本地移动锚点信息提供的方法。

10. 发明申请

US20100296481A1 METHODS IN MIXED NETWORK- AND HOST-BASED MOBILITY MANAGEMENT 审中-公开
标题翻译：混合网络和基于主机的移动性管理方法
公开(公告)号：US20100296481A1
公开(公告)日：2010-11-25
申请号：US12446192
申请日：2007-10-19
申请人： Kilian Weniger , Genadi Velev , Jens Luis Bachmann , Jon Schuringa
发明人： Kilian Weniger , Genadi Velev , Jens Luis Bachmann , Jon Schuringa
IPC分类号： H04W36/00 , H04W8/00
CPC分类号： H04W36/0011 , H04L63/0807 , H04L63/12 , H04L63/1466 , H04L63/162 , H04W12/06 , H04W12/12 , H04W80/04
摘要： A first aspect of the invention relates to a method for improving security at a local mobility anchor implementing both a network-based and a host-based mobility management scheme for managing the mobility of a mobile node. It suggests a method for verifying an attachment of a mobile node (MN) to a network element in a network. A second aspect of the invention relates to a method to be implemented in a mobility anchor node, which detects whether a race condition between registration messages occurs and resolves the most recent location of a mobile node. A third aspect of the invention relates to a method for detecting whether a binding cache entry for a mobile at a correspondent node has been spoofed and to a method for registering a care-of address of a mobile node at a correspondent node.
摘要翻译：本发明的第一方面涉及一种用于改善本地移动锚的安全性的方法，其实现基于网络和基于主机的移动性管理方案，用于管理移动节点的移动性。它提出了一种用于验证移动节点（MN）到网络中的网络元件的附件的方法。本发明的第二方面涉及一种在移动锚节点中实现的方法，其检测注册消息之间的竞争条件是否发生并且解决移动节点的最近位置。本发明的第三方面涉及一种用于检测在相应节点处的移动台的绑定高速缓存条目是否已经被欺骗的方法以及用于在通信节点处注册移动节点的转交地址的方法。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式