专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2004112348B1 METHOD, SYSTEM AND APPARATUS TO SUPPORT MOBILE IP VERSION 6 SERVICES 审中-公开
标题翻译：支持移动IP版本6服务的方法，系统和设备
公开(公告)号：WO2004112348B1
公开(公告)日：2005-04-14
申请号：PCT/SE2004000949
申请日：2004-06-15
申请人： ERICSSON TELEFON AB L M , OYAMA JOHNSON , KATO RYOJI , RUNE JOHAN , LARSSON TONY
发明人： OYAMA JOHNSON , KATO RYOJI , RUNE JOHAN , LARSSON TONY
IPC分类号： H04L12/28 , H04L29/06 , H04W8/04 , H04W12/06 , H04W84/00
CPC分类号： H04L63/08 , H04L63/0892 , H04L63/164 , H04W8/04 , H04W12/06 , H04W80/04 , H04W84/00
摘要： For establishing a MIPv6 security association between the mobile node (10) roaming in a foreign network (20) and a home agent (36) and for simplifying MIPv6-related configuration, MIPv6-related information is transferred in an end-to-end procedure over an AAA infrastructure by means of an, preferably extended, authentication protocol. A preferred embodiment uses EAP as basis for the extended authentication protocol, creating EAP extensions by incorporating the MIPv6-related information as additional data in the EAP protocol stack, for example as EAP attributes in the EAP method layer of the EAP protocol stack or transferred in a generic container attribute on the EAP layer or the EAP method layer. A major advantage of the proposed MIPv6 authentication/authorization mechanism lies in the fact that it is transparent to the visited domain (20), allowing AAA client (22) and AAAv (24) to act as mere pass-through agents during the procedure.
摘要翻译：为了在外部网络（20）和归属代理（36）之间漫游的移动节点（10）之间建立MIPv6安全关联，并且为了简化MIPv6相关配置，MIPv6相关信息以端对端的过程通过优选扩展的认证协议通过AAA基础设施。优选实施例使用EAP作为扩展认证协议的基础，通过将作为附加数据的MIPv6相关信息合并到EAP协议栈中来创建EAP扩展，例如作为EAP协议栈的EAP方法层中的EAP属性或者转移到 EAP层或EAP方法层上的通用容器属性。所提出的MIPv6认证/授权机制的主要优点在于它对访问域（20）是透明的，允许AAA客户端（22）和AAAv（24）在过程期间仅作为直通代理。

2. 发明申请

WO2004112349B1 METHOD, SYSTEM AND APPARATUS TO SUPPORT MOBILE IP VERSION 6 SERVICES IN CDMA SYSTEMS 审中-公开
标题翻译： CDMA系统中支持移动IP第6版服务的方法，系统和设备
公开(公告)号：WO2004112349B1
公开(公告)日：2005-06-16
申请号：PCT/SE2004000950
申请日：2004-06-15
申请人： ERICSSON TELEFON AB L M , OYAMA JOHNSON , KATO RYOJI , RUNE JOHAN , LARSSON TONY
发明人： OYAMA JOHNSON , KATO RYOJI , RUNE JOHAN , LARSSON TONY
IPC分类号： H04L12/28 , H04L29/06 , H04W12/06 , H04W36/00 , H04W80/00 , H04W80/04 , H04L12/56
CPC分类号： H04L63/08 , H04W12/06 , H04W80/04
摘要： The invention provides authentication and authorization support for MIPv6 in a CDMA framework by transferring MIPv6-related information in an, preferably extended, authentication protocol in an end-to-end procedure between a mobile node (10) in a visited network and the home network of the mobile node over an AAA infrastructure. Preferably, the end-to-end procedure is executed between the mobile node and an AAA server (34) of the home network. In the visited network, after lower-layer setup, point-to-point communication is established between the mobile node and an internetworking access server (22). The access server then communicates with the AAA home server for MIPv6 authentication and authorization of the mobile node. A preferred embodiment uses EAP as basis for the extended authentication protocol. EAP extensions are then used for MIPv6 initiation and re-authentication, while CHAP can be beneficial for MIPv6 hand-in.
摘要翻译：本发明通过在访问网络中的移动节点（10）和归属网络之间以端到端过程在最优选地扩展的认证协议中传送MIPv6相关信息来提供CDMA框架中的MIPv6的认证和授权支持的移动节点。优选地，在移动节点和家庭网络的AAA服务器（34）之间执行端对端过程。在访问网络中，在较低层设置之后，在移动节点与互联网络接入服务器（22）之间建立点对点通信。然后，接入服务器与AAA家庭服务器进行通信，用于移动节点的MIPv6认证和授权。优选实施例使用EAP作为扩展认证协议的基础。然后，EAP扩展用于MIPv6启动和重新认证，而CHAP可以有益于MIPv6手动。

3. 发明申请

WO2004112347B1 METHOD, SYSTEM AND APPARATUS TO SUPPORT HIERARCHICAL MOBILE IP SERVICES 审中-公开
标题翻译：支持分层移动IP业务的方法，系统和设备
公开(公告)号：WO2004112347B1
公开(公告)日：2005-06-16
申请号：PCT/SE2004000945
申请日：2004-06-15
申请人： ERICSSON TELEFON AB L M , OYAMA JOHNSON , KATO RYOJI , RUNE JOHAN , LARSSON TONY
发明人： OYAMA JOHNSON , KATO RYOJI , RUNE JOHAN , LARSSON TONY
IPC分类号： H04L12/28 , H04L29/06 , H04W8/04 , H04W12/06 , H04W84/00
CPC分类号： H04L63/08 , H04L63/0892 , H04L63/164 , H04W8/04 , H04W12/06 , H04W80/04 , H04W84/00
摘要： A basic feature of the invention is to rely on an AAA infrastructure to "bootstrap" the HMIPv6 service for a mobile node (130) that "roams" in a visited network or the home network. In accordance with a preferred embodiment of the invention, bootstrapping the HMIPv6 service involves authenticating and authorizing the mobile node (130) for HMIPv6 service based on an AAA infrastructure. In an important scenario, the mobile node is roaming in a visited network, and the AAA infrastructure (110, 120, 122) links the visited network with the home network of the mobile node. The invention also supports the possibility of having the MAP (125) located in the home network or other network than the visited network. The reliance on the AAA infrastructure preferably involves transferring HMIPv6-related information required for authenticating and authorizing the mobile node for HMIPv6 service over the AAA infrastructure.
摘要翻译：本发明的一个基本特征是依靠AAA基础设施来为在受访网络或家庭网络中“漫游”的移动节点（130）“引导”HMIPv6服务。根据本发明的优选实施例，引导HMIPv6服务包括基于AAA基础设施来认证和授权用于HMIPv6服务的移动节点（130）。在重要的情况下，移动节点在受访网络中漫游，并且AAA基础设施（110,120,122）将受访网络与移动节点的归属网络链接。本发明还支持使MAP（125）位于家庭网络或其他网络中比被访问网络的可能性。对AAA基础设施的依赖优选涉及传送HMIPv6相关信息，用于通过AAA基础设施认证和授权用于HMIPv6服务的移动节点所需的信息。

4. 发明申请

WO2010043254A8 SECURE ACCESS IN A COMMUNICATION NETWORK 审中-公开
标题翻译：通信网络中的安全访问
公开(公告)号：WO2010043254A8
公开(公告)日：2010-06-10
申请号：PCT/EP2008063890
申请日：2008-10-15
申请人： ERICSSON TELEFON AB L M , KATO RYOJI , ODA TOSHIKANE , SUGIMOTO SHINTA
发明人： KATO RYOJI , ODA TOSHIKANE , SUGIMOTO SHINTA
IPC分类号： H04L29/06 , H04L12/22 , H04L12/46 , H04L29/12
CPC分类号： H04L63/0272 , H04L12/2859 , H04L12/4633 , H04L61/2015 , H04L63/0428 , H04L63/164
摘要： A method of providing secure access to a remote communication network via a local communication network for a terminal device. A gateway node located outside the local communication network allocates an IP address to the terminal device. The gateway node subsequently receives a request to establish a secure tunnel between the gateway node and the terminal device. It identifies the terminal device as the same terminal device to which an IP address is allocated, and allocates the same IP address for use by the terminal device as both an inner IP address and an outer IP address for packets sent via the secure tunnel. This ensures that there are no issues as described above in selecting the IP address for use in the secure tunnel, and reduces the risk of a successful man-in-the-middle attack.
摘要翻译：一种通过用于终端设备的本地通信网络向远程通信网络提供安全访问的方法。位于本地通信网络外部的网关节点向终端设备分配IP地址。网关节点随后接收到在网关节点和终端设备之间建立安全通道的请求。它将终端设备识别为与其分配IP地址相同的终端设备，并为终端设备分配相同的IP地址作为通过安全隧道发送的分组的内部IP地址和外部IP地址。这确保了在选择安全隧道中使用的IP地址时没有上述问题，并降低了成功的中间人攻击的风险。

5. 发明申请

WO2009070061A8 METHOD AND APPARATUS FOR HANDLING A LOCAL BREAKOUT SESSION 审中-公开
标题翻译：用于处理本地断路器的方法和装置
公开(公告)号：WO2009070061A8
公开(公告)日：2010-05-20
申请号：PCT/SE2007001040
申请日：2007-11-30
申请人： ERICSSON TELEFON AB L M , KATO RYOJI , ODA TOSHIKANE , SUGIMOTO SHINTA
发明人： KATO RYOJI , ODA TOSHIKANE , SUGIMOTO SHINTA
IPC分类号： H04L29/12
CPC分类号： H04W8/082 , H04W40/36 , H04W80/045
摘要： The present invention concerns a method of handling a Local Break Out (LBO) session taking place in a first network between a user equipment and a corresponding node (CN). The invention addresses the problems that arise when using only one IP address in the user equipment and the user equipment moves to a second network. This is, for the downlink packets, solved by the steps of: converting, in a node in the first or the second network, the IP address of the downlink packets from an LHoA to a Global Home Address (GHoA) and routing, from the first node, directly or indirectly to a second node in the second network, any downlink packets being sent from the corresponding node, so that the downlink packets will arrive at the user equipment having a GHoA. For the uplink packets the problem is solved by converting, in a node in the first or the second network, the IP address of the uplink packets from a GHoA to an LHoA and routing, from the second node, directly or indirectly to the first node, any uplink packets being sent from the user equipment; so that the uplink packets will arrive at the corresponding node with a source address that is an LHoA. The invention also concerns nodes for handling an LBO session.
摘要翻译：本发明涉及处理在用户设备和对应节点（CN）之间的第一网络中发生的本地中断（LBO）会话的方法。本发明解决了在用户设备中仅使用一个IP地址并且用户设备移动到第二网络时出现的问题。对于下行链路分组，这是通过以下步骤来解决的：在第一或第二网络中的节点中将从LHoA到全球归属地址（GHoA）的下行链路分组的IP地址转换为第一节点直接或间接地连接到第二网络中的第二节点，从对应节点发送的任何下行链路分组，使得下行链路分组将到达具有GHoA的用户设备。对于上行链路分组，通过将第一或第二网络中的节点中的上行链路分组的IP地址从GHoA转换到LHoA并且从第二节点直接或间接地路由到第一节点来解决问题，从用户设备发送的任何上行链路分组; 使得上行链路分组将以具有LHoA的源地址到达相应的节点。本发明还涉及用于处理LBO会话的节点。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式