Telcordia Technologies, Inc.

Toshiba America Research, Inc.

Kddi Corporation

Toyota Motor Corporation

Kabushiki Kaisha Toshiba

At&t Intellectual Property I, L.p.

Telcordia Inc.

Other

University of Texas System

Tti Inventions C LLC

Nytell Software LLC

Toyota Infotechnology Center Co. Ltd.

Ashutosh Dutta

Subir Das

Kenichi Taniuchi

Yoshihiro Oba

Sunil H Madhani

Hidetoshi Yokota

Tsunehiko Chiba

Yoshihiro Ohba

Dana Chee

Tao Zhang

Akira Idoue

Victor Fajardo

Prathima Agrawal

Shinichi Baba

Abhrajit Ghosh

Kyriakos Manousakis

Yasuhiro Katsube

Wai Chen

Toshikazu Kodama

Onur Altintas

Thusitha Jayawardena

Stephanie Demers

Christopher Van Wart

Gokul Singaraju

Shengwei Cai

Henning Gunther Schulzrinne

David Famolari

Jyh-Cheng Chen

Archan Misra

John Lee

Faramak Vakil

Joe Lin

Kensaku Fujimoto

James Daniel Alfieri

Yoshihisa Suwa

Shih-wei Li

Raquel Morera Sempere

Donald R Lukacs

David C Shrader

Bryan J Lyles

Funchun Joseph Lin

Yuu-Heng Alice Cheng

Anthony McAuley

Sajal K Das

Miriam Tauil

Fuchun Joseph Lin

Yasuro Shobatake

Kuok-Shoong Daniel Wong

Jasmine Chennikara

Fuchun Joe Lin

Christian Makaya

Kenichi Tanuichi

Ming Lai

Funchun Joe Lin

Satoshi Komorita

Tsumehiko Chiba

Kenneth Young

Fuchun Joesph Lin

Shih-Wei Li

Brian J Lyles

James D Alfieri

Victor Farjardo

A system and method for identifying distributed attacks, such as, but not limited to, distributed denial of service attacks and botnet attacks, in a first network serviced by a first carrier and configured to alert a second network serviced by a second carrier that is different from the first carrier is disclosed. Once an attack has been identified, an attack alert is generated and provided to the second network or other aspects of the first network, or both. The attack alerts may be distributed dynamically with the second network via diameter based security protocol Rs. Such system and method may mitigate distributed malicious attacks by sharing destination internet protocol and bad international mobile subscriber identity information across carriers.

Intra-carrier and inter-carrier network security system

A self-organizing IP multimedia subsystem exhibiting node splitting and node merging functions wherein any node within the self organizing IP multimedia subsystem may assume any role thereby providing node balancing and fault tolerance to an overall network.

Self organizing IP multimedia subsystem

A mechanism by which handoff delay can be minimized while not compromising the IMS/MMD security and also protecting the media if required by certain applications is presented. Methods for mitigating delay during SA re-association and mitigating the IPSec tunnel overhead for signaling and media at the Mobile Node are given. In one embodiment, SA keys can be transferred from the old P-CSCF to new P-CSCF, enabling the establishment of SAs before Mobile Node physically moves to the new subnet in a network. Proactive handover is used. In another embodiment, SA keys are transferred from S-CSCF to new P-CSCF. In this case, the SA keys are transferred to the new P-CSCF by S-CSCF through a context transfer mechanism well in advance so that SAs may be established before Mobile Node physically moves to new subnet. In another embodiment, methods for mitigating IPSec tunnel overhead are presented.

Security optimization for IMS/MMD architecture

A mechanism by which handoff delay can be minimized while not compromising the IMS/MMD security and also protecting the media if required by certain applications is presented. One proactive method includes proactive authentication. Another proactive method includes proactive security association, such as transferring SA keys from old proxy to new proxy, or transferring keys through serving signal entities. Reactive methods include transferring SA keys from old proxy to new proxy, using either push or pull technology. Other reactive methods include transferring keys through serving signal entities using either push or pull technology.

P-CSCF fast handoff for IMS/MMS architecture

In some of the preferred embodiments, a method for network discovery of a mobile device to use at least one of a plurality of access networks within an IP network includes: obtaining specified network information in the vicinity of a given location based on a set of criteria when a mobile is connected to the IP network from any location.

Network discovery mechanisms

Systems and methods are described for secure and seamless roaming between internal and external networks. Double and triple tunnels may be used to connect a mobile node to a correspondent host. A mobile node may include the ability to connect to two networks simultaneously to enable seamless roaming between networks.

Secure and seamless WAN-LAN roaming

The present invention relates to the reduction of handoff delays for mobile telematics applications. In particular, the present invention provides a method employing GPS technology to define IP addresses in a mobile environment in order to reduce delays and transient data loss caused by handoff from one network to another.

Fast handoff using GPS technology for mobile telematics

This present application relates to, among other things, Key Caching, QoS and Multicast extensions and improvements to the Media-independent Pre-Authentication (MPA) framework, a new handover optimization mechanism that has a potential to address issues on existing mobility management protocols and mobility optimization mechanisms. MPA is a mobile assisted, secure handover optimization scheme that works over any link-layer and with any mobility management protocol.

Key cashing, QoS and multicast extensions to media-independent pre-authentication

A system and method for route optimization in PMIP having a first mobile node having a local mobility anchor and anchored at an access router and a second mobile node anchored at an access router is presented. The method includes establishing a binding cache at one access router comprising a mapping of mobile node addresses to access router addresses, populating the binding cache, and updating the mapping of the mobile node addresses in response to a handoff of a mobile node from one access router to another access router, so that a packet is transmitted from the first mobile node to the second mobile node using the mapping in the binding cache. The second access router address is obtained by either transmitting the packet from the first mobile node to the local mobility anchor, or querying neighboring access routers, or broadcasting access router addresses from the local mobility anchor.

Proxy mobile IP

A system and method for mobility support of a mobile node having a home network in a heterogeneous roaming environment is presented. The method comprises the steps of authenticating the mobile node in a visited network and obtaining an address for the mobile node in the visited network, establishing a security connection between a functional component in the visited network and an agent in the home network, creating a home address for the mobile node, and using the home address to generate a SIP signaling address, a SIP media address, and a non-SIP media address, such that SIP non-media is transmitted using the security connection to the SIP signaling address, SIP media is transmitted using the security connection to the SIP media address, and non-SIP media is transmitted using the security connection to the non-SIP media address.

Flexible mobility framework for heterogeneous roaming in next generation wireless networks

The present invention advantageously provides several systems and methods for solving the trombone routing issues within an IMS/MMD network. These approaches avoid trombone routing, speed up handoff, and increase the efficiency of signaling and overall performance of an IMS/MMD network. These solutions can broadly be divided into the following categories. Piggy-backing SIP registration over MIP (Split at FA); Selective Reverse Tunneling and Tunneling between FA and P-CSCF; the SIP-based mobility protocol; use of CoA during SIP registration and call up in MIPv6; Piggy-backing SIP registration when HA and S-CSCF Co-exist; Using Dynamic Home Agents in MIPv4 FA-CoA; and the Interceptor-Caching Approach.

Methods of mitigation of trombone routing in an IMS/MMD network

A system for proactively authenticating includes a server having media independent access functions including media independent authentication functions that authenticates other entities attached via an interface to an end of a link specific to a media. A plurality of heterogeneous networks each having media specific access functions including authentication functions corresponding to the other entities attached via the interface to the end of the link specific to the media and mobile devices connected to the plurality of heterogeneous networks, and the server having predefined media independent handover protocols and media independent handover identities based on the media independent functions related to handover, in which the server authenticates candidate access networks prior to the handover of the mobile devices from serving access networks to the candidate access networks each of which belonging to the plurality of heterogeneous access networks having the link specific to the media.

Proactive authentication

This document describes a proactive mechanism to provide fast-handover involving PMIPv6. In particular, it describes how one can achieve fast handoff for PMIPv6 using Media-independent Pre-Authentication (MPA) technique. It discusses the need for a fast-handoff for PMIPv6 environment. It then describes how MPA techniques could be used during different steps involving both intra-domain and inter-domain handoff for PMIPv6. MPA-based fast-handover takes advantage of the pre-authentication mechanism so that the mobile can perform the access authentication while in the previous local mobility (PMA) domain and thus would be able to complete many of the handoff related operations while still in the previous network.

Media independent pre-authentication supporting fast-handoff in proxy MIPv6 environment

Growing community of inventors

Bridgewater, NJ, United States of America

Ashutosh Dutta