Openpeak Inc.

Other

Nokia Corporation

Vmware, Inc.

Check Point Software Technologies Ltd.

James Asnis

David Medina

Brian A Roberge

Michael P Kelly

Teemu S Lehtonen

Matthew John Peterson

Olev Kartau

A method and system for enabling data usage accounting is described herein. The method can be practiced on a computing device that has secure applications and unsecure applications installed thereon. Initially, a request for a data session that includes a final endpoint can be received through a secure application. The request for the data session can be intercepted and modified to cause the request to be re-directed back to the secure application. A connection with a relay server can be initiated instead of the final endpoint such that data usage accounting for the data session is to be conducted at a remote location.

Method and system for enabling data usage accounting through a relay

A method and system for data usage accounting are described herein. On a computing device that includes enterprise applications and personal applications, a datagram send request for an enterprise application can be received. The datagram send request may involve unreliable transport communication with a final destination and may be conducted in a native fashion with respect to the enterprise application. Based on the datagram send request, addressing information of a relay destination that is different from the final destination can be received. In addition, outbound datagrams of the unreliable transport communication can be corresponded with the received addressing information of the relay destination. The outbound datagrams of the unreliable transport communication may also be supplemented with the addressing information of the final destination. The outbound datagrams of the unreliable transport communication may also be transmitted to the relay destination to enable a data usage accounting of the datagram send request.

Method and system for enabling data usage accounting for unreliable transport communication

A method and system for data usage accounting are described herein. As an example, the method can be practiced in a setting that includes both secure applications and unsecure applications. Via one of the secure applications, a request to access data can be received in which the request is intended for a content provider via a system service. The request that is intended for the content provider via the system service can be intercepted and modified, which can cause the system service to direct the request back to the secure application instead of the content provider. In addition, a connection can be established with the content provider for the request through the secure application to enable data usage accounting of data that is returned by the content provider.

Method and system for data usage accounting in a computing device

A method and system for enabling data usage accounting are described herein. As an example, the method can be practiced on a computing device that has secure applications and unsecure applications installed thereon. Initially, a request for a data session can be received through a secure application. The request for the data session can be intercepted, and the request for the data session can be modified to cause the request to be re-directed back to the secure application. In addition, a connection can be initiated to enable retrieval of data in response to the request and to enable an accounting of the data session. In one arrangement, this process of modifying the request for a data session may be restricted to secure applications such that data usage of the secure applications is tabulated separately from data usage associated with the unsecure applications.

Method and system for enabling data usage accounting

A method and system for authenticating a computing device for data usage accounting are described herein. As an example, the method can be practiced on a computing device that includes secure applications and unsecure applications. A data session request for a secure application can be received, and in response to the data session request, a data session connection can be initiated. As part of initiating the data session connection, an authentication package uniquely associated with the computing device can be sent to the authentication server. If the computing device is authenticated, the data session connection can be established to enable data exchange and data accounting in which the authenticating may be performed exclusively for the secure applications.

Method and system for enrolling and authenticating computing devices for data usage accounting

A system for managing a distributed MetaHop that is administered, managed, and monitored as a single entity. If a new gateway is added to a MetaHop, the gateway can be provisioned with membership credentials by an administrator who indicates relatively basic information for the new gateway to join the MetaHop. Once provisioned with relatively basic information, the new gateway can be shipped to a relatively remote site where it automatically seeks out an entry point to the MetaHop. After connecting to an entry point (or entry points), the new gateway is automatically provisioned with any other information used to join the MetaHop. In one embodiment, the joined gateway is automatically enabled to forward traffic. In another embodiment, a new gateway is disabled for traffic forwarding until the administrator enables it for such forwarding on the MetaHop.

System for geographically distributed virtual routing

The invention is directed towards routing a packet using both IPSec and common routing protocols within dynamic network topologies in a VPN. The routing of IPSec packets employs Open System Interconnection (OSI) layer three information. In one embodiment, a tree mechanism is used for looking up layer three information that may be associated with a protected subnetwork. When a packet is identified as being associated with a protected subnetwork, the packet may be encrypted and encapsulated, including the original destination and source IP address header information within another packet employing the IP Encapsulating Security Payload (ESP) protocol. New source and destination IP addresses are provided for the new packet using IP addresses associated with an entry gateway and an exit gateway to the VPN. The new packet may then be routed through the VPN using traditional routing protocols.

Growing community of inventors

Santa Cruz, CA, United States of America

James Asnis