Nortel Networks Corporation

Rockstar Consortium US LP

Rockstar Bidco, LP

Rpx Clearinghouse LLC

Jing Xiang

Vladimir Senkov

Shreedhar Shirgurkar

Champak Das

Ramin Taraz

A technique for maintaining secure network connections is disclosed. In one particular exemplary embodiment, the technique may be realized as a method for maintaining secure network connections. The method may comprise detecting a change of address associated with a first network element. The method may also comprise updating at least one first security configuration at the first network element. The method may further comprise transmitting at least one secure message from the first network element to a second network element, wherein the at least one secure message comprises information associated with the change of address. And the method may comprise updating at least one second security configuration at the second network element based at least in part on the at least one secure message.

Technique for maintaining secure network connections

An improved method is described for providing Differentiated Services (Diffserv) traffic to a node in a network that implements a security method that discards duplicate packets received at the node. The method includes the step of identifying at least two service levels to be provided to received traffic and assigning different size look-back window counts to each of the service levels. The look-back window count indicates a number of packets that have been previously received at the node that should be compared against a received packet to determine whether a duplicate packet has been received. In one embodiment, a service level that has higher priority is assigned a lower look-back window count and thus examines fewer previously received packets than a service level having a lower priority. Such an arrangement reduces the possibility that traffic having higher priority is dropped as a security measure.

Method for maintaining differentiated services data flow at a network device implementing redundant packet discard security techniques

An improved method is described for providing Differentiated Services (Diffserv) traffic to a node in a network that implements a security method that discards duplicate packets received at the node. The method includes the step of identifying at least two service levels to be provided to received traffic and assigning separate sequential sequence numbers and different anti-replay bitmasks to each of the service levels. The anti-replay bitmask indicates the sequence numbers of packets that have been previously received at the node that should be compared against a received packet to determine whether a duplicate packet has been received. Such an arrangement reduces the possibility that traffic having lower priority is dropped as a security measure.

Method and apparatus for preserving data in a system implementing Diffserv and IPsec protocol

To prevent loss of packets due to failover between server systems in which a failover mechanism is provided in a first server system to enable a second server system to failover to the first server system, the first server system includes a first sequence number space that is different from a second sequence number space in the second server system. The first and second sequence number spaces are part of a total sequence number space. After failover from the second server system to the first server system, the first server system sends packets containing sequence numbers in the first sequence number space which are defined by a security protocol.

Growing community of inventors

Acton, MA, United States of America

Jing Xiang