Future Wei Technologies, Inc.

John Matthew Kaippallimalil

Yangsong Xia

Zhixian Xiang

Hinghung Anthony Chan

Khosrow Tony Saboorian

Serge M Manning

Behcet Sarikaya

Kaidi Huang

Peter J McCann

A method for connection rehoming by a user equipment includes attaching to a first network attachment point (AP) and establishing a first connection to a first packet data network (PDN) interface, and moving from the first network AP to a second network AP. The method includes discovering a first cost associated with the first connection is high, and rehoming the first connection, thereby establishing a second connection coupling the UE to a second network AP and to a second PDN interface, wherein a second cost associated with the second connection is low.

System and method for connection rehoming

An embodiment method for session handling for a connection between an UE and a network includes establishing, at a first distributed EPC, user and IP sessions over the connection through the first distributed EPC. The first distributed EPC includes a first PGW at which the IP session is anchored. The method also includes holding original IP resources and releasing original connection resources for the sessions at the first distributed EPC when the UE moves beyond the first distributed EPC to a second distributed EPC. The method then establishes a tunnel between the first PGW and a second PGW for the second distributed EPC. The tunnel utilizes the original IP resources and new connection resources at the second distributed EPC. The method then routes data from the tunnel, through the first PGW, and to the network.

System and method for distributed evolved packet core architecture

A network component comprising at least one processor configured to implement a method comprising granting a user restricted access at a reduced rate without authenticating the user, attempting to authenticate the user, and granting the user unrestricted access at a full rate if the user authentication is successful. Included is a method comprising authenticating a user device, a user line, or both using a first communication, and authenticating a user using a second communication separate from the first communication. Also included is an apparatus comprising an access node (AN) configured to couple to an access network and communicate with a user equipment (UE) via the access network, wherein the UE is authenticated using either line authentication or device authentication based on the access network.

User and device authentication in broadband networks

An embodiment method for network detection and selection includes receiving, by a user equipment (UE), a network detection and selection policy including a load threshold element, the UE further receiving load information element from an access network (AN), and applying the network detection and selection policy to the AN.

System and method for network detection and selection

A method comprising sending a dynamic host configuration protocol (DHCP) message comprising an Identity Association for Prefix Delegation (IA_PD) Prefix option comprising a Internet Protocol version 6 (IPv6) prefix and a length of the IPv6 prefix to a device having a media access control (MAC) address, receiving from the device a packet comprising a source MAC address and a source IPv6 address, and dropping the packet when the MAC address is equal to the source MAC address and the leftmost bits of the source IPv6 address defined by the length are not equal to the IPv6 prefix.

Internet protocol version six (IPv6) addressing and packet filtering in broadband networks

An apparatus comprising a local mobility anchor (LMA) configured to forward a flow to a mobile node (MN) via a first mobile access gateway (MAG) in a first network and via a second MAG in a second network, and to bind the flow to the second MAG from the first MAG, wherein the first MAG is configured to manage the MN mobility in the first network and the second MAG is configured to manage the MN mobility in the second network, wherein the first MAG sends a binding update comprising a flow description information to the LMA, and wherein the LMA replies to the binding update with a binding acknowledgement.

Apparatus and method of flow movement for network-based mobility management protocol

Methods and system for simplified Protocol for Carrying Authentication for Network Access (sPANA) are disclosed. In the broadband architecture such as Broadband forum or WiMAX forum, a Network Access server (NAS) is one IP hop away from a user. Therefore, it is possible to relax the need in PANA to obtain an IP address prior to authentication. A PANA client (PaC) may use an unspecified IP address (e.g. 0.0.0.0 in TPv4) as a source address for authentication. A PANA Authentication Agent (PAA) may use an IP broadcast address as a network layer destination address (e.g. 0xffffffff). The present invention defines PANA Attribute-Value Pairs (AVPs) and procedures that allow a Challenge-Handshake Authentication Protocol (CHAP) exchange to occur in PANA. The PANA CHAP support may facilitate smooth migration from Point-to-Point Protocol (PPP) sessions to IP sessions in a DSL Broadband network environment. The sPANA can be desirably compatible with the PANA.

Simplified protocol for carrying authentication for network access

Included are devices, systems, and methods which may be employed in an access network. An access node (AN) may be configured to communicate with a residential gateway (RG) via the access network. The AN may also be configured to encapsulate a router solicitation (RS) from the RG with a header comprising an access identifier associated with the RG. The AN may send the encapsulated RS to an Internet Protocol (IP) edge. The AN may also be configured to receive a responsive router advertisement (RA) from the IP edge and may forward the RA to the RG based on the access identifier.

Using internet protocol version six (IPv6) tunnel for access identifier transport

A system comprising an access node (AN) coupled to a plurality of service providers (SPs) and a host and configured to forward a plurality of services between the SPs and the host using a plurality of first connections between the AN and the host and a plurality of second connections between the AN and the SPs, and a router gateway (RG) positioned between the host and the AN and coupled to the AN via an access line that comprises the first connections, wherein the AN translates a plurality of first identifiers for the first connections to a plurality of second identifiers for the second connections to route the services appropriately between the host and the SPs over the first connections and the corresponding second connections.

Multiple prefix connections with translated virtual local area network

A network component comprising at least one processor configured to implement a method comprising deriving a Master Session Key (MSK) using a secret key and at least one parameter obtained from an Extensible Authentication Protocol (EAP) sequence, deriving a first Pairwise Master Key (PMK) and a second PMK from the MSK, authenticating with a home gateway (HG) using the first PMK, and authenticating with an end point using the second PMK. Included is an apparatus comprising a node comprising an access controller (AC) and a protocol for carrying authentication for network access (PANA) Authentication Agent (PAA), wherein the AC is configured to manage authentication for a UE, and wherein the PAA is configured to implement a PANA to forward authentication information related to the UE.

PANA for roaming Wi-Fi access in fixed network architectures

An apparatus comprising a node comprising an access controller (AC) and an authentication, authorization and accounting (AAA) proxy (AAA-P), wherein the AC is configured to manage authentication for a user equipment (UE), and wherein the AAA-P is configured to exchange authentication information related to the UE with an AAA server. Included is a network component comprising at least one processor configured to implement a method comprising establishing a first tunnel with a home gateway (HG), wherein the HG communicates wirelessly with a UE, and establishing a second tunnel between the UE and a Network Access Server (NAS). Also included is a network component comprising at least one processor configured to implement a method comprising receiving a Pairwise Master Key (PMK) from an AAA mediator (AAA-M), and authenticating a UE using the PMK.

Roaming Wi-Fi access in fixed network architectures

A system for link-independent multihoming in a network having heterogeneous access network technologies is disclosed, providing such multihoming in a manner transparent to IP connections. The system of the present invention provides constructs and methods for:

Growing community of inventors

Richardson, TX, United States of America

John Matthew Kaippallimalil