Intel Corporation

Michael B Andrews

Farid Adrangi

Ranjit S Narjala

Emily H Qi

Omesh Tickoo

Gunner D Danneels

Prakash N Iyer

Changwen Liu

Ketan R Sampat

Eric Davison

Kaustubh Das

Systems and methods provide a secure network path through an inner and outer firewall pair between a mobile node on a foreign network and a corresponding node on a home network. One aspect of the systems and methods includes providing a mobile IP proxy between the mobile node and a VPN gateway inside the firewalls. The mobile IP proxy acts as a surrogate home agent to the mobile node, and acts as a surrogate mobile node to a home agent residing on the home network.

System and method for integrating mobile networking with security-based VPNs

A method, apparatus and system which enable a mobile node to request dynamic allocation of a home address and to maintain that home address when roaming between a home subnet and a foreign subnet. According to one embodiment, the mobile node may acquire a home address from its home agent by using a Network Access Identifier ('NAI') extension in a registration request. The mobile node may send out this registration request when it first starts up, regardless of whether it is on its home subnet or a foreign subnet. Additionally, the mobile node may set a bit in the registration request to inform the home agent that it is on its home network. If the bit is not set, the home agent may deduce that the mobile node is on a foreign network. In either instance, the mobile node may continue to use its originally acquired home address.

Method, apparatus and system for obtaining and retaining a mobile node home address

A method, apparatus and system provide a seamless, secure roaming solution. Embodiments of the present invention enable secure transmission of IP packets across enterprise security gateways. According to one embodiment, a mobile node on an external network may register with an external home agent using an external home address. The mobile node may also establish a secure path to the security gateway using the external home address and an internal home address. The mobile node may thereafter use the secure path to correspond with nodes on the external network. In other embodiments, the mobile node may use this secure path to register with an internal home agent on a home network, using the internal home address. The mobile node may then correspond with nodes on the home network via the secure path.

Method, apparatus and system for a secure mobile IP-based roaming solution

Techniques and structures for performing load balancing in a wireless network in a manner that prevents the occurrence of ping pong are disclosed.

Ping-pong avoidance load balancing techniques and structures for wireless communication

A distributed protocol for allocation of multicast addresses. A first node of a network sends an address request message identifying (1) a requested in multicast address, and (2) a multicast group identifier to which the requestor belongs. The request is in multicast on a network address reserved for address resolution. All other nodes of the network monitor the reserved network address for address request messages. If a second node receiving the address request message has already allocated the requested multicast address, then the second node sends an acknowledgment message identifying (1) the already allocated in multicast address, and (2) the multicast group for which the address has been allocated. This acknowledgment is transmitted on the same reserved network address on which the address request was sent. The first node, monitoring the reserved network address, receives the acknowledgment message. If the multicast group identified in the acknowledgment message matches the multicast group to which the first node belongs, then the first node also allocates the requested network address. If the multicast group identified in the acknowledgment message does not match the multicast group to which the first node belongs, then the first node abandons the requested network address. If the first node does not receive an acknowledgment message in response to any number of address request messages repeated for the same requested multicast address, then the first node either (1) allocates the requested network address, or (2) abandons the requested network address, if the node is not the first member of a multicast group to request allocation of the address. If address allocation succeeds, then the first node uses the allocated network address for multicasting. If address allocation fails, then the first node is free to select a different multicast address to request.

Growing community of inventors

Beaverton, OR, United States of America

Michael B Andrews