Nokia Corporation

Intellectual Ventures I LLC

Other

Ram Gopal Lakshmi Narayanan

Tat Keung Chan

Dirk Trossen

Michael Wu

Hemant M Chaskar

Govindarajan Krishnamurthi

Senthil Sengodan

Sanjeev Verma

Padmajabala Kotamarthi

Man Li

Mika Skarp

Dana Pavel

Hermant Chaskar

Petteri Alinikula

Rajesh Chandra Bansal

A terminal for validating a software application includes a processor capable of operating an operating system (OS) platform (e.g., Symbian&#x2122; OS platform), and capable of operating at least one software application above the OS platform. The software application(s) are associated with a permission record that includes permissions identifying services the software application is authorized to receive from the OS platform. The OS platform is capable of receiving a request, from a software application, for a service of the OS platform. The OS platform can determine if the software application is authorized to receive the requested service based upon the associated permission record. And if the software application is authorized, the OS platform is capable of providing the requested service to the software application.

Terminal, method and computer program product for validating a software application

A method of organizing a plurality of servers defines a set of servers. The method also defines one of the servers of the set of servers as a server which is configured to control the communication of information to other servers in the set to support heterogeneous application requirements and interoperability between hardware and software systems.

Method of organising servers

The invention provides a method and system for a network which includes a plurality of nodes, preferably routers, a shared network segment for communication between the nodes, and several multicast channels in the shared network segment on which the nodes, preferably routers, can send multicast messages to the other nodes. A specific multicast channel is provided on which the nodes can send specific start multicast messages to other nodes, wherein a node which starts a protocol application, preferably a routing protocol application such as Open Shortest Path First (OSPF) protocol, is adapted to send a multicast start message on the specific multicast channel. Another node, preferably a router, receiving this start message is adapted to validate the authenticity of the start message and to send a response message.

System and method for nodes communicating in a shared network segment

A method for establishing a secure communications tunnel between a first node and a second node in a communication system includes a plurality of networks each having a respective tunnel control entity for controlling establishment of secure communications tunnels in the respective network. The first node operates in a first one of the networks and the second node operates in a second one of the networks. The method includes determining a route for the communications tunnel from the first network to the second network by way of one or more of the other networks. A request message digitally signed by the first node is formed and the identities of the tunnel control entity of the first network and the tunnel control entities of the other networks are included. The request message from the first node to the tunnel control entity of the second network is transmitted. In response to that message, the secure communication tunnel is established between the first node and the second node by way of the tunnel control entities identified in that message.

Establishing communication tunnels

A solution for supporting relocation of an IP session of a mobile node during a network layer handover in a mobile communication system. In the method, from the application context information on the mobile node is detected a first set of capabilities of a network node that that facilitate maintaining the IP session. This first set of capabilities is queried from one or more potential next network node. Applicability of the potential next network node to the relocation of the IP session is determined by the capability information on the first set of capabilities.

Optimized information transfer associated with relocation of an IP session in a mobile communications system

According to one embodiment of the invention, a distributed routing device for routing subscriber traffic flow between at least two wireless access networks and an IP network is described. The distributed routing device includes at least one instance for executing a security function on the subscriber traffic flow, so that physically one security instance for subscribers of the at least two wireless access networks is present and logically each of the at least two wireless access networks has its own security instance.

Apparatus and method for security management in wireless IP networks

In an exemplary embodiment of this invention there is disclosed a mobile wireless terminal () that includes a transceiver () for coupling the mobile wireless terminal to a wireless network operator (), a controller () and a memory (). The memory may be assumed to store a file system program (A) executable by the controller, and to be operable to store a file having a file data portion () for containing file data and a data structure, such as a file header (), having fields for containing values. A plurality of the fields contain a value of a public cryptographic key () associated with a file creator, a seed value (), an encrypted seed value () obtained by encrypting the seed value with a private cryptographic key of the file creator, and a file integrity value () obtained using the encrypted seed value and the file data. By the use of the preferred embodiments a file can be traced-back though a plurality of file handlers to a creator of the file.

Method and apparatus to provide secure mobile file system

In mobile IP networks, when a mobile node (MN) moves from one cell to another, handover occurs. The result of the handover is that the MN connects to the network through a new access router (AR). The handover may occur between access routers of the same or different administrative domains. In all cases, the information related to the mobile node has to be transferred from the old AR to the new AR in order to minimize the effect of the change of access routers.

Policy based mechanisms for selecting access routers and mobile context

A method and system for adding and monitoring a server to an existing server pool are disclosed. A joining server registers with a server within the server pool. The joining server is authenticated by a server within the server pool. When the joining server receives the list of all active servers within the server pool, the joining server computes a new identification for itself, assigns that identification to itself, and then determines a caretaker server to monitor the joining server. Once the registration is successful, the newly joined server can communicate within the server pool and keep current of all events and changing conditions of the server pool.

Reliable server pool

In mobile IP networks, when a mobile node (MN)moves from one cell to another, handover occurs. The result of the handover is that the MNconnects to the network through a new access router (AR). The handover may occur between access routers of the same or different administrative domains. In all cases, the information related to the MNhas to be transferred from the old ARto the new ARin order to minimize the effect of the change of access routers.

Mechanism to create pinhole for existing session in middlebox

An access-point node to a first network cell of a radio access network, to an access-center node and to a radio access network enable local service providers in rural areas to provide mobile telecommunication at low cost for end users. The access-point node of the invention is configured to establish, maintain, and release a local user-data radio channel, which consists of a first local channel section having as endpoints a first terminal device located in the network cell and the access-point node, and of a second local channel section having as endpoints the access-point node and a second terminal device located in the network cell. The access-point node is configured to exchange packetized user data and control data with an assigned superordinate access-center node for establishing, maintaining and releasing communication between the first terminal device and a third terminal device located outside the network cell. Link cost between the radio access network and the core network may be strongly reduced.

Low-cost radio access network enabling local switching

Systems and methods are provided for managing and distributing keys between routers using protocol exchange messages between routers as key distribution vehicles. According to one embodiment of the invention, a router of an autonomous system uses its private key to send cryptographic information associated with another router to a peer router as part of its protocol exchange messages. The peer router is able to extract the cryptographic information and store it in a look-up table. Such protocol exchange messages may occur as part of an Interior Gateway Protocol or an Exterior Gateway Protocol. According to another embodiment of the invention, a chain authentication system is created as boundary routers of autonomous systems having a trust relationship share cryptographic information for other autonomous systems as part of protocol exchange messages for the exterior gateway protocol.

Key distribution across networks

A communications system and method for dynamically creating at least one pinhole in a firewall are provided. The communications system includes a protected node capable of initiating a communication session with an outside node. In this regard, the protected node is capable of receiving flow parameters regarding the communication session as the communication session is setup. The system also includes a firewall disposed along a communications path between the protected node and the outside node. The protected node is capable of sending at least a portion of the flow parameters to a firewall-controlled proxy, which in turn, is capable of forwarding the portion of the flow parameters to the firewall. Thereafter, the firewall is capable of creating at least one pinhole based upon the portion of the flow parameters to thereby permit the transmission of information between the outside node and the protected node during the communication session.

Growing community of inventors

Woburn, MA, United States of America

Ram Gopal Lakshmi Narayanan