Samsung Electronics Co., Ltd.

Zscaler, Inc.

Avaya Inc.

Sudhindra Pundaleeka Herle

Bryan Jeffery Moles

Patrick Foxhoven

Ronald Webb

John A Chanak

Purvi J Desai

Manoj Apte

Mohan Reddy Duggi

William Fehring

Vani Budhati

Denzil Wessels

Joseph R Cleveland

Srikrishna Kurapati

John S Csapo

Guoxin Fan

Nim Keung Leung

Michael J Von Ahnen

Gowri Shankar

Cary Scott Pillers

Bryan Jeffrey Moles

Ravindranathan Sengottaiyan

Mark Mitchell

Jinhui Zhou

Systems and methods include receiving a request, in a cloud system from a user device, to access an application, wherein the application is in one of a public cloud, a private cloud, and an enterprise network, and wherein the user device is remote over the Internet; determining if the user device is permitted to access the application; if the user device is not permitted to access the application, notifying the user device the application does not exist; and if the user device is permitted to access the application, stitching together connections between the cloud system, the application, and the user device to provide access to the application.

Cloud-based virtual private access systems and methods for application access

A virtual private access method implemented by a cloud system, includes receiving a request to access resources from a user device, wherein the resources are located in one of a public cloud and an enterprise network and the user device is remote therefrom on the Internet; forwarding the request to a central authority for a policy look up and for a determination of connection information to make an associated secure connection through the cloud system to the resources; receiving the connection information from the central authority responsive to an authorized policy look up; and creating secure tunnels between the user device and the resources based on the connection information.

Cloud-based virtual private access systems and methods

A method includes connecting to a client at a Virtual Private Network (VPN) device in a cloud system; forwarding requests from the client for the Internet or public clouds accordingly; and, for requests for an enterprise associated with the client, contacting a topology controller to fetch a topology of the enterprise, causing a tunnel to be established from the enterprise to the VPN device, and forwarding the requests for the enterprise through the tunnel. A cloud system and VPN system are also described. Advantageously, connections between the cloud and on-premises proxy are dynamic, on-demand and orchestrated by the cloud. Security is provided at the edge&#x2014;there is no need to punch any holes in the existing on-premises firewalls.

Intelligent, cloud-based global virtual private network systems and methods

A wireless communication device for accessing a wireless network and downloading a software upgrade file. The wireless communication device comprises: i) a CPU for controlling wireless communications with the wireless network; ii) a first memory associated with the first CPU; iii) a CPU for executing at least one end-user application on the wireless communication device; and iv) a second memory associated with the second CPU. The first CPU downloads the software upgrade file from the wireless network and stores the downloaded software upgrade file in the second memory for subsequent execution. The first CPU and the second CPU share resources in order to carry out software upgrades for either or both CPUs.

Apparatus and method for performing an over-the-air software update in a dual processor mobile station

A method for reducing power consumption in a mobile station is provided. The method includes holding data associated with a first polling message until a first scheduled RF wake-up of the mobile station. The method also includes sending the data associated with the first polling message at substantially the same time as the first scheduled RF wake-up of the mobile station. The method further includes holding a second polling message until a second scheduled RF wake-up of the mobile station. The scheduled RF wake-ups of the mobile station are determined according to a schedule established by a service provider of the wireless communication network. In certain embodiments, the polling messages are associated with an ActiveSync&#xae; Ping command.

Methods to reduce power for asynchronous internet message protocols

A mobile station capable of being upgraded by a delta file received from a software upgrade server via a wireless network. The mobile station comprises: 1) a memory for storing an original image file and the delta file, wherein the delta file is suitable for upgrading the original image file; and 2) a controller for modifying the original image file according to instructions stored in the delta file to thereby generate an upgraded image file.

System and method for delta-based over-the-air software upgrades for a wireless mobile station

The present invention provides a system, method and apparatus for securely exchanging security keys and monitoring links in an IP communications network. The apparatus is disposed between the local device and the remote device and receives a security key associated with the secure communication(s) for the local device. The apparatus then uses the security key to decode one or more messages transmitted between the local device and the remote device. The apparatus may initiate one or more security protocols whenever the decoded message(s) satisfy one or more criteria. Note that the present invention can be implemented as a computer program embodied on a computer readable medium wherein each step is performed by one or more code segments.

System, method and apparatus for securely exchanging security keys and monitoring links in a IP communications network

A wireless communication device stores a system GUI configuration file and a downloaded service provider GUI configuration file, each of which contains a text name checksum value that is calculated using the text names of the GUI parameter data stored either the system GUI configuration file or the service provider GUI configuration file. The text name checksum values are based on the text names of the GUI parameter data. After the download operation is complete, a text name checksum comparator program compares the downloaded text name checksum value to the initial text name checksum value in the system GUI configuration file. If the two text name checksum values do not match, the downloaded service provider GUI configuration file is rejected.

System and method for ensuring integrity of data-driven user interface of a wireless mobile station

There is disclosed a security device for use in a wireless network comprising a group of base stations that communicate with numerous mobile stations. The security device prevents an unprovisioned one of the mobile stations from accessing an Internet protocol (IP) data network through the wireless network. The security device comprises a first controller for receiving from the unprovisioned mobile station an IP data packet comprising an IP packet header and an IP packet payload. The first controller replaces the IP packet header with a replacement IP packet header containing an IP address of a selected provisioning server of the wireless network. The first controller selects the provisioning server by selecting the IP address in the replacement IP packet header according to a load spreading algorithm.

System and method for secure provisioning of a mobile station from a provisioning server using IP address translation at the BTS/BSC

A wireless communication device capable of downloading a software update file from a wireless network. The wireless communication device comprises a non-volatile memory that is re-programmed by sectors. The non-volatile memory stores: i) a target file to be updated, ii) the downloaded software update file, and iii) a journal comprising a plurality of entries, each of the entries containing status information associated with a re-programmed sector of the non-volatile memory. The wireless communication device also comprises a random access memory and a main processor that replaces target code in the target file with replacement code from the downloaded software update file. The main processor creates a first block of replacement code in the random access memory and re-programs a first target sector of the non-volatile memory by storing the first block of replacement code into the first target sector. The main processor updates first status information in a first entry in the journal associated with the first target sector.

Apparatus and method for performing a fail-safe over-the-air software update in a mobile station

A software upgrade server that remotely links a software upgrade file as a DLL and transmits the DLL to a mobile station via a wireless network. The mobile station comprises a memory for storing the software file and a controller that communicates with the software upgrade server. The controller receives a message from the software upgrade server indicating a software file is available for upgrading. The controller determines an available space in the memory where the available software file may be installed and transmits to the software upgrade server a target address at the start of the available memory space. The server uses the target address to link a plurality of object files into a DLL and transmits the DLL to the mobile station.

Apparatus and method for remote DLL linking of software upgrades for a wireless mobile station

For use in a mobile ad hoc network (MANET), a first MANET node for routing data packets using Layer 2 information. The first MANET node comprises: 1) a radio frequency (RF) transceiver for wirelessly communicating with other MANET nodes; and 2) a controller for receiving incoming data packets from the RF transceiver and sending outgoing data packets to the RF transceiver. The controller receives a first data packet from an Internet protocol (IP) layer associated with the first MANET node, determines a first medium access control (MAC) layer address associated with the first data packet, and adds the first MAC layer address to the first data packet.

Apparatus and method for transparent layer 2 routing in a mobile ad hoc network

A segmented linker for generating from an original binary file an upgraded binary file suitable for replacing a copy of the original binary file installed in a target device. The segmented linker receives as inputs a plurality of objects, the original binary file, and a memory map input file associated with a target device. The segmented linker preserves in the upgraded binary file at least some of the spatial locality of reference of code in the original binary file. The segmented linker further receives as an input a linker guideline file that defines the layout of objects having spatial locality of reference in the original binary file. The segmented linker uses the linker guideline file to limit the propagation of cascading address references in the upgraded binary file.

Segmented linker using spatial locality of reference for over-the-air software updates

A method of generating a composite delta file based on the differences between an original file and an upgraded file. The method comprises the steps of: 1) segmenting the original binary file into segments of size N; 2) segmenting the upgraded binary file into segments of size N; 3) detecting a first set of differences between a first segment from the original binary file and a first segment from the upgraded binary file; and 4) generating a first delta file from the detected first set of differences. The method further comprises the steps of: 4) detecting a second set of differences between a second segment from the original binary file and a second segment from the upgraded binary file; and 5) generating a second delta file from the detected second set of differences. The first and second delta files are combined to form the composite delta file.

Apparatus and method for efficient generation of delta files for over-the-air upgrades in a wireless network

For use in a mobile ad hoc network (MANET), a first MANET node for aggregating route cost information associated with a first route from a source MANET node to a destination MANET node. The first MANET node comprises: 1) a radio frequency (RF) transceiver for wirelessly communicating with other MANET nodes; and 2) a controller for receiving incoming data packets from the RF transceiver and sending outgoing data packets to the RF transceiver. The controller receives a Route Request (RREQ) message generated by the source MANET node and retrieves initial route cost information from the RREQ message. The initial route cost information comprises an RF link cost parameter for a preceding RF link between the first MANET node and the source MANET node and a node cost parameter for a preceding MANET node between the first MANET node and the source MANET node.

Growing community of inventors

Plano, TX, United States of America

Sudhindra Pundaleeka Herle