Tellabs Operations, Inc.

Yee Ming Soon

Chirayu A Shah

A network system and method capable of implementing network initiated packet data protocol ('PDP') context to enhance security of network communications are disclosed. An activation and/or modification request message containing security information element is generated and forwarded from a gateway general packet radio service support node ('GGSN') to a serving general packet radio service support node (&#x201c;SGSN&#x201d;) requesting traffic security for a particular Internet Protocol (&#x201c;IP&#x201d;) session. After sending the activation/modification request message from SGSN to user equipment (&#x201c;UE&#x201d;), an IP session with PDP context encryption between the UE and a destination is initiated according to the security information element.

Method and apparatus for providing network initiated session encryption

Methods and apparatuses are disclosed for configuring a Provider Backbone Bridge (PBB) interface within Virtual Private LAN Service using Multi-Protocol Border Gateway Protocol (MP-BGP). Previously, the only ways to enable PBB interfaces for transmission were by learning, which poses security and scalability concerns due to flooding, or by manual configuration, which is impractical for large networks. Embodiments of the present invention enable custom topologies to be built in a controlled manner, which has not previously been possible for PBB over VPLS. By using MP-BGP messages to exchange PBB interface information between nodes, peering relationships are established, and communities may be built with any desired topology. Previously, PBB has only been used as a connectionless bridge; embodiments of the present invention use PBB as a connection between edge nodes. Network designers are provided increased flexibility, and security and congestion are improved, benefiting end users.

Method and apparatus for provisioning a network element

A network system and method capable of creating separate output queues on demand to improve overall network routing performance are disclosed. The network system, in one embodiment, includes a classifier, an egress queuing device and a processor. The classifier provides a result of classification for an incoming data flow in accordance with a set of predefined application policies. The egress queuing device is an egress per flow queue ('PFQ') wherein a separately dedicated queue can be dynamically allocated within the egress PFQ in accordance with the result of classification. The processor is configured to establish a temporary circuit connection between the classifier and the egress queuing device for facilitating routing process.

Methods and apparatus for providing dynamic data flow queues

Methods and apparatuses are disclosed for interworking a first protocol, e.g., Provider Backbone Bridge Traffic Engineering (PBB-TE), that provides Ethernet carrier-class traffic engineering, with a second protocol, e.g., Virtual Private LAN Service, that emulates local area network (LAN) service. Unicast, multicast, and broadcast transmissions are enabled across an Ethernet aggregation network and an MPLS core network. Dual homing protection and end-to-end traffic engineering with adjustable granularity are also provided. These capabilities are not available with traditional PBB-TE networks or with an interworking between PBB and VPLS that has been previously proposed. Embodiments of the invention terminate a PBB-TE tunnel at a user-facing provider edge (UPE) node and attach instance service identifiers (ISIDs) to different virtual switching instances (VSI)s. As a result, inexpensive Ethernet-only aggregation networks can be designed to interoperate with VPLS with increased reliability and control, benefiting service providers and end users.

Growing community of inventors

Tokyo, Japan

Yee Ming Soon