Abstract:
A method and apparatus to establish trust between two nodes in a communications network. A first node receives from a network node authentication data unique to the first node, which can be used to derive a compact representation of verification data for the first node. The first node also receives a certified compact representation of verification data of all nodes in the network. The first node derives trust information from the authentication data for the node, and sends to a second node a message that includes the trust information and part of the authentication data. The second node has its own copy of the certified compact representation of verification data of all nodes in the network, and verifies the authenticity of the message from the first node using the compact representation of verification data of all nodes in the network and the received trust information and authentication data.
Abstract:
A system for re-establishing a session between first and second hosts attached to respective first and second access routers. A connection request is sent from the first host to the first access router, the request containing an IP address claimed by the second host, a new care-of-address for the first host, and a session identifier. Upon receipt of the connection request, the first router obtains a verified IP address for the second access router and sends an on link presence request to the second access router, the request containing at least an Interface Identifier part of the second host's claimed IP address, the cue-of-address. and the session identifier. The second access router confirms that the second host is attached to the second access router. The second access router then reports the presence status to the first access router.
Abstract:
A method, a correspondent node and a mobile node provideanonymity and unlinkability to a mobile node in a session with a correspondent node. Sequence values, calculated based on secret data, are added to updates sent from the mobile node towards the correspondent node and are used by the correspondent node to authenticate updates from the mobile node.A home address of the mobile node is not explicitly disclosed. An expected care-of address is calculated at the correspondent node and used by the correspondent node to send data packets to the mobile node.
Abstract:
Embodiments of the present disclosure include methods and apparatuses for enabling data path selection. In an EPG, ILNP mobility signaling is received. The ILNP signaling may include a destination locator for a BNG. A signaling message is sent to the BNG in response to the received ILNP signaling. An acknowledgement is received from the BNG. Traffic is tunneled between a mobile device and a RGW over a LTE interface. In a BNG, a signaling message is received. A message is sent to a SDN controller. A notification is received from the SDN controller that configuration of a RGW to tunnel traffic over a LTE interface is complete. An acknowledgement is sent to an EPG. In a RGW, a message is received from a SDN controller. Traffic is tunneled between a NAS and an EPG over a LTE interface based on the message received from the SDN controller.
Abstract:
Methods, Mobile Node and Mobility Access gateway for enabling vertical handoff of the Mobile Node between a first interface of the Mobile Node bearing an address A@ to which a prefix is associated and second interface of the Mobile Node used to connect towards the Mobility Access Gateway, the method comprising the steps of : - in the Mobility Access Gateway, generating a network pfB' in relation to the prefix pfA; - generating a Pad Translator (PaT) used to change between the address B@ and the address A@; and sending from the Mobility Access gateway the pfB' towards the Mobile Node over the Mobile Node's second interface.
Abstract:
A method, a correspondent node and a mobile node are provided for allowing setup of a session between the mobile node and the correspondent node using a new unique indicator in lieu of the home address to enable the correspondent node to uniquely identify the mobile node. The correspondent node uses the new unique indicator to identify the session within its Binding Cache Entry table.The mobile node may change its selection of a home address without impacting its ongoing session. Change of a home address may occur when the mobile node selects a new home agent to serve an ongoing session, or when the mobile node selects a new access interface during an ongoing session.
Abstract:
A Mobile Node, A Network Node and a method performed in a visited network of a telecommunications network. The Mobile Node has a home address (HoA) valid in a Mobile Node's home network of the telecommunications network or knows how to generate one. The HoA is used in the visited network. A Pad Translator Generator module generates a Pad Translator (PaT) from at least one protection parameter by applying at least one exclusive-or (XOR) thereon and a Pad Translator Applicator module applies the PaT on at least a portion of a header of a packet using an exclusive-or (XOR) function thereby enabling protection of at least a portion of the HoA in the visited network.
Abstract:
A method and apparatus for establishing a cryptographic relationship between a first node (102) and a second node (101) in a communications network. The first node receives at least part of a cryptographic attribute of the second node, uses the received at least part of the cryptographic attribute to generate an identifier for the first node. The cryptographic attribute may a public key belonging to the second node, and the identifier may be a Cryptographically Generated IP address. The cryptographic relationship allows the second node to establish with a third node that is entitled to act on behalf of the first node.
Abstract:
Systems and methods are described which delegate reachability testing for mobility signaling in communication networks. A mobile node transmits a mobility signaling package to other network nodes, which can use the information contained therein to perform the delegated reachability testing.