WO2007044984A2 - Identity-based networking - Google Patents
Identity-based networking Download PDFInfo
- Publication number
- WO2007044984A2 WO2007044984A2 PCT/US2006/040498 US2006040498W WO2007044984A2 WO 2007044984 A2 WO2007044984 A2 WO 2007044984A2 US 2006040498 W US2006040498 W US 2006040498W WO 2007044984 A2 WO2007044984 A2 WO 2007044984A2
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- network domain
- vlan
- network
- client
- seed
- Prior art date
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
- H04L12/46—Interconnection of networks
- H04L12/4641—Virtual LANs, VLANs, e.g. virtual private networks [VPN]
Definitions
- a wide area network is a computer network covering a large geographical area.
- a WAN is used to connect local area networks (LANs) together.
- LANs local area networks
- a WAN can involve a vast array of network devices, network resources, and the like.
- the most well-known WAN is the Internet.
- Each LAN is connected to each other thereby forming the organization's WAN.
- the user can access his/her network resources over the WAN, such as email, calendar and task list.
- the user will not have the same IP address, access to local network resources, firewall settings, etc., because the user is accessing the LAN remotely.
- a technique for identity based networking involves virtual LAN (VLAN) tunneling between mobility domains.
- An example of a system according to the technique includes a WAN, a first VLAN, a second VLAN, and a network database.
- the first VLAN, the second VLAN and the network database are coupled to the WAN.
- the network database includes VLAN information.
- a client that is authorized on the second VLAN attempts to connect to the first VLAN.
- a switch in the WAN performs a lookup in the network database and determines that the client is authorized on the second VLAN. Based on this information, the client is connected to the second VLAN using VLAN tunneling.
- the switch can be a network domain member and the system can further include a network domain seed.
- the network domain seed can be coupled to the network domain member and the network database can be stored on the network domain seed.
- the network domain member can query the network domain seed for information.
- system can further include a second network domain seed and a second network domain member.
- the second network domain seed can be coupled to the first network domain seed and the second network domain member.
- the first network domain member can tunnel to the second network domain seed to connect the client to the second VLAN.
- the network database can be stored on the second network domain seed and can include IP addresses for switches on the WAN, VLAN names, and VLAN tunnel affinities.
- the system can further include a third network domain member that supports the second VLAN.
- the second network domain member can have a first tunnel affinity and the third network domain member can have a second tunnel affinity.
- the client can tunnel to the network domain member with the highest tunnel affinity.
- the network domain seeds and the network domain members can be in geographically distinct locations.
- the system can further include a first access point, a second access point, and a third access point. Each of the access points can be coupled to the switch. The access points can be used to triangulate the position of the client in order to pinpoint the client's exact location.
- An example of a method according to the technique involves receiving a log-in request from a client.
- the log-in request is received on a first VLAN.
- VLAN information associated with the client configuration on a second VLAN is provided.
- the client is determined to be configured on the second VLAN.
- the client is then connected to the second VLAN using VLAN tunneling.
- the method can involve a first network domain member and a second network domain member.
- the log-in request can be received by the first network domain member.
- the first network domain member can tunnel to the second network domain member in order to connect the client to the second VLAN.
- the method can also involve a network domain seed and a network database.
- the network domain seed can be queried for the VLAN information and a lookup can be performed in the network database.
- information can be retrieved from a plurality of network domain seeds that are coupled to the WAN.
- the VLAN information can include tunnel affinity information of two network domain members. The tunnel affinities can be compared and the client connected to the network domain member with the highest tunnel affinity.
- the technique can be used to connect a remote client to an appropriate
- VLAN over WAN links This technique allows a remote user to have the same experience as if connected locally.
- the client can have the same IP address, network permissions and access to network resources while being in a geographically distinct location.
- FIG. 1 depicts an example of a system for identity based networking.
- FIG. 2 depicts an alternative example of a system for identity based networking.
- FIG. 3 depicts an alternative example of a system for identity based networking.
- FIG. 4 depicts an alternative example of a system for identity based networking.
- FIG. 5 depicts an example of a location system.
- FIG. 6 depicts a flow chart of an example of a method for identity based networking.
- FIG. 7 depicts a flow chart of an alternative example of a method for identity based networking.
- FIG. 8 depicts a flow chart of an alternative example of a method for identity based networking.
- FIG. 9 depicts a flow chart of an alternative example of a method for identify based networking.
- FIG. 10 depicts a flow chart of an example of a method for client location.
- FIG. 1 depicts an example of a system 100 for identity based networking.
- the system 100 includes a WAN 102, a first VLAN 104, a second VLAN 106, and a network database 108.
- the WAN 102 is coupled to the first
- the network database 108 is also coupled to the WAN 102.
- the network database 108 can contain a variety of information, including, but not limited to, VLAN information, tunnel affinity information, an IP address for switches and/or clients on the WAN and/or VLAN, a mac address for switches and/or clients on the WAN and/or VLAN, log-in information, network permissions, etc.
- the network database can be a forwarding database, such as is described in co-pending U.S. Patent Application No. 11/351, 104 by Manish Tiwari entitled "System and Method for Network Integrity," filed February 8, 2006, which is incorporated herein by reference.
- the network database 108 can be populated by relaying network information from switches over the WAN
- the network database 108 can be duplicatively stored on any number of switches in the network. Additionally, the network database 108 can be distributed and shared among the switches in the network rather than stored in a central location.
- a client 110 attempts to connect to the first
- VLAN 104 The attempt can be facilitated in any convenient and/or know manner, manual or automatic, including, but not limited to, logging into the network, connecting to the network via a wired or wireless connection, being detected by network components, attempting to use network resources, etc.
- a switch (not shown) on the network performs a lookup in the network database 108.
- the network database 108 contains information that the client is authorized on the second VLAN 106. Based on this information, the client 110 is connected to the second VLAN 106 via VLAN tunneling 112.
- VLAN tunneling 112 can be accomplished using any convenient and/or known technique.
- tunneling can be executed on the application layer, transport layer, network layer and/or data link layer in a data network system.
- Tunneling can be achieved using a variety of protocols (depending on the network layer utilized), such as, by way of example and not limitation, the DNS, TLS/SSL, TFTP, FTP, HTTP, IMAP, IRC, NNTP, POP3, SIP, SMTP, SNMP, SSH, TELNET, BitTorrent, RTP, rlogin, ENRP, TCP, UDP, DCCP, SCTP, IL, RUDP, IPv4, IPv6, ICMP, IGMP, ARP, RARP, Wi-Fi, Token ring, PPP,
- SLIP SLIP
- FDDI FDDI
- ATM Frame Relay
- SMDS SMDS protocol
- additional layers and protocols can be used that facilitate VLAN tunneling.
- FIG. 2 depicts an alternative example of a system 200 for identity based networking.
- the system 200 includes a WAN 202, a VLAN 204 and a VLAN 206.
- the WAN 202 includes a network domain seed 208.
- the VLAN 204 includes a network domain member 210 and the VLAN 206 includes a network domain 212.
- the WAN 202 is connected to the VLAN 204 and the VLAN 206.
- the connection is facilitated by the network domain seed 208 which is coupled to the network domain member 210 and the network domain member 212.
- a network database 214 is located on the network domain seed 208.
- the network database 214 can be located in any convenient and/or known location, including, but not limited to, the network domain member 210 and/or the network domain member 212.
- a client 216 attempts to connect to the VLAN
- the client 216 attempts this connection by logging on to the network through the network domain member 210.
- the client 216 can be a wired or wireless client and the network domain member 210 can be a switch that provides wired or wireless access.
- the network domain member 210 can be a switch as described in co-pending U.S. Patent Application No. 11/351,104 by Manish Tiwari entitled "System and Method for Network Integrity, " filed February 8, 2006.
- the network domain member 210 queries the network domain seed 208 for VLAN information.
- the network domain seed 208 performs a lookup in the network database 214.
- the network database 214 provides that the client 216 is authorized on the VLAN 206.
- the network domain seed 208 relays the information to the network domain member 210.
- the network domain member 210 creates a tunnel 218 to the network domain member 212 facilitating the connection of the client 216 to the VLAN 206.
- FIG. 3 depicts an alternative example of a system 300 for identity based networking.
- the system 300 includes a network domain seed 302, a network domain seed 304, a network domain member 306, a network domain member 308, a network database
- the network domain seed 302 is coupled to the network domain seed 304 and the network domain member 306.
- the network domain seed 304 is additionally coupled to the network domain member 308.
- the network database 310 is stored on the network domain seed 302 and the network database 304 is stored on the network domain seed 312.
- the network database 310 and the network database 312 store the same information. In other embodiments, the information stored in the network databases 310, 312 can be different.
- a client 314 who may be authorized on a second VLAN, attempts to connect to the network domain member 306 which supports a first VLAN.
- the network domain member 306 queries the network domain seed 302 for VLAN information.
- the network domain seed 310 performs a lookup in the network database 310.
- the network database 310 is populated with information received from the network domain seed 312.
- the network database 310 could be populated with information received from theoretically any number of network domain seeds.
- the information can be used to identify the VLAN(s) each network domain member supports.
- one or both of the network databases can be removed and the network domain seed 302 can query the network domain seed 304 to determine which VLAN the network domain member 308 supports.
- the network domain seed 302 relays VLAN information to the network domain member 306.
- the VLAN information provides, for example, that the client 314 is authorized on the second VLAN.
- the VLAN information may also provide that the second VLAN is supported by the network domain member 308.
- the network domain member 306 tunnels to the network domain member 308.
- VLAN tunnel 316 is connected to the second VLAN via a VLAN tunnel 316.
- FIG. 4 depicts an alternative example of a system 400 for identity based networks.
- the system 400 includes a network domain seed 402, a network domain seed 404, a network domain member 406, a network domain member 408, a network domain member 410, and a network database 412.
- the network domain seed 402 is coupled to the network domain seed 404.
- the network domain member 406 is coupled to the network domain seed 402.
- the network domain member 408 and the network domain member 410 are coupled to the network domain seed 404.
- the network database 412 is coupled to and accessible by the network domain seed 402 and the network domain seed 404.
- the network domain member 406 supports a first VLAN while the network domain member 408 and the network domain member 410 support a second VLAN.
- a client 414 attempts to connect to the network domain member 406.
- the network domain member 406 queries the network domain seed 402 for VLAN information.
- the network domain seed 402 retrieves VLAN information from the network database 412.
- the VLAN information provides, for example, that the client 414 is authorized on the second VLAN.
- the VLAN information may also provide that the network domain member 408 and/or the network domain member 410 support the second VLAN.
- the VLAN information may provide that the tunnel affinity for the network domain member 408 is higher than the tunnel affinity for the network domain member 410. Based on this information, the network domain member 406 creates a VLAN tunnel 416 to the network domain member 408 and the client 414 is connected to the second VLAN.
- FIG. 5 depicts a location system 500.
- the system 500 includes a switch 502, an access point 504, an access point 506, and an access point 508.
- the access point 504, the access point 506 and the access point 508 are coupled to the switch 502.
- the switch 502 can be network domain member and/or a network domain seed.
- the access points can provide wired and/or wireless access to a network. Further, the switch and access points can be as describe in co-pending U.S. Patent Application No. 11/351,104 by Manish Tiwari entitled "System and Method for Network Integrity," filed February 8, 2006.
- a client 510 is detected by the system 500.
- the access point 504, the access point 506 and the access point 508 detect the client 510.
- the client 510 can detected by any known and/or convenient technique, including, by way of example but not limitation, sniffing for transmitted packets, monitoring access of network resources, providing network connectivity, etc.
- the precise location of the client 510 can be calculated using any convenient and/or known technique, including, by way of example but not limitation, triangulation techniques in one or more dimensions.
- additional access points can be coupled to the switch 502 or access points can be taken away. If additional access points are coupled to the switch 502, the location of the client may become more precise while if access points are taken away, the location of the client may become less defined.
- FIG. 6 depicts a flowchart 600 of an example of a method for identity based networking.
- FIG. 6 is intended to illustrate connecting a client to an appropriate VLAN using VLAN tunneling.
- the flowchart 600 starts at module 602 where a log- in request is received.
- the log-in request can be received by any convenient and/or known device on a network, including, by way of example and not limitation, a switch, access point, router, computer, server, etc.
- the log-in request can be made by a client and/or any other convenient and/or known device that can log-in to a network.
- VLAN information can be retrieved by any convenient and/or known device using any convenient and/or known technique.
- a first switch can query a second switch for VLAN information.
- the second switch can relay the information to the first switch in response to the query.
- a switch can perform a look-up in a network database to retrieve VLAN information.
- the network database can be located on the switch itself or accessible over the network.
- a first switch can query a second switch and the second switch can perform a lookup in a network database.
- the network database can be located on the second switch or accessible by the second switch over a network.
- the flowchart 600 continues at module 606 where an appropriate VLAN is determined.
- the appropriate VLAN can be determined by the VLAN information retrieved.
- the appropriate VLAN can be determined by a combination of the VLAN information retrieved and the characteristics of the log-in request.
- the flowchart 600 continues at module 608 where a connection to the appropriate VLAN is established.
- the connection can be established using any convenient and/or known technique.
- a VLAN tunnel can be created for a client that is authorized on a VLAN supported by a remote switch.
- FIG. 7 depicts a flowchart 700 of an alternative example of a method for identity based networking.
- FIG. 7 is intended to illustrate retrieving VLAN information.
- the flowchart 700 starts at module 702 where VLAN information is queried.
- the query can be facilitated using any known and/or convenient technique capable of retrieving information from a database.
- a first switch can query a second switch and/or a network database for VLAN information.
- the flowchart 700 continues at module 704 where a lookup is performed in a network database.
- the lookup can be performed by any device coupled to the database and/or any device that the database is stored.
- the second switch can perform a lookup in a network database located locally and relay the retrieved information to the first switch.
- the first switch can perform a lookup in a network database that is coupled to the network.
- FIG. 8 depicts a flowchart 800 of an alternative example of a method for identify based networking.
- FIG. 8 is intended to illustrate another method of retrieving VLAN information.
- the flowchart 800 starts at module 802 where VLAN information is queried.
- the query can be facilitated using any known and/or convenient technique capable of retrieving information from a database.
- a network domain member can query a network domain seed for VLAN information.
- the flowchart 800 continues at module 804 where information is retrieved from a plurality of network domain seeds.
- the information can be stored on the plurality of network domain seeds and/or can be accessed by the network domain seeds over the network.
- a network domain seed can query all other network domain seeds for VLAN information and relay the retrieved information to the network domain member.
- FIG. 9 depicts a flowchart 900 of an alternative example of a method for identify based networking.
- FIG. 9 is intended to illustrate a method of connecting to a switch having the highest tunnel affinity.
- the flowchart 900 starts with module 902 where tunnel affinity information is compared.
- the tunnel affinity information can be compared for two switches that support the same VLAN. For example, and not limitation, a client that is authorized on a VLAN can connect to any member that supports the VLAN. If two or more members support the VLAN, then the tunnel affinity for each member is compared and a connection is made to the member with the highest tunneling affinity.
- the flowchart 900 continues with module 904 where a connection is made to the member with the highest tunnel affinity.
- the connection can be made using any known and/or convenient technique capable of connecting one network member to another.
- a first network member can create a VLAN tunnel to a second network member in order to connect a client to an authorized VLAN.
- FIG. 10 depicts a flowchart 1000 of an example of a method for client location.
- FIG. 10 is intended to illustrate a method of locating a client that is accessing a network.
- the flowchart 1000 starts with module 1002 where a client's location is queried.
- the query for a client's location can be made by any convenient and/or known device coupled to the network.
- the query can be made by via a command line interface, network management software, computer, switch, router and/or any other convenient and/or known device capable of sending commands on a network.
- the flowchart 1000 continues at module 1004 where the location of the initial log-in request in returned.
- the location of the client can be sent from a switch that received the client's initial log-in request.
- the location of the client can be sent from a network domain seed that provided VLAN information to a switch that queried for the information.
- the switches on the ends of a VLAN tunnel can return the location of the initial log-in request.
- the client has the same experience from a remote location as the client would have from being local.
- a client can have the same IP address, same network permissions, and same access to network resources even though the client logs-on in a geographically distinct area. These characteristics are extremely beneficial in lower costs and increasing efficiency.
Abstract
A technique for identity based networking is disclosed. A system according to the technique can include a WAN (102), a first VLAN (104), a second VLAN (106) and a network database (108). The first VLAN (104) and second VLAN (106) can be coupled to the WAN (102). The network database (108) can include VLAN information. In operation, a client (110) that is authorized on the second VLAN (106) can attempt to connect to the first VLAN (104). A switch in the WAN (102) can perform a lookup in the network database (108) and determine that the client (110) is authorized on the second VLAN (106). Based on this information, the client (110) can be connected to the second VLAN (106) using VLAN tunneling (112).
Description
IDENTITY-BASED NETWORKING
BACKGROUND
A wide area network (WAN) is a computer network covering a large geographical area. Typically, a WAN is used to connect local area networks (LANs) together. A WAN can involve a vast array of network devices, network resources, and the like. The most well-known WAN is the Internet.
Organizations often have a separate LAN for every regional office. Each LAN is connected to each other thereby forming the organization's WAN. When a user travels from one office to another, the user can access his/her network resources over the WAN, such as email, calendar and task list. However, the user will not have the same IP address, access to local network resources, firewall settings, etc., because the user is accessing the LAN remotely.
The foregoing examples of the related art and limitations related therewith are intended to be illustrative and not exclusive. Other limitations of the related art will become apparent to those of skill in the art upon a reading of the specification and a study of the drawings.
SUMMARY
The following embodiments and aspects thereof are described and illustrated in conjunction with systems, tools, and methods that are meant to be exemplary and illustrative, not limiting in scope. In various embodiments, one or more of the above-described problems have been reduced or eliminated, while other embodiments are directed to other improvements.
A technique for identity based networking involves virtual LAN (VLAN) tunneling between mobility domains. An example of a system according to the technique includes a WAN, a first VLAN, a second VLAN, and a network database. The first VLAN, the second
VLAN and the network database are coupled to the WAN. The network database includes VLAN information. In operation, a client that is authorized on the second VLAN attempts to connect to the first VLAN. A switch in the WAN performs a lookup in the network database and determines that the client is authorized on the second VLAN. Based on this information, the client is connected to the second VLAN using VLAN tunneling.
In alternate embodiments, the switch can be a network domain member and the system can further include a network domain seed. The network domain seed can be coupled to the network domain member and the network database can be stored on the network domain seed. In order to perform a lookup in the network database, the network domain member can query the network domain seed for information.
In another embodiment, the system can further include a second network domain seed and a second network domain member. The second network domain seed can be coupled to the first network domain seed and the second network domain member. The first network domain member can tunnel to the second network domain seed to connect the client to the second VLAN. In another example, the network database can be stored on the second network domain seed and can include IP addresses for switches on the WAN, VLAN names, and VLAN tunnel affinities.
In another embodiment, the system can further include a third network domain member that supports the second VLAN. The second network domain member can have a first tunnel affinity and the third network domain member can have a second tunnel affinity. The client can tunnel to the network domain member with the highest tunnel affinity. In other embodiments, the network domain seeds and the network domain members can be in geographically distinct locations.
In another embodiment, the system can further include a first access point, a second access point, and a third access point. Each of the access points can be coupled to the switch. The access points can be used to triangulate the position of the client in order to pinpoint the client's exact location.
An example of a method according to the technique involves receiving a log-in request from a client. The log-in request is received on a first VLAN. VLAN information associated with the client configuration on a second VLAN is provided. Using the VLAN information, the client is determined to be configured on the second VLAN. The client is then connected to the second VLAN using VLAN tunneling.
In additional embodiments, the method can involve a first network domain member and a second network domain member. The log-in request can be received by the first network domain member. The first network domain member can tunnel to the second network domain member in order to connect the client to the second VLAN. The method can also involve a network domain seed and a network database. The network domain seed can be queried for the VLAN information and a lookup can be performed in the network database.
In another embodiment, information can be retrieved from a plurality of network domain seeds that are coupled to the WAN. The VLAN information can include tunnel affinity information of two network domain members. The tunnel affinities can be compared and the client connected to the network domain member with the highest tunnel affinity.
Advantageously, the technique can be used to connect a remote client to an appropriate
VLAN over WAN links. This technique allows a remote user to have the same experience as if connected locally. For example, the client can have the same IP address, network permissions and access to network resources while being in a geographically distinct location. These and
other advantages of the present invention will become apparent to those skilled in the art upon a reading of the following descriptions and a study of the several figures of the drawings.
BRIEF DESCRIPTION OF THE DRAWINGS
Embodiments of the inventions are illustrated in the figures. However, the embodiments and figures are illustrative rather than limiting; they provide examples of the invention.
FIG. 1 depicts an example of a system for identity based networking.
FIG. 2 depicts an alternative example of a system for identity based networking.
FIG. 3 depicts an alternative example of a system for identity based networking.
FIG. 4 depicts an alternative example of a system for identity based networking.
FIG. 5 depicts an example of a location system.
FIG. 6 depicts a flow chart of an example of a method for identity based networking.
FIG. 7 depicts a flow chart of an alternative example of a method for identity based networking.
FIG. 8 depicts a flow chart of an alternative example of a method for identity based networking.
FIG. 9 depicts a flow chart of an alternative example of a method for identify based networking.
FIG. 10 depicts a flow chart of an example of a method for client location.
DETAILED DESCRIPTION
In the following description, several specific details are presented to provide a thorough understanding of embodiments of the invention. One skilled in the relevant art will recognize, however, that the invention can be practiced without one or more of the specific details, or in combination with other components, etc. In other instances, well-known implementations or
operations are not shown or described in detail to avoid obscuring aspects of various embodiments, of the invention.
FIG. 1 depicts an example of a system 100 for identity based networking. In the example of FIG. 1, the system 100 includes a WAN 102, a first VLAN 104, a second VLAN 106, and a network database 108. In the example of FIG. 1, the WAN 102 is coupled to the first
VLAN 104 and the second VLAN 106. The network database 108 is also coupled to the WAN 102.
In an embodiment, the network database 108 can contain a variety of information, including, but not limited to, VLAN information, tunnel affinity information, an IP address for switches and/or clients on the WAN and/or VLAN, a mac address for switches and/or clients on the WAN and/or VLAN, log-in information, network permissions, etc. In another embodiment, the network database can be a forwarding database, such as is described in co-pending U.S. Patent Application No. 11/351, 104 by Manish Tiwari entitled "System and Method for Network Integrity," filed February 8, 2006, which is incorporated herein by reference. The network database 108 can be populated by relaying network information from switches over the WAN
102 and storing the network information in the network database 108. In another embodiment, the network database 108 can be duplicatively stored on any number of switches in the network. Additionally, the network database 108 can be distributed and shared among the switches in the network rather than stored in a central location.
In the example of FIG. 1, in operation, a client 110 attempts to connect to the first
VLAN 104. The attempt can be facilitated in any convenient and/or know manner, manual or automatic, including, but not limited to, logging into the network, connecting to the network via a wired or wireless connection, being detected by network components, attempting to use network resources, etc. A switch (not shown) on the network performs a lookup in the network
database 108. The network database 108 contains information that the client is authorized on the second VLAN 106. Based on this information, the client 110 is connected to the second VLAN 106 via VLAN tunneling 112.
VLAN tunneling 112 can be accomplished using any convenient and/or known technique. By way of example but not limitation, tunneling can be executed on the application layer, transport layer, network layer and/or data link layer in a data network system. Tunneling can be achieved using a variety of protocols (depending on the network layer utilized), such as, by way of example and not limitation, the DNS, TLS/SSL, TFTP, FTP, HTTP, IMAP, IRC, NNTP, POP3, SIP, SMTP, SNMP, SSH, TELNET, BitTorrent, RTP, rlogin, ENRP, TCP, UDP, DCCP, SCTP, IL, RUDP, IPv4, IPv6, ICMP, IGMP, ARP, RARP, Wi-Fi, Token ring, PPP,
SLIP, FDDI, ATM, Frame Relay, and/or SMDS protocol. In other embodiments, additional layers and protocols can be used that facilitate VLAN tunneling.
FIG. 2 depicts an alternative example of a system 200 for identity based networking. In the example of FIG. 2, the system 200 includes a WAN 202, a VLAN 204 and a VLAN 206. In the example of FIG. 2, the WAN 202 includes a network domain seed 208. The VLAN 204 includes a network domain member 210 and the VLAN 206 includes a network domain 212.
In the example of FIG. 2, the WAN 202 is connected to the VLAN 204 and the VLAN 206. The connection is facilitated by the network domain seed 208 which is coupled to the network domain member 210 and the network domain member 212. A network database 214 is located on the network domain seed 208. In alternate embodiments, the network database 214 can be located in any convenient and/or known location, including, but not limited to, the network domain member 210 and/or the network domain member 212.
In the example of FIG. 2, in operation, a client 216 attempts to connect to the VLAN
204. The client 216 attempts this connection by logging on to the network through the network
domain member 210. In an embodiment, the client 216 can be a wired or wireless client and the network domain member 210 can be a switch that provides wired or wireless access. In another embodiment, the network domain member 210 can be a switch as described in co-pending U.S. Patent Application No. 11/351,104 by Manish Tiwari entitled "System and Method for Network Integrity, " filed February 8, 2006.
In the example of FIG. 2, in operation, after the client 216 attempts to log-on to the network, the network domain member 210 queries the network domain seed 208 for VLAN information. The network domain seed 208 performs a lookup in the network database 214. The network database 214 provides that the client 216 is authorized on the VLAN 206. The network domain seed 208 relays the information to the network domain member 210. Based on the information, the network domain member 210 creates a tunnel 218 to the network domain member 212 facilitating the connection of the client 216 to the VLAN 206.
FIG. 3 depicts an alternative example of a system 300 for identity based networking. In the example of FIG. 3, the system 300 includes a network domain seed 302, a network domain seed 304, a network domain member 306, a network domain member 308, a network database
310, and a network database 312. The network domain seed 302 is coupled to the network domain seed 304 and the network domain member 306. The network domain seed 304 is additionally coupled to the network domain member 308. In the example of FIG. 3, the network database 310 is stored on the network domain seed 302 and the network database 304 is stored on the network domain seed 312. In an embodiment, the network database 310 and the network database 312 store the same information. In other embodiments, the information stored in the network databases 310, 312 can be different.
In the example of FIG. 3, in operation, a client 314, who may be authorized on a second VLAN, attempts to connect to the network domain member 306 which supports a first VLAN.
The network domain member 306 queries the network domain seed 302 for VLAN information. The network domain seed 310 performs a lookup in the network database 310. The network database 310 is populated with information received from the network domain seed 312. In another embodiment, the network database 310 could be populated with information received from theoretically any number of network domain seeds. In an embodiment, the information can be used to identify the VLAN(s) each network domain member supports. In an alternative embodiment, one or both of the network databases can be removed and the network domain seed 302 can query the network domain seed 304 to determine which VLAN the network domain member 308 supports.
In the example of FIG. 3, in operation, after performing a lookup in the network database 310, the network domain seed 302 relays VLAN information to the network domain member 306. The VLAN information provides, for example, that the client 314 is authorized on the second VLAN. The VLAN information may also provide that the second VLAN is supported by the network domain member 308. Based on the VLAN information, the network domain member 306 tunnels to the network domain member 308. Advantageously, the client
314 is connected to the second VLAN via a VLAN tunnel 316.
FIG. 4 depicts an alternative example of a system 400 for identity based networks. In the example of FIG. 4, the system 400 includes a network domain seed 402, a network domain seed 404, a network domain member 406, a network domain member 408, a network domain member 410, and a network database 412. As shown, the network domain seed 402 is coupled to the network domain seed 404. The network domain member 406 is coupled to the network domain seed 402. The network domain member 408 and the network domain member 410 are coupled to the network domain seed 404. The network database 412 is coupled to and accessible by the network domain seed 402 and the network domain seed 404. In the example of FIG. 4,
the network domain member 406 supports a first VLAN while the network domain member 408 and the network domain member 410 support a second VLAN.
In the example of FIG. 4, in operation, a client 414 attempts to connect to the network domain member 406. The network domain member 406 queries the network domain seed 402 for VLAN information. The network domain seed 402 retrieves VLAN information from the network database 412. The VLAN information provides, for example, that the client 414 is authorized on the second VLAN. The VLAN information may also provide that the network domain member 408 and/or the network domain member 410 support the second VLAN. In addition, the VLAN information may provide that the tunnel affinity for the network domain member 408 is higher than the tunnel affinity for the network domain member 410. Based on this information, the network domain member 406 creates a VLAN tunnel 416 to the network domain member 408 and the client 414 is connected to the second VLAN.
FIG. 5 depicts a location system 500. In the example of FIG. 5, the system 500 includes a switch 502, an access point 504, an access point 506, and an access point 508. The access point 504, the access point 506 and the access point 508 are coupled to the switch 502. The switch 502 can be network domain member and/or a network domain seed. The access points can provide wired and/or wireless access to a network. Further, the switch and access points can be as describe in co-pending U.S. Patent Application No. 11/351,104 by Manish Tiwari entitled "System and Method for Network Integrity," filed February 8, 2006.
In the example of FIG. 5, in operation, a client 510 is detected by the system 500.
Specifically, in the example of FIG. 5, the access point 504, the access point 506 and the access point 508 detect the client 510. The client 510 can detected by any known and/or convenient technique, including, by way of example but not limitation, sniffing for transmitted packets, monitoring access of network resources, providing network connectivity, etc. Once the client
510 is detected by the access points 504, 506, 508, the precise location of the client 510 can be calculated using any convenient and/or known technique, including, by way of example but not limitation, triangulation techniques in one or more dimensions. In other embodiments, additional access points can be coupled to the switch 502 or access points can be taken away. If additional access points are coupled to the switch 502, the location of the client may become more precise while if access points are taken away, the location of the client may become less defined.
FIG. 6 depicts a flowchart 600 of an example of a method for identity based networking. FIG. 6 is intended to illustrate connecting a client to an appropriate VLAN using VLAN tunneling. In the example of FIG. 6, the flowchart 600 starts at module 602 where a log- in request is received. The log-in request can be received by any convenient and/or known device on a network, including, by way of example and not limitation, a switch, access point, router, computer, server, etc. In addition, the log-in request can be made by a client and/or any other convenient and/or known device that can log-in to a network.
In the example of FIG. 6, the flowchart 600 continues at module 604 where VLAN information is retrieved. The VLAN information can be retrieved by any convenient and/or known device using any convenient and/or known technique. By way of example but not limitation, a first switch can query a second switch for VLAN information. The second switch can relay the information to the first switch in response to the query. In another example, a switch can perform a look-up in a network database to retrieve VLAN information. The network database can be located on the switch itself or accessible over the network. In yet another example, a first switch can query a second switch and the second switch can perform a lookup in a network database. The network database can be located on the second switch or accessible by the second switch over a network.
In the example of FIG. 6, the flowchart 600 continues at module 606 where an appropriate VLAN is determined. The appropriate VLAN can be determined by the VLAN information retrieved. In addition, the appropriate VLAN can be determined by a combination of the VLAN information retrieved and the characteristics of the log-in request.
In the example of FIG. 6, the flowchart 600 continues at module 608 where a connection to the appropriate VLAN is established. The connection can be established using any convenient and/or known technique. For example, and not limitation, a VLAN tunnel can be created for a client that is authorized on a VLAN supported by a remote switch.
FIG. 7 depicts a flowchart 700 of an alternative example of a method for identity based networking. FIG. 7 is intended to illustrate retrieving VLAN information. In the example of FIG. 7, the flowchart 700 starts at module 702 where VLAN information is queried. The query can be facilitated using any known and/or convenient technique capable of retrieving information from a database. For example, and not limitation, a first switch can query a second switch and/or a network database for VLAN information.
In the example of FIG. 7, the flowchart 700 continues at module 704 where a lookup is performed in a network database. The lookup can be performed by any device coupled to the database and/or any device that the database is stored. For example, and not limitation, the second switch can perform a lookup in a network database located locally and relay the retrieved information to the first switch. In another example, the first switch can perform a lookup in a network database that is coupled to the network.
FIG. 8 depicts a flowchart 800 of an alternative example of a method for identify based networking. FIG. 8 is intended to illustrate another method of retrieving VLAN information. In the example of 8, the flowchart 800 starts at module 802 where VLAN information is queried.
The query can be facilitated using any known and/or convenient technique capable of retrieving
information from a database. For example, and not limitation, a network domain member can query a network domain seed for VLAN information.
In the example of FIG. 8, the flowchart 800 continues at module 804 where information is retrieved from a plurality of network domain seeds. The information can be stored on the plurality of network domain seeds and/or can be accessed by the network domain seeds over the network. For example, and not limitation, after receiving a query, a network domain seed can query all other network domain seeds for VLAN information and relay the retrieved information to the network domain member.
FIG. 9 depicts a flowchart 900 of an alternative example of a method for identify based networking. FIG. 9 is intended to illustrate a method of connecting to a switch having the highest tunnel affinity. In the example of FIG. 9, the flowchart 900 starts with module 902 where tunnel affinity information is compared. The tunnel affinity information can be compared for two switches that support the same VLAN. For example, and not limitation, a client that is authorized on a VLAN can connect to any member that supports the VLAN. If two or more members support the VLAN, then the tunnel affinity for each member is compared and a connection is made to the member with the highest tunneling affinity.
In the example of FIG. 9, the flowchart 900 continues with module 904 where a connection is made to the member with the highest tunnel affinity. The connection can be made using any known and/or convenient technique capable of connecting one network member to another. For example, and not limitation, a first network member can create a VLAN tunnel to a second network member in order to connect a client to an authorized VLAN.
FIG. 10 depicts a flowchart 1000 of an example of a method for client location. FIG. 10 is intended to illustrate a method of locating a client that is accessing a network. In the example of FIG. 10, the flowchart 1000 starts with module 1002 where a client's location is queried. The
query for a client's location can be made by any convenient and/or known device coupled to the network. For example, and not limitation, the query can be made by via a command line interface, network management software, computer, switch, router and/or any other convenient and/or known device capable of sending commands on a network.
In the example of FIG. 10, the flowchart 1000 continues at module 1004 where the location of the initial log-in request in returned. In one example, the location of the client can be sent from a switch that received the client's initial log-in request. In another example, the location of the client can be sent from a network domain seed that provided VLAN information to a switch that queried for the information. In yet another example, the switches on the ends of a VLAN tunnel can return the location of the initial log-in request.
Using the systems and/or methods depicted in the above examples, the client has the same experience from a remote location as the client would have from being local. For example, a client can have the same IP address, same network permissions, and same access to network resources even though the client logs-on in a geographically distinct area. These characteristics are extremely beneficial in lower costs and increasing efficiency.
As used herein, the term "embodiment" means an embodiment that serves to illustrate by way of example but not limitation.
It will be appreciated to those skilled in the art that the preceding examples and embodiments are exemplary and not limiting to the scope of the present invention. It is intended that all permutations, enhancements, equivalents, and improvements thereto that are apparent to those skilled in the art upon a reading of the specification and a study of the drawings are included within the true spirit and scope of the present invention. It is therefore intended that the following appended claims include all such modifications, permutations and equivalents as fall within the true spirit and scope of the present invention.
Claims
1. A system comprising:
a WAN;
a first VLAN coupled to the WAN;
a second VLAN coupled to the WAN; and
a network database coupled to the WAN, the network database including VLAN
information;
wherein, in operation, a client that is authorized on the second VLAN attempts to
connect to the first VLAN, a switch on the WAN performs a lookup in the network
database and determines that the client is authorized on the second VLAN, and, based on
the determination, the client is connected to the second VLAN via VLAN tunneling.
2. A system as recited in Claim 1, wherein the switch is a network domain member, the
system further comprising:
a network domain seed coupled to the network domain member;
wherein the network database is stored on the network domain seed and the
network domain member queries the network domain seed to perform the lookup in the
network database.
3. A system as recited in Claim 1, wherein the switch is a first network domain member,
the system further comprising:
a first network domain seed coupled to the first network domain member; a second network domain seed coupled to the first network domain seed; and
a second network domain member coupled to the second network domain seed,
the second network domain member supporting the second VLAN;
wherein the first network domain member tunnels to the second network domain
member to connect the client to the second VLAN.
4. A system as recited in Claim 1, wherein the switch is a network domain member, the
system further comprising:
a first network domain seed coupled to the network domain member; and
a second network domain seed coupled to the first network domain seed;
wherein the network database is stored on the second network domain seed.
5. A system as recited in Claim 1, wherein the switch is a first network domain member,
the system further comprising:
a second network domain member supporting the second VLAN, the second
network domain member having a first tunnel affinity; and
a third network domain member supporting the second VLAN, the third network
domain member having a second tunnel affinity;
wherein the first network domain member tunnels to the second network domain
member instead of the third network domain member based, at least in part, on the first
tunnel affinity.
6. A system as recited in Claim 1, wherein the switch is a first network domain member,
the system further comprising:
a first network domain seed coupled to the first network domain member;
a second network domain seed coupled to the first network domain seed; and
a second network domain member coupled to the second network domain seed,
the second network domain member supporting the second VLAN;
wherein the first network domain seed, the second network domain seed, the first
network domain member, and the second network domain member are in geographically
distinct locations.
7. A system as recited in Claim 1, wherein the network database includes IP addresses
for switches on the WAN, VLAN names, and VLAN tunnel affinities.
8. A system as recited in Claim 1, further comprising:
a first access point coupled to the switch;
a second access point coupled to the switch; and
a third access point coupled to the switch;
wherein a precise location of the client is determinable by triangulation using data
detected by the first access point, the second access point and the third access point.
9. A method comprising:
receiving a log-in request from a client on a first VLAN; providing VLAN information associated with the client configuration on a second
VLAN;
determining, using the VLAN information, that the client is configured on a
second VLAN; and
connecting the client to the second VLAN via VLAN tunneling.
10. A method as recited in Claim 9, wherein the log-in request is received by a first
network domain member and the first network domain member tunnels to a second
network domain member to connect the client to the second VLAN.
11. A method as recited in Claim 9, further comprising:
querying a network domain seed for the VLAN information; and
performing a lookup in a network database.
12. A method as recited in Claim 9, further comprising:
querying a network domain seed for the VLAN information; and
retrieving information from a plurality of network domain seeds coupled to the
WAN.
13. A method as recited in Claim 9, wherein the VLAN information includes tunnel
affinity information of at least two network domain members, further comprising:
comparing tunnel affinity information, from the VLAN information, of at least
two network domain members that support the second VLAN; and connecting the client to the network domain member with the highest tunnel
affinity.
14. A method as recited in Claim 9, further comprising:
querying for the client's location; and
returning a location of a switch that received the client's initial log-in request.
15. A system comprising:
means for receiving a log-in request from a client on a first VLAN;
means for determining the client is configured on a second VLAN using
information retrieved over a WAN; and
means for connecting the client to the second VLAN via VLAN tunneling.
16. A system as recited in Claim 15, wherein said means for determining includes:
means for querying a network domain seed for VLAN information;
means for performing a lookup in a network database; and
means for returning VLAN information.
17. A method as recited in Claim 16, wherein the means for querying includes means for
retrieving information from a plurality of network domain seeds coupled to the WAN.
18. A system as recited in Claim 15 wherein said information includes tunnel affinity
information, the system further comprising:
means for comparing the tunnel affinity information of two network domain
members that support the second VLAN; and
means for connecting the client to the network domain member with a highest
tunnel affinity.
19. A system as recited in Claim 15, further comprising:
means for querying for a location associated with the client; and
means for returning a location of a switch that received the log-in request from the
client.
20. A system as recited in Claim 19, further comprising:
means for determining a precise location of the client using triangulation.
Priority Applications (3)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
JP2008535786A JP2009516937A (en) | 2005-10-13 | 2006-10-13 | Identity-based networking |
CA002625326A CA2625326A1 (en) | 2005-10-13 | 2006-10-13 | Identity-based networking |
EP06826089A EP1938631A2 (en) | 2005-10-13 | 2006-10-13 | Identity-based networking |
Applications Claiming Priority (6)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US72702505P | 2005-10-13 | 2005-10-13 | |
US60/727,025 | 2005-10-13 | ||
US72809605P | 2005-10-18 | 2005-10-18 | |
US60/728,096 | 2005-10-18 | ||
US11/400,165 | 2006-04-05 | ||
US11/400,165 US7551619B2 (en) | 2005-10-13 | 2006-04-05 | Identity-based networking |
Publications (2)
Publication Number | Publication Date |
---|---|
WO2007044984A2 true WO2007044984A2 (en) | 2007-04-19 |
WO2007044984A3 WO2007044984A3 (en) | 2009-04-30 |
Family
ID=37943599
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/US2006/040498 WO2007044984A2 (en) | 2005-10-13 | 2006-10-13 | Identity-based networking |
Country Status (5)
Country | Link |
---|---|
US (2) | US7551619B2 (en) |
EP (1) | EP1938631A2 (en) |
JP (1) | JP2009516937A (en) |
CA (1) | CA2625326A1 (en) |
WO (1) | WO2007044984A2 (en) |
Families Citing this family (36)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7529925B2 (en) | 2005-03-15 | 2009-05-05 | Trapeze Networks, Inc. | System and method for distributing keys in a wireless network |
US8638762B2 (en) | 2005-10-13 | 2014-01-28 | Trapeze Networks, Inc. | System and method for network integrity |
US7724703B2 (en) | 2005-10-13 | 2010-05-25 | Belden, Inc. | System and method for wireless network monitoring |
US7551619B2 (en) * | 2005-10-13 | 2009-06-23 | Trapeze Networks, Inc. | Identity-based networking |
US7573859B2 (en) | 2005-10-13 | 2009-08-11 | Trapeze Networks, Inc. | System and method for remote monitoring in a wireless network |
WO2007044986A2 (en) | 2005-10-13 | 2007-04-19 | Trapeze Networks, Inc. | System and method for remote monitoring in a wireless network |
US8189600B2 (en) * | 2006-04-10 | 2012-05-29 | Cisco Technology, Inc. | Method for IP routing when using dynamic VLANs with web based authentication |
US7558266B2 (en) | 2006-05-03 | 2009-07-07 | Trapeze Networks, Inc. | System and method for restricting network access using forwarding databases |
US8966018B2 (en) | 2006-05-19 | 2015-02-24 | Trapeze Networks, Inc. | Automated network device configuration and network deployment |
US7577453B2 (en) * | 2006-06-01 | 2009-08-18 | Trapeze Networks, Inc. | Wireless load balancing across bands |
US8818322B2 (en) | 2006-06-09 | 2014-08-26 | Trapeze Networks, Inc. | Untethered access point mesh system and method |
US9258702B2 (en) | 2006-06-09 | 2016-02-09 | Trapeze Networks, Inc. | AP-local dynamic switching |
US7912982B2 (en) | 2006-06-09 | 2011-03-22 | Trapeze Networks, Inc. | Wireless routing selection system and method |
US9191799B2 (en) | 2006-06-09 | 2015-11-17 | Juniper Networks, Inc. | Sharing data between wireless switches system and method |
US7724704B2 (en) | 2006-07-17 | 2010-05-25 | Beiden Inc. | Wireless VLAN system and method |
US8340110B2 (en) | 2006-09-15 | 2012-12-25 | Trapeze Networks, Inc. | Quality of service provisioning for wireless networks |
US8072952B2 (en) | 2006-10-16 | 2011-12-06 | Juniper Networks, Inc. | Load balancing |
US7974235B2 (en) * | 2006-11-13 | 2011-07-05 | Telecommunication Systems, Inc. | Secure location session manager |
US20080151844A1 (en) * | 2006-12-20 | 2008-06-26 | Manish Tiwari | Wireless access point authentication system and method |
WO2008083339A2 (en) | 2006-12-28 | 2008-07-10 | Trapeze Networks, Inc. | Application-aware wireless network system and method |
US7873061B2 (en) | 2006-12-28 | 2011-01-18 | Trapeze Networks, Inc. | System and method for aggregation and queuing in a wireless network |
US8973098B2 (en) * | 2007-01-11 | 2015-03-03 | International Business Machines Corporation | System and method for virtualized resource configuration |
US20080276303A1 (en) * | 2007-05-03 | 2008-11-06 | Trapeze Networks, Inc. | Network Type Advertising |
US8902904B2 (en) * | 2007-09-07 | 2014-12-02 | Trapeze Networks, Inc. | Network assignment based on priority |
US8509128B2 (en) * | 2007-09-18 | 2013-08-13 | Trapeze Networks, Inc. | High level instruction convergence function |
US8238942B2 (en) | 2007-11-21 | 2012-08-07 | Trapeze Networks, Inc. | Wireless station location detection |
US8150357B2 (en) | 2008-03-28 | 2012-04-03 | Trapeze Networks, Inc. | Smoothing filter for irregular update intervals |
US8474023B2 (en) | 2008-05-30 | 2013-06-25 | Juniper Networks, Inc. | Proactive credential caching |
US8978105B2 (en) * | 2008-07-25 | 2015-03-10 | Trapeze Networks, Inc. | Affirming network relationships and resource access via related networks |
US8238298B2 (en) | 2008-08-29 | 2012-08-07 | Trapeze Networks, Inc. | Picking an optimal channel for an access point in a wireless network |
US8479266B1 (en) * | 2008-11-13 | 2013-07-02 | Sprint Communications Company L.P. | Network assignment appeal architecture and process |
US8363658B1 (en) | 2008-11-13 | 2013-01-29 | Sprint Communications Company L.P. | Dynamic firewall and dynamic host configuration protocol configuration |
US10270622B2 (en) * | 2009-05-14 | 2019-04-23 | Avaya Inc. | Method for enabling mobility of client devices in large scale unified networks |
FR3054056B1 (en) * | 2016-07-13 | 2018-06-29 | Safran Identity & Security | METHOD FOR SECURELY CONNECTING A FIRST DEVICE WITH A SECOND DEVICE |
CN110120932B (en) | 2018-02-06 | 2020-10-23 | 华为技术有限公司 | Multipath establishing method and device |
US11824884B2 (en) | 2020-10-05 | 2023-11-21 | Bank Of America Corporation | System for generating responsive actions based on unauthorized access events associated with imitation networks |
Citations (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6188649B1 (en) * | 1996-06-28 | 2001-02-13 | Matsushita Electric Industrial Co., Ltd. | Method for reading magnetic super resolution type magneto-optical recording medium |
US20020101868A1 (en) * | 2001-01-30 | 2002-08-01 | David Clear | Vlan tunneling protocol |
US20030174706A1 (en) * | 2002-03-15 | 2003-09-18 | Broadcom Corporation | Fastpath implementation for transparent local area network (LAN) services over multiprotocol label switching (MPLS) |
US6661787B1 (en) * | 1998-05-21 | 2003-12-09 | 3Com Technologies | Integrated data table in a network |
US20050058132A1 (en) * | 2002-05-20 | 2005-03-17 | Fujitsu Limited | Network repeater apparatus, network repeater method and network repeater program |
US20050157730A1 (en) * | 2003-10-31 | 2005-07-21 | Grant Robert H. | Configuration management for transparent gateways in heterogeneous storage networks |
US20050259597A1 (en) * | 2000-10-17 | 2005-11-24 | Benedetto Marco D | Multiple instance spanning tree protocol |
Family Cites Families (296)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US4176316A (en) | 1953-03-30 | 1979-11-27 | International Telephone & Telegraph Corp. | Secure single sideband communication system using modulated noise subcarrier |
US3641433A (en) * | 1969-06-09 | 1972-02-08 | Us Air Force | Transmitted reference synchronization system |
FR2386211A1 (en) | 1977-03-31 | 1978-10-27 | Europ Teletransmission | DIGITAL COMMUNICATION SYSTEM |
US4291409A (en) | 1978-06-20 | 1981-09-22 | The Mitre Corporation | Spread spectrum communications method and apparatus |
CH622661B (en) | 1978-11-30 | Ebauches Bettlach Sa | DEVICE FOR FIXING A WATCHMAKING DIAL ON THE PLATE OF A WATCH MOVEMENT. | |
US4247908A (en) * | 1978-12-08 | 1981-01-27 | Motorola, Inc. | Re-linked portable data terminal controller system |
US4730340A (en) * | 1980-10-31 | 1988-03-08 | Harris Corp. | Programmable time invariant coherent spread symbol correlator |
US4503533A (en) * | 1981-08-20 | 1985-03-05 | Stanford University | Local area communication network utilizing a round robin access scheme with improved channel utilization |
US4500987A (en) * | 1981-11-24 | 1985-02-19 | Nippon Electric Co., Ltd. | Loop transmission system |
US4475208A (en) | 1982-01-18 | 1984-10-02 | Ricketts James A | Wired spread spectrum data communication system |
US4409470A (en) | 1982-01-25 | 1983-10-11 | Symbol Technologies, Inc. | Narrow-bodied, single-and twin-windowed portable laser scanning head for reading bar code symbols |
US4758717A (en) * | 1982-01-25 | 1988-07-19 | Symbol Technologies, Inc. | Narrow-bodied, single-and twin-windowed portable laser scanning head for reading bar code symbols |
US4673805A (en) * | 1982-01-25 | 1987-06-16 | Symbol Technologies, Inc. | Narrow-bodied, single- and twin-windowed portable scanning head for reading bar code symbols |
US4460120A (en) * | 1982-01-25 | 1984-07-17 | Symbol Technologies, Inc. | Narrow bodied, single- and twin-windowed portable laser scanning head for reading bar code symbols |
US4736095A (en) * | 1982-01-25 | 1988-04-05 | Symbol Technologies, Inc. | Narrow-bodied, single- and twin-windowed portable laser scanning head for reading bar code symbols |
US4494238A (en) * | 1982-06-30 | 1985-01-15 | Motorola, Inc. | Multiple channel data link system |
US4550414A (en) | 1983-04-12 | 1985-10-29 | Charles Stark Draper Laboratory, Inc. | Spread spectrum adaptive code tracker |
US4707839A (en) | 1983-09-26 | 1987-11-17 | Harris Corporation | Spread spectrum correlator for recovering CCSK data from a PN spread MSK waveform |
US4644523A (en) * | 1984-03-23 | 1987-02-17 | Sangamo Weston, Inc. | System for improving signal-to-noise ratio in a direct sequence spread spectrum signal receiver |
US4562415A (en) | 1984-06-22 | 1985-12-31 | Motorola, Inc. | Universal ultra-precision PSK modulator with time multiplexed modes of varying modulation types |
US4630264A (en) | 1984-09-21 | 1986-12-16 | Wah Benjamin W | Efficient contention-resolution protocol for local multiaccess networks |
US4639914A (en) * | 1984-12-06 | 1987-01-27 | At&T Bell Laboratories | Wireless PBX/LAN system with optimum combining |
JPH0693670B2 (en) * | 1984-12-29 | 1994-11-16 | 京セラ株式会社 | Spread spectrum communication system |
US4635221A (en) * | 1985-01-18 | 1987-01-06 | Allied Corporation | Frequency multiplexed convolver communication system |
US4672658A (en) * | 1985-10-16 | 1987-06-09 | At&T Company And At&T Bell Laboratories | Spread spectrum wireless PBX |
US4850009A (en) * | 1986-05-12 | 1989-07-18 | Clinicom Incorporated | Portable handheld terminal including optical bar code reader and electromagnetic transceiver means for interactive wireless communication with a base communications station |
IL82561A (en) * | 1986-05-27 | 1991-12-15 | Fairchild Weston Systems Inc | Secure communication system for multiple remote units |
US4740792A (en) * | 1986-08-27 | 1988-04-26 | Hughes Aircraft Company | Vehicle location system |
US4901307A (en) * | 1986-10-17 | 1990-02-13 | Qualcomm, Inc. | Spread spectrum multiple access communication system using satellite or terrestrial repeaters |
US4995053A (en) | 1987-02-11 | 1991-02-19 | Hillier Technologies Limited Partnership | Remote control system, components and methods |
US4789983A (en) | 1987-03-05 | 1988-12-06 | American Telephone And Telegraph Company, At&T Bell Laboratories | Wireless network for wideband indoor communications |
JPH0671241B2 (en) * | 1987-09-10 | 1994-09-07 | 株式会社ケンウッド | Initial synchronization method for spread spectrum communication |
US4894842A (en) * | 1987-10-15 | 1990-01-16 | The Charles Stark Draper Laboratory, Inc. | Precorrelation digital spread spectrum receiver |
US4872182A (en) | 1988-03-08 | 1989-10-03 | Harris Corporation | Frequency management system for use in multistation H.F. communication network |
FR2629931B1 (en) * | 1988-04-08 | 1991-01-25 | Lmt Radio Professionelle | ASYNCHRONOUS DIGITAL CORRELATOR AND DEMODULATORS COMPRISING SUCH A CORRELATOR |
US5483676A (en) * | 1988-08-04 | 1996-01-09 | Norand Corporation | Mobile radio data communication system and method |
US5528621A (en) * | 1989-06-29 | 1996-06-18 | Symbol Technologies, Inc. | Packet data communication system |
US5142550A (en) | 1989-06-29 | 1992-08-25 | Symbol Technologies, Inc. | Packet data communication system |
US5280498A (en) * | 1989-06-29 | 1994-01-18 | Symbol Technologies, Inc. | Packet data communication system |
US5815811A (en) | 1989-06-29 | 1998-09-29 | Symbol Technologies, Inc. | Preemptive roaming in a cellular local area wireless network |
US5668803A (en) | 1989-06-29 | 1997-09-16 | Symbol Technologies, Inc. | Protocol for packet data communication system |
US5103461A (en) * | 1989-06-29 | 1992-04-07 | Symbol Technologies, Inc. | Signal quality measure in packet data communication |
US5157687A (en) | 1989-06-29 | 1992-10-20 | Symbol Technologies, Inc. | Packet data communication network |
US5029183A (en) * | 1989-06-29 | 1991-07-02 | Symbol Technologies, Inc. | Packet data communication network |
JP2660441B2 (en) * | 1989-07-03 | 1997-10-08 | 双葉電子工業 株式会社 | Receiver for spread spectrum communication |
US5109390A (en) * | 1989-11-07 | 1992-04-28 | Qualcomm Incorporated | Diversity receiver in a cdma cellular telephone system |
US5187575A (en) * | 1989-12-29 | 1993-02-16 | Massachusetts Institute Of Technology | Source adaptive television system |
US5103459B1 (en) * | 1990-06-25 | 1999-07-06 | Qualcomm Inc | System and method for generating signal waveforms in a cdma cellular telephone system |
US5231633A (en) * | 1990-07-11 | 1993-07-27 | Codex Corporation | Method for prioritizing, selectively discarding, and multiplexing differing traffic type fast packets |
US5584048A (en) | 1990-08-17 | 1996-12-10 | Motorola, Inc. | Beacon based packet radio standby energy saver |
US5151919A (en) | 1990-12-17 | 1992-09-29 | Ericsson-Ge Mobile Communications Holding Inc. | Cdma subtractive demodulation |
TW327488U (en) | 1991-05-29 | 1998-02-21 | Video Tech Eng | Digital cordless telephone apparatus |
US5187675A (en) | 1991-09-18 | 1993-02-16 | Ericsson-Ge Mobile Communications Holding Inc. | Maximum search circuit |
FI100043B (en) | 1992-01-23 | 1997-08-29 | Nokia Telecommunications Oy | Cellular radio network design method and system |
US5267261A (en) * | 1992-03-05 | 1993-11-30 | Qualcomm Incorporated | Mobile station assisted soft handoff in a CDMA cellular communications system |
US5896561A (en) * | 1992-04-06 | 1999-04-20 | Intermec Ip Corp. | Communication network having a dormant polling protocol |
US5418812A (en) * | 1992-06-26 | 1995-05-23 | Symbol Technologies, Inc. | Radio network initialization method and apparatus |
US5285494A (en) * | 1992-07-31 | 1994-02-08 | Pactel Corporation | Network management system |
GB9223890D0 (en) | 1992-11-13 | 1993-01-06 | Ncr Int Inc | Wireless local area network system |
US5465401A (en) | 1992-12-15 | 1995-11-07 | Texas Instruments Incorporated | Communication system and methods for enhanced information transfer |
CA2111634C (en) * | 1992-12-17 | 1999-02-16 | Toshio Nishida | Private branch exchange |
GB9304636D0 (en) * | 1993-03-06 | 1993-04-21 | Ncr Int Inc | A method of accessing a communication system |
US5568513A (en) | 1993-05-11 | 1996-10-22 | Ericsson Inc. | Standby power savings with cumulative parity check in mobile phones |
EP0702871A4 (en) | 1993-06-07 | 1998-01-28 | Telecom Technologies Pty Ltd | Communication system |
DE4326749C2 (en) | 1993-08-05 | 1995-05-04 | Klaus Dr Ing Jaeckel | Local ISDN radio transmission system |
US5491644A (en) * | 1993-09-07 | 1996-02-13 | Georgia Tech Research Corporation | Cell engineering tool and methods |
US5598532A (en) * | 1993-10-21 | 1997-01-28 | Optimal Networks | Method and apparatus for optimizing computer networks |
US5488569A (en) * | 1993-12-20 | 1996-01-30 | At&T Corp. | Application-oriented telecommunication system interface |
US5450615A (en) | 1993-12-22 | 1995-09-12 | At&T Corp. | Prediction of indoor electromagnetic wave propagation for wireless indoor systems |
CN1090418C (en) | 1994-01-05 | 2002-09-04 | 汤姆森消费电子有限公司 | Clear channel selection system for cordless telephone |
CA2176401C (en) | 1994-02-17 | 2003-07-08 | John H. Cafarella | A high-data-rate wireless local-area network |
US5594782A (en) | 1994-02-24 | 1997-01-14 | Gte Mobile Communications Service Corporation | Multiple mode personal wireless communications system |
CA2182586C (en) * | 1994-02-24 | 2005-04-12 | Robert G. Zicker | Multiple mode personal wireless communications system |
US5448569A (en) | 1994-04-12 | 1995-09-05 | International Business Machines Corporation | Handoff monitoring in cellular communication networks using slow frequency hopping |
US5655148A (en) * | 1994-05-27 | 1997-08-05 | Microsoft Corporation | Method for automatically configuring devices including a network adapter without manual intervention and without prior configuration information |
US5517495A (en) * | 1994-12-06 | 1996-05-14 | At&T Corp. | Fair prioritized scheduling in an input-buffered switch |
US5519762A (en) * | 1994-12-21 | 1996-05-21 | At&T Corp. | Adaptive power cycling for a cordless telephone |
US5915214A (en) * | 1995-02-23 | 1999-06-22 | Reece; Richard W. | Mobile communication service provider selection system |
US5828960A (en) | 1995-03-31 | 1998-10-27 | Motorola, Inc. | Method for wireless communication system planning |
US5630207A (en) * | 1995-06-19 | 1997-05-13 | Lucent Technologies Inc. | Methods and apparatus for bandwidth reduction in a two-way paging system |
JP2771478B2 (en) | 1995-06-20 | 1998-07-02 | 静岡日本電気株式会社 | Wireless selective call receiver with display function |
US5649289A (en) * | 1995-07-10 | 1997-07-15 | Motorola, Inc. | Flexible mobility management in a two-way messaging system and method therefor |
JPH0936799A (en) | 1995-07-21 | 1997-02-07 | Toshiba Corp | Radio communication equipment |
US5794128A (en) | 1995-09-20 | 1998-08-11 | The United States Of America As Represented By The Secretary Of The Army | Apparatus and processes for realistic simulation of wireless information transport systems |
US5721733A (en) | 1995-10-13 | 1998-02-24 | General Wireless Communications, Inc. | Wireless network access scheme |
US6580700B1 (en) * | 1995-10-27 | 2003-06-17 | Symbol Technologies, Inc. | Data rate algorithms for use in wireless local area networks |
US5920821A (en) * | 1995-12-04 | 1999-07-06 | Bell Atlantic Network Services, Inc. | Use of cellular digital packet data (CDPD) communications to convey system identification list data to roaming cellular subscriber stations |
US5987062A (en) | 1995-12-15 | 1999-11-16 | Netwave Technologies, Inc. | Seamless roaming for wireless local area networks |
US5838907A (en) | 1996-02-20 | 1998-11-17 | Compaq Computer Corporation | Configuration manager for network devices and an associated method for providing configuration information thereto |
US5706428A (en) * | 1996-03-14 | 1998-01-06 | Lucent Technologies Inc. | Multirate wireless data communication system |
US6118771A (en) | 1996-03-14 | 2000-09-12 | Kabushiki Kaisha Toshiba | System and method for controlling communication |
US5933420A (en) * | 1996-04-30 | 1999-08-03 | 3Com Corporation | Method and apparatus for assigning spectrum of a wireless local area network |
US6697415B1 (en) * | 1996-06-03 | 2004-02-24 | Broadcom Corporation | Spread spectrum transceiver module utilizing multiple mode transmission |
US6088591A (en) * | 1996-06-28 | 2000-07-11 | Aironet Wireless Communications, Inc. | Cellular system hand-off protocol |
US5949988A (en) | 1996-07-16 | 1999-09-07 | Lucent Technologies Inc. | Prediction system for RF power distribution |
US6185427B1 (en) * | 1996-09-06 | 2001-02-06 | Snaptrack, Inc. | Distributed satellite position system processing and application network |
US5844900A (en) | 1996-09-23 | 1998-12-01 | Proxim, Inc. | Method and apparatus for optimizing a medium access control protocol |
GB2318434B (en) * | 1996-10-16 | 2001-08-15 | Ibm | Data processing network |
US5875179A (en) * | 1996-10-29 | 1999-02-23 | Proxim, Inc. | Method and apparatus for synchronized communication over wireless backbone architecture |
US6012088A (en) * | 1996-12-10 | 2000-01-04 | International Business Machines Corporation | Automatic configuration for internet access device |
US6011784A (en) * | 1996-12-18 | 2000-01-04 | Motorola, Inc. | Communication system and method using asynchronous and isochronous spectrum for voice and data |
US6240083B1 (en) * | 1997-02-25 | 2001-05-29 | Telefonaktiebolaget L.M. Ericsson | Multiple access communication network with combined contention and reservation mode access |
US6078568A (en) * | 1997-02-25 | 2000-06-20 | Telefonaktiebolaget Lm Ericsson | Multiple access communication network with dynamic access control |
JPH10261980A (en) * | 1997-03-18 | 1998-09-29 | Fujitsu Ltd | Base station unit for radio communication network, communication control method for radio communication network, radio communication network system and radio terminal |
US5987328A (en) | 1997-04-24 | 1999-11-16 | Ephremides; Anthony | Method and device for placement of transmitters in wireless networks |
US6075814A (en) | 1997-05-09 | 2000-06-13 | Broadcom Homenetworking, Inc. | Method and apparatus for reducing signal processing requirements for transmitting packet-based data with a modem |
US5982779A (en) | 1997-05-28 | 1999-11-09 | Lucent Technologies Inc. | Priority access for real-time traffic in contention-based networks |
US6029196A (en) * | 1997-06-18 | 2000-02-22 | Netscape Communications Corporation | Automatic client configuration system |
US6199032B1 (en) * | 1997-07-23 | 2001-03-06 | Edx Engineering, Inc. | Presenting an output signal generated by a receiving device in a simulated communication system |
EP0898434B1 (en) * | 1997-08-20 | 2004-05-26 | NEC USA, Inc. | ATM switching architecture for a wireless telecommunications network |
US6119009A (en) | 1997-09-18 | 2000-09-12 | Lucent Technologies, Inc. | Method and apparatus for modeling the propagation of wireless signals in buildings |
US5953669A (en) | 1997-12-11 | 1999-09-14 | Motorola, Inc. | Method and apparatus for predicting signal characteristics in a wireless communication system |
US6188694B1 (en) | 1997-12-23 | 2001-02-13 | Cisco Technology, Inc. | Shared spanning tree protocol |
US6356758B1 (en) * | 1997-12-31 | 2002-03-12 | Nortel Networks Limited | Wireless tools for data manipulation and visualization |
WO1999033963A1 (en) * | 1997-12-31 | 1999-07-08 | Chiron Corporation | Metastatic cancer regulated gene |
KR100257184B1 (en) | 1998-01-31 | 2000-05-15 | 정장호 | Optic relay system for extending coverage |
US6115385A (en) | 1998-03-11 | 2000-09-05 | Cisco Technology, Inc. | Method and system for subnetting in a switched IP network |
US6594238B1 (en) * | 1998-06-19 | 2003-07-15 | Telefonaktiebolaget Lm Ericsson (Publ) | Method and apparatus for dynamically adapting a connection state in a mobile communications system |
US6725260B1 (en) * | 1998-09-11 | 2004-04-20 | L.V. Partners, L.P. | Method and apparatus for configuring configurable equipment with configuration information received from a remote location |
US6101539A (en) | 1998-10-02 | 2000-08-08 | Kennelly; Richard J. | Dynamic presentation of management objectives based on administrator privileges |
US6160804A (en) * | 1998-11-13 | 2000-12-12 | Lucent Technologies Inc. | Mobility management for a multimedia mobile network |
US6336035B1 (en) * | 1998-11-19 | 2002-01-01 | Nortel Networks Limited | Tools for wireless network planning |
US6177905B1 (en) * | 1998-12-08 | 2001-01-23 | Avaya Technology Corp. | Location-triggered reminder for mobile user devices |
US6218930B1 (en) * | 1999-03-10 | 2001-04-17 | Merlot Communications | Apparatus and method for remotely powering access equipment over a 10/100 switched ethernet network |
US6614787B1 (en) * | 1999-03-30 | 2003-09-02 | 3Com Corporation | System and method for efficiently handling multicast packets by aggregating VLAN context |
US6839348B2 (en) * | 1999-04-30 | 2005-01-04 | Cisco Technology, Inc. | System and method for distributing multicasts in virtual local area networks |
US6208841B1 (en) * | 1999-05-03 | 2001-03-27 | Qualcomm Incorporated | Environmental simulator for a wireless communication device |
US6847620B1 (en) * | 1999-05-13 | 2005-01-25 | Intermec Ip Corp. | Mobile virtual LAN |
US6285662B1 (en) | 1999-05-14 | 2001-09-04 | Nokia Mobile Phones Limited | Apparatus, and associated method for selecting a size of a contention window for a packet of data system |
US6493679B1 (en) | 1999-05-26 | 2002-12-10 | Wireless Valley Communications, Inc. | Method and system for managing a real time bill of materials |
US6317599B1 (en) | 1999-05-26 | 2001-11-13 | Wireless Valley Communications, Inc. | Method and system for automated optimization of antenna positioning in 3-D |
US6892230B1 (en) | 1999-06-11 | 2005-05-10 | Microsoft Corporation | Dynamic self-configuration for ad hoc peer networking using mark-up language formated description messages |
US6996630B1 (en) * | 1999-06-18 | 2006-02-07 | Mitsubishi Denki Kabushiki Kaisha | Integrated network system |
US6393290B1 (en) * | 1999-06-30 | 2002-05-21 | Lucent Technologies Inc. | Cost based model for wireless architecture |
US6493329B1 (en) * | 1999-08-23 | 2002-12-10 | Qualcomm Incorporated | Adaptive channel estimation in a wireless communication system |
US6760324B1 (en) | 1999-09-10 | 2004-07-06 | Array Telecom Corporation | Method, system, and computer program product for providing voice over the internet communication |
US6631267B1 (en) | 1999-11-04 | 2003-10-07 | Lucent Technologies Inc. | Road-based evaluation and interpolation of wireless network parameters |
US6587680B1 (en) * | 1999-11-23 | 2003-07-01 | Nokia Corporation | Transfer of security association during a mobile terminal handover |
US7280803B2 (en) * | 1999-12-29 | 2007-10-09 | Cingular Wireless Ii, Llc | Monitoring network performance using individual cell phone location and performance information |
WO2001056231A1 (en) * | 2000-01-26 | 2001-08-02 | Vyyo, Ltd. | Quality of service scheduling scheme for a broadband wireless access system |
US6512916B1 (en) * | 2000-02-23 | 2003-01-28 | America Connect, Inc. | Method for selecting markets in which to deploy fixed wireless communication systems |
FI109163B (en) | 2000-02-24 | 2002-05-31 | Nokia Corp | Method and apparatus for supporting mobility in a telecommunication system |
US6526275B1 (en) * | 2000-04-24 | 2003-02-25 | Motorola, Inc. | Method for informing a user of a communication device where to obtain a product and communication system employing same |
US6847892B2 (en) * | 2001-10-29 | 2005-01-25 | Digital Angel Corporation | System for localizing and sensing objects and providing alerts |
US7024394B1 (en) | 2000-07-07 | 2006-04-04 | International Business Machines Corporation | System and method for protecting user logoff from web business transactions |
US6985465B2 (en) | 2000-07-07 | 2006-01-10 | Koninklijke Philips Electronics N.V. | Dynamic channel selection scheme for IEEE 802.11 WLANs |
US6659947B1 (en) | 2000-07-13 | 2003-12-09 | Ge Medical Systems Information Technologies, Inc. | Wireless LAN architecture for integrated time-critical and non-time-critical services within medical facilities |
US7020773B1 (en) * | 2000-07-17 | 2006-03-28 | Citrix Systems, Inc. | Strong mutual authentication of devices |
US6404772B1 (en) * | 2000-07-27 | 2002-06-11 | Symbol Technologies, Inc. | Voice and data wireless communications network and method |
US6625454B1 (en) | 2000-08-04 | 2003-09-23 | Wireless Valley Communications, Inc. | Method and system for designing or deploying a communications network which considers frequency dependent effects |
US6687498B2 (en) * | 2000-08-14 | 2004-02-03 | Vesuvius Inc. | Communique system with noncontiguous communique coverage areas in cellular communication networks |
US7280495B1 (en) | 2000-08-18 | 2007-10-09 | Nortel Networks Limited | Reliable broadcast protocol in a wireless local area network |
US8619793B2 (en) * | 2000-08-21 | 2013-12-31 | Rockstar Consortium Us Lp | Dynamic assignment of traffic classes to a priority queue in a packet forwarding device |
US7373425B2 (en) * | 2000-08-22 | 2008-05-13 | Conexant Systems, Inc. | High-speed MAC address search engine |
US6973622B1 (en) | 2000-09-25 | 2005-12-06 | Wireless Valley Communications, Inc. | System and method for design, tracking, measurement, prediction and optimization of data communication networks |
US6954790B2 (en) | 2000-12-05 | 2005-10-11 | Interactive People Unplugged Ab | Network-based mobile workgroup system |
US6978301B2 (en) | 2000-12-06 | 2005-12-20 | Intelliden | System and method for configuring a network device |
US7155518B2 (en) | 2001-01-08 | 2006-12-26 | Interactive People Unplugged Ab | Extranet workgroup formation across multiple mobile virtual private networks |
US7133909B2 (en) * | 2001-01-12 | 2006-11-07 | Microsoft Corporation | Systems and methods for locating mobile computer users in a wireless network |
US6839388B2 (en) * | 2001-01-22 | 2005-01-04 | Koninklijke Philips Electronics N.V. | System and method for providing frequency domain synchronization for single carrier signals |
GB0104764D0 (en) * | 2001-02-24 | 2001-04-18 | Ibm | Method apparatus and computer program product for controlling access to a res urce |
EP1257092B1 (en) | 2001-05-08 | 2005-01-05 | Agere Systems Guardian Corporation | Dynamic frequency selection in a wireless LAN with channel swapping between access points |
US6856800B1 (en) * | 2001-05-14 | 2005-02-15 | At&T Corp. | Fast authentication and access control system for mobile networking |
US6678516B2 (en) * | 2001-05-21 | 2004-01-13 | Nokia Corporation | Method, system, and apparatus for providing services in a privacy enabled mobile and Ubicom environment |
US7483411B2 (en) | 2001-06-04 | 2009-01-27 | Nec Corporation | Apparatus for public access mobility LAN and method of operation thereof |
US7231521B2 (en) * | 2001-07-05 | 2007-06-12 | Lucent Technologies Inc. | Scheme for authentication and dynamic key exchange |
US7313819B2 (en) * | 2001-07-20 | 2007-12-25 | Intel Corporation | Automated establishment of addressability of a network device for a target network environment |
JP2003069570A (en) | 2001-08-27 | 2003-03-07 | Allied Tereshisu Kk | Management system |
JP2005525003A (en) * | 2001-09-05 | 2005-08-18 | ニューベリイ ネットワークス,インコーポレーテッド | Location detection and location tracking in wireless networks |
US7660887B2 (en) * | 2001-09-07 | 2010-02-09 | Sun Microsystems, Inc. | Systems and methods for providing dynamic quality of service for a distributed system |
US20030107590A1 (en) * | 2001-11-07 | 2003-06-12 | Phillippe Levillain | Policy rule management for QoS provisioning |
US7406319B2 (en) | 2001-11-19 | 2008-07-29 | At&T Corp. | WLAN having load balancing by access point admission/termination |
US7159016B2 (en) * | 2001-12-18 | 2007-01-02 | Avaya Technology Corp. | Method and apparatus for configuring an endpoint device to a computer network |
US7320070B2 (en) * | 2002-01-08 | 2008-01-15 | Verizon Services Corp. | Methods and apparatus for protecting against IP address assignments based on a false MAC address |
CA2414789A1 (en) | 2002-01-09 | 2003-07-09 | Peel Wireless Inc. | Wireless networks security system |
FI113515B (en) * | 2002-01-18 | 2004-04-30 | Nokia Corp | Addressing in wireless LANs |
US7076760B2 (en) * | 2002-01-31 | 2006-07-11 | Cadence Design Systems, Inc. | Method and apparatus for specifying encoded sub-networks |
US6879812B2 (en) * | 2002-02-08 | 2005-04-12 | Networks Associates Technology Inc. | Portable computing device and associated method for analyzing a wireless local area network |
JP3904462B2 (en) * | 2002-02-12 | 2007-04-11 | 株式会社日立製作所 | Wireless communication method and wireless communication system |
US7535913B2 (en) * | 2002-03-06 | 2009-05-19 | Nvidia Corporation | Gigabit ethernet adapter supporting the iSCSI and IPSEC protocols |
US6839338B1 (en) * | 2002-03-20 | 2005-01-04 | Utstarcom Incorporated | Method to provide dynamic internet protocol security policy service |
US6624762B1 (en) | 2002-04-11 | 2003-09-23 | Unisys Corporation | Hardware-based, LZW data compression co-processor |
US6993683B2 (en) * | 2002-05-10 | 2006-01-31 | Microsoft Corporation | Analysis of pipelined networks |
AU2003238968A1 (en) | 2002-06-11 | 2003-12-22 | Meshnetworks, Inc. | System and method for multicast media access in ad-hoc communication networks |
US20050193103A1 (en) | 2002-06-18 | 2005-09-01 | John Drabik | Method and apparatus for automatic configuration and management of a virtual private network |
EP1523821B1 (en) | 2002-06-21 | 2011-08-24 | Thomson Licensing | Registration of a wlan as a umts routing area for wlan-umts interworking |
US7996021B2 (en) * | 2002-06-28 | 2011-08-09 | Hewlett-Packard Development Company, L.P. | Location determination in a wireless communication network |
US7965842B2 (en) * | 2002-06-28 | 2011-06-21 | Wavelink Corporation | System and method for detecting unauthorized wireless access points |
ES2236461T3 (en) | 2002-07-05 | 2005-07-16 | Alcatel | ADMISSION CONTROL FOR RESOURCES IN AN ACCESS NETWORK. |
US7509096B2 (en) * | 2002-07-26 | 2009-03-24 | Broadcom Corporation | Wireless access point setup and management within wireless local area network |
US7017186B2 (en) * | 2002-07-30 | 2006-03-21 | Steelcloud, Inc. | Intrusion detection system using self-organizing clusters |
US7068999B2 (en) | 2002-08-02 | 2006-06-27 | Symbol Technologies, Inc. | System and method for detection of a rogue wireless access point in a wireless communication network |
EP1389812A1 (en) * | 2002-08-13 | 2004-02-18 | Agilent Technologies Inc | A mounting arrangement for high frequency electro-optical components |
US7493407B2 (en) * | 2002-08-14 | 2009-02-17 | Drs Technical Services, Inc. | Method and apparatus for controlling the allocation of bandwidth of a network access point to an application having a message transmitted on the network |
WO2004023307A1 (en) * | 2002-09-06 | 2004-03-18 | O2Micro, Inc. | Vpn and firewall integrated system |
US7680086B2 (en) * | 2002-09-09 | 2010-03-16 | Siemens Canada Limited | Wireless local area network with clients having extended freedom of movement |
US7245918B2 (en) | 2002-09-18 | 2007-07-17 | Telefonaktiebolaget Lm Ericsson (Publ) | Distributing shared network access information in a shared network mobile communications system |
US6957067B1 (en) | 2002-09-24 | 2005-10-18 | Aruba Networks | System and method for monitoring and enforcing policy within a wireless network |
US7130917B2 (en) * | 2002-09-26 | 2006-10-31 | Cisco Technology, Inc. | Quality of service in a gateway |
US7440573B2 (en) | 2002-10-08 | 2008-10-21 | Broadcom Corporation | Enterprise wireless local area network switching system |
KR100480258B1 (en) * | 2002-10-15 | 2005-04-07 | 삼성전자주식회사 | Authentication method for fast hand over in wireless local area network |
US7369859B2 (en) | 2003-10-17 | 2008-05-06 | Kineto Wireless, Inc. | Method and system for determining the location of an unlicensed mobile access subscriber |
US7062566B2 (en) | 2002-10-24 | 2006-06-13 | 3Com Corporation | System and method for using virtual local area network tags with a virtual private network |
US7421248B1 (en) | 2002-11-12 | 2008-09-02 | Cisco Technology, Inc. | Method and apparatus for adjusting operational parameter of a wireless device bases upon a monitored characteristic |
WO2004047375A1 (en) * | 2002-11-15 | 2004-06-03 | Infineon Technologies Ag | Reducing the memory requirements of a data switch |
US20040203752A1 (en) * | 2002-11-18 | 2004-10-14 | Toshiba America Information Systems, Inc. | Mobility communications system |
US8139551B2 (en) * | 2002-11-19 | 2012-03-20 | Toshiba America Research, Inc. | Quality of service (QoS) assurance system using data transmission control |
US7020438B2 (en) | 2003-01-09 | 2006-03-28 | Nokia Corporation | Selection of access point in a wireless communication system |
US7295960B2 (en) * | 2003-01-22 | 2007-11-13 | Wireless Valley Communications, Inc. | System and method for automated placement or configuration of equipment for obtaining desired network performance objectives |
US7324489B1 (en) * | 2003-02-18 | 2008-01-29 | Cisco Technology, Inc. | Managing network service access |
US7266089B2 (en) | 2003-02-21 | 2007-09-04 | Qwest Communications International Inc. | Systems and methods for creating a wireless network |
US7248574B2 (en) | 2003-02-24 | 2007-07-24 | Autocell Laboratories, Inc. | Apparatus for selecting an optimum access point in a wireless network |
WO2004082217A2 (en) * | 2003-03-06 | 2004-09-23 | Incucomm Inc. | Method and system for providing broadband multimedia services |
CA2520494A1 (en) | 2003-04-17 | 2004-11-04 | Cisco Technology, Inc. | 802.11 using a compressed reassociation exchange to facilitate fast handoff |
US20040208570A1 (en) * | 2003-04-18 | 2004-10-21 | Reader Scot A. | Wavelength-oriented virtual networks |
US7359676B2 (en) | 2003-04-21 | 2008-04-15 | Airdefense, Inc. | Systems and methods for adaptively scanning for wireless communications |
US20040259555A1 (en) | 2003-04-23 | 2004-12-23 | Rappaport Theodore S. | System and method for predicting network performance and position location using multiple table lookups |
WO2004097584A2 (en) | 2003-04-28 | 2004-11-11 | P.G.I. Solutions Llc | Method and system for remote network security management |
US7849217B2 (en) | 2003-04-30 | 2010-12-07 | Cisco Technology, Inc. | Mobile ethernet |
US6925378B2 (en) | 2003-05-12 | 2005-08-02 | Circumnav Networks, Inc. | Enhanced mobile communication device with extended radio, and applications |
US8108916B2 (en) | 2003-05-21 | 2012-01-31 | Wayport, Inc. | User fraud detection and prevention of access to a distributed network communication system |
US20050037818A1 (en) | 2003-05-28 | 2005-02-17 | Nambirajan Seshadri | Providing a universal wireless headset |
EP1629655A1 (en) * | 2003-06-05 | 2006-03-01 | Wireless Security Corporation | Methods and systems of remote authentication for computer networks |
US7483390B2 (en) * | 2003-06-30 | 2009-01-27 | Intel Corporation | System and method for dynamically configuring and transitioning wired and wireless networks |
US20050015592A1 (en) * | 2003-07-15 | 2005-01-20 | Jeou-Kai Lin | System and method for application and user-based class of security |
US7257107B2 (en) * | 2003-07-15 | 2007-08-14 | Highwall Technologies, Llc | Device and method for detecting unauthorized, “rogue” wireless LAN access points |
KR100542346B1 (en) * | 2003-07-30 | 2006-01-11 | 삼성전자주식회사 | method and apparatus for packet processing in WLAN access point |
US7346359B2 (en) * | 2003-07-31 | 2008-03-18 | Pango Networks, Inc. | Method for RF fingerprinting |
US20050030894A1 (en) * | 2003-08-04 | 2005-02-10 | Stephens Adrian P. | Techniques for channel access and transmit queue selection |
JP4211529B2 (en) | 2003-08-06 | 2009-01-21 | 日本電気株式会社 | Channel selection method and radio station and program used therefor |
WO2005024598A2 (en) | 2003-09-09 | 2005-03-17 | Oto Software, Inc | Method and system for securing and monitoring a wireless network |
US7324468B2 (en) * | 2003-09-10 | 2008-01-29 | Broadcom Corporation | System and method for medium access control in a power-save network |
US20050059405A1 (en) * | 2003-09-17 | 2005-03-17 | Trapeze Networks, Inc. | Simulation driven wireless LAN planning |
US20050073980A1 (en) * | 2003-09-17 | 2005-04-07 | Trapeze Networks, Inc. | Wireless LAN management |
US20050059406A1 (en) * | 2003-09-17 | 2005-03-17 | Trapeze Networks, Inc. | Wireless LAN measurement feedback |
US7221946B2 (en) * | 2003-09-22 | 2007-05-22 | Broadcom Corporation | Automatic quality of service based resource allocation |
US7110756B2 (en) | 2003-10-03 | 2006-09-19 | Cognio, Inc. | Automated real-time site survey in a shared frequency band environment |
US20070008884A1 (en) * | 2003-10-08 | 2007-01-11 | Bob Tang | Immediate ready implementation of virtually congestion free guarantedd service capable network |
US9131272B2 (en) | 2003-11-04 | 2015-09-08 | Universal Electronics Inc. | System and method for saving and recalling state data for media and home appliances |
WO2005045642A2 (en) | 2003-11-04 | 2005-05-19 | Nexthop Technologies, Inc. | Secure, standards-based communications across a wide-area network |
US20050122977A1 (en) | 2003-12-05 | 2005-06-09 | Microsoft Corporation | Efficient download mechanism for devices with limited local storage |
US7002943B2 (en) * | 2003-12-08 | 2006-02-21 | Airtight Networks, Inc. | Method and system for monitoring a selected region of an airspace associated with local area networks of computing devices |
US7466678B2 (en) | 2003-12-29 | 2008-12-16 | Lenovo (Singapore) Pte. Ltd. | System and method for passive scanning of authorized wireless channels |
US7221927B2 (en) | 2004-02-13 | 2007-05-22 | Trapeze Networks, Inc. | Station mobility between access points |
US7477894B1 (en) * | 2004-02-23 | 2009-01-13 | Foundry Networks, Inc. | Methods and apparatus for handling wireless roaming among and across wireless area networks |
US7489648B2 (en) * | 2004-03-11 | 2009-02-10 | Cisco Technology, Inc. | Optimizing 802.11 power-save for VLAN |
US20050245269A1 (en) | 2004-04-30 | 2005-11-03 | Intel Corporation | Channel scanning in wireless networks |
US8145182B2 (en) * | 2004-05-07 | 2012-03-27 | Interdigital Technology Corporation | Supporting emergency calls on a wireless local area network |
US7376080B1 (en) * | 2004-05-11 | 2008-05-20 | Packeteer, Inc. | Packet load shedding |
WO2005114886A2 (en) | 2004-05-21 | 2005-12-01 | Rsa Security Inc. | System and method of fraud reduction |
GB0416272D0 (en) * | 2004-07-20 | 2004-08-25 | British Telecomm | Method of operating a network |
KR20060014631A (en) * | 2004-08-11 | 2006-02-16 | 삼성전자주식회사 | Cell selection/reselection method and system for considering congestion status of a cell in a mobile communication system |
DE102004040406B4 (en) * | 2004-08-19 | 2008-07-31 | Nec Europe Ltd. | A method for improving the quality of service (QoS) in a wireless network |
GR1005055B (en) * | 2004-08-27 | 2005-12-06 | Atmel Corporation | Method and system for aquality of service mechanism for a wireless network |
US7317914B2 (en) * | 2004-09-24 | 2008-01-08 | Microsoft Corporation | Collaboratively locating disconnected clients and rogue access points in a wireless network |
US20060104224A1 (en) | 2004-10-13 | 2006-05-18 | Gurminder Singh | Wireless access point with fingerprint authentication |
US7224970B2 (en) | 2004-10-26 | 2007-05-29 | Motorola, Inc. | Method of scanning for beacon transmissions in a WLAN |
JP4433400B2 (en) | 2004-12-09 | 2010-03-17 | レノボ シンガポール プライヴェート リミテッド | Wireless network communication card, device incorporating the card, device supporting wireless network communication, and method of detecting a wireless access point for wireless network communication |
US7475130B2 (en) * | 2004-12-23 | 2009-01-06 | International Business Machines Corporation | System and method for problem resolution in communications networks |
US7725938B2 (en) | 2005-01-20 | 2010-05-25 | Cisco Technology, Inc. | Inline intrusion detection |
US7480264B1 (en) * | 2005-02-10 | 2009-01-20 | Sonicwall, Inc. | Centralized wireless LAN load balancing |
US7630713B2 (en) | 2005-02-18 | 2009-12-08 | Lenovo (Singapore) Pte Ltd. | Apparatus, system, and method for rapid wireless network association |
US7370362B2 (en) | 2005-03-03 | 2008-05-06 | Cisco Technology, Inc. | Method and apparatus for locating rogue access point switch ports in a wireless network |
US7529925B2 (en) | 2005-03-15 | 2009-05-05 | Trapeze Networks, Inc. | System and method for distributing keys in a wireless network |
US20060245393A1 (en) | 2005-04-27 | 2006-11-02 | Symbol Technologies, Inc. | Method, system and apparatus for layer 3 roaming in wireless local area networks (WLANs) |
US7664501B2 (en) | 2005-05-18 | 2010-02-16 | Ashutosh Dutta | Seamless handoff across heterogeneous access networks using a handoff controller in a service control point |
US20070002833A1 (en) * | 2005-06-30 | 2007-01-04 | Symbol Technologies, Inc. | Method, system and apparatus for assigning and managing IP addresses for wireless clients in wireless local area networks (WLANs) |
US7515536B2 (en) * | 2005-07-11 | 2009-04-07 | Corrigent Systems Ltd. | Transparent transport of fibre channel traffic over packet-switched networks |
US7724717B2 (en) * | 2005-07-22 | 2010-05-25 | Sri International | Method and apparatus for wireless network security |
US20070027964A1 (en) * | 2005-07-28 | 2007-02-01 | Allan Herrod | System and method for rapid deployment of network appliances and infrastructure devices |
US7567805B2 (en) * | 2005-08-01 | 2009-07-28 | Cisco Technology, Inc. | Method and system for dynamic assignment of wireless LAN access point identity |
US7561599B2 (en) | 2005-09-19 | 2009-07-14 | Motorola, Inc. | Method of reliable multicasting |
US20070070937A1 (en) | 2005-09-28 | 2007-03-29 | Mustafa Demirhan | Multi-radio mesh network channel selection and load balancing |
US20070083924A1 (en) | 2005-10-08 | 2007-04-12 | Lu Hongqian K | System and method for multi-stage packet filtering on a networked-enabled device |
US7724703B2 (en) | 2005-10-13 | 2010-05-25 | Belden, Inc. | System and method for wireless network monitoring |
US7573859B2 (en) | 2005-10-13 | 2009-08-11 | Trapeze Networks, Inc. | System and method for remote monitoring in a wireless network |
US7551619B2 (en) * | 2005-10-13 | 2009-06-23 | Trapeze Networks, Inc. | Identity-based networking |
US7688755B2 (en) | 2005-10-25 | 2010-03-30 | Motorola, Inc. | Method and apparatus for group leader selection in wireless multicast service |
US20070260720A1 (en) | 2006-05-03 | 2007-11-08 | Morain Gary E | Mobility domain |
US7558266B2 (en) * | 2006-05-03 | 2009-07-07 | Trapeze Networks, Inc. | System and method for restricting network access using forwarding databases |
US7577453B2 (en) | 2006-06-01 | 2009-08-18 | Trapeze Networks, Inc. | Wireless load balancing across bands |
US9191799B2 (en) | 2006-06-09 | 2015-11-17 | Juniper Networks, Inc. | Sharing data between wireless switches system and method |
US7912982B2 (en) | 2006-06-09 | 2011-03-22 | Trapeze Networks, Inc. | Wireless routing selection system and method |
US20080002588A1 (en) * | 2006-06-30 | 2008-01-03 | Mccaughan Sherry L | Method and apparatus for routing data packets in a global IP network |
WO2008006077A2 (en) * | 2006-07-07 | 2008-01-10 | Skyhook Wireless Inc. | Systems and methods of gathering information from wlan- enabled access points to estimate position of a wlan positioning device |
TW200805994A (en) * | 2006-07-11 | 2008-01-16 | Wistron Neweb Corp | A method of establishing wireless network connection for a mobile phone and a mobile phone using the same |
US7724704B2 (en) * | 2006-07-17 | 2010-05-25 | Beiden Inc. | Wireless VLAN system and method |
US7813744B2 (en) | 2006-08-31 | 2010-10-12 | Polycom, Inc. | Method for determining DFS channel availability in a wireless LAN |
KR100758354B1 (en) | 2006-09-01 | 2007-09-14 | 삼성전자주식회사 | Method for scanning access points during station's handoff procedure in wireless communication system and station of performing the method, and network interface of supporting the method and wireless communication system of enabling the method |
US8072952B2 (en) | 2006-10-16 | 2011-12-06 | Juniper Networks, Inc. | Load balancing |
US20080107077A1 (en) | 2006-11-03 | 2008-05-08 | James Murphy | Subnet mobility supporting wireless handoff |
US20080151844A1 (en) | 2006-12-20 | 2008-06-26 | Manish Tiwari | Wireless access point authentication system and method |
WO2008083339A2 (en) * | 2006-12-28 | 2008-07-10 | Trapeze Networks, Inc. | Application-aware wireless network system and method |
US7873061B2 (en) * | 2006-12-28 | 2011-01-18 | Trapeze Networks, Inc. | System and method for aggregation and queuing in a wireless network |
US8023444B2 (en) * | 2008-07-03 | 2011-09-20 | Cisco Technology, Inc. | Multiple density configurations and algorithms for intelligent power savings infrastructure in wireless LANs |
US8978105B2 (en) * | 2008-07-25 | 2015-03-10 | Trapeze Networks, Inc. | Affirming network relationships and resource access via related networks |
-
2006
- 2006-04-05 US US11/400,165 patent/US7551619B2/en active Active
- 2006-10-13 JP JP2008535786A patent/JP2009516937A/en active Pending
- 2006-10-13 CA CA002625326A patent/CA2625326A1/en not_active Abandoned
- 2006-10-13 WO PCT/US2006/040498 patent/WO2007044984A2/en active Application Filing
- 2006-10-13 EP EP06826089A patent/EP1938631A2/en not_active Withdrawn
-
2009
- 2009-06-22 US US12/489,295 patent/US8270408B2/en active Active
Patent Citations (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6188649B1 (en) * | 1996-06-28 | 2001-02-13 | Matsushita Electric Industrial Co., Ltd. | Method for reading magnetic super resolution type magneto-optical recording medium |
US6661787B1 (en) * | 1998-05-21 | 2003-12-09 | 3Com Technologies | Integrated data table in a network |
US20050259597A1 (en) * | 2000-10-17 | 2005-11-24 | Benedetto Marco D | Multiple instance spanning tree protocol |
US20020101868A1 (en) * | 2001-01-30 | 2002-08-01 | David Clear | Vlan tunneling protocol |
US20030174706A1 (en) * | 2002-03-15 | 2003-09-18 | Broadcom Corporation | Fastpath implementation for transparent local area network (LAN) services over multiprotocol label switching (MPLS) |
US20050058132A1 (en) * | 2002-05-20 | 2005-03-17 | Fujitsu Limited | Network repeater apparatus, network repeater method and network repeater program |
US20050157730A1 (en) * | 2003-10-31 | 2005-07-21 | Grant Robert H. | Configuration management for transparent gateways in heterogeneous storage networks |
Also Published As
Publication number | Publication date |
---|---|
US7551619B2 (en) | 2009-06-23 |
EP1938631A2 (en) | 2008-07-02 |
CA2625326A1 (en) | 2007-04-19 |
US20090257437A1 (en) | 2009-10-15 |
WO2007044984A3 (en) | 2009-04-30 |
US20070086398A1 (en) | 2007-04-19 |
JP2009516937A (en) | 2009-04-23 |
US8270408B2 (en) | 2012-09-18 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US7551619B2 (en) | Identity-based networking | |
US6823479B1 (en) | Network fault analysis tool | |
US7992201B2 (en) | Dynamic network tunnel endpoint selection | |
US9215131B2 (en) | Methods for exchanging network management messages using UDP over HTTP protocol | |
US8549146B2 (en) | Stateless forwarding of load balanced packets | |
CN102984289B (en) | Promote the method that penetrates of NAT and mobile device | |
US9462071B2 (en) | Spoofing technique for transparent proxy caching | |
EP2451125B1 (en) | Method and system for realizing network topology discovery | |
US20140086069A1 (en) | Efficient network traffic analysis using a hierarchical key combination data structure | |
CN1216657A (en) | Internet protocol filter | |
CN105323173A (en) | Network rule entry setting method and device | |
CN107948150B (en) | Message forwarding method and device | |
US20090276530A1 (en) | Devices, Systems, Methods and Software for Computer Networking | |
CN109274588A (en) | The processing method and processing device of IP packet | |
Cisco | Cisco IOS IP Command Reference, Volume 1 of 3: Addressing and Services Release 12.2 | |
US8804535B2 (en) | System and method for sending packets using another device's network address | |
Cisco | Global Configuration Mode Commands | |
Cisco | Configuring Server Load Balancing | |
WO2001075626A9 (en) | Bridge configuration over ip/web | |
JP3589445B2 (en) | Method and apparatus for setting network address | |
US20040160973A1 (en) | Zero configuration auto-discovery for networks storage | |
EP4024820A1 (en) | Method for configuring a secured interface between a transport network and one of a plurality of elementary networks federated through the transport network; associated interface | |
Ohmori et al. | Analyses on first packet drops of lisp in end-to-end bidirectional communications | |
Chrástek | CCNA 1 Routing and Switching Introduction to Networks v5. 0 Answers | |
Headquarters | Cisco IOS IP Configuration Guide |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
121 | Ep: the epo has been informed by wipo that ep was designated in this application | ||
ENP | Entry into the national phase |
Ref document number: 2625326 Country of ref document: CA |
|
ENP | Entry into the national phase |
Ref document number: 2008535786 Country of ref document: JP Kind code of ref document: A |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2006826089 Country of ref document: EP |