MANAGED ACCESS TO MOBILE ENDPOINTS

• US 20130114502A1
• Filed: 11/08/2011
• Published: 05/09/2013
• Est. Priority Date: 11/08/2011
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Malaviya, Viren K., Prasad, Chandrodaya, Oswal, Anand, Joshi, Kiritkumar B., Gorde, Sachin G.
• Granted Patent: US 8,891,552 B2
• Time in Patent Office: Days
• US Class Current: 370/328
• CPC Class Codes: H04L 2101/686 using dual-stack hosts, e.g. in Internet protocol version 4 [IPv4]/Internet protocol version 6 [IPv6] networks
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 61/5076 Update or notification mechanisms, e.g. DynDNS
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 65/1016 IP multimedia subsystem [IMS]
• CPC Class Codes: H04L 65/102 Gateways arrangements for connecting between networks having differing types of switching systems, e.g. gateways, H04L12/66
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 8/005 Discovery of network devices, e.g. terminals

Abstract

In one implementation, a method for managing access to mobile endpoints leverages the always-on nature of a first internet layer protocol to expand the reach of a second internet layer protocol. A network device receives a request originating from a remote host. The request includes a domain name of a mobile endpoint. The network device queries a database using the domain name for a first address of the mobile endpoint as designated according to the first internet layer protocol. The network device transmits a wake up message to the mobile endpoint using the first address. A data bearer for communication with the second internet layer protocol is established based on the wake up message, and a second address is assigned to the mobile endpoint. The second address is forwarded to the remote host, allowing communication between the remote host and the mobile endpoint.

Claims

1. A method comprising:

receiving a request originating from a remote host, wherein the request includes a domain name of a mobile node;

querying a database using the domain name for a first address of the mobile node as designated according to a first internet layer protocol;

transmitting a wake up message to the mobile node using the first address, wherein the wake up message includes an identity of the remote host;

receiving a second address of the mobile node as designated according to a second internet layer protocol, wherein the second address is assigned to the mobile node in response to the wake up message; and

forwarding the second address to the remote host.

2. The method of claim 1, wherein the first internet layer protocol is IPv6 and the second internet layer protocol is IPv4.

3. The method of claim 1, wherein the request originating with the remote host is received from a public domain name system (DNS) server.

4. The method of claim 1, wherein the mobile node is a cellular router configurable or manageable by the remote host.

5. The method of claim 1, further comprising:

comparing the identity of the remote host to an authorized host list; and

blocking the wake up message if the identity of the remote host is not in the authorized host list.

6. The method of claim 1, wherein the wake up message includes temporary security credentials configured to establish a temporary session between the mobile node and the remote host.

7. The method of claim 1, further comprising:

storing the second address of the mobile node as designated according to the second internet layer protocol in the database.

8. The method of claim 1, wherein the wake up message includes a command to establish a data bearer using the second internet layer protocol.

9. The method of claim 1, wherein the request includes a request to install a software patch on the mobile node or change a configuration of the mobile node.

10. A network device comprising:

a database configured to store at least one domain name associated with a first Internet layer protocol and a second Internet layer protocol;

a processor configured to query the database using a domain name based on receipt of a remote host request to receive a first address associated with the first internet layer protocol and configured to generate a wake up message to a mobile node using the first address, wherein the wake up message includes a command to establish a data bearer for the second Internet layer protocol; and

a communication interface configured to transmit the wake up message to the mobile node and to receive a second address of the mobile node designated according to the second internet layer protocol.

11. The network device of claim 10, wherein the processor forwards the second address to a source of the remote host request.

12. The network device of claim 10, wherein the first internet layer protocol is IPv6 and the second internet layer protocol is IPv4.

13. The network device of claim 10, wherein the processor is configured to check whether the database includes the second address of the mobile node as designated according to the second internet layer protocol, and if the database includes the second address, forwarding the second address to a source of the remote host request.

14. The network device of claim 10, wherein the processor is configured to identify a source of the remote host request and query for the source of the remote host request in an authorized host database.

15. The network device of claim 10, wherein the mobile node is a utility meter and the wake up message instructs the utility meter to return utility consumption data.

16. A non-transitory computer readable medium storing instructions that, when executed, operable to:

identify a domain name from a communication request originating at a remote router and naming a mobile router;

query a database using the domain name for an IPv6 address of the mobile router;

transmit a wake up message to the mobile router using the IPv6 address, wherein the wake up message includes an identity of the remote router;

receive an IPv4 address of the mobile router; and

forward the IPv4 address to the remote router.

17. The non-transitory computer readable medium of claim 16, wherein the wake up message includes temporary security credentials configured to establish a temporary session with the remote router.

18. The non-transitory computer readable medium of claim 16, wherein the communication request is a voice over internet protocol call initiated by the remote router.

19. The non-transitory computer readable medium of claim 16, wherein the wake up message includes a command to establish an IPv4 data bearer.

20. The non-transitory computer readable medium of claim 16, the instructions further operable to:

query for the identity of the remote router in an authorized host database; and

block the wake up message if the identity of the remote router is not in the authorized host database.