Managed access to mobile endpoints

• US 8,891,552 B2
• Filed: 11/08/2011
• Issued: 11/18/2014
• Est. Priority Date: 11/08/2011
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Joshi, Kiritkumar B., Malaviya, Viren K., Oswal, Anand, Prasad, Chandrodaya, Gorde, Sachin G.
• Primary Examiner(s): Pezzlo, John
• Application Number:
  US13/291,847
• Publication Number:
  US 20130114502A1
• Time in Patent Office: 1,106 Days
• Field of Search: 370/252, 370/254, 370/278, 370/466
• US Class Current: 370/466
• CPC Class Codes: H04L 2101/686 using dual-stack hosts, e.g. in Internet protocol version 4 [IPv4]/Internet protocol version 6 [IPv6] networks
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 61/5076 Update or notification mechanisms, e.g. DynDNS
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 65/1016 IP multimedia subsystem [IMS]
• CPC Class Codes: H04L 65/102 Gateways arrangements for connecting between networks having differing types of switching systems, e.g. gateways, H04L12/66
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 8/005 Discovery of network devices, e.g. terminals

Abstract

In one implementation, a method for managing access to mobile endpoints leverages the always-on nature of a first internet layer protocol to expand the reach of a second internet layer protocol. A network device receives a request originating from a remote host. The request includes a domain name of a mobile endpoint. The network device queries a database using the domain name for a first address of the mobile endpoint as designated according to the first internet layer protocol. The network device transmits a wake up message to the mobile endpoint using the first address. A data bearer for communication with the second internet layer protocol is established based on the wake up message, and a second address is assigned to the mobile endpoint. The second address is forwarded to the remote host, allowing communication between the remote host and the mobile endpoint.

Claims

1. A method comprising:

receiving, at communication interface circuitry, a request originating from a remote host, wherein the request includes a domain name of a mobile node;

querying, by processor circuitry communicatively coupled to the communication interface circuitry, a database using the domain name for a first address of the mobile node as designated according to a first internet layer protocol;

transmitting, by the processor circuitry, a wake up message to the mobile node using the first address, wherein the wake up message includes an identity of the remote host;

receiving, at the communication interface circuitry, a second address of the mobile node as designated according to a second internet layer protocol, wherein the second address is assigned to the mobile node in response to the wake up message, wherein the mobile node is a cellular router configurable or manageable by the remote host; and

forwarding, by the processor circuitry, the second address to the remote host.

2. The method of claim 1, wherein the first internet layer protocol is IPv6 and the second internet layer protocol is IPv4.

3. The method of claim 1, wherein the request originating with the remote host is received from a public domain name system (DNS) server.

4. The method of claim 1, further comprising:

storing the second address of the mobile node as designated according to the second internet layer protocol in the database.

5. The method of claim 1, wherein the wake up message includes a command to establish a data bearer using the second internet layer protocol.

6. The method of claim 1, wherein the request includes a request to install a software patch on the mobile node or change a configuration of the mobile node.

7. The method of claim 1, wherein the domain name for the first address of the mobile node is not a fully qualified domain name.

8. A network device comprising:

database circuitry configured to store a domain name associated with a first Internet layer protocol and a second Internet layer protocol;

processor circuitry, communicatively coupled to the database circuitry, configured to;

query the database using the domain name based on receipt of a remote host request to receive a first address associated with the first internet layer protocol and configured to generate a wake up message to a mobile node using the first address, wherein the wake up message includes a command to establish a data bearer for the second Internet layer protocol;

identify a source of the remote host request and query for the source of the remote host request in an authorized host database; and

communication interface circuitry, communicatively coupled to the processor circuitry, configured to transmit the wake up message to the mobile node and to receive a second address of the mobile node designated according to the second internet layer protocol.

9. The network device of claim 8, wherein the processor circuitry forwards the second address to a source of the remote host request.

10. The network device of claim 8, wherein the first internet layer protocol is IPv6 and the second internet layer protocol is IPv4.

11. The network device of claim 8, wherein the processor circuitry is configured to check whether the database circuitry includes the second address of the mobile node as designated according to the second internet layer protocol, and if the database circuitry includes the second address, forwarding the second address to a source of the remote host request.

12. The network device of claim 8, wherein the mobile node is a utility meter and the wake up message instructs the utility meter to return utility consumption data.

13. The network device of claim 8, wherein the domain name for the first address of the mobile node is not a fully qualified domain name.

14. A non-transitory computer readable medium storing instructions configured to:

identify a domain name from a communication request originating at a remote router and naming a mobile router;

query a database using the domain name for an IPv6 address of the mobile router;

transmit a wake up message to the mobile router using the IPv6 address, wherein the wake up message includes an identity of the remote router;

receive an IPv4 address of the mobile router; and

forward the IPv4 address to the remote router.

15. The non-transitory computer readable medium of claim 14, wherein the wake up message includes temporary security credentials configured to establish a temporary session with the remote router.

16. The non-transitory computer readable medium of claim 14, wherein the communication request is a voice over internet protocol call initiated by the remote router.

17. The non-transitory computer readable medium of claim 14, wherein the wake up message includes a command to establish an IPv4 data bearer.

18. The non-transitory computer readable medium of claim 14, the instructions further configured to:

query for the identity of the remote router in an authorized host database; and

block the wake up message if the identity of the remote router is not in the authorized host database.

19. A method comprising:

receiving, at circuitry, a request originating from a remote host, wherein the request includes a domain name of a mobile node;

querying, by the circuitry, a database using the domain name for a first address of the mobile node as designated according to a first internet layer protocol;

transmitting, by the circuitry, a wake up message to the mobile node using the first address, wherein the wake up message includes an identity of the remote host;

receiving, at the circuitry, a second internet layer protocol address that is not a fully qualified domain name, wherein the second address is assigned to the mobile node in response to the wake up message;

forwarding, by the circuitry, the second address to the remote host;

comparing, by the circuitry, the identity of the remote host to an authorized host list; and

blocking, by the circuitry, the wake up message if the identity of the remote host is not in the authorized host list.

20. A method, comprising:

receiving, at circuitry, a request originating from a remote host, wherein the request includes a domain name of a mobile node;

querying, by the circuitry, a database using the domain name for a first address of the mobile node as designated according to a first internet layer protocol;

transmitting, by the circuitry, a wake up message to the mobile node using the first address, wherein the wake up message includes an identity of the remote host, and wherein the wake up message includes temporary security credentials configured to establish a temporary session between the mobile node and the remote host;

receiving, at the circuitry, a second internet layer protocol address that is not a fully qualified domain name, wherein the second address is assigned to the mobile node in response to the wake up message; and

forwarding, by the circuitry, the second address to the remote host.