1. A gateway that implements a local mobility anchor comprising:
a first network connection configured to send and receive data flows from a packet network;
a second network connection configured to send and receive data flows from a user equipment; and
a processor configured to create a binding that includes identification information of the user equipment and an access technology type that is used to establish a data flow and maintaining an application profile that includes an identification of an access technology used in providing radio communication to the user equipment and preferences regarding which applications are suited for that access technology, wherein the preferences are determined based on a priority ordering of applications suited for a particular wireless access technology,
wherein the processor is configured to detect when the user equipment is connected to a plurality of different access technologies simultaneously by checking the bindings and corresponding application profiles and determining whether to initiate a handover of a specific data flow from a first access technology to a second access technology, based on the bindings and corresponding application profiles when the user equipment is connected to a plurality of access technologies simultaneously, wherein the first access technology is of a different type than the second access technology, and when a handover of the specific data flow is initiated, forwarding the specific data flow over the second access technology while sending to the UE another data flow over the first access technology.
2. The gateway of claim 1, wherein the first access technology is a long-term evolution based radio access technology and the second access technology is WiFi.
3. The gateway of claim 1, wherein the processor is configured to create a binding cache entry to forward a specific data flow to the UE through the second access technology.
4. The gateway of claim 3, wherein the processor is configured to remove the binding cache entry when the UE roams out of coverage of the second access technology.
5. The gateway of claim 1, wherein the application profiles specify a priority ordering of applications suited for a particular wireless technology.
6. The gateway of claim 1, wherein the application profiles are based on policies local to the gateway and are configurable.
7. A method of handing over a data flow comprising:
receiving at an anchor gateway a first binding registration including an identification of a user equipment (UE);
creating a binding at the anchor gateway that includes the identification information of the UE and an access technology type that is used to establish a data flow and maintaining an application profile that includes an identification of a first access technology used in providing radio communication to the UE and preferences regarding which applications are suited for that access technology, wherein the preferences are determined based on a priority ordering of applications suited for a particular wireless access technology,
sending from the anchor gateway a first data flow and a second data flow towards the UE, where the first access technology is used to communicate between the UE and the anchor gateway;
receiving at the anchor gateway a second binding registration for the UE;
creating a second binding at the anchor gateway using the identification information of the UE and maintaining a corresponding application profile that includes an identification of a second access technology used in providing radio communication to the UE that includes preferences amongst a plurality of applications;
determining whether to initiate a handover of a specific data flow from the first access technology to the second access technology, based on the bindings and corresponding application profiles, wherein the first access technology is of a different type than the second access technology;
initiating a handover of the specific data flow from the first access technology to the second access technology; and
once a handover of the specific data flow is initiated, forwarding the first data flow to the UE over the second access technology while sending to the UE the second data flow over the first access technology.
8. The method of claim 7, further comprising:
removing the forwarding of the first data flow over the second access technology; and sending the first data flow over the first access technology.
9. The method of claim 8, wherein the removing is a removal of a binding cache entry at the anchor gateway when the UE roams out of coverage of the second access technology.
10. The method of claim 7, wherein the first access technology is a long-term evolution (LTE) based radio access technology and the second access technology is WiFi.
11. The method of claim 7, wherein the binding is a proxy mobile internet protocol version 6 (PMIPv6) binding.
12. The method of claim 7, wherein the application profiles specify a priority ordering of applications suited for a particular wireless technology.
13. The method of claim 7, wherein the application profiles are based on policies local to the gateway and are configurable.
14. A computer program product comprising software encoded on one or more non-transitory computer-readable media and when executed on an anchor gateway operable to:
receive at an anchor gateway a first binding registration including an identification of a user equipment (UE);
create a binding at the anchor gateway that includes the identification information of the UE and an access technology type that is used to establish a data flow and maintaining an application profile that includes an identification of a first access technology used in providing radio communication to the UE and preferences regarding which applications are suited for that access technology, wherein the preferences are determined based on a priority ordering of applications suited for a particular wireless access technology;
send from the anchor gateway a first data flow and a second data flow towards the UE, where the first access technology is used to communicate between the UE and the anchor gateway;
receive at the anchor gateway a second binding registration for the UE;
create a second binding at the anchor gateway using the identification information of the UE and maintaining a corresponding application profile that includes an identification of a second access technology used in providing radio communication to the UE that includes preferences amongst a plurality of applications;
determine whether to initiate a handover of a specific data flow from the first access technology to the second access technology, based on the bindings and corresponding application profiles, wherein the first access technology is of a different type than the second access technology;
initiate a handover of the specific data flow from the first access technology to the second access technology; and
once a handover of the specific data flow is initiated, forwarding the first data flow to the UE over the second access technology while sending to the UE the second data flow over the first access technology.
15. The computer program product of claim 14, further comprising software operable to:
remove the forwarding of the first data flow over the second access technology; and sending the first data flow over the first access technology.
16. The computer program product of claim 15, wherein the software operable to remove the forwarding of the first data flow over the second access technology removes a binding cache entry at the anchor gateway when the UE roams out of coverage of the second access technology.
17. The computer program product of claim 14, wherein the first access technology is a long-term evolution (LTE) based radio access technology and the second access technology is WiFi.
18. The computer program product of claim 14, wherein the binding is a proxy mobile internet protocol version 6 (PMIPv6) binding.
19. The computer program product of claim 14, wherein the application profiles specify a priority ordering of applications suited for a particular wireless technology.
20. The computer program product of claim 14, wherein the application profiles are based on policies local to the gateway and are configurable.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A method for authenticating a user access request comprising:
receiving an access request from a user over a first communication medium;
prompting the user for a username and a first password portion over the first communication medium;
sending a second password portion to the user over a communication medium other than said first communication medium responsive to receiving a valid user name and first password portion pair from the user; and
verifying the access request responsive to receiving said second password portion from the user through said first communication medium.
2. The method of claim 1, wherein said password is sent to a mobile device.
3. The method of claim 1, wherein said password is generated by a firewall system.
4. The method of claim 3, wherein said password is generated by proxy operable in said firewall system.
5. An apparatus for authenticating a user access request comprising:
means for receiving an access request from a user over a first communication medium;
means for prompting the user for a username and a first password portion over the first communication medium;
means for sending a second password portion to the user over a communication medium other than said first communication medium responsive to receiving a valid user name and first password portion pair from the user; and
means for verifying the access request responsive to receiving said second password portion from the user through said first communication medium.
6. The method of claim 5, further comprising means for sending said password a mobile device.
7. The method of claim 5, wherein said password is generated by firewall means.
8. The method of claim 7, wherein said password is generated by proxy means operable in said firewall means.
9. A firewall for authenticating a user access request comprising:
a firewall device including at least one proxy process for processing incoming connection requests;
the at least one proxy configured to:
receive an access request from a user over a first communication medium;
prompt the user for a username and a first password portion over the first communication medium;
send a second password portion to the user over a communication medium other than said first communication medium responsive to receiving a valid user name and first password portion pair from the user; and
verify the access request responsive to receiving said second password portion from the user through said first communication medium.
10. The firewall of claim 9, wherein said password is sent to a mobile device.