Secure proxies for flat networks
View Patent ↗A proxy is in communication with an internet protocol network and a mobile operator network. The proxy receives first communications from access points via the internet protocol network, transmits content from the first communications to the mobile operator network, receives second communications from the mobile operator network, and transmits content from the second communications to the access points via the internet protocol network. The proxy may perform operations based on the first and second communications received from either the access points, or from the mobile operator network. The operations performed by the proxy may include modifying the communications, saving certain information regarding the communications, performing authentication, encryption, or decryption of the communications, determining a destination for the communications, or sending the communications to a destination.
1. A method performed by a proxy that is in communication with a private network comprising a plurality of personal access points, the proxy acting as a single access point to the plurality of personal access points for a mobile operator network, the plurality of personal access points being configured to communicate with one or more access terminals, the method comprising:
receiving a first A21 communication from a source personal access point associated with the plurality of personal access points, the first communication being associated with a handoff of an active session established between one of the one or more access terminals and the source personal access point;
extracting, from the first A21 communication, an address that identifies an entity within the mobile operator network;
transmitting content from the first A21 communication to the entity within the mobile operator network identified by the address;
receiving a second communication from the mobile operator network;
extracting, from the second communication, a correlation identifier;
extracting a personal access point identifier of the source personal access point from the correlation identifier;
identifying the source personal access point based on the personal access point identifier;
transmitting content from the second communication to the source personal access point identified based on the personal access point identifier; and
transferring, based at least in part on the first A21 communication, the second communication, and an A21 protocol, the active session from the source personal access point to the mobile operator network.
2. The method of claim 1 , wherein the proxy performs operations based on the first communication and the second communication.
3. The method of claim 2 , wherein the operations performed by the proxy comprise one or more of modifying the first communication or the second communication, saving information associated with the first communication or the second communication, performing authentication, encryption, or decryption of the first communication or the second communication, determining a destination for the first communication or the second communication, or sending the first communication or the second communication to a destination.
4. The method of claim 1 , wherein one or more of the plurality of personal access points comprises the proxy.
5. The method of claim 1 , wherein one or more elements within the mobile operator network comprises the proxy.
6. The method of claim 1 , wherein the first communication comprises an A21 AirInterface Signaling message.
7. The method of claim 1 , wherein the second communication comprises an A21 acknowledgement message.
8. The method of claim 1 , wherein the active session comprises a voice-over-internet protocol (VoIP) session.
9. The method of claim 8 , wherein transferring the active session comprises transferring the active session from a 1xEV-DO network associated with the source personal access point to a CDMA2000 1x circuit switched network associated with the mobile operator network.
10. The method of claim 9 , wherein the 1xEV-DO network is associated with a first revision of a telecommunications standard and the CDMA2000 1x circuit switched network is associated with a second, different version of the telecommunications standard.
11. The method of claim 1 , wherein one or more of the plurality of personal access points are portable.
12. An apparatus in a system comprising a mobile operator network and a private network comprising a plurality of personal access points, the plurality of personal access points being configured to communicate with one or more access terminals, the apparatus comprising:
a proxy configured to act as a single access point to the plurality of personal access points for the mobile operator network, the proxy being further configured to:
receive a first A21 communication from a source personal access point associated with the plurality of personal access points, the first communication being associated with a handoff of an active session established between one of the one or more access terminals and the source personal access point;
extract, from the first A21 communication, an address that identifies an entity within the mobile operator network;
transmit content from the first A21 communication to the entity within the mobile operator network identified by the address;
receive a second communication from the mobile operator network;
extract, from the second communication, a correlation identifier;
extract a personal access point identifier of the source personal access point from the correlation identifier;
identify the source personal access point based on the personal access point identifier;
transmit content from the second communication to the source personal access point; and
transfer, based at least in part on the first A21 communication, the second communication, and an A21 protocol, the active session from the source personal access point to the mobile operator network.
13. The apparatus of claim 12 , wherein the proxy is configured to perform operations based on the first communication and the second communication.
14. The apparatus of claim 13 , wherein the operations configured to be performed by the proxy comprises one or more of modifying the first or second communication, saving information associated with the first or second communication, performing authentication, encryption, or decryption of the first or second communication, determining a destination for the first or second communication, or sending the first or second communication to a destination.
15. The apparatus of claim 12 , wherein the plurality of personal access points comprises the proxy.
16. The apparatus of claim 12 , wherein one or more elements within the mobile operator network comprises the proxy.
17. The apparatus of claim 12 , wherein the first communication comprises an A21 AirInterface Signaling message.
18. The apparatus of claim 12 , wherein the second communication comprises an A21 acknowledgement message.
19. The apparatus of claim 12 , wherein the active session comprises a voice-over-internet protocol (VoIP) session.
20. The apparatus of claim 19 , wherein transferring the active session comprises transferring the active session from a 1xEV-DO network associated with the source personal access point to a CDMA2000 1x circuit switched network associated with the mobile operator network.
21. The apparatus of claim 20 , wherein 1xEV-DO network is associated with a first revision of a telecommunications standard and the CDMA2000 1x circuit switched network is associated with a second, different version of the telecommunications standard.
22. The apparatus of claim 12 , wherein one or more of the plurality of personal access points are portable.
23. One or more machine-readable storage devices comprising instructions that are executable by one or more processing devices of a proxy, the proxy being in communication with a private network comprising a plurality of personal access points, the proxy acting as a single access point to the plurality of personal access points for a mobile operator network, the plurality of personal access points being configured to communicate with one or more access terminals, the instructions for causing the proxy to perform operations comprising:
receiving a first A21 communication from a source personal access point associated with the plurality of personal access points, the first communication being associated with a handoff of an active session established between one of the one or more access terminals and the source personal access point;
extracting, from the first A21 communication, an address that identifies an entity within the mobile operator network;
transmitting content from the first A21 communication to the entity within the mobile operator network identified by the address;
receiving a second communication from the mobile operator network;
extracting, from the second communication, a correlation identifier;
extracting a personal access point identifier of the source personal access point from the correlation identifier;
identifying the source personal access point based on the personal access point identifier;
transmitting content from the second communication to the source personal access point identified based on the personal access point identifier; and
transferring, based at least in part on the first A21 communication, the second communication, and an A21 protocol, the active session from the source personal access point to the mobile operator network.
24. The one or more machine-readable storage devices method of claim 23 , wherein the proxy performs operations based on the first communication and the second communication.
25. The one or more machine-readable storage devices of claim 24 , wherein the operations performed by the proxy comprise one or more of modifying the first communication or the second communication, saving information associated with the first communication or the second communication, performing authentication, encryption, or decryption of the first communication or the second communication, determining a destination for the first communication or the second communication, or sending the first communication or the second communication to a destination.
26. The one or more machine-readable storage devices of claim 23 , wherein one or more of the plurality of personal access points comprises the proxy.
27. The one or more machine-readable storage devices of claim 23 , wherein one or more elements within the mobile operator network comprises the proxy.
28. The one or more machine-readable storage devices of claim 23 , wherein the first communication is associated with the A21 protocol.
29. The one or more machine-readable storage devices of claim 28 , wherein the first communication comprises an A21 AirInterface Signaling message.
30. The one or more machine-readable storage devices of claim 28 , wherein the second communication comprises an A21 acknowledgement message.
31. The one or more machine-readable storage device of claim 23 , wherein the active session comprises a voice-over-internet protocol (VoIP) session.
32. The one or more machine-readable storage devices of claim 31 , wherein transferring the active session comprises transferring the active session from a 1xEV-DO network associated with the source personal access point to a CDMA2000 1x circuit switched network associated with the mobile operator network.
33. The one or more machine-readable storage devices of claim 32 , wherein the 1xEV-DO network is associated with a first revision of a telecommunications standard and the CDMA2000 1x circuit switched network is associated with a second, different version of the telecommunications standard.
34. The one or more machine-readable storage devices of claim 23 , wherein one or more of the plurality of personal access points are portable.