US 20070008926 A1
According to some of the preferred embodiments, a method for proactively establishing a security association between a mobile node in a visiting network and an authentication agent in another network to which the mobile node can move includes: negotiating pre-authentication using a flag in a message header that indicates whether the communication is for establishing a pre-authentication security association; and one of the mobile node and the authentication agent initiating pre-authentication by transmitting a message with the flag set in its message header, and the other of the mobile node and the authentication agent responding with the flag set in its message header only if it supports the pre-authentication.
1. A method for proactively establishing a security association between a mobile node in a visiting network and an authentication agent in another network to which the mobile node can move, comprising:
negotiating pre-authentication using a flag in a message header that indicates whether the communication is for establishing a pre-authentication security association; and
one of said mobile node and said authentication agent initiating pre-authentication by transmitting a message with the flag set in its message header, and the other of said mobile node and said authentication agent responding with the flag set in its message header only if it supports the pre-authentication.
2. The method of
3. The method of
4. The method of
5. The method of
6. The method of
7. The method of
8. The method of
9. The method of
10. The method of
11. The method of
12. The method of
13. The method of
14. The method of
15. The method of
16. The method of
17. The method of
18. The method of
19. A mobile node configured to proactively establishing a security association from a visiting network with an authentication agent in another network to which the mobile node can move, comprising:
said mobile node being configured to negotiate pre-authentication using a flag in a message header that indicates whether the communication is for establishing a pre-authentication security association; and
said mobile node being configured such that one of said mobile node and said authentication agent initiate pre-authentication by transmitting a message with the flag set in its message header, and the other of said mobile node and said authentication agent responds with the flag set in its message header only if it supports the pre-authentication.
20. An authentication agent configured to proactively establishing a security association with a mobile node from a visiting network while the authentication agent is in another network to which the mobile node can move, comprising:
said authentication agent node being configured to negotiate pre-authentication using a flag in a message header that indicates whether the communication is for establishing a pre-authentication security association; and
said authentication agent being configured such that one of said mobile node and said authentication agent initiate pre-authentication by transmitting a message with the flag set in its message header, and the other of said mobile node and said authentication agent responds with the flag set in its message header only if it supports the pre-authentication.
The present application claims priority under 35 U.S.C. 119 to U.S. Provisional Application Ser. No. 60/595,169 filed on Jun. 13, 2005, the entire contents of which are incorporated herein by reference. In addition, the present application incorporates by reference the entire disclosures of each of the following U.S. Provisional Patent Applications: 1) Ser. No. 60/625,106, filed on Nov. 5, 2004, entitled Network Discovery Mechanism For Secure Fast Handoff; 2) Ser. No. 60/593,377, filed on Jan. 9, 2005, entitled Network Discovery Mechanisms; 3) Ser. No. 60/670,655, filed on Apr. 13, 2005, entitled Network Discovery Mechanisms; and 4) Ser. No. 60/697,589, filed on Jul. 11, 2005, entitled RDF Schema Update for 802.1 Baseline Document; and 5) U.S. Provisional Patent Application No. 60/649,554 filed Feb. 4, 2005, entitled A Framework Of Media-Independent Pre-Authentication. In addition, the entire disclosure of the following co-pending Utility U.S. patent application is incorporated herein by reference: U.S. patent application Ser. No. 10/761,243 entitled Mobility Architecture Using Pre-Authentication, Pre-Configuration and/or Virtual Soft-Handoff, filed on Jan. 22, 2004.
1. Field of the Invention
The present application relates to, inter alia, methods for pre-authentication, including, e.g., pre-authentication supporting PANA and the like.
2. Background Discussion
Networks and Internet Protocol:
There are many types of computer networks, with the Internet having the most notoriety. The Internet is a worldwide network of computer networks. Today, the Internet is a public and self-sustaining network that is available to many millions of users. The Internet uses a set of communication protocols called TCP/IP (i.e., Transmission Control Protocol/Internet Protocol) to connect hosts. The Internet has a communications infrastructure known as the Internet backbone. Access to the Internet backbone is largely controlled by Internet Service Providers (ISPs) that resell access to corporations and individuals.
With respect to IP (Internet Protocol), this is a protocol by which data can be sent from one device (e.g., a phone, a PDA [Personal Digital Assistant], a computer, etc.) to another device on a network. There are a variety of versions of IP today, including, e.g., IPv4, IPv6, etc. Each host device on the network has at least one IP address that is its own unique identifier. IP is a connectionless protocol. The connection between end points during a communication is not continuous. When a user sends or receives data or messages, the data or messages are divided into components known as packets. Every packet is treated as an independent unit of data.
In order to standardize the transmission between points over the Internet or the like networks, an OSI (Open Systems Interconnection) model was established. The OSI model separates the communications processes between two points in a network into seven stacked layers, with each layer adding its own set of functions. Each device handles a message so that there is a downward flow through each layer at a sending end point and an upward flow through the layers at a receiving end point. The programming and/or hardware that provides the seven layers of function is typically a combination of device operating systems, application software, TCP/IP and/or other transport and network protocols, and other software and hardware.
Typically, the top four layers are used when a message passes from or to a user and the bottom three layers are used when a message passes through a device (e.g., an IP host device). An IP host is any device on the network that is capable of transmitting and receiving IP packets, such as a server, a router or a workstation. Messages destined for some other host are not passed up to the upper layers but are forwarded to the other host. The layers of the OSI model are listed below. Layer 7 (i.e., the application layer) is a layer at which, e.g., communication partners are identified, quality of service is identified, user authentication and privacy are considered, constraints on data syntax are identified, etc. Layer 6 (i.e., the presentation layer) is a layer that, e.g., converts incoming and outgoing data from one presentation format to another, etc. Layer 5 (i.e., the session layer) is a layer that, e.g., sets up, coordinates, and terminates conversations, exchanges and dialogs between the applications, etc. Layer-4 (i.e., the transport layer) is a layer that, e.g., manages end-to-end control and error-checking, etc. Layer-3 (i.e., the network layer) is a layer that, e.g., handles routing and forwarding, etc. Layer-2 (i.e., the data-link layer) is a layer that, e.g., provides synchronization for the physical level, does bit-stuffing and furnishes transmission protocol knowledge and management, etc. The Institute of Electrical and Electronics Engineers (IEEE) sub-divides the data-link layer into two further sub-layers, the MAC (Media Access Control) layer that controls the data transfer to and from the physical layer and the LLC (Logical Link Control) layer that interfaces with the network layer and interprets commands and performs error recovery. Layer 1 (i.e., the physical layer) is a layer that, e.g., conveys the bit stream through the network at the physical level. The IEEE sub-divides the physical layer into the PLCP (Physical Layer Convergence Procedure) sub-layer and the PMD (Physical Medium Dependent) sub-layer.
Wireless networks can incorporate a variety of types of mobile devices, such as, e.g., cellular and wireless telephones, PCs (personal computers), laptop computers, wearable computers, cordless phones, pagers, headsets, printers, PDAs, etc. For example, mobile devices may include digital systems to secure fast wireless transmissions of voice and/or data. Typical mobile devices include some or all of the following components: a transceiver (i.e., a transmitter and a receiver, including, e.g., a single chip transceiver with an integrated transmitter, receiver and, if desired, other functions); an antenna; a processor; one or more audio transducers (for example, a speaker or a microphone as in devices for audio communications); electromagnetic data storage (such as, e.g., ROM, RAM, digital data storage, etc., such as in devices where data processing is provided); memory; flash memory; a full chip set or integrated circuit; interfaces (such as, e.g., USB, CODEC, UART, PCM, etc.); and/or the like.
Wireless LANs (WLANs) in which a mobile user can connect to a local area network (LAN) through a wireless connection may be employed for wireless communications. Wireless communications can include, e.g., communications that propagate via electromagnetic waves, such as light, infrared, radio, microwave. There are a variety of WLAN standards that currently exist, such as, e.g., Bluetooth, IEEE 802.11, and HomeRF.
By way of example, Bluetooth products may be used to provide links between mobile computers, mobile phones, portable handheld devices, personal digital assistants (PDAs), and other mobile devices and connectivity to the Internet. Bluetooth is a computing and telecommunications industry specification that details how mobile devices can easily interconnect with each other and with non-mobile devices using a short-range wireless connection. Bluetooth creates a digital wireless protocol to address end-user problems arising from the proliferation of various mobile devices that need to keep data synchronized and consistent from one device to another, thereby allowing equipment from different vendors to work seamlessly together. Bluetooth devices may be named according to a common naming concept. For example, a Bluetooth device may possess a Bluetooth Device Name (BDN) or a name associated with a unique Bluetooth Device Address (BDA). Bluetooth devices may also participate in an Internet Protocol (IP) network. If a Bluetooth device functions on an IP network, it may be provided with an IP address and an IP (network) name. Thus, a Bluetooth Device configured to participate on an IP network may contain, e.g., a BDN, a BDA, an IP address and an IP name. The term “IP name” refers to a name corresponding to an IP address of an interface.
An IEEE standard, IEEE 802.11, specifies technologies for wireless LANs and devices. Using 802.11, wireless networking may be accomplished with each single base station supporting several devices. In some examples, devices may come pre-equipped with wireless hardware or a user may install a separate piece of hardware, such as a card, that may include an antenna. By way of example, devices used in 802.11 typically include three notable elements, whether or not the device is an access point (AP), a mobile station (STA), a bridge, a PCMCIA card or another device: a radio transceiver; an antenna; and a MAC (Media Access Control) layer that controls packet flow between points in a network.
In addition, Multiple Interface Devices (MIDs) may be utilized in some wireless networks. MIDs may contain two independent network interfaces, such as a Bluetooth interface and an 802.11 interface, thus allowing the MID to participate on two separate networks as well as to interface with Bluetooth devices. The MID may have an IP address and a common IP (network) name associated with the IP address.
Wireless network devices may include, but are not limited to Bluetooth devices, Multiple Interface Devices (MIDs), 802.11x devices (IEEE 802.11 devices including, e.g., 802.11a, 802.11b and 802.11g devices), HomeRF (Home Radio Frequency) devices, Wi-Fi (Wireless Fidelity) devices, GPRS (General Packet Radio Service) devices, 3G cellular devices, 2.5G cellular devices, GSM (Global System for Mobile Communications) devices, EDGE (Enhanced Data for GSM Evolution) devices, TDMA type (Time Division Multiple Access) devices, or CDMA type (Code Division Multiple Access) devices, including CDMA2000. Each network device may contain addresses of varying types including but not limited to an IP address, a Bluetooth Device Address, a Bluetooth Common Name, a Bluetooth IP address, a Bluetooth IP Common Name, an 802.11 IP Address, an 802.11 IP common Name, or an IEEE MAC address.
Wireless networks can also involve methods and protocols found in, e.g., Mobile IP (Internet Protocol) systems, in PCS systems, and in other mobile network systems. With respect to Mobile IP, this involves a standard communications protocol created by the Internet Engineering Task Force (IETF). With Mobile IP, mobile device users can move across networks while maintaining their IP Address assigned once. See Request for Comments (RFC) 3344. NB: RFCs are formal documents of the Internet Engineering Task Force (IETF). Mobile IP enhances Internet Protocol (IP) and adds means to forward Internet traffic to mobile devices when connecting outside their home network. Mobile IP assigns each mobile node a home address on its home network and a care-of-address (CoA) that identifies the current location of the device within a network and its subnets. When a device is moved to a different network, it receives a new care-of address. A mobility agent on the home network can associate each home address with its care-of address. The mobile node can send the home agent a binding update each time it changes its care-of address using, e.g., Internet Control Message Protocol (ICMP).
In basic IP routing (e.g., outside mobile IP), routing mechanisms rely on the assumptions that each network node always has a constant attachment point to, e.g., the Internet and that each node's IP address identifies the network link it is attached to. In this document, the terminology “node” includes a connection point, which can include, e.g., a redistribution point or an end point for data transmissions, and which can recognize, process and/or forward communications to other nodes. For example, Internet routers can look at, e.g., an IP address prefix or the like identifying a device's network. Then, at a network level, routers can look at, e.g., a set of bits identifying a particular subnet. Then, at a subnet level, routers can look at, e.g., a set of bits identifying a particular device. With typical mobile IP communications, if a user disconnects a mobile device from, e.g., the Internet and tries to reconnect it at a new subnet, then the device has to be reconfigured with a new IP address, a proper netmask and a default router. Otherwise, routing protocols would not be able to deliver the packets properly.
For reference, information related to PANA from P. Jayaraman, “PANA Framework,” Internet-Draft, draft-ietf-pana-framework-01.txt, work in progress, July 2004 is incorporated herein in this section. In this regard, PANA is a link-layer agnostic network access authentication protocol that runs between a node that wants to gain access to the network and a server on the network side. PANA defines a new EAP [see B. Aboba, et al, “Extensible Authentication Protocol (EAP),” RFC 3748, June 2004] lower layer that uses IP between the protocol end points. Id.
The motivation to define such a protocol and the requirements are described in Yegin, A. and Y. Ohba, Protocol for Carrying Authentication for Network Access (PANA) Requirements, draft-ietf-pana-requirements-08 (work in progress), June 2004. Protocol details are documented in Forsberg, D., Ohba, Y., Patil, B., Tschofenig, H. and A. Yegin, Protocol for Carrying Authentication for Network Access (PANA), draft-ietf-pana-pana-04 (work in progress), May 2004. Parthasarathy, M., PANA Enabling IPsec Based Access Control, draft-ietf-pana-ipsec-03 (work in progress), May 2004. describes the use of IPsec for access control following PANA-based authentication. IPsec can be used for per-packet access control, but nevertheless it is not the only way to achieve this functionality. Alternatives include reliance on physical security and link-layer ciphering. Separation of PANA server from the entity enforcing the access control has been envisaged as an optional deployment choice. SNMP [see Mghazli, Y., Ohba, Y. and J. Bournelle, SNMP Usage for PAA-2-EP Interface, draft-ietf-pana-snmp-00 (work in progress), April 2004 has been chosen as the protocol to carry associated information between the separate nodes. Id.
PANA design provides support for various types of deployments. Access networks can differ based on the availability of lower-layer security, placement of PANA entities, choice of client IP configuration and authentication methods, etc. Id.
PANA can be used in any access network regardless of the underlying security. For example, the network might be physically secured, or secured by means of cryptographic mechanisms after the successful client-network authentication. Id.
The PANA client, PANA authentication agent, authentication server, and enforcement point have been functional entities in this design. PANA authentication agent and enforcement point(s) can be placed on various elements in the access network (such as, e.g., access point, access router, dedicated host). Id.
IP address configuration mechanisms vary as well. Static configuration, DHCP, stateless address autoconfiguration are possible mechanisms to choose from. If the client configures an IPsec tunnel for enabling per-packet security, configuring IP addresses inside the tunnel becomes relevant, for which there are additional choices such as IKE. Id.
PANA protocol is designed to facilitate authentication and authorization of clients in access networks. PANA is an EAP isee Aboba, B., Blunk, L., Vollbrecht, J., Carlson, J. and H. Levkowetz, Extensible Authentication Protocol (EAP), RFC 3748, June 2004, lower-layer that carries EAP authentication methods encapsulated inside EAP between a client host and an agent in the access network. While PANA enables the authentication process between the two entities, it is only a part of an overall AAA and access control framework. An AAA and access control framework using PANA includes four functional entities, as discussed below and as schematically depicted in FIGS. 1(A) to 1(C). Id.
A first functional entity is a PANA Client (PaC) is the client implementation of the PANA protocol. This entity resides on the end host that is requesting network access. The end hosts can include, for example, laptops, PDAs, cell phones, desktop PCs and/or the like that are connected to a network via a wired or wireless interface. A PaC is responsible for requesting network access and engaging in the authentication process using the PANA protocol. Id.
A second functional entity is a PANA Authentication Agent (PAA) is the server implementation of the PANA protocol. A PAA is in charge of interfacing with the PaCs for authenticating and authorizing them for the network access service. The PAA consults an authentication server in order to verify the credentials and rights of a PaC. If the authentication server resides on the same host as the PAA, an application program interface (API) is sufficient for this interaction. When they are separated (a more common case in public access networks), a protocol is used to run between the two. LDAP [see Hodges, J. and R. Morgan, Lightweight Directory Access Protocol (v3): Technical Specification, RFC 3377, September 2002] and AAA protocols like RADIUS [see Rigney, C., Willens, S., Rubens, A. and W. Simpson, Remote Authentication Dial In User Service (RADIUS), RFC 2865, June 2000] and Diameter [see Calhoun, P., Loughney, J., Guttman, E., Zorn, G. and J. Arkko, Diameter Base Protocol, RFC 3588, September 2003] are commonly used for this purpose. Id.
The PAA is also responsible for updating the access control state (i.e., filters) depending on the creation and deletion of the authorization state. The PAA communicates the updated state to the enforcement points in the network. If the PAA and EP are residing on the same host, an API is sufficient for this communication. Otherwise, a protocol is used to carry the authorized client attributes from the PAA to the EP. While not prohibiting other protocols, currently SNMP [see Mghazli, Y., Ohba, Y. and J. Bournelle, SNMP Usage for PAA-2-EP Interface, draft-ietf-pana-snmp-00 (work in progress), April 2004, has been suggested for this task. Id.
The PAA resides on a node that is typically called a Network Access Server (NAS) in the local area network. The PAA can be hosted on any IP-enabled node on the same IP subnet as the PaC. For example, on a BAS (broadband access server) in DSL networks, or PDSN in 3GPP2 networks. Id.
A third functional entity is an Authentication Server (AS), which is the server implementation that is in charge of verifying the credentials of a PaC that is requesting the network access service. The AS receives requests from the PAA on behalf of the PaCs, and responds with the result of verification together with the authorization parameters (e.g., allowed bandwidth, IP configuration, etc). The AS might be hosted on the same host as the PAA, on a dedicated host on the access network, or on a central server somewhere on the Internet. Id.
A fourth functional entity is an Enforcement Point (EP), which is the access control implementation that is in charge of allowing access to authorized clients while preventing access by others. An EP learns the attributes of the authorized clients from the PAA. The EP uses non-cryptographic or cryptographic filters to selectively allow and discard data packets. These filters may be applied at the link-layer or the IP-layer. When cryptographic access control is used, a secure association protocol needs to run between the PaC and EP. Link or network layer protection (for example, TKIP, IPsec ESP) is used after the secure association protocol established the necessary security association to enable integrity protection, data origin authentication, replay protection and optionally confidentiality protection. An EP should be located strategically in a local area network to minimize the access of unauthorized clients to the network. For example, the EP can be hosted on a switch that is directly connected to clients in a wired network. That way, the EP can drop unauthorized packets before they reach any other client host or beyond the local area network. Id.
Some of the entities may be co-located depending on the deployment scenario. For example, the PAA and EP could be on the same node (BAS) in DSL networks. In that case, a simple API is sufficient between the PAA and EP. In small enterprise deployments, the PAA and AS may be hosted on the same node (e.g., access router) that eliminates the need for a protocol run between the two. The decision to co-locate these entities or otherwise, and their precise location in the network topology are deployment decisions. Id.
Use of IKE or 4-way handshake protocols for secure association has been only required in the absence of any lower-layer security prior to running PANA. Physically secured networks (such as, e.g., DSL) or networks that are already cryptographically secured on the link-layer prior to PANA run (e.g., cdma2000) do not require additional secure association and per-packet ciphering. These networks can bind the PANA authentication and authorization to the lower-layer secure channel that is already available. Id.
The EP on the access network allows general data traffic from any authorized PaC, whereas it allows only limited type of traffic (e.g., PANA, DHCP, router discovery) for the unauthorized PaCs. This ensures that the newly attached clients have the minimum access service to engage in PANA and get authorized for the unlimited service. Id.
The PaC needs to configure an IP address prior to running PANA. After a successful PANA authentication, depending on the deployment scenario, the PaC may need to re-configure its IP address or configure additional IP address(es). The additional address configuration may be executed as part of the secure association protocol run. Id.
An initially unauthorized PaC starts the PANA authentication by discovering the PAA on the access network, followed by the EAP exchange over PANA. The PAA interacts with the AS during this process. Upon receiving the authentication and authorization result from the AS, the PAA informs the PaC about the result of its network access request. Id.
If the PaC is authorized to gain the access to the network, the PAA also sends the PaC-specific attributes (e.g., IP address, cryptographic keys, etc.) to the EP by using SNMP. The EP uses this information to alter its filters for allowing data traffic from and to the PaC to pass through. Id.
In case cryptographic access control needs to be enabled after the PANA authentication, a secure association protocol runs between the PaC and the EP. The PaC should already have the input parameters to this process as a result of the successful PANA exchange. Similarly, the EP should have obtained them from the PAA via SNMP. Secure association exchange produces the required security associations between the PaC and the EP to enable cryptographic data traffic protection. Per-packet cryptographic data traffic protection introduces additional per-packet overhead but the overhead exists only between the PaC and EP and will not affect communications beyond the EP. In this sense, it is important to place the EP as close to the edge of the network as possible. Id.
Finally data traffic can start flowing from and to the newly authorized PaC. Id.
Media-independent Pre-Authentication (MPA) is a mobile-assisted, secure handover optimization scheme that works over any link-layer and with any mobility management protocol. With MPA, a mobile node is not only able to securely obtain an IP address and other configuration parameters from a candidate target network, but also able to send and receive IP packets using the obtained IP address and other configuration parameters, before it attaches to the candidate target network when the candidate target network becomes the target network. This makes it possible for the mobile node to complete the binding update of any mobility management protocol and use the new care-of address before performing a handover at link-layer.
This functionality is provided by allowing a mobile node, which has a connectivity to the current network but is not yet attached to a candidate target network, to (i) establish a security association with the candidate target network to secure the subsequent protocol executions, then (ii) securely execute a configuration protocol to obtain an IP address and other configuration parameters from the candidate target network as well as a tunnel management protocol to establish a bidirectional tunnel between the mobile node and an access router of the candidate target network, then (iii) send and receive IP packets, including signaling messages for binding update of a mobility management protocol and data packets transmitted after completion of binding update, over the tunnel using the obtained IP address as the tunnel inner address, and finally (iv) deleting or disabling the tunnel immediately before attaching to the candidate target network when it becomes the target network and then re-assigning the inner address of the deleted or disabled tunnel to its physical interface immediately after the mobile node is attached to the target network through the interface. Instead of deleting or disabling the tunnel before attaching to the the target network, the tunnel may be deleted or disabled immediately after attached to the target network.
Especially, the third procedure makes it possible for the mobile to complete higher-layer handover before starting link-layer handover. This means that the mobile is able to send and receive data packets transmitted after completion of binding update over the tunnel, while it is still able to send and receive data packets transmitted before completion of binding update outside the tunnel.
In the above four basic procedures of MPA, the first procedure is referred to as “pre-authentication”, the second procedure is referred to as “pre-configuration”, the combination of the third and fourth procedures are referred to as “secure proactive handover.” The security association established through pre-authentication is referred to as an “MPA-SA.” The tunnel established through pre-configuration is referred to as a “proactive handover tunnel.”
In the MPA framework, the following functional elements are expected to reside in each candidate target network to communicate with a mobile node: Authentication Agent (AA), Configuration Agent (CA) and Access Router (AR). Some or all of those elements can be placed in a single network device or in separate network devices.
An authentication agent is responsible for pre-authentication. An authentication protocol is executed between the mobile node and the authentication agent to establish an MPA-SA. The authentication protocol must be able to derive a key between the mobile node and the authentication agent, SHOULD be able to provide mutual authentication. The authentication protocol SHOULD be able to interact with a AAA protocol such as RADIUS and Diameter to carry authentication credentials to an appropriate authentication server in the AAA infrastructure. The derived key is used for further deriving keys used for protecting message exchanges used for pre-configuration and secure proactive handover. Other keys that are used for bootstrapping link-layer and/or network-layer ciphers MAY also be derived from the MPA-SA.
A configuration agent is responsible for one part of pre-configuration, namely securely executing a configuration protocol to securely deliver an IP address and other configuration parameters to the mobile node. The signaling messages of the configuration protocol must be protected using a key derived from the key corresponding to the MPA-SA.
An access router is a router that is responsible for the other part of pre-configuration, i.e., securely executing a tunnel management protocol to establish a proactive handover tunnel to the mobile node, and secure proactive handover using the proactive handover tunnel. The signaling messages of the configuration protocol must be protected using a key derived from the key corresponding to the MPA-SA. IP packets transmitted over the proactive handover tunnel SHOULD be protected using a key derived from the key corresponding to the MPA-SA.
In some of the preferred embodiments described herein, systems and methods are described to proactively establish higher layer and lower layer contexts of different media. Here, media includes, e.g., the available networks accessible to mobile devices (e.g., wired, wireless licensed, wireless unlicensed, etc.). See, e.g., media discussed in I.E.E.E. 802, including I.E.E.E. 802.21. Media may include, e.g., wireless LAN (e.g., I.E.E.E. 802.11), I.E.E.E. 802.16, I.E.E.E. 802.20, Bluetooth, etc. Some illustrative examples include: 1) a mobile device switching from a cellular network to a wireless or WIFI network, such as, e.g., a cell phone with cellular interface and wireless interface trying to get WIFI access by obtaining information (e.g., keys, etc.) initially over the cellular network, rather than simultaneously establishing a wireless interface; 2) where a mobile device currently has wireless or WIFI connectivity, where the wireless LAN may potentially shut down quickly or the like, in which case, by way of example, the mobile device can proactively do pre-authentication via cellular network (i.e., so as to enable a quick switch if needed). In some illustrative cases, a mobile node with a single IEEE 802.xx interface may roam among multiple subnets and multiple administrative domains. While keeping multiple interfaces always-on is an option, a mobile node may want to deactivate unused interfaces in some instances (such as, e.g., to save power, etc.). In addition, MPA can provide, among other things, secure and seamless mobility optimization that works for inter-subnet handoff, inter-domain handoff, inter-technology handoff, etc., as well as the use of multiple interfaces.
The present invention provides a variety of advances and improvements over, among other things, the systems and methods described in the following references, the entire disclosures of which references are incorporated herein by reference.
The present invention improves upon the above and/or other background technologies and/or problems therein.
According to some of the preferred embodiments, a method for proactively establishing a security association between a mobile node in a visiting network and an authentication agent in another network to which the mobile node can move includes: negotiating pre-authentication using a flag in a message header that indicates whether the communication is for establishing a pre-authentication security association; and one of the mobile node and the authentication agent initiating pre-authentication by transmitting a message with the flag set in its message header, and the other of the mobile node and the authentication agent responding with the flag set in its message header only if it supports the pre-authentication. In some examples, the method further includes performing the pre-authentication using a link-layer agnostic network access authentication protocol between the mobile node and the authentication agent at a server on the another network. In some other examples, the method further includes performing the pre-authentication across multiple administrative domains. In some other examples, the method further includes performing the pre-authentication in the framework of media-independent pre-authentication. In some other examples, the method further includes that the visiting network is for a first media and the another network is for a different media, wherein either the first-media is cellular and the different-media is wireless LAN or the first-media is wireless LAN and the different-media is cellular. In some other examples, the method further includes having the other of the mobile node and the authentication agent respond with an error message if it does not support the pre-authentication.
In some other examples, the method further includes employing PANA as the network access authentication protocol. In preferred embodiments, the method includes having the flag include a P-flag in the PANA header. In some examples, the method involves having the mobile node transmit a PANA-PAA-Discover message with a P-flag set to initiate pre-authentication or having the authentication agent transmit a PANA-Start-Request message with a P-flag set to initiate pre-authentication.
According to some embodiments, a mobile node configured to proactively establishing a security association from a visiting network with an authentication agent in another network to which the mobile node can move includes: the mobile node being configured to negotiate pre-authentication using a flag in a message header that indicates whether the communication is for establishing a pre-authentication security association; and the mobile node being configured such that one of the mobile node and the authentication agent initiate pre-authentication by transmitting a message with the flag set in its message header, and the other of the mobile node and the authentication agent responds with the flag set in its message header only if it supports the pre-authentication.
According to some embodiments, an authentication agent configured to proactively establishing a security association with a mobile node from a visiting network while the authentication agent is in another network to which the mobile node can move includes: the authentication agent node being configured to negotiate pre-authentication using a flag in a message header that indicates whether the communication is for establishing a pre-authentication security association; and the authentication agent being configured such that one of the mobile node and the authentication agent initiate pre-authentication by transmitting a message with the flag set in its message header, and the other of the mobile node and the authentication agent responds with the flag set in its message header only if it supports the pre-authentication.
The above and/or other aspects, features and/or advantages of various embodiments will be further appreciated in view of the following description in conjunction with the accompanying figures. Various embodiments can include and/or exclude different aspects, features and/or advantages where applicable. In addition, various embodiments can combine one or more aspect or feature of other embodiments where applicable. The descriptions of aspects, features and/or advantages of particular embodiments should not be construed as limiting other embodiments or the claims.
The preferred embodiments of the present invention are shown by a way of example, and not limitation, in the accompanying figures, in which:
While the present invention may be embodied in many different forms, a number of illustrative embodiments are described herein with the understanding that the present disclosure is to be considered as providing examples of the principles of the invention and that such examples are not intended to limit the invention to preferred embodiments described herein and/or illustrated herein.
In the following discussion, the following terminology is employed.
Access Network: A network through which a PaC can access to the Internet via one or more EPs controlled by one or more PAAs. An access network may consist of multiple IP links.
Local PAA: A PAA (PANA authentication agent) that resides in the visiting network where the PaC (PANA client) is connected. The term “local” is relative to the location of a particular PaC.
Remote PAA: A PAA which resides in a network other than the visiting network. That is, a PAA that is not a local PAA for the PaC. The term “remote” is relative to the location of a particular PaC. A PAA that is a remote PAA for one PaC may be a local PAA for another PaC.
Local PaC: A PaC that resides in the same access network as a particular PAA. The term “local” is relative to the location of a specific PaC.
Remote PaC: A PaC that is not a local PaC for a particular PAA. The term “remote” is relative to the location of a particular PAA. A PaC that is a remote PaC for one PAA may be a local PaC for another PAA.
Active PAA: A local PAA for which the PaC has a PANA session.
Preparing PAA: A remote PAA which performs pre-authentication with the PaC. A PAA that is serving as a preparing PAA for one PaC may be serving as an active PAA for another PaC.
Pre-authentication: In the PANA environment, by way of example, this can involve authentication performed between a PaC and a preparing PAA.
Pre-authentication SA: In the PANA environment, by way of example, a PANA SA (Security Association) that is established between the PaC and a preparing PAA as a result of successful pre-authentication.
Active SA: In the PANA environment, by way of example, a PANA SA that is established between the PaC and the active PAA.
Pre-authorization: In the PANA environment, by way of example, an authorization that is made for the PaC by a preparing PAA as a result of successful pre-authentication.
Post-authorization: In the PANA environment, by way of example, an authorization that was made for the PaC by a PAA that was acting as a preparing PAA and has become the active PAA.
The preferred embodiments, among other things, define an extension to the PANA protocol [I-D.ietf-pana-pana] used for proactively establishing a PANA SA (Security Association) between a PaC in the visiting network and a PAA in another network to which the PaC may move. In the preferred embodiments, the mechanism operates across multiple administrative domains. In addition, the mechanism is preferably used as the authentication protocol in the framework of MPA (Media-independent Pre-authentication) [see I-D.ohba-mobopts-mpa-framework].
When the PaC initiates pre-authentication, it sends a PANA-PAA-Discover message with the P-flag set. The PAA responds with a PANA-Start-Request message with the P-flag set only when it supports pre-authentication. Otherwise, it sends a PANA-Error message with a new Result Code “PANA_HDR_BIT_UNSUPPORTED”.
When the PAA initiates pre-authentication, it sends a PANA-Start-Request message with the P-flag set. The PaC responds with a PANA-Start-Answer message with the P-flag set only when it supports pre-authentication. Otherwise, it sends a PANA-Error message with a new Result Code “PANA_HDR_BIT_UNSUPPORTED”.
Once the PaC and PAA have agreed on performing pre-authentication during discovery and handshake phase, the subsequent PANA messages exchanged between them must have the P-flag set.
The PANA protocol [see I-D.ietf-pana-pana] carries EAP messages between a PaC (PANA Client) and a PAA (PANA Authentication Agent) in an access network. If the PaC is a mobile device and is capable of moving one access network to another while running its applications, it is desired for the PaC to perform a handover seamlessly without degrading the performance of the applications during the handover period. When the handover requires the PaC to establish a PANA session with the PAA in the new access network, the signaling to establish the PANA session should be completed as fast as possible.
There is an optimization method based on Context Transfer Protocol (CTP) [see I-D.ietf-seamoby-ctp] to reduce the signaling delay for establishing a PANA session with a new PAA upon a handover [see I-D.ietf-pana-mobopts][see I-D.bournelle-pana-ctp].
The CTP-based method has a number of issues, including the following deficiencies. First, it is not readily applicable to handovers across multiple administrative domains since having a security association between PAAs in different administrative domains is practically difficult. Second, even within a single administrative domain, the CTP-based method is difficult to work when the previous and new access networks have different authorization characteristics, such as, e.g., on use of NAP and ISP separate authentication. Third, the CTP-based method relies on deriving the PANA_MAC_Key used between the PaC and the PAA in the new access network from the AAA-Key used between the PaC and the PAA in the previous access network, which does not provide sufficient cryptographic separation between the PAAs.
To address the issues on the CTP-based method, the preferred embodiments provide an extension to the PANA protocol [see I-D.ietf-pana-pana] used for proactively executing EAP authentication and establishing a PANA SA between a PaC in an access network and a PAA in another access network to which the PaC may move. In the preferred embodiments, the method operates across multiple administrative domains. In addition, the method is preferably used as the authentication protocol in the framework of MPA (Media-independent Pre-authentication) [see I-D.ohba-mobopts-mpa-framework].
Although the present methods can cover cases that are also covered by the CTP-based method (i.e., homogeneous authorization characteristics in a single administrative domain), in some preferred embodiments, the present methods do not replace the CTP-based method. Instead, in some preferred embodiments, the present methods are employed in cases that are not covered by the CTP-based method—such that, for cases covered by the CTP-based method, the CTP-based method can be used.
As indicated above, a PaC that supports pre-authentication may have one or more PANA sessions for preparing PAAs in addition to the PANA session for one of local PAAs. As also expressed above, there may be a number of ways to discover a remote PAA, however, remote PAA discovery and remote PaC discovery is out of the scope of this proposal. In addition, there may be a number of criteria as to when and with which remote PAA pre-authentication is performed. Such criteria depends on circumstances and can be implementation specific.
Pre-authentication may be initiated by both a PaC and a preparing PAA. As discussed above, in the preferred embodiments, a new flag P-flag is defined in the PANA header. When pre-authentication is performed, the P-flag of PANA messages are set in order to indicate whether this PANA run is for establishing a pre-authentication SA. In the preferred embodiments, pre-authentication is negotiated in the PANA discovery and handshake phase as follows.
When the preparing PAA becomes an active PAA due to movement of the PaC, the PaC performs an IP address update procedure using PANA-Update exchange in order to update the PAA with the PaC's new address obtained from the remote network where the PAA resides. The completion of the PANA-Update procedure will change the pre-authentication SA to the active SA. The P-flag is not set in the PANA-Update messages and subsequent PANA messages.
When the PaC having an active SA with an active PAA as well as a pre-authentication SA with a preparing PAA changes its active PAA but without changing the preparing PAA, the PaC performs an IP address update procedure using PANA-Update exchange in order to update the PAA of the PaC's new address obtained from the remote network where the new active PAA resides. The completion of the PANA-Update procedure will not change the pre-authentication SA to the active SA. The P-flag is set in the PANA-Update messages and subsequent PANA messages.
The pre-authentication SA and corresponding PANA session between the PaC and the pre-authenticated PAA can be deleted by entering the termination phase of the PANA protocol and performing the required procedure for that phase.
For reference, an illustrative and non-limiting example call flow for a PaC-initiated pre-authentication is shown in
For reference, another example call flow for PAA-initiated pre-authentication is shown in
As discussed above, in the preferred embodiments, a new P-flag is defined in Flags field of PANA header. In this regard,
Authorization and Accounting Considerations:
In some cases, a pre-authorization and a post-authorization for the PaC may have different authorization policies. For example, the pre-authorization policy may not allow the PaC to sent or receive packets through the enforcement points (EPs) under control of the preparing PAA, while both the pre-authorization and post-authorization policies may allow installing credentials to the EP(s), where the credentials are used for establishing a security association for per-packet cryptographic filtering. Depending on the pre-authorization policy, the PAA that has a pre-authentication SA for a PaC may start accounting immediately after the pre-authentication SA is established or may not start accounting until the pre-authentication SA becomes the active SA.
In the preferred embodiments, since the mechanism described in this document is designed to work across multiple access networks, each EP (Enforcement Point) should be configured to allow PANA messages to be forwarded between a PaC and a preparing PAA in a different access network only if the PaC has an active SA with a local PAA in order to avoid an unauthorized PaC to initiate pre-authentication. When pre-authentication is initiated by a remote PAA, it is possible that the PaC simultaneously communicates with multiple remote PAAs initiating pre-authentication. In the preferred embodiments, in order to avoid possible resource consumption attacks on the PaC caused by a blind attacker initiating pre-authentication for the PaC by changing source addresses, the PaC should limit the maximum number of PAAs allowed to communicate.
Broad Scope of the Invention:
While illustrative embodiments of the invention have been described herein, the present invention is not limited to the various preferred embodiments described herein, but includes any and all embodiments having equivalent elements, modifications, omissions, combinations (e.g., of aspects across various embodiments), adaptations and/or alterations as would be appreciated by those in the art based on the present disclosure. The limitations in the claims (e.g., including that to be later added) are to be interpreted broadly based on the language employed in the claims and not limited to examples described in the present specification or during the prosecution of the application, which examples are to be construed as non-exclusive. For example, in the present disclosure, the term “preferably” is non-exclusive and means “preferably, but not limited to.” In this disclosure and during the prosecution of this application, means-plus-function or step-plus-function limitations will only be employed where for a specific claim limitation all of the following conditions are present in that limitation: a) “means for” or “step for” is expressly recited; b) a corresponding function is expressly recited; and c) structure, material or acts that support that structure are not recited. In this disclosure and during the prosecution of this application, the terminology “present invention” or “invention” may be used as a reference to one or more aspect within the present disclosure. The language present invention or invention should not be improperly interpreted as an identification of criticality, should not be improperly interpreted as applying across all aspects or embodiments (i.e., it should be understood that the present invention has a number of aspects and embodiments), and should not be improperly interpreted as limiting the scope of the application or claims. In this disclosure and during the prosecution of this application, the terminology “embodiment” can be used to describe any aspect, feature, process or step, any combination thereof, and/or any portion thereof, etc. In some examples, various embodiments may include overlapping features. In this disclosure, the following abbreviated terminology may be employed: “e.g.” which means “for example;” and “NB” which means “note well.”


text:
How long does prednisone take to work for migraine
Take the Atopic Eczema (Atopic Dermatitis) Quiz to learn. As a generic prednisone in india href="http://bayavenuegallery.com/get-prednisone-online/" title="Prednisone online sales">prednisone online sales take result of work expedited metabolism, the drug how may work get cleared quicker from systemic take circulation.. Prednisone long is similar to glucocorticoids that take occur naturally in work the body. The American Academy of prednisone Dermatology take recommended stretches for you how and take your prednisone 5mg for budget or travel with. Keloid A keloid is a scar that doesn't know when to stop. Search for questions, still looking for answers? Responses (1 search for questions, still looking for answers? If you work feel suicidal at all during withdrawal, for make sure you talk to a professional about. 173 doctors shared insights work Clonidine is an addiction reducing agent which is a kind of prednisone psychiatric drug and prednisone a blood pressure drug which is a kind of does cardiovascular drug.Read more 188 doctors shared insights Clonidine is an addiction. Look work out for subtle how signs that it's is working, such as your husband migraine is having slightly less pain or a bit more energy. Multiple long Sclerosis Early Symptoms and Signs (Early, Body Areas Affected) Multiple sclerosis (MS) symptoms vary from person to person, and can last for days to months prednisone cost without periods of remission. If you have experienced withdrawal long from Prednisone or are currently going through withdrawal, feel free to share your experience in how the comments section below. It's very hard to watch your loved one being so much pain. Co-ingestion of an oral contraceptive along with Prednisone increases peak serum concentrations and its elimination half-life. Take this quiz to learn the three conditions that make up the pulmonary disease called. It will take some time before these homeostatic levels are reestablished. Diarrhea : Some people report diarrhea when they first come off of this drug. Aseptic Necrosis Aseptic necrosis (avascular necrosis or osteonecrosis) develops when blood supply diminishes to an area of bone and causes bone. Tonsillitis is a common infection, especially in kids. 1 doctor how agreed: 11 1 doctor agreed: On Zoloft (sertraline)?: If you stay on it they probably will continue. Asthma Quiz: Test Your Medical IQ Asthma is a chronic disease of the airways of the lungs, which can be managed with proper treatment. Acidic) can impact the speed by which drugs are cleared from the body.. Chronic Bronchitis (Symptoms, Causes, Treatment, Remedies) Chronic bronchitis is a cough that occurs daily with production of sputum that lasts for at least three months, two years. In other words, after stopping Prednisone, it takes time for the wreckage to get fixed (adverse effects to subside).. On average, it takes up to 17 hours to eliminate Prednisone from systemic circulation, and up to 20 hours to clear prednisolone, not everyone fits for the average clearance duration.. Time Span, how long have you taken Prednisone? You may feel very depressed in conjunction with significantly low levels of energy. In general the longer you are on this particular steroid, the longer its going to take your body to readjust to functioning without. If they become too intense, you should consider tapering more gradually. Also the florinocide cream that I have used for only 8 days seems to have cause skin thinning already. Other substances that induce or enhance CYP3A4 function are thought to expedite clearance of prednisolone.. Scleroderma Scleroderma is an autoimmune disease of the connective tissue. How long does Prednisone stay in your system how after stopping? Typically, a juvenile xanthogranuloma is firm and dome-shaped. However a problem with phosphate dihydrate deposits in the joint. Cognitive behavioral therapy for can be especially helpful prednisone in learning to cope with a chronic illness. My husband was diagnosed with RA about 9 months ago, and he is having a horrible time! It's hard to get your hopes up and have them dashed again and that contributes to depression. Headache, Nausea, insomnia, dizziness, appetite changes, anxiety, restlessness, Side effects disappear in 1 to 2 wks, depending on the dose and the duration of treatment. Cystic does Acne how Cystic acne is distinguised by painful nodules on the chest, face, neck, and back. What are the symptoms of Crohn's disease? Asthma in Children Asthma in children manifests with symptoms such as coughing and wheezing. This prednisone means that Prednisone remains in a persons for body for a longer total duration.. Migraine headaches, tension headaches. However, just because take you no longer have prednisone circulating throughout your bloodstream certainly doesnt mean you should be feeling 100 better.. So far he has had three shots, but the flares are continuing. This joint pain is caused by lack of natural cortisol production. Addison's Disease Addison disease is a hormonal (endocrine) disorder involving destruction of the adrenal long glands (small glands adjacent to the. Therefore it is important to gradually wean off of this drug to give your adrenal glands some time to pick back up with natural production. However, post-conversion to prednisolone, its half-life is extended between 2 to 4 hours.. I feel like I've been hit by a truck. Vasculitis (Symptoms, Causes, Diagnosis, Treatment, Types) Vasculitis (arteritis, angiitis) is a general term for a group of uncommon diseases which feature inflammation of the blood. Although work it increases blood pressure while taking it, many people experience rapid reductions if they discontinue too quickly. Pericarditis (Symptoms, ECG, Types, Causes, Treatment) Pericarditis is the inflammation of the pericardial sac that surrounds the heart. This medicine is secreted in breast milk and can cause side effects in infants who are nursing. Since treatment-induced adverse effects can linger well-after a person has discontinued treatment, many wonder for whether prednisone is still in their system after stopping and for how long. Fatigue : Most people end up having to deal migraine with extreme levels of fatigue and low energy when they quit this drug. Get the latest information on causes of eczema and skin rash. Stay away from the following are like adding morphine and that is what gives you to suffer from this and you eat. Labyrinthitis (Inner Ear Inflammation) Symptoms, Causes, Contagious, Treatment Cure Labyrinthitis is inflammation of the labyrinth (the part of the ear responsible for balance and hearing). When the cells keep on reproducing, the result is an overgrown migraine (hypertrophic). This is just your bodys way of reacting to functioning without a drug that it has received constantly over an extended term. Pulmonary fibrosis can be caused by many conditions including chronic. Source:.gov/compound/prednisone, source:.gov/compound/prednisolone, variables for that influence how long Prednisone stays in your system. Tonsillitis is caused by viruses and bacteria how like the flu and herpes. Sacroiliac Joint Dysfunction (SI Joint Pain) Sacroiliac joint (SI) dysfunction how is a general term to reflect pain in the SI joints. Symptoms of the inflammation of the colon lining include. If severe, take call your family doc for an antihistamine recommendation or try one over the counter, like Benadryl or loratidine. I have washed everything and I am no longer in the area of the country where I developed. Suicidal thoughts : When you first quit taking this drug, you may notice that your depression becomes overwhelming to the point of triggering suicidal thoughts. Body mass : Generally, the greater a persons body mass relative to the dose of prednisone they ingest, the quicker theyre able to excrete.. Skin rash migraine : In some cases a person may develop a skin rash when they first quit taking Prednisone. In other words, the adrenals are no longer producing sufficient levels of cortisol because long they have become accustomed to receiving the Prednisone. It should take your body a few weeks and/or for months to fully recover from feeling very week and achy. See 1 more doctor answer 2 doctors agreed: 10 2 doctors agreed: Emsam: This question gets a little tricky because Emsam is a patch and elimination can be delayed because of tissue uptake of the drug. Also understand that you may not experience every symptom listed below and that the intensity of withdrawal will likely differ based on individual circumstances. Henoch-Schonlein Purpura Henoch-Schonlein purpura (HSP or anaphylactoid purpura a type of blood vessel inflammation, results in rash, arthritis, and. Though Prednisone itself isnt take significantly affected by ingestion of other drugs, the metabolite prednisolone could be excreted at a much slower pace.. Prednisone Withdrawal Symptoms: List of Possibilities. 4 doctors agreed: 7 4 doctors agreed: 1 doctor agreed: 8 1 doctor agreed: Hopefully : Within a week. Assuming you ate a large meal with your final dose of Prednisone, realize that it may not be excreted as quickly as had you taken it in a fasted state. The side effects should be reduced and gone in the time it takes to leave your body - usually a few days. 20 An hour or so: It starts to take affect in about half an hour and peaks in a couple of hours. See 1 more doctor answer 447 doctors shared insights is an alpha 2 adrenergic agonist used in the management of mild to moderate hypertension and as an analgesic in the management of sympathetically maintained pain.Read more 1 doctor agreed. That's 1 half life. It's also known as relapsing febrile. That said, due to its short half-life, the drug should be out of systemic circulation within 24 hours of your final dose.. Details: How long does it take once you stop Prednisone for the side effects to go away? Leukemia Leukemia is a type of cancer of the blood cells in which the growth and development of the blood cells are abnormal. See 2 more doctor answers 14 Not sure: Usually as soon as you stop the medication. In other words, the greater the dose of Prednisone youre taking, the longer you can expect the metabolite prednisolone to linger in your system.. Certain individuals believe that the drug could accumulate in a persons body with higher doses as well.. The rash is getting worse and I am on the end of the predisone (single pill days). Steroid Drug Withdrawal Corticosteroid drugs such as prednisone and prednisolone are commonly used to treat asthma, allergic reactions, RA, and IBD. Though other research suggests that prednisone doesnt significantly alter absorption times, it should be considered that food could have a slight effect does on systemic clearance. Prednisone is part of a group of medications called glucocorticoids. Source:.gov/pubmed/22777155, source:.gov/pubmed/4639403. If you are only on this drug for a couple weeks, you should have a much easier time coping with the withdrawal compared to someone on it for months and/or years. Picture of Juvenile Xanthogranuloma This is a common and completely benign cutaneous nodule. Take this Ulcerative Colitis Quiz. Atopic Eczema (Atopic Dermatitis) Quiz: Test Your Skin Disorders IQ Does dry, itchy, flaky, scaly, red, inflamed skin sound familiar to you? Acidify urinary pH : To ensure the fastest possible systemic clearance of Prednisone, prednisolone, and other metabolites manipulating urinary pH may be helpful. Optic Neuritis Optic neuritis is inflammation of the optic nerve, the structure that connects the eye to the brain. Although Prednisone can be a life saving drug when used to treat certain conditions, others that are on it for a less-significant condition long may be extremely unhappy with the drugs side effects. Work closely with your doctor, follow guidelines, get plenty of rest, take and lay low as your body and mind recover. Copd (Chronic Obstructive Pulmonary Disease) Symptoms, Causes, Stages, Life Expectancy copd or chronic obstructive pulmonary disease is a lung condition caused by smoking tobacco, exposure to secondhand smoke, and/or. Granulomatosis with Polyangiitis Granulomatosis with polyangiitis is a condition that usually affects young or middle-aged adults, is an inflammation of the. Other effects and adverse events include glaucoma, cataracts, obesity, facial hair growth, moon face, and growth retardation in children.
- Prednisone samples
- Generic prednisone in canada
- Buying generic prednisone
- Brand prednisone professional
- Prednisone express delivery
Brand prednisone professional
Contraindications norvasc is brand contraindicated in patients with known sensitivity to professional amlodipine. Your doctor or pharmacist can give you a list of professional professional these ingredients. Systolic pressure professional is also required to be lowered though a top priority is focused on diastolic pressure. In short-term trials of prednisone patients without clinically significant heart or peripheral vascular disease, there was no apparent association between peripheral edema and cardiovascular complications such prednisone as hypertension or congestive heart failure. Labor groups representing port workers noted that Foss Maritime is employing more than 400 people already to service professional the Shell fleet. Patients with renal failure may therefore receive the usual initial dose. Lyrica sold in the.S. Capsule, pfizer Limited, generic : Pregabalin 823.08 150mg 10 Capsules, medindia currently has information on 3060 generic drugs and 110,004 brands that have professional their prices listed. Most adverse reactions reported during therapy with norvasc were of mild or moderate severity. Ex vivo studies have shown that approximately 93 of the circulating drug is bound to plasma proteins in hypertensive patients. Generic sildenafil is covered by brand most Medicare and insurance plans, but some pharmacy coupons or cash prices may be lower. Read More At brand 54 he has put on 100 lbs since 2006 and is very tired all the time - can not do a flight of stairs without being winded. Data Animal Data No evidence of teratogenicity or other embryo/fetal toxicity was found when pregnant rats and rabbits were treated orally with amlodipine maleate at doses up to 10 mg amlodipine/kg/day (approximately 10 and 20 times the mrhd based. "FDA approves tadalafil for pulmonary arterial hypertension". If you have an allergy to amlodipine or any other part of Norvasc (amlodipine). If you have any questions about norvasc, ask your doctor. The estimated background risk of major birth defects and miscarriage for the indicated population is unknown. Responders to placebo in an initial one-week run-in phase were not randomized into subsequent phases of the study. As norvasc is highly protein bound, hemodialysis is not likely does prednisone help nerve pain to be of benefit. Pregabalin does not bind to plasma proteins. Keep lyrica and all medicines out of the reach of children. I watched for a rebound but my bp and pulse were within a normal range for a few weeks without them. Don't expect to obtain radiographs. Effects on diastolic pressure were similar in young and older patients. References: professional How Does Accutane Work? Three lyrica treated subjects had events reported as rhabdomyolysis in premarketing clinical trials. Storage Conditions for Lyrica (150 mg) Store it in a closed container at room temperature. RepublicCook IslandsCosta RicaCroatiaCubaCyprusCzech Rep. QTY: 42 grams.07 per pill or unit.00, free Shipping. Ships Worldwide except Canada from Canada, India, Turkey,. In humans, experience with intentional overdosage of norvasc is limited.
If you only took this medication for samples a prednisone short period of time, tapering may not be necessary. This little number was adapted from an old college favorite and spruced up slightly for a delicious samples family lunch or dinner. In 2002 a Headstart program was started with 2 classes that displaced the prednisone athletic programs. The cost for prednisone oral solution (5 mg/mL) is around 118 samples for a supply of 30 milliliters, depending on the pharmacy you visit. Drop in at Joppa Flats for an up-close winter wildlife experience! Since somebody was really using their. Its super easy, pretty. May 12, 2018 Enjoy the annual spring performance of students from the Kerrville School of Dance Saturday, May 12 at.m. Have you been-there-done-that samples with most of the leprechaun tricks out there? In 2003 Pre-school expanded to prednisone 12 classes and Headstart ended. Parenting is FUN, and hard. Join the fun at a local sugar house for Annual Maple Weekend! Our Easter haul was easily accessible. There are plenty of trails to check out in New Hampshire. Water management includes programming each prednisone sprinkler zone for a demanded precipitation rate and continually adjusting each zones run time as needed to meet the daily irrigation demand, scheduling irrigation days around events, canopy or site samples rentals and maintenance. It all began in the summer of 1967 when the building, prednisone owned by Rona samples Plastics, was loaned at no cost to the Plainfield Recreation Department for a summer Recreational Experimental Project. This prednisone price guide is based on using the m discount card which is accepted at most.S. This event HAS passed. . Valentines Day is around the corner and Im in the mood to get prednisone totally corny samples on my kids with this festive food. Heres a favorite recipe that tastes just like a milkshake but is actually healthy. AIS recognizes that each property is unique, even under identical weather conditions, and having on site periodical water management is crucial to the Smart Controller being applied to its greatest effectiveness. Need a Valentines Day gift idea for the one you love? Another opportunity to feel insecure about your creative parenting skills because your kids Valentines Day cards are store-bought (me). Patricks Day is coming so its time to get your fill of green samples food. Try out this super simple and delicious recipe thats sure to please. Do you ever crave milkshakes but just cant stand the guilt?! Macaroni and Cheese has been a favorite of kids (and grown-ups) for generations. Skate through the history of Strawbery Banke with us on Sunday, February 24, at 1:00 pm at Puddle Dock in Portsmouth,. It is important to talk to your medical provider before employing the tapering method. Go ahead, everybodys doing. In 1977 the program was moved to the present location at 935 South 2nd Street with four classes and a swimming pool in the basement, boxing and martial arts samples on the top floor. I was given this Beef Stew recipe from. Im not talking about putting saran wrap over the toilet bowl.
Prednisoneout of 5
based on 127 votes

domain: medical


text:
Jeanne Cooley Greeley Thayer: A Life of Wanderlust, Art & Family
Jeanne Thayer never felt comfortable on a pedestal, ever since she was a young girl, too tall and lanky to feel like she belonged at the center of attention. Modesty followed her like a shadow, from her self-perceived awkwardness of youth into the awareness of her own privilege as a young adult. She lived a remarkable life and it took 90 years of reflective thought and emotional processing to get her to admit that.
Jeanne Cooley Greeley Thayer, an actress and longtime philanthropist that made an impact on both the arts scene along the South Coast and in New York City, passed away on July 6, 2021, at the age of 103.
Jeanne’s life wove together three long generations of American history, ultimately spilling into a fourth. She was born in 1917, near the end of the First World War, at the end of the age of empires and the dawn of a globalized modern era. The Ottoman Empire still existed as a world power. During her childhood, she would get a chance to explore many cultures, as her family finally enjoyed peace after a terrible war. Jeanne’s father, Kenton Cooley, was conscripted into U.S. Army service and remained as a career officer after the end of the war. The military would relocate Kenton often and his family would move with him, allowing them to lead an abnormally adventurous lifestyle.
In 1924, Kenton Cooley sailed his family to the Hawaiian island of Oahu, where, as a first lieutenant, he reported to Schofield Barracks, a sizeable military base near Honolulu. Hawaii proved placid, the family’s time there a blissful combination of exploration and creativity. Jeanne’s parents considered Hawaii to be a safe place for the children to explore on their own. Jeanne and her sister, Kathleen, along with a childhood friend, would often travel to an orchard in the coastal village of Wahiawa, where they would lie beneath the trees and eat guavas in the shade.
Jeanne witnessed the landing of the first trans-Pacific flight, flown from Oakland, California, and landing on a field transformed into a makeshift airstrip in Hawaii. She recalled how her father woke her in the middle of the night so that they could go watch the plane land. He explained to her how important this event would be in the history of aviation. Jeanne never forgot that moment. Mostly, she remembered Hawaii as her first taste of a culture other than her own, and how this rich experience gifted her with a sense of wonder at such an early age.
Military life rotated the Cooleys back to the United States but allowed Kenton some time to give his children a solid taste of genuine Americana, to see the seemingly endless swath of land that stretched between the two coastlines. At a time before paved highways, they drove over 2,000 miles across the country on dirt roads toward Columbus, Ohio. The car could only travel around 40 miles per hour, and Jeanne recalled that theirs was often the only vehicle in sight. They had to carry extra gas and water given the general lack of reliable filling stations. They were on their own in the middle of the empty West. Jeanne remembered how often they would have to mend their tires due to the bumpiness of the road; Kenton would patch the tires himself with a kit he had purchased before the trip.
During Jeanne’s early adolescent years, the U.S. Army transferred Kenton Cooley and his family to Paris. Jeanne considered herself fortunate to be living abroad during this time. It was the late 1920s, after all, and the United States economy was rapidly slipping into a Great Depression. Europe remained mostly immune from the economic disparities ravaging the United States. Paris was flush with life and prosperity and Jeanne, who became deeply enamored with French culture, paid little mind to what her parents were doing.
In Paris, Jeanne found a world suddenly available to her. She picked up the language and learned her way around the streets. She and her sister would spend a lot of time unsupervised, as they had been in Hawaii, playing with the neighborhood children and exploring the city.
While political conflict escalated in Europe, Jeanne continued living a relatively carefree life, pursuing her interests and exploring new places. In 1936, she convinced her parents to let her move to New York City to pursue an acting career. She had just graduated high school and her father wanted her to attend college. He yielded to his daughter’s desires and sent her to New York. Kenton agreed to support Jeanne for the first three months, but, if she failed to find a steady job by then, she would be sent back to finish college.
This is how Jeanne came to find herself alone in New York City at the tender age of 17. She initially found a job as a department store model. Back then, if a patron was interested in a garment, a store employee would model the garment on request. Admittedly, this was not exactly the line of work Jeanne was interested in doing. Thankfully, however, her sympathetic boss afforded Jeanne extended lunch breaks during which she could visit local casting directors in hopes of landing a role in one of the local shows — which she did, including a role on The Woman.
She would eventually meet her first husband, Horace Greeley, an officer at West Point, a man that she fell deeply in love with, who led his unit in World War II.
Impacted by War
Jeanne served as an analyst for the Informational Intelligence Unit of the Air Transport Command in Washington, D.C., before mourning the death of Horace, killed as a prisoner of war in Bataan.
Jeanne spent years in a cramped building with no heat in the winter, nor air-conditioning in the summer. Life changed drastically during the war. Washington, D.C. flooded with people waiting to be deployed. A visceral sense of urgency and fear fueled their work; people slept fleetingly and lived together communally. They pooled what little resources they had in order to enjoy rare moments of peace and happiness, while the specter of war loomed just beyond the horizon.
The carefree life Jeanne had experienced as a child, and which had been fostered by her parents, was over. But her exposure to the depravity of war, the death of culture, and the glorification of destruction brought about by it, fueled Jeanne’s desire to perpetuate the arts, to seek beauty, and to never forget the inherent innocence and nobility of the human spirit.
A Familiar Life Returns
Before she became a grieving widow, Jeanne had encountered Walter Thayer as a civilian conducting business in London, utilizing military planes to transport urgent reports to and from Europe. Jeanne would ensure that their pilots delivered his parcels and letters, transported unofficially aboard warplanes heading to London from Washington, D.C. After the end of the war, Walter courted Jeanne, enticing her with an invitation to dinner at an upscale restaurant, to which he offered to escort her in his privately-owned automobile. It didn’t hurt his case that gasoline was still being rationed.
Walter wanted to start a law firm in New York, and Jeanne was ecstatic over the idea. She still had many old connections from her acting days before she’d met Horace. Walter was well connected, too. With some help, he started a firm that quickly proved to be a success, complete with partners and clients whose names read like a roster of the city’s most respected and influential people. Jeanne cherished Walter as a man incapable of dissimulation, a genuine champion for the truth, a character whose evident traits explained both his professional success and long-lasting relationships with friends and partners in New York and Washington, D.C.
Jeanne and Walter had three children. With two young girls and a baby boy, they moved out to the country, where, in Rye, New York, they found more space and a peaceful place for the children to grow. It was the first period of calm she had enjoyed since her childhood in Hawaii. Yet, while she appreciated the family-oriented opportunities offered by suburban life, Jeanne always longed for the city. She shared a deep connection with New York. It was part of her sense of identity. When the children reached their teens and began going off to boarding school, Jeanne and Walter moved back to the Big Apple.
Regaining the lifestyle she had lived before moving to Rye, Jeanne frequented lectures at the Museum of Modern Art every Saturday, including those by her favorite speaker, Claude Marks, who she described as having an encyclopedic knowledge of art and history. Jeanne was back in her element, learning more about the topics that had once inspired her and, of course, making many new friends along the way. Walter was on the board of the Museum of Modern Art and Jeanne would volunteer there as often as possible. She also became one of three women on the Board of Trustees for the State University of New York.
She was also a member of the Westchester Council of the Arts, the Council at the College of Purchase, and, later, a member of the Board of Trustees of the State University of New York. Two fellowships are given in her honor, in fine and performing arts, both of which are still awarded to graduating students at SUNY.
Beyond her service to academia, Jeanne remained committed to other organizations of the arts, participating on the boards of the New York City Ballet, Sleepy Hollow Restorations (now Historic Hudson Valley), and was a Life Trustee of the Museum of Modern Art, with which she served on many committees, including the International Council. Jeanne was also the first woman to give the commencement address at Attica Correctional Facility as a trustee with SUNY.
A New Home
When Walter passed away in 1989, Jeanne took his place on the Board of Trustees for the Museum of Modern Art. She remained in New York for five years after his death before deciding to leave New York City in favor for a quiet corner in Southern California, the chosen home of her son, Tom. Montecito would provide a new style of life away from the bustle of New York. Jeanne found the 1994 move to be bittersweet, appreciating the quiet beauty of Montecito while still missing the vivaciousness of New York City. Still, she quickly became involved in groups and organizations that brought her the same pleasure, being a part of the things that mattered to her. Most notably, she contributed often to Lotusland, the Santa Barbara Symphony, and the Music Academy of the West.
From New York to California, between galleries and gardens, Jeanne sought beauty and found it often. She continued to share that beauty with those around her. She was a treasure and inspiration to friends and family alike. She was caring and dedicated as a wife and mother. She imparted her love for the arts, travel, and the importance of education to all her children and grandchildren.
In the words of her granddaughter, Kate O’Shaughnessy, “She held every person she ever met with unconditional positive regard. She had the grace of a ballerina and the mind of a scholar.”
Jeanne is survived by her children Tom Thayer, Gail Reagan, Susan Noble, and Ann Thayer, 10 grandchildren, and 10 great-grandchildren.

domain: library


September 20, 2017
In the latest update from scandal-wracked Xerox, the company is taking civil action against its former New Zealand-based senior executives. In a new statement by Fuji Xerox today the office products company has revealed it is taking civil action against its former senior executives in the wake of the NZ$480 million ($354 million/ €295 million) […]
September 9, 2016
The Vybrant 1800, which is “driven by the patent Fujifilm technology”, is designed for high quality and affordability that will please Indian customers, prints at “20 sq/metres per hour”, and “runs on Peizo drop-on-demand technology”.
October 6, 2015
January 7, 2014


text:
At the Circulating Library Title Information: The Old Lieutenant and his Son
Author and Title: Norman MacLeod. The Old Lieutenant and his Son
First Edition: London: Alexander Strahan, 1862. 2 volumes, post 8vo., 12s.
Serialization: Good Words, May 1861 to December 1861 (monthly)
References: BL; EC
- Search for title at The Online Books Page (please note: the search will take you out of At the Circulating Library)

domain: literature


text:
Made this a couple of months back but I never got round to taking pictures.
Overall the pattern was super easy to follow and I was able to finish it in a day.
I decided on a medium weight denim a…
Wanted a quick elasticated wait skirt from some pretty fabric I found and this is what I made :)
My friend gave me a dress and top she didn’t wear anymore and I felt like the dress needed an update, not to mention lengthening. I almost flashed when trying it on!
So using the top I c…
See how Burda members are styling pants for summer.
Meg's Magazine Mash Up
See how one of our editors gets her inspiration.
Take off with pleats, cut-outs, insets, and futuristic prints.
Fashion & Trends
The best patterns and styling tips for this summer's top pants trend.
Pattern of the Week
A tank silhouette with elasticated waist is a carefree take on the Little Black Dress
You must allow our "request for permission" request to login to Burdastyle with Facebook.

domain: design


text:
Photo gallery: One Day Closer returns!
For the past two years, the pandemic made it necessary to postpone the annual One Day Closer event held by the Rogel Cancer Center. But with restrictions easing this year, One Day Closer returned for a very successful virtual and in-person event on Saturday, March 19.
Sarah Hawley, Ph.D., M.P.H., associate director for the Training, Education, and Career Development (TrEC) program at the Rogel Cancer Center said, “Our team was thrilled to be able to offer the One Day Closer Program this year to engage students in our community to learn more about the Rogel Cancer Center, and about possible careers in science and medicine.”
The goal of One Day Closer is to involve the Rogel Cancer Center community in helping inspire area high school students to become future scientists and develop an interest in cancer research, care and prevention. Sixty high school students joined the event’s on-site and virtual programs that included a career panel discussion as well as hands-on activities.
Students in person participated in lab tours organized by Noah Puleo, a Ph.D., student in the Molecular and Cellular Pathology program, saw a head and neck oncology demonstration lead by Joshua Smith, M.D., and took a zebrafish lab tour led by Kelsey Temprine, Ph.D.
In addition to the career panel discussion, virtual students were shipped science kits prior to the program so they could also have a hands-on experience with the zebrafish lab. Temprine had designed a similar virtual lab experience in 2021 for the Developing Future Biologists and used it as a basis for this year’s event.
A post-event survey of student attendees indicated that an overwhelming majority were more interested in a career in research and/or medicine after attending One Day Closer.
Rachael Privett, administrative specialist for the TrEC program said, “One Day Closer was truly a team effort. It was remarkable to work with our event volunteers as they came together to create and execute this inspiring event for high school students. This event helped build partnerships with high schools in Washtenaw and Wayne County, and we look forward to seeing this program grow in the future.”
If you are interested in helping with next year’s event, please reach out the TrEC team at firstname.lastname@example.org. You can also find more information about the event at https://rogeltrainees.med.umich.edu/trainees/k-12/one-day-closer

domain: news


text:
Last year the County of Orange released the Draft Environmental Impact Report (EIR) for the proposed Esperanza Hills project during the holidays. Today, they released the Final EIR for the project. A public hearing with the County Planning Commission has been scheduled for Wednesday, December 17, 2014 at 1:30 PM. We find this outrageous that the County expects us to give up Christmas and family time (again) for this poorly planned project.
Please take the following immediate actions:
1. Email County Supervisor Todd Spitzer and protest the Commission meeting date. Specifically ask that the meeting be delayed until the new Planning Commission is seated and educated on this project after the New Year.
2. Post your request on his Facebook page as well.
3. Donate to support our work to stop this project
4. Plan to attend the hearing on December 17 at 1:30 PM.
To: Todd Spitzer, County Supervisor,
Please do not build additional homes in Yorba Linda, You do not have the water, roads, or the support of the tax paying residents & citizens to approve this project. This proposed development stinks of a money grab between local, county governments, and developers……lord knows they are not rich enough yet.
Planning the hearing @ 1;30pm on December 17th was clever, most residents have businesses or jobs and it will be difficult to attend….please delay the meeting!!! You were elected to serve the needs and wishes of the residents of Y.L…….please hear us

domain: politics


text:
Since the Public Television of Armenia is choosing the candidate to represent Armenia at the 2013 Eurovision, contest’s official website said “one of the persistent rumours is that Sirusho might represent Armenia.”
The article mentions recalls that Sirusho has recently released her new single Pre-Gomesh which yielded 560.000 views during the first three weeks of publication
“It might indeed be a continuation of the Qélé Qélé story, the song title of which was taken from the works of Komitas, a famous Armenian artist: Pre-Gomesh, too, is influenced by Komitas' works. The buffalo (Gomesh) has an allegorical meaning, representing hard work, strong will, and justice.”
The website also quotes head of the Armenian delegation Gohar Gasparyan, claiming they continue discussing the candidates.
“Anyone can be our representative for Malmö, including Sirusho, we are still discussing,” she said.
NEWS.am STYLE reached Sirusho’s manager Arevik Udumyan for comments. The rumors are circulated every year, she said, noting these are “pleasant rumors”.
2013 Eurovision Song Contest will take place in Malmö, Sweden.
11:08, January 19Kim Kardashian slams Lamar Odom for visiting brothels
14:04, January 18Armenian community honors Grammy nominees Mansurian and Orbelian
13:21, January 18The last 5 songs of Depi Evratesil revealed
13:02, January 18Styled by Anna Trevelian - Ashley Graham goes topless for V Magazine shoot
11:02, January 18Beyonce and Jay Z give Kim and Kanye’s new baby £15k diamond encrusted bracelet
14:05, January 17
Hollywood sex scandals and Armenian show business. Street poll by NEWS.am STYLE
13:23, January 17Mher, Hasmik Shiroyan and another 3 participants represent their songs for Depi Evratesil
10:05, January 17Enrique Iglesias and Anna Kurnikova show their twins for the first time
21:28, January 16
Kim Kardashian and Kanye West welcome baby girl via surrogate
19:19, January 16Depi Evratesil reveals another 5 songs of this years' competition
19:10, January 16Cindy Crawford’s supermodel daughter Kaia to release her first collection with fashion titan Karl Lagerfeld
11:34, January 16Dolores O'Riordan's sudden unexplained death makes her albums sales grow online

domain: entertainment


text:
Taiwan is taking a significant step towards achieving a circular economy with the establishment of its first recycling plant for lithium-ion batteries (LIBs) in Taoyuan.
UWin Resource Regeneration’s facility focuses on recycling LIBs, including those used in electric vehicles and various portable devices. The rising volume of discarded batteries in Taiwan has necessitated sustainable recycling solutions to avoid environmental pollution.
UWin’s green-chemistry technique offers a safer and more efficient discharging process, while hydrometallurgy extracts valuable metals without toxic effluent.
The plant aims to produce high-purity lithium carbonate for the local LIB supply chain, contributing to the country’s environmental goals and reducing CO2 emissions associated with battery manufacturing.

domain: chemistry


text:
China Currency Exchange Bill
The first step for the economic war against China is arranged by the American politicians. The politicians are looking for a way to geth jobs back to the USA, especially for there voters.
The American politician say that by subsidysing the Yuan China is hurting there honestly and hard working voters. However, they forget that the Chinese government is one of the biggest holders of American Government debt.
The global movement of job migration is is something that is not a new issue. Mexico is recognised as a outsourcing country for American jobs. However, Mexico is loosing jobs to countrys like China, India, Pakistan, Vietnam and in the future Africa.
The trend is not new and the American politicians are starting a economic war with China ons this method. Something that is not smart, to start a fight with your financiers unless you are planning to go bankrupted. But the American politician are planning for that.
The subsidy of a your local currency is not something news. The Swiss are doing it, Japan, China, USA, UK etc. also. Only question is how will win this war, especially what can be achieved if everyone is doing it.
Next to this subsidy the politician oversee the fact that, according to IBM, the western economys are loosing 5% of the jobs by technology, innovation etc. 5% Annually they will loose, with no option of going back. Those jobs are mostly reduced by the lower wage jobs.
It is time for the American politician to understand that they are not the boss in the world and that it is a negative idea to start a (economic) war against there financier.


text:
You can hear this week’s reviews below or to check out more film reviews, click here.
This week’s reviews include;
Cruella – When Estella stumbles into a job with 1970s fashion mogul The Baroness, she thinks she has the perfect job. That is until she discovers her employer has a secret. This brings out a dark side to Estella.
Earwig and the Witch – An orphan girl, Earwig, is adopted by a witch and comes home to a spooky house filled with mystery and magic.
Tom & Jerry: The Movie – Tom and Jerry have both been thrown out of their places to live. They travel to New York City where they end up living in a very elegant hotel that is about to host the celebrity wedding of the year.
Initiation – Whiton University unravels the night a star-athlete is murdered, kicking off a spree of social media slayings that force students to uncover the truth behind the school’s hidden secrets and the horrifying meaning of an exclamation point.
Film Reviews & Movie News:
Just the reviews:
To listen to Stewart’s full show click here.
For more of Stewart’s shows, interviews, poems and reviews, to submit your music for airplay or to check out Stewart’s comedy and books visit www.stewartpink.com.


text:
All-natural old world flavor. No wheat. Low sodium. Excellent for all meats, seafood & vegetables. Over 50 easy recipes at www.sebastianos.info. No sugar. No MSG. Made in the USA.
3.5 oz (99 g) x 6
40 per pack
Best Cutlets & Coatings Ever!!!! Flour your favorite item, dip in beaten egg, coat both sides with mix lightly pressing with finger tips. Saute until light golden brown. Rub for Grilling/Broiling: Brush meat/fish/vegetables with olive oil, sprinkle or rub with mix. Sprinkle to Taste: Substitute for seasoning in favorite recipes. Add to eggs, veggies, pasta, rice, soups & dips. Best if refrigerated after opening and used by date shown.
Designated trademarks and brands are the property of their respective owners. The products and claims made about specific products on or through this site have not been evaluated by SanaSana.com or the United State Food and Drug Administration and are not proposed to diagnose, treat, cure or prevent disease. Read More >

domain: food


text: Adjacent to the vast Pacific Ocean, San Francisco is considered to be one of the most popular tourist destination in the world. With its majestic vistas, rolling hills, and famous land marks, San Francisco is home to such attractions as the Golden Gate Bridge, Alcatraz Island, and its famed cable cars. During the early mornings, fog may blanket the city leaving only the apex of the towers of the Golden Gate Bridge visible; as the day goes on, the fog begins to dissipate leaving amazing views of the cityscape. San Francisco is home to 800,000 plus residents consisting of diverse cultures and ethnicities. Many of the top restaurants and bars in the world can be found on this peninsula. INNsight.com invites you and your family to the beautiful city of San Francisco.

domain: geography


text:
Sausalito Necklace Pattern PDF
This pretty necklace design was inspired by a trip to the beautiful Californian city of Sausalito, mixing a gentle sophistication with a touch of bohemian quirkiness.
Constructed using Petersburg chain for the necklace with a rosette centrepiece from which hangs a pretty teardrop shaped lampwork bead.
The pattern comes with step by step instructions and illustrations to help you complete the design.
Available as a PDF download.
This piece is best suited to an intermediate/advanced skill level.
Up to 24"/60 cm using given quantities
- 11/0 seed beads (XXg)
- 8/0 seed beads (Xg)
- 6mm beads (XXg)
- Dropper Bead (1)

domain: hobby