Alcatel Lucent

Lucent Technologies Inc.

Alec Brusilovsky

Violeta Cakulev

Douglas William Varney

Ajay K Jain

Vijay Kumar Gurbani

Frank Alfano

Sarvar M Patel

Warren A Montgomery

Michael Arthur McGrew

Samar Basu

Janusz Dobrowolski

Tania Godard

Eric Christopher Lawson

Techniques are disclosed for use in securing communications in environments comprising hybrid communication systems. For example, a method comprises, in a hybrid communication system wherein at least one computing device is configured to selectively operate in a first communication mode or a second communication mode, preventing the at least one computing device from completing an attachment process in the first communication mode when it is determined that authentication data being used to authenticate the at least one computing device in the first communication mode was generated for an authentication process in the second communication mode.

Prevention of eavesdropping type of attack in hybrid communication system

Techniques are provided for handling of a first type call as it affects an authentication procedure in a communication network. For example, it is assumed that, in a communication network, a first computing device comprises user equipment and a second computing device comprises an authentication function for authenticating the user equipment. Thus, a method comprises receiving at the second computing device from the first computing device an authentication rejection message, receiving at the second computing device from the first computing device a first type call indicator message, and making a decision regarding proceeding with or dropping an authentication procedure for the first computing device at the second computing device based on the receipt of the authentication rejection message and the first type call indicator message.

Emergency call handling in accordance with authentication procedure in communication network

Techniques are disclosed for provisioning mobile devices in a network operator-neutral manner in communication networks. For example, a method comprises a mobile device that is operator neutral attaching to a first operator network, and the operator neutral mobile device establishing a provisioning bearer in the first operator network.

Network operator-neutral provisioning of mobile devices

Techniques are disclosed for managing one or more public keys used for verification of one or more messages transferred over a communication network associated with a public warning system. In one example, a method comprises the following steps. A computing device of a communication network obtains key material for at least one source of a message generated for a public warning system. The computing device also obtains an identity of the source. A public key is computed by the computing device from the key material and the identity of the source. The public key is thus useable by the computing device to verify a message received from the source that is digitally signed using a corresponding private key of the source. In one example, the computing device comprises user equipment.

Management of public keys for verification of public warning messages

Techniques are provided for handling of an emergency call as it affects an authentication procedure in a communication network. For example, it is assumed that, in a communication network, a first computing device comprises user equipment and a second computing device comprises an authentication function. Thus, a method comprises the following steps. A first type call indicator message is received at the second computing device from the first computing device. A decision is made to proceed with or drop an authentication procedure for the first computing device at the second computing device based on the first type call indicator message. The second computing device may enable a first type call to be placed for the first computing device. The first type call may be an emergency call.

A method performed in a third computing device comprises: receiving a request from one of a first computing device and a second computing device; and in response to the request, facilitating establishment of a security association between the first computing device and the second computing device such that the first computing device and the second computing device can then facilitate establishment of a security association between first user equipment and second user equipment. The first computing device, the second computing device and the third computing device comprise at least a part of a key management hierarchy wherein the first computing device and the second computing device are on a lower level of the hierarchy and the third computing device is on a higher level of the hierarchy. The first and second computing devices are configured to perform a key management function for respective first and second user equipment.

Hierarchical key management for secure communications in multimedia communication system

Example embodiments provide a method for performing handovers and key management while performing handovers. The method includes communicating a random handover seed key protected by a secure protocol from a core component of a network to a user equipment. The secure protocol prevents the random handover seed key from being learned by base stations supported by the core component of the network. The secure protocol may be non-access stratum signaling of an evolved packet system environment for wireless communications.

Systems and method for performing handovers, or key management while performing handovers in a wireless communication system

A method of administering network selections for a mobile station between a second generation/third generation wireless network and wireless local area networks includes detecting when the mobile station encounters a wireless area network, and communicating an identity of the encountered wireless area network to the second generation/third generation wireless network. The communicating prompts a query for permission to establish a session between the mobile station and the encountered wireless local area network. When permission is granted, the method includes receiving a key distributed to the mobile station. The key is used by the mobile station to establish a session between the mobile station and the encountered wireless local area network.

Selection of networks between WLAN and 2G/3G networks based on user and provider preferences

The instant presence system authoritatively determines the present communication location of a subscriber, who may be at any of a number of possible locations. When the subscriber changes their location, they can use a subscriber communication device that is operational at their new location to update their point of presence on the telephone communication network. The instant presence system enables the communication network to complete a communication connection from a calling party to the called party with certainty. The calling party therefore can reach the called party with certainty by simply dialing a single listed directory number associated with the called party, relying on the instant presence system to complete the call connection to the called party, regardless of the present location of the called party.

Instant presence system for a guaranteed call connection

PSTN Internet Notification (PIN) services that can be provided as part of interconnecting IP and Public Switched Telephone Network (PSTN) systems with the intent of converging existing and creating new hybrid PSTN and IP services. PSTN Events Notification, based on well-defined PIN protocols, will promote interoperability of both the networks and systems built by different vendors.

PSTN-internet notification services

A communication system utilizes an open system network protocol, such as the Transmission Control Protocol/Internet Protocol (TCP/IP), to transport Intelligent Network signaling messages from an SS7 network to a service provider which is not directly linked to the SS7 network. A gateway/bridge is provided between the SS7 network and a network which operates in accordance with an Internet protocol to transform Internet protocol messages, such as TCP/IP format messages, into SS7 format, and vice versa. In this way, an Internet protocol network may be used to transport Intelligent Network signaling messages between an SS7 network and a non-SS7 network service provider.

Growing community of inventors

Naperville, IL, United States of America

Alec Brusilovsky