Telefonaktiebolaget Lm Ericsson (publ)

Amine Boukhtouta

Stere Preda

Daniel Migault

Fereydoun Farrahi Moghaddam

Richard Joseph Brunner

Adel Larabi

Wubin Li

A method for steering an original packet transmitted by a UE. The method includes receiving a first packet, wherein the first packet encapsulates the original packet. The method also includes extracting networking information (e.g., IP source, IP destination, tunnel identifier) from the first packet. The method also includes generating an SFC header (e.g., an NSH header), wherein the SFC header comprises: i) an SPI that identifies a service path and ii) metadata, wherein the metadata comprises the networking information extracted from the first packet. The method also includes generating a second packet comprising the SFC header and the original packet. The method also includes providing the second packet to an SFF that is configured to select a service path based on the SPI included in the SFC header of the second packet and forward the second packet based on the selected service path.

Radio access network (RAN) architecture

Systems and methods for maintaining privacy of security protocol parameters are provided. A node receives an encrypted packet and determines if the Security Parameters Index (SPI) value has been updated. The node can modify its stored SPI value(s) accordingly and process the encrypted packet.

IPsec privacy protection

Apparatuses and methods are disclosed for enabling signalling storm mitigation in Internet Protocol (IP) Security (IPsec)-secured virtual Radio Access Network (vRAN). In one embodiment a method in a first network node includes receiving a trigger to establish an IPsec session with a second network node, the IPsec session being associated with a user equipment (UE); responsive to the trigger to establish the IPsec session associated with the UE, derive a unique identifier for the UE; generate a Security Parameter Index (SPI) value based at least in part on the unique identifier derived for the UE, the SPI value being unique to the IPsec session; and communicate an indication of the SPI value to the second network node.

Signalling storm mitigation in a secured radio access network

A technique for monitoring activity in a content delivery network is disclosed. A method implementation of the technique is performed by a monitoring component associated with the content delivery network and comprises extracting (S), from one or more event logs of the content delivery network, a plurality of IP addresses and a plurality of events associated with the plurality of IP addresses, obtaining (S) geolocation information for each of the plurality of IP addresses, generating (S), for each of the plurality of IP addresses, a geohash based on the geolocation information, grouping (S) the plurality of IP addresses by their geohash to determine a plurality of geohash groups representative of IP addresses having a same geohash, creating (S) a geohash index including, for each of the plurality of geohash groups, the geohash of the respective geohash group along with a number of IP addresses included in the respective geohash group and cumulative event information associated with the IP addresses of the respective geohash group, and monitoring (S) activity in the content delivery network based on the geohash index.

Growing community of inventors

Montreal, Canada

Amine Boukhtouta