Huawei Technologies Co., Limited

Bidi Ying

Hang Zhang

Xu Li

The present invention provides systems and methods and apparatuses for user plane handling. An aspect of the disclosure provides a method of user plane handling. Such a method includes sending, by a first user plane entity, to a second user plane entity, a trigger message for changing the user plane handling for a protocol data unit (PDU) session. Another aspect of the disclosure provides a method of using a shared tunnel. Such a method includes receiving from a reception tunnel by a first user plane entity a tunnel packet including a tunnel header and a data packet. Such a method further includes routing, by the first user plane entity to a second tunnel using information in the tunnel header without processing the data packet.

Systems and methods for user plane handling

There is provided an authentication method and system where protection of user equipment (UE) privacy and network security can be improved. The system includes a third party communicatively trusted by and connected to the UE and one or more network entities, the third party configured to obtain identity information indicative of identity of the UE or the network entities and verify the UE and the network entities on whether the UE and the network entities are authorized to perform communications in the communication network. The third party is further configured to create mapping information, the mapping information including mappings between each identity indicated by the identity information and a respective temporary authentication identifier (ID) and according to the mapping information, transmit the respective temporary authentication ID to each of the UE and the network entities that are verified successfully by the third party. The system further includes the one or more network entities to which the UE is authenticated to access, each of the network entities configured to communicate with the UE or other network entities based on their respective temporary authentication ID.

Authentication method and system

Systems and methods for key management. An aspect of the disclosure provides for a key management system including an authenticating function, a key-management function, and at least one function. The system provides for separation of authentications and key-management functions. The authenticating function configured for receiving an authentication request associated with a terminal device (TD), authenticating the request, and sending an authentication response to the at least one function. The key-management function configured for receiving a key request associated with the TD, generating a key according to the key request, and sending the key to the at least one function. The at least one function configured for receiving a request for service, sending, to the authenticating function, the authentication request, and receiving, from the authenticating function, the authenticating response.

System and a method for securing and distributing keys in a 3GPP system

A system supporting a networked database service includes a controller configured to receive one or more data request and authenticate the one or more data request. A gateway (GW) in communication with the controller, is configured to receive at least one of the one or more data request from the controller, perform data classification on data received in the request, and generate a cryptographic key based on the data classification, a hardware-protected key of the GW, and a second (encryption) key. The cryptographic key is for accessing a database. The controller and the GW are operated by different parties.

Growing community of inventors

Ottawa, Canada

Bidi Ying