Nokia Technologies Oy

Intel Deutschland Gmbh

Bo Bjerrum

Markus Staufer

Troels Emil Kolding

Claudio Rosa

Samantha Caporal Del Barrio

Rainer Liebhart

Sumesh Parameswaran Nair

Frank Frederiksen

Laurent Thiebaut

Simon Svendsen

Anja Jerichow

Saurabh Khare

Faranaz Sabouri-Sichani

Christian Rom

Bent Henneberg Rysgaard

Lianghai Ji

Betsy Covell

Roberto Maldonado

Stig Blücher Brink

Rafhael Medeiros De Amorim

Amol Dhere

Morten Toft

Vladimir Vukadinovic

Erika Portela Lopes De Almeida

Mohamed Amin Nassar

Pallab Gupta

Thomas Rosted Jensen

Kari Niemelä

Johannes Hejselbaek

Techniques for managing user equipment policy data in a communication network environment are disclosed. For example, techniques are provided for managing user equipment policy data to be sent to user equipment by protecting the user equipment policy data in a communication network to which the user equipment is subscribed (e.g., a home communication network) such that the user equipment policy data can be sent to the user equipment through a communication network to which the user equipment is attached (e.g., a visited communication network) in a secure manner.

Secure user equipment policy data in a communication network environment

Techniques are disclosed for security management during an onboarding process for user equipment. For example, from a perspective of an onboarding network, a method comprises authenticating, via the onboarding network, user equipment based on an onboarding record previously configured for the user equipment or a set of user equipment and maintained by the onboarding network. Upon successful authentication, a communication session is established from the onboarding network to a provisioning server for remote provisioning of the user equipment. Advantageously, the onboarding process is performed without a default credential server.

Authentication between user equipment and communication network for onboarding process

According to an example aspect of the present invention, there is provided an apparatus comprising at least one processing core, at least one memory including computer program code, the at least one memory and the computer program code being configured to, with the at least one processing core, cause the apparatus at least to transmit, by a user equipment, a concealed identifier of the user equipment to an onboarding network, wherein the concealed identifier of the user equipment indicates that the user equipment is requesting unauthenticated access to the onboarding network and execute, by the user equipment, a key generating authentication protocol to access the onboarding network without performing authentication of the user equipment.

Enhanced onboarding in cellular communication networks

According to an example aspect of the present invention, there is provided a method comprising, embedding information for time synchronization to a SSB, encrypting the SSB and transmitting in a cellular communication network the encrypted SSB comprising the information for time synchronization.

Time synchronization in cellular communication networks

There are provided measures for handling of paging messages in communication endpoint to network relaying scenarios. Such measures exemplarily comprise, at a relay terminal connected to a mobile access entity of a cellular network systems, selecting, for a terminal to be relayed, a sidelink communication group of a set of configured sidelink communication groups, monitoring network-served paging indicator resources corresponding to said terminal to be relayed for a network-served paging related identifier indicative of transmission of a network-served paging message and information on network-served paging message resources for said transmission of said network-served paging message, transmitting, if said network-served paging related identifier indicative of transmission of said network-served paging message is detected in said network-served paging indicator resources corresponding to said terminal to be relayed and information indicative of paging of said terminal to be relayed is identified in said network-served paging message transmitted in said network-sewed paging message resources as a result of said monitoring, in inter-terminal paging indicator resources configured for said sidelink communication group and next to said network-served paging message resources including said information indicative of paging of said terminal to be relayed, an inter-terminal paging related identifier indicative of transmission of an inter-terminal paging message and information on inter-terminal paging message resources for said transmission of an said inter-terminal paging message, and transmitting said inter-terminal paging message in said inter-terminal paging message resources for said transmission of said inter-terminal paging message.

Handling of paging messages in communication endpoint to network relaying scenarios

There is disclosed methods, apparatuses and computer program products for an authentication procedure in a unicast device to device communication. In accordance with an embodiment the method comprises receiving from an initiating device a request to establish a unicast device to device communication between the initiating device and a target device; sending from the target device an authentication request to the initiating device for authenticating the initiating device; receiving from the initiating device an authentication response to the authentication request including one or more parameters related to the authentication; providing information of the one or more parameters to the application; examining by an application in the target device whether the one or more parameters can be accepted; and if the examining reveals that at least one of the one or more parameters cannot be accepted, sending an authentication failure message to the initiating device.

Method, apparatus and computer program product for authentication procedure between devices

According to an example aspect of the present invention, there is provided method, comprising: generating a first key based on a first input specific to a mobile device, wherein the first input comprises measurement of mutable code of the mobile device and a unique device secret, generating a symmetric second key on the basis of the first key and a second input specific to the mobile device, and generating authentication credentials on the basis of the second key for authenticating the mobile device to a mobile communications network.

Cryptographic key generation for mobile communications device

An apparatus, a method and a computer program is described comprising: receiving a plurality of synchronisation symbol blocks; classifying the received synchronisation symbol blocks based on delay relative to an expected reception time; and identifying one or more candidate line of sight paths on the basis of the delay relative to the expected reception time.

Path discrimination

Systems, methods, and software of directly connecting a SIM-less device with a cellular network. In one embodiment, User Equipment (UE) includes a Subscriber Identity Module (SIM) provisioned with a plurality of subscription profiles for subscriptions to the cellular network. The UE establishes a direct communication with a SIM-less device that does not have a subscription with the cellular network. The UE selects one of the subscriptions provisioned in the SIM as a temporary subscription assigned to the SIM-less device to allow the SIM-less device to establish a direct connection with the cellular network using the temporary subscription, and transmits a message to the SIM-less device via the direct communication containing subscription credentials for the temporary subscription. The SIM-less device may therefore register with the cellular network using the subscription credentials provided by the UE, and establish a direct connection with the cellular network using the temporary subscription.

Connection between sim-less device and cellular network

An authentication device may be provided. The authentication device may include a memory configured to store: a first public key; and first data signed using a first private key corresponding to the first public key, the signed data including a second public key. The authentication device may further include a first verification circuit configured to verify the first data using the first public key; and a second verification circuit configured to verify second data using the second public key, the second data signed using a second private key corresponding to the second public key.

Authentication devices, key generator devices, methods for controlling an authentication device, and methods for controlling a key generator

Growing community of inventors

Nibe, Denmark

Bo Bjerrum