Nokia Technologies Oy

Alcatel Lucent

Nokia Solutions and Networks Oy

Evolium S.a.s.

Nokia of America Corporation

Bruno Landais

Laurent Thiebaut

Saurabh Khare

Devaki Chandramouli

Alessio Casati

Nicolas Drevon

Anja Jerichow

Georgios Gkellas

Thomas Belling

Deborah L Barclay

Nagendra S Bykampadi

Lu Tian

Prashanti Das

Philippe Godin

Peter Leis

Ulrich Wiehe

Harish Viswanathan

Sudeep K Palat

Sung Hwan Won

Vincent Muniere

Richard P Ejzak

Gyorgy Tamas Wolfner

Subramanya Chandrashekar

Ömer Bulakci

Curt C Wong

Silke Holtmanns

Srinivasan Selvaganapathy

Klaus Hoffmann

Konstantin Livanos

Hannu Petri Hietalahti

Markus Isomäki

Christian Mannweiler

Miikka Juhana Poikselka

Jennifer Liu

Hannu Flinck

Fernando Cuervo

Dinh Thai Bui

Michael F Dolan

Chaitanya Aggarwal

Alistair Urie

Hakon Helmers

Jean-Michel Pugeat

John Matthew Gafrick

Jani Ekman

David Navrátil

Shubhranshu Singh

Horst Thomas Belling

Narasimha Rao Pulipati

Alex Moukalled

Yannick Lair

Thomas Theimer

Tuomas Niemela

Vesa Pauli Hellgren

Ioannis Mouroulis

Rasik Kachhla

Stanislas Bourdeaut

Tomas S Young

György Tamás Wolfner

Jens Gebert

Markus Sakari Isomäki

Didier Feron

Juergen Hofmann

Eric Desorbay

Omar Elloumi

Raghuram Reddy Krishnamurthy

Jean-Jacques Trottin

Richard Vetter

Mu He

Sreejesh Sreekumar

Bivudendu Pratap Rout

Rekha Bharathi Somashekar

Minisha Das

Praveen Muley

Diwakar Jois

Erwan Duval

Philippe Bellec

William Ye

Gerard Pouplin

Mike Aguilar

Jian J Lu

Claude Jacob

Gabriel Linden

Keith Drage

Michael Francis Dolan

Pranav Dhekane

Surong Zeng

William Stoecklin

Tomas Young

Apparatuses and methods for providing services in a communication system are disclosed. A request for a service provided by a service function entity in a network system is received, wherein the request indicates an identity of a user for which the service is requested. An identity of a group of service function entities capable of serving the user and determined based on the identity of the user is then provided, and an indication of the determined identity of the group is sent in the response for subsequent use by the sender of the request and/or at least one other entity involved in requests for services associated with the user.

Group identities in a communication system

It is provided a method comprising at least one of a) and b): a) monitoring whether a service request to produce a producer service is received and producing the producer service if the service request is received, wherein the producer service is a service produced by the access network; and b) consuming a producer service from a core network or an access network, wherein the producer service is consumed by an access network.

Access network with service-based interfaces

Embodiments of the present disclosure relate to methods, apparatuses and computer readable storage media for hop-by-hop security. A proposed method comprises receiving, at a first apparatus and from a second apparatus associated with a first network function, a message directed from the first network function to a second network function, the message comprising a first signature and network function information, the network function information at least comprising identification information of the first network function; in accordance with a successful validation of the first signature, updating the message with a second signature specific to a service communication proxy implemented by the first apparatus; and transmitting the updated message to a third apparatus associated with the second network function, the updated message comprising at least the second signature and the network function information.

Enhanced hop by hop security

According to an example aspect, there is provided a method, comprising: receiving, by a service communication proxy from a network function consumer, a service request for a service by a network function producer, transmitting, in response to an error in obtaining an access token from a network repository function on the basis of the service request, a response to the service request to the network function consumer, wherein the access token is for authorizing access to a service at the network function producer and the response is indicative of an access token error.

Network function request error handling

An apparatus and method can include monitoring whether a consumer of a target network receives a resource identifier, a first apiRoot identifying a producer, and a second apiRoot identifying the producer and a producer network. The first apiRoot is for routing a service request to the producer, and the second apiRoot is for routing the service request to the producer if the target network is different from the producer network. The method further comprises identifying the producer network based on the second apiRoot, and deciding whether the target network is different from the producer network. If the target network is not different from the producer network, the service request is sent wherein the resource is identified by the first apiRoot and the identifier. If the target network is different from the producer network, the service request is sent wherein the resource is identified by the second apiRoot and the identifier.

NF service producer's URIs for inter-PLMN mobility

There is provided a method, computer program, and apparatus for a network repository function that causes the network repository function to: alter, for a second network function, a value of an attribute in a network profile associated with said second network function; and signal, to a first network function, an identifier for said second network function in addition to an said altered value of said attribute, based on a first request for discovery from said first network function, wherein said network profile comprises an indication of a service and/or an attribute of said second network function.

Apparatus, methods, and computer programs

Systems, methods, apparatuses, and computer program products for implementing a physical service communication proxy domain A method may include interconnecting a first network element with one or more service communication proxy domains, each associated with one or several internet protocol addresses or fully qualified domain names used for the interconnection. The method may also include registering the first network element with a network repository function by sending a service operation to the network repository function. Further, the service operation may include profile information of the first network element. In addition, the profile information may include one or more service communication proxy domains, each associated with one or several internet protocol addresses or fully qualified domain names.

Physical service communication proxy domain

There is provided a method, computer program, and an apparatus for a network function that causes the network function to: receive, from a service consumer, event subscription information comprising an intra-domain address and an inter-domain address for signalling event subscription notification information from a service producer to the service consumer; determine whether a first service producer is located in the same domain as the service consumer; select at least one of the inter-domain address and the intra-domain address to signal to the first service producer in dependence on said determining; and signal the selected at least one address to the first service producer.

The disclosure relates to a first apparatus comprising at least one processor and at least one memory including computer code for one or more programs, the at least one memory and the computer code configured, with the at least one processor, to cause the apparatus at least to: send (), to a second apparatus, a request comprising information indicating a list of public land mobile network identifiers identifying a first public land mobile network supported by the first apparatus, and information to derive a second public land mobile network supported by the second apparatus; and receive (), from the second apparatus, a response comprising information indicating a list of public land mobile network identifiers identifying the second public land mobile network supported by the second apparatus.

Apparatus, method, and computer program

A plurality of interworking functions, which provide interworking between a communication network acting as an access network and a non-public network, is associated with a plurality of sites or network slices hosted by the non-public network (S). A user equipment is configured to select an interworking function of the plurality of interworking functions based on information on a site or network slice the user equipment is associated with, of the plurality of sites or network slices (S).

Non-3GPP interworking function (N3IWF) selection for stand-alone non-public networks (SNPN)

There is provided an apparatus comprising: means for providing, to a network repository function, a discovery request comprising a preferred locality query parameter, wherein the preferred locality query parameter comprises a plurality of location descriptions, and means for receiving, from the network repository function, a response to the discovery request, wherein the response comprises one or more service producers that match the preferred locality query parameter.

Method, apparatus and computer program

There is disclosed an apparatus. The apparatus comprises means for performing: initiating establishment of an N32-c transport layer security connection with an entity, the apparatus located in a first public land mobile network and the entity located in a second public land mobile network; sending from the apparatus to the entity on the N32-c transport layer security connection an N32-c handshake signalling message comprising domain name information of the apparatus to be used by the entity for establishing an N32-f transport layer security connection towards the apparatus; receiving a reply from the entity, the reply comprising domain name information of the entity to be used by the apparatus for establishing the N32-f transport layer security connection towards the entity; and using the domain name information received in the reply to establish the N32-f transport layer security connection towards the entity.

Inter-PLMN communication

There are provided measures for enforcement of maximum number of admitted terminals per network slice. Such measures exemplarily comprise receiving a packet data connection related request concerning a network slice being configured with a maximum number of terminals to be admitted to said network slice, maintaining a counter indicative of a number of terminals admitted to said network slice based on said packet data connection related request, and transmitting a response to said packet data connection related request.

Enforcement of maximum number of admitted terminals per network slice

A method, apparatus and computer program product are provided herein to provide a Protocol Data Unit (PDU) session priority parameter. For example, a method is provided that comprises identifying a need in a user equipment (UE) for establishing a new protocol data unit PDU session. The method also includes evaluating whether to establish a new PDU session and determining whether to establish a new PDU session based on a PDU session priority parameter when a maximum number of PDU sessions the UE can establish in the network is reached.

Method and apparatus for admission control of sessions based on priority

It is provided a method comprising: inquiring a repository function to provide identifications of all producers registered in the repository function and satisfying a query condition; receiving or obtaining the identifications of all the producers registered in the repository function and satisfying the query condition upon the inquiring; requesting, using the received or obtained identifications, each of the producers to provide a service.

Communication between CN and AN

Growing community of inventors

Pleumeur-Bodou, France

Bruno Landais