Telefonaktiebolaget Lm Ericsson (publ)

Daniel Bergström

Stefan Wänstedt

Peter Ökvist

Tommy Arngren

Bernard Smeets

Tomas Thyni

Andreas Kristensson

Johan Kristiansson

Håkan Englund

Anders Landström

Jonas Lundberg

David Lindero

Nicklas Sandgren

Patricia Togård

Tomas Thyni Thyni

A method is executable by a first communication device, where the method comprise listening to satellite transmissions, which is transmitting conditions for allowing the first communication device to exchange data with a second communication device, recognizing conditions for allowing exchange of data between the first and the second communication devices, determining requirements for data exchange under the mentioned conditions, and determining according to the conditions, a time interval within which the second communication device is expected to be located within device-to-device, D2D, communication range of the first communication device, after which data is exchanged between the first and the second communication device, within the determined time interval.

Method and arrangements for providing satellite controlled data exchange

The application discloses methods and corresponding systems and network devices and/or nodes for enabling user equipment belonging to a home network to access data communication services in a visited network of a wireless communication system. By way of example, there is provided a method that comprises the step of obtaining at least one cryptographic token originating from a network node of the home network of the user equipment and cryptographically signed by a private key associated with the home network, wherein the at least one cryptographic token represents means for accessing data communication services via user data transport functions of the visited network. The method also comprises cryptographically signing the obtained and signed token by a private key associated with the user equipment to generate a double-signed token, and sending the double-signed token to a network node of the visited network, which validates the double-signed token for enabling the user equipment to access data communication services via the user data transport functions of the visited network.

Trusted solutions for enabling user equipment belonging to a home network to access data communication services in a visited network

It is provided a method for enabling a user device to verify data integrity. The method is performed in a network node and includes: obtaining measurement data indicating resource usage by the user device; obtaining a session identifier; generating a measurement indicator using a one-way function, based on the measurement data; generating an asymmetric cryptographic signature of the session identifier and the measurement indicator, the asymmetric cryptographic signature being based on a private key of a cryptographic key pair of the network node; and storing, in a distributed ledger database, a set of data comprising the asymmetric cryptographic signature, the session identifier and the measurement indicator.

Verifying data integrity

It is presented a method performed in a deployment server being configured to deploy a software container. The method comprises the steps of: receiving a trigger to deploy a software container; obtaining an image intended for the software container comprising a set of at least one module; injecting a security module in the image; obtaining a container specification of the image; configuring the security module to forward incoming communication to the set of at least one module in accordance with the obtained container specification; modifying the container specification such that the at least one service is accessed externally only via the security module and that all outgoing communication, from the set of at least one module, is directed via the security module; publishing the modified container specification in a service discovery repository; and deploying the software container on at least one execution server.

Security for a software container

It is presented a method performed by a first software container comprising an implanted agent, which is configured to run in said first software container. The method comprise the steps, performed by the implanted agent, of: resolving an Internet Protocol, IP, address and a port of the first software container; and registering a microservice identity, the IP address and the port of the first software container in a first distributed hash table for enabling a second implanted agent running in a second software container to configure a reverse proxy running in the second software container.

Implanted agent within a first service container for enabling a reverse proxy on a second container

It is provided a method for managing a lifecycle of a software container announced in a distributed peer-to-peer repository, wherein the method is performed in a server. The method comprises the steps of: initialising execution of the software container in the server; setting the software container in a standby state; receiving a start message from a remote device, the start message comprising at least one start parameter for the software container; and starting a main process of the software container and applying the at least one start parameter for the main process, to progress the software container to a running state.

Managing a lifecycle of a software container

It is provided a method for allocating a software container executing on a server of a set of servers. The method is performed in a container allocator and comprising the steps of: receiving a request to invoke a software container for a client; calculating a lookup key associated with the software container; performing a lookup in a distributed peer-to-peer repository using the lookup key, giving a result set of active software containers; selecting one software container from the set of software containers; and connecting to the selected software container to allocate the selected software container to the client.

Growing community of inventors

Luleå, Sweden

Daniel Bergström