Siemens Aktiengesellschaft

Siemens Schweiz Ag

Siemens Aktiengesellschsft

Dirk Kröselberg

Rainer Falk

Christian Günther

Hannes Tschofenig

Maximilian Riegel

Günther Horn

Jochen Grimminger

Richard Wisenöcker

Domagoj Premec

Jochen Christ

Silvio Riener

Carl Henrik Denis

Tobias Limmer

Michele Barletta

Richard WISENÖCKER

Provided is a method for automatically registering a user on a field device for the purpose of administering the field device, including a) providing user information on the basis of an identity of the user and an identity of the field device by a security device; b) transmitting the provided user information to a mobile device of the user; c) generating field-device-specific registration information on the basis of the transmitted user information by the mobile device; and d) registering the user on the field device by the generated registration information. This method has the particular advantage that a highly secure infrastructure can be used for administering access information for administering the field devices without problems arising during the registration process.

Method for automatically registering a user on a field device, and automation system

Provided are methods and to-devices for increasing the reliability of a software by applying a patch to the software, wherein the application of the patch is performed if a specifiable reliability status is indicated by reliability information associated with the patch, wherein an indicator for successful increasing of the reliability of the software by application of the patch is represented by the reliability information. The methods and devices can be used for the maintenance of industrial installations.

Increasing the reliability of software

An access specific key is provided for securing of a data transfer between a mobile terminal and a node of an access net. For authentication of the mobile terminal, a authentication server generates a session key, from which a basic key is derived and transferred to an interworking-proxy-server. The interworking-proxy-server derives the access specific key from the transferred basis key and provides the key to the node of the access net.

Method and system for providing access-specific key

A counter status that is allocated to a communication terminal and a base station is usually deleted when the storage space in the respective base station is used up. To address this, the counter status is saved in an additional communication network element when a predefinable criterion is met, and can thus be retrieved.

Method for managing a counter status allocated to a pair comprising a communication terminal and a base station

A method and authentication server provide a mobile key. According to the method, upon receipt of an authentication message (access authentication) that is transmitted when a subscriber logs on to the network, the authentication server extracts a subscriber identification contained in said message and generates a corresponding mobile key, which is stored together with the respective extracted subscriber identification. Upon subsequent receipt of a key request message (key request) that is transmitted when a subscriber registers, the authentication server extracts a mobile identification of the subscriber contained in said message and searches for an identical mobile identification, which can be derived in accordance with a configurable derivation function from a subscriber identification that is stored in the authentication server. Once a derived mobile identification that is identical or can be uniquely assigned to the extracted mobile identification has been found, the authentication server provides the stored corresponding mobile key that has been generated, to cryptographically protect the mobile signaling messages of the registered subscriber.

Method and server for providing a mobility key

A method provides service quality in a WiMAX communication network, and a method selects an access transport resource control function by a guideline decision-making function in a communication network. According to a method for providing service quality on an air interface of an access network in a WiMAX communication network by an application function, the application function aims to provide a user of the WiMAX communication network with a service quality-related application. The desired service quality is signaled by an authentication, authorization and accounting infrastructure of the WiMAX communication network.

Method for providing service quality in a WiMAX communication network, and method for selecting an access transport resource control function by means of a guideline decision-making function in a communication network

A method provides subscriber-specific activation of network-based mobility management using an authentication server. According to the method, network-based mobility management is enforced, even if the mobile terminal supports terminal-based mobility management. This gives a network provider complete control over mobility management in his network, preventing configuration problems during the configuration of mobile terminals. In the method, after the successful authentication of a subscriber, the authentication server transmits an authentication confirmation message to an authentication client in an access network. The received authentication confirmation message contains an activation attribute for activating network-based mobility management, if the authentication server does not provide a common mobile key for terminal-based mobility management.

Subscriber-specific enforcement of proxy-mobile-IP (PMIP) instead of client-mobile-IP (CMIP)

A method for providing an IP key, for encoding messages between a user terminal MS or a PMIP client and a home agent HA, wherein an authentication server only provides the mobile IP key when the authentication server recognizes, by a correspondingly encoded parameter, that the user terminal MS itself is not using mobile IP (PMIP).

Method and system for providing a mobile IP key

After a radio link is established between a mobile subscriber terminal and an access network, to authenticate the subscriber an authentication proxy server of an intermediate network forwards at least one authentication message containing a subscriber identification between the access network and a home network of the subscriber. If authentication is given by an authentication server of the home network, the authentication proxy server of the intermediate network stores the subscriber identification. The home agent receives a registration request message originating from the subscriber terminal and containing a subscriber identification; the home agent transmits a key request message, containing the subscriber identification, for a mobile key to the relevant authentication proxy server. The authentication proxy server provides a mobile key for the home agent, if the subscriber identification contained in the key request message matches one of the subscriber identifications that has been stored by the authentication proxy server.

Method and server for providing mobility key

After a radio link is established between a mobile subscriber terminal and an access network, the subscriber is authenticated by a proxy server of an intermediate network forwarding, from the access network to a home network of the subscriber, authentication message(s) containing a subscriber identification. If the subscriber is authenticated and the subscriber identification is already stored in the proxy server, the proxy server assigns a group-specific mobile key to the subscriber identification. When the home agent receives a registration request message originating from a subscriber terminal and containing a subscriber identification and transmits a key request message, containing the subscriber identification, for a mobile key to the proxy server, if the subscriber identification in the key request message matches a subscriber identification stored by the proxy server, a mobile key for cryptographic protection of mobile signalling messages is provided to the home agent by the proxy server.

Method and server for providing a mobile key

A method allows a user to transmit emergency messages to a selected communication network, in particular a WiMax network, even without valid registration.

Method for forwarding emergency messages from a terminal in a communication network

A mobile station is designed, as a gateway for one or several mobile terminals, to establish a connection between the mobile terminal(s) and an access network. The mobile station supports a network-based mobility management such that the mobile station acts as a client instead of the mobile terminals during communication with a home agent of a home network or intermediate network connected to the access network in the framework of a mobile IP connection.

Mobile station as a gateway for mobile terminals to an access network, and method for registering the mobile station and the mobile terminals in a network

A first computer sends a list of possible security associations to a second computer in a message according to a protocol of an application layer, a security parameter index being contained in the message for each security association. The second computer selects a security association and transmits it or an indication of the security association selected by it to the first computer.

System for negotiating security association on application layer

The invention relates to a method for transmitting data in a WLAN network (Wireless Local Area Network), whereby WLAN messages are transmitted in the Layer 2 protocol layer between a terminal and an access node of the WLAN network. EAP messages (Extensible Authentication Protocol) are transmitted in the WLAN messages, said EAP messages containing SIP messages (Session Initiation Protocol) with SIP authentication data.

Method for transmitting data in a WLAN network using an EAP message comprising SIP authentication data

A first cryptographic key () and a second cryptographic key () are created by a mobile radio terminal () and by a computer of the home communications network () by using authentication key materials (). The first cryptographic key () is transmitted to the computer of the visited communications network (), and the second cryptographic key () is transmitted to an application server computer ().

Growing community of inventors

Munich, Germany

Dirk Kröselberg