Siemens Aktiengesellschaft

Nokia Corporation

Nokia Solutions and Networks Oy

Nokia Technologies Oy

Nokia Siemens Networks Oy

Nokia Solutions and Networks Gmbh & Co. Kg

Günther Horn

Rainer Falk

Suresh P Nair

Anja Jerichow

Peter Leis

Dan Forsberg

Ulrich Wiehe

Dirk Kröselberg

Maximilian Riegel

Wolfgang Gröting

Alexander Milinski

Marc Blommaert

Wolfgang Bücker

Wolf-Dietrich Moeller

Volker Kessler

Wolfgang Pieper

Dan Lars Anders Forsberg

Joachim Kroβ

Srinath Thiruvengadam

Klaus Muller

Heribert Roeser

Ulrike Meyer

Matthias Franz

Hariharan Rajasekaran

Nagendra S Bykambadi

Joachim Kross

A system comprising an IMS network (), an adapter module (), an identity provider () and an application () is described. The adapter module () is within an IMS trust domain. The application () is within the trust domain of the identity provider. A user of the system can access the application () via the IMS network (), regardless of whether the application is within the IMS trust domain, by making use of the adapter module () to obtain the user's user credentials for the application from the identity provider.

Identity management system

An access specific key is provided for securing of a data transfer between a mobile terminal and a node of an access net. For authentication of the mobile terminal, a authentication server generates a session key, from which a basic key is derived and transferred to an interworking-proxy-server. The interworking-proxy-server derives the access specific key from the transferred basis key and provides the key to the node of the access net.

Method and system for providing access-specific key

A method, apparatus and computer program product are provided to provide fresh security context during intersystem mobility. A method is provided which includes receiving an indication of handover of a remote device from a source system to a target system. The target system may implement a communications standard different from that of the source system. The method also includes determining a current sequence number value of a security context maintained in the source system. The method additionally includes deriving a fresh mapped security context for the target system based at least in part upon the determined sequence number value. The method further includes providing the derived fresh mapped security context to the target system.

Methods, apparatuses, and computer program products for providing fresh security context during intersystem mobility

The method for the transmission of media data from a multicast service by a first apparatus to a plurality of second apparatuses is suitable for preventing reception of the media data by an unauthorized second apparatus using a security process. A first apparatus is provided which can be used to provide the media data protected by a security process. A third apparatus is provided which can be used to perform the security process with the first apparatus, performance of the security process between the first apparatus and the third apparatus and, on the basis of this, interchange of at least security data between the first apparatus and the third apparatus in order to provide the media data. A second apparatus is selected which can be used to perform at least one reception process for receiving the media data. A first data transmission link is selected which can be used to couple the first apparatus and the second apparatus at least for the purpose of transmitting the media data. The provided media data is received using the second apparatus via the first data transmission link.

Method, apparatus, computer program, data storage medium and computer program product for preventing reception of media data from a multicast service by an unauthorized apparatus

A user terminal is switched between a cellular network and a worldwide interoperability for microwave access radio network within a telecommunication system. An authentication, authorization and accounting (AAA) server which is designed for use with both of these networks is disposed in the telecommunication system in such a way that user data of the user terminal stored in the AAA server can be accessed from both of these networks, thereby advantageously ensuring uninterrupted switching between the two networks free of loss.

Telecommunication system and method for controlling switching of user terminal between two networks

Cryptographic material is generated for a protocol for the encrypted transmission of media data between a subscriber device and a provider device. A first symmetric key of the subscriber device and the provider device is inserted in a symmetric key protection mechanism of a network protocol of a control layer to establish a communication session between the subscriber device and the provider device. A first time-variable parameter is transmitted from the provider device to the subscriber device. A second symmetric key for protecting the key management protocol is calculated by both the provider device and the subscriber device using a defined function depending at least on the first symmetric key and the first time-variable parameter.

Method for providing a symmetric key for protecting a key management protocol

The use of suitable measures in a method for agreeing on a security key between at least one first and one second communication station to secure a communication link is improved so that the security level for the communication is increased and the improved method can be combined with already available methods. A first parameter is determined from an authentication and key derivation protocol. In addition, an additional parameter is sent securely from the second to the first communications station. A security key is then determined from the first parameter and the additional parameter.

Method for agreeing between at least one first and one second communication subscriber to security key for securing communication link

A first cryptographic key () and a second cryptographic key () are created by a mobile radio terminal () and by a computer of the home communications network () by using authentication key materials (). The first cryptographic key () is transmitted to the computer of the visited communications network (), and the second cryptographic key () is transmitted to an application server computer ().

Method for creating and distributing cryptographic keys in a mobile radio system and corresponding mobile radio system

Method for the computer-aided exchange of cryptographic keys between a

The invention specifies a coil form which assures the possibility of production by automated means, a strain-relieved connection between external connecting lines, which can pass in an insulated fashion through an opening of a surrounding motor stator housing, and the coil winding ends of an exciter winding wound on the coil form. For this purpose connector sleeves are inserted and fixed in place to radially continuous, stepped diameter, fitting openings in a locking plastic bracket which is hinged-mounted by a plastic hinge on one end flange and which, after the connection has been made, can be swiveled over the exciter coil winding and locked on the other end flange. Around one set of sleeve ends of the connector sleeves which project out of the internal operating side of the plastic bracket, the coil winding ends of the exciter coil are wound. In the other set of sleeve ends the insulation stripped ends of the external connecting lines are inserted to make contact from the exterior operating side of the plastic bracket.

Electrical coil form with connector sleeves

Growing community of inventors

Munich, Germany

Günther Horn