Telefonaktiebolaget Lm Ericsson (publ)

Henrik Basilier

Gunnar Mildh

Göran Rune

Stefan Rommer

Ann-Christine Sander

Torbjörn Cagenius

Lennart Bror Norell

Gunnar L Nilsson

Reiner Ludwig

Per Hans Willars

Hannes Ekström

Ulf Gustafson

Jari Tapio Vikberg

Fredrik Lindholm

Magnus Norberg Olsson

Justus Petersson

Tony Larsson

Erik Westerberg

Mattias Lidström

Lila Madour

Tor Kvernvik

Vibhor Julka

Patrick Maguire

Victor Manuel Avila Gonzalez

Michael Liljenstam

Anders Lundstrom

Mahmood Hossain

Sanjeevan Sivalingham

Roger Gustavsson

Ulf Fredrik Jönsson

Linus Andersson

Belen Pancorbo Marcos

Hakan O Djuphammar

Björn Bodén

Bobby That Dao Ton

Ning Nicholas Chen

Sven Anders Borje Svensson

Mohamad I Nasser

Göran Eneroth

Kyösti Toivanen

Tor Kvernik

Lennart Norell

Ulf Jönsson

Methods (), devices (), and systems () for managing a federated network slice () providing an extension of one or more virtual network functions () from a first network domain () to a second network domain (). One method (), by a second orchestration manager () of the second network domain (), includes accessing () a first virtual network function management component () for extension of the one or more virtual network functions () from the first network domain () to the second network domain (). The method () further includes initiating registration () of the first virtual network function management component () with a look-up service () to generate a first association between a first name of the first virtual network function management component and a first location of the first virtual network function management component in the second network domain (). The method () further includes initiating transmission () to the first network domain () of the first name of the first virtual network function management component ().

Methods, devices, and systems for managing a federated network slice

A method implemented in a user equipment (UE) includes connecting to a WLAN access point. The method further includes constructing a domain name for a packet system network, the domain name including network partition information for the packet system network. The method further includes transmitting, to a DNS server via the WLAN access point, the constructed domain name. The method further includes receiving, from the server, at least one address corresponding to a network node associated with the network partition information.

Methods and devices for selecting network partition in untrusted WLAN access

A core network node identifies a non-USIM based authentication procedure to be utilized by a wireless communication device, WCD, being served by the core network node. The node obtains a session key associated with the identified non-USIM based authentication procedure. The node converts the session key associated with the identified non-USIM based authentication procedure to i) a first key, K, for use by the WCD and a base station serving the WCD to derive an encryption or integrity protection key, K, for enabling encryption or integrity protection of a communication between the WCD and the base station or ii) a second key, K, for use by the WCD and the core network node to derive the first key K. The node then send i) Kto the base station or ii) Kto another core network node that is configured to derive Kfrom K.

Method, apparatus, and system for providing encryption or integrity protection in a wireless network

A method implemented in a control node includes receiving a message from a first node. The method further includes determining whether the received message corresponds to one or more network partitions based at least in part on the partition selection information. The method further includes selecting, in response to determining that the message corresponds to the one or more network partitions, a particular network partition from the one or more network partitions using the partition selection information, and routing the message to a second node associated with the selected particular network partition.

Method and control node for selection of a network partition and corresponding routing of a received message

This disclosure relates to a method, and an arrangement and a computer program for updating a prioritization level of a service data flow between a user node and a network node. The method comprises obtaining a traffic size per time unit of detected data packets of the service data flow, and updating the prioritization level of the service data flow, based on the obtained traffic size per time unit. It is an advantage that embodiments provide a possibility to determine a trade-off between the need to optimize response times for short-lived data sessions and limiting the impact on other users when prioritizing long-lived high volume sessions. It is advantageous that the embodiments are applicable to situations in which a direct classification, using IP 5-tuple or deep packet inspection is not meaningful.

Method, apparatus and computer program for updating a prioritization level of a service data flow based on traffic size per time unit of said data flow

A method is performed in a network control entity that manages network connections for a network. The method includes receiving a network attachment request from a network access entity or a user equipment for connecting the user equipment to the network. The method further includes obtaining a network partition ID associated with the UE, the network partition ID identifying a network partition that includes a predetermined group of network entities included in the network. The method also includes transmitting, to a network storage entity, a notification containing the network partition ID.

Methods and network nodes for network partition preservation at inter-access handovers

A node in a first network domain and a method performed thereby for transmitting a data packet to a VPN client in a second network domain, the node and the VPN client being part of a VPN, wherein the first and second network domain are connected by means of a third network domain are provided. The method comprises receiving, from an application server, a first packet comprising a first IP header and a payload; and determining a DCSP. The method further comprises adding a second header comprising the determined DCSP and an IP address of a VPN client resulting in a second packet and encrypting the second packet. Further the method comprises adding a third header to the encrypted second packet resulting in a third packet, the third header comprising a destination address of a node in the second network domain, and transmitting the third packet in an IP tunnel terminating at the node in the second network domain.

Method and arrangement for QOS differentiation of VPN traffic across domains

For transmitting data between a node () of a mobile network and a further node (), the further node sends downlink data packets to the node () of the mobile network. The downlink data packets carry a destination address corresponding to a user equipment () connected to the mobile network. For implementing an inband data channel between the node () of the mobile network and the further node (), the further node () inserts data destined to the node () of the mobile network into at least one of the downlink data packets and marks this downlink data packet as including data destined to the node () of the mobile network. The node () of the mobile network receives the downlink data packets from the further node () and identities, on the basis of the marking, the least one downlink data packet including data destined to the node () of the mobile network. The node () of the mobile network then extracts the data from the identified downlink data packet. A corresponding inband data channel may also be used in the uplink direction.

Transmission of data to or from a node of a mobile network

A method for transmitting data packets of a data traffic between a sending device () and a receiving device () via a VPN client () and a VPN server () over a network using a secure encapsulation of the data packets, the method comprising the steps of determining a Quality of Service, QoS, parameter for the data packets of said data traffic, selecting, for the data packets, either a first tunnel () connecting the VPN client () and the VPN server () or a second tunnel () connecting the VPN client () and the VPN server () based on determined Quality of Service.

Method for providing a QoS prioritized data traffic

Systems and methods according to these exemplary embodiments provide for methods and systems for allowing a variety of devices desiring Internet Protocol (IP) addresses from potentially different locations to all operate on the same local area network. For example, a node, e.g., a gateway device, can receive a request for an IP address and determine whether that request was issued by a locally addressable device or a wide area network (WAN) addressable device. The node can then selectively locally provide an IP address or request an IP address, e.g., from a WAN, based on the determination.

Combining locally addressed devices and wide area network (WAN) addressed devices on a single network

The disclosure concerns a method for providing communication with a mobile station () via a first wireless access point () as well as the access point. The mobile station () has a first identifier for use in a first communication network () and the wireless access point comprises a first wireless interface for a first type of wireless communication with mobile stations in relation to the first communication network (), a second wireless interface for a second type of wireless communication with mobile stations in relation to a second communication network (), a mapping unit associating the first type of wireless communication for the mobile station with the second type of wireless communication for the mobile station based on the first identifier and a traffic control unit transporting traffic of wireless communication of the second type for the mobile station through the first communication network () based on the association.

Wireless access point connected to two communication networks

The invention comprises methods and arrangements for Policy Decision Point discovery in a roaming or handover scenario in an IP network (IN) comprising a plurality of network elements. The invention introduces a Re-direct Policy Decision (RPDF) Function which can deliver addresses to PDPs associated to a certain Mobile Terminal. The RPDF comprises a memory for storing addresses (APDPA, SPDPA) of Policy Decision Points and Mobile Terminals. The RPDF makes it possible for a network element, e.g. an application function, a policy enforcement point or another policy decision point, to find a Policy Decision Point associated to the Mobile Terminal.

Policy management in multi-access scenarios

A method is described for associating a data packet (DP) with a packet bearer (PB) in a user equipment (UE) of a communication network. The data packet is sent in a data flow from an application function of the user equipment, the packet bearer (PB) is established with the user equipment to transmit the data packet (DP) over the communication network towards a further entity, and the user equipment is adapted to establish different packet bearers. The method comprises the steps of identifying the flow with the data packet in a control entity of the communication network, determining the packet bearer for association with said flow from the different packet bearers in a policy function of the control entity, determining a routing level identification of the further entity, instructing the user equipment to install a packet filter based on the routing level identification, wherein the packet filter associates data packets comprising the routing level identification of the further entity with the determined packet bearer, providing the routing level identification to the application function, including the routing level identification into the data packet, and forwarding the data packet (DP) on the determined packet bearer (PB). A corresponding network, control entity, monitoring entity and computer program are also described.

Method and devices for installing packet filters in a data transmission

An arrangement, system, and method for switching data packet flows in a communication system. A flow processing core classifies packet flows and defines processing flow sequences applicable to the packet flows. A distributing arrangement directs the packet flows to appropriate functional units or processors according to each packet flow's applicable processing flow sequence. The current position of each packet flow in its respective processing flow sequence is indicated. Packet flow sequence information may be determined so that reclassification of already classified packets is avoided.

Arrangement and a method relating to flow of packets in communications systems

Growing community of inventors

Täby, Sweden

Henrik Basilier