Nokia Corporation

Nokia Technologies Oy

Nokia Mobile Phones Limited

Nokia Siemens Networks Oy

Valmet Automation Oy

Nokia Ip, Inc.

Henry Haverinen

Kalle Ahmavaara

Jukka-Pekka Honkanen

Jyri Rinnemaa

Timo Takamäki

Jan-Erik Gustav Ekberg

Nadarajah Asokan

Martin Bergenwall

Jari T Malinen

Jouni Mikkonen

Patrik Flykt

Pasi Ismo Eronen

Fabien Rapin

Mikko Siikaniemi

Jukka Tuomi

Juha Ala-Laurila

Mikko Jaakkola

Petri Aalto

Hannu Tuominen

Seppo Kalevi Honkanen

Raimo Vuonnala

Tommi Mikkonen

Tom Söderlund

Antti Kuikka

Jukka-Juhana Latva

Anton Bush

Mike P Smith

Philip Ginzboorg

Valtteri Niemi

Pekka Laitinen

Sami Uskela

Kaisa Nyberg

Tao Haukka

Pekko Orava

Ari Väisänen

Timothy J Kniveton

Jonathan Edney

Markku Niemi

Jukka Sepp&auml;l&auml;

Sami Pienimäki

Jussi Lemil&auml;inen

Anne Huotari

Niklas Lybäck

Pekka Orava

Jukka Seppälä

Jani M&aring;nsson

According to an example aspect of the present invention, there is provided a method, comprising: performing a second web browser accessible by a first web browser in a remote user device, communicating with a first web application in the first web browser of the user device, performing a second web application in the second web browser configured to communicate with an automation service of an automation system and provide a user interface to the automation service, receiving first feature information from the first web application, and providing, on the basis of the received first feature information, second feature information for adapting the user interface to the automation service for the user device.

Automation system remote access

For supporting an access to a destination network by a mobile device via a wireless access network, the mobile device generates a predetermined request, which is addressed to a connectivity test server in the destination network. The predetermined request is transmitted to the wireless access network. In case the predetermined request reaches the connectivity test server, it generates a predetermined response and transmits it to the mobile device via the wireless access network. The mobile device determines whether a response to the predetermined request is received from the wireless access network and whether a received response corresponds to the predetermined response.

Supporting an access to a destination network via a wireless access network

A method (and corresponding equipment) for use in reauthentication&#x2014;after a first, full authentication by a first authentication server ()&#x2014;of a communication session involving the exchange of information between a terminal () and a server (), the method including: a step () in which the first authentication server () and other authentication servers () are each assigned a respective unique realm name; and a step () in which during authentication between the terminal and the first authentication server (), the first authentication server () transmits to the terminal () a reauthentication identity including the unique realm name assigned to the first authentication server. Then, later, during reauthentication, to make possible that the reauthentication is performed by the same authentication server () as performed the full authentication&#x2014;i.e. by the first authentication server ()&#x2014;the reauthentication identity is included in a request for reauthentication.

Method and apparatus enabling reauthentication in a cellular communication system

The invention relates to applying a handover algorithm in a mobile terminal. In the method, the state of a user interface component of the terminal is checked, and the handover algorithm is applied on the basis of the current state of the user interface component. The handover algorithm is applied only if the current state of the user interface component is active.

Determining handover based on state of mobile terminal

The present invention relates to a method and system for providing access from a first network () to a service of a second network, wherein an authentication signaling is used to transfer a service selection information to the second network (). Based on the service selection information, a connection can be established to access the desired service. Thereby, cellular packet-switched services can be accessed over networks which do not provide a context activation procedure or corresponding control plane signaling function.

Method and system for providing access via a first network to a service of a second network

Method for storing data in the memory () of an electronic device (), wherein the data to be stored is encrypted with an encryption key (Ks). The electronic device () is provided with an identification card () equipped with a cryptographic algorithm and an individual identifier (ID). In the electronic device (), at least one seed value (RAND, RAND, RAND) is generated, and the at least one seed value is transmitted to the identification card (). The cryptographic algorithm is performed on the identification card (), with the seed value (RAND, RAND, RAND) being used as the input, wherein at least one derived value (Kc, Kc, Kc) is produced in the algorithm. The at least one derived value (Kc, Kc, Kc) is transmitted to the electronic device (), wherein the at least one derived value (Kc, Kc, Kc) is used in the formation of the encryption key (Ks). The invention also relates to an electronic device (), module, and computer software product.

Storing of data in a device

A method, program product and system of preventing or limiting the number of simultaneous sessions in a wireless local area network (WLAN). The method includes: determining whether subscriber terminal information has been changed between an old session and a new session, maintaining a connection with the old session if the subscriber terminal information has not changed, and establishing and authenticating the new session and disconnecting the old session if the subscriber terminal information has changed. A medium access control (MAC) address and a WLAN radio network identification can be compared between the old session and the new session to determine whether subscriber terminal information has been changed.

Method of preventing or limiting the number of simultaneous sessions in wireless local area network (WLAN)

Method of authenticating a client comprising the steps of sending a subscriber identity to an authentication server; obtaining at least one challenge and at least one first secret to the authentication server based on a client's secret specific to the client; forming first credentials; forming a first authentication key using the at least one first secret; encrypting the first credentials using the first authentication key; sending the at least one challenge and the encrypted first credentials to the client; forming an own version of the first authentication key at the client; decrypting the encrypted first credentials using the own version of the first authentication key. In the method, the encrypted credentials are sent together with the at least one challenge to the client so that the client can proceed authentication only if it can derive the first secret from the at least one challenge.

Authentication in data communication

A system and method for the implementation of a proxy smart card application in a mobile telephone. The mobile telephone receives a smart card related message from a remote terminal. If the smart card related message is related to a function implemented by electronic device software within the mobile telephone, the electronic device software processes the message. If the smart card related message is not related to a function implemented by the electronic device software, the message is transmitted to the smart card.

Proxy smart card applications

A method and device for routing data packets of a wireless terminal device in a communication network. When Open system Authentication is used, the system operates similarly as the current Nokia Operator Wireless LAN system, in which the terminal device and the access controller are the parties involved in the authentication. The access controller relays information relating to the authentication between the terminal device and an authenticating server, and it is capable of updating independently the list of users it maintains. When authentication according IEEE 802.1X authentication, the access point operates according to the IEEE 802.1X standard, serving as the authenticating party and relaying information relating to the authentication between the terminal device and the authentication server. In addition, the list maintained by the access controller is updated after a successful authentication, for example by the access point or the authenticating server.

Method and apparatus for authentication in a wireless telecommunications system

A system and method for three-party authentication and authorization. The system includes an authorizer that authorizes requestors, a client that makes a request, and a local attendant that provides a conduit through which messages between the client and the authorizer pass. The authorizer, the client, and a peer on which the requested resource may be accessed are each in separate domains. A domain is defined as a set of one or more entities such that if the set includes more than one entity, a connection between any two of the entities in the set can be secured by static credentials that are known by each of the two entities. A subscriber identity module (SIM) may be used to generate a copy of a key for the client to be used in accessing a requested resource.

Modular authentication and authorization scheme for internet protocol

The invention relates to a method for authenticating the user of a terminal (), in which terminal a device () for verifying the rights to use is applied for running an authentication protocol. The device () for verifying the rights to use is connected to the terminal (). In the device () for verifying the rights to use, an extensible authentication protocol interface is applied, via which at least some of the authentication functions are carried out.

Method for authenticating a user in a terminal, an authentication system, a terminal, and an authorization device

The invention relates to a method for arranging handover in a wireless telecommunications system. Connection settings are stored in a terminal, wherein at least one network identifier is associated with alternative connection settings, the network identifier identifying a target network reachable by a connection from the terminal. The network identifier associated with the currently applied connection settings is compared with the network identifiers associated with the other available connection settings. The connection settings associated with the same network identifier as the one associated with the currently applied connection settings are then selected. The handover may then be carried out by using the selected connection settings.

Handover

Growing community of inventors

Tampere, Finland

Henry Haverinen