Nokia Corporation

Nokia Technologies Oy

Core Wireless Licensing S.a.r.l.

Conversant Wireless Licensing S.a R.l.

Jani Ekman

Nagendra S Bykampadi

Silke Holtmanns

Anja Jerichow

Juha-Pekka Koskinen

Juha R Vallinen

Marco Stura

Anne Narhi

Pertti Rantala

Bruno Landais

Saurabh Khare

Juha Antero Rasanen

Chaitanya Aggarwal

Janne J Kallio

Pekka Rissanen

Antti Vahatalo

Peeter Pruuden

Tiina Partanen

Janne Haikonen

Jaakko Sundquist

Panu Suontausta

Sami Mäki

Antti Vuorikoski

Embodiments of the present disclosure relate to methods, apparatuses and computer readable storage media for hop-by-hop security. A proposed method comprises receiving, at a first apparatus and from a second apparatus associated with a first network function, a message directed from the first network function to a second network function, the message comprising a first signature and network function information, the network function information at least comprising identification information of the first network function; in accordance with a successful validation of the first signature, updating the message with a second signature specific to a service communication proxy implemented by the first apparatus; and transmitting the updated message to a third apparatus associated with the second network function, the updated message comprising at least the second signature and the network function information.

Enhanced hop by hop security

According to an example aspect of the present invention, there is provided an apparatus configured at least to determine whether a cryptographic signature of a token received in the apparatus from a network function consumer is valid, obtain a cryptographic signature of the apparatus of the token responsive to the cryptographic signature of the token being valid, and provide the token to a peer entity of the apparatus, wherein the cryptographic signature of the apparatus is either included into the token or provided in a header external to the token, wherein the peer entity is comprised in a second network, different from a first network where the apparatus is comprised in. The request may serve a user equipment, directly or indirectly.

Security procedure for cryptographic signature verification based on a trust relationship between edge nodes connecting home and visited networks

According to an example aspect of the present invention, there is provided a method comprising receiving, by a network repository function, a request from a network function, wherein the request comprises a string associated with an instance identity of the network function, determining, by the network repository function, a type of the instance identity of the network function from a set of instance identity types, determining, by the network repository function, the instance identity of the network function based on the string associated with the instance identity of the network function and the type of the instance identity of the network function and transmitting, by the network repository function, a response to the network function, wherein the response depends on whether the instance identity of the network function was found in a list of network function instances registered at the network repository function.

Enhanced identification in communication networks

A service request is received at a first service communication proxy element, wherein the service request is received from a service consumer and is a request to access at least one service of a service producer. The first service communication proxy element determines at least one target service producer based on the service request. The first service communication proxy element sends an access token request to an authorization entity, wherein the access token request is generated based on the determining step. The first service communication proxy element receives an access token response from the authorization entity, wherein the access token response comprises an access token. The first service communication proxy element may then send a service request with the access token to a second service communication proxy element, wherein the second service communication proxy element is associated with the target service producer. The method may apply to roaming and non-roaming scenarios.

Service authorization for indirect communication in a communication system

A method of communication comprising the steps of: requesting at least one service having a plurality of parts; determining if said at least one service can be provided taking into account credit information relating to a user; and if not providing only one or some of said plurality of parts of said at least one service.

Online charging system (OCS) controlled media policy

A method for routing calls in a communication system comprising a network and a plurality of terminals associated with a single subscriber identity, the method comprising: receiving a request to establish a call from a first terminal to the subscriber identity; retrieving from a subscriber information store a set of weighting parameters for the subscriber identity, each of the terminals associated with the subscriber having at least one of the weighting parameters of the set associated with it; determining an order in which to route the call to the terminals based on the weighting parameters; and routing the call to the terminals in that order until the call is terminated or is answered by one of the terminals.

Call handling logic

A negotiation unit for operation in a communication system whereby a first communication unit may transmit data to a second communication unit by means of a protocol including the step of negotiating a parameter for use in the operation of the protocol by the transmission of a first negotiation message to the second communication unit and in response thereto the transmission of a second negotiation message from the second communication unit to the first communication unit, the negotiation messages being configured to be capable of including data defining a value for the parameter, the negotiation unit comprising: storage means for storing information on a criterion on the parameter, interception means for intercepting at least one of the negotiation messages directed towards one of the first and second communication units; and message analysis means for analysing the intercepted negotiation message and if the message includes a value for the parameter f) checking whether the stored criterion on the value is met, g) if the criterion is not met, modifying the message to include a value for the parameter that meets the criterion, and sending the modified message towards the said one recipient.

Negotiation of transmission parameter

A method of transmitting voice over IP (VoIP) in a wireless telecommunications system comprising at least one wireless mobile station, a first radio access gateway and a second radio access gateway. Address information of the second radio access gateway is defined in the first radio access gateway, if a need is detected to hand over the connection of the mobile station from a base station connected to the first radio access gateway to a base station connected to the second radio access gateway. Address information of the first radio access gateway is defined in the second radio access gateway. Data addressed to and transmitted from the mobile station is transferred through the first radio access gateway and the second radio access gateway when the handover has been performed to the base station connected to the second radio access gateway.

Transmission of voice over IP in wireless telecommunications system

A cellular communications network comprises a plurality of gateways for controlling cells in the cellular communications network, the gateways being arranged to receive RF information from at least one mobile station in the network, at least one gatekeeper connected to said gateways by a switched packet communication path, wherein each gateway includes means for generating a handover required indication for a call in which the gateway is engaged and packet generating means for generating a packet addressed to said gatekeeper and including control information comprising a candidate list of alternative cells to which the call could possibly be transferred and wherein the gatekeeper includes packet generating means for generating a packet for sending a handover request for handing over the call to one of said alternative cells.

Handover in a mobile communication system

A communications network comprises a central controller which operates to control a zone of the network and which provides a conference call facility with at least one gateway engaged in a call with a mobile station via a first communication channel, means for generating a hand-off required indication indicating that handover of the call is needed, means at the central controller for receiving said hand-off required indication and opening a conference call channel as a second communication channel for the call and means for handing over said call from the first to the second communication channels and, if the handover is successful, causing the first communication channel to be closed.

Handover in a mobile communication system using conference facility

A method of effecting handover in a communications network of a first mobile station between a source and a target gateway is provided. The first mobile station engages in a call with a second mobile station using a destination gateway. The source gateway, the target gateway and the destination gateway are connected by a switched packet communication path for conveying call data packets. The method sends call data packets from the first mobile station to a source port at the destination gateway. The method opens a target port at the destination gateway for communication with the target gateway and routes call data packets from the first mobile station via the target gateway to the target port on the switched packet communication path. The method detects receipt of the call data packets at the target port and routes the call data packets from the second mobile station to the target gateway.

Growing community of inventors

Kangasala, Finland

Jani Ekman