Nokia Corporation

Nokia Mobile Phones Limited

Intellectual Ventures I LLC

Nokia Ip, Inc.

Nokia Networks Oy

Juha Ala-Laurila

Jukka-Pekka Honkanen

Jyri Rinnemaa

Jan-Erik Gustav Ekberg

Jukka Immonen

Raimo Vuonnala

Nadarajah Asokan

Patrik Flykt

Henry Haverinen

Jouni Mikkonen

Petri Aalto

Timo Takamäki

Seppo Kalevi Honkanen

Timo Takamaki

Tommi Mikkonen

Jukka Sepp&auml;l&auml;

Antti Kuikka

Juha Kalliokulju

Jarkko Jouppi

Harri Hansen

Kari Virtanen

Tom Söderlund

Juha Salvela

Harri Hans&eacute;n

Tom Soderlund

Arranging data ciphering in a telecommunication system comprising at least one wireless terminal, a wireless local area network and a public land mobile network. At least one first ciphering key according to the mobile network is calculated in the mobile network and in the terminal for a terminal identifier using a specific secret key for the identifier. Data transmission between the mobile network and the terminal is carried out through the wireless local area network. A second ciphering key is calculated in the terminal and in the mobile network using said at least one first ciphering key. The second ciphering key is sent from the mobile network to the wireless local area network. The data between the terminal and the network is ciphered using said second ciphering key.

Arranging data ciphering in a wireless telecommunication system

A method for billing in a packet data network (WISP1) comprising at least one user's terminal (MN), comprising the steps of:

Billing in a packet data network

Authentication method for authenticating a mobile node to a packet data network, in which a shared secret for both the mobile node and the packet data network is arranged by using a shared secret of the mobile node and a telecommunications network authentication centre. In the method, the mobile node sends its subscriber identity to the packet data network together with a replay attack protector. The packet data network obtains authentication triplets, forms a session key using them, and sends back to the mobile node challenges and a cryptographic authenticator made by using the session key. The mobile node can then form the rest of the authentication triplets using the challenges and then form the session key. With the session key, the mobile node can check the validity of the cryptographic authenticator. If the authenticator is correct, the mobile node sends a cryptographic response formed using the session key to the packet data network for authenticating itself to the packet data network.

Authentication in a packet data network

A method for billing in a packet data network (WISP) comprising at least one user's terminal (MN), comprising the steps of:

Authentication method for authenticating a mobile node to a packet data network, in which a shared secret for both the mobile node and the packet data network is arranged by using a shared secret of the mobile node and a telecommunications network authentication center. In the method, the mobile node sends its subscriber identity to the packet data network together with a replay attack protector. The packet data network obtains authentication triplets, forms a session key using them, and sends back to the mobile node challenges and a cryptographic authenticator made by using the session key. The mobile node can then form the rest of the authentication triplets using the challenges and then form the session key. With the session key, the mobile node can check the validity of the cryptographic authenticator. If the authenticator is correct, the mobile node sends a cryptographic response formed using the session key to the packet data network for authenticating itself to the packet data network.

The invention relates to a method and to associated radio access networks and network elements for assigning values of service attributes to transmissions between a user equipment and a radio access network. In order to allow for an improved assignment of values of service attributes, it is proposed that, upon request of such a transmission by a user equipment of a subscriber registered with some radio access network the method comprises determining values of service attributes that are to be used for the transmission requested by said user equipment based on at least one value of at least one service attribute defined by a stored subscriber specific service profile, and based on at least one stored common value of at least one service attribute.

Method for assigning values of service attributes to transmissions, radio access networks and network elements

A mechanism is provided for supporting differentiated services (quality of service) in a radio network. A radio access system is provided which supports the quality of service in data packet transmission over its air interface. The system comprises a selection of predefined default radio flows having different quality of service characteristics and means () for selecting a radio flow having appropriate quality of service characteristics for the packet to be transmitted over the air interface from the selection.

Method and system for supporting the quality of service in wireless networks

Methods and system for weighted polling of terminals in a Wireless Local Area Network (WLAN). Quality of Service (QoS) information related to WLAN terminals is obtained. A weighted polling factor may be assigned to each WLAN terminal based on the QoS information. Each WLAN terminal may be polled during a transmission period based on the weighted polling factor assigned to each WLAN terminal.

Methods and systems for weighted PCF polling lists for WLAN QoS support

A method, apparatus and computer program for applying a predetermined transmission process to the transmission of IP packets of a particular Internet Protocol (IP) flow in an IP network. The invention is implemented by defining in a host, such as a wireless terminal, a Quality of Service (QoS) management protocol between an IP session management protocol of the host and each of an IP layer and a link layer of the host, and defining in another apparatus, such as a wireless access point, a QoS management protocol between the QoS management protocol of the host and each of an IP layer and a link layer of the wireless access point. The wireless access point communicates with the wireless terminal via a link and allows the wireless terminal to communicate with the IP network. IP session information is configured in the wireless terminal and the wireless access point in each of the IP and link layers based on IP session management information from the IP session management protocol of the wireless terminal. Based on the defined configuration, an IP flow between the wireless terminal and the wireless access point is identified as a particular IP flow. Thereafter, a predetermined transmission process can be applied to the transmission of IP packets of the identified IP flow.

Method, apparatus and computer program for IP traffic prioritization in IP networks

The invention is a method of providing a user ( ) a terminal network address ( ) in a first network ( ) through which the user communicates with a data network ( ) and authenticating connection of the user to the first network. The invention includes transmitting to at least one server in the first network a request to obtain the terminal network address in the first network to provide connection of the user to the data network and an identification of the user in a second network ( ) through which the user communicates to the first network; transmitting the identification of the user to the second network; transmitting from the second network to the first network authentication information of the user stored in the second network associated with the identification of the user; transmitting from the first network to the user at least one advertisement of the terminal network address and information within the authentication information; and processing the received at least one advertisement and the received information within the authentication information and determining if the authentication information is correct.

SIM based authentication mechanism for DHCPv4/v6 messages

An existing security association is re-established when a communication handover event occurs in a radio communications system such as IEEE 082.11 or a HIPERLAN wherein the existing security association between a mobile terminal and a wireless communication network is maintained when the communication handover occurs within the network. Authentication during a handover event is achieved by a challenge/response procedure. In accordance with the challenge/response procedure each member of a communication pair that is made up of a new access point and the mobile terminal that is experiencing a handover to the new access point sends a challenge to the other member of the communication pair. Each member of the communication pair then calculates a response to its received challenge, and these responses are sent back to the other member of the communication pair. Each member of the communication pair then compares its received response to a correct response. When these comparisons are correct, payload communication begins between the second access point and the mobile terminal.

Transfer of security association during a mobile terminal handover

The invention relates to a method for supporting the quality of service (QoS) in packet data transmission between a wireless communication device ( ) communicating with a radio network, and an information network (LN), where data transmission between the wireless communication device ( ) and the radio network ( ) is controlled with at least one access point controller ( ). Further, in the method, information is transmitted between the wireless communication device ( ) and the access point controller ( ) in radio flows. In the method, at least one radio flow is provided with a defined radio flow identification (RFID) and a quality of service (QoS).

Method supporting the quality of service of data transmission

Apparatus, and an associated method, for identifying whether a mobile terminal and access point of a WLAN (wireless local area network) are capable of operation pursuant to a proprietary communication mode. If a determination is made that the communication pair is capable of operation pursuant to the proprietary communication mode, the mobile terminal is instructed to operate pursuant to the proprietary communication mode. Handover procedures are also provided by which better to assure that ongoing communications, during and subsequent to handover shall also be effectuated pursuant to the proprietary communication mode. Improved communication quality when the communication pair is operated pursuant to the proprietary communication mode relative to operation pursuant to a conventional IEEE 802.11 communication mode is possible.

Growing community of inventors

Tampere, Finland

Juha Ala-Laurila