Telefonaktiebolaget Lm Ericsson (Publ)

Juha Kujanen

Noamen Ben Henda

David Castellanos Zamora

Christine Jost

Jesus-Angel de-Gregorio-Rodriguez

Helena Vahidi Mazinani

Network equipment () is configured as a proxy () for one of multiple different core network domains of a wireless communication system (). The network equipment () is configured to receive a message () that has been, or is to be, transmitted between the different core network domains. The network equipment () is further configured to perform inter-domain security measures according to a security policy (). The security policy () may indicate which one or more portions of (e.g., the content of a field in) the message () are to be used by inter-domain security measures (e.g., inter-domain anti-spoofing measures) and/or which types of messages are to be used by the inter-domain security measures.

Message transmission between core network domains

A method by a first security edge protection proxy (SEPP) for security edge protection of messages being communicated between first and second communications networks of a communications system. The method receives, from a first network function of the first communications network, a first message containing an address identifying a second network function which is located in the second communications network. The method receives, from a second SEPP operating to protect communications with the second communications network, a second message containing a fully qualified domain name, FQDN, reference for a combination of the second SEPP and the second network function. The method stores the FQDN reference for the combination of the second SEPP and second network function in a label-to-FQDN mapping data structure with a logical association to a substitute locally-unique label, and sends a third message containing the substitute locally-unique label to the first network function.

Fully qualified domain name handling for service interactions in 5G

A method performed by a first node implementing a first NF in a visited network (VPLMN) for communicating with a third node implementing a second NF in a home network (HPLMN) is provided. Embodiments include: determining that the third node should be communicated with; sending, towards a second node implementing a Security Edge Protection Proxy (SEPP) in the visited network, a request for a telescopic FQDN for the third node in the home network to be used by the first node in the visited network to communicate with the third node in the home network, which request comprises a FQDN of the third node in the home network; receiving, from the second node, a telescopic FQDN for the third node wherein the FQDN for the third node in the home network is flattened to a single label to be used by the first node to communicate with the third node.

Growing community of inventors

Keuruu, Finland

Juha Kujanen