Telefonaktiebolaget Lm Ericsson (Publ)

Optis Wireless Technology, LLC

Patrik Salmela

Vesa Lehtovirta

Jaime Jiménez

Jari Arkko

Bernard Smeets

Oscar Novo Diaz

Nicklas Beijar

Robert Baldemair

Paul Schliwa-Bertling

Johan Rune

Yufei W Blankenship

Yi-Pin Eric Wang

John Walter Diachina

Stefan Wager

Sorour Falahati

Karl Norrman

Pradeepa Ramachandra

Miguel Lopez

Kumar Balachandran

Joachim Sachs

Andreas Höglund

Torsten Dudda

Osman Nuri Can Yilmaz

Jonas Fröberg Olsson

Jose Luis Pradas

Riikka Susitaival

Niklas Andgart

Mattias Andersson

Sándor Rácz

Peter Ökvist

János Farkas

Ying Sun

Dinand Roeland

György Miklós

Henrik Enbuske

Stefano Ruffini

Tommy Arngren

Nianshan Shi

Zhenhua Zou

José Araújo

Sara Sandberg

Dennis Sundman

Anna Larmo

Ari Keränen

Balázs Varga

Magnus Sandgren

Kittipong Kittichokechai

Geza Szabo

Harald Gustafsson

Kimmo Juhani Hiltunen

Pekka Nikander

Per Persson

Kazi Wali Ullah

Abu Shohel Ahmed

Mohit Sethi

Miika Komu

Jukka Ylitalo

Alireza Ranjbar

Petri Jokela

Jan Melén

Tero Kauppinen

Per Ståhl

András Méhes

Alexey Shapin

Norbert Reider

Zhang Fu

Kristian Slavov

Dhruvin Patel

Mert Ocak

Edgar Ramos

András Kern

Joakim Persson

Abdulrahman Alabbasi

Alexandros Palaios

Zsolt Kenesi

Ola Angelsmark

Parth Amin

Michael Liljenstam

Gabor Nemeth

Francesco Militano

Kun Wang

Miljenko Opsenica

Majid Gerami

Johan Lundsjö

Bikramjit Singh

Hubertus Andreas Munz

Tomas Mecklin

Teemu Rinta-Aho

Le Wang

Mårten Wahlström

Heidi-Maria Back

Géza Szabó

John Fornehed

Johan Kristofer Olsson

Gábor Németh

Fredrik Svensson

Johannes Nygren

Roberto Morabito

Muhammad Ikram Ashraf

There is provided a method performed by a first wireless device that is roaming in a visited network. The method comprises measuring () an amount of data transmitted and/or received by the first wireless device in a first session with the visited network; using () a private key to generate a signature for a data usage record that comprises the data measurement, wherein a public key corresponding to the private key is associated, by a home network of the first wireless device, with the first wireless device; and sending () the data usage record to the visited network.

Data usage records for roaming wireless devices

There is provided mechanisms for authenticating a first radio communication device with a network. A method is performed by the first radio communication device. The method comprises obtaining credentials for a network subscription to the network. The method comprises obtaining an upper part of a radio protocol stack, according to which radio protocol stack the first radio communication device is configured to communicate with the network. The method comprises authenticating with the network. The method comprises providing, to a second radio communication device, at least one key, as derived from the credentials during the authenticating, for use by the second radio communication device when executing the remaining part of the radio protocol stack for communication between the second radio communication device and the network.

Authentication of a radio communication device to a network

Techniques for enhancing performance in Industrial Internet-of-Things (IIoT) scenarios, including techniques for time-sensitive networking (TSN) and 5G wireless network integration. An example method, performed by a wireless device, comprises receiving system information (SI) from a radio base station (RBS) of a radio access network (RAN), the SI being indicative of support for TSN through the RBS, and establishing at least one TSN stream with an external data network, through the RBS. The example method further includes receiving a first timing signal from the wireless communications network, via the RBS, receiving a second timing signal from the external TSN data network to which the wireless device is connected, comparing the first timing signal to the second timing signal to determine an offset, and transmitting the offset to the wireless communications network.

Industrial automation with 5G and beyond

A Bluetooth device () is disclosed, the Bluetooth device being provisioned with a security credential () that is shared with an authentication server (). The Bluetooth device comprises processing circuitry configured to use a Bluetooth pairing mechanism to establish a pairing with a Bluetooth gateway (-) by establishing a shared secret key with the Bluetooth gateway and to perform an Extensible Authentication Protocol (EAP) authentication method towards the authentication server using the security credential, wherein performing the EAP authentication method comprises using the paired Bluetooth gateway to forward messages to and from the authentication server. The processing circuitry is further configured to bind the pairing established with the paired Bluetooth gateway to the performed EAP authentication method. Also disclosed are a Bluetooth gateway and methods performed by a Bluetooth device and a Bluetooth gateway.

Bluetooth device and Bluetooth gateway

There is provided mechanisms for enabling subscription profile download to a subscriber entity. A method is performed by a network node of an SNPN. The method comprises receiving a request from the subscriber entity for network registration with EAP based authentication to the SNPN. The method comprises granting network connectivity for the subscriber entity to the SNPN by completing the network registration upon successful EAP based authentication of the subscriber entity and upon verification that there is a pending subscription profile available for download to the subscriber entity. The network connectivity enables subscription profile download to the subscriber entity.

Remote subscription profile download

There is provided mechanisms for remote provisioning of a SIM profile to a subscriber entity. A method is performed by a remote SIM provisioning server. The method includes obtaining a request from an MNO entity for generation of the SIM profile. The method includes generating the SIM profile. The method includes providing, to a storage entity, a key-value pair of the SIM profile. The key-value pair includes a unique identifier including at least one profile specific element of the SIM profile as key and binding information of the at least one profile specific element as value. The unique identifier including at least one profile specific element of the SIM profile is represented by an ICCID of the SIM profile. The binding information of the at least one profile specific element is represented by an EID and profile/subscription unique data elements for the SIM profile.

Part 1 of remote SIM provisioning of a subscriber entity

There is provided mechanisms for event handling for at least one subscriber entity. A method is performed by an event handling server. The method comprises obtaining, from an RSP entity, an event registration message of the event. The event registration message comprises an identifier field containing a string of characters identifying the at least one subscriber entity. The string of characters comprises at least one marker character specifying an event type and/or indicating that the event is valid for more than one subscriber entity. The method comprises storing an event record of the event. The event record comprises the identifier field and an address of that RSP entity from which data of the event is to be fetched. The method comprises providing the event record to the at least one subscriber entity.

Event handling of subscriber entities

There is provided mechanisms for certificate revocation check during a subscription related procedure for a subscriber entity. A method is performed by the subscriber entity. The method comprises receiving a message from a subscription management entity during the subscription related procedure for the subscriber entity. The message comprises a certificate and an OCSP response for the certificate. The OCSP response indicates a revocation state of the certificate. The method comprises determining whether the certificate has been revoked or not by checking the revocation state as indicated in the OCSP response.

Certificate revocation check

There is provided mechanisms for remote provisioning of a SIM profile to a subscriber entity. A method is performed by a remote SIM provisioning server. The method comprises obtaining a request from an MNO entity for generation of the SIM profile. The method comprises generating the SIM profile. The method comprises providing, to a storage entity, a key-value pair of the SIM profile. The key-value pair comprises a unique identifier comprising at least one profile specific element of the SIM profile as key and binding information of the at least one profile specific element as value. The unique identifier comprising at least one profile specific element of the SIM profile is represented by profile/subscription unique data elements for the SIM profile. The binding information of the at least one profile specific element is represented by an BID of the subscriber entity, ICCID of the SIM profile, IMSI, and an MNO identifier. The method comprises providing, to the subscriber entity requesting download of the SIM profile, the SIM profile.

Part 2 of remote SIM provisioning of a subscriber entity

There is provided mechanisms for a manufacturer of an ML model to embed at least one marker in an electronic file. A method comprises obtaining the electronic file. The electronic file represents content that causes the ML model to determine an output for the electronic file according to a first processing strategy. The method comprises embedding, in the electronic file, the at least one marker that, only when detected by the ML model, causes the output of the electronic file to be determined according to a second processing strategy. The second processing strategy is unrelated to the first processing strategy and deterministically defined by the at least one marker.

Identification of copied ML model

A method for operating a system hosted on a mobile entity is disclosed, wherein the system is operable to connect to a communication network. The method, performed by a controller of the system, comprises seeking to establish a trust relationship with a cooperating system hosted on a mobile entity, and, if a trust relationship with the cooperating system is established, performing at least one of: initiating use of a resource provided by the cooperating system, or initiating provision of a resource for use by the cooperating system. Also disclosed is a method for operating a function comprising a digital representative of a system hosted on a mobile entity, wherein the system is operable to connect to a communication network. The method, performed by the function, comprises negotiating, with a digital representative of a cooperating system hosted on a mobile entity, at least one of provision of a resource to the system by the cooperating system, or provision of a resource to the cooperating system by the system.

Resource provision for mobile entities

A method of ending a subscription performed in a network entity is disclosed. The method comprises receiving, from a device comprising an Embedded Universal Integrated Circuit Card, eUICC, a signed confirmation of a profile having been deleted in the device, the profile being associated with a subscription for the device; sending, to a Subscription Manager Data Preparation entity, a command for deletion of the profile; and deleting the user subscription and related profile in case an acknowledgement of the deletion of the profile is received from the Subscription Manager Data Preparation entity. Method in a device, method in a Subscription Manager Data Preparation entity, devices and entities, computer programs and computer program products are also provided.

Methods and entities for ending a subscription

Embodiments relate to a method for secure domain name system, DNS, queries. The method is performed in a DNS client, and the method includes obtaining an encryption key and internet protocol, IP, address for a final DNS resolver, creating a session key, encrypting a DNS query and the created session key with the obtained encryption key, and sending a DNS message containing the encrypted DNS query and the created session key to an intermediate DNS resolver, different from the final DNS resolver, together with the obtained IP address for the final DNS resolver. Methods, nodes, computer programs, and a computer program product for secure DNS queries are also presented.

Domain name system queries

There is provided mechanisms for handling a subscription profile for a subscriber entity. A method is performed by a subscription management entity. The method comprises obtaining a request from a mobile network operator entity to configure the subscription profile for the subscriber entity. The method comprises configuring the subscription profile with a customized PIN/PUK code for the subscriber entity. The method comprises providing an indication of the customized PIN/PUK code being configured in the subscription profile in a response to the mobile network operator entity.

Customized PIN/PUK remote provisioning

Growing community of inventors

Espoo, Finland

Patrik Salmela