Nokia Corporation

Nokia Telecommunications Oy

Huawei Technologies Co., Limited

Nokia Technologies Oy

Nokie Technologies Oy

Philip Ginzboorg

Nadarajah Asokan

Pekka Laitinen

Jan-Erik Gustav Ekberg

Valtteri Niemi

Hua Li

Kari Leppanen

Sampo Juhani Sovio

Markku Tapio Turunen

Kari Juhani Leppänen

Mika Kasslin

Gabor Bajko

Silke Holtmanns

Mario Costa

Seamus Peter Moloney

Andrey Krendzel

Mikko Aleksi Uusitalo

Esa Mikael Malkamaki

Tuija Helena Hurtta

Janne Marin

Lu Gan

Jaakko Rajaniemi

Henry Haverinen

Sami Virtanen

Timo Rantalainen

Antti Sorri

Henrik Lundqvist

Miikka Poikselkä

Martin Zilliacus

Mikko Tirronen

Pentti Valtteri Niemi

Gunnar Hedby

Mikko Olkkonen

Lauri Laitinen

Enrico Rantala

Kalle Tammi

Timo Kauhanen

Kari Heiska

Marko Hännikäinen

Xavier Gelabert

Enrico-Henrik Rantala

Kari Kostiainen

Lars Rene Eggert

Kari Timo Juhani Kostiainen

Esa Malkamäki

Auvo Hartikainen

Kari Miettinen

Richard Fehlmann

Shreekanth Lakshmeshwar

Javier Lafuente

Antti Ylä-Jääski

Janne Kulmala

Antti Laine

Hamza Harkous

Kari Ti Kostiainen

Jari Takala

Valterri Nieml

John Solis

Joerg Ott

Cheng Luo

Toni Miettinen

Sirpa Kuisma

Tom Helenius

Antti Yl&auml;-Jaaski

Pekka Johannes Laitinen

Kari Leppänen

Pentti Niemi

Seamus Moloney

This application provides an extended authentication method and apparatus for a generic bootstrapping architecture and a storage medium. A first network element obtains a bootstrapping transaction identifier (B-TID) and a key lifetime; and the first network element sends the B-TID and the key lifetime to the terminal, so that the terminal performs extensible authentication protocol (EAP)-based generic bootstrapping architecture (GBA) authentication and key agreement (AKA) authentication with the first network element based on the B-TID and the key lifetime.

Extended authentication method and apparatus for generic bootstrapping architecture, and storage medium

A network authentication system comprises user equipment (UE), a service network (SN) and a home network (HN). The HN generates an expected user response (XRES) based on an identifier of the UE and generate an indicator, and sends the part of XRES and the indicator to the SN. The SN receives the part of XRES and indicator, and receives a user response (RES) from the UE. The SN then compares the RES with the XRES base on the indicator, and sends a confirmation message to the HN when the comparison succeeds.

Network authentication method, device, and system

A key distribution and receiving method includes obtaining, by a first key management center, NAF key information of the first network element and a NAF key of the first network element, wherein the NAF key information of the first network element is information required to obtain the NAF key of the first network element. A service key is obtained. Using the NAF key of the first network element to perform encryption and/or integrity protection on the service key, a first security protection parameter is generated. A first generic bootstrapping architecture GBA push message is sent to the first network element. The GBA push message carries the first security protection parameter and the NAF key information of the first network element.

Key distribution and receiving method, key management center, first network element, and second network element

The invention relates to a network entity for geographically routing a data packet towards a mobile device over a communication network.

Network entity for geographically routing a data packet towards a mobile device over a communication network

A flow controller for controlling a data flow through a mobile communication network includes a processor configured to receive a request from a network entity, the request indicating interfaces of the network entity and a data flow destination, and determine at least one interface and a path from a data flow policy of the mobile communication network. The processor is also configured to send a reply to the network entity, the reply indicating at least one of the interfaces of the network entity to be used for the data flow and the path to be used for the data flow.

Method and apparatus for handling data flow in wireless communication networks

The present invention relates to a communication device and an access node. The communication device comprises: a processor, and directional antennas; wherein the directional antennas are configured to receive a first signal Sindicating a calibration request (CR) for an access node; wherein the processor is configured to generate directional beacon signals Sin response to the calibration request (CR); wherein the directional antennas are further configured to transmit the directional beacon signals Stowards the access node (). The access node () comprises: a processor, and an antenna array; wherein the antenna array is configured to receive directional beacon signals Sfrom at least one communication device; wherein the processor is configured to calibrate the antenna array based on the directional beacon signals S.

Communication device, access node and methods thereof

A computing apparatus configured to communicate with nodes of a wireless communication system. The computing apparatus includes a processor configured to receive a radio link measurement corresponding to a user node. The processor determines a physical disturbance based on the radio link measurement and determines an at risk user node and a time at which the at risk user node is likely to experience a radio link disturbance, based on the physical disturbance. The processor then determines a connectivity adjustment for the at risk user node, and sends the determined connectivity adjustment to the wireless communication system.

Method and apparatus for connectivity adjustment in a wireless communication network

An approach is provided for performing authentication in a communication system. In one embodiment, a key is established with a terminal in a communication network according to a key agreement protocol. The agreed key is tied to an authentication procedure to provide a security association that supports reuse of the key. A master key is generated based on the agreed key. In another embodiment, digest authentication is combined with key exchange parameters (e.g., Diffie-Hellman parameters) in the payload of the digest message, in which a key (e.g., SMEKEY or MN-AAA) is utilized as a password. In yet another embodiment, an authentication algorithm (e.g., Cellular Authentication and Voice Encryption (CAVE)) is employed with a key agreement protocol with conversion functions to support bootstrapping.

Method and apparatus for providing bootstrapping procedures in a communication network

A method for establishing an encrypted communication channel is described. Query IDs are generated at a first device. Each query ID identifies a keyword in a set of keywords. Query IDs are received, at a second device. A second set of keywords is determined by the second device based on the query IDs. Match IDs are determined based on the second set. Each match ID identifies a keyword in the second set. An encryption key is generated based on the second set. A response is sent which includes the match IDs and an encrypted message. At the first device, the second set is determined based on the match IDs. The second set includes keywords of the first set of keywords identified by the match IDs. The encryption key is generated at the first device and the encrypted message is decrypted. Apparatus and computer readable media are also described.

Discovery and secure transfer of user interest data

Systems and techniques for key management in mobile ad hoc networks are described. Pseudonyms are defined for group members of mobile ad hoc networks such that a pseudonym in a message can be deterministically identified with the sending device only by the sending device and the message recipient. Key management for a group is performed by a group manager, and key management may include key renewal and revocation. Key renewal is performed by a group manager, with the group manager using a set of couple pseudonyms, including a couple pseudonym between the manger and each group member. Key renewal employs a renewal key used to encrypt the updated group key, and the group manager updates the group key be transmitting a message to each group member in proximity, with the message being identified using the couple pseudonym of the manager and the group member.

Methods and apparatus for anonymous key management in mobile ad hoc networks

A method includes receiving a command to change a medium access control (MAC) address associated with a wireless local area network (WLAN) apparatus; and changing the medium access control address, without restarting a wireless modem of the apparatus, only if a restriction on an allowed rate of medium access control address changes is not violated. An apparatus that operates in accordance with the method is also described.

Limiting rate of MAC address change in wireless modem

A method for security for inter-RAT carrier aggregation is disclosed. The method includes encrypting a message using an encryption technique for a first RAT. The method also includes sending, to a UE, at least a portion of the encrypted message using a different, second RAT. Sending using the second RAT does not further encrypt the at least a portion of the encrypted message. The method further includes receiving the at least a portion of the message encrypted using the first RAT protocol. Receiving uses the second, different RAT. The method also includes decrypting the at least a portion of the message using the first RAT protocol. Apparatus and computer readable media are also described.

Security solution for integrating a WiFi radio interface in LTE access network

A method including changing an access address of a network interface of a wireless network node, changing a frame sequence number of a network interface of the wireless network node in an unpredictable manner, and performing the changing of the access address and changing of the frame sequence number in a coordinated manner.

Location privacy in communication networks

Message authentication in an ad-hoc network. Upon creation of a message, a message authentication code is created using a key shared with members of a group comprising a subset of nodes of the ad-hoc network. The message authentication code may be created using a cryptographic process having the message and a message identifier as inputs. After or in parallel with broadcast of the message, a pointer to the message is broadcast. The message authentication code is publicly broadcast and those members of the group among which the key has been shared are able to authenticate the message as coming from a particular sender.

Methods and apparatus for authentication

Growing community of inventors

Espoo, Finland

Philip Ginzboorg