Telefonaktiebolaget Lm Ericsson (publ)

Qiang Li

Justus Petersson

Athanasios Karapantelakis

Ioannis Fikouras

Konstantinos Vandikas

Leonid Mokrushin

Rafia Inam

Aneta Vulgarakis Feljan

Maxim Teslenko

Tomas Holm

Stefan Thuresson

Bernard Smeets

Joerg Niemoeller

Per Ståhl

Yifei Jin

Maria Esther Bas Sanchez

Cristian Norlin

Antonio Alonso Alarcon

Marcus Gårdman

Andreas Cleverdal

Martin Ryan

Niclas Jonasson

Rana Pratap Sircar

Ola Dahlqvist

Hans Thorsen

Thomas Bergenwall

Michael Buisman

Stefan Schmidt

Niclas Anglert

Per STÅHL

Systems and methods are provided for maintaining data privacy in a communication system. The method includes: providing a proxy network which creates a plurality of ingress processing elements and a plurality of egress processing elements, wherein the ingress processing elements and the egress processing elements each include at least a private processing unit and a private memory area; receiving a request at a selected ingress processing element from a first server; routing the request from the selected ingress processing element to a selected egress processing element; forwarding the request from the selected egress processing element to a second server; and erasing both the selected ingress processing element and the selected egress processing element.

Proxy network with self-erasing processing elements

Embodiments described herein relate to methods and apparatuses for enabling remote management of a profile in an identity module in an NB-IoT device. A proxy server is configured with access to a database of one or more external identifiers associated with one or more respective NB-IoT devices, wherein the one or more external identifiers are used to address the respective one or more NB-IoT devices via an exposure function in a core network. A method in the proxy server comprises receiving a request to deliver a triggering message to the NB-IoT device, wherein the request comprises a device identifier; determining an external identifier based on the received device identifier; and delivering the triggering message to the NB-IoT device using the external identifier.

Methods and apparatus for enabling remote management of a profile in an identity module

An operator system of a wireless communication network operator sends, to a regulator system of a regulator, a record that includes information about administration of a subscription identifier associated with the wireless communication network operator. Responsive to sending the record to the regulator system, the operator system receives a response that indicates whether the regulator system approves of or rejects the record being added to a permissioned distributed database that is distributed at least in part between the regulator system and the operator system. The operator system adds or does not add the record to the permissioned distributed database depending on the response.

Administration of subscription identifiers in a wireless communication network

Methods and devices enable connecting devices to cellular networks using the devices' hardware identifiers. Subscriber records include a hardware identifier assigned when the devices are manufactured. A target hardware identifier included in an attachment request is associated with an International Mobile Subscriber Identity, IMSI, available to the cellular network if, according to subscriber records, the device is registered.

Method and devices for hardware identifier-based subscription management

Methods are disclosed for provisioning and/or controlling operator profiles in terminals, each having an integrated circuit card identified by an integrated circuit card identifier. According to one aspect, a discovery server is configured with an authorization table including associations of integrated circuit card identifier, service provider identifier, and operator identifier(s). The discovery server receives, from a data preparation node, an event registration request that includes a number of elements. The discovery server determines whether the event is authorized. If so, the event is registered. This enables a terminal to seek to retrieve the event, to contact the data preparation node, and to eventually perform the profile operation. Some embodiments enable the network-initiated provisioning and/or controlling of operator profiles in machine-to-machine devices.

Methods, devices, and computer programs for provisioning or controlling operator profiles in terminals

Method and system for Root Cause Analysis (RCA) across multiple network systems. Update information of a first local root cause analysis mechanism is received. An RCA controller generates, based on the update information, a new node to be added to a global root cause decision tree, where the global root cause decision tree is to be shared by at least two of the plurality of network operators. The RCA controller requests storage of the new node in a distributed ledger that is shared by network operators. The RCA controller participates in a verification operation of the new node. In response to determining that the verification operation is successful, the RCA controller adds an entry including the new node to the distributed ledger as part of the global root cause decision tree. Alternatively, when the verification operation is not successful, the new node is not added to the distributed ledger.

Method and system for root cause analysis across multiple network systems

A regulator system () of a regulator regulates administration of subscription identifiers. The regulator system () is configured to receive, from either an operator system () of a wireless communication network operator or an enterprise system of an enterprise, a record that includes information about administration of a subscription identifier associated with the wireless communication network operator. The regulator system () is also configured to verify whether administration of the subscription identifier as indicated by the record conforms to one or more rules () governing administration of subscription identifiers. The regulator system () is further configured to, depending on the verification, approve or reject the record for addition to a permissioned distributed database () (e.g., a permissioned blockchain) that is distributed at least in part between the regulator system () and either the operator system () or the enterprise system.

Methods () and devices () enable tracking using existing mobile networks' infrastructure. A radio module (, R,) that is attached to a shipment sends one or more network attachment requests including a network-type identifier. Although the requests are rejected, the network records location information if the network-type identifier is actively associated with a shipment identifier.

Method and system for cellular-based shipment tracking

There is provided mechanisms for remote provision of a subscriber entity to a PLMN in a communications network. A method is performed by the subscriber entity. The method comprises obtaining a first list of PLMN IDs in the communications network for which a signal quality criterion is fulfilled. The method comprises providing the first list of PLMN IDs and eUICC ID of the subscriber entity to a network server. The method comprises receiving a third list of PLMN IDs from the network server, wherein the third list of PLMN IDs is based on the first list of PLMN IDs. The method comprises selecting, when the third list of PLMN IDs is a non-empty list, one PLMN from the third list of PLMN IDs to remotely provision the subscriber entity.

Remote provision of a subscriber entity

A provisioning node connected to a subscription manger can receive a provisioning profile request from a device. The provisioning profile request can include an identifier of the device. The provisioning node can further authenticate the device. The provisioning node can further obtain a provisioning profile for the device using the identifier of the device. The provisioning node can further send the provisioning profile to the device.

Methods for automatic bootstrapping of a device

Methods and devices enable communication via a wireless network with moving vehicles, depending on the likelihood or presence of an emergency situation. The communication may be enabled also when an Internet connection is present.

Dynamic allocation and de-allocation of MSISDN to vehicles

There is provided mechanisms for transfer of a network subscription profile from a first subscriber device to a second subscriber device. The method is performed by the first subscriber device. The method comprises establishing a secure binding with the second subscriber device. The method comprises 5 obtaining a request for transfer of the network subscription profile. The method comprises obtaining end-user confirmation of the transfer of the network subscription profile to the second subscriber device. The method comprises deleting the network subscription profile from itself upon transfer of the network subscription profile to the second subscriber device.

Transfer of a network subscription profile between devices

A radio device in a communication network comprises an embedded Universal Integrated Circuit Card. The radio device stores a device fall-back policy based on a fall-back policy message received from a connectivity service platform that is separate from the radio device and in the communication network. The radio device receives, from the connectivity service platform, an event message indicating disablement, deactivation, or termination of a subscription of the radio device with a network operator. The event message is received from the connectivity service platform via a wireless network connection of the subscription. Responsive to determining that the radio device will lose the wireless network connection of the subscription due to the disablement, deactivation, or termination, the radio device obtains a different wireless network connection for the radio device using a different subscription by falling back in accordance with the stored fall-back policy.

Event based eUICC fall-back

The present disclosure relates to a method performed by a connectivity service platform () in a communication network (). The method comprises receiving a request message () from a radio device () via a wireless network connection of a second subscription of the radio device. The method also comprises observing that the connectivity service platform is not enabled to communicate with the radio device via the wireless network connection of the second subscription. The method also comprises determining that the received request message is associated with a fall-back attribute. The method also comprises activating the second subscription in the connectivity service platform in response to the received request message, thereby enabling the connectivity service platform to communicate with the radio device via the wireless network connection of said second subscription of the radio device.

Growing community of inventors

Täby, Sweden

Qiang Li