Nokia Corporation

Nokia Technologies Oy

Risto Mononen

Nadarajah Asokan

Pekka Laitinen

Shavantha Kularatna

Sandro Grech

Shkumbin Hamiti

Tuomas Niemela

A method of authenticating a user seeking access to a service from a service provider in a communication network, the method comprising: allocating to a user a plurality of service-specific identities for accessing respective services; issuing a request from the user, the request identifying the service to be accessed and including a public key of the user; at a certification authority, authenticating the request and issuing a public key certificate for binding the service-specific identity with the public key in the request, and returning the public key certificate to the user.

Authenticating users

A mechanism for providing a mobile node with reliable information for location privacy decisions in connection with an address update process that gives the correspondent node a chance to deduce the location of the mobile node is provided. According to one embodiment of the invention, an indication is given when an address update process needs to be performed for optimizing routing between a mobile node and a correspondent node. In response to the indicating step, the correspondent node may be authenticated, the authentication yielding identity information about the correspondent node. Based on the identity information, a route optimization decision may be made based on whether or not the address update process is to be performed, and the address update process may be carried out depending on the decision.

Location privacy in a communication system

The method and system provides a data packet encapsulated with protocol data according to an embodiment of the invention. A data packet for communication may be associated with a TLLI and a NSAPI identifying a communications path between a BSS and a SGSN. The method and system provides a BVC associated with the BSS and the SGSN and a NSE that provides communication service to the BVC over NS-VC. The BVC, NSE and NS-VC may be associated with the TLLI and NSAPI. The encapsulated protocol data comprises UDP and IP. UDP provides UDP ports associated with NS-VC. The UDP ports identified as data designated as either real time or non-real time services. IP provides an IP address identifying the NSE providing service to the BVC. The data packet encapsulated with UDP and IP provides for more efficient, flexible and reliable communications between a BSS and a SGSN.

Method and system for communicating data between a mobile communications architecture and a packet switched architecture

The present invention discloses a method for classifying packets in a packet network. The method comprises the steps of detecting (S) the length of a packet and classifying (S, S, S) the packets depending on the detected length. By this method, it is possible to easily determine the different classes of packets by referring to the length of a packet. Hence, no special control data fields have to be generated and added to the packets in order to provide them with different transmission qualities in dependence on their class or type. Furthermore, the present invention also discloses a routing device adapted to carry out the method.

Growing community of inventors

Espoo, Finland

Risto Mononen