Telefonaktiebolaget Lm Ericsson (publ)

Shingo Murakami

Toshikane Oda

Johan Hjelm

Takeshi Matsumura

Shinta Sugimoto

Kenta Yasukawa

Ryoji Kato

Robert Bengt Skog

Kristoffer Gronowski

Justus Petersson

Torbjörn Cagenius

Hajime Kasahara

Mats Näslund

Ayodele Damola

Luis Barriga

Bo Xing

Stefan Avesand

Andrew Ton

Ryohi Kato

Tashikane Oda

A mediation server for mediating subscription information to a communication device from a network operator providing network connectivity is provided. The server includes a management unit for managing context information of a communication device, which includes data relating to service provided by a network operator; an obtaining unit for obtaining device information of the communication device, which includes data needed to obtain subscription information from a network operator; a selecting unit for selecting, using the context information, a network operator that provides the best service to the communication device out of network operators that are able to provide network connectivity to the communication device; and a request unit for sending a request, with the obtained device information to the selected network operator, for subscription information which is to be used for the communication device to connect to the selected network operator as a home network operator.

Mediation server, communication device, and connecting method

A method comprising the use of a bootstrapping protocol to define a security relationship between a first server and a second server, the first and second servers co-operating to provide a service to a user terminal. A bootstrapping protocol is used to generate a shared key for securing communication between the first server and the second server. The shared key is based on a context of the bootstrapping protocol, and the context is associated with a Subscriber Identity Module (SIM) associated with the user terminal and provides a base for the shared key. A method of the invention may, for example, be employed within a computing/service network such as a 'cloud', and in particular for communications between two servers in the cloud that are co-operating to provide a service to a user.

Method and apparatus for using a bootstrapping protocol to secure communication between a terminal and cooperating servers

There is provided a mobile terminal for use in a system which includes a backend server having a first encryption key and an onboard unit (OBU). A first receiving unit receives, from the backend server, a base shared key encrypted with a second encryption key, the base shared key encrypted with the first encryption key, and a digital signature. A deriving unit decrypts the base shared key with the second encryption key and derives first authentication information based on the base shared key and a first temporary parameter. A second sending unit sends, to the OBU, the base shared key encrypted with the first encryption key, the digital signature, the first authentication information, identification information of the base shared key, and the first temporary parameter.

Mobile terminal, control method thereof, onboard unit, control method thereof, backend server, and control method thereof

There is provided an apparatus () for managing assignment of subscription modules () for a group () of communication devices (-). The apparatus includes a receiving unit () configured to receive a request for assigning a subscription module to a target communication device () so that the target communication device can attach to a network managed by a network () operator; and a control unit () configured to identify a group which includes the target communication device, determine whether the number of subscription modules which are assigned to the communication devices in the identified group reaches the upper bound, and when the number of the subscription modules does not reach the upper bound, assign a subscription module to the target communication device.

Subscription module assignment managing server and subscription module assignment managing method

A communication device comprising a central processing unit (CPU) and a memory device is disclosed. The CPU is configured to send a first attach request including a first subscription identity (FSI) to the network apparatus, receive an authentication request including a random number and an authentication token from the network apparatus as a response to the first attach request. Further, the CPU is configured to authenticate the authentication token using the random number and a first key associated with the FSI, obtain a second key and a second subscription identity (SSI) in response to authentication of the authentication token failing, where SSI is obtained from the authentication request. The CPU is further configured to send an authentication failure to the network apparatus. The second key and SSI are stored in the memory device such that the second key is associated with SSI.

Authentication server and communication device

An object of embodiments of the present invention is to establish a secure connection from a device to a private network, to which the device belongs, when the device may be located remotely from the private network. This is achieved by locating a server in the private network while reusing existing authorization mechanisms in the network. A target resource is in this private network and a device located outside the private network can access the target resource by using the server and a proxy agent which intermediates a request from the device by using a one time session URL.

Methods, server and proxy agent for dynamically setting up a session between a target resource in a private network and an application on a device

An operator selecting apparatus and a method for selecting a home operator for each communication device in a group. A first selecting unit of the operator selecting apparatus selects, for each quality-oriented communication device in the group, a candidate operator out of a plurality of the candidate operators that is determined based on the quality information to provide the best quality of service to the communication device. The second selecting unit of the operator selecting apparatus then selects, for each cost-oriented communication device in the group, based on the billing system and a number of quality-oriented communication devices assigned to the each candidate operator as a result of the selection by the first selecting unit, a candidate operator out of the plurality of the candidate operators such that a total cost for all the communication devices in the group becomes lowest.

Operator selecting apparatus and method for selecting a home operator for each communication device in a group

The present invention relates to auto-provision of wireless devices. A wireless device () has a device identifier and a first private key generated from the device identifier. A registration server () has an operator identifier and a second private key generated from the operator identifier. The wireless device () transmits the device identifier to the registration server (), and the registration server () transmits a subscriber identifier to the wireless device (). The wireless device () generates a shared key based on the operator identifier and the first private key, and the registration server () generates the shared key based on the device identifier and the second private key.

Wireless device, registration server and method for provisioning of wireless devices

The present invention relates to auto-provisioning of authentication data for client devices. A registration server includes a gateway determination unit, which is configured to determine a gateway apparatus transferring a request signal from a device, and a processing unit. The processing unit is configured to transmit a first signal including a token and first access information of the gateway apparatus to the device if an identifier of the gateway apparatus is stored on the server, and to transmit a second signal indicating a positive response to the gateway apparatus when it obtains the token and the identifier based on a third signal received in response to the first signal. The gateway apparatus sends the secret value to the device when it receives the second signal.

Registration server, gateway apparatus and method for providing a secret value to devices

An image matching apparatus is provided. The apparatus includes a storage unit, an obtaining unit, a specification unit, and an image matching unit. The storage unit is configured to store image data of one or more devices that are connected to a local network. The obtaining unit is configured to obtain image data of device image obtained by capturing a device. The specification unit is configured to specify one or more local networks to be used for image matching. The image matching unit is configured to perform image matching of the obtained image data against the stored image data of one or more devices that are connected to the specified local network.

Image matching apparatus and image matching method

Rather than forcing users to give personally identifying contact data to information providers, this disclosure teaches an apparatus and method enabling the use of 'private tokens,' which allow information providers to send electronic communications to targeted users without having access to personally identifying contact information. These features are provided by an anonymous communication service that manages the private tokens and provides communication proxy services intermediating the electronic communications between the information providers and the users targeted by those communications.

Method and apparatus for private token communication services

One aspect of the present invention will provide a first gateway apparatus configured to be connectable to a local network and an external network, to obtain presence information of a device apparatus on the local network and to provide the obtained presence information to a presence management apparatus on the external network, the first gateway apparatus comprising, an obtaining unit configured to obtain the presence information of the device apparatus, a transmitter configured to transmit the presence information to the presence management apparatus via the external network, and a receiver configured to receive, from the presence management apparatus, a suppression instruction of the presence information transmission, wherein the transmitter further configured to suppress the transmission of the presence information to the presence management apparatus after the reception of the suppression instruction.

Gateway apparatus and presence management apparatus

In the first embodiment, the mobile phoneobtains the PCID from the CCE, and sends the PCID and the IMSI of the USIM of the mobile phoneto the CAPS. The MCC+MNC part of the IMSI is later used as the operator identification information by the mediation server, which is operated by the RO, in order to identify the SHO for the CCE. The MSIN part of the IMSI is later used as the user identification information by the account managing server, which is operated by the SHO, in order to identify the user of the mobile phone. The mediation serverforwards the account request from the CCEto the account managing serverof the SHO identified by the operator identification information. The account managing servergenerates the MCIM that is associated with the user identified by the user identification information.

Mediation server, control method therefor, communication device, control method therefor, account provisioning server, and control method therefor

There is provided a telephone that is capable of accessing a memory for storing subscription information that includes a phone number. The telephone comprises, among other things: a searching unit that searches the memory for second subscription information that is different from the first subscription information selected by the selecting unit; an obtaining unit that obtains a first phone number included in the first subscription information and transfer source information that enables a call transfer server of a network operator associated with the second subscription information to identify a second phone number included in the second subscription information; and a sending unit that sends, to the call transfer server, a call transfer request for requesting the network operator to transfer a call addressed to a phone number, which is identified by the call transfer server based on the transfer source information, to the first phone number.

Telephone, control method therefor, provisioning server, and control method therefor

The present invention generally relates to a gateway, a method for controlling the gateway, an application server, and a method for controlling the application server. The present invention particularly relates, but is not limited to, a technology that facilitates the formation of a single network from a plurality of local networks.

Growing community of inventors

Kanagawa, Japan

Shingo Murakami