Telefonaktiebolaget Lm Ericsson (publ)

Kaloom Inc

Suresh Krishnan

Catherine Truchan

Stere Preda

Laurent Marchand

Benoit Tremblay

Per Andersson

Wassim Michel Haddad

Alan Kavanagh

Peyman Talebi Fard

Kim Laraqui

Meral Shirazipour

Geoffrey Lefebvre

Daniel Migault

Jaume Rius I Riu

Ludovic Beliveau

Sándor Albrecht

Jon Maloy

Sumit Singhal

Desire Oulai

Henrik Almeida

Frederic Rossi

Filipe Alexandre Rodrigues De Moura Leitao

Gregory Charlot

David Rahmer

Computing devices and method for performing a secure neighbor discovery. A local computing device transmits an encrypted local node identifier and an encrypted local challenge to a remote computing device. The remote computing device generates a local challenge response based on the local challenge; and transmits an encrypted remote node identifier and an encrypted local challenge response to the local computing device. The local computing device determines that the received local challenge response corresponds to an expected local challenge response generated based on the local challenge. The remote computing device further transmits an encrypted remote challenge. The local computing device generates a remote challenge response based on the remote challenge; and transmits an encrypted remote challenge response to the remote computing device. The remote computing device determines that the received remote challenge response corresponds to an expected remote challenge response generated based on the remote challenge.

Computing device and method for performing a secure neighbor discovery

Methods and systems for group re-authentication of devices in a wireless telecommunication network are provided. According to one aspect, a method of operation of a base station in a wireless telecommunication network comprises receiving a group authentication request message from a mobility management entity, the group authentication request message comprising a group identifier; identifying at least one user equipment as belonging to a group identified by the group identifier; sending an individual authentication request message to each identified UE; receiving an authentication response from at least one of the identified UE; aggregating the received at least one authentication response to create a group authentication response message; and sending the group authentication response message to the mobility management entity.

Enhanced aggregated re-authentication for wireless devices

Systems and methods are disclosed herein that relate to secure monitoring or interception of traffic in a wireless communications system. In some embodiments, a method of operation of a network node comprises receiving a list of one or more obfuscated target identifiers from a monitoring node, where each obfuscated target identifier is a user identifier of a target user that is encrypted using a first encryption key that is unknown to the network node. The method further comprises receiving an encrypted packet from another network node and determining whether an encrypted user identifier of the encrypted packet matches one of the obfuscated target identifiers. The method further comprises, if the encrypted user identifier matches one of the obfuscated target identifiers, further encrypting the encrypted packet using a second encryption key negotiated between the network node and the monitoring node and transmitting the further encrypted packet to the monitoring node.

Enhanced lawful interception

Methods, systems, and computer program products for security context escrowing are provided herein. According to one aspect, a method of operation of a network node for a telecommunications network comprises storing security context information associated with a small data, fast path connection between a wireless device and a first gateway that is serving the wireless device, determining a change in the gateway that is serving the wireless device from the first gateway to a second gateway, and, in response to determining the change, providing the stored security context information to the second gateway for use with the wireless device.

Security context escrowing

Computing devices and methods for transmitting and receiving optimized tunneling IP packets. At the entry point of a tunnel, an IP packet comprising at least one header is received. If data comprised in one of the at least one header of the received IP packet are redundant with data comprised in one or more tunneling header of a tunneling IP packet, then the redundant header is removed from the received IP packet. The tunneling IP packet encapsulating the received IP packet (with its redundant header removed) is transmitted. A header removal field is positioned in the tunneling IP packet to indicate the positive determination of redundancy. At the exit point of the tunnel, the tunneling IP packet is received. The header removal field and the one or more tunneling header of the tunneling IP packet are used for identifying the previous determination of redundancy and recreating the removed header.

Computing device and method for optimizing the tunneling of IP packets

Systems and methods are provided for exchanging network connection access technology information amongst nodes in a communication network. An access point such as a router can include an indication of the access technology used for its network connection in a message for the end-user network device (e.g LTE). The network device can connect to the router using a different access technology (e.g. WLAN) for its local connection, nut exploits the router's network access technology information received to determine the own behaviour (e.g. stop applications or software updates).

Network access technology indication

Computing device and method for generating a fabric-wide IPv6 address in a data center comprising a plurality of fabrics. A configuration file is stored in a memory of a computing device. The configuration file comprises an Internet Protocol version 6 (IPv6) base prefix and a fabric identifier. A processing unit of the computing device determines a host identifier. The processing unit generates an IPv6 prefix, by combining the IPv6 base prefix stored in the configuration file and the fabric identifier stored in the configuration file. The processing unit generates an IPv6 address, by combining the IPv6 prefix and the host identifier. The processing unit further advertises the generated IPv6 address.

Computing device and method for generating a fabric-wide IPV6 address

Computing device (located in a fabric of a data center) and method for generating a link IPv6 address. The computing device determines a local node identifier and a local link identifier for a communication interface of the computing device. The computing device receives from a remote computing device a remote node identifier and a remote link identifier for a remote communication interface of the remote computing device. Based on a comparison of the local and remote node identifiers, the link IPv6 address is generated by using an IPv6 base prefix, the local node identifier, the remote node identifier, the local link identifier, the remote link identifier, and an indicator that the local node identifier is greater or lower than the remote node identifier. A network configuration of the computing device is performed by generating a fabric-wide IPv6 address and one or more link IPv6 address.

Computing device and method for generating a link IPV6 address

Systems and methods relating to an efficient communication system to, e.g., support Massive Machine Type Communication (M-MTC) devices are disclosed. In some embodiments, a base station in a cellular communications network comprises, during initial attachment of a wireless device, establishing a Data Radio Bearer (DRB) between the base station and the wireless device, updating a context of the wireless device to include information regarding the DRB established between the base station and the wireless device to thereby provide a mapping between the DRB and a cellular network identifier of the wireless device. The method further comprises, during initial attachment of the wireless device, providing, to the wireless device, at least a portion of an Internet Protocol (IP) address assigned to the wireless device and updating the context of the wireless device to include the at least a portion of the IP address of the wireless device.

Simplified wireless connectivity for a cellular communications system

Method and computing device performing a fabric deployment in a data center. The computing device stores a configuration file comprising first and second IPv6 base prefixes, and a fabric identifier. The computing device generates a host identifier, a fabric-wide IPv6 prefix by combining the first IPv6 base prefix and the fabric identifier, and a fabric-wide IPv6 address by combining the fabric-wide IPv6 prefix and the host identifier. The computing device determines a local node identifier and a local link identifier for a communication interface of the computing device. The computing device performs a (secure) neighbor discovery procedure for determining a remote node identifier and a remote link identifier for a communication interface of a remote computing device. The computing device generates a link IPv6 address based on the second IPv6 base prefix and at least some of: the local node and link identifiers, and the remote node and link identifiers.

Computing device and method for performing a fabric deployment in a data center

Systems and methods are provided for exchanging network connection access technology information amongst nodes in a communication network. An access point device such as a router can include an indication of the access technology used for its network connection in a local network advertisement message. A network device can connect to the router using one type of access technology, but use the router's network access technology type to determine its operating information.

In one aspect of the teachings herein, a controlling gateway and an associated radio access point are configured for operation in a radio access network and use a radio protocol stack that is split on the network side between the gateway and the access point, for conveying radio bearer traffic going between the radio access network and a wireless device. According to methods and apparatuses disclosed, the radio protocol entities affected by the stack split communicate using Internet Protocol, IP, sessions. Advantageously, the radio bearer traffic conveyed over the split stack maps to different IP sessions in dependence on any one or more of network capabilities, various isolation or privacy requirements associated with the device and/or traffic, the types of data being conveyed, the types of radio bearers involved, and the involved Radio Link Control, RLC, operating modes.

Method and apparatus for a radio node and a controlling gateway

Systems and methods relating to scheduling Paging Occasions (POs) are disclosed. Embodiments of a method of operation of a network node are disclosed. In some embodiments, the method of operation of a network nodes comprises assigning POs to a plurality of User Equipments (UEs) in accordance with one or more anti-affinity groups such that, for a defined time interval, POs within the defined time interval are assigned to UEs in a same anti-affinity group. The method further comprises notifying the plurality of UEs of the POs assigned to the UEs. In this manner, the expected maximum number of pages within the defined time interval is substantially reduced.

Paging for massive MTC

Example embodiments presented herein are directed towards a Connected Vehicle Small Cell Gateway (CVSC GW) and a backhaul user equipment, as well as corresponding methods therein, for providing a multiple operator radio access in-vehicle split femtocell in a wireless communications network.

Growing community of inventors

Suwanee, GA, United States of America

Suresh Krishnan