Telefonaktiebolaget Lm Ericsson (publ)

Kokusai Denshin Denwa Co., Ltd.

Kdd Corporation

Ddi Corp.

Toshikane Oda

Shingo Murakami

Shinta Sugimoto

Ryoji Kato

Takeshi Matsumura

Johan Hjelm

Kenta Yasukawa

Hideaki Yamada

Yoshio Honda

Kenzo Urabe

Leif Axelsson

Martin Gerdes

Hajime Kasahara

Robert Bengt Skog

Hideshi Murai

Luis Barriga

Yasushi Wakahara

Masanobu Fujioka

Hiroki Horiuchi

Shinji Motegi

Masaru Enomoto

Tohru Asami

Stefan Avesand

Yoshiaki Kakuda

Masamitsu Norigoe

Hikaru Yagi

Hiroto Masaki

Kazuhiko Yamanouchi

A mediation server for mediating subscription information to a communication device from a network operator providing network connectivity is provided. The server includes a management unit for managing context information of a communication device, which includes data relating to service provided by a network operator; an obtaining unit for obtaining device information of the communication device, which includes data needed to obtain subscription information from a network operator; a selecting unit for selecting, using the context information, a network operator that provides the best service to the communication device out of network operators that are able to provide network connectivity to the communication device; and a request unit for sending a request, with the obtained device information to the selected network operator, for subscription information which is to be used for the communication device to connect to the selected network operator as a home network operator.

Mediation server, communication device, and connecting method

There is provided a mobile terminal for use in a system which includes a backend server having a first encryption key and an onboard unit (OBU). A first receiving unit receives, from the backend server, a base shared key encrypted with a second encryption key, the base shared key encrypted with the first encryption key, and a digital signature. A deriving unit decrypts the base shared key with the second encryption key and derives first authentication information based on the base shared key and a first temporary parameter. A second sending unit sends, to the OBU, the base shared key encrypted with the first encryption key, the digital signature, the first authentication information, identification information of the base shared key, and the first temporary parameter.

Mobile terminal, control method thereof, onboard unit, control method thereof, backend server, and control method thereof

There is provided an apparatus () for managing assignment of subscription modules () for a group () of communication devices (-). The apparatus includes a receiving unit () configured to receive a request for assigning a subscription module to a target communication device () so that the target communication device can attach to a network managed by a network () operator; and a control unit () configured to identify a group which includes the target communication device, determine whether the number of subscription modules which are assigned to the communication devices in the identified group reaches the upper bound, and when the number of the subscription modules does not reach the upper bound, assign a subscription module to the target communication device.

Subscription module assignment managing server and subscription module assignment managing method

A communication device comprising a central processing unit (CPU) and a memory device is disclosed. The CPU is configured to send a first attach request including a first subscription identity (FSI) to the network apparatus, receive an authentication request including a random number and an authentication token from the network apparatus as a response to the first attach request. Further, the CPU is configured to authenticate the authentication token using the random number and a first key associated with the FSI, obtain a second key and a second subscription identity (SSI) in response to authentication of the authentication token failing, where SSI is obtained from the authentication request. The CPU is further configured to send an authentication failure to the network apparatus. The second key and SSI are stored in the memory device such that the second key is associated with SSI.

Authentication server and communication device

An object of embodiments of the present invention is to establish a secure connection from a device to a private network, to which the device belongs, when the device may be located remotely from the private network. This is achieved by locating a server in the private network while reusing existing authorization mechanisms in the network. A target resource is in this private network and a device located outside the private network can access the target resource by using the server and a proxy agent which intermediates a request from the device by using a one time session URL.

Methods, server and proxy agent for dynamically setting up a session between a target resource in a private network and an application on a device

An operator selecting apparatus and a method for selecting a home operator for each communication device in a group. A first selecting unit of the operator selecting apparatus selects, for each quality-oriented communication device in the group, a candidate operator out of a plurality of the candidate operators that is determined based on the quality information to provide the best quality of service to the communication device. The second selecting unit of the operator selecting apparatus then selects, for each cost-oriented communication device in the group, based on the billing system and a number of quality-oriented communication devices assigned to the each candidate operator as a result of the selection by the first selecting unit, a candidate operator out of the plurality of the candidate operators such that a total cost for all the communication devices in the group becomes lowest.

Operator selecting apparatus and method for selecting a home operator for each communication device in a group

There is provided a Local Breakout Gateway node for use in a hierarchical mobile network. The node comprises a database, which stores a plurality of Local Breakout Policy rules. The node further comprises a receiver for receiving an IP packet from a Mobile Node attached to the network at which the node is located, the network being a visited network for the Mobile Node. The node further comprises means for selecting a Local Breakout Policy from the plurality of Local Breakout Policy rules, and means to apply the selected Local Breakout Policy to the received IP packet. The node further comprises a Network Address translation function to apply a Network Address Translation to the received IP packet, and a transmitter for sending the IP packet to a destination according to the applied Local Breakout Policy.

Method and apparatus for providing local breakout in a mobile network

The present invention relates to auto-provision of wireless devices. A wireless device () has a device identifier and a first private key generated from the device identifier. A registration server () has an operator identifier and a second private key generated from the operator identifier. The wireless device () transmits the device identifier to the registration server (), and the registration server () transmits a subscriber identifier to the wireless device (). The wireless device () generates a shared key based on the operator identifier and the first private key, and the registration server () generates the shared key based on the device identifier and the second private key.

Wireless device, registration server and method for provisioning of wireless devices

The present invention relates to auto-provisioning of authentication data for client devices. A registration server includes a gateway determination unit, which is configured to determine a gateway apparatus transferring a request signal from a device, and a processing unit. The processing unit is configured to transmit a first signal including a token and first access information of the gateway apparatus to the device if an identifier of the gateway apparatus is stored on the server, and to transmit a second signal indicating a positive response to the gateway apparatus when it obtains the token and the identifier based on a third signal received in response to the first signal. The gateway apparatus sends the secret value to the device when it receives the second signal.

Registration server, gateway apparatus and method for providing a secret value to devices

An image matching apparatus is provided. The apparatus includes a storage unit, an obtaining unit, a specification unit, and an image matching unit. The storage unit is configured to store image data of one or more devices that are connected to a local network. The obtaining unit is configured to obtain image data of device image obtained by capturing a device. The specification unit is configured to specify one or more local networks to be used for image matching. The image matching unit is configured to perform image matching of the obtained image data against the stored image data of one or more devices that are connected to the specified local network.

Image matching apparatus and image matching method

A method and apparatus for managing roaming of a Mobile Node in a Visited network. The Mobile Node is associated with a Home network. In the Visited network, a server selects a Gateway node for use by the Mobile Node based on selection criteria. The server then sends a message to an access node in the Visited network to which the Mobile Node is attached, the message identifying the selected Gateway node. This instructs the Mobile Node to communicate with its Home network via the selected Gateway Node.

Method and apparatus for roaming between communication networks

One aspect of the present invention will provide a first gateway apparatus configured to be connectable to a local network and an external network, to obtain presence information of a device apparatus on the local network and to provide the obtained presence information to a presence management apparatus on the external network, the first gateway apparatus comprising, an obtaining unit configured to obtain the presence information of the device apparatus, a transmitter configured to transmit the presence information to the presence management apparatus via the external network, and a receiver configured to receive, from the presence management apparatus, a suppression instruction of the presence information transmission, wherein the transmitter further configured to suppress the transmission of the presence information to the presence management apparatus after the reception of the suppression instruction.

Gateway apparatus and presence management apparatus

In the first embodiment, the mobile phoneobtains the PCID from the CCE, and sends the PCID and the IMSI of the USIM of the mobile phoneto the CAPS. The MCC+MNC part of the IMSI is later used as the operator identification information by the mediation server, which is operated by the RO, in order to identify the SHO for the CCE. The MSIN part of the IMSI is later used as the user identification information by the account managing server, which is operated by the SHO, in order to identify the user of the mobile phone. The mediation serverforwards the account request from the CCEto the account managing serverof the SHO identified by the operator identification information. The account managing servergenerates the MCIM that is associated with the user identified by the user identification information.

Mediation server, control method therefor, communication device, control method therefor, account provisioning server, and control method therefor

An information processing system providing a composed service to a user device is provided. The system includes: a service acquisition unit configured to acquire descriptions defining raw services; a capability information acquisition unit configured to acquire capability information; a composition unit configured to compose the acquired descriptions to create a description which defines a composed service to be supported by the user device based on the acquired capability information; a presentation unit configured to present the created description to the user device; a request acquisition unit configured to acquire a request for the composed service from the user device; a specifying unit configured to specify raw services composing the requested composed service; a processing unit configured to gather responses from the specified raw services composing the requested composed service, and to create the composite response; and a response unit configured to respond the composite response to the user device.

Information processing system and method providing a composed service

There is provided a telephone that is capable of accessing a memory for storing subscription information that includes a phone number. The telephone comprises, among other things: a searching unit that searches the memory for second subscription information that is different from the first subscription information selected by the selecting unit; an obtaining unit that obtains a first phone number included in the first subscription information and transfer source information that enables a call transfer server of a network operator associated with the second subscription information to identify a second phone number included in the second subscription information; and a sending unit that sends, to the call transfer server, a call transfer request for requesting the network operator to transfer a call addressed to a phone number, which is identified by the call transfer server based on the transfer source information, to the first phone number.

Growing community of inventors

Tokyo, Japan

Toshikane Oda