Telefonaktiebolaget Lm Ericsson (publ)

Vlasios Tsiatsis

Johan Rune

Ari Keränen

Anders E Eriksson

Francesco Militano

Joachim Sachs

Nicklas Beijar

Monica Wifvesson

Konstantinos Vandikas

Noamen Ben Henda

Athanasios Karapantelakis

Elena Fersman

Aneta Vulgarakis Feljan

Maxim Teslenko

Keven Wang

Sébastien Pierrel

Craig Donovan

Peter Hedman

Ivo Sedlacek

Rafia Inam

Mats Näslund

Vesa Lehtovirta

David Castellanos Zamora

Qian Chen

Cheng Wang

Jing Fu

Joakim Formo

Anna Viggedal

Marcus Nyberg

Prajwol Kumar Nakarmi

Jari Arkko

Christine Jost

Kim Laraqui

Johan Hjelm

Catalin Meirosu

Göran Selander

Oscar Novo Diaz

Hongxin Liang

Ioanna Pappa

Ryoji Kato

Mattias Johansson

Elena Dubrova

Hjalmar Olsson

Jakob Saros

Andreas Fasbender

Ricardo Souza

Mikael Anneroth

Nina Washington

Ferhat Karakoc

Manfred Dasselaar

Heidi-Maria Rissanen

Anders Eriksson E

Anders Eriksson

Embodiments include methods performed by a key management node in a communication network. Such methods can include receiving, from an application function, a request for a security key specific to an application session for a particular user. The request can include a representation of the following information associated with the particular user: a first identifier of a non-application-specific anchor security key, and a second identifier related to a network subscription. Such methods can also include, based on the representation, determining an authentication server function that generated the non-application-specific anchor security key. Other embodiments include complementary methods performed by application functions, authentication server functions, and unified data management functions in the communication network. Other embodiments include network nodes configured to perform such methods.

Authentication server function selection in authentication and key management

A user equipment ('UE') in a wireless communication network can receive a plurality of signals from a plurality of nodes. The UE can further determine a plurality of radio signal strength measurements. Each radio signal strength measurement can be associated with a signal of the plurality of signals received from the plurality of nodes. The UE can further determine whether there is an indication that a first node of the plurality of nodes may be an imposter node based on the plurality of radio signal strength measurements.

False base station detection

A network node () is configured for use in a wireless communication network (). The network node () receives a request to establish a session (-) for a device (-) in a group (), e.g., a 5G Local Area Network group (). The network node () determines a user plane security policy (-) for the session (!-), based on a user plane security policy () for the group (). The user plane security policy () for the group () may specify a policy for securing a user plane path of a session for any device in the group (). The network node () may then transmit, to an access node of the wireless communication network (), control signaling indicating the determined user plane security policy (-).

Securing the user plane path for a group communication session based on a security policy common to all devices in the group

In a wireless communication network implementing network slicing (NS), an Initial Access and Mobility Management Function (AMF) for a user equipment (UE) in one NS is able to re-allocate a UE to a Target AMF in a different NS, despite not being able to directly communicate with the Target AMF due to NS security restrictions. In a first embodiment, the Initial AMF transfers the UE context—including its security context—to a Default AMF. The Default AMF has the capability to communicate with network functions in different NSes. The Default AMF transfers the UE context to the Target AMF. In a second embodiment, a security key Kamf' is horizontally derived in a manner that avoids NS security conflicts. The derived key is transferred to the UE and Target AMF, which establish a security context. In a third embodiment, the Initial AMF allocates a Token, and transfers it, along with the UE security context (directly or via RAN) to the Default AMF. The Default AMF then transfers the security context to the Target AMF.

AMF re-allocation due to slicing

The AMF re-allocation procedure for an Initiating AMF that has reroute capability via an Access Network (AN) is optimized in scenarios where a wireless device, such as a User Equipment (UE), already shares a 5G security context with-in a Last Serving AMF that is different from the Initiating AMF, and where the Initiating AMF and the Last Serving AMF can communicate with each other via an interface.

Handling of NAS container in registration request at AMF re-allocation

A UE having a security context with an Initial AMF is able to accept an unprotected AUTHRQ, under certain circumstances, for a limited time. In one embodiment, a UE considers the security context to be temporary, which invokes rules or exceptions different than a permanent security context, such as the acceptance of an unprotected AUTHRQ from a Target AMF. The network may indicate to the UE the temporary status, or the UE may assume it. Alternatively, the UE may enable exceptions to the defined rules associated with the security context. In one embodiment, the UE receives a plurality of partial registration acceptance messages, each indicating a specific task or aspect of the overall registration has been completed. The UE may mark its security context temporary, or enable exceptions to the rulesassociated with it, until a partial registration acceptance messages indicates AMF re-allocation is complete or is not required. In another embodiment, the UE accepts unprotected authentication messages from the network until the Registration procedure is completed, enabling a Target AMF to successfully send it an unprotected AUTHRQ.

AMF reallocation handling using UE exceptions to security context rules

Methods, a wireless device (), a radio network node () and a core network node () for reservation of bandwidth are disclosed. The wireless device () sends (A), to the core network node (), an inquiry for reservation of bandwidth. The inquiry comprises information about a route to be travelled by the wireless device (), a start time, and an indication about the bandwidth to be reserved. The core network node () sends (A), to the radio network node (), a command for reservation of the bandwidth to be reserved for the wireless device (). The command comprises the indication, information relating to one or more cells of the radio network node (), in which one or more cells bandwidth is to be reserved according to the indication, a parameter indicating a period of time during which the wireless device () is expected to make use of at least some of the bandwidth to be reserved, and an identity of the wireless device (). The radio network node () determines (A) grant or denial of the command based on the period of time and based on available bandwidth of the radio network node (). Corresponding computer programs and computer program carriers are also disclosed.

Methods, wireless device and nodes for managing reservation of bandwidth

A method and a traffic control entity () for controlling a group of vehicles () capable of autonomous driving without requiring a driver, to allow an emergency vehicle () to pass the group of vehicles () which are travelling concurrently in multiple lanes on a road. When detecting that the emergency vehicle () is approaching the group of vehicles () e.g. from behind, the vehicles in the group () are identified based on information () about current position and movement of the vehicles (). The traffic control entity () then issues a command () instructing the identified vehicles to adjust their lateral positions relative the lanes to create a passage along the group of vehicles (). Thereby, the emergency vehicle () is able to move through the passage without having to slow down significantly.

Method for traffic control entity for controlling vehicle traffic

A method performed by a serving network node for handover of a communication device to a target network node is provided. The method includes determining, based on content of an Information Centric Networking, ICN, request, a need for handover, and initiating, in response to the determining, a handover of the communication device to the target network node. A method performed by a network entity is also provided. A network node, network entity, computer programs and computer program products are also provided.

Methods and network entities for handover

A method performed by a first node in a communication network, the first node being a first end-point of signaling with a second node in the communication network, the second node being a second end-point in the signaling. The method comprises receiving signals from the second node, the received signals comprising instructions for the first node to perform a plurality of actions as well as an indication for in which order the actions should be performed. The method also comprises performing the actions in order. The method also comprises sending signals to the second node, the sent signals comprising an acknowledgement that the plurality of actions have been performed.

Methods and devices for signalling in a communication network

A method performed by a first peer node for acting as a P2P proxy for a user device is provided. The first peer node operates in a communications network. The first peer node establishes () a renewable energy profile of the first peer node used for powering the first peer node. The renewable energy profile indicates to what extent one or more energy sources are renewable. When a proportion of renewable energy according to the established renewable energy profile exceeds a first threshold, the first peer node acts () as a P2P proxy for the user device for downloading a piece of data to the user device by being powered according to its renewable energy profile.

User device, a first peer node, and methods in a communications network

Methods and devices for maintaining a device-operated function. A first device initially operates as an active master with responsibility to execute the device-operated function by automatically performing one or more operation tasks according to certain operational parameters and gaining knowledge when performing the operation tasks. Meanwhile, a second device is acting as a passive standby device. When the first device cannot or should not operate as the active master anymore, e.g. due to low battery, the responsibility is transferred to the second device by transferring the operational parameters and the knowledge from the first device to the second device. Then, the second device operates as the active master with responsibility to execute the device-operated function according to the operational parameters and using the knowledge if required.

Methods and devices for maintaining a device operated function

There is provided mechanisms for controlling media transcoding of a media session between at least two media transceiver devices. The method is performed by a network node. The method comprises obtaining, from at least one of the media transceiver devices, an indication of current allocation of energy for performing playback of the media session in the at least one of the media transceiver devices. The method comprises controlling transcoding of the media session according to the current allocation of energy of the at least one media transceiver device. The transcoding comprises either conversion from a first media format to a second media format of same media type, or conversion from a first media type to a second media type.

Control of media transcoding during a media session

A method performed by a first Information Centric Networking (ICN) network node for generating a number of data contents to a number of respective communication devices is provided. The first ICN network node operates in an ICN network. The first ICN network node aggregates () a number of requests received from a second ICN network node, based on that each request according to a common part of the request is associated with the same theme of the data content being requested by each of the respective communication device. Each aggregated request further comprises a respective customized part associated with the data content. The customized part is requesting the data content to be customized for being consumed in the respective communication device. The first ICN network node locates () a set of components corresponding to the requested data content according to the common part, and then generates () a number of transformed data contents based on the aggregated requests and the located set of components. Each respective transformed data content fulfils the requested common part and the requested customized part of each respective request and is customized for being consumed in the respective communication device.

First and second ICN network nodes and method therein for generating data content

Growing community of inventors

Solna, Sweden

Vlasios Tsiatsis