Orange Sa

Orange

3G Licensing S.a.

Lucent Technologies Inc.

Alcatel-Lucent USA Inc.

France Telecom

Xiaobao Chen

Philippe Lucas

Martin Harris

Andrea Paparella

Nigel Stuart Bird

Ioannis Kriaras

Alan George Stidwell

Mooi Choo Chuah

Serge Raes

Christophe Naulleau

Martin Barkley Harris

Systems and methods for providing cybersecurity services by a network and for automating the provisioning of the cybersecurity services are disclosed. The system comprises a connection control function configured to receive a message in response to a request to establish a data connection from a user equipment (UE), the message including a requested CyberSecurity Control service identifier (CSC-ID) corresponding to a first security service of a plurality of security services. The CCF can interact with a cybersecurity control (CSC) function to determine, based on the requested CSC-ID, an allowed CSC-ID for the data connection, the allowed CSC-ID corresponding to a second security service of the plurality of security services; retrieve, based on the allowed CSC-ID, an operator security policy associated with the second security service. The CCF can then select and configure a network function in accordance with the retrieved operator security policy associated with the second security service.

Providing cybersecurity services by a network and automated provisioning thereof

A method is provided for granting access, for user equipment registered in a home mobile network to a wireless local area network. In this method, a probe request is received by an access network server located in the wireless local area network, wherein this probe request includes first information allowing to identify the home mobile network of the user equipment. The access network server determines then at least one access point of the wireless local area network to which the user equipment is allowed to connect, based on the identification of the home mobile network from the first information and sends a response message including at least one access identifier identifying the at least one access point of the wireless local area network.

Network architecture enabling a mobile terminal to roam into a wireless local area network

A system and associated method for enabling end-to-end (E2E) network slicing in a 5G network are described. A (Radio) Access Network-Network Slice Selection Function ((R)AN-NSSF) can be configured to receive a (R)AN slice selection request and to select, from a pool of (R)AN slice instances, a (R)AN network slice instance including one or more (R)AN slice components. A Core Network-Network Slice Selection Function (CN-NSSF) can be configured to receive a CN slice selection request to select, from a pool of CN slice instances, a CN network slice instance including one or more CN slice components. A Network Slice Policy Control (NSPC) function can be configured to verify that the selected (R)AN slice instance and CN slice instance are consistent with operator policies.

End-to-end network slice selection and configuration

A telecommunications system is operable to provide a facility for a communications session to a mobile node using an internet protocol. When changing affiliation from one of a first and second packet data network to the other of the first and second packet data network, a mobile node is operable to generate a service level identifier representing a requested priority to be afforded to the internet packets communicated to and from the mobile node with respect to other internet packets communicated to and from other nodes. The mobile node is also operable to generate a binding update internet packet providing a care of address of the mobile and an indication of the service level identifier in the binding update internet packet and to communicate the binding update internet data packets to a home agent of the mobile node. The home agent is operable in response to the binding update to identify the service level identifier and to communicate the internet packets in accordance with the requested priority represented by the service level identifier. The telecommunications system can prioritise the transmission of internet packets according to a priority requested by the mobile node represented by the service level identifier thus reducing a likelihood that mobile node will experience delays or interruptions in the transmission of data.

Telecommunications system and method

An internet packet comprises a header field, the header field including a field identifying a source address of the internet packet, a field identifying the destination address of the internet packet and a next header field identifying whether an extension header follows the header and a type of the extension header. The extension header indicates a hop-by-hop option header, the hop-by-hop extension header including a router alert option header type indicating that the extension field is optional for a router to read, and a field providing information for a gateway support node of a packet radio system network. A gateway support node is thereby provided with information, which may be required for example to support a mobile internet protocol (IP). However, by providing the router alert option field, a router is not required to read the remainder of the hop-by-hop option field. As a result, a reduction in the performance of the router in routing internet packets, which may have been incurred if the router was required to read all the hop-by-hop extension field can be limited.

Packet data communications

Apparatus for and methods of enabling a gateway node of a first packet-switched data network to select a first channel for transferring a tunnelled data packet to a destination packet data protocol address of a mobile node provided service in the first network are disclosed. The gateway node is configured to select the first channel from a plurality of channels configured to transfer data packets to the destination packet data protocol address of the mobile node, and the selection is performed by matching a packet data protocol address, associated with a data packet received by the gateway node, to one or more data packet filters associated with the plurality of channels.

Method and apparatus for data transfer in a packet-switched network

Apparatus for and methods of enabling a gateway node of a first packet-switched data network to select a first channel for transferring a data packet to a destination packet data protocol address of a correspondent node provided service in the first network are disclosed. The gateway node is configured to select the first channel from a plurality of channels configured to transfer data packets to the destination packet data protocol address of the correspondent node, wherein the data packet is sent from a mobile node of a second packet-switched data network external to the first network, and wherein the mobile node has been in a communication session with the correspondent node while provided service in a third packet-switched data network different to the second network.

Methods and apparatus for data transfer in a packet-switched data network

A packet radio communications system communicates internet packets to and/or from mobile user equipment. The system comprises a core network comprising a plurality of packet data networks, each including network communications elements operable to communicate internet packets using an internet protocol transport plane, and a common gateway support node. The gateway support node is operable to route the internet packets via communications bearers established through the packet data networks using the network communications elements. The system includes a plurality of radio access networks connected by the internet protocol transport plane to the core network components of the packet data networks for communicating the internet protocol packets to and/or from the mobile user equipment. Each of the radio access networks is operable to provide radio access bearers for communicating the internet packets to and/or from the mobile user equipment.

Packet radio communications system

In a MIPv6 network, a mobile home agent (MHA) in a foreign network (FN) acts as an intermediate node between a mobile node (MN) and a correspondent node (CN) and allocates itself a secondary care-of address (SCoA) different from the care-of address (CoA) of the mobile node (MN), with a one-to-one relationship between the secondary care-of address (SCoA) and the home address (HAddr) of the mobile node.

Telecommunications

A telecommunications system is arranged to provide a facility for communicating data to and from a mobile node using an internet protocol. The system includes a first home access network, which includes a home gateway node, a second visited access network, which includes a visited serving gateway node, and a wireless access gateway operable to communicate data to and from the mobile node using the internet protocol. The mobile node is operable to communicate a binding update message to the visited serving gateway node of the second visited access network via the wireless access gateway using the internet protocol. The binding update message includes a unique identifier of the mobile node, and a request for an internet protocol address for the mobile node as if the mobile node were attached to the first home access network (home IP address). In one example the unique identifier is an International Mobile Subscriber Identity (IMSI) number or the like. The visited serving gateway node of the second visited access network is operable, in response to the binding update message, to identify from the unique identifier of the mobile node the first home access network of the mobile node and to communicate the request for a home internet protocol address to the home gateway node. The home gateway node of the first home network is responsive to the request to allocate a home internet protocol address to the mobile node. Embodiments of the present invention provide a mobile node with roaming facilities as afforded by a 3GPP network, although the mobile node may have attached to a non-3GPP network, by arranging for the visited serving gateway node to connect to a home network of the mobile node, using for example a GPRS Tunnelling Protocol.

A telecommunications system is operable to provide a facility for a communications session to a mobile node using an internet protocol. When changing affiliation from one of a first and second packet data network to the other of the first and second packet data network, a mobile node is operable to generate a service level identifier representing a requested priority to be afforded to the internet packets communicated to and from the mobile node with respect to other internet packets communicated to and from other nodes. The mobile node is also operable to generate a binding update internet packet providing a care of address of the mobile and an indication of the service level identifier in the binding update internet packet and to communicate the binding update internet data packets to a home agent of the mobile node. The home agent is operable in response to the binding update to identify the service level identifier and to communicate the internet packets in accordance with the requested priority represented by the service level identifier. The telecommunications system can prioritize the transmission of internet packets according to a priority requested by the mobile node represented by the service level identifier thus reducing a likelihood that mobile node will experience delays or interruptions in the transmission of data.

A telecommunications system comprises a core network, an access control function and a plurality of radio access networks. Each radio access network communicates data to and from the mobile device in accordance with one of a plurality of radio access technologies. When a mobile device requests connection with the core network via a chosen radio access technology, the core network establishes a connection with the mobile device via at least one of the plurality of radio access interfaces. An access control function identifies the mobile device and in accordance with access control criteria generates an attach response indicating with which if any of the plurality of radio access technologies the mobile device may establish the connection and communicates the attach response to the radio access network via which the mobile device has requested the connection.

Radio access technology selection in telecommunications system

A telecommunications system for communicating internet packet data in accordance with a first internet protocol (IPV6) via a packet radio network operable in accordance a second internet protocol (IPV4). The system comprises a user equipment operable to request a bearer for communicating internet protocol data according to the second internet protocol (IPV4) to and from a gateway support node of the packet radio network. The gateway support node is operable to establish a tunnelling protocol bearer for communicating the internet packet data to and from the user equipment across the packet radio network. The user equipment is operable in combination with the gateway support node to form an address which is compatible with the first internet protocol (IPv6). The address includes an interface identifier having a tunnel endpoint identifier of the tunnelling protocol bearer which ends at the gateway support node of the packet radio network. The internet packet data is communicated to and from a correspondent node via the gateway support node and the established bearer using internet protocol address which is compatible with the first internet protocol (Ipv6). Systems according to the present invention are arranged to generate an address, which is compatible with a first internet protocol which can be used to communicate internet packet data via a packet radio network which has been arranged to support internet packets data according to a second internet protocol. The first internet protocol may be the IPv6 and the second internet protocol may be IPv4.

Telecommunications apparatus and method

A telecommunications system provides a facility for mobile communications to a mobile node. A core network and a radio network are arranged to communicate the internet packets in accordance with a current configuration of routing and communications resources of at least one of the core network and the radio network. The mobile node is operable to generate a packet data connection activation request. The request is adapted to include a service level identifier representing a priority to be afforded to communicating internet packets to or from the mobile node with respect to the internet packets received from other mobile nodes. The core network is operable to adapt the current configuration of routing and communications resources of at least one of the core network and the radio network following a change of location of the mobile node with a relative priority determined in accordance with the service level identifier.

A packet radio network provides a facility for communicating internet packets to and/or from a mobile user equipment. In response to a packet data protocol activation request message requesting a common packet data protocol context, a serving support node is operable in combination with a gateway support node to establish a common packet data protocol context in association with a packet communications bearer. The common packet data protocol context is established to communicate internet protocol packets via the packet communications bearer according to an internet protocol version specified by the mobile user equipment for one or more communications sessions.

Growing community of inventors

Swindon, United Kingdom

Xiaobao Chen