Alcatel Lucent

Huawei Technologies Co., Limited

Xueqiang Yan

Zhiyuan Hu

Zhigang Luo

Zhengxiong Lei

Mingyu Zhao

Rongdao Yu

Yunfei Qiao

Min Yan

Jianjun Wu

Xian Meng

Meixin Lin

Wen Wei

Yonggen Wan

This application provides methods and apparatuses for communication. In an example method, a first digital reflection (DR) receives a first message, where the first message includes data to be sent to a first terminal device and an identifier of the first terminal device, and the first DR is associated with the first terminal device. The first DR transmits the data to the first terminal device based on a local locator (LLOC) of the first terminal device, where the first DR stores a twin-globally unique temporary identity (TWIN-GUTI) of the first terminal device, the TWIN-GUTI includes the LLOC, the LLOC corresponds to the identifier of the first terminal device, the first DR is deployed on first multi-access edge computing (MEC), and the TWIN-GUTI is generated by the first MEC.

Method and apparatus for communications using digital reflectors based on routing locator

Embodiments of this application provide a user data management method and a related device, to improve user data security. The method includes: A data request device sends a first request to a blockchain platform, where the first request indicates that the data request device needs to access a data storage device. The data request device receives first permission information sent by the blockchain platform, where the first permission information indicates whether the data request device has permission to access the data storage device, and the permission is related to signature information of the data request device, an access type, and an operator public key; and sends a second request to the data storage device if the first permission information indicates that the data request device has the permission to access the data storage device, where the second request includes an access address and an operator private key signature.

User data management method and related device

The present disclosure relates to mutual authentication methods and apparatuses. In one example method, a digital reflection (DR) sends a first message to a terminal device, where the first message includes a first DR public key that is a public key of the DR signed by using a private key of a home network. The DR encrypts a first random number by using a second terminal device public key. The DR sends a second message to the terminal device, where the second message includes the first random number encrypted by using the second terminal device public key. The DR receives a second response message sent by the terminal device, where the second response message includes an encrypted first random number encrypted by using a second DR public key. The DR decrypts the encrypted first random number by using a private key of the DR to obtain the first random number.

Mutual authentication method and apparatus

This application provides a data packet processing method and apparatus, applied to a satellite communications system. An earth surface, space, and network space are divided based on a satellite constellation and an ephemeris of a satellite, and an identifier is allocated to each ground area, each space area, and each network that are sub-divisions of the earth surface, space and network space, to establish a fixed mapping relationship between the EID, the SID, and the NID. In addition, each satellite maintains mapping relationship information recording the mapping relationship. Unless a satellite joins the constellation or one satellite leave service, the mapping relationship recorded in the mapping relationship information does not need to be updated. Based on the mapping relationship information, a satellite may route a data packet, thereby reducing a large amount of signaling interaction caused by establishing and maintaining a routing table in the conventional manner.

Data packet processing method and apparatus

This application relates to the field of wireless communications technologies, and discloses a satellite location information transmission method, and related apparatus, system, and storage medium. The method includes: receiving satellite location information sent by at least one satellite base station, where the satellite location indicates a location of a satellite base station in a satellite orbit; determining a target satellite base station among the at least one satellite base station based on the received satellite location information; and initiating a random access process to the target satellite base station. The technical solutions provided in the embodiments of this application can reduce UE power consumption.

Satellite location information transmission method, apparatus, system, and storage medium

Examples in this application disclose satellite network communication methods, communications apparatuses, and communications systems. One example method includes determining, by a user device, address information of the user device, where the address information includes a second sub-area identifier and a user device identifier (UDID) of the user device, and the second EID indicates a second sub-area which the user device is currently located in, and the second sub-area is one of a plurality of sub-areas divided from earth surface, and sending, by the user device, the address information to a first satellite.

Satellite network communication method, related apparatus, and system

A set of raw data relating to activity of one or more users in accordance with a communication network is obtained. The communication network is managed by a network operator. The obtained set of raw data is processed in accordance with at least one data isolation policy maintained by the network operator to generate a first set of data comprising at least a portion of the set of raw data with sensitive data associated with the one or more users removed; a second set of data comprising the sensitive data removed from the set of raw data; and a third set of data comprising a mapping between portions of the set of raw data and the first set of data. The first set of data is exposed to a third party, while the second set of data and the third set of data are isolated from the third party.

Privacy protection for third party data sharing

A first security service function chain is generated that identifies at least a first service function path comprising an identified set of security service functions, with at least one of the identified set of security service functions comprising a virtualized network function in a software defined networking (SDN) network architecture. The first security service function chain is utilized to create classification policies associating packets of a given packet type with the first security service function chain, and the first service function path is utilized to create forwarding policies specifying handling of packets of the given packet type by respective ones of the identified set of security service functions. The classification policies are provided to one or more nodes in a communication network comprising the SDN network architecture, and the forwarding policies are provided to one or more of the identified set of security service functions in the communication network.

Security-on-demand architecture

A security service function chain is created including a set of security service functions. The security service function chain is created in response to instantiation of a given network partition (e.g., network slice) in a communication network (5G or similar network). The communication network supports instantiation of a plurality of network partitions for providing a respective plurality of network services. The security service function chain is utilized to perform at least one security service (e.g., authentication) for an entity (e.g., a subscriber or a device) accessing or seeking access to a network service (e.g., one of eMBB, massive IoT, and mission-critical IoT) corresponding to the given network partition.

Unified security architecture

Embodiments provide a user equipment (UE) device that includes a processor and a transceiver. The processor is configured to direct a handover request to an evolved packet core (EPC) access node via the transceiver. The access node may be, e.g. a wireless local area network (WLAN) access point or an E-UTRAN access point. The handover request may initiate a transfer of connectivity of the UE device from the WLAN access point to the E-UTRAN access point, or from the E-UTRAN access point to the WLAN access point. The processor is configured to receive a handover response from the current access node, wherein the response includes a cryptographic key identifier, and to derive a handover key from the key identifier. The processor may then operate the UE device to provide connectivity based on the handover key between the UE device and the other of the access nodes.

Handover between E-UTRAN and WLAN

At least one security policy is obtained from a policy creator at a controller in an SDN network. The security policy is implemented in the SDN network, via the controller, based on one or more attributes specifying a characteristic of the security policy, a role of the creator of the security policy, and a security privilege level of the role of the creator of the security policy.

Security in software defined network

The present invention provides a method for shortening signaling delay of ISC session transfer procedure, a network element for controlling ISC session transfer, a network element for anchoring a media path in ISC session transfer and a communication system including at least two terminals and the above two network elements. In the present invention, the SCC AS decides if a media path needs to be anchored in a media anchor point MRF, and if yes, then instructs a MRF to assign respective media endpoints for a local UE and a remote UE and connect the two media endpoints together, so as to divide the session between the local UE and the remote UE into two independent sub-sessions: a session between the local UE and the MRF, and a session between the remote UE and the MRF. For these two sub-sessions, the SIP signaling is terminated and sent out in the SCC AS. Thus, when a local UE or a remote UE triggers handover, only one sub-session needs to be updated/influenced.

Method for shortening signaling delay of ISC session transfer, network element and system

A one-pass authentication mechanism and system for heterogeneous networks are provided. The mechanism comprises authenticating a user based on an authentication key and an authentication algorithm in response to a request of the user to register a first network, wherein the authentication key and the authentication algorithm are associated with a first user identity for the first network and a second user identity for a second network; and if the authentication is successful, then comparing the first user identity retrieved from an authentication database through the second user identity provided by the user to the first user identity provided by the user in the authentication, in response to a request of the user to register the second network, and setting up security associations between the user and the second network if the retrieved first user identity matches the first user identity provided by the user.

One-pass authentication mechanism and system for heterogeneous networks

In the present invention, it is provided a method and means for selecting a route for a session requested by a calling user equipment in a session manager, and correspondingly, it is provided a method and means for selecting a route for a session requested by a calling user equipment in a media gateway control function, it is characterized as selecting an MGW having relative lighter load to bear the session on a basis of load related information of MGWs. By applying the methods and means of the present invention, load of every MGW is balanced; performance degradation, caused by heavy load, of a certain MGW is avoided; MGW having stopped working is bypassed; a success ratio of session setup is increased; session performance is improved; and benefit is brought to multi-network integration, such as inter-working between a packet switching network and a circuit switching network in an IMS network.

Growing community of inventors

Shanghai, China

Xueqiang Yan