Nokia Corporation

Nokia Technologies Oy

Yan Fu

Nadarajah Asokan

Ari Aarnio

Markku K Vimpari

Pekka Laitinen

Ville Aarni

Ari Vepsäläinen

Ari M Vepsalainen

An approach is provided for building a scalable service platform by initiating transmission of encrypted data from a public network cache. An access control server platform determines a first authorization key for a user and a second authorization key for a resource, and then encrypts the resource with the second authorization key, and encrypts the second authorization key with the first authorization key. The access control server platform initiates distribution of the encrypted second authorization key with the encrypted resource over a network. The access control server platform further initiates caching the encrypted second authorization key with the encrypted resource that meets a predefined threshold value (e.g., a data size, an access frequency, a modification frequency, or an auditing requirement) in a cache in the network, and initiates transmission of the cached and encrypted second authorization key with the cached and encrypted resource from the cache to at least one authorized entity.

Method and apparatus for providing a scalable service platform using a network cache

Techniques for accelerated authentication include receiving first data that indicates a first portion of user credentials for a first user but not a second portion. It is verified whether the first portion of user credentials is valid. If the first portion of user credentials is valid, then second data that indicates a valid value for the second portion of user credentials for the first user is sent. Other techniques include receiving first data that indicates a first portion of user credentials for a first user but not a second portion of user credentials for the first user. A first message that indicates the first portion of user credentials is sent to a remote process that initiates authentication of the first user based on the first portion of user credentials before receiving second data that indicates the second portion of user credentials for the first user.

Method and apparatus for accelerated authentication

An approach is provided for authorizing one or more services from service providers in a communications network. The approach includes receiving a request from a first service provider, the request having an associated primary token and a secondary token identifier, the secondary token identifier relating to resources of a second service provider. Based, at least in part, on the secondary token identifier, a secondary token is identified; and then the secondary token is sent to the first service provider, wherein the first service provider and the second service provider belong to different trust domains and the first service provider can use the secondary token to access resources of the second service provider.

Method and apparatus for providing enhanced service authorization

An approach is provided for coordinating service information (e.g., account registration identifiers) across multiple server nodes. A server receives a request to register an identifier for an account. The server determines whether it is a home site for the identifier and processes the request based, at least in part, on the determination.

Method and apparatus for coordinating service information across multiple server nodes

An approach is provided for selecting a network server. An apparatus comprising at least one processor, and at least one memory including computer program code, the at least one memory and the computer program code configured to, with the at least one processor, cause, at least in part, the apparatus to load from one or more network servers configuration information of one or more network servers used by a service provider network. The apparatus is also caused to select a network server in the service provider network based at least in part on at least one of network server latency and the network server load. The apparatus is further caused to set the network server as default network server used for at least one of current and future session on one or more user equipment.

Method and apparatus for selecting network services

Techniques to ensure that user agent information is transported includes determining whether both a type field and a client platform information field are included in a first portion of a uniform resource locator field (URL) of a hypertext transfer protocol (HTTP) request message received from a remote client process. The first portion is different from a domain portion of the URL. The type field holds data that indicates whether the remote client inserted the client information field into a URL of an original HTTP request message. If both the type field and the client platform information field are included, then it is determined, based on data in the type field, whether to include both the type field and the client platform information field in a first portion of a URL in a link in a HTTP response message. The HTTP response message is sent to the remote client process.

Method and apparatus for ensuring transport of user agent information

An approach is provided for providing client-side caching in network communication. A client-side caching module receives a request, from a device, for a scripting file associated with web content, the scripting file supporting client-side caching at the device. The client-side caching module identifies that the request is received over a connection supporting connection reuse. The client-side caching module determines whether the request is a first-time request. If the request is a first time request, the client-side consistency module collects session configuration information for the web content from the device, specifies session variables in the scripting file based on the session configuration information, and initiates a subsequent request for the scripting file over the connection. If the request is a subsequent request, the client-side caching module marks the session variables in the scripting file as cacheable at the device, and causes, at least in part, transmission of the scripting file to the device.

Growing community of inventors

Espoo, Finland

Yan Fu