Alcatel Lucent

Future Wei Technologies, Inc.

Lucent Technologies Inc.

Huawei Technologies Co., Limited

Interdigital Patent Holdings, Inc.

Alcatel-lucent USA Inc.

Zhibi Wang

Semyon B Mizikovsky

Marcus Wong

Ahmad Shawky Muhanna

Chinmei Chen Lee

Michael F Starsinic

Sarvar M Patel

Baoling S Sheen

Ganapathy Subramanian Sundaram

Ruth S Gayde

Robert G Gazda

Michael F Dolan

Philip Charles Sapiano

Jiangsheng Wang

Michel Roy

Atle Monrad

Taimoor Abbas

John MacNamara

Tuo Li

Kevin Di Lallo

Jie Zhou

Wolfgang Fleischer

Jianying Qian

Sandi LaVonne Engelhorn

Mark Skeates

Baoling Sheen

John Mac Namara

Philip Sapiano

A wireless transmit/receive unit (WTRU) may send a discovery request to a first edge enabler server (EES) instance to obtain edge application server (EAS) information. The WTRU may receive a discovery response from the first EES instance. The discovery response may indicate a list of EAS information and/or registrar EES information for one or more EAS instances in the list of EAS information. The WTRU may select an EAS instance based on one or more of the list of EAS information or the registrar EES information for the one or more EAS instances. A second EES instance of the plurality of EES instances may be the registrar EES of the selected EAS instance.

Wireless transmit/receive unit (WTRU) driven edge service discovery and selection

Serving network authentication and validation by a UE includes encrypting an identifier associated with the UE using a first instance of a public key associated with a serving network to which the UE is attempting to gain access; transmitting the identifier to the serving network; receiving from the serving network an authentication vector containing a second instance of the public key, the second instance of the public key having been encrypted using a key shared by the UE and a home network associated with the UE; decrypting the second instance of the public key using the key shared by the UE and the home network; comparing the first instance of the public key to the second instance of the public key; and when the first instance and the second instance are the same, determining that the home network has authenticated the serving network.

Access technology agnostic service network authentication

A system and method of improving anomaly detection rate in a communication network. A server computer may receive a data set comprising traffic flows communicated over the communication network and group the traffic flows into data categories based on the type of network service such as transport control protocol (TCP) port numbers or User Datagram Protocol (UDP) port numbers of the traffic flows, or based on application layer protocols associated with the traffic flows. The server computer may further detect anomalies in each of the data categories based on inconsistencies between at least one common feature associated with a data category and traffic flows in the data category. Different data categories may be associated with different the at least one common feature. The anomaly detection may be supervised or unsupervised.

Methodology to improve the anomaly detection rate

A method for establishing a trust relationship in an ultra dense network is provided. The method comprises receiving, by a user equipment (UE), a reconfiguration request from a macrocell; deriving, by the UE, a user plane encryption key according to information in the reconfiguration request; transmitting, by the UE, a first user plane signaling message to a first microcell in a group of microcells when the UE is attached to the first microcell; and transmitting, by the UE, a second user plane signaling message to a second microcell in the group of microcells when the UE is attached to the second microcell, wherein the first user plane signaling message and the second user plane signaling message are both encrypted according to the user plane encryption key.

Ultra dense network security architecture method

The disclosure relates to technology for provisioning out-of-network user equipment with a network relay in a communications network. The network relay device receives an authentication key request message from user equipment including a user equipment identity and an authentication server identity, and communicates the authentication key request message to an authentication server having the authentication server identity. The network relay device communicates a relay authentication key response received from the authentication server to the user equipment such that a secure communication is established between the user equipment and the network. A relay authentication key is generated during establishment of the secure communication between the user equipment and authentication server, and a session with the user equipment is authenticated using a session key generated by the user equipment based on the relay authentication key. The user equipment is the authenticated with the network relay device and provisioned.

System and method for secure provisioning of out-of-network user equipment

A device for communicating with a plurality of user equipment in a cellular network comprises a non-transitory memory having instructions and one or more processors in communication with the memory. The one or more processors execute the instructions to receive information regarding a faked base station including an operating frequency, location area code and cell identification of the faked base station, prepare a first message to alert of the faked base station, select the plurality of user equipment that may receive a signal from the faked base station, transmit the first message to alert of the faked base station to the plurality of user equipment and transmit a second message to bar the plurality of user equipment from connecting to the faked base station.

Response mechanism for detection of a faked base station

A system and method of detecting fake base stations. A first wireless device such as a user equipment (UE) or a base station (BS) may identify multiple parameters associated with a discovery signal transmitted by a second wireless device, the second wireless device advertising as a BS. The first wireless device may compare the multiple parameters with a set of parameters assigned to, or otherwise associated with, a cluster of neighboring BSs, and determine that the second wireless device is a fake BS when an inconsistency between the multiple parameters and the set of parameters associated with the cluster of neighboring BSs exceeds a threshold. The UE or the BS may also transmit the multiple parameters to a central controller, and the central controller may aggregate, correlate, and analyze the parameters, historical data, and other data from other sources associated with the second wireless device to determine whether the second wireless device is a fake BS.

System and method for faked base station detection

A method is provided for interworking of mobility key management among access networks operating under different access technologies. The method is carried out by performing mobility key management by a core-network authentication server based on the access technology that a mobile terminal accessing a wireless network has selected for operation. The method of the invention defines authentication server behavior based on different access technologies and therefore solves the technology interworking issue seamlessly. The method of the invention also facilitates coexistence of more than two different access technologies without any need for each access technology to be modified in order to interwork with core network that is specified by another technology.

Method for interworking among wireless technologies

A technique to extend location-based (e.g. GPS) mobile device battery lifetime by reducing the location-based (e.g. GPS) circuitry power consumption is provided. The technique defines and controls when to start power and when to stop power to the device in the context of a mobile terminating (MT) location request and/or a mobile originated (MO) location request that is either on-demand or periodic.

Method and apparatus for power control of a location-based mobile device

In a method for controlling access to a local network via a small wireless cell in a wireless network, local network access control information is received at the small wireless cell, and the small wireless cell controls access to the local network by the user based on the local network access control information. The access control information is indicative of whether a user is permitted to access the local network through the small wireless cell, and is independent of wireless network access control information indicative of whether the user is permitted to access the wireless network.

Local network access control via small wireless cells in wireless networks

In one embodiment, the method includes establishing, at a first base station, at least one interface with a second base station. The first and second base stations are associated with different network technologies, and at least one of the first and second base stations is a small cell base station. A small cell base station has a coverage area smaller than and at least partially overlapped by a coverage area of a macro base station. The method further includes one of (i) sending information from the first base station to the second base station over the interface, and (ii) receiving information at the first base station from the second base station over the interface.

Method of sharing information between base stations associated with different network technologies and the base stations

In one embodiment, a method of the invention has the steps of: (A) establishing an access-layer security association (SA) between a mobile node (MN) and an authentication authorization accounting (AAA) server; (B) deriving a secondary key from an extended master session key (EMSK) corresponding to the access-layer SA; (C) providing the secondary key to a home agent; and (D) based on the secondary key, establishing an SA corresponding to an Open System Interconnection (OSI) layer higher than the access layer for securing communications between the home agent and a selected network node. In various embodiments, the selected network node can be (i) the MN, (ii) a proxy node configured on behalf of the MN, or (iii) a proxy node configured on behalf of the home agent.

Bootstrapping method for setting up a security association

Described is a method by mobile equipment to communicate with a network. The method includes receiving a network authentication token having a first message authentication code, an authentication message field and a first extended sequence number that includes a first hardware identifier and first sequence number, and authenticating the network based on the first message authentication code, the first hardware identifier, and the first sequence number.

Method and system of communication using extended sequence number

A messaging client and associated method for client-based multicast message transmission is provided. In one embodiment, the messaging client includes a message origination process with an input device, message buffer, recipient list, new message area, and multicast message transmission process. In one embodiment, the method includes: a) receiving a message content to be transmitted in a message, b) receiving delivery information for first and second recipients to whom the message is to be transmitted, c) receiving an instruction to begin the message transmission, d) transmitting the message from the client to the first recipient, and e) transmitting the message from the client to the second recipient. The messaging client and associated method relate to short message service (SMS), enhanced message service (EMS), multimedia message service (MMS), and other types of similar message services.

Method for client-based multicast message transmission

In this invention, a wireless terminal location is monitored and used to locate providers of a requested service that are proximate to the location of the wireless terminal. At least one of the providers located is selected and identified by name and/or telephone number and/or the location, etc., and this information is delivered to and stored in the directory of the wireless terminal. The process is repeated as necessary to update the list of service providers when the wireless terminal is transported to a new location area. The service providers located can represent any category of service desired such as emergency facilities (especially in a foreign country) such as paramedics, hospital, police, or roadside assistance, etc.

Growing community of inventors

Woodridge, IL, United States of America

Zhibi Wang