公开(公告)号：US20150351138A1

公开(公告)日：2015-12-03

申请号：US14436574

申请日：2012-10-18

Applicant: NOKIA SOLUTIONS AND NETWORKS OY

Inventor： Esa Markus METSALA ,  Jari SALO

IPC: H04W76/02 ,  H04L12/46 ,  H04W28/02 ,  H04L12/723 ,  H04L12/24 ,  H04W72/04

CPC classification number: H04W76/11 ,  H04L12/4641 ,  H04L41/08 ,  H04L45/50 ,  H04W28/0205 ,  H04W28/0268 ,  H04W72/0406 ,  H04W76/10

Abstract: There are provided measures for intelligent bearer setup configuration control. Such measures exemplarily comprise detection of at least one setup requirement for setup of a bearer, and selection of a termination point for a bearer between a first network element and a second network element among a plurality of available candidate termination points on the basis of the detected at least one setup requirement. For example in a LTE/LTE-A system environment, the setup configuration of a S1 bearer between eNB and SGW can be controlled on the basis of setup requirements for an E-RAB.

Abstract translation: 提供智能承载设置配置控制的措施。 这种措施示例性地包括检测至少一个建立承载的设置要求，以及基于检测到的多个可用候选终端点中的第一网络单元和第二网络单元之间的承载的终端点的选择 至少一个设置要求。 例如，在LTE / LTE-A系统环境中，可以基于E-RAB的设置要求来控制eNB与SGW之间的S1承载的建立配置。

公开(公告)号：US20160057121A1

公开(公告)日：2016-02-25

申请号：US14780785

申请日：2013-03-27

Applicant: NOKIA SOLUTIONS AND NETWORKS OY

Inventor： Esa Markus METSALA ,  Heikki-Stefan ALMAY

IPC: H04L29/06 ,  H04L9/32

CPC classification number: H04L63/08 ,  H04L9/3263 ,  H04L63/0823 ,  H04L63/162 ,  H04L63/164 ,  H04L2209/24 ,  H04L2209/64 ,  H04W12/06

Abstract: A secure storage for an X.509v3 digital certificate is provided (301, 302). Ports of a first and second apparatus (101, 102) are mutually authenticated (303) by using 802.1X based authentication and 802.1AR certificates. Traffic types are divided (304, 305) by an operator-configurable selector function into user plane, control plane, synchronization plane, and management plane traffic types. For Ethernet transport a virtual port is created for each traffic type, and a different MACsec secure connectivity association is created for each virtual port. For Ethernet transport an operator-programmable security policy is maintained for each traffic type. For IP transport an IPsec security association is created for each traffic type, and an operator-programmable security policy is maintained for each security association. For IP transport, TLS support may be enabled for compatibility with network management traffic. A port is repeatedly re-authenticated by an operator-definable timer value.

Abstract translation: 提供X.509v3数字证书的安全存储（301,302）。 通过使用基于802.1X的认证和802.1AR证书，相互认证（303）第一和第二设备（101,102）的端口。 流量类型由操作员可配置的选择器功能划分为用户平面，控制平面，同步平面和管理平面流量类型（304,305）。 对于以太网传输，为每种流量类型创建虚拟端口，并为每个虚拟端口创建不同的MACsec安全连接关联。 对于以太网传输，为每种流量类型维护运营商可编程的安全策略。 对于IP传输，为每种流量类型创建IPsec安全关联，并为每个安全关联维护一个操作员可编程的安全策略。 对于IP传输，可以启用TLS支持以兼容网络管理流量。 端口由操作员可定义的定时器值反复重新认证。

公开(公告)号：US20160227454A1

公开(公告)日：2016-08-04

申请号：US15024878

申请日：2013-09-27

Applicant: NOKIA SOLUTIONS AND NETWORKS OY

Inventor： Antti Anton TOSKALA ,  Harri Kalevi HOLMA ,  Esa Markus METSALA

IPC: H04W36/04 ,  H04W76/02 ,  H04W76/04 ,  H04W36/00

CPC classification number: H04W36/04 ,  H04W36/0033 ,  H04W76/11 ,  H04W76/22

Abstract: A method including storing, at a first apparatus, information for identifying at least one data bearer, wherein the information includes an address and at least one further identifier for the data bearer; and wherein the data bearer is configured between s the aid first apparatus and one of a second apparatus and a third apparatus; and in response to receiving information, moving the at least one data bearer between the second apparatus and the third apparatus.

Abstract translation: 一种方法，包括在第一设备处存储用于识别至少一个数据承载的信息，其中所述信息包括地址和所述数据承载的至少一个另外的标识符; 并且其中所述数据承载在所述辅助第一装置与第二装置和第三装置之一之间配置; 并且响应于接收到的信息，在所述第二设备和所述第三设备之间移动所述至少一个数据承载。