Privacy managing entity selection in communication system

    公开(公告)号:US10893026B2

    公开(公告)日:2021-01-12

    申请号:US15840554

    申请日:2017-12-13

    Inventor: Anja Jerichow

    Abstract: In a home network of a communication system, wherein one or more cryptographic key pairs are provisioned for utilization by subscribers of the home network to conceal subscriber identifiers provided to one or more access points in the communication system, the method comprises provisioning one or more privacy managing entity identifiers for utilization by the subscribers when providing their concealed subscriber identifiers to the communication system. Each of the one or more privacy managing entity identifiers identify a given privacy managing entity in the communication system configured to de-conceal a given subscriber identifier.

    Authorization of network request
    14.
    发明授权

    公开(公告)号:US12192359B2

    公开(公告)日:2025-01-07

    申请号:US17550549

    申请日:2021-12-14

    Abstract: According to an example aspect of the present invention, there is provided an apparatus configured at least to: receive, from a service communication proxy, a request for an access token which authorizes access to a service at a network function provider, transmit an authorization token to the service communication proxy, the authorization token being specific to the request, and provide the access token to the service communication proxy responsive to determining that a cryptographic signature of a network function consumer on a signed version of the authorization token, received in the apparatus from the service communication proxy, is correct. The apparatus may work in a network serving user equipments, for example.

    Authorization in communication networks

    公开(公告)号:US12034733B2

    公开(公告)日:2024-07-09

    申请号:US17494930

    申请日:2021-10-06

    CPC classification number: H04L63/102 H04L63/083 H04W12/06 H04W12/08

    Abstract: According to an example aspect of the present invention, there is provided a method comprising, receiving, by an intermediary network function, a subscription request from a network function consumer requesting data of a network function producer, wherein the subscription request comprises a client credential assertion of the network function consumer and an access token, authorizing and authenticating, by the intermediary network function, the network function consumer upon successful validation of the access token and the client credential assertion validation and transmitting, by the intermediary network function, an access token request to an authorization server to get another access token, wherein said another access token is to be used to validate the network function consumer to access services of the network function producer, and the access token request comprises the client credential assertion of the network function consumer requesting data of the network function producer.

    Optimization of network function profile administration and registration

    公开(公告)号:US12034704B2

    公开(公告)日:2024-07-09

    申请号:US17394828

    申请日:2021-08-05

    Abstract: There are provided measures for optimization of network function profile administration and registration. Such measures exemplarily comprise, at a network repository function entity, receiving, from a control entity, network entity profile template information, storing said network entity profile template information, wherein said network entity profile template information comprises a network entity profile template including an identifier of said network entity profile template and a profile content of said network entity profile template, said profile content including at least one profile attribute, receiving, from a network entity, a network entity registration request comprising said identifier of said network entity profile template, and generating a network entity profile for said network entity based on said at least one profile attribute.

    Security enhancement on inter-network communication

    公开(公告)号:US11818102B2

    公开(公告)日:2023-11-14

    申请号:US17232579

    申请日:2021-04-16

    CPC classification number: H04L63/0281 H04L63/08

    Abstract: Embodiments of the present disclosure relate to methods, apparatuses and computer readable storage media for inter-network communication. A first edge protection proxy in a first network receives a request for an access token from a network repository function in the first network. The access token is to be used by a first network function in the first network to request a service from a second network function in a second network. The first edge protection proxy validates the request based on configurations allowed to access services provided by networks different from the first network. If the validation of the request is successful, the first edge protection proxy transmits the request to a second edge protection proxy in the second network. The transmitted request comprises verified information concerning the first network function.

    METHOD AND APPARATUS FOR SECURITY MANAGEMENT IN 5G NETWORKS

    公开(公告)号:US20210297457A1

    公开(公告)日:2021-09-23

    申请号:US17264768

    申请日:2019-08-02

    Abstract: A session management function of a 5G system receives information that a secondary authentication is to be done for a given user equipment for authorising user equipment to use a data network; and responsively to the received information, communicates with the data network and receives from the data network an indication; and allows a 5G access to the user equipment so that the user equipment can communicate with the data network according to the indication either without cryptographic protection or with cryptographic protection depending on the indication.

Patent Agency Ranking