公开(公告)号：US20210235269A1

公开(公告)日：2021-07-29

申请号：US16094975

申请日：2016-04-19

Applicant: NOKIA SOLUTIONS AND NETWORKS OY

Inventor： Guenther HORN ,  Anja JERICHOW

IPC: H04W12/084 ,  H04W76/11 ,  H04W48/02 ,  H04W12/041

Abstract: There are provided measures for network authorization assistance. Such measures exemplarily comprise detecting a connection opportunity to a radio access network, obtaining a network identifier of said radio access network, said network identifier being indicative of trust related information with respect to said radio access network, circuitry 11 verifying correctness of said network identifier, and controlling a selection processing of selecting to connect to said radio access network or not based on said network identifier of said radio access network, if said network identifier is verified as being correct.

公开(公告)号：US20190069170A1

公开(公告)日：2019-02-28

申请号：US16077119

申请日：2016-02-11

Applicant: NOKIA SOLUTIONS AND NETWORKS OY

Inventor： Anja JERICHOW ,  Guenther HORN

IPC: H04W12/06 ,  H04W12/04

Abstract: The present invention provides apparatuses, methods, computer programs, computer program products and computer-readable media regarding security in isolated LTE networks. The method comprises receiving, at a network element, a message from a management entity, determining, at the network element, a class of a radio network to which the management entity belongs, selecting a function for generating an authentication key based on the determined class, and generating the authentication key using the selected function.

公开(公告)号：US20190037407A1

公开(公告)日：2019-01-31

申请号：US15974394

申请日：2018-05-08

Applicant: NOKIA SOLUTIONS AND NETWORKS OY

Inventor： Suresh NAIR ,  Anja JERICHOW ,  Nagendra S. BYKAMPADI

IPC: H04W12/10 ,  H04W8/02 ,  H04W12/04 ,  H04W4/14 ,  H04W60/00 ,  H04L9/14 ,  H04L29/06

Abstract: A short message service (SMS) message is encrypted using an encryption key stored at a user equipment and an access and mobility management function (AMF) and the encrypted SMS message is added to a payload of a non-access stratum (NAS) message that includes an NAS header. Integrity protection is applied to the NAS message using an integrity key stored at the user equipment and the AMF and the integrity-protected NAS message is transmitted. The NAS message is received via an NAS link between the user equipment and the AMF. An integrity check is performed on the NAS message using the integrity key. An encrypted short message service (SMS) message is extracted from a payload of the NAS message in response to the integrity check being successful and the encrypted SMS message is decrypted using the encryption key.

公开(公告)号：US20190253888A1

公开(公告)日：2019-08-15

申请号：US16335026

申请日：2016-09-20

Applicant: NOKIA SOLUTIONS AND NETWORKS OY

Inventor： Anja JERICHOW ,  Suresh NAIR

IPC: H04W12/04 ,  H04W12/06 ,  H04W12/00 ,  H04L9/08

CPC classification number: H04W12/0401 ,  H04L9/0844 ,  H04W12/00512 ,  H04W12/009 ,  H04W12/04 ,  H04W12/04031 ,  H04W12/06 ,  H04W84/12

Abstract: Systems, methods, apparatuses, and computer program products directed to next generation (e.g., 5G systems) key set identifier(s) are provided. One method includes requesting, by a network node, authentication of a user equipment with an authentication server, receiving a master key and authentication parameters/vectors from the authentication server when authorization is successful, and verifying validity of the authentication request. When the verification is successful, the method may further include instantiating a security context for the user equipment and assigning a security context identifier for next generation system security context to the user equipment, and then sending a security mode command message to instruct the user equipment to instantiate security context using the security context identifier.

公开(公告)号：US20170118635A1

公开(公告)日：2017-04-27

申请号：US14923347

申请日：2015-10-26

Applicant: NOKIA SOLUTIONS AND NETWORKS OY

Inventor： Anja JERICHOW ,  Guenther HORN

IPC: H04W12/04 ,  H04W12/08

CPC classification number: H04W12/04 ,  H04L63/06 ,  H04L63/08 ,  H04L63/104 ,  H04W12/0023 ,  H04W12/06 ,  H04W12/08

Abstract: Various communication systems may benefit from appropriate security mechanisms. For example, isolated operation of evolved universal terrestrial radio networks may benefit from key separation for a local evolved packet core. A method can include deriving a subscriber key corresponding to an isolated operation network. The subscriber key can be derived from an identifier of the isolated operation network and a master subscriber key. The method can also include provisioning the subscriber key to the isolated operation network.

公开(公告)号：US20170264647A1

公开(公告)日：2017-09-14

申请号：US15504924

申请日：2015-08-17

Applicant: NOKIA SOLUTIONS AND NETWORKS OY

Inventor： Anja JERICHOW ,  Thomas BELLING ,  Guenther HORN

IPC: H04L29/06 ,  H04W4/06

CPC classification number: H04L63/205 ,  H04L69/16 ,  H04W4/06 ,  H04W12/0013 ,  H04W12/04

Abstract: Systems, methods, apparatuses, and computer program products for securing user plane (e.g., MB2-U) interface between a group communication service application server (GCS AS) and Broadcast Multicast Service Center (BM-SC) are provided. One method may include transmitting a message via a control plane, to an application server, indicating whether to establish a security association on a user plane in an interface between the GCS AS and the BM-SC. The method may also include providing, to the GCS AS, a target internet protocol (IP) address and possible port as a target for the security association.

公开(公告)号：US20150200965A1

公开(公告)日：2015-07-16

申请号：US14153628

申请日：2014-01-13

Applicant: NOKIA SOLUTIONS AND NETWORKS OY

Inventor： Anja JERICHOW

IPC: H04L29/06

CPC classification number: H04L63/20 ,  H04L63/065 ,  H04L63/168 ,  H04W4/06 ,  H04W4/08 ,  H04W12/02 ,  H04W12/04

Abstract: A method and apparatus can be configured to transmit indicators to a network entity. The indicators indicate whether security will be applied to a media data, whether security will be applied by an application layer, and whether security will be applied by an evolved-packet-system layer. The method can also include transmitting the media data to the network entity.

Abstract translation: 一种方法和装置可被配置为向网络实体传送指示符。 指标表明是否将安全性应用于媒体数据，安全性是否由应用层应用，以及安全性是否将由演进的分组系统层应用。 该方法还可以包括将媒体数据发送到网络实体。