中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

33 records (took 0.017 seconds)

    MITIGATION AGAINST ACCESS TOKEN THEFT ATTACK IN DIRECT AND INDIRECT COMMUNICATIONS IN SBA
    1.
    发明申请
    MITIGATION AGAINST ACCESS TOKEN THEFT ATTACK IN DIRECT AND INDIRECT COMMUNICATIONS IN SBA 有权

    公开(公告)号：US20250062903A1

    公开(公告)日：2025-02-20

    申请号：US18802902

    申请日：2024-08-13

    Applicant: Nokia Technologies Oy

    Inventor： Saurabh KHARE ,  German PEINADO GOMEZ ,  Chaitanya AGGARWAL

    IPC: H04L9/32 ,  H04L9/30

    Abstract: Various examples of embodiments described herein relate to methods and apparatuses for mitigation against access token theft attack in direct and indirect communications in SBA. One such example of an embodiment relates to a method that includes obtaining a first access token request from a network function service consumer, NFc, the first access token request comprising an authentication code of the NFc; authenticate the network function consumer, NFc, based on a check whether the authentication code is signed by the NFc; sending a second access token request to a network authorization entity or function, wherein the second access token request comprises the authentication code of the NFc and the second access token request further comprises a public key of the NFc or a hash of the public key of the NFc; based thereon, receiving an access token from the network authorization entity or function, wherein the access token comprises the public key of the NFc or a hash of the public key of the NFc; and sending a service request to a network function service provider, NFp, wherein the service request comprises the access token and the authentication code of the NFc.

    AUTHORIZATION IN COMMUNICATION NETWORKS
    4.
    发明申请
    AUTHORIZATION IN COMMUNICATION NETWORKS 有权

    公开(公告)号：US20220116400A1

    公开(公告)日：2022-04-14

    申请号：US17494930

    申请日：2021-10-06

    Applicant: Nokia Technologies Oy

    Inventor： Saurabh KHARE ,  Colin KAHN ,  Georgios GKELLAS ,  Yannick LAIR ,  Anja JERICHOW ,  Chaitanya AGGARWAL

    IPC: H04L29/06 ,  H04W12/06 ,  H04W12/08

    Abstract: According to an example aspect of the present invention, there is provided a method comprising, receiving, by an intermediary network function, a subscription request from a network function consumer requesting data of a network function producer, wherein the subscription request comprises a client credential assertion of the network function consumer and an access token, authorizing and authenticating, by the intermediary network function, the network function consumer upon successful validation of the access token and the client credential assertion validation and transmitting, by the intermediary network function, an access token request to an authorization server to get another access token, wherein said another access token is to be used to validate the network function consumer to access services of the network function producer, and the access token request comprises the client credential assertion of the network function consumer requesting data of the network function producer.

    MECHANISM FOR AUTHORIZING DATA EXCHANGE
    5.
    发明申请
    MECHANISM FOR AUTHORIZING DATA EXCHANGE 有权

    公开(公告)号：US20250063362A1

    公开(公告)日：2025-02-20

    申请号：US18788531

    申请日：2024-07-30

    Applicant: Nokia Technologies Oy

    Inventor： Saurabh KHARE ,  Chaitanya AGGARWAL

    IPC: H04W12/084

    Abstract: An apparatus for performing: defining an authorization policy per UE, the authorization policy indicating which data are allowed to be accessed by which UE, configuring an authorization policy to one or more UE by providing a key material usable for validating an access token and information regarding the authorization policy indicating an allowance for connection between a requester UE and a producer element or a producer function with a valid access token or without an access token, receiving a request for authorization of a requester UE to access to specified data from a producer element or producer function, processing the request for authorization of the requester UE for deciding whether the request is allowed, and in case the request is allowed, obtain an access token for allowing access to the specified data from the producer element or producer function, and transmitting the access token to the requester UE.

    ENHANCED AUTHORIZATION IN CELLULAR COMMUNICATION NETWORKS
    6.
    发明申请
    ENHANCED AUTHORIZATION IN CELLULAR COMMUNICATION NETWORKS 有权

    公开(公告)号：US20220272537A1

    公开(公告)日：2022-08-25

    申请号：US17675436

    申请日：2022-02-18

    Applicant: Nokia Technologies Oy

    Inventor： Chaitanya AGGARWAL ,  Saurabh KHARE ,  Anja JERICHOW ,  Gerald KUNZMANN ,  Yannick LAIR

    IPC: H04W12/069 ,  H04L9/40 ,  H04W12/08

    Abstract: According to an example aspect of the present invention, there is provided an apparatus comprising means for receiving from a requesting network function, by a network repository function, an access token request, wherein the access token request is related to a network function consumer requesting access to a service provided by a network function producer and comprises an identity of a vendor of the network function consumer requesting access to the service, means for verifying by the network repository function, based at least on the identity of the vendor of the network function consumer, that the network function consumer is allowed to access the service and means for transmitting to the requesting network function, by the network repository function, an access token upon successful verification, wherein the access token generated and signed by the network repository function comprises the identity of the vendor of the network function consumer and an identity of the vendor of the network function producer.

    AUTHORIZATION OF NETWORK NODE
    7.
    发明申请
    AUTHORIZATION OF NETWORK NODE 有权

    公开(公告)号：US20220104162A1

    公开(公告)日：2022-03-31

    申请号：US17487576

    申请日：2021-09-28

    Applicant: Nokia Technologies Oy

    Inventor： Chaitanya AGGARWAL ,  Anja JERICHOW ,  Georgios GKELLAS ,  Saurabh KHARE ,  Bruno LANDAIS

    IPC: H04W60/00 ,  H04W48/16 ,  H04W12/08

    Abstract: According to an example aspect of the present invention, there is provided a method comprising receiving, by a network repository function, a registration request from an application function, wherein the registration request comprises at least one parameter that needs to be used for generating an access token for the application function, the at least one parameter being associated with the application function, registering the application function by the network repository function and transmitting, by the network repository function, a response to the registration request, wherein the response comprises the at least one parameter associated with the application function.

    MANAGEMENT OF ACCESS TOKENS IN COMMUNICATION NETWORKS
    8.
    发明申请
    MANAGEMENT OF ACCESS TOKENS IN COMMUNICATION NETWORKS 有权

    公开(公告)号：US20220086734A1

    公开(公告)日：2022-03-17

    申请号：US17410626

    申请日：2021-08-24

    Applicant: Nokia Technologies Oy

    Inventor： Chaitanya AGGARWAL ,  Saurabh KHARE ,  Anja JERICHOW ,  Bruno LANDAIS

    IPC: H04W48/08

    Abstract: According to an example aspect of the present invention, there is provided a method comprising, transmitting to a Network Function, NF, service producer, by a Service Communication Proxy, SCP, a service request on behalf of an NF service consumer, wherein the service request comprises an access token, receiving, by the SCP, a service response from the NF service producer and upon receiving the service response, transmitting to the NF service consumer, by the SCP, information related to the access token.

Patent Agency Ranking