公开(公告)号：US12219399B2

公开(公告)日：2025-02-04

申请号：US17588966

申请日：2022-01-31

Applicant: NOKIA TECHNOLOGIES OY

Inventor： Georgios Gkellas ,  Rainer Liebhart ,  Mu He ,  Devaki Chandramouli ,  Laurent Thiebaut ,  Lazaros Gkatzikis

IPC: H04W28/12 ,  H04W28/02 ,  H04W40/12 ,  H04W76/10

Abstract: Systems, methods, apparatuses, and computer program products for access traffic steering, switching, and splitting (ATSSS) with branching point (BP) on the path are provided. The method may include determining that an existing user plane function is sub-optimal in terms of routing and latency incurred with respect to traffic for a given packet data unit session of a user equipment. The method may also include establishing, based on the determination, a new user plane function for the packet data unit session. The method may further include establishing a branching point user plane function that interfaces with the existing user plane function, the new user plane function, and a plurality of network access types. In addition, the method may include updating the user equipment by providing the user equipment with relevant multi-access traffic steering rules.

公开(公告)号：US12034733B2

公开(公告)日：2024-07-09

申请号：US17494930

申请日：2021-10-06

Applicant: Nokia Technologies Oy

Inventor： Saurabh Khare ,  Colin Kahn ,  Georgios Gkellas ,  Yannick Lair ,  Anja Jerichow ,  Chaitanya Aggarwal

IPC: H04L9/40 ,  H04W12/06 ,  H04W12/08

CPC classification number: H04L63/102 ,  H04L63/083 ,  H04W12/06 ,  H04W12/08

Abstract: According to an example aspect of the present invention, there is provided a method comprising, receiving, by an intermediary network function, a subscription request from a network function consumer requesting data of a network function producer, wherein the subscription request comprises a client credential assertion of the network function consumer and an access token, authorizing and authenticating, by the intermediary network function, the network function consumer upon successful validation of the access token and the client credential assertion validation and transmitting, by the intermediary network function, an access token request to an authorization server to get another access token, wherein said another access token is to be used to validate the network function consumer to access services of the network function producer, and the access token request comprises the client credential assertion of the network function consumer requesting data of the network function producer.

公开(公告)号：US11838120B2

公开(公告)日：2023-12-05

申请号：US17607935

申请日：2019-05-02

Applicant: NOKIA TECHNOLOGIES OY

Inventor： Bruno Landais ,  Devaki Chandramouli ,  Laurent Thiebaut ,  Georgios Gkellas

IPC: H04L67/141 ,  H04L67/145 ,  H04L69/167 ,  H04L69/24

CPC classification number: H04L67/141 ,  H04L67/145 ,  H04L69/167 ,  H04L69/24

Abstract: There is provided an apparatus, said apparatus comprising means for providing, from a first function instance of a set of first function instances to a second function, first information comprising an indication that a protocol session between the first function and the second function is controllable by different instances of the set of first function instances and receiving, at one of the set of first function instances from the second function, a protocol session related message based on the first information.

公开(公告)号：US11979937B2

公开(公告)日：2024-05-07

申请号：US17479867

申请日：2021-09-20

Applicant: Nokia Technologies Oy

Inventor： Saurabh Khare ,  Bruno Landais ,  Anja Jerichow ,  Laurent Thiebaut ,  Georgios Gkellas

IPC: H04W8/02 ,  H04W8/18 ,  H04W48/16 ,  H04W84/04

CPC classification number: H04W8/02 ,  H04W8/18 ,  H04W48/16 ,  H04W84/042

Abstract: There is provided an apparatus comprising at least one processor and at least one memory including a computer program code, the at least one memory and computer program code configured to, with the at least one processor, cause the apparatus at least to: receive, at a first network repository function in a first network from a security edge protection proxy in a second network, a request for discovering one or more roaming hubs and/or security edge protection proxies in the first network; and send, from the first network repository function to the security edge protection proxy in the second network, a response comprising information identifying the one or more roaming hubs and/or security edge protection proxies in the first network and information identifying one or more further networks which can be reached via a respective roaming hub and/or security edge protection proxy in the first network.

公开(公告)号：US11930394B2

公开(公告)日：2024-03-12

申请号：US17206842

申请日：2021-03-19

Applicant: NOKIA TECHNOLOGIES OY

Inventor： Bruno Landais ,  Horst Thomas Belling ,  Georgios Gkellas

IPC: H04W28/02

CPC classification number: H04W28/0289 ,  H04W28/0284

Abstract: Systems, methods, apparatuses, and computer program products for load and/or overload control in 5GC SBA are provided. One method may include transmitting, from a network function (NF) service consumer, overload control information (OCI) comprising scope information to a network function (NF) service producer or service communication proxy (SCP). The scope information may include at least one of: scope set to a notification uniform resource identifier (URI), or scope set to one of network function (NF) service instance, network function (NF) service set, network function (NF) instance, or network function (NF) set, and optionally a service name.

公开(公告)号：US11564154B2

公开(公告)日：2023-01-24

申请号：US17205926

申请日：2021-03-18

Applicant: NOKIA TECHNOLOGIES OY

Inventor： Horst Thomas Belling ,  Georgios Gkellas ,  Devaki Chandramouli ,  Saurabh Khare ,  Laurent Thiebaut ,  Bruno Landais

IPC: H04W48/16 ,  H04W48/18 ,  H04W60/00 ,  H04W88/18

Abstract: There is provided an apparatus that comprises means for receiving a request from a second network function including information relating to the second network function, determining, based on the information relating to the second network function, at least one proxy function and in response to the request, providing to the second network function information relating to the at least one determined proxy function.

公开(公告)号：US11943673B2

公开(公告)日：2024-03-26

申请号：US17237680

申请日：2021-04-22

Applicant: NOKIA TECHNOLOGIES OY

Inventor： Alessio Casati ,  Laurent Thiebaut ,  Philippe Godin ,  Georgios Gkellas

IPC: H04W36/00

CPC classification number: H04W36/00835 ,  H04W36/0061

Abstract: Techniques for determining a registration area are provided. A network entity may receive one or more indications of topology information from one or more radio access network nodes. Each indication of topology information is related to one or more tracking areas and each tracking area is associated with one or more cells in a radio access network served by each of the one or more radio access network nodes. The network entity may determine a registration area based at least in part on the received one or more indications of topology information related to the one or more tracking areas.

公开(公告)号：US20230155832A1

公开(公告)日：2023-05-18

申请号：US18047434

申请日：2022-10-18

Applicant: Nokia Technologies Oy

Inventor： Chaitanya AGGARWAL ,  Anja Jerichow ,  Saurabh Khare ,  Georgios Gkellas

IPC: H04L9/32 ,  H04L9/40

CPC classification number: H04L9/3213 ,  H04L63/0884

Abstract: According to an example aspect of the present invention, there is provided an apparatus configured to process a request for an access token authorizing access for a network function consumer to a service provided by a network function producer, the request being received in the apparatus from a service communication proxy, wherein the processing comprises one or more of the following verification: verification that a credential data element comprised in the request, cryptographically signed by the network function consumer, identifies the request, the service or a type of the service, and verification with reference to a further node, or to a profile of the network function consumer, that the service communication proxy is authorized to act on behalf of the network function consumer, and transmit, responsive to at least one of the verifications being successful, the requested access token, the access token comprising an indication of the service communication proxy.

公开(公告)号：US20230030315A1

公开(公告)日：2023-02-02

申请号：US17875438

申请日：2022-07-28

Applicant: Nokia Technologies Oy

Inventor： Saurabh KHARE ,  Chaitanya Aggarwal ,  Anja Jerichow ,  Georgios Gkellas

IPC: H04L9/32 ,  H04L61/4511

Abstract: According to an example aspect of the present invention, there is provided an apparatus configured to function as a network function repository, and transmit to a network function consumer an access token authorizing access to a service provided by a network function producer, the access token comprising an at least one of: indication of a fully qualified domain name of the network function consumer, an indication of a domain from which access to the network function producer is allowed and an indication of a stand-alone non-public network from which access to the network function producer is allowed.

公开(公告)号：US12184738B2

公开(公告)日：2024-12-31

申请号：US17389134

申请日：2021-07-29

Applicant: Nokia Technologies Oy

Inventor： Bruno Landais ,  Laurent Thiebaut ,  Saurabh Khare ,  Georgios Gkellas

IPC: H04L67/148 ,  H04L45/00

Abstract: There is provided an apparatus comprising means for receiving information about an identification of a network function set associated with at least one packet data network connection. The means is further configured for, in response to receiving an indication that a network function instance of the network function set supporting the at least one packet data network connection is no longer available, transferring the at least one packet data network connection from the network function instance to another network function instance comprised within the network function set.