公开(公告)号：US20230137814A1

公开(公告)日：2023-05-04

申请号：US17514024

申请日：2021-10-29

Applicant: Nokia Technologies Oy

Inventor： Markus Staufer ,  Rainer Liebhart ,  Devaki Chandramouli ,  Markus Isomaki ,  Pekka Korja

IPC: H04W12/06 ,  H04W60/04 ,  H04W8/26

Abstract: Techniques for facilitating onboarding to a non-public network is provided. Provisioning parameters may be provided to User Equipment (UE) from a Default Credential Server (DCS) via a secure communication tunnel. Additionally or alternatively, provisioning parameter container(s) including readable provisioning parameters for an Onboarding Network (ONN), and secure provisioning parameters for the UE, may be transmitted to the UE via the ONN. The disclosed methods and apparatuses enable the UE to onboard to a non-public network using the provisioning parameters, and to verify the integrity of the provisioning parameters and ensure the provisioning parameters are not modified by an unauthorized device.

公开(公告)号：US20240414633A1

公开(公告)日：2024-12-12

申请号：US18696895

申请日：2022-09-29

Applicant: Nokia Technologies Oy

Inventor： Devaki Chandramouli ,  Markus Staufer ,  Rainer Liebhart ,  Sumesh Parameswaran Nair ,  Jürgen Merkel

IPC: H04W48/10 ,  H04W36/00 ,  H04W36/14 ,  H04W60/04

Abstract: Methods, systems, apparatuses, and computer program products are provided for discovery and/or access to localized services provided by a communication network. In this regard, based on a tracking area code associated with a local network configured to provide localized services, a registration update process, a handover, or a state transition is initiated with respect to user equipment that is served by a mobile network. Furthermore, network information for the local network during the registration update process, during the handover, or during the state transition of the user equipment is determined. Network information is also provided to the user equipment during the registration update process, during the handover, or during the state transition of the user equipment. Additionally, a connection between the user equipment and the local network is established based on the network information.

公开(公告)号：US12003961B2

公开(公告)日：2024-06-04

申请号：US17514024

申请日：2021-10-29

Applicant: Nokia Technologies Oy

Inventor： Markus Staufer ,  Rainer Liebhart ,  Devaki Chandramouli ,  Markus Sakari Isomäki ,  Pekka Juhani Korja

IPC: H04W12/06 ,  H04L29/06 ,  H04W8/26 ,  H04W60/04 ,  H04W76/12

CPC classification number: H04W12/06 ,  H04W8/265 ,  H04W60/04 ,  H04W76/12

Abstract: Techniques for facilitating onboarding to a non-public network is provided. Provisioning parameters may be provided to User Equipment (UE) from a Default Credential Server (DCS) via a secure communication tunnel. Additionally or alternatively, provisioning parameter container(s) including readable provisioning parameters for an Onboarding Network (ONN), and secure provisioning parameters for the UE, may be transmitted to the UE via the ONN. The disclosed methods and apparatuses enable the UE to onboard to a non-public network using the provisioning parameters, and to verify the integrity of the provisioning parameters and ensure the provisioning parameters are not modified by an unauthorized device.

公开(公告)号：US11848909B2

公开(公告)日：2023-12-19

申请号：US17480558

申请日：2021-09-21

Applicant: NOKIA TECHNOLOGIES OY

Inventor： Pekka Juhani Korja ,  Rainer Liebhart ,  Markus Sakari Isomaki

IPC: H04L61/4552 ,  H04L67/56 ,  H04L61/4511 ,  H04L61/4541 ,  H04L9/40

CPC classification number: H04L61/4552 ,  H04L61/4511 ,  H04L61/4541 ,  H04L63/0236 ,  H04L63/0263 ,  H04L63/0281 ,  H04L67/56

Abstract: Techniques for providing more efficient onboarding traffic protocols in a standalone non-public network architecture are provided. A network entity includes processing circuitry and at least one memory including computer program code. The at least one memory and the computer program code configured to, with the processing circuitry, cause the network entity at least to generate one or more traffic filter rules for a traffic filter set. The one or more traffic filter rules or traffic detection rules are generated based at least in part on domain name service query response information related to one or more user device originated domain name service queries. The network entity may further be configured to cause a user plane function to be provided with the one or more traffic filter rules.

公开(公告)号：US12219399B2

公开(公告)日：2025-02-04

申请号：US17588966

申请日：2022-01-31

Applicant: NOKIA TECHNOLOGIES OY

Inventor： Georgios Gkellas ,  Rainer Liebhart ,  Mu He ,  Devaki Chandramouli ,  Laurent Thiebaut ,  Lazaros Gkatzikis

IPC: H04W28/12 ,  H04W28/02 ,  H04W40/12 ,  H04W76/10

Abstract: Systems, methods, apparatuses, and computer program products for access traffic steering, switching, and splitting (ATSSS) with branching point (BP) on the path are provided. The method may include determining that an existing user plane function is sub-optimal in terms of routing and latency incurred with respect to traffic for a given packet data unit session of a user equipment. The method may also include establishing, based on the determination, a new user plane function for the packet data unit session. The method may further include establishing a branching point user plane function that interfaces with the existing user plane function, the new user plane function, and a plurality of network access types. In addition, the method may include updating the user equipment by providing the user equipment with relevant multi-access traffic steering rules.

公开(公告)号：US20230045417A1

公开(公告)日：2023-02-09

申请号：US17879101

申请日：2022-08-02

Applicant: Nokia Technologies Oy

Inventor： Markus Staufer ,  Rainer Liebhart ,  Sumesh Parameswaran Nair ,  Bo Holm Bjerrum

IPC: H04W12/06 ,  H04W60/00 ,  H04W8/18

Abstract: Techniques are disclosed for security management during an onboarding process for user equipment. For example, from a perspective of an onboarding network, a method comprises authenticating, via the onboarding network, user equipment based on an onboarding record previously configured for the user equipment or a set of user equipment and maintained by the onboarding network. Upon successful authentication, a communication session is established from the onboarding network to a provisioning server for remote provisioning of the user equipment. Advantageously, the onboarding process is performed without a default credential server.