公开(公告)号：US10447653B2

公开(公告)日：2019-10-15

申请号：US15537001

申请日：2014-12-18

Applicant: NOKIA SOLUTIONS AND NETWORKS OY

Inventor： Silke Holtmanns ,  Ian Justin Oliver

IPC: H04L29/06 ,  H04L12/751 ,  H04L12/721 ,  H04L29/08 ,  H04L12/66

Abstract: An apparatus of a communication network system, which routes data packets and stores trusted routes between different communication network systems in a database, detects (S12) that a data packet requires a route with a specific level of trust, determines (S13), from the trusted routes stored in the database, a specific trusted route towards a destination as indicated in the data packet, and sets (S15) the data packet on the specific trusted route towards the destination.

公开(公告)号：US20220103599A1

公开(公告)日：2022-03-31

申请号：US17419180

申请日：2019-01-02

Applicant: Nokia Solutions and Networks Oy

Inventor： Wei Zheng ,  Cheng Cai ,  Yulong Zhang ,  Xiaoguang Zhao ,  Silke Holtmanns ,  Ian Justin Oliver

IPC: H04L67/00

Abstract: Methods and apparatus are disclosed for unified security configuration management. A method may comprise: determine a security configuration to be executed; determine at least one security application which is installed on at least one node and is associated with the security configuration; format for the security configuration, instructions corresponding to each of the at least one security application, respectively; and send the instructions to the at least one node for respective configuration for each of the at least one security application.

公开(公告)号：US11991297B2

公开(公告)日：2024-05-21

申请号：US17284576

申请日：2019-01-31

Applicant: Nokia Solutions and Networks Oy

Inventor： Dimitrios Schoinianakis ,  Ian Justin Oliver

IPC: H04L9/32 ,  H04L9/08

CPC classification number: H04L9/3278 ,  H04L9/0822 ,  H04L9/085 ,  H04L9/321 ,  H04L9/3242

Abstract: According to an example aspect of the present invention, there is provided a cryptoprocessor comprising physical unclonable function circuitry comprising at least one physical unclonable function, and at least one processing core configured to process a challenge received from outside the cryptoprocessor by at least deriving a response to the challenge by providing the challenge as input to the physical unclonable function circuitry, using the response as an encryption key to encrypt a second encryption key, and by causing the encrypted second encryption key to be provided to a party which issued the challenge.

公开(公告)号：US10602396B2

公开(公告)日：2020-03-24

申请号：US15785915

申请日：2017-10-17

Applicant: Nokia Solutions and Networks Oy

Inventor： Aapo Kalliola ,  Ian Justin Oliver ,  Yoan Jean Claude Miche ,  Silke Holtmanns ,  Amaanat Ali ,  Pekka Kuure

IPC: H04W28/02 ,  H04L29/06 ,  H04W24/04 ,  H04L12/26 ,  H04W24/08 ,  H04W28/08 ,  H04W24/02 ,  H04W24/10 ,  H04W28/18

Abstract: This document discloses a solution for detecting and mitigating anomalies such as signalling storms in a radio access network of a wireless communication system. According to an aspect, there is disclosed a method including receiving, in a first local traffic analysis module, configuration parameters from a second local traffic analysis module or from a central traffic analysis module connected to a plurality of local traffic analysis modules; monitoring, by a first traffic analysis module by using the received configuration parameters, traffic in a radio access network of a wireless communication system; detecting, in the monitored traffic on the basis of the configuration parameters, an anomaly causing a control plane signalling load; and in response to said detecting, taking an action to mitigate the anomaly and reporting information on the anomaly to the central traffic analysis module.

公开(公告)号：US10397242B2

公开(公告)日：2019-08-27

申请号：US16219204

申请日：2018-12-13

Applicant: NOKIA SOLUTIONS AND NETWORKS OY

Inventor： Leo Tapani Hippelainen ,  Ian Justin Oliver ,  Shankar Lal

IPC: H04L29/06 ,  H04L9/08 ,  G06F21/34 ,  G06F21/64 ,  G06F21/62 ,  G06F21/60 ,  H04W4/02 ,  H04W12/10 ,  G06F9/455

Abstract: There is provided a method comprising: receiving, by an apparatus of a data center, a request message from a server computer of said data center, the apparatus and the server computer being physically separate entities communicatively coupled with each other, said message requesting data center specific information stored into a read-only memory area of the apparatus; initiating deciphering of the request message in response to receiving the request message; and as a response to successfully deciphering the request message, transmitting a response message to the server computer, said message comprising the data center specific information acquired from the read-only memory area of the apparatus.

公开(公告)号：US12010146B2

公开(公告)日：2024-06-11

申请号：US17419180

申请日：2019-01-02

Applicant: Nokia Solutions and Networks Oy

Inventor： Wei Zheng ,  Cheng Cai ,  Yulong Zhang ,  Xiaoguang Zhao ,  Silke Holtmanns ,  Ian Justin Oliver

IPC: H04L9/40 ,  G06F9/455 ,  H04L9/32

CPC classification number: H04L63/20 ,  G06F9/45558 ,  H04L9/3263 ,  H04L63/0272 ,  H04L63/205 ,  G06F2009/45587

Abstract: Methods and apparatus are disclosed for unified security configuration management. A method may comprise: determine a security configuration to be executed; determine at least one security application which is installed on at least one node and is associated with the security configuration; format for the security configuration, instructions corresponding to each of the at least one security application, respectively; and send the instructions to the at least one node for respective configuration for each of the at least one security application.

公开(公告)号：US10237279B2

公开(公告)日：2019-03-19

申请号：US15891536

申请日：2018-02-08

Applicant: NOKIA SOLUTIONS AND NETWORKS OY

Inventor： Leo Tapani Hippelainen ,  Ian Justin Oliver ,  Shankar Lal

IPC: H04L29/06 ,  G06F21/64 ,  G06F21/62 ,  G06F21/60 ,  G06F21/34 ,  H04L9/08 ,  H04W4/02 ,  H04W12/10 ,  G06F9/455

Abstract: There is provided a method comprising: receiving, by an apparatus of a data center, a request message from a server computer of said data center, the apparatus and the server computer being physically separate entities communicatively coupled with each other, said message requesting data center specific information stored into a read-only memory area of the apparatus; initiating deciphering of the request message in response to receiving the request message; and as a response to successfully deciphering the request message, transmitting a response message to the server computer, said message comprising the data center specific information acquired from the read-only memory area of the apparatus.