Abstract:
Managing Security Parameter Information (SPIs) to prevent race condition failures begins where a system negotiates SPIs along with associated expiration times, and re-negotiates new SPIs as necessary. The system prevents race conditions that would otherwise occur when both an old SPI and a new SPI are active at the same time. The system accomplishes this by managing the storage and deletion of old SPIs such that only active SPIs are stored on the system for use by a User Equipment (UE) or Proxy Call Session Control Function (P-CSCF).
Abstract:
The present disclosure relates to a pre-5th-Generation (5G) or 5G communication system to be provided for supporting higher data rates Beyond 4th-Generation (4G) communication system such as Long Term Evolution (LTE). In accordance with an aspect of the present disclosure, a method of transmitting data in a device to device communication system is provided. The method includes determining whether a security feature is applied to one or more packet data convergence protocol (PDCP) data units, configuring the one or more PDCP data units based on the determined result, and transmitting the one or more PDCP data units to one or more receiving user equipments (UEs).
Abstract:
Techniques for providing enrollment services for various types of electronic devices in a communication network is disclosed. The electronic devices may include devices associated with a user and headless devices not associated with any user. In certain embodiments, a device enrollment system is disclosed that controls the authentication and enrollment of both user devices and headless devices within a communication network. The device enrollment system detects a particular device within a communication network, identifies a type of enrollment policy to be applied to the device based on a type of the device, applies a set of enrollment rules to the device in accordance with the enrollment policy and enrolls the device if the device satisfies one or more criteria specified by the enrollment rules.
Abstract:
Techniques are provided for generating a logical application by grouping multiple physical distributions of an application for programing a plurality of electronic devices. A logical application can run separate commands through a single interface, lessening the number of connections needed between different user's electronic devices (e.g., smart phones, tablets, workstations, wearable computers) and a company's various servers. In certain embodiments, different physical distributions of the application may correspond to different operating systems versions of the application. Compiled code for each of these operating systems and device types is controlled and assigned to select users' devices from vastly different distribution architectures. A policy associated with a user on a device is identified and an appropriate version of the logical application is added to an application catalog of the user's device based on the policy. A user of the device may install the appropriate version of the logical application onto the device.
Abstract:
Examples relate to enabling auto-configuration and management of storage resources. In some examples, an Internet group management protocol (IGMP) announcement is received from an end device of a number of end devices in a software defined network (SDN) environment. A storage network fabric map is updated to include the end device based on the IGMP/multicast announcement, where the storage network fabric map describes a network topology of the end devices in the SDN environment. At this stage, a device port of the end device is added to a virtual local area network (VLAN). In response to determining that the end device matches a policy template, parameters of the template policy are applied to the device port.
Abstract:
Systems, methods, apparatuses, and computer program products for securing user plane (e.g., MB2-U) interface between a group communication service application server (GCS AS) and Broadcast Multicast Service Center (BM-SC) are provided. One method may include transmitting a message via a control plane, to an application server, indicating whether to establish a security association on a user plane in an interface between the GCS AS and the BM-SC. The method may also include providing, to the GCS AS, a target internet protocol (IP) address and possible port as a target for the security association.
Abstract:
In one implementation, a policy server establishes a smart virtual private network between two client devices. The smart virtual private network includes a secure communication session using a security level or security algorithm that is variable and defined as a function of the two client devices. A first client device may generate a registration request including a first security configuration including the security level. Based on the registration request, the policy server generates a routing message that defines routing for communication from the first client device to a second client device. The routing message may update a routing table to associate the policy server with the second client device.
Abstract:
For extending a handshake communication between a communication device (CD) and an application server (AS), the application server (AS):receives at least two messages from the communication device (CD), each message comprising a handshake index and triggering a handshake session so that the application server (AS) negotiates with the communication device (CD) a set of cryptographic parameters, for each received message, stores the negotiated set of cryptographic parameters in correspondence with a connection state index depending on the handshake index, activates one of the stored sets of cryptographic parameters for establishing a secured connection with the communication device.