专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20210143988A1 SECURE AUTHENTICATION IN A COMMUNICATION NETWORK 有权
公开(公告)号：US20210143988A1
公开(公告)日：2021-05-13
申请号：US17154897
申请日：2021-01-21
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (PUBL)
发明人： Vesa Lehtovirta , Jari Arkko
IPC分类号： H04L9/08 , H04L29/06 , H04W12/041 , H04W12/50 , H04W12/0431
摘要： The present invention relates to a method for secure authentication in a communication network. The method is performed in a user equipment, UE, and comprises providing an inner authentication key by an inner authentication process, deriving an outer authentication key by an outer authentication process, based on the inner authentication key, wherein the outer authentication key differs from the inner authentication key, and providing the derived outer authentication key to a security protocol/for subsequent, secure communication. A method, user equipments, network nodes, 5G core networks, computer programs, and a computer program product for secure authentication in a communication network are also presented.

2. 发明申请

US20210112409A1 SERVICE-BASED 5G CORE AUTHENTICATION ENDPOINTS 有权
公开(公告)号：US20210112409A1
公开(公告)日：2021-04-15
申请号：US17047533
申请日：2019-04-12
申请人： Telefonaktiebolaget LM Ericsson (publ)
发明人： Göran Rune , Jari Arkko , Jesus-Angel de-Gregorio-Rodriguez , Göran Eriksson , Magnus Westerlund
IPC分类号： H04W12/06
摘要： Systems and methods that are particularly well-suited for service-based core network endpoint authentication are disclosed. In some embodiments, a method of operation of a network node implementing a second network function in a core network of a cellular communications system comprises receiving, at a main service of the second network function, a request from a first network function for a desired service via Hypertext Transfer Protocol/Representational State Transfer (HTTP/REST) signaling. The request comprises information that identifies one or more delegate endpoints of the first network function that expose one or more delegate services, respectively, of the first network function for providing the desired service using one or more different communication styles. The method further comprises initiating the desired service using a selected delegate endpoint from the one or more delegate endpoints identified by the information comprised in the request.

3. 发明授权

US11323868B2 Serverless core network architecture 有权
公开(公告)号：US11323868B2
公开(公告)日：2022-05-03
申请号：US16647346
申请日：2018-09-17
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (PUBL)
发明人： Jari Arkko , Ari Keränen
IPC分类号： H04L41/5054 , H04L67/00 , H04W8/02 , H04L67/51
摘要： Methods for provisioning a service in a first network and providing the service by an entity in a second network are disclosed. The methods comprising maintaining in a software repository in the first network, one or more software images (I1, I2, . . . Ii) of corresponding one or more services and where each service is identified by a service identifier (Si) and storing configuration information related to the one or more services in a database repository of the first network. The method of providing the service in the second network further comprises receiving and storing one or more software images (I1, I2, . . . ) for one or more services of the first network and where each service is identified by a service identifier (Si) and upon detecting a trigger indicating a request for a service of the one or more services, instantiating the software image of the service in the serving network.

4. 发明授权

US11272383B2 Method and apparatus for handling a critical application 有权
公开(公告)号：US11272383B2
公开(公告)日：2022-03-08
申请号：US16965451
申请日：2018-03-09
申请人： Telefonaktiebolaget LM Ericsson (publ)
发明人： Jari Arkko
IPC分类号： G06F15/173 , H04W24/02 , H04L43/0811 , H04L69/329 , H04W24/04
摘要： A critical application system includes a wireless device, an application and a network device. The network device is configured to: receive a command from the at least one wireless device through a first application protocol interface; monitor the connection to the at least one wireless device; determine whether a change in connectivity through the connection occurs, and if so, send information regarding the change in connectivity to the application device through a second application protocol interface. The application device controller is configured to: receive information regarding a change in connectivity to at least one of the at least one wireless device through the second application protocol interface, and determine an action to take; and send a command to at least one of the at least one wireless device through a third application protocol interface, where the controller is configured to: receive the command and execute the associated action.

5. 发明申请

US20190058769A1 Communication Configurations For A Machine Device 审中-公开
公开(公告)号：US20190058769A1
公开(公告)日：2019-02-21
申请号：US16069038
申请日：2016-02-09
申请人： Telefonaktiebolaget LM Ericsson (publ)
发明人： Ari Keränen , Jari Arkko , Tuomas Tirronen
IPC分类号： H04L29/08 , H04W72/04 , H04L12/24
摘要： A machine device (30) sends a report setting out the type of services it supports to a configuration determining device (26) associated with a communication network (10, 12), which configuration determining device 5 (26) in turn determines communication configuration suggestions for the communication of the machine device (30) in the communication network (10, 12) based on the supported type of services indicated in the report and provides the communication configuration suggestions for allowing at least some of them to be implemented for use in communication 10 performed by the machine device (30). The machine device (30) then communicates in the communication network using the communication configurations suggestions that have been implemented.

6. 发明授权

US09986412B2 Discovery in a wireless communications system 有权
公开(公告)号：US09986412B2
公开(公告)日：2018-05-29
申请号：US15318231
申请日：2014-06-24
申请人： Telefonaktiebolaget LM Ericsson (publ)
发明人： Ari Keränen , Jari Arkko , Tuomas Tirronen
IPC分类号： H04B7/00 , H04W8/00 , H04W48/14 , H04W52/02
CPC分类号： H04W8/005 , H04W48/14 , H04W52/0209 , H04W76/10 , H04W76/14 , H04W84/18 , Y02D70/142 , Y02D70/144 , Y02D70/162 , Y02D70/164
摘要： There is provided discovery in a wireless communications network. A communications device wirelessly receives, using a short-range communications technology, at least one beacon signal from at least one wireless device in the wireless communications network. The communications device wirelessly transmits, using the short-range communications technology, information relating to the received at least one beacon signal in at least one message such as to allow for discovery of the wireless device.

7. 发明授权

US11343675B2 Communication device authentication for multiple communication devices 有权
公开(公告)号：US11343675B2
公开(公告)日：2022-05-24
申请号：US16761516
申请日：2017-11-21
申请人： Telefonaktiebolaget LM Ericsson (publ)
发明人： Jari Arkko
IPC分类号： H04W12/06 , H04L29/06 , H04W12/04 , H04W12/30
摘要： Disclosed is a method in an operator authentication server for authentication of a communication device associated with a communication device manager. The communication device manager being associated with a plurality of communication devices, wherein the operator authentication server has transmitted group subscriber identity module (SIM) information to the communication device manager, wherein the group SIM information is associated with an international mobile subscriber identity (IMSI) number and a shared secret K. The method comprises receiving from the communication device a request for authentication comprising a sub identifier associated with the communication device; determining whether the sub identifier is known. Wherein if it is determined that the sub identifier is known, the method comprises: deriving a secret Ki associated with the communication device based on the shared secret K, and the sub identifier; transmitting a challenge to the communication device, wherein the challenge is formed cryptographically based on the derived secret Ki; receiving from the communication device a response to the challenge, wherein the response is cryptographically formed based on the derived secret Ki; determining whether the received response is correct by confirming that it was cryptographically formed by using the derived secret Ki. When it is determined that the received response is correct, the method comprises: authenticating the communication device and derive a first session key based on the derived secret Ki.

8. 发明授权

US11284254B2 Service-based 5G core authentication endpoints 有权
公开(公告)号：US11284254B2
公开(公告)日：2022-03-22
申请号：US17047533
申请日：2019-04-12
申请人： Telefonaktiebolaget LM Ericsson (publ)
发明人： Göran Rune , Jari Arkko , Jesus-Angel de-Gregorio-Rodriguez , Göran Eriksson , Magnus Westerlund
IPC分类号： H04W12/06 , H04W4/14
摘要： Systems and methods that are particularly well-suited for service-based core network endpoint authentication are disclosed. In some embodiments, a method of operation of a network node implementing a second network function in a core network of a cellular communications system comprises receiving, at a main service of the second network function, a request from a first network function for a desired service via Hypertext Transfer Protocol/Representational State Transfer (HTTP/REST) signaling. The request comprises information that identifies one or more delegate endpoints of the first network function that expose one or more delegate services, respectively, of the first network function for providing the desired service using one or more different communication styles. The method further comprises initiating the desired service using a selected delegate endpoint from the one or more delegate endpoints identified by the information comprised in the request.

9. 发明授权

US10425808B2 Managing user access in a communications network 有权
公开(公告)号：US10425808B2
公开(公告)日：2019-09-24
申请号：US15410064
申请日：2017-01-19
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (publ)
发明人： Mats Naslund , Jari Arkko
IPC分类号： H04W12/04 , H04L29/06 , H04W12/06 , H04W80/04
摘要： A method of operating a node for performing handover between access networks wherein a user has authenticated for network access in a first access network. The method comprises receiving from a home network a first session key and a temporary identifier allocated to the user for the duration of a communication session. The identifier is mapped to the first session key, and the mapped identifier and key are stored at the node. A second session key is derived from the first session key and the second session key is sent to an access network, and the identifier sent to a user terminal. When the user subsequently moves to a second access network, the node receives the identifier from the user terminal. The node then retrieves the first session key mapped to the received identifier, derives a third session key and sends the third session key to the second access network.

10. 发明授权

US10057232B2 Communication between a communication device and a network device 有权
公开(公告)号：US10057232B2
公开(公告)日：2018-08-21
申请号：US15096644
申请日：2016-04-12
申请人： Telefonaktiebolaget LM Ericsson (publ)
发明人： Mats Näslund , Bengt Sahlin , Karl Norrman , Jari Arkko
IPC分类号： H04L9/32 , H04L29/06 , G06F21/60 , H04L9/08 , H04W12/04 , H04W12/06 , H04W12/10
CPC分类号： H04L63/08 , G06F21/602 , H04L9/0816 , H04L9/0844 , H04L9/3271 , H04L63/0428 , H04L63/06 , H04L63/0853 , H04L63/0869 , H04L63/123 , H04L2463/082 , H04W12/04 , H04W12/06 , H04W12/10
摘要： A first network device of a first communication network obtains a challenge, generates a first PFS parameter, obtains a first verification code for the first PFS parameter, and sends the challenge, the first PFS parameter and the first verification code to a communication device, which in turn receives the challenge, the first PFS parameter and the first verification code, forwards the challenge or a derivative thereof to an identity module, receives at least one result parameter as response from the identity module, determines, based on the result parameter, whether the first PFS parameter is authentic, and if the determination is positive generates and sends the second PFS parameter to the first network device, which in turn verifies the second PFS parameter.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式