公开(公告)号：US20220086734A1

公开(公告)日：2022-03-17

申请号：US17410626

申请日：2021-08-24

Applicant: Nokia Technologies Oy

Inventor： Chaitanya AGGARWAL ,  Saurabh KHARE ,  Anja JERICHOW ,  Bruno LANDAIS

IPC: H04W48/08

Abstract: According to an example aspect of the present invention, there is provided a method comprising, transmitting to a Network Function, NF, service producer, by a Service Communication Proxy, SCP, a service request on behalf of an NF service consumer, wherein the service request comprises an access token, receiving, by the SCP, a service response from the NF service producer and upon receiving the service response, transmitting to the NF service consumer, by the SCP, information related to the access token.

公开(公告)号：US20220038542A1

公开(公告)日：2022-02-03

申请号：US17389134

申请日：2021-07-29

Applicant: Nokia Technologies Oy

Inventor： Bruno LANDAIS ,  Laurent THIEBAUT ,  Saurabh KHARE ,  Georgios GKELLAS

IPC: H04L29/08 ,  H04L12/707

Abstract: There is provided an apparatus comprising means for receiving information about an identification of a network function set associated with at least one packet data network connection. The means is further configured for, in response to receiving an indication that a network function instance of the network function set supporting the at least one packet data network connection is no longer available, transferring the at least one packet data network connection from the network function instance to another network function instance comprised within the network function set.

公开(公告)号：US20250088997A1

公开(公告)日：2025-03-13

申请号：US18727588

申请日：2022-12-27

Applicant: Nokia Technologies Oy

Inventor： Sankaran BALASUBRAMANIAM ,  Saurabh KHARE

IPC: H04W60/04 ,  H04W8/20 ,  H04W76/20

Abstract: There is provided an apparatus for a core network entity, the apparatus comprising means configured to perform: receiving, from a network node, an indication of one or more first analytics identities that are supported by the network node; receiving, from a terminal, a registration request message; accessing subscription information of the terminal, the subscription information comprising one or more second analytics identities that are subscribed to by the terminal, wherein the one or more first analytics identities and the one or more second analytics identities are each associated with respective machine learning models. The apparatus further comprising means configured to perform, determining a list of authorised analytics identities, that are authorised for use by the network node for the terminal, using: i) the received indication of the one or more first analytics identities that are supported by the network node, and ii) the subscription information of the terminal; and providing, to the network node, the list of authorised analytics identities that are authorised for use by the network node for the terminal.

公开(公告)号：US20250055884A1

公开(公告)日：2025-02-13

申请号：US18773669

申请日：2024-07-16

Applicant: Nokia Technologies Oy

Inventor： Divya G NAIR ,  Ranganathan MAVUREDDI DHANASEKARAN ,  Saurabh KHARE ,  Stawros ORKOPOULOS ,  German PEINADO GOMEZ

IPC: H04L9/40 ,  H04L9/08

Abstract: There are provided methods, apparatuses and computer program products for authentication between a movable network entity and a terminal entity. Such provided methods, apparatuses and computer program products may include authentication and/or identification based on sending and/or receiving at least one security parameter and/or at least one authentifier.

公开(公告)号：US20250048113A1

公开(公告)日：2025-02-06

申请号：US18791362

申请日：2024-07-31

Applicant: Nokia Technologies Oy

Inventor： Aritra BANERJEE ,  Ranganathan MAVUREDDI DHANASEKARAN ,  K TIRUMALESWAR REDDY ,  Saurabh KHARE

IPC: H04W12/72 ,  H04L9/30

Abstract: Embodiments of the present disclosure relate to subscription concealed identifier (SUCI) encryption. In an aspect, a terminal device generates a SUCI of the terminal device based on a subscription permanent identifier (SUPI) of the terminal device. The SUCI comprises a SUPI type indicating that both elliptic curve cryptography (ECC) and post quantum cryptography (PQC) are used in the generating of the SUCI. The terminal device further transmits the SUCI to a network device. As such, a SUCI can be defined to comprise a SUPI type indicating that both the ECC and PQC are used in the generating of the SUCI. With the SUCI generated based on both the ECC and PQC, different kinds of cryptanalytic attacks can be avoided.

公开(公告)号：US20250039775A1

公开(公告)日：2025-01-30

申请号：US18757794

申请日：2024-06-28

Applicant: Nokia Technologies Oy

Inventor： Harish MURALIDHARA ,  Saurabh KHARE

IPC: H04W48/16 ,  H04W12/043 ,  H04W12/069 ,  H04W60/04

Abstract: There are provided measures for data minimization in network function to network function communication. Such measures exemplarily comprise, at a first network function entity configured for communication with a second network function entity, transmitting, towards a network repository function entity, a discovery message, receiving, from said network repository function entity, a response message comprising a first encryption key of said second network function entity, encrypting data, using the first encryption key, as encrypted data, and transmitting, towards said second network function entity, a service request with said encrypted data.

公开(公告)号：US20250031036A1

公开(公告)日：2025-01-23

申请号：US18779046

申请日：2024-07-21

Applicant: Nokia Technologies Oy

Inventor： K. TIRUMALESWAR REDDY ,  Saurabh KHARE ,  Ranganathan MAVUREDDI DHANASEKARAN

IPC: H04W12/043 ,  H04W12/02 ,  H04W12/06 ,  H04W76/10

Abstract: Systems and methods of sending application metadata to on-path network elements. In an embodiment, a method comprises establishing an application session between an application client (1006) running on user equipment (106) and an application service (1010), identifying application metadata (1810) associated with the application session, formatting a transport protocol packet (1802) with the application metadata, deriving an encryption key (1816) based on keying material (1812), encrypting the application metadata in the transport protocol packet using the encryption key, and sending the transport protocol packet over a user plane network path (1024) comprising one or more on-path network elements (1104).

公开(公告)号：US20240422533A1

公开(公告)日：2024-12-19

申请号：US18671659

申请日：2024-05-22

Applicant: Nokia Technologies Oy

Inventor： German PEINADO GOMEZ ,  Topuri BRAHMAIAH ,  Mallikarjunudu MAKHAM ,  Sireesha BOMMISETTY ,  Saurabh KHARE ,  Ranganathan MAVUREDDI DHANASEKARAN ,  Chaitanya AGGARWAL

IPC: H04W12/03 ,  H04W12/041

Abstract: There is provided an apparatus, method, and computer program for causing an apparatus for a user equipment to perform: encrypting a digital asset using a first key to form an encrypted digital asset; providing the encrypted digital asset and an index for the encrypted digital asset to a first network function; and providing an identification of the encrypted digital asset to a first entity.

公开(公告)号：US20240396796A1

公开(公告)日：2024-11-28

申请号：US18692669

申请日：2021-09-17

Applicant: Nokia Technologies Oy

Inventor： Colin KAHN ,  Gerald KUNZMANN ,  Yannick LAIR ,  Saurabh KHARE

IPC: H04L41/0816

Abstract: A method at a first data collection coordination functional entity for coordinating, in a first area, a data and/or analytics collection related to at least one mobile terminal, the method comprising: determining, based on an obtained mobile terminal mobility event notification, that the at least one mobile terminal is no longer in the first area and/or no longer in a second area served by a first messaging framework adaptor functional entity; based thereon, identifying at least one of a second data collection coordination functional entity coordinating a data and/or analytics collection in a third area in which the at least one mobile terminal resides if it does not reside in the first area and a second messaging framework adaptor functional entity serving a fourth area in which the at least one mobile terminal resides if it does not reside in the second area; and based thereon, initiating a transfer or a setup of at least one of a respective data collection coordination functional entity context associated with the at least one mobile terminal to or at the second data collection coordination functional entity and a respective messaging framework adaptor functional entity context associated with the at least one mobile terminal to or at the second messaging framework adaptor functional entity.

公开(公告)号：US20240381224A1

公开(公告)日：2024-11-14

申请号：US18651189

申请日：2024-04-30

Applicant: Nokia Technologies Oy

Inventor： Bruno LANDAIS ,  Saurabh KHARE ,  Anja JERICHOW

IPC: H04W48/02 ,  H04L9/40 ,  H04W12/06 ,  H04W48/16

Abstract: There is provided a method, apparatus, and computer program for causing a first network apparatus to perform: signalling, to a second network apparatus, a request for an access token for a network function consumer for authorizing the network function service consumer to access a first service from a network function service producer; receiving an access token from the second network apparatus, wherein the received access token comprises an indication of at least one second access right unassociated with accessing the first service; and causing the received access token to be provided to the network function service producer when the network function service producer is signalled a request to provide a service to the network function service consumer.