METHODS, COMPUTER PROGRAMS, COMPUTER PROGRAM PRODUCT, COMMUNICATION DEVICES, NETWORK DEVICE AND SERVER

    公开(公告)号:US20210226781A1

    公开(公告)日:2021-07-22

    申请号:US16303346

    申请日:2018-10-30

    摘要: A communication device for communication with a network device during EAP-AKA′. The communication device is operative to: receive a first Perfect Forward Secrecy, PFS, parameter value and at least one attribute value indicating a choice of a Diffie-Hellman group from the network device; receive a cipher key, CK, and an integrity key, IK, generate a modified cipher key, CK′, and a modified integrity key, IK′ based on CK, IK and an access network identity, calculate a second PFS parameter value; send the second PFS parameter value to the network device; calculate a third PFS parameter value; and derive, using a Pseudo-random function, a key based on the third PFS parameter value, CK′, IK′ and an identity associated with the communication device. A network device, methods, further communication devices, a server, computer programs and a computer program product are also disclosed.

    Security Negotiation in Service Based Architectures (SBA)

    公开(公告)号:US20210014284A1

    公开(公告)日:2021-01-14

    申请号:US16968232

    申请日:2019-02-15

    IPC分类号: H04L29/06

    摘要: The disclosure provides techniques for negotiating security mechanisms between security gateways (102A, 102B). In these techniques, an initiating security gateway (102A) sends (302) a request message to a responding security gateway (102B) over a first connection established between the security gateways. The first connection provides integrity protection for 5 the messages. The request message includes one or more security mechanisms supported by the initiating security gateway. Upon receipt, the responding security gateway selects (406) one of the security mechanisms and transmits (408) a response message to the initiating security gateway indicating the selected security mechanism. Signaling messages are then communicated (310, 412) between the security gateways using the selected security 10 mechanism.

    A RADIO ACCESS NODE AND A METHOD OF OPERATING THE SAME

    公开(公告)号:US20180324160A1

    公开(公告)日:2018-11-08

    申请号:US15766685

    申请日:2016-09-20

    摘要: According to an aspect, there is provided a method of operating a first radio access node in a communication network, the first radio access node supporting a plurality of cells that are divided into one or more groups of cells, wherein at least a first group of cells comprises more than one cell, the method comprising determining (901) a first base key for a communication device that is to connect to the first radio access node via a first cell in the first group of cells; wherein the first base key is determined from an identifier for the first group of cells; using (903) the first base key to determine a first encryption key that is to be used to encrypt communications between the communication device and the first radio access node via the first cell; and in the event that the communication device is to connect to the first group of first radio access node via a second cell in the first group of cells, using (907) the first encryption key to encrypt communications between the communication device and the first radio access node via the second cell.

    PROTECTING WLCP MESSAGE EXCHANGE BETWEEN TWAG AND UE

    公开(公告)号:US20180084417A1

    公开(公告)日:2018-03-22

    申请号:US15826003

    申请日:2017-11-29

    摘要: A method of protecting WLAN Control Protocol (WLCP) message exchange between a Trusted WLAN Access Gateway (TWAG) (112) of a Trusted WLAN Access Network (TWAN) (110) and a User Equipment (UE) (101) are provided. The method comprises deriving, by an Authentication, Authorization, and Accounting, (AAA) Server (103) of an Evolved Packet Core (EPC) network which is interfaced with the TWAN, and by the UE, a Master Session Key (MSK) and an Extended MSK (EMSK), sending, from the AAA Server to a Trusted WLAN AAA Proxy (TWAP) (113) of the TWAN and an Access Point (AP) (111) of the TWAN, the MSK or a key derived from at least the MSK, and deriving, by the TWAN or by the AAA Server, and by the UE, from the MSK, the EMSK, or the key derived from at least the MSK or the EMSK, a key for protecting the WLCP message exchange.—Corresponding devices, computer programs, and computer program products are further provided.

    METHODS, APPARATUS AND MACHINE-READABLE MEDIA RELATING TO MACHINE-LEARNING IN A COMMUNICATION NETWORK

    公开(公告)号:US20220294606A1

    公开(公告)日:2022-09-15

    申请号:US17635400

    申请日:2020-08-06

    IPC分类号: H04L9/08 G06N20/00 H04L9/30

    摘要: A method performed by a first entity in a communications network is provided. The first entity belongs to a plurality of entities configured to perform federated learning to develop a model. In the method, the first entity trains a model using a machine-learning algorithm, generating a model update. The first entity generates a first mask, receives an indication of one or more respective second masks from a subset of the remaining entities of the plurality of entities, and combines the first mask and the respective second masks to generate a combined mask. The first entity transmits an indication of the first mask to one or more third entities of the plurality of entities. The first entity applies the combined mask to the model update to generate a masked model update and transmits the masked model update to an aggregating entity of the communications network.