专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2008130282A1 A METHOD AND ARRANGEMENT FOR HANDLING PROFILES IN A MULTIMEDIA SERVICE NETWORK 审中-公开
标题翻译：一种在多媒体服务网络中处理配置文件的方法和装置
公开(公告)号：WO2008130282A1
公开(公告)日：2008-10-30
申请号：PCT/SE2007/000372
申请日：2007-04-19
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (PUBL) , BARRIGA, Luis , CASTELLANOS-ZAMORA, David , ESTEBAN VARES, Nuria
发明人： BARRIGA, Luis , CASTELLANOS-ZAMORA, David , ESTEBAN VARES, Nuria
IPC分类号： H04L29/06
CPC分类号： H04L65/1073 , H04L29/12188 , H04L29/12594 , H04L61/1588 , H04L61/3095 , H04L63/10 , H04L65/1016 , H04L67/306
摘要： A method and apparatus for sharing an application profile for plural public IMS identities across different IMS subscriptions. A.home application profile (600a) for a first public IMS identity (IMPUx) of a first IMS subscription, is stored in its entirety at a first HSS storage (600). A profile reference is stored as an abbreviated foreign application profile (602a) for a second public IMS identity (IMPUy) of a second IMS subscription at a second HSS storage (602). The profile reference points to the home application profile in the first HSS storage. An authorising identifier for the second public IMS identity that authorises access to the home application profile, is also stored at the first HSS storage.
摘要翻译：一种用于在不同的IMS订阅之间共享用于多个公共IMS身份的应用简档的方法和装置。用于第一IMS订阅的第一公共IMS身份（IMPUx）的协议应用简档（600a）被整体存储在第一HSS存储（600）处。在第二HSS存储器（602），配置文件引用被存储为用于第二IMS订阅的第二公共IMS标识（IMPUy）的缩写外部应用简档（602a）。配置文件参考指向第一个HSS存储中的归属应用程序配置文件。用于授权访问家庭应用简档的第二公共IMS身份的授权标识符也存储在第一HSS存储器处。

2. 发明申请

WO2009102248A1 SYSTEM AND METHOD OF USER AUTHENTICATION IN WIRELESS COMMUNICATION NETWORKS 审中-公开
标题翻译：无线通信网络中用户认证的系统与方法
公开(公告)号：WO2009102248A1
公开(公告)日：2009-08-20
申请号：PCT/SE2008/050184
申请日：2008-02-15
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (PUBL) , BARRIGA, Luis , CASTELLANOS ZAMORA, David
发明人： BARRIGA, Luis , CASTELLANOS ZAMORA, David
IPC分类号： H04W12/06 , H04L9/32
CPC分类号： H04W12/06 , H04L9/0844 , H04L9/321 , H04L9/3273 , H04L63/06 , H04L63/0838 , H04L65/1016 , H04L65/1073 , H04L69/08 , H04L69/18 , H04L2209/76 , H04L2209/80
摘要： Methods and systems taught herein provide for authentication information for authenticating a user terminal to be shared between a network entity that supports IMS-AKA authentication of the user terminal and a network entity that supports GBA-AKA authentication of the user terminal. Sharing authentication information between these entities allows all or part of the authentication information generated for IMS-AKA authentication of the user terminal to be used subsequently for GBA-AKA authentication of the user terminal, or vice versa.
摘要翻译：本文中教导的方法和系统提供认证信息，用于认证在支持用户终端的IMS-AKA认证的网络实体与支持用户终端的GBA-AKA认证的网络实体之间共享的用户终端。在这些实体之间共享认证信息允许为用户终端的IMSA-AKA认证生成的全部或部分认证信息随后用于用户终端的GBA-AKA认证，反之亦然。

3. 发明申请

WO2008082337A1 METHOD AND ARRANGEMENT FOR INTEGRATION OF DIFFERENT AUTHENTICATION INFRASTRUCTURES 审中-公开
标题翻译：集成不同认证基础设施的方法和安排
公开(公告)号：WO2008082337A1
公开(公告)日：2008-07-10
申请号：PCT/SE2006/050631
申请日：2006-12-28
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (publ) , BARRIGA, Luis , CASTELLANOS-ZAMORA, David
发明人： BARRIGA, Luis , CASTELLANOS-ZAMORA, David
IPC分类号： H04L29/06 , H04L29/08 , H04Q7/38
CPC分类号： H04L63/0815 , H04L63/0407 , H04W12/06 , H04W80/12
摘要： A method is disclosed that provides efficient integration of infrastructure for federated single sign on, e.g. Liberty ID-FF framework, and generic bootstrapping architecture, e.g. 3GPP GAA/GBA architecture. An integrated proxy server (IAP) is inserted in the path between a user and a service provider (SP). The proxy server differentiates type of access and determines corresponding operative state to act as a liberty enabled server or as a GAA/GBA network application function. A Bootstrapping, Identity, Authentication and Session Management arrangement (BIAS) leverages on 3GPP GAA/GBA infrastructure to provide an integrated system for handling Liberty Federated SSO and 3GPP GAA/GBA bootstrapping procedures at the same time. The method and arrangement provides improved use of infrastructure elements and performance for authenticated service access.
摘要翻译：公开了一种方法，其提供用于联合单点登录的基础设施的有效集成，例如。自由ID-FF框架和通用引导架构，例如。 3GPP GAA / GBA架构。在用户和服务提供商（SP）之间的路径中插入集成代理服务器（IAP）。代理服务器区分访问类型，并确定相应的操作状态作为启用自由的服务器或GAA / GBA网络应用程序功能。引导，身份认证和会话管理安排（BIAS）利用3GPP GAA / GBA基础设施提供了一个集成系统，用于同时处理自由联盟SSO和3GPP GAA / GBA自举程序。该方法和布置提供了对认证服务访问的基础设施元素和性能的改进的使用。

4. 发明申请

WO2007008120A1 METHOD AND ARRANGEMENT FOR AUTHENTICATION AND PRIVACY 审中-公开
标题翻译：认证和隐私的方法和安排
公开(公告)号：WO2007008120A1
公开(公告)日：2007-01-18
申请号：PCT/SE2005/001128
申请日：2005-07-07
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (PUBL) , BARRIGA, Luis , CASTELLANOS-ZAMORA, David
发明人： BARRIGA, Luis , CASTELLANOS-ZAMORA, David
IPC分类号： H04L29/06
CPC分类号： H04L63/0807 , H04W12/04 , H04W12/06
摘要： The present invention improves privacy protection and authentication over prior art GAA/GBA system specifying a Bootstrap Server Function (BSF) that creates an Authentication Voucher asserting to a network application function NAF authentication of a. BSF generates keys Ks and Ks NAF with corresponding key identifiers B_TID and B_TID_NAF. In order to prevent tracking of user by collusion between several NAF entities B_TID_NAF and the Voucher can be unique for each NAF. The interface Ua is further protected by encryption using key Ks and the Ub interface is further protected against man-in-the-middle attacks by using signatures with key Ks and provision of freshness.
摘要翻译：本发明改进了针对现有技术的GAA / GBA系统的隐私保护和认证，该GAA / GBA系统指定了引导服务器功能（BSF），该引导服务器功能（BSF）创建向网络应用功能NAF认证确定的认证凭证。 BSF生成具有相应密钥标识符B_TID和B_TID_NAF的密钥Ks和Ks NAF。为了防止通过几个NAF实体B_TID_NAF之间的联合来跟踪用户，凭证对于每个NAF可以是唯一的。接口Ua通过使用密钥K的加密进一步保护，并且通过使用具有密钥K的签名和提供新鲜度来进一步保护Ub接口免受中间人攻击。

5. 发明申请

WO2009141919A1 IMS USER EQUIPMENT, CONTROL METHOD THEREOF, HOST DEVICE, AND CONTROL METHOD THEREOF 审中-公开
标题翻译： IMS用户设备，其控制方法，主机设备及其控制方法
公开(公告)号：WO2009141919A1
公开(公告)日：2009-11-26
申请号：PCT/JP2008/059951
申请日：2008-05-23
申请人： Telefonaktiebolaget LM Ericsson (publ) , MURAKAMI, Shingo , BARRIGA, Luis , ODA, Toshikane
发明人： MURAKAMI, Shingo , BARRIGA, Luis , ODA, Toshikane
IPC分类号： G06F13/00
CPC分类号： H04L63/061 , H04L65/1016 , H04L2463/062 , H04W12/04
摘要： An IMS User Equipment (UE) is provided. The IMS UE comprises: searching means for searching, based on UPnP technology, a UPnP network for a host device that has IMS subscription information, establishing means for establishing a session with the host device discovered by the searching means, subscription retrieving means for retrieving, from the host device via the session, the IMS subscription information, registering means for registering with the IMS network using the IMS subscription information, key retrieving means for retrieving, from the host device via the session, a first encryption key shared with an IMS application server (AS) in an IMS network by sending identity of the IMS AS to the host device via the session, and communicating means for performing encrypted communication with the IMS AS using the first encryption key.
摘要翻译：提供IMS用户设备（UE）。 IMS UE包括：搜索装置，用于基于UPnP技术搜索具有IMS订阅信息的主机设备的UPnP网络;建立装置，用于建立与搜索装置发现的主机设备的会话;订阅检索装置，从所述主机设备经由所述会话，所述IMS订阅信息，用于使用所述IMS订阅信息向所述IMS网络注册的登记装置，用于从所述主机设备经由所述会话检索与IMS应用共享的第一加密密钥的密钥检索装置服务器（AS）通过经由会话向主机设备发送IMS AS的标识，以及通信装置，用于使用第一加密密钥与IMS AS进行加密通信。

6. 发明申请

WO2009078775A1 METHOD FOR DIGITAL RIGHTS MANAGEMENT IN A MOBILE COMMUNICATIONS NETWORK 审中-公开
标题翻译：移动通信网络中数字权限管理的方法
公开(公告)号：WO2009078775A1
公开(公告)日：2009-06-25
申请号：PCT/SE2007/051043
申请日：2007-12-19
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (PUBL) , CHENG, Yi , BARRIGA, Luis , NORRMAN, Karl
发明人： CHENG, Yi , BARRIGA, Luis , NORRMAN, Karl
IPC分类号： G06F21/00
CPC分类号： H04W12/08 , G06F21/10 , G06F2221/0717 , H04L2463/101
摘要： The present invention relates to a method and an operator network node for enabling a user-defined DRM domain of *SIMs hosted by *SIM-enabled devices. The operator network node is connectable to a *SIM based device and to a content provider node, and comprises means for establishing a secure channel between a *SIM-based device and an operator network node, means for creating a DRM domain defined by at least one user of *SIM- based devices, means for receiving at the operator network node a registration request from the *SIM-based device to register the *SIM of the *SIM-based device into the created user-defined DRM domain, means for registering at the operator network node the *SIM of the *SIM-based device into the registered user-defined DRM domain, and means for making the registered information associated with the user-defined DRM domain available to the content provider. The invention also relates to a further method and the content provider comprising means for accessing in the operator network node registered information associated with a registered user-defined DRM domain comprising *SIMs of a user, and means for establishing a content provider defined DRM domain comprising at least one of the *SIMs of the user-defined DRM domain.
摘要翻译：本发明涉及一种方法和运营商网络节点，用于启用由启用SIM的设备主持的* SIM的用户定义的DRM域。运营商网络节点可连接到基于* SIM的设备和内容提供商节点，并且包括用于在基于* SIM的设备和运营商网络节点之间建立安全信道的装置，用于创建至少定义的DRM域的装置用于基于SIM的设备的一个用户，用于在所述运营商网络节点处接收来自基于* SIM的设备的注册请求以将所述基于SIM卡的设备的* SIM注册到所创建的用户定义的DRM域中的装置，在运营商网络节点将基于* SIM的设备的* SIM注册到注册用户定义的DRM域中，以及用于使与用户定义的DRM域相关联的注册信息可用于内容提供商的装置。本发明还涉及一种另外的方法和内容提供器，其包括用于在运营商网络节点中访问与包括用户的SIM的注册用户定义的DRM域相关联的注册信息的装置，以及用于建立内容提供商定义的DRM域的装置，包括用户定义的DRM域的* SIM中的至少一个。

7. 发明申请

WO2011025420A1 METHOD AND ARRANGEMENT FOR DETECTING FRAUD IN TELECOMMUNICATION NETWORKS. 审中-公开
标题翻译：检测电信网络欺诈的方法和布置。
公开(公告)号：WO2011025420A1
公开(公告)日：2011-03-03
申请号：PCT/SE2009/050952
申请日：2009-08-25
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (publ) , BARRIGA, Luis , LILJENSTAM, Michael , MORDACCI, Alessandro
发明人： BARRIGA, Luis , LILJENSTAM, Michael , MORDACCI, Alessandro
IPC分类号： H04W12/12
CPC分类号： H04L63/1416 , H04L63/1408 , H04L63/1425 , H04L63/205 , H04M15/47 , H04M15/58 , H04M2215/0148 , H04W4/24 , H04W12/12
摘要： Method and arrangement in a mediating function (204) for supporting detection of fraud in a network, when a network security function (200) is employed for analysing activities in the network in view of predefined alert criteria, and a fraud detection function (202) is employed for analysing e.g. charging information of users. When a first alert is received from a first one of the network security function and the fraud detection function, indicating that the predefined alert criteria of said first function have been satisfied, the alert criteria of the second one of said network security function and fraud detection function are modified based on the received first alert. Thereby, the network security and fraud detection functions can be correlated and made more efficient regarding accuracy and/or speed in detecting fraud.
摘要翻译：根据预定义的警报标准，当采用网络安全功能（200）来分析网络中的活动时，用于支持网络中的欺诈检测的中介功能（204）中的方法和装置，以及欺诈检测功能（202）用于分析例如用户收费信息。当从网络安全功能和欺诈检测功能中的第一个接收到第一警报，指示所述第一功能的预定警报标准已被满足时，所述网络安全功能和欺诈检测中的第二个的警报标准功能根据收到的第一个警报进行修改。因此，可以将网络安全和欺诈检测功能与检测欺诈的准确性和/或速度相关联并提高效率。

8. 发明申请

WO2007014630A1 AUTOMATIC MOBILE DEVICE CAPABILITY MANAGEMENT 审中-公开
标题翻译：自动移动设备能力管理
公开(公告)号：WO2007014630A1
公开(公告)日：2007-02-08
申请号：PCT/EP2006/006776
申请日：2006-07-11
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (publ) , NORRMAN, Karl , BARRIGA, Luis , HALEN, Joacim
发明人： NORRMAN, Karl , BARRIGA, Luis , HALEN, Joacim
IPC分类号： H04Q7/38 , H04L29/08 , H04M3/42
CPC分类号： H04W8/22 , H04L67/04 , H04L67/303 , H04M3/42136 , H04M3/42178 , H04W8/18
摘要： The present invention relates to an improved approach to mobile device capability management. Heretofore, a capability management device (14) is provided at a mobile communication network. Upon change of a mobile device capability, a related notification is sent to the capability management device (14) which applies a policy decision whether to track the capability change at the network side or not. Should the decision be ’yes’, the capability management device (14) starts a device management session to collect further information on a mobile device capability change beyond the information made available with the mobile device capability change notification. After retrieval of the mobile device capability change information, the capability management device (14) will update its mobile device capability state accordingly. Optionally, the capability management device (14) may share the generated information with third party (16) cooperating with the mobile device (10) for, e.g., service delivery.
摘要翻译：本发明涉及一种改进的移动设备能力管理方法。迄今为止，在移动通信网络中提供了能力管理装置（14）。在更改移动设备能力时，向能力管理设备（14）发送相关通知，该能力管理设备（14）应用策略决定是否跟踪网络侧的能力变化。如果决定为“是”，则能力管理装置（14）启动设备管理会话以收集有关移动设备能力改变的进一步信息，超出了可用于移动设备能力改变通知的信息。在检索到移动设备能力改变信息之后，能力管理设备（14）将相应地更新其移动设备能力状态。可选地，能力管理设备（14）可以与与移动设备（10）协作的第三方（16）共享生成的信息，以用于例如服务递送。

9. 发明申请

WO2010090569A1 APPARATUSES AND A METHOD FOR PROTECTING A BOOTSTRAP MESSAGE IN A NETWORK 审中-公开
标题翻译：用于保护网络中的引导消息的装置和方法
公开(公告)号：WO2010090569A1
公开(公告)日：2010-08-12
申请号：PCT/SE2009/051092
申请日：2009-10-01
申请人： Telefonaktiebolaget LM Ericsson (publ) , BARRIGA, Luis , DYSENIUS, Per-Anders , LINDSTRÖM, Magnus
发明人： BARRIGA, Luis , DYSENIUS, Per-Anders , LINDSTRÖM, Magnus
IPC分类号： H04W12/04 , H04L9/32 , H04W8/20
CPC分类号： H04L9/0861 , H04L9/0838 , H04L41/0803 , H04L63/061 , H04L63/083 , H04L63/1441 , H04L2209/80 , H04W12/04 , H04W12/12
摘要： The embodiments of the present invention relate to apparatuses in the form of a first network unit and a device, and also relates to a method for enabling protection of a bootstrap message in a device management network system. The method comprises: receiving at the first network unit, a request to bootstrap the device; transmit a request for a bootstrap key, to a second network unit; receiving a message comprising the bootstrap key and further comprises trigger information and transmitting the trigger information to the device to trigger generation of the bootstrap key internally in the device. Thereafter a protected bootstrap message can be transmitted to the device from the first network unit, and when the device verifies and/or decrypts the bootstrap message, device management (DM) sessions can start between the device and the first network unit.
摘要翻译：本发明的实施例涉及以第一网络单元和设备的形式的设备，并且还涉及一种用于在设备管理网络系统中实现自举消息的保护的方法。该方法包括：在第一网络单元处接收引导设备的请求; 向第二网络单元发送对自举密钥的请求; 接收包括引导密钥的消息，并且进一步包括触发信息并将触发信息发送到设备以在设备内部触发引导密钥的产生。此后，受保护的引导消息可以从第一网络单元发送到设备，并且当设备验证和/或解密引导消息时，设备管理（DM）会话可以在设备和第一网络单元之间开始。

10. 发明申请

WO2004064442A1 SINGLE SIGN-ON FOR USERS OF A PACKET RADIO NETWORK ROAMING IN A MULTINATIONAL OPERATOR NETWORK 审中-公开
标题翻译：在多用途操作员网络中使用分组无线网络漫游的用户的单点登录
公开(公告)号：WO2004064442A1
公开(公告)日：2004-07-29
申请号：PCT/SE2003/000024
申请日：2003-01-10
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (publ) , de GREGORIO, Jesus, Angel , BARRIGA, Luis , PARDO-BLAZQUEZ, Avelina , WALKER-PINA, John, Michael
发明人： de GREGORIO, Jesus, Angel , BARRIGA, Luis , PARDO-BLAZQUEZ, Avelina , WALKER-PINA, John, Michael
IPC分类号： H04Q7/38
CPC分类号： H04L63/0815 , H04L63/0892 , H04W8/06 , H04W12/06
摘要： The invention provides a system and a method basically oriented for providing Single Sign-On services for a user roaming in a packet radio network of a Multinational Mobile Network Operator that includes a federation of National Network Operators, one of these National Network Operators holding the user's subscription. In particular, the telecommunications system includes a number of Service Providers having service agreements with the Multinational Mobile Network Operator federation for offering Single Sign-On services to subscribers of any National Network Operator included in the federation.
摘要翻译：本发明提供了一种系统和方法，该系统和方法基本上是为了在跨国移动网络运营商的分组无线电网络中漫游的用户提供单一登录服务，该多国移动网络运营商包括国家网络运营商的联盟，这些国家网络运营商中的一个持有用户的订阅。特别地，电信系统包括与多国移动网络运营商联盟具有服务协议的多个服务提供商，用于向联盟中包括的任何国家网络运营商的订户提供单点登录服务。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式