专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2008082337A1 METHOD AND ARRANGEMENT FOR INTEGRATION OF DIFFERENT AUTHENTICATION INFRASTRUCTURES 审中-公开
标题翻译：集成不同认证基础设施的方法和安排
公开(公告)号：WO2008082337A1
公开(公告)日：2008-07-10
申请号：PCT/SE2006/050631
申请日：2006-12-28
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (publ) , BARRIGA, Luis , CASTELLANOS-ZAMORA, David
发明人： BARRIGA, Luis , CASTELLANOS-ZAMORA, David
IPC分类号： H04L29/06 , H04L29/08 , H04Q7/38
CPC分类号： H04L63/0815 , H04L63/0407 , H04W12/06 , H04W80/12
摘要： A method is disclosed that provides efficient integration of infrastructure for federated single sign on, e.g. Liberty ID-FF framework, and generic bootstrapping architecture, e.g. 3GPP GAA/GBA architecture. An integrated proxy server (IAP) is inserted in the path between a user and a service provider (SP). The proxy server differentiates type of access and determines corresponding operative state to act as a liberty enabled server or as a GAA/GBA network application function. A Bootstrapping, Identity, Authentication and Session Management arrangement (BIAS) leverages on 3GPP GAA/GBA infrastructure to provide an integrated system for handling Liberty Federated SSO and 3GPP GAA/GBA bootstrapping procedures at the same time. The method and arrangement provides improved use of infrastructure elements and performance for authenticated service access.
摘要翻译：公开了一种方法，其提供用于联合单点登录的基础设施的有效集成，例如。自由ID-FF框架和通用引导架构，例如。 3GPP GAA / GBA架构。在用户和服务提供商（SP）之间的路径中插入集成代理服务器（IAP）。代理服务器区分访问类型，并确定相应的操作状态作为启用自由的服务器或GAA / GBA网络应用程序功能。引导，身份认证和会话管理安排（BIAS）利用3GPP GAA / GBA基础设施提供了一个集成系统，用于同时处理自由联盟SSO和3GPP GAA / GBA自举程序。该方法和布置提供了对认证服务访问的基础设施元素和性能的改进的使用。

2. 发明申请

WO2013112088A1 METHOD AND APPARATUS FOR HANDLING DATA-RELATED REQUESTS 审中-公开
标题翻译：用于处理数据相关要求的方法和装置
公开(公告)号：WO2013112088A1
公开(公告)日：2013-08-01
申请号：PCT/SE2012/050084
申请日：2012-01-27
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (publ) , CASTELLANOS-ZAMORA, David
发明人： CASTELLANOS-ZAMORA, David
IPC分类号： G06F17/30
CPC分类号： G06F17/30943 , G06F17/30445 , G06F17/30545 , H04L67/1027 , H04L67/1031 , H04L69/321 , H04W48/18
摘要： A method and a request distributor (302) for dispatching data-related requests to application functions (304) connected to a data storage (306). When a first data- related request is received (3: 1 ), a characteristic of the request is determined and a specialized application function (C) is selected (3:2) out of a set of different specialized application functions (304), based on the characteristic of the request. The first data-related request is then dispatched (3:3) to the selected specialized application function for handling of data in the data storage accordingly.
摘要翻译：一种用于向连接到数据存储器（306）的应用功能（304）发送数据相关请求的方法和请求分发器（302）。当接收到第一数据相关请求（3：1）时，确定请求的特征，并从一组不同的专门应用功能（304）中选择专门的应用功能（3）（3：2）根据请求的特点。然后将第一数据相关请求（3：3）发送到所选择的专用应用功能，以相应地处理数据存储器中的数据。

3. 发明申请

WO2012173536A1 METHODS AND ARRANGEMENT FOR DISPATCHING REQUESTS 审中-公开
标题翻译：分配要求的方法和安排
公开(公告)号：WO2012173536A1
公开(公告)日：2012-12-20
申请号：PCT/SE2011/050743
申请日：2011-06-15
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (publ) , HEGARTY, Cormac , CASTELLANOS-ZAMORA, David , FERNANDEZ GALMES, Juan Manuel
发明人： HEGARTY, Cormac , CASTELLANOS-ZAMORA, David , FERNANDEZ GALMES, Juan Manuel
IPC分类号： H04L12/66 , H04L29/06 , H04W8/04 , H04W8/10 , H04W8/12 , H04W40/02
CPC分类号： H04L67/32 , H04L65/1016 , H04L65/1063 , H04W8/08
摘要： Method and arrangements for performing domain resolution prior to dispatching a request. A request from an Application Server (AS) is received. The AS and the network node are present in a first network domain. At least one target network domain is determined based on at least one domain indicator in the request. The domain indicator being associated with at least a part of the request, wherein the target domain is one of: the first network domain and a second network domain. Then, the at least part of the request is dispatched, to at least one subscriber server present in the determined target network domain(s).
摘要翻译：在发送请求之前执行域解析的方法和安排。接收到来自应用服务器（AS）的请求。 AS和网络节点存在于第一网络域中。基于请求中的至少一个域指示符来确定至少一个目标网络域。所述域指示符与所述请求的至少一部分相关联，其中所述目标域是以下之一：所述第一网络域和第二网络域。然后，请求的至少一部分被发送到存在于所确定的目标网络域中的至少一个订户服务器。

4. 发明申请

WO2008130282A1 A METHOD AND ARRANGEMENT FOR HANDLING PROFILES IN A MULTIMEDIA SERVICE NETWORK 审中-公开
标题翻译：一种在多媒体服务网络中处理配置文件的方法和装置
公开(公告)号：WO2008130282A1
公开(公告)日：2008-10-30
申请号：PCT/SE2007/000372
申请日：2007-04-19
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (PUBL) , BARRIGA, Luis , CASTELLANOS-ZAMORA, David , ESTEBAN VARES, Nuria
发明人： BARRIGA, Luis , CASTELLANOS-ZAMORA, David , ESTEBAN VARES, Nuria
IPC分类号： H04L29/06
CPC分类号： H04L65/1073 , H04L29/12188 , H04L29/12594 , H04L61/1588 , H04L61/3095 , H04L63/10 , H04L65/1016 , H04L67/306
摘要： A method and apparatus for sharing an application profile for plural public IMS identities across different IMS subscriptions. A.home application profile (600a) for a first public IMS identity (IMPUx) of a first IMS subscription, is stored in its entirety at a first HSS storage (600). A profile reference is stored as an abbreviated foreign application profile (602a) for a second public IMS identity (IMPUy) of a second IMS subscription at a second HSS storage (602). The profile reference points to the home application profile in the first HSS storage. An authorising identifier for the second public IMS identity that authorises access to the home application profile, is also stored at the first HSS storage.
摘要翻译：一种用于在不同的IMS订阅之间共享用于多个公共IMS身份的应用简档的方法和装置。用于第一IMS订阅的第一公共IMS身份（IMPUx）的协议应用简档（600a）被整体存储在第一HSS存储（600）处。在第二HSS存储器（602），配置文件引用被存储为用于第二IMS订阅的第二公共IMS标识（IMPUy）的缩写外部应用简档（602a）。配置文件参考指向第一个HSS存储中的归属应用程序配置文件。用于授权访问家庭应用简档的第二公共IMS身份的授权标识符也存储在第一HSS存储器处。

5. 发明申请

WO2007149020A1 LOSS OF SIGNALLING BEARER TRANSPORT 审中-公开
标题翻译：信号承载器运输损失
公开(公告)号：WO2007149020A1
公开(公告)日：2007-12-27
申请号：PCT/SE2006/000767
申请日：2006-06-20
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (PUBL) , CASTELLANOS-ZAMORA, David , FERNANDEZ-ALOSO, Susana , PASTOR, BALBAS, José, Javier , TERRILL, Stephen
发明人： CASTELLANOS-ZAMORA, David , FERNANDEZ-ALOSO, Susana , PASTOR, BALBAS, José, Javier , TERRILL, Stephen
IPC分类号： H04L29/06
CPC分类号： H04L65/105 , H04L12/1407 , H04L65/1016 , H04L65/1043
摘要： Being aware of a loss of signalling bearer transport through an IP Connectivity Access Network is an important issue. Therefore, the present invention relies on amending the Policing and Charging Control model with means to provide the IMS infrastructure with subscriptions to and notifications about signalling session events detected on the signalling IP flow transported through the bearer layer. To this end, a P- CSCF, or AF included therein, is amended to allow the establishment of a signalling session for subscription to notification of bearer level events for a signalling IP flow. Apart from that, new processing rules are required at the AF and PCRF for handling the signalling session, the notification of events and the termination of the signalling session.
摘要翻译：意识到通过IP连接接入网络丢失信令承载传输是一个重要问题。因此，本发明依赖于修改监管和计费控制模型，其方式是向IMS基础设施提供关于在通过承载层传输的信令IP流上检测到的信令会话事件的订阅和通知。为此，修改了包括在其中的P-CSCF或AF，以允许建立信令会话以订阅用于信令IP流的承载级别事件的通知。除此之外，AF和PCRF需要新的处理规则来处理信令会话，事件的通知和信令会话的终止。

6. 发明申请

WO2007008120A1 METHOD AND ARRANGEMENT FOR AUTHENTICATION AND PRIVACY 审中-公开
标题翻译：认证和隐私的方法和安排
公开(公告)号：WO2007008120A1
公开(公告)日：2007-01-18
申请号：PCT/SE2005/001128
申请日：2005-07-07
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (PUBL) , BARRIGA, Luis , CASTELLANOS-ZAMORA, David
发明人： BARRIGA, Luis , CASTELLANOS-ZAMORA, David
IPC分类号： H04L29/06
CPC分类号： H04L63/0807 , H04W12/04 , H04W12/06
摘要： The present invention improves privacy protection and authentication over prior art GAA/GBA system specifying a Bootstrap Server Function (BSF) that creates an Authentication Voucher asserting to a network application function NAF authentication of a. BSF generates keys Ks and Ks NAF with corresponding key identifiers B_TID and B_TID_NAF. In order to prevent tracking of user by collusion between several NAF entities B_TID_NAF and the Voucher can be unique for each NAF. The interface Ua is further protected by encryption using key Ks and the Ub interface is further protected against man-in-the-middle attacks by using signatures with key Ks and provision of freshness.
摘要翻译：本发明改进了针对现有技术的GAA / GBA系统的隐私保护和认证，该GAA / GBA系统指定了引导服务器功能（BSF），该引导服务器功能（BSF）创建向网络应用功能NAF认证确定的认证凭证。 BSF生成具有相应密钥标识符B_TID和B_TID_NAF的密钥Ks和Ks NAF。为了防止通过几个NAF实体B_TID_NAF之间的联合来跟踪用户，凭证对于每个NAF可以是唯一的。接口Ua通过使用密钥K的加密进一步保护，并且通过使用具有密钥K的签名和提供新鲜度来进一步保护Ub接口免受中间人攻击。

7. 发明申请

WO2003034688A1 SECURITY IN COMMUNICATION NETWORKS 审中-公开
标题翻译：通信网络安全
公开(公告)号：WO2003034688A1
公开(公告)日：2003-04-24
申请号：PCT/SE2002/001721
申请日：2002-09-20
申请人： TELEFONAKTIEBOLAGET LM ERICSSON (PUBL)
发明人： CASTELLANOS-ZAMORA, David , BOMAN, Krister , ARKKO, Jari
IPC分类号： H04L29/06
CPC分类号： H04L63/20 , H04L63/0272 , H04L63/10 , H04L63/164 , H04W12/08
摘要： A method of facilitating the interworking of network elements 4,5,6 of one or more communication networks 1,2,3, some of which network elements 4,5,6 support a given security mechanism and others of which do not. The method comprises, at each network element 4,5 which does support the security mechanism, maintaining a database 9 listing peer network elements and an indication of whether or not the peer network elements support the security mechanism. Upon initiation of a signalling communication from a peer network element 4,5 supporting the security mechanism to another peer network element, inspecting the database 9 of the initiating network element to determine whether or not the peer network element supports the security mechanism, and conducting the communication accordingly. The databases 9 stored at network elements are updated dynamically based upon signalling information received from peer network elements. The method ensures that the security mechanism for securing communications between elements is used when the mechanism is available.
摘要翻译：一种促进一个或多个通信网络1,2,3的网络元件4,5,6的互通的方法，其中一些网络元件4,5,6支持给定的安全机制，而其他通信网络不支持。该方法包括在支持安全机制的每个网元4,5处，维护列出对等网络单元的数据库9以及对等网络单元是否支持该安全机制的指示。在从支持安全机制的对等网络元件4,5发起信令通信到另一个对等网络元件时，检查发起网络元件的数据库9以确定对等网络元件是否支持安全机制，并进行沟通相应。基于从对等网络元件接收到的信令信息，动态地更新存储在网元的数据库9。该方法确保了当机制可用时，用于保护元件之间的通信的安全机制被使用。

8. 发明公开

EP2721788A1 METHODS AND ARRANGEMENT FOR DISPATCHING REQUESTS 审中-公开
标题翻译：方法和设备，用于发送查询
公开(公告)号：EP2721788A1
公开(公告)日：2014-04-23
申请号：EP11867686.5
申请日：2011-06-15
申请人： Telefonaktiebolaget LM Ericsson (PUBL)
发明人： HEGARTY, Cormac , CASTELLANOS-ZAMORA, David , FERNANDEZ GALMES, Juan Manuel
IPC分类号： H04L12/66 , H04L29/06 , H04W8/04 , H04W8/10 , H04W8/12 , H04W40/02
CPC分类号： H04L67/32 , H04L65/1016 , H04L65/1063 , H04W8/08
摘要： Method and arrangements for performing domain resolution prior to dispatching a request. A request from an Application Server (AS) is received. The AS and the network node are present in a first network domain. At least one target network domain is determined based on at least one domain indicator in the request. The domain indicator being associated with at least a part of the request, wherein the target domain is one of: the first network domain and a second network domain. Then, the at least part of the request is dispatched, to at least one subscriber server present in the determined target network domain(s).

9. 发明授权

EP2137931B1 A METHOD AND ARRANGEMENT FOR HANDLING PROFILES IN A MULTIMEDIA SERVICE NETWORK 有权
公开(公告)号：EP2137931B1
公开(公告)日：2018-08-29
申请号：EP07748037.4
申请日：2007-04-19
申请人： Telefonaktiebolaget LM Ericsson (publ)
发明人： BARRIGA, Luis , CASTELLANOS-ZAMORA, David , ESTEBAN VARES, Nuria
IPC分类号： H04L29/06 , H04L29/12 , H04L29/08
CPC分类号： H04L65/1073 , H04L29/12188 , H04L29/12594 , H04L61/1588 , H04L61/3095 , H04L63/10 , H04L65/1016 , H04L67/306
摘要： A method and apparatus for sharing an application profile for plural public IMS identities across different IMS subscriptions. A home application profile for a first public IMS identity (IMPUx) of a first IMS subscription, is stored in its entirety at a first HSS storage. A profile reference is stored as an abbreviated foreign application profile for a second public IMS identity (IMPUy) of a second IMS subscription at a second HSS storage. The profile reference points to the home application profile in the first HSS storage. An authorizing identifier for the second public IMS identity that authorizes access to the home application profile, is also stored at the first HSS storage.

10. 发明授权

EP1900169B1 METHOD AND ARRANGEMENT FOR AUTHENTICATION AND PRIVACY 有权
标题翻译：方法和系统的认证和加密
公开(公告)号：EP1900169B1
公开(公告)日：2010-02-03
申请号：EP05757079.8
申请日：2005-07-07
申请人： Telefonaktiebolaget LM Ericsson (publ)
发明人： BARRIGA, Luis , CASTELLANOS-ZAMORA, David
IPC分类号： H04L29/06
CPC分类号： H04L63/0807 , H04W12/04 , H04W12/06

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式