Abstract:
The invention generally relates to management of cryptographic key generations in an information environment comprising a key-producing side generating and distributing key information to a key-consuming side. A basic concept of the invention is to define, by means of a predetermined one-way key derivation function, a relationship between generations of keys such that earlier generations of keys efficiently may be derived from later ones but not the other way around. A basic idea according to the invention is therefore to replace, at key update, key information of an older key generation by the key information of the new key generation on the key-consuming side. Whenever necessary, the key-consuming side iteratively applies the predetermined one-way key derivation function to derive key information of at least one older key generation from the key information of the new key generation. In this way, storage requirements on the key-consuming side can be significantly reduced.
Abstract:
The invention generally relates to management of cryptographic key generations in an information environment comprising a key-producing side generating and distributing key information to a key-consuming side. A basic concept of the invention is to define, by means of a predetermined one-way key derivation function, a relationship between generations of keys such that earlier generations of keys efficiently may be derived from later ones but not the other way around. A basic idea according to the invention is therefore to replace, at key update, key information of an older key generation by the key information of the new key generation on the key-consuming side. Whenever necessary, the key-consuming side iteratively applies the predetermined one-way key derivation function to derive key information of at least one older key generation from the key information of the new key generation. In this way, storage requirements on the key-consuming side can be significantly reduced.
Abstract:
The invention generally relates to management of cryptographic key generations in an information environment comprising a key-producing side generating and distributing key information to a key-consuming side. A basic concept of the invention is to define, by means of a predetermined one-way key derivation function, a relationship between generations of keys such that earlier generations of keys efficiently may be derived from later ones but not the other way around. A basic idea according to the invention is therefore to replace, at key update, key information of an older key generation by the key information of the new key generation on the key-consuming side. Whenever necessary, the key-consuming side iteratively applies the predetermined one-way key derivation function to derive key information of at least one older key generation from the key information of the new key generation. In this way, storage requirements on the key-consuming side can be significantly reduced.
Abstract:
A method is provided of performing a handover with Single Radio Voice Call Continuity, SRVCC, of a telecommunications session from a User Equipment, UE accessing an IP Multimedia Subsystem, IMS, network via a Circuit Switched, CS, access network to a target Packet Switched, PS, access network. The method includes receiving a handover request from the CS access network to transfer the session and determining that the telecommunications session comprises data media in addition to, or without, any audio media. The ability to perform the handover with SRVCC for the data media is determined. Bearer resources for the session when handed over to the PS access network are allocated, including a data media bearer and, if there is any audio media in the session an audio media bearer. The session is transferred from the CS to the target PS access network.
Abstract:
A method is provided for updating or handling the update of a media path between a first user terminal and a second user terminal in a telecommunications network. The media path includes one or more gateway nodes. Each gateway node includes a gating function for gating media packets. Each gating function has an associated controlling function for controlling the gating function. A message is received (S5) at a gating function from its associated controlling function indicating that an update of the gating at the gating function is required. The gating function arranges (S6) for a new gating, appropriate for the new or updated media path, to be opened while keeping the old gating, appropriate for the old or previous or existing media path, open (S8). The gating function determines (S7) when the media has been switched, or at least is likely to have been switched, to the new path. When it is so determined, the gating function arranges for the old gating to be closed (S9).
Abstract:
A method for improving session continuity for a terminal (204`) in a serving communication network (202`) distinct from a home communication network (200`) of the terminal (204`), wherein the serving communication network (202`) comprises a session transfer node (208`) for transferring sessions each comprising signaling data and media data from a first access network (210`) of the serving communication network (202`) to a second access network (212`) of the serving communication network (202`) comprises the following: Routing signaling data of a session of the terminal (204`) between the first access network (210`) and the home communication network (200`) via the session transfer node (208`) in the serving communication network (202`), receiving a session transfer request requesting the transfer of the session from the first access network (210`) to the second access network (212`) for the terminal (204`), and transferring the session from the first access network (210`) to the second access network (212`), and routing the signaling data of the session of the terminal (204`) between the second access network (210`) and the home communication network (200`) via the session transfer node (208`).
Abstract:
A method and apparatus for allocating an identifier to a terminal in a communications network. A core network controlling node, such as a Mobility Management Entity (MME) receives an International Mobile Subscriber Identity (IMSI) and an International Mobile Equipment Identity (IMEI) from the terminal. Subscription information is determined using both the IMSI and the IMEI. A temporary identifier that can be used to identify the terminal is then allocated to the subscription information.
Abstract:
A method for improving session continuity for a terminal (204`) in a serving communication network (202`) distinct from a home communication network (200`) of the terminal (204`), wherein the serving communication network (202`) comprises a session transfer node (208`) for transferring sessions each comprising signaling data and media data from a first access network (210`) of the serving communication network (202`) to a second access network (212`) of the serving communication network (202`) comprises the following: Routing signaling data of a session of the terminal (204`) between the first access network (210`) and the home communication network (200`) via the session transfer node (208`) in the serving communication network (202`), receiving a session transfer request requesting the transfer of the session from the first access network (210`) to the second access network (212`) for the terminal (204`), and transferring the session from the first access network (210`) to the second access network (212`), and routing the signaling data of the session of the terminal (204`) between the second access network (210`) and the home communication network (200`) via the session transfer node (208`).