GATEWAY APPARATUS, CONTROL METHOD THEREFOR AND COMPUTER PROGRAM
    3.
    发明公开
    GATEWAY APPARATUS, CONTROL METHOD THEREFOR AND COMPUTER PROGRAM 审中-公开
    GATEWAY,控制方法以及COMPUTERPOGRAMM

    公开(公告)号:EP2636232A4

    公开(公告)日:2016-04-20

    申请号:EP10859275

    申请日:2010-11-01

    Abstract: A gateway apparatus comprises a registration unit for registering a network address, a temporary address and a flag, a receiving unit for receiving data destined to a destination communication device with the network address of the destination communication device from a source communication device, a determination unit for determining whether the destination communication device is provided with the MCIM or not, based on a registered value of the flag, and transmitting unit for transmitting a bootstrap message for requesting initiation of provisioning of a predetermined identifier to the destination communication device, to a provision server, when it is determined that the destination communication device is not provided with the MCIM, wherein the transmitting unit transmits the data to the destination communication device using the assigned temporary address, when the destination communication device is provided with the MCIM.

    METHOD AND APPARATUS FOR HANDLING A LOCAL BREAKOUT SESSION
    5.
    发明申请
    METHOD AND APPARATUS FOR HANDLING A LOCAL BREAKOUT SESSION 审中-公开
    用于处理本地断路器的方法和装置

    公开(公告)号:WO2009070061A8

    公开(公告)日:2010-05-20

    申请号:PCT/SE2007001040

    申请日:2007-11-30

    CPC classification number: H04W8/082 H04W40/36 H04W80/045

    Abstract: The present invention concerns a method of handling a Local Break Out (LBO) session taking place in a first network between a user equipment and a corresponding node (CN). The invention addresses the problems that arise when using only one IP address in the user equipment and the user equipment moves to a second network. This is, for the downlink packets, solved by the steps of: converting, in a node in the first or the second network, the IP address of the downlink packets from an LHoA to a Global Home Address (GHoA) and routing, from the first node, directly or indirectly to a second node in the second network, any downlink packets being sent from the corresponding node, so that the downlink packets will arrive at the user equipment having a GHoA. For the uplink packets the problem is solved by converting, in a node in the first or the second network, the IP address of the uplink packets from a GHoA to an LHoA and routing, from the second node, directly or indirectly to the first node, any uplink packets being sent from the user equipment; so that the uplink packets will arrive at the corresponding node with a source address that is an LHoA. The invention also concerns nodes for handling an LBO session.

    Abstract translation: 本发明涉及处理在用户设备和对应节点(CN)之间的第一网络中发生的本地中断(LBO)会话的方法。 本发明解决了在用户设备中仅使用一个IP地址并且用户设备移动到第二网络时出现的问题。 对于下行链路分组,这是通过以下步骤来解决的:在第一或第二网络中的节点中将从LHoA到全球归属地址(GHoA)的下行链路分组的IP地址转换为 第一节点直接或间接地连接到第二网络中的第二节点,从对应节点发送的任何下行链路分组,使得下行链路分组将到达具有GHoA的用户设备。 对于上行链路分组,通过将第一或第二网络中的节点中的上行链路分组的IP地址从GHoA转换到LHoA并且从第二节点直接或间接地路由到第一节点来解决问题 ,从用户设备发送的任何上行链路分组; 使得上行链路分组将以具有LHoA的源地址到达相应的节点。 本发明还涉及用于处理LBO会话的节点。

    SECURE ACCESS IN A COMMUNICATION NETWORK
    7.
    发明申请
    SECURE ACCESS IN A COMMUNICATION NETWORK 审中-公开
    通信网络中的安全访问

    公开(公告)号:WO2010043254A8

    公开(公告)日:2010-06-10

    申请号:PCT/EP2008063890

    申请日:2008-10-15

    Abstract: A method of providing secure access to a remote communication network via a local communication network for a terminal device. A gateway node located outside the local communication network allocates an IP address to the terminal device. The gateway node subsequently receives a request to establish a secure tunnel between the gateway node and the terminal device. It identifies the terminal device as the same terminal device to which an IP address is allocated, and allocates the same IP address for use by the terminal device as both an inner IP address and an outer IP address for packets sent via the secure tunnel. This ensures that there are no issues as described above in selecting the IP address for use in the secure tunnel, and reduces the risk of a successful man-in-the-middle attack.

    Abstract translation: 一种通过用于终端设备的本地通信网络向远程通信网络提供安全访问的方法。 位于本地通信网络外部的网关节点向终端设备分配IP地址。 网关节点随后接收到在网关节点和终端设备之间建立安全通道的请求。 它将终端设备识别为与其分配IP地址相同的终端设备,并为终端设备分配相同的IP地址作为通过安全隧道发送的分组的内部IP地址和外部IP地址。 这确保了在选择安全隧道中使用的IP地址时没有上述问题,并降低了成功的中间人攻击的风险。

Patent Agency Ranking