Abstract: Provided is a method for automatically registering a user on a field device for the purpose of administering the field device, including a) providing user information on the basis of an identity of the user and an identity of the field device by a security device; b) transmitting the provided user information to a mobile device of the user; c) generating field-device-specific registration information on the basis of the transmitted user information by the mobile device; and d) registering the user on the field device by the generated registration information. This method has the particular advantage that a highly secure infrastructure can be used for administering access information for administering the field devices without problems arising during the registration process.

Abstract: An engineering system for engineering, programming and/or configuring industrial automation components and particularly engineering, programming and/or configuring security related features of automation components in automation projects, automation components, automation component databases, receiving tools, a computer program, a data carrier signal and a method for facilitating the provision of automation component configurations for automation components of an industrial automation project, wherein the method especially focuses on security aspects of automation projects, and wherein automation component description data comprising functionality parameters for configuring functionality of the automation components and security parameters for configuring security functions of the automation components are determined and, based on the industrial automation project, a functionality parameter setting for the functionality parameters and a security parameter setting for the security parameters is determined To f

Abstract: Provided is a method for automatically registering a user on a field device for the purpose of administering the field device, including a) providing user information on the basis of an identity of the user and an identity of the field device by a security device; b) transmitting the provided user information to a mobile device of the user; c) generating field-device-specific registration information on the basis of the transmitted user information by the mobile device; and d) registering the user on the field device by the generated registration information.

Abstract: Provided are methods and to-devices for increasing the reliability of a software by applying a patch to the software, wherein the application of the patch is performed if a specifiable reliability status is indicated by reliability information associated with the patch, wherein an indicator for successful increasing of the reliability of the software by application of the patch is represented by the reliability information. The methods and devices can be used for the maintenance of industrial installations.

Abstract: Provided are methods and to-devices for increasing the reliability of a software by applying a patch to the software, wherein the application of the patch is performed if a specifiable reliability status is indicated by reliability information associated with the patch, wherein an indicator for successful increasing of the reliability of the software by application of the patch is represented by the reliability information. The methods and devices can be used for the maintenance of industrial installations.

Abstract: An access specific key is provided for securing of a data transfer between a mobile terminal and a node of an access net. For authentication of the mobile terminal, a authentication server generates a session key, from which a basic key is derived and transferred to an interworking-proxy-server. The interworking-proxy-server derives the access specific key from the transferred basis key and provides the key to the node of the access net.

Abstract: A counter status that is allocated to a communication terminal and a base station is usually deleted when the storage space in the respective base station is used up. To address this, the counter status is saved in an additional communication network element when a predefinable criterion is met, and can thus be retrieved.

Abstract: A method and authentication server provide a mobile key. According to the method, upon receipt of an authentication message (access authentication) that is transmitted when a subscriber logs on to the network, the authentication server extracts a subscriber identification contained in said message and generates a corresponding mobile key, which is stored together with the respective extracted subscriber identification. Upon subsequent receipt of a key request message (key request) that is transmitted when a subscriber registers, the authentication server extracts a mobile identification of the subscriber contained in said message and searches for an identical mobile identification, which can be derived in accordance with a configurable derivation function from a subscriber identification that is stored in the authentication server.

Abstract: It is disclosed a method (and related apparatus) comprising transmitting, after a network entry authentication procedure, between an access network gateway entity and one of a terminal and a serving entity, generated terminal mobility restriction information in the form of at least one text information element comprised in an authentication notification message, and receiving the terminal mobility restriction information; and a method (and related apparatus) comprising transmitting, via network entity management procedures, terminal mobility restriction information in the form of at least one additional leaf node being added to a network entity management object, and receiving the terminal mobility restriction information.

Abstract: A method provides service quality in a WiMAX communication network, and a method selects an access transport resource control function by a guideline decision-making function in a communication network. According to a method for providing service quality on an air interface of an access network in a WiMAX communication network by an application function, the application function aims to provide a user of the WiMAX communication network with a service quality-related application. The desired service quality is signaled by an authentication, authorization and accounting infrastructure of the WiMAX communication network.

Abstract: A method provides subscriber-specific activation of network-based mobility management using an authentication server. According to the method, network-based mobility management is enforced, even if the mobile terminal supports terminal-based mobility management. This gives a network provider complete control over mobility management in his network, preventing configuration problems during the configuration of mobile terminals. In the method, after the successful authentication of a subscriber, the authentication server transmits an authentication confirmation message to an authentication client in an access network. The received authentication confirmation message contains an activation attribute for activating network-based mobility management, if the authentication server does not provide a common mobile key for terminal-based mobility management.

Abstract: A method for providing an IP key, for encoding messages between a user terminal MS or a PMIP client and a home agent HA, wherein an authentication server only provides the mobile IP key when the authentication server recognizes, by a correspondingly encoded parameter, that the user terminal MS itself is not using mobile IP (PMIP).

Abstract: After a radio link is established between a mobile subscriber terminal and an access network, to authenticate the subscriber an authentication proxy server of an intermediate network forwards at least one authentication message containing a subscriber identification between the access network and a home network of the subscriber. If authentication is given by an authentication server of the home network, the authentication proxy server of the intermediate network stores the subscriber identification. The home agent receives a registration request message originating from the subscriber terminal and containing a subscriber identification; the home agent transmits a key request message, containing the subscriber identification, for a mobile key to the relevant authentication proxy server.

Abstract: After a radio link is established between a mobile subscriber terminal and an access network, the subscriber is authenticated by a proxy server of an intermediate network forwarding, from the access network to a home network of the subscriber, authentication message(s) containing a subscriber identification. If the subscriber is authenticated and the subscriber identification is already stored in the proxy server, the proxy server assigns a group-specific mobile key to the subscriber identification. When the home agent receives a registration request message originating from a subscriber terminal and containing a subscriber identification and transmits a key request message, containing the subscriber identification, for a mobile key to the proxy server, if the subscriber identification in the key request message matches a subscriber identification stored by the proxy server, a mobile key for cryptographic protection of mobile signalling messages is provided to the home agent by the proxy server.

Abstract: A method allows a user to transmit emergency messages to a selected communication network, in particular a WiMax network, even without valid registration.

Abstract: A method for transmitting data in a Wireless Local Area Network (WLAN) including transmitting a WLAN message between a terminal device and an access node of the WLAN network in the Layer 2 protocol layer. An Extensible Authentication Protocol (EAP) message is transmitted in the WLAN message. The EAP message includes a Session Initiation Protocol (SIP) message having SIP authentication data.

Abstract: It is disclosed a method (and related apparatus) comprising transmitting, after a network entry authentication procedure, between an access network gateway entity and one of a terminal and a serving entity, generated terminal mobility restriction information in the form of at least one text information element comprised in an authentication notification message, and receiving the terminal mobility restriction information; and a method (and related apparatus) comprising transmitting, via network entity management procedures, terminal mobility restriction information in the form of at least one additional leaf node being added to a network entity management object, and receiving the terminal mobility restriction information.

Abstract: A mobile station is designed, as a gateway for one or several mobile terminals, to establish a connection between the mobile terminal(s) and an access network. The mobile station supports a network-based mobility management such that the mobile station acts as a client instead of the mobile terminals during communication with a home agent of a home network or intermediate network connected to the access network in the framework of a mobile IP connection.

Abstract: A first computer sends a list of possible security associations to a second computer in a message according to a protocol of an application layer, a security parameter index being contained in the message for each security association. The second computer selects a security association and transmits it or an indication of the security association selected by it to the first computer.

Abstract: A method for transmitting data in a Wireless Local Area Network (WLAN) including transmitting a WLAN message between a terminal device and an access node of the WLAN network in the Layer 2 protocol laver. An Extensible Authentication Protocol (PAP) message is transmitted in the WLAN message. The EAP message includes a Session Initiation Protocol (SIP) message having SIP authentication data.