Abstract: In a general aspect, a method of protecting a software program against tampering can include: executing, by a processor of a user device, an executable code of the software program, the executable code comprising integrity check code sections; during execution of one of the integrity check code sections of the executable code, computing by the processor an integrity check result applied to a code segment of the executable code; transmitting by the processor to a server a message containing the integrity check result and an identifier of the code segment; and when the integrity check result does not correspond to a reference result for the code segment of a genuine version of the software program, receiving by the processor from the server a signal that prevents an operation of the software program from being executed by the processor.

Abstract: In a general aspect, a method of protecting a software program against tampering can include: executing, by a processor of a user device, an executable code of the software program, the executable code comprising integrity check code sections; during execution of one of the integrity check code sections of the executable code, computing by the processor an integrity check result applied to a code segment of the executable code; transmitting by the processor to a server a message containing the integrity check result and an identifier of the code segment; and when the integrity check result does not correspond to a reference result for the code segment of a genuine version of the software program, receiving by the processor from the server a signal that prevents an operation of the software program from being executed by the processor.

Abstract: A system, a method for providing virus protection, and a computer program stored on a storage medium in a communication system including at least a first network coupled to a destination to which transmissions of data packets are made from the first network to the destination is described. A virus protection system includes a gateway, coupled between the first network and the destination, which includes a firewall which receives data packets and a virus scanning engine, coupled to the firewall, which receives the data packets after reception by the firewall, tests the data packets, passes any data packets, which are tested by the virus scanning engine to not contain a virus to the destination and discards any data packets which are tested by the virus scanning engine to contain a virus.

Abstract: According to the present invention, a plurality of data packets are received and routed by a router (1) in a data network. The router (1) comprises storing means (11) for storing a pre-defined list of rules for detecting special data packets, detecting means (12) for detecting special data packets in the received plurality of data packets on the basis of the pre-defined list of rules stored in said storing means (11), and routing means (13) for requesting instructions for the special data packets detected by said detecting means (12) and for routing the special data packets in accordance with instructions received on request. According to the present invention, an advanced service architecture for next generation network services is provided. In this service architecture, the functions of the detecting means (12) and the routing means (13) can be achieved by a service trigger and a service logic, respectively.

Abstract: A method and a device for optimizing the routing of data packets, in which method data packets are received, data flow is detected on the received data packets, a feedback request is transmitted in response to the detected data flow, feedback information is received, feedback information is generated and added to the received feedback information, feedback information is transmitted and the data packets belonging to the data flow are directed on the basis of said feedback information.

Abstract: The invention relates to a method for providing a DNS server address list from a server 1 to a client 2 comprising the steps of: the client 2 requests an IP address from the server 1; and the server 1 responds by assigning the IP address together with said DNS address list to the client 1. In the prior art the order of the DNS server addresses in the list is static, that means that upon any IP request the same list, having the same order of addresses is provided to the client. When the client wants to output a DNS request he starts by asking the first server in the list irrespective as to whether said server may currently be overloaded or has gone down. In these situations time is lost since no response is provided by such a disturbed DNS server to a DNS request and the client has to ask another server in the list.

Abstract: A method for communicating a message over a data path by means of data transfer apparatus capable of transmitting the data over the data path, generating a representation of the data as received from the data path and generating an indication of the communication quality of the data path; the method comprising: forming a plurality of individual data segments together representing the message, the format of each data segment being selected from one of a plurality of available segment formats in dependence on the quality of the data path; transferring the segments over the data path by means of the data transfer apparatus; and combining the segments as received from the data transfer apparatus to form a representation of the message.

Abstract: A packet data transmission network system is disclosed which comprises a receiver (1), a sender (2) for transmitting data packets to the receiver (1) through a packet data connection via a network element (3). The receiver (1) acknowledges each received data packet by an acknowledgment message which contains header data comprising a window size, the number of transmitted bytes for which the sender (2) has not received an acknowledgment from the receiver (1) being not allowed to exceed the window size. The network element (3) buffers data packets transmitted by the sender (2) and examines and modifies the header data. According to the invention, the network element (3) detects transmission conditions and modifies the window size accordingly.

Abstract: The present invention related to peer-to-peer communications systems. The system comprises a user profile association storage associating at least two user instance identifiers with prioritization information. In one aspect of the invention a user instance identifier associated with a peer-to-peer data transfer action is detected. The prioritization information for the data transfer action is checked from the user profile association information storage, and the data transfer action is adapted in accordance with the prioritization information.

Abstract: Method, devices and computer programs for initiating and establishing a peer-to-peer connection between a mobile terminal and a data terminal. The mobile terminal constructs a signaling message comprising an internet protocol address of each communication interface when the number of communication interfaces is at least two. The addresses may be ordered in a preference order. A receiving data terminal then tries to initiate communication with a first internet protocol address, and if the initiation fails, selects the next internet protocol address for communication initiation.

Abstract: A method of selecting the serving network element in a telecommunications network. Mobility agents or routers transmit attribute information on one or more network elements in advertising messages to at least one mobile node. This information is used in the mobile node for selecting the serving network element.

Abstract: The invention relates to radio systems and particularly to a handover and interworking between two radio systems utilizing different link protocols. According to the invention, in a handover the radio link protocol of the old (handover source) radio system is also retained after the handover in the new (target) radio system. The “old” radio link protocol is merely adapted to a physical traffic channel of the new radio system. One manner of implementing the adaptation to the traffic channel is to set up the radio link protocol of the “new” radio system between the mobile station and the interworking function and to transmit the radio link protocol frames of the “old” radio system within the radio link protocol of the new radio system.

Abstract: A method for providing state-dependant information to a terminal operable in communication with a communication network including a server unit, the method comprising: receiving at the server unit a request from the terminal for data; determining the state of the terminal by means of the server unit; requesting by means of the server unit state-dependent data dependant on the state of the terminal and corresponding to the requested data, the server unit transmitting a request for the state-dependent data that includes an indication of the determined state of the terminal; receiving at the server unit the state-dependant data; and transmitting the state-dependant data to the terminal.

Abstract: The invention relates to data transmission in telecommunication systems and particularly in radio systems. The invention employs “payload numbering” instead of or in addition to conventional frame numbering. Data (61) is split into fixed-length data blocks or payload units (62). The size of a block is preferably equal to or smaller than the shortest information field in frames (63) of the protocol(s) used. Each protocol frame carries one or more payload units. In an optimum situation the length of the information field in a protocol frame equals n * the length of the payload unit, where n is an integer. Instead of frame numbering (in some special cases possibly in addition to it) the protocol frame carries payload numbers both for indicating the payload units (data blocks) conveyed in the protocol frame and for acknowledging the received blocks.

Abstract: This is a method and system to efficiently do handovers for mobile IP. The mobile node registers itself with several foreign agents using a new registration type. Only one of the foreign agents is selected to forward the data packets of a data message to the mobile node. The selection algorithm may be one based on randomness, dynamic learning, message traffic congestion, or statistical information collected at the mobile node.

Abstract: Sample packets (S1-Sn) are formed from an input signal (1), there being a sample period (P1-Pn) related to each sample packet. The sample packets are inserted into a packet network (4) and transmitted to a recipient. The information content of the input signal per time unit (BR) is monitored and the information content of each sample packet (S1-Sn) is kept substantially constant on the basis of this information by controlling the duration of the sample period (P1-Pn) of the sample packets. Information on the duration of the sample period (P1-Pn) is transmitted to the recipient in the packet network packet. The packets (4) are received in the receiver and sample packets (S1-Sn) are separated from them and supplied to a decoder (7). Information on the duration of the sample period (P1-Pn) is also separated and supplied to the decoder (7), which uses it as the playing time of the restored output signal (8).

Abstract: A method and a device for optimizing the routing of data packets, in which method data packets are received, data flow is detected on the received data packets, a feedback request is transmitted in response to the detected data flow, feedback information is received, feedback information is generated and added to the received feedback information, feedback information is transmitted and the data packets belonging to the data flow are directed on the basis of said feedback information.

Abstract: The present invention is a system, a method for providing virus protection, and a computer program stored on a storage medium in a communication system (10) including at least a first network (11) coupled to a destination (18) to which transmissions of data packets are made from the first network to the destination. A virus protection system in accordance with the invention includes a gateway (12), coupled between the first network and the destination, which includes a firewall (14) which receives data packets and a virus scanning engine (22), coupled to the firewall, which receives the data packets after reception by the firewall, tests the data packets, passes any data packets, which are tested by the virus scanning engine to not contain a virus to the destination and discards any data packets which are tested by the virus scanning engine to contain a virus.

Abstract: A re-registration authorization is attached to a registration request or data packet sent from a mobile node roaming on a foreign network. The mobile node requests registration with its home network in order to maintain communication with the Internet and maintain identification of the mobile node by its individual home address. Such registration has a limited lifetime, and the re-registration authorization attached to the registration request or other data packet authorizes an intermediate communication entity in the foreign network to re-register the mobile node, on behalf of the mobile node, with the mobile node's home network, if the communication traffic of the mobile node indicates that the mobile node is still roaming on the foreign network. The rate of error is reduced by significantly reducing the amount of transmissions sent from the mobile node, and power consumption of the typically battery-powered mobile unit is reduced, as well.

Abstract: A packet transmission method and apparatus, according to which short data samples or mini packets from several simultaneous connections are multiplexed to a variable length packet. The length of the mini packets is defined in a common length field for mini packets of the same length, which saves bandwidth. Each mini packet has its own header, which defines at least an identification information of the mini packet. Thus, the variable length packet, e.g. an IP packet, includes a plurality of mini packets with a minimum header portion, such that transmission overhead is reduced due to the fact that most mini packets tend to be of the same length. Moreover, different queues for mini packets of one respective length may be provided, from which mini packets of one length are multiplexed to the variable length data packet. Thereby, the ratio of variable length data packets including mini packets of one length is further increased so as to further decrease the transmission overhead.