Abstract: The present disclosure relates to a method for anchoring an edge cloud to a central cloud, the method being performed in a cloud environment comprising a central cloud and an edge cloud, the method comprising obtaining (S238, S310), by a connectivity controller of an edge cloud, an address of an anchoring registry of a central cloud; sending (S240, S312), by the connectivity controller, to the anchoring registry, information about networking configuration of the edge cloud; setting up (S246, S314), by an orchestrator of the central cloud, a virtual private network, VPN, service in the central cloud; requesting (S248, S316), by the orchestrator of the central cloud, edge VPN configuration information from the central VPN service, based on the information about networking configuration of the edge cloud; sending (S252, S318), by the anchoring registry, the edge VPN configuration information, to an orchestrator of the edge cloud; creating (S258, S320), by an orchestrator of the edge cloud, an edge VPN service, b

Abstract: The present disclosure relates to a method for anchoring an edge cloud to a central cloud, the method being performed in a cloud environment comprising a central cloud and an edge cloud, the method comprising obtaining (S238, S310), by a connectivity controller of an edge cloud, an address of an anchoring registry of a central cloud; sending (S240, S312), by the connectivity controller, to the anchoring registry, information about networking configuration of the edge cloud; setting up (S246, S314), by an orchestrator of the central cloud, a virtual private network, VPN, service in the central cloud; requesting (S248, S316), by the orchestrator of the central cloud, edge VPN configuration information from the central VPN service, based on the information about networking configuration of the edge cloud; sending (S252, S318), by the anchoring registry, the edge VPN configuration information, to an orchestrator of the edge cloud; creating (S258, S320), by an orchestrator of the edge cloud, an edge VPN service, b

Abstract: A method and apparatus for providing service discovery. The method comprises receiving a service query; analysing the service query to determine whether the service query comprises a service name; and responsive to the service query comprising a service name, transmitting a service (SRV) record query to a Domain Name System (DNS).

Abstract: A method for operating a system hosted on a mobile entity is disclosed, wherein the system is operable to connect to a communication network. The method, performed by a controller of the system, comprises seeking to establish a trust relationship with a cooperating system hosted on a mobile entity, and, if a trust relationship with the cooperating system is established, performing at least one of: initiating use of a resource provided by the cooperating system, or initiating provision of a resource for use by the cooperating system. Also disclosed is a method for operating a function comprising a digital representative of a system hosted on a mobile entity, wherein the system is operable to connect to a communication network.

Abstract: Using an authentication server to program network elements, such as a network node, in accordance with software-defined networking techniques in order to establish a traffic flow rule for a communication device or user of the communication device. After successfully authenticating a communication device or user, the authentication server and/or network node may use an identifier received at the authentication server in connection with the authentication procedure in order to obtain a traffic flow rule for the communication device. The traffic flow rule may be established at the network node or forwarded to a second network node configured to receive network packets from the communication device. The first identifier may be any one of a user identifier identifying a user, an application identifier identifying an application, and a device identifier unique to the communication device.

Abstract: There is provided mechanisms for handling acknowledgements from nodes in a wireless radio ad-hoc network. A method is performed by a gateway of the wireless radio ad-hoc network. The method comprises transmitting radio signalling to nodes in the wireless radio ad-hoc network. The transmitted radio signalling is addressed to, and requiring acknowledgement from, at least one node in the wireless radio ad-hoc network. The method comprises receiving radio signalling from a node in the wireless radio ad-hoc network. The received radio signalling comprises one in-packet Bloom Filter comprising acknowledgement of the transmitted radio signalling from at least one of the nodes.

Abstract: A method performed by a machine-to-machine, M2M, server for managing communication with a M2M device is disclosed. The method comprising configuring the M2M device with a finite number of predetermined states and predetermined transitions for moving the M2M device into one of its predetermined states, and sending a message to the M2M device for executing at least one of the predetermined transitions.

Abstract: The disclosure relates to a method for access control of a data flow in a software defined networking system. The method includes receiving a first packet associated with a first data flow between a client node and a server node, verifying authentication of the first packet, repeating the receiving and verifying for a number of subsequent packets of the first data flow, wherein the number of subsequent packets is set based on type of protocol used for the first data flow and/or a policy set in the controller device, and sending, to an intermediate node along a path of the first data flow, a respective verification message for each successfully verified authentication of the first packet and any subsequent packets, allowing the first packet and any subsequent packets of the first data flow for forwarding.

Abstract: The present disclosure relates to a method performed by an IP capable network node in a communication network. The method comprises receiving an IP message from an IP capable device, said IP message comprising an indication that the IP capable device requires a VM to be set up. The method also comprises sending an initiation message to a cloud service platform requesting the cloud service platform to set up the VM for the IP capable device. The method also comprises receiving a service information message from the cloud service platform comprising information about the VM set up by the cloud service platform. The method also comprises sending an IP message to the IP capable device comprising information about the VM set up for said device, allowing the device to send IP data to the VM.

Abstract: Embodiments are directed to using an authentication server (140) to program and reprogram network elements, such as a network node (150), in accordance with software-defined networking techniques in order to establish a traffic flow rule for a communication device (110) or user of the communication device (110). After successfully authenticating a communication device (110) or user, the authentication server (140) and/or network node (150) may use an identifier received at the authentication server (140) in connection with the authentication procedure in order to obtain a traffic flow rule for the communication device (110). The traffic flow rule may be established at the network node (140) or forwarded to a second network node configured to receive network packets from the communication device (110). The first identifier may be any one of a user identifier identifying a user, an application identifier identifying an application, and a device identifier unique to the communication device (110).

Abstract: The present disclosure relates to a method performed by a network element 2 in a communication network 1. The method comprises detecting a machine device (MD) 4 able to provide a first type of information to the network. The method also comprises receiving an information message comprising a token of a service 3 which is interested in receiving the first type of information. The method also comprises sending a request message to the MD comprising the token and a request for the MD to send the first type of information together with the token. The present disclosure also relates to a machine device as well as to the network element and a rendezvous point, and methods thereof, in the network.

Abstract: A method performed by a machine-to-machine, M2M, server for managing communication with a M2M device is disclosed. The method comprising configuring the M2M device with a finite number of predetermined states and predetermined transitions for moving the M2M device into one of its predetermined states, and sending a message to the M2M device for executing at least one of the predetermined transitions.

Abstract: There is provided mechanisms for handling acknowledgements from nodes in a wireless radio ad-hoc network. A method is performed by a gateway of the wireless radio ad-hoc network. The method comprises transmitting radio signalling to nodes in the wireless radio ad-hoc network. The transmitted radio signalling is addressed to, and requiring acknowledgement from, at least one node in the wireless radio ad-hoc network. The method comprises receiving radio signalling from a node in the wireless radio ad-hoc network. The received radio signalling comprises one in-packet Bloom Filter comprising acknowledgement of the transmitted radio signalling from at least one of the nodes.

Abstract: The disclosure relates to a method for access control of a data flow in a software defined networking system. The method includes is performed in a controller device and comprises: receiving a first packet associated with a first data flow between a client node and a server node, verifying, based on flow attributes authentication of the first packet, repeating the receiving and verifying for a number of subsequent packets of the first data flow, wherein the number of subsequent packets is set based on type of protocol used for the first data flow and/or a policy set in the controller device, and sending, to an intermediate node along a path of the first data flow, a respective verification message for each successfully verified authentication of the first packet and any subsequent packets, allowing the first packet and any subsequent packets of the first data flow for forwarding.

Abstract: A method, control node, gateway and computer programs in a communications network for enabling communication with a newly detected device connected to the network. The method comprises receiving a request message including an id associated with the newly detected device from a gateway, and retrieving configuration data associated with the device based on the id, from a device vendor database, where the device vendor database is indicated by the id. The method further comprises providing a resource in the communications network based on the configuration data, acknowledging the request message to the gateway, thereby enabling the device to communicate with the resource in the communications network.

Abstract: The present invention relates to a Domain Name System (DNS) server and a method for resolving DNS queries from a number of clients. The DNS server comprises multiple virtual DNS server instances servicing different clients. The DNS server further comprises a shared cache for caching records which indicate answers to resolved DNS queries. The shared cache is shared between a set of virtual DNS server instances. The virtual DNS server instances that share the shared cache are able to cache DNS query results in the shared cache as well as resolve a DNS query by retrieving a cached record corresponding to the DNS query from the shared cache. Thus it is possible for a virtual DNS server instance to make use of DNS query results obtained by other virtual DNS server instances.

Abstract: The present disclosure relates to a method performed by a network element 2 in a communication network 1. The method comprises detecting a machine device (MD) 4 able to provide a first type of information to the network. The method also comprises receiving an information message comprising a token of a service 3 which is interested in receiving the first type of information. The method also comprises sending a request message to the MD comprising the token and a request for the MD to send the first type of information together with the token. The present disclosure also relates to a machine device as well as to the network element and a rendezvous point, and methods thereof, in the network.

Abstract: The present disclosure relates to a method performed by an IP capable network node in a communication network. The method comprises receiving an IP message from an IP capable device, said IP message comprising an indication that the IP capable device requires a VM to be set up. The method also comprises sending an initiation message to a cloud service platform requesting the cloud service platform to set up the VM for the IP capable device. The method also comprises receiving a service information message from the cloud service platform comprising information about the VM set up by the cloud service platform. The method also comprises sending an IP message to the IP capable device comprising information about the VM set up for said device, allowing the device to send IP data to the VM.

Abstract: A method, control node, gateway and computer programs in a communications network for enabling communication with a newly detected device connected to the network. The method comprises receiving a request message including an id associated with the newly detected device from a gateway, and retrieving configuration data associated with the device based on the id, from a device vendor database, where the device vendor database is indicated by the id. The method further comprises providing a resource in the communications network based on the configuration data, acknowledging the request message to the gateway, thereby enabling the device to communicate with the resource in the communications network.

Abstract: The present invention relates to a Domain Name System (DNS) server and a method for resolving DNS queries from a number of clients. The DNS server comprises multiple virtual DNS server instances servicing different clients. The DNS server further comprises a shared cache for caching records which indicate answers to resolved DNS queries. The shared cache is shared between a set of virtual DNS server instances. The virtual DNS server instances that share the shared cache are able to cache DNS query results in the shared cache as well as resolve a DNS query by retrieving a cached record corresponding to the DNS query from the shared cache. Thus it is possible for a virtual DNS server instance to make use of DNS query results obtained by other virtual DNS server instances.