Abstract: A method for operating a session control entity configured to control a data packet session of a user in a cellular network. A policy request is transmitted to a policy control entity of the cellular network requesting at least one policy rule for the data packet session. A policy response is received including the at least one policy rule for the data packet session and including a request to provide information about an address translation carried out in a user plane on the data packets of the data packet session. Rules for handling the data packet session are transmitted to a user plane entity configured to handle the user plane of the data packet session. The rules include a translation detection rule by which the user plane entity is requested to inform the session control entity about the address translation that has taken place in the user plane.

Abstract: A method for operating a session control entity configured to control a data packet session of a user in a cellular network. A policy request is transmitted to a policy control entity of the cellular network requesting at least one policy rule for the data packet session. A policy response is received including the at least one policy rule for the data packet session and including a request to provide information about an address translation carried out in a user plane on the data packets of the data packet session. Rules for handling the data packet session are transmitted to a user plane entity configured to handle the user plane of the data packet session. The rules include a translation detection rule by which the user plane entity is requested to inform the session control entity about the address translation that has taken place in the user plane.

Abstract: The embodiments herein relate to a method in a wireless device (101) for enabling trusted communication between a wireless device entity (101a) and a second network node (105) via a first network node (103). The wireless device (101) and the first network node (103) are adapted to communicate using a secure communication channel. The wireless device (101) transmits a message to the first network node (103) using the secure communication channel. The message comprises information indicating that the wireless device entity (101a) is comprised in a trusted zone of the wireless device (101). The trusted zone is at least partly trusted by the first network node (103).

Abstract: There is provided bandwidth limitation of a connectivity service for a user equipment with respect to an access point name (APN) served by a packet data gateway (PGW) in a communications network. The PGW receives a request to separate bandwidth limitation with respect to the APN for a connectivity service and a specific service delivered over the connectivity service. The PGW enforces a first bandwidth limitation on the connectivity service. The PGW enforces a second bandwidth limitation on the specific service.

Abstract: A device, such as a terminal device, for example, has an operating system (OS) and an application program that executes on the OS. When executing on the device, the application program configures the device to communicate packet data with a server device, and to handle service-specific traffic, and application-specific traffic, in accordance with a distributed port mapping policy.

Abstract: In scenarios where the quality of service is negotiated through a signalling layer whereas the services are actually carried through a bearer layer, application functions at the signalling layer are not always aware of how quality of service is individually accomplished at the bearer layer on a service basis. The invention provides a method and devices whereby events are detected on a service data flow basis at a detection device in the bearer layer and notified towards an application device in the signalling layer via a control device between the signalling and the bearer layer. The list of events to be notified is obtainable at the control device from the application device and is included in Quality of Service related rules, along with service data flow filters. This Quality of Service related rules are provided to the detection device for inspecting individual service data flows in order to detect and notify the indicated events.

Abstract: Example embodiments are presented herein service session management based on service specific data and a user subscription. Some example embodiments may comprise a user equipment, and corresponding method therein, for monitoring an internet or network access by an identified application. Upon detection, the user equipment may be configured to send service specific data associated with the identified application to an enhanced application server. The enhanced application server may manage a service session based on the service specific data and the user subscription. The management of the service session may allow for a differentiated delivery of service for certain applications.

Abstract: In scenarios where the quality of service is negotiated through a signalling layer whereas the services are actually carried through a bearer layer, application functions at the signalling layer are not always aware of how quality of service is individually accomplished at the bearer layer on a service basis. The invention provides a method and devices whereby events are detected on a service data flow basis at a detection device in the bearer layer and notified towards an application device in the signalling layer via a control device between the signalling and the bearer layer. The list of events to be notified is obtainable at the control device from the application device and is included in Quality of Service related rules, along with service data flow filters. This Quality of Service related rules are provided to the detection device for inspecting individual service data flows in order to detect and notify the indicated events.

Abstract: There is provided bandwidth limitation of a connectivity service for a user equipment with respect to an access point name (APN) served by a packet data gateway (PGW) in a communications network. The PGW receives a request to separate bandwidth limitation with respect to the APN for a connectivity service and a specific service delivered over the connectivity service. The PGW enforces a first bandwidth limitation on the connectivity service. The PGW enforces a second bandwidth limitation on the specific service.

Abstract: An application executing on a device communicates packet data with a server via an operating system (OS) on the device. The device receives information concerning a port mapping policy that specifies a plurality of applications. For each application, a predetermined assignable port space is defined within which an application specific port can be assigned. When the application is started, an OS specific port is assigned to the application. Additionally, an application specific port for the OS specific port is assigned in accordance with the port mapping policy. The device then translates data packets to be transmitted by the application, such that for a given OS specific source port, the device replaces the OS specific source port field of the packets to be transmitted with the assigned application specific port. The device then transmits the translated data packets with the assigned application specific source port.

Abstract: The embodiments herein relate to a method in a wireless device (101) for enabling trusted communication between a wireless device entity (101a) and a second network node (105) via a first network node (103). The wireless device (101) and the first network node (103) are adapted to communicate using a secure communication channel. The wireless device (101) transmits a message to the first network node (103) using the secure communication channel. The message comprises information indicating that the wireless device entity (101a) is comprised in a trusted zone of the wireless device (101). The trusted zone is at least partly trusted by the first network node (103).

Abstract: A device, DEV, 20, such as a terminal device, comprising a memory and a processor, the processor being adapted for executing an operating system, whose instructions are stored in the memory, through which OS an application, APP, can further be executed, the application permitting packet data to be provided to or from the device and a server.

Abstract: In scenarios where the quality of service is negotiated through a signalling layer whereas the services are actually carried through a bearer layer, application functions at the signalling layer are not always aware of how quality of service is individually accomplished at the bearer layer on a service basis. The invention provides a method and devices whereby events are detected on a service data flow basis at a detection device in the bearer layer and notified towards an application device in the signalling layer via a control device between the signalling and the bearer layer. The list of events to be notified is obtainable at the control device from the application device and is included in Quality of Service related rules, along with service data flow filters. This Quality of Service related rules are provided to the detection device for inspecting individual service data flows in order to detect and notify the indicated events.

Abstract: Method and apparatuses are provided for setting up at least one dedicated bearer, DB, or at least a secondary PDP contexts, SPC, in a system comprising a terminal (1) a gateway (4) and an application server (6), for further transmitting internet protocol packets between at least the terminal and the gateway, the method comprising the steps—setting (202) up a default bearer or first PDP context between the terminal and the gateway;—providing (206; 208) a list of associations from the application server to the terminal, and—providing (209) a list of associations in or to the gateway, wherein each association comprises a service identity (m, n) and one or more applications (p; q);—starting (212) an application;—detecting (213, 217) at least one or more five-tuples, FT, associated with the application;—creating (214, 215; 216), in both the terminal (1) and the gateway (4), for the service identity associated with the stated application in question, a further association concerning at least the detected one or mor

Abstract: A content provider provides a content provider and service identification to a collection controller. The collection controller retrieves content provider and service specific service provision characteristics from a user subscription database and sets these service provision characteristics as a filter in a service provision control device to be used in the provision of a service from the content provider to the user equipment. Thus, the content provider, through the retrieved content server & service related characteristics from the user subscriber database, can influence the charging and transmission policies used by service provision control device for providing the service.

Abstract: A method of delivering data to user terminals connected to an Internet Protocol Connectivity Access Network, IP-CAN, wherein the IP-CAN implements a Policy and Charging Control, PCC, architecture. The method comprises caching data within an IP-CAN cache server upon a decision made by a Policy and Charging Rules Function, PCRF, of the PCC architecture. The cached data is then identified to a Policy and Charging Enforcement Function, PCEF, of the PCC architecture. At the PCEF, data requests made by user terminals are monitored and a determination made as to whether or not a request relates to cached data. If a request does relate to cached data, then that cached data is delivered from the IP-CAN cache server to the requesting user terminal.

Abstract: A device, DEV, 20, such as a terminal device, comprising a memory 206 and a processor 208, the processor being adapted for executing an operating system, OS 204, whose instructions are stored in the memory, 206, through which OS an application, APP, can further be executed, the application permitting packet data to be provided to or from the device and a server.

Abstract: The invention comprises methods and arrangements for Policy Decision Point discovery in a roaming or handover scenario in an IP network (IN) comprising a plurality of network elements. The invention introduces a Re-direct Policy Decision (RPDF) Function which can deliver addresses to PDPs associated to a certain Mobile Terminal. The RPDF comprises a memory for storing addresses (APDPA, SPDPA1) of Policy Decision Points and Mobile Terminals. The RPDF makes it possible for a network element, e.g. an application function, a policy enforcement point or another policy decision point, to find a Policy Decision Point associated to the Mobile Terminal.

Abstract: Example embodiments are presented herein service session management based on service specific data and a user subscription. Some example embodiments may comprise a user equipment, and corresponding method therein, for monitoring an internet or network access by an identified application. Upon detection, the user equipment may be configured to send service specific data associated with the identified application to an enhanced application server. The enhanced application server may manage a service session based on the service specific data and the user subscription. The management of the service session may allow for a differentiated delivery of service for certain applications.

Abstract: A technique for introducing a real-time congestion status in a Policy and Charging Rules Function (PCRF) policy decision in a cellular network is presented. A method embodiment performed by the PCRF comprises the steps of obtaining, from one of a Policy Charging Enforcement Function (PCEF) and a database, at least one cell identifier; sending, to a Performance Manager network element, a request for checking congestion status, the request comprising the at least one cell identifier; receiving, from the Performance Manager network element, a retrieved congestion status for the at least one cell identifier; generating at least one of a QoS Class Identifier and a QoS Profile based on the at least one cell identifier and the received congestion status; and sending, to the PCEF, a message comprising the at least one of the Class Identifier and QoS Profile.