Abstract: A method for fast initial link setup (FILS) for use in a wireless station, is disclosed. The method comprises receiving a FILS discovery (FD) frame from an access point (AP). The FD frame comprises an FD frame control field and FD frame contents. The FD frame control field comprises a service set identifier (SSID) indicator, indicating whether an SSID field in the FD frame contents contains a full SSID or a short SSID and an SSID length field, indicating a size of the full SSID or the short SSID contained in the SSID field in the FD frame contents. The method further comprises determining whether to associate with the AP based on the received FD frame; and on a condition the determination is positive, the method further comprises transmitting an association request frame to the AP. A wireless station is also disclosed.

Abstract: The systems, devices, and methods discussed herein are directed to redirecting mobile traffic of an infected mobile device, or user equipment (UE), to a security network node, which provides a security action for the UE. A mobile session management node may identify the UE as an infected device based on a database maintained at an intelligent redirection node or a security posture indicator received from the UE. The mobile management entity may then create a session with a security network node which redirects mobile traffic of the infected UE to the security network node and provides a security action for the UE.

Abstract: A method for performing active scanning by a non-AP STA may comprise transmitting, to a group of APs, one or more probe request frames and receiving in response, configuration chance count (CCC) values from first and second APs of the group of APs. The CCC values may be integer values that represent configuration instances of the respective APs. The CCC values may be stored in a memory of the non-AP STA. A determination may be made, based on the information stored in the memory, as to which AP is preferred. An association procedure may be performed with the preferred AP. Other disclosed methods employ passive scanning.

Abstract: WTRUs, ARSs, APs, WLG/AAA proxies, networks, and methods thereon are disclosed for fast security setup on a multi-RAT WTRU. Methods of sharing security associations between RATs on a multi-RAT WTRU are disclosed. Methods of caching security associations are disclosed. Methods are disclosed for alerting an ANDSF server of an AP that should be considered for association. Enhancements to advertisements from an AP are disclosed where the advertisements may include SSID with a FQDN, a HESSID type information, or TAI type information. Methods of resolving AP identities to a reachable address are disclosed. An address resolution protocol is disclosed for resolving AP identities. ARSs are disclosed that may resolve a BSSID to a network routable address. Protocols for carrying AP identities and security parameters are disclosed. Methods are disclosed of using ANDSF to provide the WTRU with security information and parameters of an AP. An RSN may indicate security capabilities.

Abstract: A methods and apparatus may be used for accelerated link setup. A method may include a station (STA) acquiring information about an access point of an Institute of Electrical and Electronics Engineers (IEEE) 802.11 network in advance through a previously connected IEEE 802.11 interface and/or an interface other than the IEEE 802.11 network. The STA may use the acquired information during a link setup procedure between the STA and the access point. The information may include a suggestion for a specific procedure to complete the link setup procedure between the STA and the access point.

Abstract: A method and system of detecting a source of an intrusion in a mobile network. A data packet is captured of a plane traffic of a user device that is using the mobile network. The data packet has a header portion and a payload. The payload is inspected for a security event. Upon determining a presence of the security event, a unique session identifier is extracted from the header portion of the data packet. A source of the security event is identified based on the extracted unique session identifier.

Abstract: Persistent communication layer credentials generated on a persistent communication layer at one network may be leveraged to perform authentication on another. For example, the persistent communication layer credentials may include application-layer credentials derived on an application layer. The application-layer credentials may be used to establish authentication credentials for authenticating a mobile device for access to services at a network server. The authentication credentials may be derived from the application-layer credentials of another network to enable a seamless handoff from one network to another. The authentication credentials may be derived from the application-layer credentials using reverse bootstrapping or other key derivation functions. The mobile device and/or network entity to which the mobile device is being authenticated may enable communication of authentication information between the communication layers to enable authentication of a device using multiple communication layers.

Abstract: An application server receives a request for service from a wireless transmit/receive unit (WTRU) associated with a home network that includes a home subscriber server (HSS) and a bootstrapping server function (BSF) coupled via a Zh reference point. The application server authenticates the WTRU at least in part by (i) redirecting the WTRU to an identity provider co-located with a network application function (IDP/NAF) and coupled to the BSF via a Zn reference point and (ii) receiving an assertion from the WTRU that the IDP/NAF has authenticated the WTRU based on user security settings retrieved from the BSF by the IDP/NAF over the Zn reference point. After authenticating the WTRU, the application server (i) retrieves user-specific Sh-reference-point-type data from the HSS via the IDP/NAF over the Zn and Zh reference points and (ii) provides the service to the WTRU based on the retrieved user-specific Sh-reference-point-type data.

Abstract: Persistent communication layer credentials generated on a persistent communication layer at one network may be leveraged to perform authentication on another. For example, the persistent communication layer credentials may include application-layer credentials derived on an application layer. The application-layer credentials may be used to establish authentication credentials for authenticating a mobile device for access to services at a network server. The authentication credentials may be derived from the application-layer credentials of another network to enable a seamless handoff from one network to another. The authentication credentials may be derived from the application-layer credentials using reverse bootstrapping or other key derivation functions. The mobile device and/or network entity to which the mobile device is being authenticated may enable communication of authentication information between the communication layers to enable authentication of a device using multiple communication layers.

Abstract: A methods and apparatus may be used for accelerated link setup. A method may include a station (STA) acquiring information about an access point of an Institute of Electrical and Electronics Engineers (IEEE) 802.11 network in advance through a previously connected IEEE 802.11 interface and/or an interface other than the IEEE 802.11 network. The STA may use the acquired information during a link setup procedure between the STA and the access point. The information may include a suggestion for a specific procedure to complete the link setup procedure between the STA and the access point.

Abstract: An application server receives a request for service from a wireless transmit/receive unit (WTRU) associated with a home network that includes a home subscriber server (HSS) and a bootstrapping server function (BSF) coupled via a Zh reference point. The application server authenticates the WTRU at least in part by (i) redirecting the WTRU to an identity provider co-located with a network application function (IDP/NAF) and coupled to the BSF via a Zn reference point and (ii) receiving an assertion from the WTRU that the IDP/NAF has authenticated the WTRU based on user security settings retrieved from the BSF by the IDP/NAF over the Zn reference point. After authenticating the WTRU, the application server (i) retrieves user-specific Sh-reference-point-type data from the HSS via the IDP/NAF over the Zn and Zh reference points and (ii) provides the service to the WTRU based on the retrieved user-specific Sh-reference-point-type data.

Abstract: A methods and apparatus may be used for accelerated link setup. A method may include a station (STA) acquiring information about an access point of an Institute of Electrical and Electronics Engineers (IEEE) 802.11 network in advance through a previously connected IEEE 802.11 interface and/or an interface other than the IEEE 802.11 network. The STA may use the acquired information during a link setup procedure between the STA and the access point. The information may include a suggestion for a specific procedure to complete the link setup procedure between the STA and the access point.

Abstract: A method and apparatus for interworking between a mobile network operator and an application provider are disclosed. A network application function (NAF) may be co-located with an OpenID provider such that an application server may communicate with the NAF to access a home subscriber server (HSS) via a bootstrapping server function (BSF). The interfaces between BSF and HSS, and between BSF and NAF may be enhanced to carry information that is available through Sh interface between the application server and the HSS. When the WTRU is roaming in a visited network, the application server may communicate with the visited network for charging and policing for serving the service request from the WTRU. The application server may be co-located with an NAF, and may authenticate the WTRU using Generic Bootstrapping Architecture, and may communicate with a BSF in a home network via an eZn-proxy function to access an HSS.

Abstract: Methods, apparatus and systems for managing an exposure of a network to a wireless transmit/receive unit (WTRU) are disclosed. One representative method includes receiving, by an access point (AP) of the network, information associated with the WTRU; and selectively exposing, by the AP, the network.

Abstract: A method for fast initial link setup (FILS) for use in a wireless station, is disclosed. The method comprises receiving a FILS discovery (FD) frame from an access point (AP). The FD frame comprises an FD frame control field and FD frame contents. The FD frame control field comprises a service set identifier (SSID) indicator, indicating whether an SSID field in the FD frame contents contains a full SSID or a short SSID and an SSID length field, indicating a size of the full SSID or the short SSID contained in the SSID field in the FD frame contents. The method further comprises determining whether to associate with the AP based on the received FD frame; and on a condition the determination is positive, the method further comprises transmitting an association request frame to the AP. A wireless station is also disclosed.

Abstract: WTRUs, ARSs, APs, WLG/AAA proxies, networks, and methods thereon are disclosed for fast security setup on a multi-RAT WTRU. Methods of sharing security associations between RATs on a multi-RAT WTRU are disclosed. Methods of caching security associations are disclosed. Methods are disclosed for alerting an ANDSF server of an AP that should be considered for association. Enhancements to advertisements from an AP are disclosed where the advertisements may include SSID with a FQDN, a HESSID type information, or TAI type information. Methods of resolving AP identities to a reachable address are disclosed. An address resolution protocol is disclosed for resolving AP identities. ARSs are disclosed that may resolve a BSSID to a network routable address. Protocols for carrying AP identities and security parameters are disclosed. Methods are disclosed of using ANDSF to provide the WTRU with security information and parameters of an AP. An RSN may indicate security capabilities.

Abstract: A methods and apparatus may be used for accelerated link setup. A method may include a station (STA) acquiring information about an access point of an Institute of Electrical and Electronics Engineers (IEEE) 802.11 network in advance through a previously connected IEEE 802.11 interface and/or an interface other than the IEEE 802.11 network. The STA may use the acquired information during a link setup procedure between the STA and the access point. The information may include a suggestion for a specific procedure to complete the link setup procedure between the STA and the access point.

Abstract: WTRUs, ARSs, APs, WLG/AAA proxies, networks, and methods thereon are disclosed for fast security setup on a multi-RAT WTRU. Methods of sharing security associations between RATs on a multi-RAT WTRU are disclosed. Methods of caching security associations are disclosed. Methods are disclosed for alerting an ANDSF server of an AP that should be considered for association. Enhancements to advertisements from an AP are disclosed where the advertisements may include SSID with a FQDN, a HESSID type information, or TAI type information. Methods of resolving AP identities to a reachable address are disclosed. An address resolution protocol is disclosed for resolving AP identities. ARSs are disclosed that may resolve a BSSID to a network routable address. Protocols for carrying AP identities and security parameters are disclosed. Methods are disclosed of using ANDSF to provide the WTRU with security information and parameters of an AP. An RSN may indicate security capabilities.

Abstract: A method for use in a wireless station includes receiving a fast initial link setup discovery (FD) frame from an access point (AP) between instances of a full beacon frame and determining whether to associate with the AP based on the received FD frame. The FD frame includes FD frame contents and a FD frame control field. The FD frame control field includes a service set identifier (SSID) length field, corresponding to a length of a variable length SSID field in the FD frame contents; and any one or more of: a capability presence indicator, an access network options presence indicator, a security presence indicator, an AP configuration change count presence indicator, or an AP next target beacon transmission time presence indicator. Each of the presence indicators is used to indicate whether a corresponding field is present in the FD frame contents.

Abstract: A methods and apparatus may be used for accelerated link setup. A method may include a station (STA) acquiring information about an access point of an Institute of Electrical and Electronics Engineers (IEEE) 802.11 network in advance through a previously connected IEEE 802.11 interface and/or an interface other than the IEEE 802.11 network. The STA may use the acquired information during a link setup procedure between the STA and the access point. The information may include a suggestion for a specific procedure to complete the link setup procedure between the STA and the access point.