Abstract: A method for detection of a user equipment type includes: receiving, by a communication network, a service request message from a user equipment, wherein the service request message requests a service from the communication network and comprises subscriber identity information and/or device identity information related to the user equipment and an indication that an alternative authorization method and/or an alternative authentication method is to be applied to the user equipment; verifying, by the communication network, based on the subscriber identity information and/or the device identity information related to the user equipment, that the user equipment belongs to an internet-of-things user equipment type; and in response to verifying that the user equipment belongs to the internet-of-things user equipment type, granting, by the communication network, the requested service to the user equipment.

Abstract: A system for early predicting of impending data overflow situations in data networks, comprising one or more sensors being networked computers that do not provide services, for collecting monitored data regarding network traffic volume from content providers to an Internet Service Provider (ISP) entering or exiting the ISP via peering autonomous systems connected to the ISP via physical links; one or more processors executing one or more deep learning models, being adapted to: identify over the data network being handovers alternative peering links, which are not inherent Private Network Interconnects (PNI) between the content providers and the ISP; determine static or dynamic threshold for dataflow anomaly associated with overflow; for each alternative handover, predict impending overflow situation by applying ML algorithms to the collected data that corresponds to the each alternative handover.

Abstract: A method for distributed service management includes; running, by client nodes and service provider nodes, respective instances of a distributed service management unit, wherein the distributed service management unit comprises a distributed hash set table (DHST); providing, by the distributed service management unit, an application programming interface (API), wherein all connections between a client node and a service provider node are tunneled through the API; registering, by a service provider, a service on a network node; storing, by the registering network node, an endpoint of the service in a dataset of the DHST with a key corresponding to the service; requesting, by the client node, the service; and returning, by the distributed service management unit, all endpoints stored in the DHST with the key corresponding to the service.

Abstract: A method for domain name resolution includes: requesting, by an access device, via a resolving request, an IP address based on a present domain name or a domain name based on a present IP address, wherein the access device is configured to have multipath access to a data network via at least two access paths; generating, by the access device, an initial domain name query based on the resolving request; duplicating, by the access device, the initial domain name query into at least two multiplied domain name queries; sending, by the access device, each of the at least two multiplied domain name queries to a respective name server; and receiving, by the access device, a domain name response comprising the requested IP address or the requested domain name from each respective name server.

Abstract: An authorization method for releasing or blocking resources includes, in case there is no connection between a provider and a resource owner: wirelessly transmitting a resource request from a client to the provider via an agent; wirelessly transmitting an authorization request from the provider to the client via the agent; wirelessly transmitting the authorization request from the client to the resource owner; wirelessly transmitting a receipt comprising an authorization response from the resource owner to the client; wirelessly transmitting the receipt from the client to the provider; and releasing or blocking a first resource in accordance with the authorization response comprised in the receipt.

Abstract: A method for controlling access to a facility includes: an identification process, an authorization process, and an application process. Access to the facility is blocked by a lock that is openable by a person with an authorized key. A system for controlling access to the facility includes a first security ring formed by data-conductive connections between an electronic reader, an identity server, and an access server; a second security ring is formed by data-conductive connections between the electronic reader, the access server, and a terminal; and a third security ring formed by data-conductive connections between the access server, the terminal, and the lock.

Abstract: A method includes: a) provisioning at least one latency critical application; b) determining mean latency and mean throughput which are required by a respective latency critical application, and assigning the determined mean latency and mean throughput to a reference point value; c) allocating the reference point value to the respective latency critical application; d) calculating via a time variable point value function an actual point value for the respective latency critical application; e) comparing the reference point value with the actual point value; f) determining a difference value between the reference point value and the actual point value; g) repeating steps d) to f) for a subset of points in time within the time interval; h) summing up all difference values determined in step f) for all points in time of the subset; and i) continuously optimizing current use of resources in the cell.

Abstract: A Universal Packet Signaling Messaging System (UPSMS) system extends a message received from a messaging system based on a message signaling protocol extension that extends the message signaling protocol by including an indication that the UPSMS service is supported for a respective subscriber, and forwards the extended message to a subscription and location server. The subscription and location server authenticates a subscriber based on the subscriber identity, identifies a packet core network, and delivers the extended message via the identified packet core network to a user equipment (UE).

Abstract: A method for transmitting data messages between endpoints of a telecommunication network includes: transmitting, by a sending endpoint of the telecommunication network, a data message to a messaging system of the telecommunication network; receiving, by a messaging proxy of the messaging system, the data message; and forwarding, by the messaging proxy, the data message to a data queue or a data topic provided by a message bus of the messaging system.

Abstract: A communication device for transmitting a Transmission Control Protocol (TCP) segment over a communication network using a Multipath Transmission Control Protocol (MPTCP) includes: a communication interface configured to establish an MPTCP data flow comprising a plurality of data sub-flows to a further communication device, and to receive a priority indicator from a network entity, wherein the priority indicator indicates a respective priority of a respective data sub-flow; and a scheduler configured to select, for the TCP segment, a data sub-flow from the plurality of data sub-flows based on the priority indicator. The communication interface is further configured to transmit the TCP segment via the selected data sub-flow to the further communication device.

Abstract: A method for decreasing a Call Setup Time Key Performance Indicator (CST KPI) of an Internet Protocol (IP) multimedia call in a mobile telecommunications network includes: initiating the IP multimedia call from an originating user equipment (UE) to a terminating UE; transmitting a session initiation protocol (SIP) call initiation message from the originating UE to a terminating Proxy-Call Session Control Function (P-CSCF) through an originating Serving-Call Session Control Function (S-CSCF); and creating a wake-up message via a network element upon receiving the SIP call initiation message. The wake-up message bypasses a plurality of network application servers (ASs) to start switching a transition of the terminating UE from an idle state to a connected state before the SIP call initiation message reaches the terminating P-CSCF.

Abstract: A method for authenticating a mobile identity (ID) is provided. The mobile ID is provided on an end device of a user. Personal information about the user is first brought into anonymized form via a one-way function known to the end device of the user and to a first entity and transmitted with a single mobile ID certificate to the first entity. A communication exchange between the end device of the user and the first entity is henceforth identified by this mobile ID certificate. At a later point in time, the user is provided a permission option to transmit the personal information in non-anonymized form to the first entity. The first entity uses the then transmitted non-anonymized personal information to check its anonymized form.

Abstract: Method for discovering handover capabilities of a mobile communication network includes: receiving, by a user equipment, handover capability information from the mobile communication network, wherein the user equipment communicates with a core network using either a first or a second radio access technology; and based on the first radio access technology being used, initiating handover, by the user equipment, from the first to the second radio access technology when the handover capability information indicates a capability of the mobile communication network to support a handover from the first to the second radio access technology; and/or based on the second radio access technology being used, initiating handover, by the user equipment, from the second to the first radio access technology when the handover capability information indicates a capability, of the mobile communication network to support a handover from the second radio access technology to the first radio access technology.

Abstract: A method for enabling a charging of packet switched data transfer between an authorized customer and a network. The method includes transferring a total data volume via at least a first data path and a second data path between an equipment related to the authorized customer and a hybrid access aggregation point (HAAP) as an access to the network. Each of the at least a first data path and a second data bath use a different access technology for transferring its respective part of the total data volume. The total data volume is determined as a sum of the respective parts of the total data volume transferred in both the first path and the second path. The total data volume is used by a central charging unit for a charging.

Abstract: A 5G communication system includes at least one visited network slice; a home network slice; and a bridge entity. The at least one visited network slice comprises a visited radio access network (RAN) entity. The home network slice comprises a home Access and Mobility Management Function (AMF) entity. The bridge entity coupled between the visited RAN entity and the home AMF entity, wherein the bridge entity is configured to route a registration request message of a roaming user equipment (UE) received from the visited RAN entity to the home AMF entity.

Abstract: A radio access network (RAN) slice provides radio access to a communication network for a user equipment. The RAN slice is uniquely identified by a RAN slice identifier. The RAN slice includes: a base station for providing access to the RAN slice for the user equipment; an access and mobility management function (AMF) entity configured to handle the RAN slice identifier identifying the RAN slice; and a session management function (SMF) entity configured to handle data communications of the user equipment over the RAN slice. The base station is configured to receive an attach request originating from the user equipment to connect to the RAN slice, and to reject access to the RAN slice in response to the attach request not comprising the RAN slice identifier.

Abstract: A method for operating a mobile radio network includes: providing, by a network management entity, a first logic subnetwork of the mobile radio network to enable a mobile communication device with a subscription for the mobile radio network to communicate via the first logic subnetwork of the mobile radio network; and providing, by the network management entity, a second logic subnetwork of the mobile radio network to enable a roaming mobile communication device with a subscription for another mobile radio network to communicate via the second logic subnetwork of the mobile radio network.

Abstract: A network management entity for a communication network includes: a processor configured to operate a logic subnetwork in the communication network, wherein the logic subnetwork is configured to enable a first communication device to communicate via the logic subnetwork and to provide the first communication device with further resources of the logic subnetwork; and a communication interface configured to receive a position signal indicating a position of a second mobile communication device. The processor is further configured to incorporate the second mobile communication device in the logic subnetwork to provide the logic subnetwork with at least one resource of the second mobile communication device if the position of the second mobile communication device is within a defined position range.

Abstract: A Session Initiation Protocol (SIP)-based network includes at least two SIP user agents, wherein each SIP user agent is configured to act as a user agent client (UAC) for requesting a service function and as a user agent server (UAS) for responding to a request service function. The UAC is configured to initiate a registration with the UAS, wherein the registration comprises a field for indicating infinity registration capability and a field for indicating management communication capability. The UAS is configured to send to the UAC, a registration expiry timer with a value equal to infinity and a management header including a onetime unique token.

Abstract: A method for establishing a roaming connection over a bootstrap server includes: transmitting, by a communication terminal, a registration request to a network access entity of a visited communication network, wherein the registration request comprises an identification of the communication terminal; forwarding, by the network access entity, the registration request to a bootstrap server of the visited communication network; transmitting, by the bootstrap server, network access data for accessing the visited communication network to the communication terminal based on the identification of the communication terminal, wherein the network access data indicates capabilities of the visited communication network; and establishing, by the communication terminal, the roaming connection via the visited communication network based on the network access data.