Abstract: A method for enabling limitation of service access where a service provider offers at least one service and a user possesses multiple different digital identities that can be used to invoke or register with the service, wherein the user agrees on a secret with a third party entity, assigns counter values to different digital identities used to invoke or register with a service, and requests the service by applying an encryption algorithm on the secret and the counter value assigned to the digital identity employed for the service request, and the third party entity receives the first verification value, applies the encryption algorithm to reconstruct the employed counter value, and provides information on whether the reconstructed counter value exceeds a limit.

Abstract: A method reduces signaling overhead of a mobile node that maintains at least one active Next Steps in Signaling session. The mobile node has a MOBIKE connection to a virtual private network gateway, and changes its link to the Internet. At least the IP address of the VPN gateway and/or an address space corresponding to the subnetwork of the VPN gateway is/are inserted into the message routing information object contained in the NSIS message. A value is defined for a security parameter index. The SPI value is inserted into the MRI object. The S flag is set in the MRI object. An address space that refers to the IP address of the mobile node is inserted into the MRI object.

Abstract: A method and a system for supporting the generation of access control preferences and/or privacy preferences for users in a pervasive service environment, wherein an automated user information management system stores and/or manages personal information items owned by and/or associated to a user, wherein an access control system is provided for processing requests from a pervasive service and/or application that query a set of the user-specific information items being stored in and/or managed by the user information management system, are characterized in that an entity—feedback collector—is provided, the feedback collector being configured to collect individual access control and/or privacy preferences from a plurality of users, to derive a popular rule set of access control and/or privacy preferences from the collected individual access control and/or privacy preferences, and to provide the popular rule set of access control and/or privacy preferences to users of the pervasive service environment.

Abstract: A method for enabling limitation of service access, wherein a service provider offers at least one service and a user possesses multiple different digital identities that can be used to invoke or register with the service, access to the service requiring an account at a third party entity, the user registers his digital identities with the account and agrees on a secret with the third party entity, the method including: the user assigning to his different digital identities counter values, the user requesting the service employing a specific digital identity and calculating a verification value—first verification value v1—by applying an encryption algorithm on the secret and the counter value assigned to the digital identity employed for the service request, the third party entity receiving the first verification value, applying the encryption algorithm to reconstruct the employed counter value and providing information on whether the reconstructed counter value exceeds a limit.

Abstract: A method reduces signaling overhead of a mobile node that maintains at least one active Next Steps in Signaling session. The mobile node has a MOBIKE connection to a virtual private network gateway, and changes its link to the Internet. At least the IP address of the VPN gateway and/or an address space corresponding to the subnetwork of the VPN gateway is/are inserted into the message routing information object contained in the NSIS message. A value is defined for a security parameter index. The SPI value is inserted into the MRI object. The S flag is set in the MRI object. An address space that refers to the IP address of the mobile node is inserted into the MRI object.