Abstract: Methods, a user data node (120), a policy node (150), an application node (170) and an operator network (101) for enabling management of an attack towards an application (190) hosted by the application node (170) are disclosed. The policy node (150) receives (3) attack information and an identifier of the application (190) to which the attack information applies. The attack information relates to the management of the attack and the attack information comprises a type of attack, a set of detection conditions relating to detection of attacks of the type of attack, and a mitigation action to be invoked when at least one detection condition of the set of detection conditions is fulfilled. In this manner, degeneration of the application (190) caused by the attacks of the type of attack is mitigatable. The policy node (150) generates (13) at least one rule based on the attack information.

Abstract: Implementation of an application rule for an application to be accessed by a User Equipment, UE, in a user session in a Service Based Architecture, SBA, domain in a core network of a telecommunications system is disclosed. The SBA, among others, comprises a Policy Control Function, PCF (6), an Application Function, AF (5), and a Session Management Function, SMF (9). The method comprising the steps of receiving, by the PCF (6), an application rule comprising an AF Identifier, AF-ID, identifying the application rule, an Application Identifier, App-ID, identifying the application, and at least one service requirement for processing the application in the SBA domain. The PCF (6) instructing the SMF (9) to execute the at least one service requirement to all present and future user sessions pertaining to the respective application. Complementary methods of supporting the execution of the application rule and devices are also presented.

Abstract: Various embodiments of the present disclosure provide a method for traffic detection. The method which may be performed by a first network node includes receiving a message from a second network node. The method further includes determining packet flow description information for traffic detection according to the message. The packet flow description information may indicate a combination criterion for two or more packet flow descriptions, and/or a protocol matching criterion for a domain name in a packet flow description. According to the embodiments of the present disclosure, the packet flow description definition can be extended to support more accurate traffic detection.

Abstract: The invention relates to a method for operating a gateway wherein the method comprises to detect a downlink data packet session transmitted to the first user entity, and to amend the lifetime indicator in at least some of the data packets of the detected downlink data packet session such that the data packets for which the lifetime indicator has been amended, have reached the end of the lifetime and cannot be transmitted further when arriving at the first user entity.

Abstract: method of operating a user plane function UPF node of a core network CN for a communication network is provided. An association message is transmitted to a session management function SMF node of the CN. The association message includes an indication that the UPF node supports a capability to modify session traffic in response to a handover. A session establishment request message is received from the SMF node. The session establishment request message includes an indication to modify session traffic of a protocol data unit PDU session for the communication device in response to handover. Methods relating to session management function SMF nodes and policy control function PCF nodes are also provided.

Abstract: A method for enabling an efficient provisioning of Packet Flow Descriptors (PFD) for the detection of applications in 5GC. The method comprises receiving a PFD together with an application identifier and at least one further parameter, aggregating the PFD with other PFDs of the application identifier sharing the at least one further parameter and storing the aggregated set of PFDs together with the application identifier and at least one further parameter in a user data repository entity. The method further comprises receiving a PFD request including the application identifier and at least one further parameter and transmitting a set of PFDs matching the application identifier and the at least one further parameter. The at least one further parameter comprises at least one of an application version, an operating system identifier, an operating system version, a UE identifier, a UE vendor identifier, or a UE model type.

Abstract: According to an aspect, there is provided a method of operating a session management entity in a communication network. The method comprises sending (901) a first request to a user plane entity in the communication network. The first request relates to UE-to- UE communication and indicates a first set of Internet Protocol, IP, addresses available for allocation to UEs for which UE-to-UE communication is one of blocked or allowed; and at least one subset of the first set of IP addresses for which UE-to-UE communication is the other one of blocked or allowed.

Abstract: A method for providing a policy rule from a User Equipment to a mobile communication system. The method includes establishing a communication channel between the UE and a User Plane entity of the mobile communication system, sending the policy rule through the communication channel from the UE to the UP entity and receiving at the UE from the UP entity an indication of whether the policy rule is accepted or rejected. The UP entity may send the policy rule to a first Control Plane entity for authorization. In turn, the first CP entity may send the policy rule to a second Control Plane entity for authorization. The User Plane entity may be a User Plane Function including a Collaborative Performance Enhancement (COPE) entity.

Abstract: Techniques are provided to enable the SMF or other network node performing UPF selection to determine a computational resource demand, also referred to herein as the computational footprint, associated with a PDU session. The computational footprint can then be used by the SMF or other network node to inform the selection of the UPF.

Abstract: Implementation of an application rule for an application to be accessed by a User Equipment, UE, in a user session in a Service Based Architecture, SBA, domain in a core network of a telecommunications system is disclosed. The SBA, among others, comprises a Policy Control Function, PCF (6), an Application Function, AF (5), and a Session Management Function, SMF (9). The method comprising the steps of receiving, by the PCF (6), an application rule comprising an AF Identifier, AF-ID, identifying the application rule, an Application Identifier, App-ID, identifying the application, and at least one service requirement for processing the application in the SBA domain. The PCF (6) instructing the SMF (9) to execute the at least one service requirement to all present and future user sessions pertaining to the respective application. Complementary methods of supporting the execution of the application rule and devices are also presented.

Abstract: A node of a wireless communication network receives first data indicating a desired quality of experience level for user data traffic of a user of the wireless communication network. Based on a control policy and the desired quality of experience level, the node determines a rule for controlling the user data traffic. Further, the node obtains second data indicating an estimated quality of experience level for the user data traffic subject to control according to the rule. Based on the first data and the second data, the node adapts the control policy, e.g., using a reinforcement learning, RL, mechanism.

Abstract: There is provided mechanisms for enabling discovery of a collaborative proxy node in a 3GPP communication network. A method is performed by a network exposure function. The method comprises obtaining, from a content providing application function, a request for a cooperative performance enhancement service to be performed for application traffic between the application function and a user equipment, the cooperative performance enhancement service being performed by the cooperative performance enhancement node. The method comprises providing, upon having authorized the request, parameters as obtained in the request to a policy control function, thereby enabling discovery of the cooperative performance enhancement node.

Abstract: The embodiments herein relate to optimized procedure for Packet Flow Description (PFD) management. In one embodiment, there proposes a method (800) for managing Packet Flow Description (PFD), comprising: receiving (S801) from a Session Management Function (SFM) (201) or a User Plane Function (UPF) (302) a demand message indicating the demand for at least one PFD mle for an application; detecting (S802) the at least one PFD mle for the application; and notifying (S803) information regarding the at least one PFD rule to the SMF (201) or the UPF (302). The embodiments herein may achieve an optimized procedure for PFD Management which optimizes the delivery of PFD rules, by reducing the amount of signaling and by reducing the number of hops between the producer (AF) and the consumer (UPF).

Abstract: A technique for transmitting and using a session identifier of a session between a user plane gateway and a control plane gateway is disclosed. In a method implementation, a third gateway, GW, in a Control Plane, CP, of an Evolved Packet Core, EPC, transmits, to a fourth GW in the CP, a session identifier of a first session established between a second GW in a User Plane, UP, of the EPC and the third GW, wherein the second GW is co-located with a first GW in the UP and wherein the first GW has a communication interface to the fourth GW. The fourth GW may receive the session identifier from the third GW and provide the session identifier to the first GW. The first GW may receive a data packet, forward the data packet to the second GW and provide, to the second GW, the ession identifier. The second GW may receive the data packet from the first GW and obtain the session identifier from the first GW.

Abstract: A method for operating a policy control entity (100) in a cellular network, the method comprising: —receiving subscriber data comprising a policy with an indication that a conditional Quality-of-Service handling is to be applied to a data packet session exchanged between a user equipment of a subscriber and an application in dependence on at least one condition, the sub-scriber data further comprising a charging indication used for charging the subscriber for the data packet session in dependence on the fact whether the conditional Quality-of-Service handling has been applied to the data packet session, —generating a policy and charging rule for the data packet session, the policy and charging rule comprising the conditional Quality-of-Service handling of the data packet session in dependence on the condition and the charging of the subscriber in dependence on the fact whether the conditional Quality-of-Service handling has been applied or not, —transmitting the generated policy and charging rule to a session

Abstract: The invention relates to a method for operating a gateway wherein the method comprises to detect a downlink data packet session transmitted to the first user entity, and to amend the lifetime indicator in at least some of the data packets of the detected downlink data packet session such that the data packets for which the lifetime indicator has been amended, have reached the end of the lifetime and cannot be transmitted further when arriving at the first user entity.

Abstract: Methods and apparatus are provided to enable a consumer network function (consumer NF) to discover instances of a NWDAF 90 co-located with NFs in the 5GC 30 of a communication network 10. Existing procedures and messages between NFs are leveraged to distribute lists of NWDAFs 90 co-located with a NF, such as a UPF 35, AMF 40 or SMF 45. A NF can provide a list of NWDAF instances for a particular UE 15 that are co-located with either the same NF or a separate producer NF when the communication procedure for the UE 15 is invoked. Over time, the consumer NFs build a database associating the co-located NWDAFs in other NFs with corresponding UEs 15 served by the consumer NF. When the consumer NF needs analytic data for one or more UEs 15 served by the consumer NF, the consumer NF can use a UE ID to look up the co-located NWDAFs for the UE 15 and subscribe with the co-located NWDAF instances to receive analytics data for the UE 15.

Abstract: The invention relates to a method for operating a user equipment (100) requesting a data packet flow from an application entity transmitted through a cellular network to the user equipment, comprising: —transmitting (S20) a first request to a translating entity (700) configured to translate a name of the application entity providing the data packet flow to an address of the application entity through which the application entity can be reached, the first request requesting an identification of a user plane entity (200) configured to handle the data packet flow in the cellular network, —receiving (S24) a response to the first request, the response comprising a user plane identifier identifying the user plane entity (200), —transmitting (S26) a policy request to the identified user plane entity (200), the policy request comprising a flow identifier allowing an identification of the data packet flow in the cellular network, and policy information indicating a policy to be applied to the data packet flow in the c

Abstract: A method implements seamless connection. The method includes receiving a message for a join call request for a client device. The message includes a participant identifier. The method further includes verifying the participant identifier, identifying a call corresponding to the participant identifier, and establishing a connection between the client device and the call.

Abstract: A method implements a synthetic moderator. Utterance text is obtained from a conference call that includes a call context. An intent is identified, from the utterance text, for a command. Contextual data is identifying, from the call context, for the command. The command is executed using the contextual data. A result of executing the command is presented.