Abstract: Methods and apparatuses for capillary network device registration implemented in a wireless transmit/receive unit (WTRU) are disclosed. Registration or bootstrap messages may be received by a capillary network device where the WTRU acts as a gateway for communication between the capillary device and a network such as a 3GPP network. A capillary network device identifier (CNDID) is sent to the capillary device. A packet data protocol (PDP) context or PDN connection may be established with the network and the CNDID may be sent to a machine type communications (MTC) server. The WTRU may create the registration message, establish a connection with the network, and forward the registration message to the MTC server. Methods and apparatuses implemented in a network are also disclosed for identifying, addressing, and triggering the capillary devices from the MTC server. The trigger message may include fields for group communication, reducing signaling, and enabling charging.

Abstract: The Generic Bootstrapping Architecture is used in a method for assigning the bootstrapping transaction ID so that a machine-to-machine server or other device can locate and communicate with a bootstrapping server function. The bootstrapping server function assigns the bootstrapping transaction ID and updates a DNS server with an entry that maps the bootstrapping transaction ID to a network node IP Address.

Abstract: Methods, systems, and devices may be used to support freshness-based processing of requests. Freshness-based processing may involve the service layer examining the age of stored content (e.g., resource representation) that it hosts and determining whether it is fresh enough to satisfy a retrieve or discovery request with a specified freshness requirement. If not fresh, the service layer can contact an application to refresh the content. In addition, freshness-based processing can also involve the service layer examining the semantic state of a command oriented update request to determine whether its state is fresh or not with respect to prior commands processed by the service layer. For example, the service layer may compare stored content associated with controlling a particular application (e.g. door is locked) and against the semantic content of an update request (e.g., unlock door) to determine whether it is the same (e.g., stale) or not (e.g., fresh).

Abstract: Many internet of things (IoT) are “sleepy” and thus occasionally go into a sleep mode. As described herein, nodes in a connected network of nodes may determine that other nodes in the network are sleepy. Further, nodes, such as endpoint devices and routers for example, may process packets in the network based on a reachability state of their neighboring nodes.

Abstract: An method for M2M communications and an M2M node are disclosed. The M2M node provides a communication management function for communication between a first service layer in a first network and a second service layer in a second network. The M2M node receives a first message from a first application in the first service layer. The first message encapsulates a second message. The M2M node determines based on at least a first attribute identifying an expiration time after which the communication management function does not facilitate communication, that the communication management function is available to process the first message. The M2M node determines based on at least a second attribute defining an access control list identifying applications in the first service layer for which the communication management function may provide processing, that the communication management function is available to process the first message from the first application.

Abstract: A machine to machine (M2M) gateway (GW) comprises at least one processor configured to determine registration attributes for a registration service, for a plurality of M2M devices, that comprise an M2M device identification for each of the plurality of M2M devices permitted to register with the M2M GW. The at least one processor is configured to receive a registration request from one of the M2M devices to register with the M2M GW. The at least one processor is configured to determine, using the registration service, whether to register the requesting M2M device by comparing the registration request to the registration attributes. The at least one processor is configured to register the requesting M2M device with the M2M GW. The at least one processor is configured to communicate with the requesting M2M device to provide the requesting M2M device with an M2M common service capability.

Abstract: Mechanisms support machine-to-machine service layer sessions that can span multiple service layer hops where a machine-to-machine service layer hop is a direct machine-to-machine service layer communication session between two machine-to-machine service layer instances or between a machine-to-machine service layer instance and a machine-to-machine application. Mechanisms are also disclosed that illustrate machine-to-machine session establishment procedures for one M2M Session Management Service supporting multiple resources.

Abstract: Disclosed herein are a variety of devices, methods, and systems for load balancing in the internet of things. Devices and other entities can be grouped together in a load balancing group and traffic for such devices balanced according to load balancing criteria. Groups may be discovered, created, manipulated, and deleted by various entities.

Abstract: In a machine-to-machine/Internet-of-things environment, end-to-end authentication of devices separated by multiple hops is achieved via direct or delegated/intermediated negotiations using pre-provisioned hop-by-hop credentials, uniquely generated hop-by-hop credentials, and-or public key certificates, whereby remote resources and services may be discovered via single-hop communications, and then secure communications with the remote resources may be established using secure protocols appropriate to the resources and services and capabilities of end devices, and communication thereafter conducted directly without the overhead or risks engendered hop-by-hop translation.

Abstract: A machine-to-machine (M2M) gateway is configured with a service capability layer (SCL) and includes a storage unit, a network interface and a processor. The storage unit stores rules for allocating resources in a resource tree. The resources include a functions collection resource of function sub-resources, at least one of which represents a function that generates contextual cues from content and a corresponding semantic description. The processor also receives requests to create new function sub-resources in the collection and creates new function sub-resources in the resource tree in response to the requests. The processor receives other requests targeting the new function sub-resources. The processor generates high-level contextual information, using the new function, based on content data and the associated semantic description of the content data received in the other requests, and routes data in the M2M network based on the generated information.

Abstract: Disclosed herein are a variety of devices, methods, and systems for providing virtualization for IoT systems so that IoT physical resources can be flexibly and efficiently shared. Virtualization requests may be processed based on a context-aware approach and various means are disclosed for determined whether and how to virtualize a resource.

Abstract: An M2M entity may retrieve data such that the representation of the data may consistently be returned in a form that can be dynamically specified in order to reduce complexity and overhead required by a requestor or consumer of the data. The semantic descriptions of the data that exist in the service layer may be used in order to provide desired results to the requestor or consumer of the data.

Abstract: A method and apparatus are described for accessing services affiliated with a service provider. A first discovery procedure may be performed to discover at least one service provider, and a bootstrap procedure may be performed with the at least one discovered service provider. A second discovery procedure may then be performed to determine available service capability layers (SCLs) supported by the at least one discovered service provider. The first discovery procedure may include transmitting a service provider discovery request including information for querying a record database to determine matching service provider discovery records, and receiving a service provider discovery response including a service discovery function record list that matches queries in the service provider discovery request. At least one service provider from the service discovery function record list may be selected to bootstrap with. Various versions of the second discovery procedure are described.

Abstract: Systems, methods, and instrumentalities are provided to determine routing associated with a short message. A SMS-SC may send a first routing request to a home subscriber server (HSS). The first routing request may be associated with the short message. The SMS-SC may receive a first routing reply. The first routing reply may include one of an indication that the short message is associated with a service capability server (SCS) or a first control plane routing associated with the short message. The SMS-SC may send the short message to an SCS serving node. The first routing reply may include the indication that the short message is associated with a service capability server (SCS). The SMS-SC may send a second routing request to a SCS subscription database. The SMS-SC may receive a second routing reply from the SCS subscription database, which may indicate a second control plane routing for the short message.

Abstract: An IoT E2E Service Layer Security Management system supports methods/procedures to allow an application to establish, use, and teardown an IoT SL communication session that has application specified E2E security preferences and that targets one or more SL addressable targets (e.g. an IoT application, device, or gateway SL addressable resource). E2E SL Session based methods/procedures achieve a required overall E2E security level, by allowing IoT SL instances to influence and coordinate hop security for a multi-hop communication path spanning across multiple intermediary nodes. Methods/procedures reduce overhead, simplify and obviate the need for E2E service level nodes (initiation/termination nodes) from having to perform security service negotiation, in order to establish secure hop-by-hop security associations aligned with an E2E security requirement.

Abstract: A variety of mechanisms to perform End-to-End authentication between entities having diverse capabilities (E.g. processing, memory, etc.) and with no prior security associations are used. Security provisioning and configuration process is done such that appropriate security credentials, functions, scope and parameters may be provisioned to an Entity. Mechanisms to distribute the security credentials to other entities which could then use the credentials to perform an End-to-End authentication at the Service Layer or the Session Layer and using Direct or Delegated modes are developed.

Abstract: Techniques are disclosed for Machine-to-Machine (M2M) Announce procedures that allow advertisement machine-to-machine service capabilities layer resources and subresources. Resource structures and signal flows of the various disclosed embodiments are defined.

Abstract: A method and entities for virtualizing resources by receiving a first virtualization request from a first entity at a virtualization broker in a network of connected entities, wherein the first virtualization request comprises context information associated with the first entity, transmitting a request from the virtualization broker to a virtualization manager for a virtualization server identifier, and receiving a virtualization server identifier from the virtualization manager. A second virtualization request may be transmitted to a virtualization server associated with the virtualization server identifier, and a first response may be received from the virtualization server comprising an indication that a resource has been virtualized. A second response comprising the indication from the virtualization broker may be transmitted to the first entity. The method is applied in the context of the Internet of Things (IoT).

Abstract: In a machine-to-machine/Internet-of-things environment, end-to-end authentication of devices separated by multiple hops is achieved via direct or delegated/intermediated negotiations using pre-provisioned hop-by-hop credentials, uniquely generated hop-by-hop credentials, and-or public key certificates, whereby remote resources and services may be discovered via single-hop communications, and then secure communications with the remote resources may be established using secure protocols appropriate to the resources and services and capabilities of end devices, and communication thereafter conducted directly without the overhead or risks engendered hop-by-hop translation.

Abstract: Systems and/or methods for providing internetworking among application services layers (ASLs) of different network technologies may be provided. For example, a tunnel anchor point (TAP) may be established. The TAP may be configured to enable communication between a local application in the network and a remote application in a different network. At the TAP, an ASL tunnel may be created to the local application in the network to facilitate the communication. Additionally, a message from the local application may be received where at least a portion of the message may be configured to be provided to a remote ASL and the remote application in the different network to which the local application wishes to communicate. At least the portion of the message may be provided to the remote ASL and the remote application in the different network.