Abstract: Provided is a method for automatically registering a user on a field device for the purpose of administering the field device, including a) providing user information on the basis of an identity of the user and an identity of the field device by a security device; b) transmitting the provided user information to a mobile device of the user; c) generating field-device-specific registration information on the basis of the transmitted user information by the mobile device; and d) registering the user on the field device by the generated registration information. This method has the particular advantage that a highly secure infrastructure can be used for administering access information for administering the field devices without problems arising during the registration process.

Abstract: An engineering system for engineering, programming and/or configuring industrial automation components and particularly engineering, programming and/or configuring security related features of automation components in automation projects, automation components, automation component databases, receiving tools, a computer program, a data carrier signal and a method for facilitating the provision of automation component configurations for automation components of an industrial automation project, wherein the method especially focuses on security aspects of automation projects, and wherein automation component description data comprising functionality parameters for configuring functionality of the automation components and security parameters for configuring security functions of the automation components are determined and, based on the industrial automation project, a functionality parameter setting for the functionality parameters and a security parameter setting for the security parameters is determined To f

Abstract: Provided is a method for automatically registering a user on a field device for the purpose of administering the field device, including a) providing user information on the basis of an identity of the user and an identity of the field device by a security device; b) transmitting the provided user information to a mobile device of the user; c) generating field-device-specific registration information on the basis of the transmitted user information by the mobile device; and d) registering the user on the field device by the generated registration information.

Abstract: Provided are methods and to-devices for increasing the reliability of a software by applying a patch to the software, wherein the application of the patch is performed if a specifiable reliability status is indicated by reliability information associated with the patch, wherein an indicator for successful increasing of the reliability of the software by application of the patch is represented by the reliability information. The methods and devices can be used for the maintenance of industrial installations.

Abstract: Provided are methods and to-devices for increasing the reliability of a software by applying a patch to the software, wherein the application of the patch is performed if a specifiable reliability status is indicated by reliability information associated with the patch, wherein an indicator for successful increasing of the reliability of the software by application of the patch is represented by the reliability information. The methods and devices can be used for the maintenance of industrial installations.

Abstract: A method of protecting an identity of a mobile station in a communications network is provided, where the communications network includes an access node and a gateway node. The method includes receiving a first mobile station identifier value at the access node, storing the first value in the access node, receiving a second mobile station identifier value, correlating the second identifier value with the first identifier value in the access node, sending the first and second identifier values from the access node to the gateway node over an interface, storing the first identifier value and the second identifier value in the gateway node, and correlating the second identifier value with the first identifier value in the gateway node.

Abstract: It is disclosed a method including providing a relation of network access technology-specific identification information (NATSII) of a user equipment or user and network identity-related information (NIRI) of the user equipment, receiving an inquiry comprising network identity-related inquiry information (NIRII), resolving the received NIRII based on the provided relation, and sending a response including the NATSII according to a result of the resolved NIRII; a method including receiving a registration request comprising NIRII from a user equipment or user, obtaining NATSII based on the received NIRII, appending the received NIRII with the obtained NATSII, and sending the appended NIRII; and a method including receiving a registration request comprising first NATSII and NIRI, obtaining second NATSII based on the received NIRI, matching the received first NATSII against the obtained second NATSII, and authorizing access for a user equipment based on a result of matching.

Abstract: An access specific key is provided for securing of a data transfer between a mobile terminal and a node of an access net. For authentication of the mobile terminal, a authentication server generates a session key, from which a basic key is derived and transferred to an interworking-proxy-server. The interworking-proxy-server derives the access specific key from the transferred basis key and provides the key to the node of the access net.

Abstract: A counter status that is allocated to a communication terminal and a base station is usually deleted when the storage space in the respective base station is used up. To address this, the counter status is saved in an additional communication network element when a predefinable criterion is met, and can thus be retrieved.

Abstract: A method and authentication server provide a mobile key. According to the method, upon receipt of an authentication message (access authentication) that is transmitted when a subscriber logs on to the network, the authentication server extracts a subscriber identification contained in said message and generates a corresponding mobile key, which is stored together with the respective extracted subscriber identification. Upon subsequent receipt of a key request message (key request) that is transmitted when a subscriber registers, the authentication server extracts a mobile identification of the subscriber contained in said message and searches for an identical mobile identification, which can be derived in accordance with a configurable derivation function from a subscriber identification that is stored in the authentication server.

Abstract: A method provides service quality in a WiMAX communication network, and a method selects an access transport resource control function by a guideline decision-making function in a communication network. According to a method for providing service quality on an air interface of an access network in a WiMAX communication network by an application function, the application function aims to provide a user of the WiMAX communication network with a service quality-related application. The desired service quality is signaled by an authentication, authorization and accounting infrastructure of the WiMAX communication network.

Abstract: A method provides service quality in a WiMAX communication network, and a method selects an access transport resource control function by a guideline decision-making function in a communication network. According to a method for providing service quality on an air interface of an access network in a WiMAX communication network by an application function, the application function aims to provide a user of the WiMAX communication network with a service quality-related application. The desired service quality is signaled by an authentication, authorization and accounting infrastructure of the WiMAX communication network.

Abstract: A method provides subscriber-specific activation of network-based mobility management using an authentication server. According to the method, network-based mobility management is enforced, even if the mobile terminal supports terminal-based mobility management. This gives a network provider complete control over mobility management in his network, preventing configuration problems during the configuration of mobile terminals. In the method, after the successful authentication of a subscriber, the authentication server transmits an authentication confirmation message to an authentication client in an access network. The received authentication confirmation message contains an activation attribute for activating network-based mobility management, if the authentication server does not provide a common mobile key for terminal-based mobility management.

Abstract: A method for providing an IP key, for encoding messages between a user terminal MS or a PMIP client and a home agent HA, wherein an authentication server only provides the mobile IP key when the authentication server recognizes, by a correspondingly encoded parameter, that the user terminal MS itself is not using mobile IP (PMIP).

Abstract: In a method and device to automatically update a computer system, such as a controller for industrial systems, which has multiple components, at least one component of the computer system to be updated is associated with a criticality domain from a number of predetermined criticality domains. A criticality level from a number of predetermined criticality levels is associated to at least one software update provided for one of the components of the computer system. The software updates are automatically transferred to the corresponding components of the computer system according to the criticality domain associated with the component, and according to the criticality levels assigned to the software updates.

Abstract: After a radio link is established between a mobile subscriber terminal and an access network, to authenticate the subscriber an authentication proxy server of an intermediate network forwards at least one authentication message containing a subscriber identification between the access network and a home network of the subscriber. If authentication is given by an authentication server of the home network, the authentication proxy server of the intermediate network stores the subscriber identification. The home agent receives a registration request message originating from the subscriber terminal and containing a subscriber identification; the home agent transmits a key request message, containing the subscriber identification, for a mobile key to the relevant authentication proxy server.

Abstract: A method provides service quality in a WiMAX communication network, and a method selects an access transport resource control function by a guideline decision-making function in a communication network. According to a method for providing service quality on an air interface of an access network in a WiMAX communication network by an application function, the application function aims to provide a user of the WiMAX communication network with a service quality-related application. The desired service quality is signaled by an authentication, authorization and accounting infrastructure of the WiMAX communication network.

Abstract: After a radio link is established between a mobile subscriber terminal and an access network, the subscriber is authenticated by a proxy server of an intermediate network forwarding, from the access network to a home network of the subscriber, authentication message(s) containing a subscriber identification. If the subscriber is authenticated and the subscriber identification is already stored in the proxy server, the proxy server assigns a group-specific mobile key to the subscriber identification. When the home agent receives a registration request message originating from a subscriber terminal and containing a subscriber identification and transmits a key request message, containing the subscriber identification, for a mobile key to the proxy server, if the subscriber identification in the key request message matches a subscriber identification stored by the proxy server, a mobile key for cryptographic protection of mobile signalling messages is provided to the home agent by the proxy server.

Abstract: A method of connecting a mobile station to a communications network is provided, and includes performing an authentication of the mobile station at the network. A secure identifier, generated at the mobile station, is received at a gateway node and at an access node from an authentication node of the network if it is determined by the authentication that the mobile station is a subscriber to the network. A first secure communications tunnel is established from the access node to the mobile station using a value of the secure identifier and a second secure communications tunnel is established from the access node to the gateway node of the network using the value of the secure identifier. The first and second communications tunnels are bound together to form a communications path between the mobile station and the network.

Abstract: A method of protecting an identity of a mobile station in a communications network is provided, where the communications network includes an access node and a gateway node. The method includes receiving a first mobile station identifier value at the access node, storing the first value in the access node, receiving a second mobile station identifier value, correlating the second identifier value with the first identifier value in the access node, sending the first and second identifier values from the access node to the gateway node over an interface, storing the first identifier value and the second identifier value in the gateway node, and correlating the second identifier value with the first identifier value in the gateway node.