Abstract: It is disclosed a method and system for managing a home gateway with mobile connectivity to a WAN, wherein a management server activates the home gateway only if its current position matches a location to which use of the home gateway shall be bound as selected by the user. In order to select such location, a client application executed by the personal mobile device of the user requests the user to place the personal mobile device next to the home gateway and detect its own current position. The client application then requests the user to confirm that the detected current position of the personal mobile device is the location to which use of the home gateway shall be bound. The detected current position of the personal mobile device is then sent to the management server, which uses it to determine whether the home gateway may be activated.

Abstract: A method and system for managing a mobile device entering a wireless coverage area of a home gateway connected to a WAN through a mobile communication network is provided. As the mobile device connects to the home gateway via its wireless interface, the home gateway requests an onloading token for the mobile device from a management server cooperating with the mobile communication network. The management server releases the onloading token and sends it to the home gateway, which forwards it to the mobile device. The mobile device receives the onloading token from the home gateway, and in reply thereto, disconnects from the home gateway and starts exchanging mobile data traffic with the WAN through the mobile communication network via its mobile interface.

Abstract: Provided is a method for determining positions of one or more target receivers, wherein the one or more target receivers and one or more reference receivers receive a plurality of signals transmitted at unknown times from a plurality of sources that are located at unknown positions and not synchronized with each other. The method includes: obtaining times of arrival of the plurality of signals at the one or more target receivers; obtaining a plurality of times of arrival of the plurality of signals at the one or more reference receivers; and computing, based on the plurality of times of arrival of the plurality of signals at the one or more reference receivers, a plurality of reference positions of the one or more reference receivers, and the times of arrival of the plurality of signals at the one or more target receivers. The method may include determining directions of the plurality of sources.

Abstract: A method and system for managing a mobile device entering a wireless coverage area of a home gateway connected to a WAN through a mobile communication network is provided. As the mobile device connects to the home gateway via its wireless interface, the home gateway requests an onloading token for the mobile device from a management server cooperating with the mobile communication network. The management server releases the onloading token and sends it to the home gateway, which forwards it to the mobile device. The mobile device receives the onloading token from the home gateway, and in reply thereto, disconnects from the home gateway and starts exchanging mobile data traffic with the WAN through the mobile communication network via its mobile interface.

Abstract: Provided is a method for determining positions of one or more target receivers, wherein the one or more target receivers and one or more reference receivers receive a plurality of signals transmitted at unknown times from a plurality of sources that are located at unknown positions and not synchronized with each other. The method includes: obtaining times of arrival of the plurality of signals at the one or more target receivers; obtaining a plurality of times of arrival of the plurality of signals at the one or more reference receivers; and computing, based on the plurality of times of arrival of the plurality of signals at the one or more reference receivers, a plurality of reference positions of the one or more reference receivers, and the times of arrival of the plurality of signals at the one or more target receivers. The method may include determining directions of the plurality of sources.

Abstract: It is disclosed a method and system for managing a home gateway with mobile connectivity to a WAN, wherein a management server activates the home gateway only if its current position matches a location to which use of the home gateway shall be bound as selected by the user. In order to select such location, a client application executed by the personal mobile device of the user requests the user to place the personal mobile device next to the home gateway and detect its own current position. The client application then requests the user to confirm that the detected current position of the personal mobile device is the location to which use of the home gateway shall be bound. The detected current position of the personal mobile device is then sent to the management server, which uses it to determine whether the home gateway may be activated.

Abstract: A method for authenticating a user of a user equipment provided with a mobile cellular network card module in a public wireless network. The method includes, during an authentication procedure following an attempt by the user to access the public wireless network with the user equipment for availing of services provided by the public wireless network: retrieving from the mobile cellular network card module a code that uniquely identifies such mobile cellular network card module; retrieving from a database wireless credentials of the user associated with said retrieved code that uniquely identifies such mobile cellular network card module; providing said retrieved wireless credentials of the user to the public wireless network; and granting the user access to the public wireless network conditioned to the correctness of the provided wireless credentials.

Abstract: A method for authenticating a user of a user equipment provided with a mobile cellular network card module in a public wireless network. The method includes, during an authentication procedure following an attempt by the user to access the public wireless network with the user equipment for availing of services provided by the public wireless network: retrieving from the mobile cellular network card module a code that uniquely identifies such mobile cellular network card module; retrieving from a database wireless credentials of the user associated with said retrieved code that uniquely identifies such mobile cellular network card module; providing said retrieved wireless credentials of the user to the public wireless network; and granting the user access to the public wireless network conditioned to the correctness of the provided wireless credentials.

Abstract: A method to perform a mobile payment by a mobile user device. The method includes, at the mobile user device: retrieving information indicative of a payment account of a recipient of the payment; acquiring an image of a displayed amount to pay and retrieving the amount to pay on the basis of the acquired image; and based on the retrieved information, performing the payment of the retrieved amount to pay to the recipient's payment account.

Abstract: A method of displaying user-related information to a user on a display of a user's mobile telephony handset, including modifying a content of a file resident in a subscriber identification module operatively associated with the user's mobile telephony handset and used to store a name of a mobile telephony operator, said modifying comprising writing in said file the user-related information to be displayed.

Abstract: A digital memory such as a memory card for mobile communication equipment, is adapted to be accessed by a plurality of users and have protected data stored therein. The memory is dynamically partitionable in private memory areas for storing data therein and has associated therewith a secrecy tool for securely allocating to the users respective private areas and permitting the users to access the respective private areas via a secure session channel to perform read/write commands in the respective private areas. Typically, the memory/card includes: a card interface controller for managing a physical communication layer between the digital memory and external host equipment, an internal memory having associated therewith a hardware lock to control access to the internal memory, a set of cryptographic modules to manage the secure session channel between the users and the digital memory, and a memory certificate for certifying a public key associated with the digital memory.

Abstract: A method of secure management of data records stored in an RFID (Radio Frequency Identification) tag includes data fields whose contents are provided by different parties. Some of the data-fields contain public information data accessible to authorized end users. The data records are stored in encrypted form by encrypting data provided by different parties with different keys so as to set different access rights for contents providers and end users. The end users are supplied only with the keys allowing access to information data fields, whereas proprietary data are accessible only to the data owners. The keys are provided to the users in encrypted form.

Abstract: A method of displaying user-related information to a user on a display of a user's mobile telephony handset, including modifying a content of a file resident in a subscriber identification module operatively associated with the user's mobile telephony handset and used to store a name of a mobile telephony operator, said modifying comprising writing in said file the user-related information to be displayed.

Abstract: Access to resources is controlled via a mobile terminal operatively connected to a network operator, wherein the mobile terminal has an associated authentication module configured for authenticating the mobile terminal with the network operator. The method includes the steps of providing in the mobile terminal at least one facility having authentication capability and adapted for accessing the resources, and authenticating the authentication module with the at least one facility, whereby the at least one facility is authenticated with the network operator via the authentication module.

Abstract: A method of secure management of data records stored in an RFID (Radio Frequency Identification) tag includes data fields whose contents are provided by different parties. Some of the data-fields contain public information data accessible to authorised end users. The data records are stored in encrypted form by encrypting data provided by different parties with different keys so as to set different access rights for contents providers and end users. The end users are supplied only with the keys allowing access to information data fields, whereas proprietary data are accessible only to the data owners. The keys are provided to the users in encrypted form.

Abstract: A digital memory such as a memory card for mobile communication equipment, is adapted to be accessed by a plurality of users and have protected data stored therein. The memory is dynamically partitionable in private memory areas for storing data therein and has associated therewith a secrecy tool for securely allocating to the users respective private areas and permitting the users to access the respective private areas via a secure session channel to perform read/write commands in the respective private areas. Typically, the memory/card includes: a card interface controller for managing a physical communication layer between the digital memory and external host equipment, an internal memory having associated therewith a hardware lock to control access to the internal memory, a set of cryptographic modules to manage the secure session channel between the users and the digital memory, and a memory certificate for certifying a public key associated with the digital memory.

Abstract: Access to resources is controlled via a mobile terminal operatively connected to a network operator, wherein the mobile terminal has an associated authentication module configured for authenticating the mobile terminal with the network operator. The method includes the steps of providing in the mobile terminal at least one facility having authentication capability and adapted for accessing the resources, and authenticating the authentication module with the at least one facility, whereby the at least one facility is authenticated with the network operator via the authentication module.

Abstract: The present invention relates to a system (10) and method for making electronic circuits comprising elements or elementary circuit blocks which can be implemented either in the form of physical circuits, for instance FPGA, or in the form of firmware, for instance memorised on microprocessor. Thanks to the methodology used to describe the circuit blocks (26a, 26b) and their functional models (21), the system (10) and method allow to execute with a WS (11) and an emulator subsystem (30), in a single integrated environment, both the functional simulation of the model of complex electronic circuit and the emulation of the electronic circuit itself. Moreover, thanks to the characteristics of intrinsic congruence between the circuit blocks (26a, 26b) and their models (21), the emulation of the complex electronic circuit can be effected using alternatively circuit blocks implemented on the emulator subsystem either in the form of hardware (26a) or in the form of firmware (26b).