Abstract: Embodiments described herein provide methods and apparatuses for providing a network function, NF, service producer access to a key set, wherein the key set is for use in verifying an access token received from an NF service consumer. A method in a network repository function, NRF, comprises receiving a request from the NF service producer to provide an indication of services provided by the NRF; and responsive to the request, transmitting a first address where the key set can be retrieved, as part of an indication of an authorization service.

Abstract: A Policy Control Function, PCF, for use in a 5G core network, is configured to allow a consumer to retrieve from the PCF subscriber session information and Application Detection and Control rules relating to a subscriber session. Specifically, the PCF is configured to: receive (303) a request from a Session Management Function, SMF, for session management policies applying to the subscriber session; retrieve (305) policy data from a Unified Data Repository, UDR; and, based on the retrieved policy data, generate said Application Detection and Control rules relating to the subscriber session, and send (307) said Application Detection and Control rules to the TDF, thereby allowing the TDF to act as the consumer.

Abstract: Embodiments described herein provide methods and apparatuses for providing a network function, NF, service producer access to a key set, wherein the key set is for use in verifying an access token received from an NF service consumer. A method in a network repository function, NRF, comprises receiving a request from the NF service producer to provide an indication of services provided by the NRF; and responsive to the request, transmitting a first address where the key set can be retrieved, as part of an indication of an authorization service.

Abstract: Methods, a user data node (120), a policy node (150), an application node (170) and an operator network (101) for enabling management of an attack towards an application (190) hosted by the application node (170) are disclosed. The policy node (150) receives (3) attack information and an identifier of the application (190) to which the attack information applies. The attack information relates to the management of the attack and the attack information comprises a type of attack, a set of detection conditions relating to detection of attacks of the type of attack, and a mitigation action to be invoked when at least one detection condition of the set of detection conditions is fulfilled. In this manner, degeneration of the application (190) caused by the attacks of the type of attack is mitigatable. The policy node (150) generates (13) at least one rule based on the attack information.

Abstract: A Policy Control Function, PCF, for use in a 5G core network, is configured to allow a consumer to retrieve from the PCF subscriber session information and Application Detection and Control rules relating to a subscriber session. Specifically, the PCF is configured to: receive (303) a request from a Session Management Function, SMF, for session management policies applying to the subscriber session; retrieve (305) policy data from a Unified Data Repository, UDR; and, based on the retrieved policy data, generate said Application Detection and Control rules relating to the subscriber session, and send (307) said Application Detection and Control rules to the TDF, thereby allowing the TDF to act as the consumer.

Abstract: Methods, a policy node, an application node, a storage node and an operator network for enabling filtering of traffic from an application hosted by the application node are disclosed. The policy node receives, from the application node, application content information relating to the filtering of the traffic and an identifier of the application to which the application content information applies, wherein the application content information comprises an indication relating to application content category of the traffic, and wherein the application content information comprises one or more of an adaptability indicator specifying whether the application is able to adapt the traffic to a given user content category, and a notification indicator specifying whether the application is able to notify, to the policy node, an application content category before providing requested traffic. The policy node further transmits, by the policy node to the storage node, the application content information.

Abstract: A method of supporting Adaptive Bit Rate, ABR, video resolution shaping of a video data stream of a video session transferred by a User Plane Function, UPF, in a Service Based Architecture, SBA, domain. The video resolution shaping is performed by the UPF implementing a Reinforcement Learning Agent, RLA, operating with an observation space having a determined video resolution of a received video data stream, a reward space having a reward referring to a required video resolution, and an action space having video resolution shaping levels to be applied at the received video data stream. Complementary methods and devices for performing such a method in an SBA domain deployed in a telecommunications system are disclosed.

Abstract: A method of supporting Adaptive Bit Rate, ABR, video resolution shaping of a video data stream of a video session transferred by a User Plane Function, UPF, in a Service Based Architecture, SBA, domain. The video resolution shaping is performed by the UPF implementing a Reinforcement Learning Agent, RLA, operating with an observation space having a determined video resolution of a received video data stream, a reward space having a reward referring to a required video resolution, and an action space having video resolution shaping levels to be applied at the received video data stream. Complementary methods and devices for performing such a method in an SBA domain deployed in a telecommunications system are disclosed.

Abstract: Methods, a policy node, an application node, a storage node and an operator network for enabling filtering of traffic from an application hosted by the application node are disclosed. The policy node receives, from the application node, application content information relating to the filtering of the traffic and an identifier of the application to which the application content information applies, wherein the application content information comprises an indication relating to application content category of the traffic, and wherein the application content information comprises one or more of an adaptability indicator specifying whether the application is able to adapt the traffic to a given user content category, and a notification indicator specifying whether the application is able to notify, to the policy node, an application content category before providing requested traffic. The policy node further transmits, by the policy node to the storage node, the application content information.

Abstract: Methods, a user data node (120), a policy node (150), an application node (170) and an operator network (101) for enabling management of an attack towards an application (190) hosted by the application node (170) are disclosed. The policy node (150) receives (3) attack information and an identifier of the application (190) to which the attack information applies. The attack information relates to the management of the attack and the attack information comprises a type of attack, a set of detection conditions relating to detection of attacks of the type of attack, and a mitigation action to be invoked when at least one detection condition of the set of detection conditions is fulfilled. In this manner, degeneration of the application (190) caused by the attacks of the type of attack is mitigatable. The policy node (150) generates (13) at least one rule based on the attack information.

Abstract: A policy server (e.g., Policy and Charging Rules Function), a policy enforcement device (e.g., Policy and Charging Enforcement Function, Traffic Detection Function), and various methods are described herein for dynamically excluding active service add-ons from bearer throttling for user terminals. The active service add-on indicates that bandwidth of the service traffic associated with a corresponding service is to be limited to a defined value after the user terminal consumes a defined amount of data associated with the corresponding service during a defined time period. The bearer throttling entails limiting the bearer bandwidth to the defined value after the user terminal has consumed the defined amount of data during the defined time period.

Abstract: A policy server (e.g., Policy and Charging Rules Function), a policy enforcement device (e.g., Policy and Charging Enforcement Function, Traffic Detection Function), and various methods are described herein for dynamically excluding active service add-ons from bearer throttling for user terminals. The active service add-on indicates that bandwidth of the service traffic associated with a corresponding service is to be limited to a defined value after the user terminal consumes a defined amount of data associated with the corresponding service during a defined time period. The bearer throttling entails limiting the bearer bandwidth to the defined value after the user terminal has consumed the defined amount of data during the defined time period.

Abstract: At present, there are operators which perform a Location Update procedure for a subscriber via Local Number Server under invoice agreement with the subscriber himself, and even where the subscriber is roaming in an area without roaming agreement with the subscriber's operator. In this situation, the subscriber's operator loses revenues because it has no roaming agreements with the operator where the subscriber is roaming, whilst the latter gets revenues from the subscriber by using the subscriber's operator Subscriber Identity Module or newer operator's card. To avoid this situation, there is provided a home location server arranged to determine whether roaming restrictions apply for a home subscriber before providing authentication data for said home subscriber and either deny the authentication data for the home subscriber to the requesting entity or apply a charging or billing for the provision of the authentication data for said home subscriber.

Abstract: At present, there are operators which perform a Location Update procedure for a subscriber via Local Number Server under invoice agreement with the subscriber himself, and even where the subscriber is roaming in an area without roaming agreement with the subscriber's operator. In this situation, the subscriber's operator loses revenues because it has no roaming agreements with the operator where the subscriber is roaming, whilst the latter gets revenues from the subscriber by using the subscriber's operator Subscriber Identity Module or newer operator's card. To avoid this situation, there is provided a home location server arranged to determine whether roaming restrictions apply for a home subscriber before providing authentication data for said home subscriber and either deny the authentication data for the home subscriber to the requesting entity or apply a charging or billing for the provision of the authentication data for said home subscriber.