Abstract: In one exemplary and non-limiting aspect thereof a method is provided that includes sending a wireless network (WN) a first message that includes a list of authentication mechanisms supported by a node and, in association with each authentication mechanism, a corresponding identity; determining in the WN an authentication mechanism to be used for bootstrapping, based at least on the list received from the node; and including information in a second message that is sent to the node, the information including the determined authentication mechanism in conjunction with a corresponding identity. The method further includes protecting at least the list of authentication mechanisms supported by the node and the corresponding identities and sending a second message to the network, the second message including at least the list of authentication mechanisms and the corresponding identities.

Abstract: This invention relates to a method of routing for a message via an IMS system is disclosed. A message is received at an ICSCF. Address information is obtained for one of an application server, server or gateway for which said message is intended. The message is sent to said application server, server or gateway in accordance with said address information.

Abstract: Method, apparatus, and computer program product embodiments of the invention are disclosed to improve the discovery of wireless networks having desired service offerings. In example embodiments of the invention, a method comprises: transmitting a wireless generic advertisement service request to a multicast address of a multicast group of wireless devices or to a broadcast address, specifying one or more required characteristics; and receiving one or more wireless generic advertisement service responses from only one or more of the plurality of wireless devices having the specified characteristics.

Abstract: A method in a communications system for handling responses to messages includes a step of sending a message from a first party to a second party. A response to the message is sent, with the response including at least one parameter in breach of a policy for a communication between the first party and the second party. A network controller detects that the response includes at least one parameter breaching the policy. The at least one parameter is modified to be consistent with the policy.

Abstract: A system for facilitating the distribution of timing information amongst apparatuses interacting via wired and/or wireless communication (e.g., as members of a network or during ad-hoc interactions). Apparatuses may record when messages are sent and received. This information may be conveyed between the apparatuses via specifically configured messages. For example, these messages may contain a plurality of fields wherein at least one of the plurality of fields is a timing measurement control field. The configuration of the timing variable control field may dictate how timing information is shared amongst the apparatuses.

Abstract: Positioning and/or navigation of an electronic device within a building when GPS signals are unavailable is provided. The electronic device scans for available Wireless Local Area Network (WLAN) Access Points (APs) upon, e.g., entering a building. The electronic device detects a signal (e.g., beacon) from at least one available WLAN AP, whereupon the electronic device retrieves the indoor location of the available WLAN AP. The location information can be directly downloaded from the WLAN AP while in state-1 via, e.g., a Native Query Protocol which includes an extension to currently defined Native Query info elements that returns location information. Alternatively, the Media Access Control (MAC) address of the WLAN AP can be read from the beacon signal, which is then used to retrieve the location of the WLAN AP from an associated database.

Abstract: The exemplary embodiments include a method to perform, based on at least one of hypertext transport protocol and non-hypertext transport protocol traffic tests failing, sending an hypertext transport protocol message to a subscription remediation server URI that carries a package1 message, receiving an hypertext transport protocol response from the subscription mediation server with a package2 message, and automatically replacing a password with a new value, automatically initiating creation of a new client certificate, or launching a browser to a URI provided in the response to enable user intervention. In addition, to receive an access request from a device, determining whether credentials are valid, and if the credentials are determined valid, sending an access-accept message with a success indication, and if the credentials are determined not valid, sending an access-accept message with a success indication and an indication that access by the device is limited to only a subscription remediation server.

Abstract: An apparatus configured to determine one or more channels available for use by respective one or more white-space devices in a particular determined geographical location. The apparatus is configured to: receive geographic location signalling associated with the particular determined geographical location of one or more white-space devices; receive uncertainty indication signalling for the uncertainty associated with the particular determined geographic location of the one or more white-space devices; and determine the one or more channels available for use by the respective one or more white-space devices in the particular determined geographical location by using the geographic location signalling and uncertainty indication signalling.

Abstract: A security gateway/home agent controller HAC is used to assign one home agent HA from a plurality of HAs and to identify at least one security protocol that is common between a mobile node MN and the assigned HA. Establishment of a security association between the MN and the assigned HA is enabled according to the identified security protocol and utilizing bootstrapping parameters provided over a secure connection between the security gateway/HAC and the MN. The bootstrapping parameters include at least a home address for the MN, an address of the assigned HA and security credentials and security parameters for the identified at least one security protocol. In an exemplary embodiment the home address for the MN may be an IPv6 home address and the MN may have certain capabilities with respect to security protocols and ciphering suites which the MN sends to the security gateway.

Abstract: A secure network access point transmits a beacon transmission. A user device receiving it determines it does not have credentials necessary to attach with the secure network access point oint, and so a preliminary association is formed between the user device and the secure network access point. During the preliminary association, the user device receives or creates credentials necessary to associate with the secure network access point, forms an association with the secure network access point using the received or created credentials, and obtains internet connectivity via the secure network access point. In this embodiment there is only the secure network access point, but in another embodiment there is also a non-secure network access point which transmits a beacon using the same SSID as the secure network access point, and the preliminary association is with the non-secure network access point.

Abstract: Systems and techniques for managing local communication between a network access point and a host device. Upon connection by a host device to an access point, a local connection link is established between the access point and the host device. A network connection may be established between the access point and the host device, with the network connection being able to pass through the host device to enable communication with and beyond an access network to which the access point provides a connection. Local messages may be passed between the access point and the host device over the local connection link, separately from and independent of communication that may occur over the network connection.

Abstract: In one exemplary and non-limiting aspect thereof this invention provides a method to execute a bootstrapping procedure between a node, such as a MN, and a wireless network (WN). The method includes sending the WN a first message that contains a list of authentication mechanisms supported by the MN; determining in the WN an authentication mechanism to be used for bootstrapping, based at least on the list received from the MN, and including in a first response message to the MN information pertaining to the determined authentication mechanism; and sending a second message to the WN that is at least partially integrity, the second message containing the list of authentication mechanisms that the MN supports in an integrity protected form.

Abstract: A method, apparatus, and computer program product are provided for facilitating randomized port allocation. An apparatus may include a processor configured to receive a port allocation message from a network management entity. The port allocation message may comprise an encryption key, an initial input value, and a value indicating a number of ports allocated to the apparatus for communication on a network. The processor may be further configured to calculate at least one port allocated to the apparatus with an encryption function based at least in part upon the encryption key and initial input value. Corresponding methods and computer program products are also provided.

Abstract: A method for handling user identity and privacy, wherein a first Session Initiation Protocol (SIP) proxy is about to forward a SIP request to a next SIP proxy includes the step of determining whether Transport Layer Security (TLS) is supported in a hop to a next SIP proxy. When TLS is supported, the method includes establishing a TLS connection to the hop to the next SIP proxy, requesting a certificate from the next SIP proxy, receiving the certificate, verifying the certificate and trustworthiness of a network of the next SIP proxy and retaining identity information when the certificate and the trustworthiness of the network is verified. When TLS is not supported, or when the certificate is not verified, or when the trustworthiness of the network is not verified, the identity information is removed. Thereafter, the SIP request is forwarded over the TLS connection.

Abstract: A method in a communications system for handling responses to messages includes a step of sending a message from a first party to a second party. A response to the message is sent, with the response including at least one parameter in breach of a policy for a communication between the first party and the second party. A network controller detects that the response includes at least one parameter breaching the policy. The at least one parameter is modified to be consistent with the policy.

Abstract: An apparatus for providing temporal information may include a processor. The processor may be configured to provide a request for receipt of temporal information associated with a wireless communication access point, and receive a response to the request prior to either or both of authentication of a device providing the request by the wireless communication access point or association of the device with the wireless communication access point in which the response includes the temporal information.

Abstract: A method in a communications system for handling responses to messages includes a step of sending a message from a first party to a second party. A response to the message is sent, with the response including at least one parameter in breach of a policy for a communication between the first party and the second party. A network controller detects that the response includes at least one parameter breaching the policy. The at least one parameter is modified to be consistent with the policy.

Abstract: This invention relates to a method for supporting a communication session of an user equipment, by means of a communication system that includes at least one entity between the user equipment and a node with which the user equipment is arranged to establish a session, the method including the steps of establishing a session between the user equipment and the node via the at least one entity, putting the session on hold, reserving resources for the session while the session is on hold, and resuming the session and distributing charging information.

Abstract: A security server for use in a telecommunications network is arranged to receive a message; determine whether the message is from a known source or an unknown source and, depending on the result of the determination, modify the message; and forward the message within the telecommunications network. A network processing element for use in a telecommunications network is arranged to receive a message from another network element; determine whether the message has been modified and, depending on the result of the determination, perform one or more security checks in respect of the message.

Abstract: Method, apparatus, and computer program product embodiments of the invention are disclosed to automatically advertise a change in service offering of a wireless first device in wireless networks. In an example embodiment of the invention, if there is a change in service offering of the first device that is connected to a wireless second device, the first device automatically generates a reassociation request frame and transmits it to the second device. In addition to the standard processing of the reassociation request frame, the second device considers the received reassociation request frame as a trigger to respond by transmitting a generic advertisement service request to the first device. The first device will then have an opportunity to transmit its updated and up-to-date service description to the second device in a generic advertisement service response frame.