Abstract: A method performed by a Lawful Interception Administration Function device (102) is disclosed. The method comprises receiving from a Law Enforcement Agency (101), a first request message for subscribing to a notification of an event, wherein the event is a monitoring event or a Non-IP Data Delivery event; sending a second request message, to a Network Exposure Function, NEF, device (103) comprising an Intercept Related Information Point of Interception, IRI-POI, (104) to subscribe to the notification of the event by provisioning the IRI-POI in the NEF device; and receiving a subscribe response message from the NEF device confirming the subscription to the notification of the event. Further, the embodiments relate to the NEF device, the LI ADMF device, the Mediation and Delivery Function 2 device, their corresponding methods as well as computer programs, carriers of such computer programs and computer program products of such computer programs.

Abstract: The invention relates to a method for operating a slice management entity (100) configured to manage a network slice of a cellular network, the method comprising: —periodically determining a trust level of the network slice based on time dependent trust values of network components used by the network slice, —determining whether the determined trust level of the network slice is lower than a minimum threshold level, wherein in the affirmative, —adapting a controlling of at least one of the network components of the network slice to obtain a new trust value for the at least one network component, wherein the new trust level of the network slice is above the minimum threshold level and is calculated taking into account the new trust value of the adapted controlling of the at least one network component.

Abstract: A communication network device hosting a lawful interception administration function, LI-ADMF, network element, NE. The device comprises includes interface circuitry, a processor and memory having instructions executable by the processor whereby the communication network device is operative to receive, from a law enforcement agency, LEA, a request to receive information related to at least one unmanned aerial system, UAS, hosted communication device registered with a communication network, send a request to at least one of a mobility management device or a user subscription management device to provide the information, receive at least part of the requested information from at least one of the mobility management device or the user subscription management device and send the received information to a law enforcement management function, LEMF.

Abstract: A method for determining a vulnerability of a network node. The method includes a master security management node obtaining security patch information regarding one or more security patches installed on the network node. The method also includes the master security management node using the security patch information to determine a first vulnerability value for the network node. The method also includes the master security management node obtaining a set of other vulnerability values for the network node, wherein each other vulnerability value was determined by different security management node. The method also includes the master security management node determining, based on the set of other vulnerability values, whether a consensus regarding the vulnerability level of the network node has been reached. If the master security management node determines that a consensus regarding the vulnerability level of the network node has been reached, the first vulnerability value is assigning to the network node.

Abstract: A Lawful Interception Administration Function device (102) comprising a memory and a processor, the memory containing instructions which when executed on the processor, cause the LI ADMF device (102) to send to a Network Repository Function (110) a discovery request message for discovering at least one NEF device (103) and at least one Application Function, AF, device (107) served by the NEF device; receive a discovery response message comprising information about the NEF device and the AF device; receive from a LEA (101) a first request message for subscribing to a notification of the event provided by the AF device, the application identified by an identifier; send a second request message, to a NEF device comprising an IRI-POI (104) to subscribe to the notification of the event, the NEF device identified based on the information comprised in the discovery response message; and receive a subscribe response message confirming the subscription to the notification of the event.

Abstract: A lawful interception administrative function, LI ADMF, (108) in a telecommunication network (100) obtains from a quantum key distribution network, QKDN, (10) a quantum key and a key stream identifier, KSID, associated with the quantum key. The LI ADMF (108) transmits the KSID associated with the quantum key to an LI entity (107, 136) in the telecommunication network (100). The LI entity (107, 136) then obtains, from the QKDN (10), a quantum key associated with the KSID transmitted by the LI ADMF (108). Such a procedure provides a secure exchange of quantum keys to enable encryption of sensitive data within messages exchanged by LI entities in the telecommunication network (100).

Abstract: A request associated with a destination to which a point of interception, POI, (135) is to transmit intercepted data via an X2/X3 interface during lawful interception, LI, is received from an administrative function, ADMF (108), via an X1 interface. The request comprises an identifier of the destination and version information that specifies at least one version of a transmission protocol to use by the POI for transmission of intercepted data to the identified destination. The POI determines whether or not the POI is able to transmit intercepted data via the X2/X3 interface using a version of the protocol that is equal to one of the versions in the received version information. The received version information is compared with version information available in the POI. A response is transmitted via the X1 interface that indicates if the POI is able to transmit intercepted data via the X2/X3 interface.

Abstract: A communication network device hosting a lawful interception administration function, LI-ADMF, network element, NE. The device comprises includes interface circuitry, a processor and memory having instructions executable by the processor whereby the communication network device is operative to receive, from a law enforcement agency, LEA, a request to receive information related to at least one unmanned aerial system, UAS, hosted communication device registered with a communication network, send a request to at least one of a mobility management device or a user subscription management device to provide the information, receive at least part of the requested information from at least one of the mobility management device or the user subscription management device and send the received information to a law enforcement management function, LEMF.

Abstract: A method (100) for operating a network slice management function configured to manage a network slice of a cellular network. The method comprises: receiving (102) a request for a network slice, the request including a specified end-to-endslice quantum protection level, QPL, for the network slice; requesting (104), from a security management entity of the cellular network, allocation of network components having component QPLs at least equal to the specified slice QPL, a component QPL being indicative of a level of security, against an attack operated by a quantum computer, provided to the network component by quantum-resistant technology when the network component is using the quantum-resistant technology; receiving (106), from the security management entity, information identifying allocated network components; and instantiating (108) the network slice using network components of the allocated network components.

Abstract: A communications network node (100) operable to: receive a sidelink connection request from a user equipment, UE, including an identification of at least one other UE involved in the sidelink; determine that the UE is a target UE to be monitored for lawful interception, LI, purposes; inform the target UE and the at least one other UE of a UE-to-UE direct communication interface frequency to use for the sidelink; send a request message to the at least one other UE requesting it to provide information about the sidelink connection and a copy of communications data exchanged on the sidelink connection to the node; send to an access and mobility management function, AMF, network element, NE, an information message including information about the sidelink connection received from the at least one other UE; and send to a user plane function, UPF, NE content messages including a copy of communications data exchanged on the sidelink connection received from the at least one other UE.

Abstract: A method performed by a Lawful Interception Administration Function device (102) is disclosed. The method comprises receiving from a Law Enforcement Agency (101), a first request message for subscribing to a notification of an event, wherein the event is a monitoring event or a Non-IP Data Delivery event; sending a second request message, to a Network Exposure Function, NEF, device (103) comprising an Intercept Related Information Point of Interception, IRI-POI, (104) to subscribe to the notification of the event by provisioning the IRI-POI in the NEF device; and receiving a subscribe response message from the NEF device confirming the subscription to the notification of the event. Further, the embodiments relate to the NEF device, the LI ADMF device, the Mediation and Delivery Function 2 device, their corresponding methods as well as computer programs, carriers of such computer programs and computer program products of such computer programs.

Abstract: A request associated with a destination to which a point of interception, POI, (135) is to transmit intercepted data via an X2/X3 interface during lawful interception, LI, is received from an administrative function, ADMF (108), via an X1 interface. The request comprises an identifier of the destination and version information that specifies at least one version of a transmission protocol to use by the POI for transmission of intercepted data to the identified destination. The POI determines whether or not the POI is able to transmit intercepted data via the X2/X3 interface using a version of the protocol that is equal to one of the versions in the received version information. The received version information is compared with version information available in the POI. A response is transmitted via the X1 interface that indicates if the POI is able to transmit intercepted data via the X2/X3 interface.

Abstract: Network slice providers and resource providers in a communication network are configured to cause various records related to a smart contract for one or more resources to be stored in a permissioned blockchain. The records include an allocation, a deallocation and monitoring records related to the resource(s). When the resources are released, the blockchain records ease settling slice beneficiaries' financial obligations.

Abstract: A method for determining a vulnerability of a network node. The method includes a master security management node obtaining security patch information regarding one or more security patches installed on the network node. The method also includes the master security management node using the security patch information to determine a first vulnerability value for the network node. The method also includes the master security management node obtaining a set of other vulnerability values for the network node, wherein each other vulnerability value was determined by different security management node. The method also includes the master security management node determining, based on the set of other vulnerability values, whether a consensus regarding the vulnerability level of the network node has been reached. If the master security management node determines that a consensus regarding the vulnerability level of the network node has been reached, the first vulnerability value is assigning to the network node.

Abstract: A method (100) performed by an apparatus in a Software Defined Network, SDN, the method comprising: receiving (102) a request to define a virtual link, VL, in the SDN, the request including security constraint information for the VL; identifying (104) from a network topology of the SDN physical links that are Quantum Cryptography, QC, enabled; computing (106) a path for the VL using only physical links of the identified QC enabled physical links; and initiating (108) provisioning of the VL using the computed path.

Abstract: A lawful interception administrative function, LI ADMF, (108) in a telecommunication network (100) obtains from a quantum key distribution network, QKDN, (10) a quantum key and a key stream identifier, KSID, associated with the quantum key. The LI ADMF (108) transmits the KSID associated with the quantum key to an LI entity (107, 136) in the telecommunication network (100). The LI entity (107, 136) then obtains, from the QKDN (10), a quantum key associated with the KSID transmitted by the LI ADMF (108). Such a procedure provides a secure exchange of quantum keys to enable encryption of sensitive data within messages exchanged by LI entities in the telecommunication network (100).

Abstract: The invention relates to a method for operating a slice management entity (100) configured to manage a network slice of a cellular network, the method comprising: —periodically determining a trust level of the network slice based on time dependent trust values of network components used by the network slice, —determining whether the determined trust level of the network slice is lower than a minimum threshold level, wherein in the affirmative, —adapting a controlling of at least one of the network components of the network slice to obtain a new trust value for the at least one network component, wherein the new trust level of the network slice is above the minimum threshold level and is calculated taking into account the new trust value of the adapted controlling of the at least one network component.

Abstract: A method, performed by a first entity (111), for providing a service in a communications network (100). The first entity (111) obtains (701), from a second entity (112), a request. The request is for one or more links (118) to be allocated to a first network slice to provide a service via one or more paths (117). The (118) connect one or more nodes (115). The request indicates at least one of: a) one or more requirements to be met by the links (118), and b) a first priority to be assigned to the first network slice. The first entity (111) determines (702) the links (118) to be allocated to the first network slice. The determining (701) is based on the one or more requirements, the first priority, and a set of available resources. The first entity (111) sends (705), to another entity (112, 113), an indication based on the determined links (118).

Abstract: A method, performed by a first entity (111), for providing a service in a communications network (100). The first entity (111) obtains (701), from a second entity (112), a request. The request is for one or more links (118) to be allocated to a first network slice to provide a service via one or more paths (117). The (118) connect one or more nodes (115). The request indicates at least one of: a) one or more requirements to be met by the links (118), and b) a first priority to be assigned to the first network slice. The first entity (111) determines (702) the links (118) to be allocated to the first network slice. The determining (701) is based on the one or more requirements, the first priority, and a set of available resources. The first entity (111) sends (705), to another entity (112, 113), an indication based on the determined links (118).

Abstract: A method for allocating a plurality of virtual machines (51-55) provided on at least one host (11-15) to a virtualized network function is provided, which provides a defined functional behavior in a network and requires a total application capacity for the functional behavior, the functional behavior being provided by needed virtual machines from the plurality of virtual machines, wherein each of the at least one host has an available processing capacity which can be assigned to the virtual machines provided on the corresponding host, and each virtual machine has at least one flavor which indicates a used processing capacity of the available processing capacity of the corresponding host and which corresponds to a partial application capacity of the total application capacity provided by the corresponding virtual machine, the method comprising: —determining the total application capacity of the virtualized network function, —determining, for each of the virtual machines, the at least one flavor taking into acc