Abstract: A method of determining a passive Round Trip Time, RTT, delay in a telecommunications system for exchanging data packets in accordance with a data transmission protocol between a first device and a second device. The first and second devices are identified by first and second device identifications, respectively. The data packets include an address part including a source address and a destination address. The method is performed in a node by modifying the address part of a received data packet from the first device, and creating a first timestamp before transmitting the modified data packet to the second device. Upon receiving, at the node, from the second device in response to the modified data packet, a data packet having the modified address part of the modified data packet, the node creates a second timestamp that provides for passively measuring the RTT delay.

Abstract: A method and a classification configuration module for managing a classification configuration for traffic, related to a service, in a software defined network are disclosed. The classification configuration module receives the classification configuration from a service related module. The classification configuration includes a first indication indicating a traffic treatment for the traffic, and a second indication identifying the traffic to be treated according to the first indication for traffic treatment. The classification configuration module determines, based on the classification configuration, a set of traffic filters for use by a software defined network controlling module to determine a list of service functions implementing the traffic treatment for the traffic. The classification configuration module transmits information relating to the set of traffic filters to the software defined network controlling module.

Abstract: Methods and apparatus for managing quality of service for video streaming, in which a Policy and Charging Rules Function (PCRF) in a Policy Charging Control (PCC) architecture of a telecommunications system receives from a Policy Control Enforcement Function (PCEF) a notification indicating that a video service has started for streaming video content to a user equipment (UE). A first Quality of Service (QoS) setting for streaming the video service to the UE is determined. First QoS setting data identifying the first QoS setting is transmitted to the PCEF. The PCEF transmits a further notification to the PCRF indicating that a particular stage has been reached. The PCRF receives the notification from the PCEF. In response to the further notification, a second QoS setting specifying a lower QoS than the first QoS setting for streaming the video service after the particular stage is determined. The PCRF identifies the second QoS setting to the PCEF.

Abstract: The invention relates to techniques for content encryption with dynamic keys over encrypted protocols (P), like SSL/TLS. The method comprises a step (S41) in which a random key is to automatically and dynamically generated. This generated random key is then asymmetrically encrypted (S42). The enriched variable is encrypted symmetrically (S43) with the generated random key. So far, two intermediate results may be provided, namely a first intermediate result with the encrypted generated random key and a second intermediate result with the encrypted enriched variable. Both intermediate results are then prepared (S44, S45) as custom records. In particular, a first custom record with the encrypted generated random key and a second custom record with the encrypted enriched variable are prepared for injection in a stream of the transport layer protocol (P).

Abstract: A method and a managing node for managing exchange of information relating to Packet Flow Descriptors, PFDs, between an application server and a network exposure node are disclosed. The managing node receives a message comprising a PFD with a PFD identifier, an external application identifier associated with the PFD, a server identifier of the application server, a transaction identifier, and a network exposure identifier identifying an operator network. The managing node stores received information. The managing node selects, based on the network exposure identifier, a network exposure node. When a PFD selection identifier is included in the message, the managing node selects, based on the PFD selection identifier, a further PFD amongst the set of stored PFDs. The managing node also determines an action for the further PFD. The managing node further transmits, towards the network exposure node, the PFD and an indication of the action.

Abstract: A method of determining a passive Round Trip Time, RTT, delay in a telecommunications system for exchanging data packets in accordance with a data transmission protocol between a first device and a second device. The first and second devices are identified by first and second device identifications, respectively. The data packets include an address part including a source address and a destination address. The method is performed in a node by modifying the address part of a received data packet from the first device, and creating a first timestamp before transmitting the modified data packet to the second device. Upon receiving, at the node, from the second device in response to the modified data packet, a data packet having the modified address part of the modified data packet, the node creates a second timestamp that provides for passively measuring the RTT delay.

Abstract: A method and a managing node for managing exchange of information relating to Packet Flow Descriptors, PFDs, between an application server and a network exposure node are disclosed. The managing node receives a message comprising a PFD with a PFD identifier, an external application identifier associated with the PFD, a server identifier of the application server, a transaction identifier, and a network exposure identifier identifying an operator network. The managing node stores received information. The managing node selects, based on the network exposure identifier, a network exposure node. When a PFD selection identifier is included in the message, the managing node selects, based on the PFD selection identifier, a further PFD amongst the set of stored PFDs. The managing node also determines an action for the further PFD. The managing node further transmits, towards the network exposure node, the PFD and an indication of the action.

Abstract: Methods and apparatus for managing quality of service for video streaming, in which a Policy and Charging Rules Function (PCRF) in a Policy Charging Control (PCC) architecture of a telecommunications system receives from a Policy Control Enforcement Function (PCEF) a notification indicating that a video service has started for streaming video content to a user equipment (UE). A first Quality of Service (QoS) setting for streaming the video service to the UE is determined. First QoS setting data identifying the first QoS setting is transmitted to the PCEF. The PCEF transmits a further notification to the PCRF indicating that a particular stage has been reached. The PCRF receives the notification from the PCEF. In response to the further notification, a second QoS setting specifying a lower QoS than the first QoS setting for streaming the video service after the particular stage is determined. The PCRF identifies the second QoS setting to the PCEF.

Abstract: A method of determining a passive Round Trip Time, RTT, delay in a telecommunications system for exchanging data packets in accordance with a data transmission protocol between a first device and a second device. The first and second devices are identified by first and second device identifications, respectively. The data packets include an address part including a source address and a destination address. The method is performed in a node by modifying the address part of a received data packet from the first device, and creating a first timestamp before transmitting the modified data packet to the second device. Upon receiving, at the node, from the second device in response to the modified data packet, a data packet having the modified address part of the modified data packet, the node creates a second timestamp that provides for passively measuring the RTT delay.

Abstract: A method, performed by a gateway node (110), for managing packets on a transport connection between a first end-point (120) and a second end-point (130) is disclosed. The gatewaynode (110) forwards (A020), on the transport connection (105), a first packet from the first end-point (120) to the second end-point (130). The gateway node (110) finds (A040), by inspection of the first packet, that the first packet indicates closing of the transport connection (105) at the first end-point (120). Moreover, the gateway node (110) receives (A120) after the finding (A040), on the transport connection, a second packet from the second end-point (130), wherein the second packet is destined to the first end-point (120). Furthermore, the gateway node (110) discards (A130) the second packet, thereby refraining from forwarding, on the transport connection, the second packet from the second end-point (130) to the first end-point (120). A gateway node (110), a computer program and a computer program carrier are also disclosed.

Abstract: The invention relates to techniques for content encryption with dynamic keys over encrypted protocols (P), like SSL/TLS. The method comprises a step (S41) in which a random key is to automatically and dynamically generated. This generated random key is then asymmetrically encrypted (S42). The enriched variable is encrypted symmetrically (S43) with the generated random key. So far, two intermediate results may be provided, namely a first intermediate result with the encrypted generated random key and a second intermediate result with the encrypted enriched variable. Both intermediate results are then prepared (S44, S45) as custom records. In particular, a first custom record with the encrypted generated random key and a second custom record with the encrypted enriched variable are prepared for injection in a stream of the transport layer protocol (P).

Abstract: A method of determining a passive Round Trip Time, RTT, delay in a telecommunications system (1) for exchanging data packets (2a-2d) in accordance with a data transmission protocol between a first device (4) and a second device (6). The first device (4) identified by a first device identification, and the second device (6), identified by a second device identification. The data packets (2a-2d) comprising an address part (3) including a source address and a destination address. The method performed in a node (5) by modifying the address part (3) of a received data packet (2a) from a the first device (4), and creating a first timestamp, before transmitting the modified data packet (2b) to the second device (6). Upon receiving, at the node (5), from the second device (6) in response to the modified data packet (2b), a data packet (2c) having the modified address part (3) of the modified data packet (2b), creating a second timestamp at the node (5) provides for passively measuring the RTT delay.

Abstract: A method and an intermediate network node (110) for managing at least one TCP segment are disclosed. The intermediate network node (110) handles a TCP flow between a first end-point (120) and a second end-point (130), wherein the second end-point (130) is configured to use enrichment data included in received TCP segments. The intermediate network node (110) receives (A040), from the first end-point (120), a TCP segment. Then, the intermediate network node (110) identifies (A050) the TCP segment as belonging to the TCP flow. Next, the intermediate network node (110) injects (A060) enrichment data into the TCP flow by performing A first set of actions and/or a second set of actions. A corresponding computer program (903) and a computer program carrier (905) are also disclosed.

Abstract: A method, performed by a gateway node (110), for managing packets on a transport connection between a first end-point (120) and a second end-point (130) is disclosed. The gatewaynode (110) forwards (A020), on the transport connection (105), a first packet from the first end-point (120) to the second end-point (130). The gateway node (110) finds (A040), by inspection of the first packet, that the first packet indicates closing of the transport connection (105) at the first end-point (120). Moreover, the gateway node (110) receives (A120) after the finding (A040), on the transport connection, a second packet from the second end-point (130), wherein the second packet is destined to the first end-point (120). Furthermore, the gateway node (110) discards (A130) the second packet, thereby refraining from forwarding, on the transport connection, the second packet from the second end-point (130) to the first end-point (120). A gateway node (110), a computer program and a computer program carrier are also disclosed.

Abstract: At least one identifier classifies a data packet flow of data packets between an originator and the recipient. A confidence level value of the at least one identifier specifies a confidence degree with which the at least one identifier is determined.

Abstract: At least one identifier classifies a data packet flow of data packets between an originator and the recipient. A confidence level value of the at least one identifier specifies a confidence degree with which the at least one identifier is determined.

Abstract: A method of delivering data to user terminals connected to an Internet Protocol Connectivity Access Network, IP-CAN, wherein the IP-CAN implements a Policy and Charging Control, PCC, architecture. The method comprises caching data within an IP-CAN cache server upon a decision made by a Policy and Charging Rules Function, PCRF, of the PCC architecture. The cached data is then identified to a Policy and Charging Enforcement Function, PCEF, of the PCC architecture. At the PCEF, data requests made by user terminals are monitored and a determination made as to whether or not a request relates to cached data. If a request does relate to cached data, then that cached data is delivered from the IP-CAN cache server to the requesting user terminal.

Abstract: A telecommunications network policy enforcing point operable to route IP datagrams in a two-way communication between a first endpoint in a telecommunications network and a second endpoint in the telecommunications network and operable to compress, in accordance with a data compression policy, IP datagrams of a response transmitted by the second endpoint to the first endpoint. The response is of a layer 7 protocol that supports compression, a layer level being an Open Systems Interconnection, OSI, layer in an OSI Reference Model, and each IP datagram of the response comprises a sequence of bytes of data and a header defining a sequence number of the first byte of data in the IP datagram.

Abstract: A method is carried out by at least one network node in a communication network. The method includes determining, from received packets, at least one characteristic of at least one end user device connected, through an end user communication terminal, to the communication network. The determining procedure includes inspecting at least one of (a) layer n control information of the received packets, wherein n is an integer one of equal to and larger than 3, and (b) the received packets' payload encapsulated by layer 7 control information. The layer level is an OSI layer in an OSI reference model. The invention also relates to network nodes and computer programs.

Abstract: A telecommunications network policy enforcing point operable to route IP datagrams in a two-way communication between a first endpoint in a telecommunications network and a second endpoint in the telecommunications network and operable to compress, in accordance with a data compression policy, IP datagrams of a response transmitted by the second endpoint to the first endpoint. The response is of a layer 7 protocol that supports compression, a layer level being an Open Systems Interconnection, OSI, layer in an OSI Reference Model, and each IP datagram of the response comprises a sequence of bytes of data and a header defining a sequence number of the first byte of data in the IP datagram.