Abstract: A method of terminating an IP Multimedia Subsystem enabled communication service involving a user terminal, the terminal having been allocated an IP address by an access network used by the terminal to access the communication service. The method comprises determining when the IP address is no longer allocated to the user by the access network, and as a consequence of the determination, terminating the IP Multimedia Subsystem communication service.

Abstract: A method and apparatus in a telecommunication network for triggering services provided to a user. A service control node in the user's home network domain utilizes filter criteria, which may be derived from the user's user profile, to trigger the services. The service control node selects at least one filter criterion depending on the criterion's relevance to the user. Alternatively, the service control node is provided with at least one filter criterion not stored in the user profile.

Abstract: A method of authenticating a user in an IP Multimedia Subsystem network, the method comprising receiving from an access network an access identifier defining a terminal's physical location, retrieving from a database a registered access identifier associated with the user; and determining if the received access identifier matches the registered access identifier, and if so then authenticating the user in the IMS network, and if not then performing an alternative authentication method. The method allows a nomadic user in the access network to register with an IP Multimedia Subsystem network.

Abstract: A server for managing the authentication of clients that are subscribers of a home domain within which the server is located, the server comprising means for determining whether a client that is attached to a visited domain is to be authenticated by the home domain or by said visited domain, and for signalling the result to said visited domain.

Abstract: The present invention relates to a solution for handling seamless handover between a 3GPP network and a non-3GPP network or two non-3GPP networks. The solution uses a new state information informing about a UE being in an Idle state in relation to the network not currently communicating through. Thus the UE is not immediately detached from the old network but may keep a logical connection and quickly re-attach to the old network if of interest.

Abstract: In one aspect of the invention, a system and method reduce central database signalling. The system and method select a gateway in response to an event; determine whether to transmit a gateway identifier identifying the selected gateway to a central database; and indicate whether the gateway identifier has been transmitted to the central database.

Abstract: A method and an apparatus for controlling a communication established between terminals through COMM EST 310 a telecommunications system. When a malfunction event related to a communication (310) established between terminals is detected (320), a determination (330) is made in the telecommunications system of a faulty terminal and a non-faulty terminal, according to the malfunction event. Subsequently, the telecommunications systems determines (340) whether a terminal is registered for a user identifier which was registered through the faulty terminal, or which is related to it by subscription and, in that case, it establishes (350) a new communication between said registered terminal and the non-faulty terminal. The user of the non-faulty terminal can rely on the telecommunications system to recover automatically the lost communication, without trying to attempt a new communication request with an uncertain result.

Abstract: A method of authenticating a user to a network, the user being in possession of first and second authentication credentials associated respectively with first and second authentication procedures. The method comprises sending a challenge from the network to the user according to said second authentication procedure, receiving the challenge at the user and computing a response using said first credential or keying material obtained during an earlier running of said first authentication procedure, and said second credential, sending the response from the user to the network, and receiving the response within the network and using the response to authenticate the user according to said second authentication procedure.

Abstract: An authentication method comprises providing a set of N plural number of master keys both to a user terminal (13) and to home network entity (11) and, when performing an authentication key agreement (AKA) transaction for an application, selecting one of the N number of master keys to serve as a master key for use both at the user terminal and the home network entity for deriving further keys for the application.

Abstract: An inter-domain authentication mechanism is provided for carrying out a cross-domain authentication for a given user between an access network domain and a Multimedia domain. The authentication mechanism is applicable where a user has been authenticated by the access network and may be implemented as a dedicated Multimedia Authentication device in close co-operation with a subscriber server, or be fully integrated in the subscriber server. The authentication mechanism is arranged for re-using authentication data between different networks, or between different technological domains, and with help from other entities of a Multimedia domain according to present standards.

Abstract: The present invention is aimed to provide a mechanism whereby a Public Service Identity identifying a service, which runs in an application service, may be created in a network both dynamically by the application server and statically by an O & M system, the means and method for the dynamic creation harmonizing with those for the static creation, and allowing a similar behaviour of the network with minimum impact when the service is invoked. Therefore, the present invention provides a new method, a new central entity in the network, and enhanced Home Subscriber Server and application server, all co-operating to carry out the different embodiments for the invention.

Abstract: The present invention is aimed to the provision of a mechanism whereby roaming users can specify whether they prefer to dial numbers belonging to the home network in local format or in international format from the visited network where they are roaming so that the treatment of restrictions based on the type of call, and depending on both user's geographical location and preferences, are correspondingly applied. Therefore, the present invention provides for a new method whereby information about a location of the user, taking into account the access location and user preferences, is sent from a home subscriber server to a serving call session control function entity, both in the home network for the user.

Abstract: The basic problem addressed by the present invention is the free disposition of users, without restrictions on users identifiers, among a plurality of AAA-servers within an ISP network for allowing AAA-service network scalability and for hiding the AAA-service network configuration to external AAA-clients. The present invention solves the problem discussed above by placing a User Selector Proxy as entry point to the AAA-service network within an ISP network, the User Selector Proxy responsible for determining an AAA-server in charge of the user and able to direct AAA-service requests to the appropriate AAA-server.

Abstract: An apparatus and method for providing Single Sign-On services to a user when accessing a selected Service Provider from a plurality of Service Providers. An Authentication Provider authenticates the user at with a user-identity, provides the user with a token as proof of the authentication, and assigns a temporary alias-identity to the user for use when the user accesses the selected Service Provider. The Authentication Provider and the selected Service Provider link the assigned alias-identity and the user-identity to identify the user at respective sites. The user accesses the selected Service Provider by presenting the token along with a local user-identity valid for the selected Service Provider. When the user attempts a subsequent access at the selected Service Provider, the user is identified by the shared alias-identity, if the user allowed permanent linking. If the user did not allow permanent linking, the process is repeated for each subsequent access.

Abstract: The advent of new and sophisticated web services provided by Service Providers to users, services that individually require authentication of user and authorization of access, brings the needs for a new service to facilitate such authentication and access, a service referred to as Single Sign-On (SSO). The basic principle behind SSO is that users are authenticated once at a particular level, and then access all their subscribed services accepting that level of authentication. The present invention provides a system, method and apparatus wherein a cellular Federation of mobile network operators becomes an SSO authentication authority for subscribers of this Federation accessing Service Providers having such agreement with a mobile network operator of the Federation.

Abstract: The advent of new and sophisticated web services provided by Service Providers to users, services that individually require authentication of user and authorization of access, brings the needs for a new service to facilitate such authentication and access, a service referred to as Single Sign-On (SSO). The basic principle behind SSO is that users are authenticated once at a particular level, and then access all their subscribed services accepting that level of authentication. The present invention provides a system, method and apparatus wherein a cellular Federation of mobile network operators becomes an SSO authentication authority for subscribers of this Federation accessing Service Providers having such agreement with a mobile network operator of the Federation.

Abstract: Method for supporting multiple registration from the same user requested from different terminals in a telecommunications system requiring to manage information related to the location of said user and related to the plurality of identifiers that identify said user in said system. The method allowing further multiple session establishment to any of those terminals. In the home server of said user it is stored a plurality of private identities related to the subscriber data of said user together with, at least, a public identity. Each registration of said user contains a public identity assigned to said user and a private identity among the plurality of said private identities assigned to said user.

Abstract: The basic problem addressed by the present invention is the free disposition of users, without restrictions on users identifiers, among a plurality of AAA-servers within an ISP network for allowing AAA-service network scalability and for hiding the AAA-service network configuration to external AAA-clients. The present invention solves the problem discussed above by placing a User Selector Proxy as entry point to the AAA-service network within an ISP network, the User Selector Proxy responsible for determining an AAA-server in charge of the user and able to direct AAA-service requests to the appropriate AAA-server.

Abstract: The advent of new and sophisticated web services provided by Service Providers to users, services that individually require authentication of user and authorization of access, brings the needs for a new service to facilitate such authentication and access, a service referred to as Single Sign-On (SSO). The basic principle behind SSO is that users are authenticated once at a particular level, and then access all their subscribed services accepting that level of authentication.

Abstract: A document reproduction apparatus with an mounting mechanism for the document handler, which can be, for example, hinge/counter-balance mechanisms for supporting a document handler on the frame of the copier or other reproduction apparatus, in which the spacing of the document handler from the underlying imaging platen can be much more easily and accurately adjusted by the integral variable position adjustment mechanism including eccentrically faceted rotatable spacing cams. In the exemplary mechanism a first member for attachment to the document handler, is pivotally mounted about a pivot axis with a hinge pin to a second member for mounting to the frame of the copier, and has an adjustment system for adjusting the position of the first member relative to the pivot axis.