Abstract: In order to reduce the size of a signaling message advertising prefixes, a super block prefix is determined amongst two or more prefixes having a common pattern. Information on the super block prefix and delta information on each non-super-block prefix is used in the messages instead of the prefixes as such, the delta information indicating how the prefix differs from the super block prefix.

Abstract: A gateway obtains a server side certificate which is signed with a key used for signing zone data for a DNS discovery procedure of discovering the gateway by a mobile node and transmits the signed server side certificate to the mobile node in an authentication procedure of authenticating the gateway. The mobile node verifies the server side certificate received in the authentication procedure of authenticating the gateway, using a public key used for verifying a given zone in the DNS discovery procedure of discovering the gateway based on the signed zone data received for the gateway.

Abstract: There is provided an intra-realm AAA (authentication, authorization and accounting) fallback mechanism, wherein the single global realm may be divided in one or more sub-realms. The thus presented mechanism exemplarily comprises detecting a failure of an authentication server serving at least one authentication client within a first sub-realm of a single-realm authentication system, and routing authentication messages of the at least one authentication client to a fallback authentication server within a second sub-realm of the single-realm authentication system, wherein routing may exemplarily comprise sub-realm based source routing.

Abstract: A solution for providing a data security service in a wireless communications system (S) is disclosed. In the solution, a first security association (SA1) is established between an anchor node (LMA1) located in a home operator network (N1) and a concentrator node (Ha) located in an interconnecting operator network (GRXa). In addition, a second security association (SA2, SA3, SA4, SA5) is established between an access node (MAG1, MAG2, MAG3, MAG4, MAG5) located in a roaming operator network (N2, N3, N4, N5) and the concentrator node (Ha, Hb) located in the interconnecting operator network (GRXa, GRXb). A user terminal (UE1-2, UE1-3, UE1-4, UE1-5) roaming in the roaming operator network (N2, N3, N4, N5) can then access external network services (E) by utilizing the first security association (SA1) and the second security association (SA2, SA3, SA4, SA5), respectively.

Abstract: The invention relates to a method, an element, and a system for providing access authentication for a user using user equipment (1-2) communicating (1) in a first communications network (1-30) accepting a first type of identification to a second communications network (1-16, 1-20) accepting a second type of identification. In the invention, an identifier comprising a first part and a second part is received (5); a corresponding second part is retrieved (7) from a database (BSF) by using the first part; the received second part is compared with the retrieved corresponding second part; and if they are the same, the user equipment (1-2) is provided with access authentication to the second communications network (1-16, 1-20).

Abstract: The invention relates to a method for optimising routing to a first user equipment (T1, T2) roaming in a visited network (OP B, OP C) in a communications system comprising at least a home network (OP A), a visited network (OP B, OP C) and a relaying network (IPX, IPX1, IPX2, IPX3, IPX4).

Abstract: A communications system comprising a radio access network for providing local wireless access for a mobile device and an authentication entity in a public land mobile network, wherein the authentication entity is arranged to authenticate the mobile device accessing the radio access network on the basis of authentication signalling between the authentication entity and the mobile device. The system includes a proxy entity via which transfer of the authentication signalling is arranged, and encapsulated transmission of the authentication signalling to and from the mobile device is arranged in messages of a cryptographic client-server transport layer encapsulation protocol between the mobile device and the proxy entity. The system provides encapsulated transfer of the authentication signalling to and from the authentication entity in messages of an AAA client-server protocol between the proxy entity and the authentication entity.

Abstract: In order to reduce the size of a signaling message advertising prefixes, a super block prefix is determined amongst two or more prefixes having a common pattern. Information on the super block prefix and delta information on each non-super-block prefix is used in the messages instead of the prefixes as such, the delta information indicating how the prefix differs from the super block prefix.

Abstract: The invention relates to transmitting a communication from a data transmission network to a receiving data transmission network. The communication is directed to a transmitting network element in the receiving data transmission network on the basis of this network address. The network address of the network element is queried from a private name server of the receiving data transmission network, after which said connection is directed to said network element. In addition, the invention relates to a system and a name server for implementing the method according to the invention.

Abstract: A pressure diffuser is disclosed having a pressurized vessel having an inlet adapted to receive a slurry of cellulosic fibrous material and cooking liquor; an outer chamber having an assembly of screens, wherein the slurry flows through the outer chamber and a portion of the cooking liquor is extracted through the screens; a center chamber to receive cooking liquor extracted through the screens; an inner head capping the center chamber, wherein the inner head is impervious to gases escaping from the cooking liquor and collecting underneath the inner head, and a gas exhaust conduit extending from the inner head to an outlet external of the pressure diffuser, wherein the conduit has an inlet below the inner head.