Abstract: The invention relates to a method of transmitting packet data from a first subsystem to a wireless terminal device via the network node of a second subsystem. In the method, at least one filter is formed to guide mapping of at least one data flow of the first subsystem to at least one data flow of the second subsystem. At least one filter is attached to at least one data flow of the second subsystem. The filter comprises at least part of the interface identifier of the IP address, which at least part of the interface identifier is allocated in the wireless terminal device. Hereby, mapping of the data flow of the first subsystem to the data flow of the second subsystem is performed on the basis of the interface identifiers of the destination IP addresses in the received packets.

Abstract: In a GPRS system, a method of a mobile station acquiring an IP network address. The method comprises the steps of: the mobile station generating a link identifier and sending it to a gateway over a wireless link in a network address request together with a request to check if the link identifier is unique; the gateway receiving the network address request and checking if the link identifier is unique; the gateway responding with a network address request response including either the sending a unique link identifier confirmed as being unique or a different unique link identifier; the gateway sending a network prefix to the mobile station; the mobile station combining the interface identifier and the network prefix to generate the IP network address.

Abstract: Managing addresses to be assigned to users of an IP network is described, in which it is detected that a packet has been addressed to a released address held in a queue for holding released addresses, and the held address to which the packet has been addressed is returned to the end of the queue.

Abstract: An interception method and system for performing a lawful interception in a packet network such as the GPRS or UMTS network is described. A first network element having an intercepting function for intercepting data packets is provided, said interception function being controlled by an interception control means implemented in a second network element, wherein an intercepted data packet is transmitted from the first network element via the packet network to an interception gateway element providing an interface to a intercepting authority. The intercepted data packet is transmitted via a secure tunnel provided by an encryption processing. The interception control means and the interception gateway element may both be integrated in the second network element. The interception system has a clear advantage in scalability, no single point of failure, and an adaptation to different authority interfaces can be implemented only in the interception gateway.

Abstract: The present invention relates to a method and apparatus for generating an identification to be used for a connection in a network. The identification is generated by adding a reuse information (reuse field or bit) to an allocated identifier to thereby increase the time period until the same identification is generated again. The reuse information is updated and used for generating the new identification when the allocated identifier is reallocated to a new connection. Since the time period until the same identification is reused is increased, the risk of misrouting any data packets relating to a destroyed connection can be significantly reduced.

Abstract: In a GPRS system, a method of a mobile station acquiring an IP network address. The method comprises the steps of: the mobile station generating a link identifier and sending it to a gateway over a wireless link in a network address request together with a request to check if the link identifier is unique; the gateway receiving the network address request and checking if the link identifier is unique; the gateway responding with a network address request response including either the sending a unique link identifier confirmed as being unique or a different unique link identifier; the gateway sending a network prefix to the mobile station; the mobile station combining the interface identifier and the network prefix to generate the IP network address.

Abstract: A method for a mobile station to acquire a IP network address from a gateway in GPRS system. First the mobile station generates a link identifier. Next the mobile requests a network address by sending a link identifier over a wireless to a gateway along with a request for the gateway to check to see if the link identifier is unique. Upon receiving the network address request the gateway checks to see if the link identifier is unique. The gateway responses by either confirming that the network link identifier is unique or by sending a different unique link identifier to the mobile station. The gateway also has the ability to respond by sending a network prefix to the mobile station. Upon receiving the network prefix the mobile station combines the network prefix with the interface identifier to generate a IP network address.

Abstract: A method and a wireless telecommunications system, a message service center and a mobile station implementing the method for transmitting messages between a mobile station and a second party. The method of the invention includes delivering messages irrespective of the presentation thereof: delivering messages through the same message service center irrespective of the content type and employing the same protocol between the terminal and the message service center for all messages. The content type indicates the presentation of the message contents which may include test, speech, images, video images or various combinations thereof.

Abstract: The invention relates to an arrangement and a method for reliably identifying a user in a computer system. The method utilizes a mobile station for communicating with the system. The method comprises generating a first one-time password in the mobile station by utilizing a known algorithm on the basis of the identification number of the user, subscriber-specific identifier, device-specific identifier of the mobile station, and time.

Abstract: A method, system and device for protecting a network node by an access blocking function, such as a correspondent node firewall, are disclosed. The access blocking function protects either a first or a second network node and allows access to the protected network node from the other network node via a link associated to an address of the first network node and an address of the second network node. The second network node is configured to change its address. The method comprises associating the link associated to the old address of the second network node to the new address of the second network node when the second network node changes its address.

Abstract: Managing addresses to be assigned to users of an IP network is described, in which it is detected that a packet has been addressed to a released address held in a queue for holding released addresses, and the held address to which the packet has been addressed is returned to the end of the queue.

Abstract: A method of marking information to be produced in order to expose unauthorized copying. In the method, a user identifier is defined, a source file containing a substantial part of the information produced is created, and a different target file is created for each user on the basis of the source file and the user identifier. In the invention, several predefined modification rules are stored in a file in order to modify the information contained in the source file. Using a digital processor, a sequence of modification keys is generated on the basis of the user identifier, the locations of the source file to be modified are defined, and modifications are made in these locations, determining the nature and/or position of the modifications on the basis of the predefined modification rules and modification keys. From the content of the target file delivered to the user, it is possible to conclude a user-specific identifier and thereby the person responsible for the unauthorized copy.

Abstract: The invention relates to a method of protecting a data link (1-10, 1-20) established via an access point (GGSN1, GGSN2, ROUTER1, ROUTER2) to a mobile subscriber node (MN). The invention further includes the steps in which: (i) a monitoring network element (HA) observes the operation of the data link (1-10, 1-20); and (ii) in case the operation of the data link (1-10, 1-20) becomes unsuitable for communication, the monitoring network element (HA) starts to set up an alternative data link (1-10, 1-20) via an alternative access point (GGSN1, GGSN2, ROUTER1, ROUTER2).

Abstract: The invention relates to a method of transmitting packet data from a first subsystem to a wireless terminal device via the network node of a second subsystem. In the method, at least one filter is formed to guide mapping of at least one data flow of the first subsystem to at least one data flow of the second subsystem. At least one filter is attached to at least one data flow of the second subsystem. The filter comprises at least part of the interface identifier of the IP address, which at least part of the interface identifier is allocated in the wireless terminal device. Hereby, mapping of the data flow of the first subsystem to the data flow of the second subsystem is performed on the basis of the interface identifiers of the destination IP addresses in the received packets.

Abstract: The addresses of a mobile station (MS) and a second party (B) connected to the Internet (12) are converted in such a way that a short message service center (SMSC) receives an allocation request (2-1) from a mobile station for allocating a virtual number (VN) to a combination comprising the address (IAB) of a second party preferably also a mobile station identifier. The SMSC sends a reply (2-2) to the mobile station, the reply indicating the allocated virtual number (VN). The mobile station (MS) transmits a short message (2-9) to the virtual member. The SMSC forms an Internet address (IAB) of the second party (B) on the basis of the virtual number (VN) and the allocation request (2-1) and sends to the Internet address an e-mail message (2-10) whose text part corresponds to the text part of the short message. The B party can reply (2-11) by using the reply function of the e-mail, which exchanges the sender for the recipient The B party can also use (2-13) the ISDN number of the mobile station.

Abstract: Equipment and method for acknowledging a transaction in an electronic payment system, comprising first processing means for providing electronic receipts corresponding to payments, second processing means for receiving said receipts, and transfer means for transferring said receipts between the first and second processing means. Said electronic receipt or part of it is encrypted with a public-key algorithm by using the payee's private key as an encryption key, and a receipt is decrypted with a public-key algorithm by using the payee's public key as s decryption key. If a recipient of the receipt wants to be convinced of the authenticity of the receipt, he decrypts the encryption by means of the payee's public key. Digital encryption with the payee's private key certifies the origin of the receipt undeniably. As long as the receipt is in encrypted form, it cannot be read without exactly knowing the payee, and counterfeiting of the receipt is impossible.

Abstract: An interception method and system for performing a lawful interception in a packet network such as the GPRS or UMTS network is described. A first network element having an intercepting function for intercepting data packets is provided, said interception function being controlled by an interception control means implemented in a second network element, wherein an intercepted data packet is transmitted from the first network element via the packet network to an interception gateway element providing an interface to a intercepting authority. The intercepted data packet is transmitted via a secure tunnel provided by an encryption processing. The interception control means and the interception gateway element may both be integrated in the second network element. The interception system has a clear advantage in scalability, no single point of failure, and an adaptation to different authority interfaces can be implemented only in the interception gateway.

Abstract: In a GPRS system, a method of a mobile station acquiring an IP network address. The method comprises the steps of: the mobile station generating a link identifier and sending it to a gateway over a wireless link in a network address request together with a request to check if the link identifier is unique; the gateway receiving the network address request and checking if the link identifier is unique; the gateway responding with a network address request response including either the sending a unique link identifier confirmed as being unique or a different unique link identifier; the gateway sending a network prefix to the mobile station; the mobile station combining the interface identifier and the network prefix to generate the IP network address.

Abstract: The present invention concerns an apparatus and method for measuring the azimuth and elevation of an object. The apparatus includes a platform; a base plate arranged to the construction of the platform rotatably in a plane, which is essentially horizontal; a sensor frame attached to the base plate; at least three sensor elements attached to the sensor frame; and an electronics unit for the control of the sensor elements, capable of performing the processing of signals received by the sensors. The sensor frame is rigidly attached to the base plate and the directional pattern of the sensor elements is such as to cover the entire angle span of interest in the elevation plane, while the pattern covers an essentially narrower angle in the azimuth plane. The direction finder does not easily lose the tracked object performing movements particularly in the elevation plane.

Abstract: In a GPRS system, a method of a mobile station acquiring an IP network address. The method comprises the steps of: the mobile station generating a link identifier and sending it to a gateway over a wireless link in a network address request together with a request to check if the link identifier is unique; the gateway receiving the network address request and checking if the link identifier is unique; the gateway responding with a network address request response including either the sending a unique link identifier confirmed as being unique or a different unique link identifier; the gateway sending a network prefix to the mobile station; the mobile station combining the interface identifier and the network prefix to generate the IP network address.