Patents by Inventor Marco Spini

Marco Spini has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Patent number: 10897712
    Abstract: Embodiments of the present invention disclose a cyber security management system, method, and apparatus. The system includes user equipment (UE), an access network (AN), a network function selection module, and at least two authentication modules. The UE is configured to send a first service request to the network function selection module, where the first service request carries authentication protocol information. The network function selection module is configured to: select a target authentication module based on the authentication protocol information, and send a second service request to the target authentication module. The target authentication module is configured to perform mutual authentication with the UE. The target authentication module is further configured to: determine a first security configuration according to a specified security policy, and send the first security configuration to the AN.
    Type: Grant
    Filed: January 5, 2019
    Date of Patent: January 19, 2021
    Assignee: HUAWEI TECHNOLOGIES CO., LTD.
    Inventors: Lichun Li, Fei Liu, Marco Spini
  • Publication number: 20200314024
    Abstract: A broadband network gateway (BNG) in a wireline network. The BNG includes an interworking function in a control plane (IF-CP), the IF-CP configured to use a control plane interface (N1?/N2?) between the BNG in the wireline network and a fifth generation (5G) core in a 5G network to couple a control plane of the BNG to a control plane of the 5G core; an interworking function in a user plane (IF-UP), the IF-UP configured to use a user plane interface (N3?) between the BNG in the wireline network and the 5G core in the 5G network to couple a user plane of the BNG to a user plane of the 5G core; and a transmitter configured to transmit data packets toward the 5G core after the user plane of the BNG and the user plane of the 5G core have been coupled.
    Type: Application
    Filed: June 1, 2020
    Publication date: October 1, 2020
    Inventors: Shuping Peng, Behcet Sarikaya, Huan Li, Marco Spini
  • Patent number: 10778609
    Abstract: A broadband network gateway (BNG) in a wireline network. The BNG includes an interworking function in a control plane (IF-CP), the IF-CP configured to use a control plane interface (N1?/N2?) between the BNG in the wireline network and a fifth generation (5G) core in a 5G network to couple a control plane of the BNG to a control plane of the 5G core; an interworking function in a user plane (IF-UP), the IF-UP configured to use a user plane interface (N3?) between the BNG in the wireline network and the 5G core in the 5G network to couple a user plane of the BNG to a user plane of the 5G core; and a transmitter configured to transmit data packets toward the 5G core after the user plane of the BNG and the user plane of the 5G core have been coupled.
    Type: Grant
    Filed: May 18, 2018
    Date of Patent: September 15, 2020
    Assignee: Futurewei Technologies, Inc.
    Inventors: Shuping Peng, Behcet Sarikaya, Huan Li, Marco Spini
  • Publication number: 20200186490
    Abstract: Methods and apparatuses for acquisition of an address resolution protocol (ARP)/IPv6 Neighbour cache at a user plane function (UPF) entity without performing deep packet inspection for every packet that traverses a network. The ARP broadcast/ICMPv6 Neighbour Solicitation multicast from any Ethernet client (a user equipment (UE) or clients behind the UE or clients in a data network (DN)) is responded to by the UPF entity itself, by looking up the ARP/IPv6 Neighbour cache built in the UPF entity, irrespective of whether the UPF entity acts as the core Ethernet switch or whether the core Ethernet switch is in the DN. The solution is simplified to always intercept ARP at the UPF entity and respond to it based on a local ARP/IPv6 Neighbour cache.
    Type: Application
    Filed: February 13, 2020
    Publication date: June 11, 2020
    Inventors: Sridhar Bhaskaran, Marco Spini, Fenqin Zhu
  • Publication number: 20190159029
    Abstract: Embodiments of the present invention disclose a cyber security management system, method, and apparatus. The system includes UE, an AN, a network function selection module, and at least two authentication modules. The UE is configured to send a first service request to the network function selection module, where the first service request carries authentication protocol information. The network function selection module is configured to: select a target authentication module based on the authentication protocol information, and send a second service request to the target authentication module. The target authentication module is configured to perform mutual authentication with the UE. The target authentication module is further configured to: determine a first security configuration according to a specified security policy, and send the first security configuration to the AN.
    Type: Application
    Filed: January 5, 2019
    Publication date: May 23, 2019
    Inventors: Lichun LI, Fei LIU, Marco SPINI
  • Publication number: 20190052580
    Abstract: A broadband network gateway (BNG) in a wireline network. The BNG includes an interworking function in a control plane (IF-CP), the IF-CP configured to use a control plane interface (N1?/N2?) between the BNG in the wireline network and a fifth generation (5G) core in a 5G network to couple a control plane of the BNG to a control plane of the 5G core; an interworking function in a user plane (IF-UP), the IF-UP configured to use a user plane interface (N3?) between the BNG in the wireline network and the 5G core in the 5G network to couple a user plane of the BNG to a user plane of the 5G core; and a transmitter configured to transmit data packets toward the 5G core after the user plane of the BNG and the user plane of the 5G core have been coupled.
    Type: Application
    Filed: May 18, 2018
    Publication date: February 14, 2019
    Inventors: Shuping Peng, Behcet Sarikaya, Huan Li, Marco Spini
  • Patent number: 9578548
    Abstract: In one embodiment, a method of configuring multiple per user access connections includes receiving, by an access gateway (AG) from an access point (AP), a first extensible authentication protocol (EAP) message including a first capability of a user equipment (UE) and transmitting, by the AG to an authentication, authorization and accounting (AAA) server, a second EAP message including the first capability of the UE and indication second capability of the AG. The method also includes receiving, by the AG from the AAA server, and an AAA message including a negotiated connection capability version and AAA message parameters and transmitting, by AG to the AP, a third EAP message including the negotiated connection capability version.
    Type: Grant
    Filed: June 21, 2013
    Date of Patent: February 21, 2017
    Assignee: FUTUREWEI TECHNOLOGIES, INC.
    Inventors: Kaippallimalil Mathew John, Marco Spini
  • Patent number: 9271318
    Abstract: A computer program product implemented in an Internet Protocol (IP) edge node positioned in a fixed access network, the computer program product comprising computer executable instructions stored on a non-transitory computer readable medium such that when executed by a processor cause the IP edge node to receive an address registration request from a residential gateway (RG), wherein the address registration request comprises an IP version six (IPv6) address of a third Generation Partnership Project (3GPP) visiting mobile host connected to a local fixed network associated with the RG and a host identifier (ID) assigned to the visiting host and not to any other host in the local fixed network; establish an IP Connectivity Access Network (IP-CAN) session for the visiting host; and manage quality of service (QoS) for the visiting host independently of other hosts in the local fixed network by managing the visiting host IP-CAN session.
    Type: Grant
    Filed: April 11, 2014
    Date of Patent: February 23, 2016
    Assignee: Futurewei Technologies, Inc.
    Inventors: Behcet Sarikaya, Marco Spini
  • Publication number: 20140307651
    Abstract: A computer program product implemented in an Internet Protocol (IP) edge node positioned in a fixed access network, the computer program product comprising computer executable instructions stored on a non-transitory computer readable medium such that when executed by a processor cause the IP edge node to receive an address registration request from a residential gateway (RG), wherein the address registration request comprises an IP version six (IPv6) address of a third Generation Partnership Project (3GPP) visiting mobile host connected to a local fixed network associated with the RG and a host identifier (ID) assigned to the visiting host and not to any other host in the local fixed network; establish an IP Connectivity Access Network (IP-CAN) session for the visiting host; and manage quality of service (QoS) for the visiting host independently of other hosts in the local fixed network by managing the visiting host IP-CAN session.
    Type: Application
    Filed: April 11, 2014
    Publication date: October 16, 2014
    Applicant: Futurewei Technologies, Inc.
    Inventors: Behcet Sarikaya, Marco Spini
  • Patent number: 8681752
    Abstract: In a network wherein nodes request services adapted to be provided via a plurality of home agents, a system includes nodes configured for having associated a service identifier identifying a service requested by the at least one node, the system being configured for selecting the home agents to provide the services requested, wherein the home agents are selected based on the service identifiers. A node may thus have a first service identifier and a second service identifier identifying two different services adapted to be provided, even simultaneously, by a first and a second home agent respectively.
    Type: Grant
    Filed: July 30, 2004
    Date of Patent: March 25, 2014
    Assignee: Telecom Italia S.p.A.
    Inventors: Luca Dell'Uomo, Marco Spini
  • Publication number: 20130343304
    Abstract: In one embodiment, a method of configuring multiple per user access connections includes receiving, by an access gateway (AG) from an access point (AP), a first extensible authentication protocol (EAP) message including a first capability of a user equipment (UE) and transmitting, by the AG to an authentication, authorization and accounting (AAA) server, a second EAP message including the first capability of the UE and indication second capability of the AG. The method also includes receiving, by the AG from the AAA server, and an AAA message including a negotiated connection capability version and AAA message parameters and transmitting, by AG to the AP, a third EAP message including the negotiated connection capability version.
    Type: Application
    Filed: June 21, 2013
    Publication date: December 26, 2013
    Inventors: John Kaippallimalil, Marco Spini
  • Patent number: 8064915
    Abstract: A method for providing telecommunications services in an environment in which a plurality of telecommunications systems operate according to different standards (WLAN, UMTS) and are reachable from a terminal (T) in an integrated manner, wherein at least one of said services can be provided by more systems. Upon the provision request for the above-cited service, the method according to the invention envisages the steps of: —verifying the availability for the provision of the requested service, of at least a first (WLAN) and a second (UMTS) system, and —selecting, in an automatic and dynamic way, one between at least said first (WLAN) and said second (UMTS) system for the provision of the service being requested.
    Type: Grant
    Filed: September 11, 2003
    Date of Patent: November 22, 2011
    Assignee: Telecom Italia S.p.A.
    Inventors: Francesco Arduini, Sergio Barberis, Nicola Pio Magnani, Marco Spini
  • Patent number: 7706788
    Abstract: At least one user is given access to a respective home operator over a communication network such as an IP network, via an access network and through any of a plurality of supported visited networks. The user is communicated a list of the supported visited networks and is thus given the possibility of selecting one of the supported visited networks as the path for reaching the respective home operator.
    Type: Grant
    Filed: June 30, 2003
    Date of Patent: April 27, 2010
    Assignee: Telecom Italia S.p.A.
    Inventors: Antonio Ascolese, Luciana Costa, Luca Dell'Uomo, Simone Ruffino, Marco Spini
  • Publication number: 20090080387
    Abstract: In a network wherein nodes request services adapted to be provided via a plurality of home agents, a system includes nodes configured for having associated a service identifier identifying a service requested by the at least one node, the system being configured for selecting the home agents to provide the services requested, wherein the home agents are selected based on the service identifiers. A node may thus have a first service identifier and a second service identifier identifying two different services adapted to be provided, even simultaneously, by a first and a second home agent respectively.
    Type: Application
    Filed: July 30, 2004
    Publication date: March 26, 2009
    Inventors: Luca Dell'Uomo, Marco Spini
  • Publication number: 20060153135
    Abstract: At least one user is given access to a respective home operator over a communication network such as an IP network, via an access network and through any of a plurality of supported visited networks. The user is communicated a list of the supported visited networks and is thus given the possibility of selecting one of the supported visited networks as the path for reaching the respective home operator.
    Type: Application
    Filed: June 30, 2003
    Publication date: July 13, 2006
    Inventors: Antonio Ascolese, Luciana Costa, Luca Dell'Uomo, Simone Ruffino, Marco Spini
  • Publication number: 20060068783
    Abstract: A method for providing telecommunications services in an environment in which a plurality of telecommunications systems operate according to different standards (WLAN, UMTS) and are reachable from a terminal (T) in an integrated manner, wherein at least one of said services can be provided by more systems. Upon the provision request for the above-cited service, the method according to the invention envisages the steps of:—verifying the availability for the provision of the requested service, of at least a first (WLAN) and a second (UMTS) system, and—selecting, in an automatic and dynamic way, one between at least said first (WLAN) and said second (UMTS) system for the provision of the service being requested.
    Type: Application
    Filed: September 11, 2003
    Publication date: March 30, 2006
    Applicant: TELECOM ITALIA S.P.A.
    Inventors: Francesco Arduini, Sergio Barberis, Nicola Magnani, Marco Spini