Abstract: A broadband network gateway (BNG) in a wireline network. The BNG includes an interworking function in a control plane (IF-CP), the IF-CP configured to use a control plane interface (N1?/N2?) between the BNG in the wireline network and a fifth generation (5G) core in a 5G network to couple a control plane of the BNG to a control plane of the 5G core; an interworking function in a user plane (IF-UP), the IF-UP configured to use a user plane interface (N3?) between the BNG in the wireline network and the 5G core in the 5G network to couple a user plane of the BNG to a user plane of the 5G core; and a transmitter configured to transmit data packets toward the 5G core after the user plane of the BNG and the user plane of the 5G core have been coupled.

Abstract: A broadband network gateway (BNG) in a wireline network. The BNG includes an interworking function in a control plane (IF-CP), the IF-CP configured to use a control plane interface (N1?/N2?) between the BNG in the wireline network and a fifth generation (5G) core in a 5G network to couple a control plane of the BNG to a control plane of the 5G core; an interworking function in a user plane (IF-UP), the IF-UP configured to use a user plane interface (N3?) between the BNG in the wireline network and the 5G core in the 5G network to couple a user plane of the BNG to a user plane of the 5G core; and a transmitter configured to transmit data packets toward the 5G core after the user plane of the BNG and the user plane of the 5G core have been coupled.

Abstract: Methods and apparatuses for acquisition of an Address Resolution Protocol (ARP)/IPv6 neighbour cache at a user plane function (UPF) entity without performing deep packet inspection for every packet that traverses a network. The ARP broadcast/Internet Control Message Protocol version 6 (ICMPv6) neighbour solicitation multicast from any Ethernet client (a user equipment (UE) or clients behind the UE or clients in a data network (DN)) is responded to by the UPF entity itself, by looking up the ARP/IPv6 Neighbour cache built in the UPF entity, irrespective of whether the UPF entity acts as the core Ethernet switch or whether the core Ethernet switch is in the DN. The solution is simplified to always intercept ARP at the UPF entity and respond to it based on a local ARP/IPv6 Neighbour cache.

Abstract: Methods and apparatuses for acquisition of an Address Resolution Protocol (ARP)/IPv6 neighbour cache at a user plane function (UPF) entity without performing deep packet inspection for every packet that traverses a network. The ARP broadcast/Internet Control Message Protocol version 6 (ICMPv6) neighbour solicitation multicast from any Ethernet client (a user equipment (UE) or clients behind the UE or clients in a data network (DN)) is responded to by the UPF entity itself, by looking up the ARP/IPv6 Neighbour cache built in the UPF entity, irrespective of whether the UPF entity acts as the core Ethernet switch or whether the core Ethernet switch is in the DN. The solution is simplified to always intercept ARP at the UPF entity and respond to it based on a local ARP/IPv6 Neighbour cache.

Abstract: Methods and apparatuses for acquisition of an address resolution protocol (ARP)/IPv6 Neighbour cache at a user plane function (UPF) entity without performing deep packet inspection for every packet that traverses a network. The ARP broadcast/ICMPv6 Neighbour Solicitation multicast from any Ethernet client (a user equipment (UE) or clients behind the UE or clients in a data network (DN)) is responded to by the UPF entity itself, by looking up the ARP/IPv6 Neighbour cache built in the UPF entity, irrespective of whether the UPF entity acts as the core Ethernet switch or whether the core Ethernet switch is in the DN. The solution is simplified to always intercept ARP at the UPF entity and respond to it based on a local ARP/IPv6 Neighbour cache.

Abstract: Embodiments of the present invention disclose a cyber security management system, method, and apparatus. The system includes user equipment (UE), an access network (AN), a network function selection module, and at least two authentication modules. The UE is configured to send a first service request to the network function selection module, where the first service request carries authentication protocol information. The network function selection module is configured to: select a target authentication module based on the authentication protocol information, and send a second service request to the target authentication module. The target authentication module is configured to perform mutual authentication with the UE. The target authentication module is further configured to: determine a first security configuration according to a specified security policy, and send the first security configuration to the AN.

Abstract: A broadband network gateway (BNG) in a wireline network. The BNG includes an interworking function in a control plane (IF-CP), the IF-CP configured to use a control plane interface (N1?/N2?) between the BNG in the wireline network and a fifth generation (5G) core in a 5G network to couple a control plane of the BNG to a control plane of the 5G core; an interworking function in a user plane (IF-UP), the IF-UP configured to use a user plane interface (N3?) between the BNG in the wireline network and the 5G core in the 5G network to couple a user plane of the BNG to a user plane of the 5G core; and a transmitter configured to transmit data packets toward the 5G core after the user plane of the BNG and the user plane of the 5G core have been coupled.

Abstract: A broadband network gateway (BNG) in a wireline network. The BNG includes an interworking function in a control plane (IF-CP), the IF-CP configured to use a control plane interface (N1?/N2?) between the BNG in the wireline network and a fifth generation (5G) core in a 5G network to couple a control plane of the BNG to a control plane of the 5G core; an interworking function in a user plane (IF-UP), the IF-UP configured to use a user plane interface (N3?) between the BNG in the wireline network and the 5G core in the 5G network to couple a user plane of the BNG to a user plane of the 5G core; and a transmitter configured to transmit data packets toward the 5G core after the user plane of the BNG and the user plane of the 5G core have been coupled.

Abstract: Methods and apparatuses for acquisition of an address resolution protocol (ARP)/IPv6 Neighbour cache at a user plane function (UPF) entity without performing deep packet inspection for every packet that traverses a network. The ARP broadcast/ICMPv6 Neighbour Solicitation multicast from any Ethernet client (a user equipment (UE) or clients behind the UE or clients in a data network (DN)) is responded to by the UPF entity itself, by looking up the ARP/IPv6 Neighbour cache built in the UPF entity, irrespective of whether the UPF entity acts as the core Ethernet switch or whether the core Ethernet switch is in the DN. The solution is simplified to always intercept ARP at the UPF entity and respond to it based on a local ARP/IPv6 Neighbour cache.

Abstract: Embodiments of the present invention disclose a cyber security management system, method, and apparatus. The system includes UE, an AN, a network function selection module, and at least two authentication modules. The UE is configured to send a first service request to the network function selection module, where the first service request carries authentication protocol information. The network function selection module is configured to: select a target authentication module based on the authentication protocol information, and send a second service request to the target authentication module. The target authentication module is configured to perform mutual authentication with the UE. The target authentication module is further configured to: determine a first security configuration according to a specified security policy, and send the first security configuration to the AN.

Abstract: A broadband network gateway (BNG) in a wireline network. The BNG includes an interworking function in a control plane (IF-CP), the IF-CP configured to use a control plane interface (N1?/N2?) between the BNG in the wireline network and a fifth generation (5G) core in a 5G network to couple a control plane of the BNG to a control plane of the 5G core; an interworking function in a user plane (IF-UP), the IF-UP configured to use a user plane interface (N3?) between the BNG in the wireline network and the 5G core in the 5G network to couple a user plane of the BNG to a user plane of the 5G core; and a transmitter configured to transmit data packets toward the 5G core after the user plane of the BNG and the user plane of the 5G core have been coupled.

Abstract: In one embodiment, a method of configuring multiple per user access connections includes receiving, by an access gateway (AG) from an access point (AP), a first extensible authentication protocol (EAP) message including a first capability of a user equipment (UE) and transmitting, by the AG to an authentication, authorization and accounting (AAA) server, a second EAP message including the first capability of the UE and indication second capability of the AG. The method also includes receiving, by the AG from the AAA server, and an AAA message including a negotiated connection capability version and AAA message parameters and transmitting, by AG to the AP, a third EAP message including the negotiated connection capability version.

Abstract: A computer program product implemented in an Internet Protocol (IP) edge node positioned in a fixed access network, the computer program product comprising computer executable instructions stored on a non-transitory computer readable medium such that when executed by a processor cause the IP edge node to receive an address registration request from a residential gateway (RG), wherein the address registration request comprises an IP version six (IPv6) address of a third Generation Partnership Project (3GPP) visiting mobile host connected to a local fixed network associated with the RG and a host identifier (ID) assigned to the visiting host and not to any other host in the local fixed network; establish an IP Connectivity Access Network (IP-CAN) session for the visiting host; and manage quality of service (QoS) for the visiting host independently of other hosts in the local fixed network by managing the visiting host IP-CAN session.

Abstract: A computer program product implemented in an Internet Protocol (IP) edge node positioned in a fixed access network, the computer program product comprising computer executable instructions stored on a non-transitory computer readable medium such that when executed by a processor cause the IP edge node to receive an address registration request from a residential gateway (RG), wherein the address registration request comprises an IP version six (IPv6) address of a third Generation Partnership Project (3GPP) visiting mobile host connected to a local fixed network associated with the RG and a host identifier (ID) assigned to the visiting host and not to any other host in the local fixed network; establish an IP Connectivity Access Network (IP-CAN) session for the visiting host; and manage quality of service (QoS) for the visiting host independently of other hosts in the local fixed network by managing the visiting host IP-CAN session.

Abstract: In a network wherein nodes request services adapted to be provided via a plurality of home agents, a system includes nodes configured for having associated a service identifier identifying a service requested by the at least one node, the system being configured for selecting the home agents to provide the services requested, wherein the home agents are selected based on the service identifiers. A node may thus have a first service identifier and a second service identifier identifying two different services adapted to be provided, even simultaneously, by a first and a second home agent respectively.

Abstract: In one embodiment, a method of configuring multiple per user access connections includes receiving, by an access gateway (AG) from an access point (AP), a first extensible authentication protocol (EAP) message including a first capability of a user equipment (UE) and transmitting, by the AG to an authentication, authorization and accounting (AAA) server, a second EAP message including the first capability of the UE and indication second capability of the AG. The method also includes receiving, by the AG from the AAA server, and an AAA message including a negotiated connection capability version and AAA message parameters and transmitting, by AG to the AP, a third EAP message including the negotiated connection capability version.

Abstract: A method for providing telecommunications services in an environment in which a plurality of telecommunications systems operate according to different standards (WLAN, UMTS) and are reachable from a terminal (T) in an integrated manner, wherein at least one of said services can be provided by more systems. Upon the provision request for the above-cited service, the method according to the invention envisages the steps of: —verifying the availability for the provision of the requested service, of at least a first (WLAN) and a second (UMTS) system, and —selecting, in an automatic and dynamic way, one between at least said first (WLAN) and said second (UMTS) system for the provision of the service being requested.

Abstract: At least one user is given access to a respective home operator over a communication network such as an IP network, via an access network and through any of a plurality of supported visited networks. The user is communicated a list of the supported visited networks and is thus given the possibility of selecting one of the supported visited networks as the path for reaching the respective home operator.

Abstract: In a network wherein nodes request services adapted to be provided via a plurality of home agents, a system includes nodes configured for having associated a service identifier identifying a service requested by the at least one node, the system being configured for selecting the home agents to provide the services requested, wherein the home agents are selected based on the service identifiers. A node may thus have a first service identifier and a second service identifier identifying two different services adapted to be provided, even simultaneously, by a first and a second home agent respectively.

Abstract: At least one user is given access to a respective home operator over a communication network such as an IP network, via an access network and through any of a plurality of supported visited networks. The user is communicated a list of the supported visited networks and is thus given the possibility of selecting one of the supported visited networks as the path for reaching the respective home operator.