Abstract: A method of discovering services provided by a network function, NF, in a Service Based Architecture, SBA, based telecommunication network, wherein said network function is registered, in a Network Repository Function, NRF, comprised by said telecommunication network, using a service name, a service address and a selection rule, wherein said selection rule defines a further service address and a precondition for applying said selection rule, said method comprising the steps of receiving, by said NRF, a discovery request, from a Network Function, NF, consumer, wherein said discovery request comprises said service name, determining, by said NRF, that said selection rule applies by determining that said precondition is met based on said received discovery request and transmitting, by said NRF, to said NF consumer, a discovery response, wherein said discovery response comprises said further service address.

Abstract: A method of discovering services provided by a network function, NF, in a Service Based Architecture, SBA, based telecommunication network, wherein said network function is registered, in a Network Repository Function, NRF, comprised by said telecommunication network, using a service name, a service address and a selection rule, wherein said selection rule defines a further service address and a precondition for applying said selection rule, said method comprising the steps of receiving, by said NRF, a discovery request, from a Network Function, NF, consumer, wherein said discovery request comprises said service name, determining, by said NRF, that said selection rule applies by determining that said precondition is met based on said received discovery request and transmitting, by said NRF, to said NF consumer, a discovery response, wherein said discovery response comprises said further service address.

Abstract: There is provided mechanisms for enabling selection of service-providing NFs in a 3GPP communication network. A method is performed by an NRF. The method comprises obtaining one register request from each of the service-providing NFs. Each registration request comprises an NF profile. Each NF profile comprises a security setting attribute. The method comprises storing the NF profiles of the service-providing NFs. The method comprises obtaining a discovery request from a service-requesting NF. The request indicates an NF type. The method comprises providing a discovery response to the service-requesting NF. The discovery response comprises the NF profile of at least one of the service-providing NFs of the NF type, thereby enabling selection of the service-providing NFs. The security setting attribute may pertain to support for mutual TLS and/or for use of OAuth-2 based authorization.

Abstract: Methods are disclosed for provisioning and/or controlling operator profiles in terminals, each having an integrated circuit card identified by an integrated circuit card identifier. According to one aspect, a discovery server is configured with an authorization table including associations of integrated circuit card identifier, service provider identifier, and operator identifier(s). The discovery server receives, from a data preparation node, an event registration request that includes a number of elements. The discovery server determines whether the event is authorized. If so, the event is registered. This enables a terminal to seek to retrieve the event, to contact the data preparation node, and to eventually perform the profile operation. Some embodiments enable the network-initiated provisioning and/or controlling of operator profiles in machine-to-machine devices.

Abstract: A method of discovering services provided by a network function, NF, in a Service Based Architecture, SBA, based telecommunication network, wherein said network function is registered, in a Network Repository Function, NRF, comprised by said telecommunication network, using a service name, a service address and a selection rule, wherein said selection rule defines a further service address and a precondition for applying said selection rule, said method comprising the steps of receiving, by said NRF, a discovery request, from a Network Function, NF, consumer, wherein said discovery request comprises said service name, determining, by said NRF, that said selection rule applies by determining that said precondition is met based on said received discovery request and transmitting, by said NRF, to said NF consumer, a discovery response, wherein said discovery response comprises said further service address.

Abstract: A method of discovering services provided by a network function, NF, in a Service Based Architecture, SBA, based telecommunication network, wherein said network function is registered, in a Network Repository Function, NRF, comprised by said telecommunication network, using a service name, a service address and a selection rule, wherein said selection rule defines a further service address and a precondition for applying said selection rule, said method comprising the steps of receiving, by said NRF, a discovery request, from a Network Function, NF, consumer, wherein said discovery request comprises said service name, determining, by said NRF, that said selection rule applies by determining that said precondition is met based on said received discovery request and transmitting, by said NRF, to said NF consumer, a discovery response, wherein said discovery response comprises said further service address.

Abstract: Methods are disclosed for provisioning and/or controlling operator profiles in terminals, each having an integrated circuit card identified by an integrated circuit card identifier. A discovery server is configured with an authorization table including associations of integrated circuit card identifier, service provider identifier, and operator identifier(s). The discovery server receives, from a data preparation node, an event registration request comprising a number of elements. The discovery server determines whether the event is authorized. If so, the event is registered. This later enables a terminal to seek to retrieve the event, to contact the data preparation node, and to eventually perform the profile operation. Terminals, network nodes, and computer programs for use in the above method are also disclosed. Some embodiments enable the network-initiated provisioning and/or controlling of operator profiles in machine-to-machine devices.

Abstract: The present invention faces the issue of improving isolation of network slices in network slicing deployments where a centralized User Data Management, which includes subscription information for all users in a network with a plurality of network slices, is shared by the plurality of network slices. To solve this issue, the present invention provides for a distributed slice data repository for handling slice selection data for users equipped with a user equipment, UE, in a network that includes a plurality of network slices. This distributed slice data repository has: a slice user data repository, SDR, per network slice basis and including subscription information for each UE to be served by the network slice, and a slice selection repository, SSR, which is external to any network slice, shared by the plurality of network slices, and only includes slice selection data for every UE in the network.

Abstract: A method of discovering services provided by a network function, NF, in a Service Based Architecture, SBA, based telecommunication network, wherein said network function is registered, in a Network Repository Function, NRF, comprised by said telecommunication network, using a service name, a service address and a selection rule, wherein said selection rule defines a further service address and a precondition for applying said selection rule, said method comprising the steps of receiving, by said NRF, a discovery request, from a Network Function, NF, consumer, wherein said discovery request comprises said service name, determining, by said NRF, that said selection rule applies by determining that said precondition is met based on said received discovery request and transmitting, by said NRF, to said NF consumer, a discovery response, wherein said discovery response comprises said further service address.

Abstract: A technique for operating an RSP node (100), which is configured for remote subscriber identity module, SIM, provisioning, RSP, and comprises or is connectable to an interface (502) for communication with an MNO node (200) of a mobile network operator, MNO, is described. As to a method aspect of the technique, a download order message from the MNO node (200) is received through the interface (502). The download order message includes data (604) for generating a SIM profile (602). The SIM profile (602) is generated in response to the download order message according to the data (604) received for generating the SIM profile (602). A result (606) of the SIM profile generation is sent through the interface (502) to the MNO node (200).

Abstract: The present invention faces the issue of improving isolation of network slices in network slicing deployments where a centralized User Data Management, which includes subscription information for all users in a network with a plurality of network slices, is shared by the plurality of network slices. To solve this issue, the present invention provides for a distributed slice data repository for handling slice selection data for users equipped with a user equipment, UE, in a network that includes a plurality of network slices. This distributed slice data repository has: a slice user data repository, SDR, per network slice basis and including subscription information for each UE to be served by the network slice, and a slice selection repository, SSR, which is external to any network slice, shared by the plurality of network slices, and only includes slice selection data for every UE in the network.

Abstract: There is provided mechanisms for attachment of a wireless device to an MNO. A method is performed by the wireless device. The method comprises providing an authorization token to an AMF node of the MNO in conjunction with authenticating with the AMF node. The method comprises completing attachment to the MNO upon successful validation of the authorization token by the AMF node.

Abstract: A method for providing of data is provided, the method comprising at a first database: providing of group data; providing of data of a first entity, in particular of a first device, the data of the first entity comprising the group data; receiving from a second database a request for the data of the first entity; determining that the data of the first entity comprises the group data and that said group data has not been sent to the second database before; and if said determining step is in the affirmative, sending the data of the first entity comprising the group data to the second database.

Abstract: Nodes and methods of operation thereof for use with a UE capable of utilizing power saving mode. A Home Location Register/Home Subscriber Server (HLR/HSS) network node includes a receiver configured to receive power saving mode status data relating to a user equipment, a status flag determiner configured to set a status flag based on the received power saving mode status data and to store the status flag in a memory, and an access controller configured to control access to the user equipment by a terminating service originating in a Circuit Switched domain and/or an Internet Protocol Multimedia Subsystem domain of the telecommunications network, in which access is controlled based on the stored status flag. A Serving General Packet Radio Service Support Node/Mobile Management Entity (SGSN/MME) network node is also provided.

Abstract: A method is proposed of provisioning connectivity service data for a device when the device attaches to a telecommunications network. The connectivity service data comprises information required to enable connectivity between the device and at least one further device of the network. Dynamic data relating to the device is obtained as part of one of the device attaching to the telecommunications network and a previous attachment of the device to the network. The dynamic data is of a type that may change from one such attachment to another such attachment of the same device. The connectivity service data is then selected based on the obtained dynamic data. It is then arranged for the selected connectivity service data to be provisioned to the device.

Abstract: Nodes and methods of operation thereof for use with a UE capable of utilizing power saving mode. A Home Location Register/Home Subscriber Server (HLR/HSS) network node includes a receiver configured to receive power saving mode status data relating to a user equipment, a status flag determiner configured to set a status flag based on the received power saving mode status data and to store the status flag in a memory, and an access controller configured to control access to the user equipment by a terminating service originating in a Circuit Switched domain and/or an Internet Protocol Multimedia Subsystem domain of the telecommunications network, in which access is controlled based on the stored status flag. A Serving General Packet Radio Service Support Node/Mobile Management Entity (SGSN/MME) network node is also provided.

Abstract: Techniques for facilitating the activation or establishing of a data session between an M2M device and a service provider external to the wireless communications network serving the M2M device are disclosed. In an example method, a trigger message is received from the service provider, the trigger message including an external identifier for the wireless device. An internal network identifier for the wireless device and an associated data network identifier are identified, based on the external identifier. The internal network identifier and the data network identifier are then forwarded towards the wireless device, for use by the wireless device in activating or selecting a data session. The data network identifier may include an APN, or an NSAPI, or both, in some embodiments. The disclosed techniques are particularly useful in the context of wireless devices having subscriptions to more than one M2M service provider.

Abstract: According to one aspect of the teachings herein, a token is logically bound to an external identifier and provided to a wireless device via triggering signaling sent to the wireless device through an access network. The wireless device is configured to send registration signaling through the access network to a service provider network, in response to the triggering signaling and to return the token in such signaling. With this advantageous approach, the service provider network recognizes the token returned from the wireless device and thereby learns the association between a service provider network identifier that is received in the registration signaling for identifying the wireless device with respect to a service provided by the service provider network, and an external identifier assigned by the access network for use by the service provider network in identifying the wireless device to the access network.

Abstract: A method for providing of data is provided, the method comprising at a first database: providing of group data; providing of data of a first entity, in particular of a first device, the data of the first entity comprising the group data; receiving from a second database a request for the data of the first entity; determining that the data of the first entity comprises the group data and that said group data has not been sent to the second database before; and if said determining step is in the affirmative, sending the data of the first entity comprising the group data to the second database.

Abstract: A method is proposed of provisioning connectivity service data for a device when the device attaches to a telecommunications network. The connectivity service data comprises information required to enable connectivity between the device and at least one further device of the network. Dynamic data relating to the device is obtained as part of one of the device attaching to the telecommunications network and a previous attachment of the device to the network. The dynamic data is of a type that may change from one such attachment to another such attachment of the same device. The connectivity service data is then selected based on the obtained dynamic data. It is then arranged for the selected connectivity service data to be provisioned to the device.