Abstract: An apparatus and method are provided for monitoring a behavior of a communication device by using network controllers and network manager. The communication device is included in a network comprising a set of communication devices and a network manager allowing access by the communication devices to a communication network. A communication device may send a broadcast message to available network controllers and a network manager. The communication device may also send a service request to the network manager, the service request being routed by the network manager to a communication network and sent in broadcast by the network manager to the network controllers. Using the service request as the basis for a first report on behavior of the communication device, the communication device may additionally verify the first report by a report by network controllers based on the service request received from network manager.

Abstract: For securing a provable resource possession on a host device having spawned a set of virtual machines providing services to a client device, the client device is able to send a challenge request to each virtual machine, the challenge request containing a physically unclonable function (PUF) challenge and a filter rule; receive a PUF filtered response from each virtual machine, the PUF filtered response being a PUF response that is filtered according to the filter rule and obtained by challenging; combine the PUF filtered responses into a reconstructed PUF according to the filter rule; and if the reconstructed PUF corresponds to an expected response in the challenge-response database, validate that the set of virtual machines is effectively running on the right host device.

Abstract: A method and system of authenticating a device within a network of connected devices that share a ledger of transactions between them under the form of exchanged blockchain messages and comprising: computing a PoK chain (70) based on the enhanced blockchain, receiving an authentication request from an application or a device, the authentication request including one or more PoKs (71), retrieving from the PoK database the PoK chain (70) corresponding to the application or device identified in the authentication request; computing a PoK (71) based on the PoK chain (70) retrieved from the PoK database, comparing it with the PoK (71) included in the authentication request, and if they match, validating the authentication request.

Abstract: There is provided a process for a blockchain, BC, consensus verification, comprising steps of receiving a transaction comprising sensor data on an event and a position data of a sender node of a blockchain network, selecting a number of nodes of the blockchain network as validating nodes based on their position data and the position data of the sender node, sending a new block to the blockchain network, wherein the new block is based on the received transaction, receiving labels assigned to the new block from the validating nodes, and verifying the received labels with a consensus protocol.

Abstract: A first network device for use in a blockchain network is described.

Abstract: There is provided a method comprising, receiving, from a second network node, a request to access data of a user of a user device, forwarding the request to the user device, receiving, from the user device, an acknowledgement indicating that access to the data of the user is granted and transmitting, in response to receiving the acknowledgement, a first indication to a blockchain, the first indication indicating that access to the data of the user is granted.

Abstract: Method, apparatus, and computer program are disclosed for operating drones or other mobile computers in sensitive environments, where the drones are exposed to attacks with updates, incorrect/malicious commands or even being joined by malicious drones pretending to be part of the drone swarm or group. The method includes leveraging both trusted computing capabilities and that each individual drone can decide on the level of assurance and trust of any other drone we can construct a consensus algorithm such that if a drone wishes to perform a sensitive operation then all drones can attest that drone and decided on its level of assurance.

Abstract: According to an example aspect of the present invention, there is provided a method comprising: registering a record for a radio resource management application from an application vendor in a distributed ledger, wherein the record is cryptographically signed by the application vendor, comprises application data, and defines a deployment method for deploying the application to one or more radio access network controllers. The method further comprises transmitting, in accordance with the deployment method defined in the record, the application data to a radio access network controller for applying the application for radio resource management.

Abstract: A first network device for use in a blockchain network is described.

Abstract: An apparatus (101) is disclosed for remotely controlling a network device (102). The apparatus comprises means for determining (200) that said network device (102) is unresponsive; means for determining a patch for application at said network device (102) for resolving said unresponsiveness; means for sending (207) said patch to an intermediary device (103) capable of communicating with said network device (102); means for signing (208) a first transaction corresponding to said patch with a blockchain network (104), wherein said first transaction is a multi-signed transaction signed by said apparatus (101) and said intermediary device (103) and wherein said first transaction is indicative of a patch result to be obtained; and means for receiving (218) a message from said intermediary device (103) that said patch has been applied. Also disclosed are a network device, an intermediary device, a blockchain network device and corresponding methods.

Abstract: An apparatus and method are provided for monitoring a behavior of a communication device by using network controllers and network manager. The communication device is included in a network comprising a set of communication devices and a network manager allowing access by the communication devices to a communication network. A communication device may send a broadcast message to available network controllers and a network manager. The communication device may also send a service request to the network manager, the service request being routed by the network manager to a communication network and sent in broadcast by the network manager to the network controllers. Using the service request as the basis for a first report on behavior of the communication device, the communication device may additionally verify the first report by a report by network controllers based on the service request received from network manager.

Abstract: According to an example aspect of the present invention, there is provided a method comprising, generating a first and a second share of a private key associated with a terminal, generating a moduli-set associated with the terminal, transmitting the first share to a second network element and the second share to a third network element, receiving, from the second network element, a message comprising an indication that an investigation has started related to the terminal and transmitting the moduli-set associated with the terminal to the second network element.

Abstract: There is provided a method comprising, receiving, from a second network node, a request to access data of a user of a user device, forwarding the request to the user device, receiving, from the user device, an acknowledgement indicating that access to the data of the user is granted and transmitting, in response to receiving the acknowledgement, a first indication to a blockchain, the first indication indicating that access to the data of the user is granted.

Abstract: For securing a provable resource possession on a host device having spawned a set of virtual machines providing services to a client device, the client device is able to send a challenge request to each virtual machine, the challenge request containing a physically unclonable function (PUF) challenge and a filter rule; receive a PUF filtered response from each virtual machine, the PUF filtered response being a PUF response that is filtered according to the filter rule and obtained by challenging; combine the PUF filtered responses into a reconstructed PUF according to the filter rule; and if the reconstructed PUF corresponds to an expected response in the challenge-response database, validate that the set of virtual machines is effectively running on the right host device.

Abstract: According to an example aspect of the present invention, there is provided a method comprising, transmitting information about a new file associated with a user device to a first blockchain, determining that an investigation associated with the user device has started, transmitting information to a private channel during the investigation and upon termination of the investigation, transmitting information about termination of the investigation to the first blockchain.

Abstract: Various embodiments relate to a method and apparatus for using blockchains as an integrity tracking tool for network elements, the method including the steps of receiving, by a blockchain network, a patch request from a patch initiator, validating, by the blockchain network, the patch request and writing the patch request on the blockchain, transmitting, by the blockchain network, the patch request to a network element, receiving, by the blockchain network, a patch report from the network element, and validating, by the blockchain network, the patch report and writing the patch report on the blockchain.

Abstract: A method and system of authenticating a device within a network of connected devices that share a ledger of transactions between them under the form of exchanged blockchain messages and comprising: computing a PoK chain (70) based on the enhanced blockchain, receiving an authentication request from an application or a device, the authentication request including one or more PoKs (71), retrieving from the PoK database the PoK chain (70) corresponding to the application or device identified in the authentication request; computing a PoK (71) based on the PoK chain (70) retrieved from the PoK database, comparing it with the PoK (71) included in the authentication request, and if they match, validating the authentication request.