Abstract: A first network node operating in a first communications network can receive a first message from a second network node operating in a second communications network. The first network node can further, responsive to receiving the first message, determine that the second network node is associated with a network operator that has a service-level agreement, SLA, with a content operator associated with the first network node. The first network node can further transmit a second message to the second network node, the second message including information based on the second node being associated with the network operator that has the SLA with the content operator. The information being associated with whether a subsequent message from a communication device associated with the second network node is to be transmitted to an origin server with an unencrypted server name indication, SNI.

Abstract: A method of and a Session Management Function, SMF, for provisioning processing rules for user traffic at a User Plane Function, UPF, in a core network of a telecommunication network are disclosed. The core network comprises an Access and Mobility Management Function, AMF and a Policy Control Function, PCF. The SMF first transmits to the PCF a request for obtaining processing rules for user traffic; the SMF then receives from the PCF processing rules enabling at least one of a Uniform Resource Identifier, URI, level processing policy and a Server Name Indication, SNI, level processing policy for the user traffic and provision the received processing rules with the UPF. The UPF can then process user traffic based on the provisioned processing rules, differentiating the user traffic at the more detailed URI and/or SNI level.

Abstract: Various embodiments of the present disclosure provide a method for traffic detection. The method which may be performed by a first network node includes receiving a message from a second network node. The method further includes determining packet flow description information for traffic detection according to the message. The packet flow description information may indicate a combination criterion for two or more packet flow descriptions, and/or a protocol matching criterion for a domain name in a packet flow description. According to the embodiments of the present disclosure, the packet flow description definition can be extended to support more accurate traffic detection.

Abstract: A method may be provided to operate a first network node of a wireless communication network. The method may include receiving a request from a second network node to activate packet flow descriptor PFD extraction with respect to a session for a wireless device, and receiving application traffic for the wireless device, wherein an address is provided to route the application traffic. The method may also include determining an application identifier for the address responsive to the address for the application traffic being unknown to the first network node, and transmitting a PFD notification to the second network node, wherein the PFD notification includes the application identifier.

Abstract: A method of operating a core network CN node is disclosed. A plurality of PCC rules are received corresponding to a plurality of applications used by a communication device. Each of the applications has a respective appID, and each of the PCC rules is associated with a respective application/appID. A first information element is generated based on a first PCC rule associated with a respective first application/appID including a first URR having a first URR Identifier and including first URR parameters associated with the first URR. A second information element is generated based on a second PCC rule associated with a respective second application/appID including a second URR having a second URR identifier without including second URR parameters associated with the second URR. A session establishment request message is transmitted to a second CN node. The session establishment request message includes the first and second information elements.

Abstract: A method for enabling automated provisioning of Packet Flow Descriptors (PFD) for the detection of applications in 5GC by a network data analytics entity (e.g. NWDAF). The method comprises receiving at the network data analytics entity a traffic trace together with an at least one further parameter, determining a Packet Flow Descriptor (PFD) that can be used to classify the traffic trace, and providing the PFD together with the at least one further parameter as traffic classification analytic result. This analytic can be stored in a user data repository entity (e.g. UDR). The method may further comprise classifying the traffic trace into a set of traffic traces, wherein the set of traffic traces share the at least one further parameter and are classified using the PFD.

Abstract: A method for collecting user equipment (UE) data includes performing, at a network data analytics function (NWDAF), discovery of an application function (AF) for data collection. The discovery is based on the received request. The method subscribes to the AF for data collection at the NWDAF, and determines by the AF, one or more target UEs for data collection. The method performs discovery of a policy control function (PCF) by the AF, and sends a policy from the PCF to the one or more target UEs. The method establishes an association between at least one of the one or more target UEs and the AF, instructs the one or more target UEs to collect data and to send the collected data to the AF, and sends the collected data from the AF to the NWDAF.

Abstract: A method for deactivating Server Name Indication, SNI, encryption in a telecommunication network, wherein said telecommunication network comprises a Domain Name System, DNS, server, said method comprising the steps of receiving, by said DNS server, from a User Equipment, UE, a DNS query comprising a Domain Name to be converted to an Internet Protocol, IP, address, determining, by said DNS server, that SNI encryption is to be deactivated for subsequent traffic associated with said Domain Name, forwarding, by said DNS server, said DNS query to an external DNS server, wherein said DNS query comprises said Domain Name and a request for deactivating SNI encryption, receiving, by said DNS server, from said external DNS server, a DNS answer, wherein said DNS answer comprises said converted IP address and wherein said DNS answer is free from encryption keys for encrypting SNI and forwarding, by said DNS server, said DNS answer comprising said converted IP address to said UE, wherein said DNS answer is free from encry

Abstract: Embodiments described herein relate to methods and apparatuses for providing quality of service handling of user traffic transmitted by a first content provider. A method in a first network function comprises receiving an onboarding request from the first content provider, wherein the onboarding request comprises information relating to a QoS handling service that the first content provider supports.

Abstract: According to an aspect, there is provided a method of operating a network node in a communication network. The method comprises: receiving, from an analysis node in the communication network, a notification to reduce battery consumption of a wireless device that is connected to the communication network; and adjusting one or more aspects of the connection of the wireless device to the communication network according to the received notification.

Abstract: The invention relates to a method for operating a network exposure entity (100) in a cellular network, the method comprising receiving (S30) a first request from an application entity requesting vehicle related information, the vehicle related information comprising a vehicle identifier and at least one vehicle related parameter of a vehicle. A subscription request is transmitted to a collecting entity (200, 700) configured to collect the vehicle related information for the vehicle, the transmitted subscription request comprising the at least one vehicle related parameter. A first notification is received from the collecting entity in response to the subscription, the response comprising information related to the at least one vehicle related parameter, and a second notification is transmitted to the application entity comprising the vehicle identifier and the information related to the at least one vehicle related parameter.

Abstract: Methods, a system for managing traffic transmitted by a User Equipment (UE), a UE for enabling differentiation of the traffic, a Packet Gate-Way User plane (PGW-U) for managing the traffic as well as a Mobility Management Entity (MME) for enabling differentiation of the traffic are disclosed. The PGW-U (120) receives (9) a marking type and a marking value, which originate from the SCS/AS (170) and which are associated with an application identifier for identifying application traffic to be handled according to the marking type and the marking value. The UE (110) receives (14), from the MME (130), the marking type and the marking value. The UE (110) transmits (17), towards the PGW-U (120), application traffic marked according to the marking type and marking value. The PGW-U (120) inspects (18) the traffic according to the marking type to obtain the marking value. The PGW-U (120) handles (18) the traffic based on the marking value.

Abstract: Periodic requests for to Packet Flow Description, PFD, data updates on all Application Ids generate a constant background load in several network function nodes, even if applications have not been updated. There is provided a mechanism to optimize PFD management updates in a telecommunication network, whereby PFD data for a selected number of applications are stored and updated permanently, whilst PFD data for other applications are only temporarily stored so that storage and updates are released when these other applications are not in use. A list of permanent Application Ids is configured for the most frequently used applications. When a control rule specifies an Application Id not included in the list of permanent Application Ids, the specified Application Id is included in a list of temporary Application Ids, which are periodically checked and, when not used, are removed from the list of temporary Application Ids.

Abstract: A method of supporting Packet Flow Descriptor, PFD, management in a Service Based Architecture, SBA, based telecommunication network, wherein said telecommunication network comprises an Application Function, AF, that is arranged for implementing an Packet Flow Descriptor, PFD, management service allowing request and response message from and to a Network Exposure Function, NEF, comprised by said telecommunication network, said method comprises the steps of receiving, by said AF, from said NEF, a request message for requesting a PFD, wherein said request message comprises an application identification for identifying an application transmitting, by said AF, to said NEF, a response message comprising said application identification and said requested PFD. A complementary method and corresponding network functions and a computer program product are also presented herein.

Abstract: Methods, a user data node (120), a policy node (150), an application node (170) and an operator network (101) for enabling management of an attack towards an application (190) hosted by the application node (170) are disclosed. The policy node (150) receives (3) attack information and an identifier of the application (190) to which the attack information applies. The attack information relates to the management of the attack and the attack information comprises a type of attack, a set of detection conditions relating to detection of attacks of the type of attack, and a mitigation action to be invoked when at least one detection condition of the set of detection conditions is fulfilled. In this manner, degeneration of the application (190) caused by the attacks of the type of attack is mitigatable. The policy node (150) generates (13) at least one rule based on the attack information.

Abstract: Implementation of an application rule for an application to be accessed by a User Equipment, UE, in a user session in a Service Based Architecture, SBA, domain in a core network of a telecommunications system is disclosed. The SBA, among others, comprises a Policy Control Function, PCF (6), an Application Function, AF (5), and a Session Management Function, SMF (9). The method comprising the steps of receiving, by the PCF (6), an application rule comprising an AF Identifier, AF-ID, identifying the application rule, an Application Identifier, App-ID, identifying the application, and at least one service requirement for processing the application in the SBA domain. The PCF (6) instructing the SMF (9) to execute the at least one service requirement to all present and future user sessions pertaining to the respective application. Complementary methods of supporting the execution of the application rule and devices are also presented.

Abstract: Various embodiments of the present disclosure provide a method for traffic detection. The method which may be performed by a first network node includes receiving a message from a second network node. The method further includes determining packet flow description information for traffic detection according to the message. The packet flow description information may indicate a combination criterion for two or more packet flow descriptions, and/or a protocol matching criterion for a domain name in a packet flow description. According to the embodiments of the present disclosure, the packet flow description definition can be extended to support more accurate traffic detection.

Abstract: The invention relates to a method for operating a gateway wherein the method comprises to detect a downlink data packet session transmitted to the first user entity, and to amend the lifetime indicator in at least some of the data packets of the detected downlink data packet session such that the data packets for which the lifetime indicator has been amended, have reached the end of the lifetime and cannot be transmitted further when arriving at the first user entity.

Abstract: method of operating a user plane function UPF node of a core network CN for a communication network is provided. An association message is transmitted to a session management function SMF node of the CN. The association message includes an indication that the UPF node supports a capability to modify session traffic in response to a handover. A session establishment request message is received from the SMF node. The session establishment request message includes an indication to modify session traffic of a protocol data unit PDU session for the communication device in response to handover. Methods relating to session management function SMF nodes and policy control function PCF nodes are also provided.

Abstract: A method for providing a policy rule from a User Equipment to a mobile communication system. The method includes establishing a communication channel between the UE and a User Plane entity of the mobile communication system, sending the policy rule through the communication channel from the UE to the UP entity and receiving at the UE from the UP entity an indication of whether the policy rule is accepted or rejected. The UP entity may send the policy rule to a first Control Plane entity for authorization. In turn, the first CP entity may send the policy rule to a second Control Plane entity for authorization. The User Plane entity may be a User Plane Function including a Collaborative Performance Enhancement (COPE) entity.