Abstract: There is provided a method performed by an encryption node for provisioning storage in a system. The encryption node is associated with an application node and the application node is configured to run at least part of one or more applications. In response to an unencrypted storage volume becoming available to the encryption node from a storage provisioning node of the system, an encrypted storage volume is generated (20) from the unencrypted storage volume and provisioning of the encrypted storage volume is initiated (22) to make the encrypted storage volume available at a compute node of the system for use by the application node.

Abstract: There is provided a method performed by a first storage provisioning node of a system for provisioning storage in the system. In response to a first request for an encrypted storage volume for an application node, transmission of a second request is initiated (20) towards a second storage provisioning node for an unencrypted storage volume. In response to the requested unencrypted storage volume becoming available to the first storage provisioning node, an encrypted storage volume is generated (22) from the unencrypted storage volume and provisioning of the encrypted storage volume is initiated (24) to make the encrypted storage volume available at a compute node of the system for use by the application node.

Abstract: A technique for operating a system controller of a virtualized application cluster is presented. The cluster comprises one or multiple virtual machines. In a method embodiment the system controller receives, from outside the cluster, control information defining a function associated with a virtual machine. It further receives, from the virtual machine, a request message including an identifier of the virtual machine. The method also comprises determining, based on the identifier included in the request message, the function associated with the virtual machine and booting information associated with the function. The booting information is then sent in a response message to the virtual machine.

Abstract: The present invention relates to a processing entity (100) for providing data for a process during process run-time in a distributed processing arrangement. The processing entity comprises a provider (101) for providing the data for the process during the process run-time by value or by reference in dependency on a data processing criterion.

Abstract: A technique for operating a system controller of a virtualized application cluster is presented. The cluster comprises one or multiple virtual machines. In a method embodiment the system controller receives, from outside the cluster, control information defining a function associated with a virtual machine. It further receives, from the virtual machine, a request message including an identifier of the virtual machine. The method also comprises determining, based on the identifier included in the request message, the function associated with the virtual machine and booting information associated with the function. The booting information is then sent in a response message to the virtual machine.

Abstract: A technique for operating components of a virtualized application cluster with one or multiple virtual machines is described. The technique enables to identify an individual virtual machine and its function within the cluster. As such, booting information dedicated to the function of the virtual machine within the cluster can be determined and provided to the virtual machine.

Abstract: It is described a concept for a service composition which can be carried out in a telecommunication network (100). The described service composition is optimized in view of a composite service execution in a mobile network device (110) having limited resources. According to the described concept, at least one code required for executing the composite service is downloaded from a code storage node (130) to a composition execution agent (112) in response to receiving a corresponding instruction from a service composition node (120), that the service should be composed and/or executed. The actual code to be executed within the network device (110) is selected in response to receiving a service composition command from the service composition node (120). The code selection may take into account local constraints available for the network device (110).

Abstract: An application server (102) along with various other devices and method are described herein for managing a service (e.g., communication service) which is provided to a user. As described herein, the application server with the help of aspect oriented programming is capable of automatically adding functionality to an original service without directly modifying the target application code of the original service. In particular, the application server when automatically adding functionality to a certain application can automatically detect which features are still missing within the certain application, and which are already supported.

Abstract: A method, devices, and a computer program for synchronizing one or more software programs from a first device (D100) to a second device (D200) are disclosed.

Abstract: The present invention relates to a processing entity (100) for providing data for a process during process run-time in a distributed processing arrangement. The processing entity comprises a provider (101) for providing the data for the process during the process run-time by value or by reference in dependency on a data processing criterion.

Abstract: Methods, devices, and computer programs for an authentication of a user to a service of a service provider are disclosed. Access for the user to the service of the service provider is requested. One or more authentication security profiles are selected by the service provider for specifying an authentication security requirement of the service provider for the authentication of the user to the service. An indication of the one or more selected authentication security profiles and a user identity identifying the user to an identity provider are sent from the service provider to the identity provider for requesting the authentication of the user by the identity provider. The user is authenticated based on the user identity and one of the one or more selected authentication security profiles. An assertion indicating the authentication of the user to the service provider is sent to the service provider.

Abstract: Methods and devices for charging a user for access to a service accessible via a communication network are disclosed. At least two charging-related states are defined for the communication network. A tariff proposal entity associated with the user determines one or more tariff proposals for charging the user for accessing the service and sends the one or more tariff proposals to a rating entity. The rating entity analyzes the one or more tariff proposals in relation to a current charging-related state of the at least two charging-related states, wherein it is determined if at least one of the one or more tariff proposals complies with at least one tariff setting associated with the current charging-related state. The rating entity further selects a tariff of the at least one complying tariff proposals for charging the user for access to the service and initiates a charging of the user for access to the service according to the selected tariff.

Abstract: Methods and devices for controlling a charging of a composite service in a telecommunications network are described. The composite service comprises an invocation of a constituent service. The telecommunications network comprises a control node for controlling the composite service, a service node for providing the constituent service, and a charging system for performing the charging.

Abstract: An application server (102) along with various other devices and method are described herein for managing a service (e.g., communication service) which is provided to a user. As described herein, the application server with the help of aspect oriented programming is capable of automatically adding functionality to an original service without directly modifying the target application code of the original service. In particular, the application server when automatically adding functionality to a certain application can automatically detect which features are still missing within the certain application, and which are already supported.

Abstract: A method for coordinating the execution of a composed service in a service execution coordination unit on request by a service composition server is disclosed, wherein the service is composed of at least a first and a second component service instance. The method comprises: receiving an instruction for invoking the first component service instance from the service composition server, receiving an instruction for invoking the second component service instance from the service composition server, contacting a respective one of the one or more application servers for invoking the first component service instance, and in response to receiving a service invocation result from invoking the first service automatically contacting the respective one of the of the one or more application servers for invoking the second of the one or more component service instances.

Abstract: It is described a concept for a service composition which can be carried out in a telecommunication network (100). The described service composition is optimized in view of a composite service execution in a mobile network device (110) having limited resources. According to the described concept, at least one code required for executing the composite service is downloaded from a code storage node (130) to a composition execution agent (112) in response to receiving a corresponding instruction from a service composition node (120), that the service should be composed and/or executed. The actual code to be executed within the network device (110) is selected in response to receiving a service composition command from the service composition node (120). The code selection may take into account local constraints available for the network device (110).

Abstract: An apparatus for creating composite services includes a processing unit which identifies at least one constituent component for a composite service by a processor unit. The constituent component has a runtime state. The apparatus includes a data-store having past composition decisions and corresponding runtime states. The processing unit locates a past composition decision regarding the constituent component that has essentially the equivalent runtime state in the data-store, and reuses the past composition decision for the constituent component for the composite service. A method for creating composite services includes the steps of identifying at least one constituent component for a composite service by a processor unit, the constituent component having a runtime state. There is the step of locating a past composition decision regarding the constituent component that has essentially the equivalent runtime state in a data-store by the processing unit.

Abstract: Methods and devices for controlling a charging of a composite service in a telecommunications network are described. The composite service comprises an invocation of a constituent service. The telecommunications network comprises a control node for controlling the composite service, a service node for providing the constituent service, and a charging system for performing the charging.

Abstract: A method for provision of access for a data requesting entity (IRE) to data related to a principal is disclosed, comprising the steps of (i) creating an access granting ticket comprising an access specification specifying a permission for an access to data related to the principal, said data being available at a data providing entity (IPE1), and a principal identifier representing the principal towards the data providing entity (IPE1), (ii) encrypting the access granting ticket with an encryption key of the data providing entity (IPE1), (iii) communicating to the data requesting entity (IRE) the encrypted access granting ticket accompanied by an identifier of the data providing entity (IPE1), (iv) communicating from the data requesting entity (IRE) to the data providing entity (IPE1) a request comprising the encrypted access granting ticket, (v) decrypting the encrypted access granting ticket with a decryption key of the data providing entity (IPE1) corresponding to the encryption key, (vi) providing to the d

Abstract: An apparatus for creating composite services includes a processing unit which identifies at least one constituent component for a composite service by a processor unit. The constituent component has a runtime state. The apparatus includes a data-store having past composition decisions and corresponding runtime states. The processing unit locates a past composition decision regarding the constituent component that has essentially the equivalent runtime state in the data-store, and reuses the past composition decision for the constituent component for the composite service. A method for creating composite services includes the steps of identifying at least one constituent component for a composite service by a processor unit, the constituent component having a runtime state. There is the step of locating a past composition decision regarding the constituent component that has essentially the equivalent runtime state in a data-store by the processing unit.