Abstract: There is provided a method performed by a first storage provisioning node of a system for provisioning storage in the system. In response to a first request for an encrypted storage volume for an application node, transmission of a second request is initiated (20) towards a second storage provisioning node for an unencrypted storage volume. In response to the requested unencrypted storage volume becoming available to the first storage provisioning node, an encrypted storage volume is generated (22) from the unencrypted storage volume and provisioning of the encrypted storage volume is initiated (24) to make the encrypted storage volume available at a compute node of the system for use by the application node.

Abstract: There is provided a method performed by an encryption node for provisioning storage in a system. The encryption node is associated with an application node and the application node is configured to run at least part of one or more applications. In response to an unencrypted storage volume becoming available to the encryption node from a storage provisioning node of the system, an encrypted storage volume is generated (20) from the unencrypted storage volume and provisioning of the encrypted storage volume is initiated (22) to make the encrypted storage volume available at a compute node of the system for use by the application node.

Abstract: There is provided a method performed by a first storage provisioning node of a system for provisioning storage in the system. In response to a first request for an encrypted storage volume for an application node, transmission of a second request is initiated (20) towards a second storage provisioning node for an unencrypted storage volume. In response to the requested unencrypted storage volume becoming available to the first storage provisioning node, an encrypted storage volume is generated (22) from the unencrypted storage volume and provisioning of the encrypted storage volume is initiated (24) to make the encrypted storage volume available at a compute node of the system for use by the application node.

Abstract: There is provided a method performed by an encryption node for provisioning storage in a system. The encryption node is associated with an application node and the application node is configured to run at least part of one or more applications. In response to an unencrypted storage volume becoming available to the encryption node from a storage provisioning node of the system, an encrypted storage volume is generated (20) from the unencrypted storage volume and provisioning of the encrypted storage volume is initiated (22) to make the encrypted storage volume available at a compute node of the system for use by the application node.

Abstract: A technique for operating a system controller of a virtualized application cluster is presented. The cluster comprises one or multiple virtual machines. In a method embodiment the system controller receives, from outside the cluster, control information defining a function associated with a virtual machine. It further receives, from the virtual machine, a request message including an identifier of the virtual machine. The method also comprises determining, based on the identifier included in the request message, the function associated with the virtual machine and booting information associated with the function. The booting information is then sent in a response message to the virtual machine.

Abstract: The present invention relates to a processing entity (100) for providing data for a process during process run-time in a distributed processing arrangement. The processing entity comprises a provider (101) for providing the data for the process during the process run-time by value or by reference in dependency on a data processing criterion.

Abstract: A technique for operating a system controller of a virtualized application cluster is presented. The cluster comprises one or multiple virtual machines. In a method embodiment the system controller receives, from outside the cluster, control information defining a function associated with a virtual machine. It further receives, from the virtual machine, a request message including an identifier of the virtual machine. The method also comprises determining, based on the identifier included in the request message, the function associated with the virtual machine and booting information associated with the function. The booting information is then sent in a response message to the virtual machine.

Abstract: A technique for operating components of a virtualized application cluster with one or multiple virtual machines is described. The technique enables to identify an individual virtual machine and its function within the cluster. As such, booting information dedicated to the function of the virtual machine within the cluster can be determined and provided to the virtual machine.

Abstract: An application server (102) along with various other devices and method are described herein for managing a service (e.g., communication service) which is provided to a user. As described herein, the application server with the help of aspect oriented programming is capable of automatically adding functionality to an original service without directly modifying the target application code of the original service. In particular, the application server when automatically adding functionality to a certain application can automatically detect which features are still missing within the certain application, and which are already supported.

Abstract: A method, devices, and a computer program for synchronizing one or more software programs from a first device (D100) to a second device (D200) are disclosed.

Abstract: The present invention relates to a processing entity (100) for providing data for a process during process run-time in a distributed processing arrangement. The processing entity comprises a provider (101) for providing the data for the process during the process run-time by value or by reference in dependency on a data processing criterion.

Abstract: Methods, devices, and computer programs for an authentication of a user to a service of a service provider are disclosed. Access for the user to the service of the service provider is requested. One or more authentication security profiles are selected by the service provider for specifying an authentication security requirement of the service provider for the authentication of the user to the service. An indication of the one or more selected authentication security profiles and a user identity identifying the user to an identity provider are sent from the service provider to the identity provider for requesting the authentication of the user by the identity provider. The user is authenticated based on the user identity and one of the one or more selected authentication security profiles. An assertion indicating the authentication of the user to the service provider is sent to the service provider.

Abstract: Methods and devices for controlling a charging of a composite service in a telecommunications network are described. The composite service comprises an invocation of a constituent service. The telecommunications network comprises a control node for controlling the composite service, a service node for providing the constituent service, and a charging system for performing the charging.

Abstract: An application server (102) along with various other devices and method are described herein for managing a service (e.g., communication service) which is provided to a user. As described herein, the application server with the help of aspect oriented programming is capable of automatically adding functionality to an original service without directly modifying the target application code of the original service. In particular, the application server when automatically adding functionality to a certain application can automatically detect which features are still missing within the certain application, and which are already supported.

Abstract: A method for coordinating the execution of a composed service in a service execution coordination unit on request by a service composition server is disclosed, wherein the service is composed of at least a first and a second component service instance. The method comprises: receiving an instruction for invoking the first component service instance from the service composition server, receiving an instruction for invoking the second component service instance from the service composition server, contacting a respective one of the one or more application servers for invoking the first component service instance, and in response to receiving a service invocation result from invoking the first service automatically contacting the respective one of the of the one or more application servers for invoking the second of the one or more component service instances.

Abstract: It is described a concept for a service composition which can be carried out in a telecommunication network (100). The described service composition is optimized in view of a composite service execution in a mobile network device (110) having limited resources. According to the described concept, at least one code required for executing the composite service is downloaded from a code storage node (130) to a composition execution agent (112) in response to receiving a corresponding instruction from a service composition node (120), that the service should be composed and/or executed. The actual code to be executed within the network device (110) is selected in response to receiving a service composition command from the service composition node (120). The code selection may take into account local constraints available for the network device (110).

Abstract: Methods and devices for controlling a charging of a composite service in a telecommunications network are described. The composite service comprises an invocation of a constituent service. The telecommunications network comprises a control node for controlling the composite service, a service node for providing the constituent service, and a charging system for performing the charging.

Abstract: A method for provision of access for a data requesting entity (IRE) to data related to a principal is disclosed, comprising the steps of (i) creating an access granting ticket comprising an access specification specifying a permission for an access to data related to the principal, said data being available at a data providing entity (IPE1), and a principal identifier representing the principal towards the data providing entity (IPE1), (ii) encrypting the access granting ticket with an encryption key of the data providing entity (IPE1), (iii) communicating to the data requesting entity (IRE) the encrypted access granting ticket accompanied by an identifier of the data providing entity (IPE1), (iv) communicating from the data requesting entity (IRE) to the data providing entity (IPE1) a request comprising the encrypted access granting ticket, (v) decrypting the encrypted access granting ticket with a decryption key of the data providing entity (IPE1) corresponding to the encryption key, (vi) providing to the d

Abstract: An apparatus for creating composite services includes a processing unit which identifies at least one constituent component for a composite service by a processor unit. The constituent component has a runtime state. The apparatus includes a data-store having past composition decisions and corresponding runtime states. The processing unit locates a past composition decision regarding the constituent component that has essentially the equivalent runtime state in the data-store, and reuses the past composition decision for the constituent component for the composite service. A method for creating composite services includes the steps of identifying at least one constituent component for a composite service by a processor unit, the constituent component having a runtime state. There is the step of locating a past composition decision regarding the constituent component that has essentially the equivalent runtime state in a data-store by the processing unit.

Abstract: This proxy for at least one end-to-end data flow in a network comprises an estimation unit, for estimating the current minimum data load necessary to occupy the bandwidth available to the flow in the network. The estimation unit outputs a flow's pipe capacity estimation. This proxy also comprises a comparison unit, for comparing the estimated pipe capacity with a predetermined capacity threshold, a decision unit, for deciding to proxy the end-to-end flow if the estimated pipe capacity lies above the capacity threshold, and a routing unit, for routing the flow according to the decision.