Abstract: Methods and devices for charging a user for access to a service accessible via a communication network are disclosed. At least two charging-related states are defined for the communication network. A tariff proposal entity associated with the user determines one or more tariff proposals for charging the user for accessing the service and sends the one or more tariff proposals to a rating entity. The rating entity analyzes the one or more tariff proposals in relation to a current charging-related state of the at least two charging-related states, wherein it is determined if at least one of the one or more tariff proposals complies with at least one tariff setting associated with the current charging-related state. The rating entity further selects a tariff of the at least one complying tariff proposals for charging the user for access to the service and initiates a charging of the user for access to the service according to the selected tariff.

Abstract: The invention comprises a method and system for dynamically processing messages. After a message is received from a network or from an internal application, and the message type is identified, the invention determines whether an optimized handler should be used to process messages of the identified message type. If an optimized handler has not previously been generated for the identified message type or is otherwise not available, an optimized handler may be generated, during run-time, for subsequent processing of messages of the identified message type. In some embodiments, the invention maintains statistics relating the processing characteristics of different types of messages and these statistics are used to determine whether to generate an optimized handler or to use a generic handler to process subsequently received messages having a certain identified message type.

Abstract: A method and an intermediate component for controlling in a communications network an object transfer from a first network component via the intermediate component to a second network component which is remote from the first network component are described. The object transfer is based on a plurality of object requests relating to objects referred to in one or more codes to be processed by the second network component or another network component. The intermediate component forms the steps of sending an object request to the first network component, receiving the requested object from the first network component, updating and/or assessing a priority of the requested object, and, in dependence of the priority of the requested object, delaying the requested object or forwarding the requested object to the second network component. An initial priority is assigned to the requested objects on the basis of an analysis of at least one of the object request and the code that refers to the requested object.

Abstract: This proxy for at least one end-to-end data flow in a network comprises an estimation unit, for estimating the current minimum data load necessary to occupy the bandwidth available to the flow in the network. The estimation unit outputs a flow's pipe capacity estimation. This proxy also comprises a comparison unit, for comparing the estimated pipe capacity with a predetermined capacity threshold, a decision unit, for deciding to proxy the end-to-end flow if the estimated pipe capacity lies above the capacity threshold, and a routing unit, for routing the flow according to the decision.

Abstract: A method and an intermediate component for controlling in a communications network an object transfer from a first network component via the intermediate component to a second network component which is remote from the first network component are described. The object transfer is based on a plurality of object requests relating to objects referred to in one or more codes to be processed by the second network component or another network component. The intermediate component forms the steps of sending an object request to the first network component, receiving the requested object from the first network component, updating and/or assessing a priority of the requested object, and, in dependence of the priority of the requested object, delaying the requested object or forwarding the requested object to the second network component. An initial priority is assigned to the requested objects on the basis of an analysis of at least one of the object request and the code that refers to the requested object.

Abstract: A method, devices, and a computer program for synchronizing one or more software programs from a first device (D100) to a second device (D200) are disclosed.

Abstract: The invention relates to a new and useful method for transferring data within a telecommunications network as well as to a mobile terminal capable of engaging to the network and of carrying out the steps of the method, which advantageously may be applied where, e.g., the data transfer from or to an application running on the mobile terminal originally required two or more independent communications, according to a transport protocol, e.g., TCP connections, to the telecommunications network and where in order to enhance the efficiency of the communication the mobile terminal combines independent communication connections originally required by the application to a single communication connection.

Abstract: The invention comprises a method and system for dynamically processing messages. After a message is received from a network or from an internal application, and the message type is identified, the invention determines whether an optimized handler should be used to process messages of the identified message type. If an optimized handler has not previously been generated for the identified message type or is otherwise not available, an optimized handler may be generated, during run-time, for subsequent processing of messages of the identified message type. In some embodiments, the invention maintains statistics relating the processing characteristics of different types of messages and these statistics are used to determine whether to generate an optimized handler or to use a generic handler to process subsequently received messages having a certain identified message type.

Abstract: A method for provision of access for a data requesting entity (IRE) to data related to a principal is disclosed, comprising the steps of (i) creating an access granting ticket comprising an access specification specifying a permission for an access to data related to the principal, said data being available at a data providing entity (IPE1), and a principal identifier representing the principal towards the data providing entity (IPE1), (ii) encrypting the access granting ticket with an encryption key of the data providing entity (IPE1), (iii) communicating to the data requesting entity (IRE) the encrypted access granting ticket accompanied by an identifier of the data providing entity (IPE1), (iv) communicating from the data requesting entity (IRE) to the data providing entity (IPE1) a request comprising the encrypted access granting ticket, (v) decrypting the encrypted access granting ticket with a decryption key of the data providing entity (IPE1) corresponding to the encryption key, (vi) providing to the d

Abstract: Methods, devices, and computer programs for an authentication of a user to a service of a service provider (SP) are disclosed. Access for the user to the service of the service provider (SP) is requested. One or more authentication security profiles are selected by the service provider SP) for specifying an authentication security requirement of the service provider (SP) for the authentication of the user to the service. An indication of the one or more selected authentication security profiles and a user identity identifying the user to an identity provider (IdP1) are sent from the service provider (SP) to the identity provider (IdP1) for requesting the authentication of the user by the identity provider (IdP1). The user is authenticated based on the user identity and one of the one or more selected authentication security profiles. An assertion indicating the authentication of the user to the service provider (SP) is sent to the service provider (SP).

Abstract: A method and an intermediate component for controlling in a communications network an object transfer from a first network component via the intermediate component to a second network component which is remote from the first network component are described. The object transfer is based on a plurality of object requests relating to objects referred to in one or more codes to be processed by the second network component or another network component. The intermediate component forms the steps of sending an object request to the first network component, receiving the requested object from the first network component, updating and/or assessing a priority of the requested object, and, in dependence of the priority of the requested object, delaying the requested object or forwarding the requested object to the second network component. An initial priority is assigned to the requested objects on the basis of an analysis of at least one of the object request and the code that refers to the requested object.

Abstract: This proxy for at least one end-to-end data flow in a network comprises an estimation unit, for estimating (40) the current minimum data load necessary to occupy the bandwidth available to the flow in the network. The estimation unit outputs a flow's pipe capacity estimation. This proxy also comprises a comparison unit, for comparing (42) the estimated pipe capacity with a predetermined capacity threshold, a decision unit for deciding (44, 46) to proxy the end-to-end flow if the estimated pipe capacity lies above the capacity threshold, and a routing unit, for routing the flow according to the decision.

Abstract: A method for authentication of a user towards a unit (AR1) is described that uses unique biometric data of the user but avoids spreading of the sensitive biometric data. The method overcomes the problem of the lack of trustworthiness of a client (C1) operated by a user and the lack of trustworthiness of a unit (AR1) operated by an institution offering services or goods introducing an authentication instance (AI1) operated by a third party that is trusted by both the user operating the client (C1) and the institution operating the unit. According to the invented method the responsability for the secure handling of the sensitive biometric data is taken from the institution operating the unit (AR1) requesting authentication and given to a trusted third party organization operating an authentication instance (AI1).