Abstract: Methods and apparatus are provided for traffic monitoring in a network. In an example aspect, a method of traffic monitoring in a first network node comprises receiving a packet, determining that the packet matches a plurality of packet detection rules, and sending an indication to a second network node that the packet matches a plurality of packet detection rules.

Abstract: There is provided a method performed by a session management function (SMF) node of a network for establishing a PFCP session. A plurality of service functions (SFs) are selected (102) to connect in a service function chain for handling the PFCP session. Each of the plurality of SFs is capable of activating a feature of the PFCP session and is supported by a user plane function (UPF) node. The selection is based on a load of each of the plurality of SFs. For each UPF node that supports one or more of the selected plurality of SFs, transmission of a request is initiated (104) to the UPF node to establish the PFCP session with the UPF node. The request comprises an indication of the one or more of the selected plurality of SFs that the UPF node supports.

Abstract: A method for over-the-top (OTT) management in a communication network is presented. The method is performed in an application client. The method comprises sending a request for activation of a policy for an application network interaction protocol (ANIP) service to a packet data network gateway (PGW) wherein the request indicates an address to a local ANIP server; receiving a set of rules related to the requested activation of the policy from the PGW, wherein the set of rules are defined for a packet data network (PDN) session applicable for the ANIP service; and communicating over the communication network based on the received set of rules. Methods, application clients, PGWs, ANIP servers, computer programs, and a computer program for OTT management in a communication network are also presented.

Abstract: A method for over-the-top, OTT, management in a communication network is presented. The method is performed in a packet data network gateway, PGW. The method comprises receiving (S200) a request for an application network interaction protocol, ANIP, service from an application client, sending (S210) the received request to a global ANIP server, wherein the request is extended with a public land mobile network, PLMN, identity, receiving (S220) an address to a local ANIP server from the global ANIP server, and sending (S230) the received address to the local ANIP server to the Send request for application client. Methods, a PGW, an application client, an ANIP server, computer programs, and a ANIP service computer program product for OTT management in a communication network are also presented.

Abstract: Methods and apparatus for managing quality of service for video streaming, in which a Policy and Charging Rules Function (PCRF) in a Policy Charging Control (PCC) architecture of a telecommunications system receives from a Policy Control Enforcement Function (PCEF) a notification indicating that a video service has started for streaming video content to a user equipment (UE). A first Quality of Service (QoS) setting for streaming the video service to the UE is determined. First QoS setting data identifying the first QoS setting is transmitted to the PCEF. The PCEF transmits a further notification to the PCRF indicating that a particular stage has been reached. The PCRF receives the notification from the PCEF. In response to the further notification, a second QoS setting specifying a lower QoS than the first QoS setting for streaming the video service after the particular stage is determined. The PCRF identifies the second QoS setting to the PCEF.

Abstract: A method performed by a policy node for handling QoS for data traffic between a UE and an Application Server (AS) node associated with the UE. The policy node receives messages indicating available marking types which a user plane node is capable of detecting in the data traffic and information indicating a number of marking types supported by both the UE and the AS node, a UE identifier identifying the UE and a list of QoS profiles associated with the UE. The policy node determines the decided marking type and marking value for each of the QoS profiles associated with the UE identifier and transmits a message towards the control plane node having a session establishment response for the UE identifier including the marking type and marking value decided for each QoS profile associated with the UE identifier.

Abstract: A method of managing traffic associated with a User Equipment, UE, by a User Plane Function, UPF, in a telecommunication network, said UPF being associated with a Session Management Function, SMF, and a Network Data Analytics Function, NWDAF, wherein said UPF has access to an observation space comprising a list of possible states said network may take and wherein said UPF has access to an action space comprising a list of possible actions that said UPF is allowed to perform, said method comprising the steps of receiving a state of said network, wherein said state is comprised by said list of possible states, receiving a reward, wherein said reward indicates a degree of satisfaction of said network to be in said state, receiving network traffic from said UE and performing, triggered by said received traffic, an action comprised by said list of possible actions based on said received state of said network and based on said received reward.

Abstract: Methods, a policy node, an application node, a storage node and an operator network for enabling filtering of traffic from an application hosted by the application node are disclosed. The policy node receives, from the application node, application content information relating to the filtering of the traffic and an identifier of the application to which the application content information applies, wherein the application content information comprises an indication relating to application content category of the traffic, and wherein the application content information comprises one or more of an adaptability indicator specifying whether the application is able to adapt the traffic to a given user content category, and a notification indicator specifying whether the application is able to notify, to the policy node, an application content category before providing requested traffic. The policy node further transmits, by the policy node to the storage node, the application content information.

Abstract: Methods and apparatus for managing quality of service for video streaming, in which a Policy and Charging Rules Function (PCRF) in a Policy Charging Control (PCC) architecture of a telecommunications system receives from a Policy Control Enforcement Function (PCEF) a notification indicating that a video service has started for streaming video content to a user equipment (UE). A first Quality of Service (QoS) setting for streaming the video service to the UE is determined. First QoS setting data identifying the first QoS setting is transmitted to the PCEF. The PCEF transmits a further notification to the PCRF indicating that a particular stage has been reached. The PCRF receives the notification from the PCEF. In response to the further notification, a second QoS setting specifying a lower QoS than the first QoS setting for streaming the video service after the particular stage is determined. The PCRF identifies the second QoS setting to the PCEF.

Abstract: Methods, a user data node (120), a policy node (150), an application node (170) and an operator network (101) for enabling management of an attack towards an application (190) hosted by the application node (170) are disclosed. The policy node (150) receives (3) attack information and an identifier of the application (190) to which the attack information applies. The attack information relates to the management of the attack and the attack information comprises a type of attack, a set of detection conditions relating to detection of attacks of the type of attack, and a mitigation action to be invoked when at least one detection condition of the set of detection conditions is fulfilled. In this manner, degeneration of the application (190) caused by the attacks of the type of attack is mitigatable. The policy node (150) generates (13) at least one rule based on the attack information.

Abstract: Methods, a system for managing traffic transmitted by a User Equipment (UE), a UE for enabling differentiation of the traffic, a Packet Gate-Way User plane (PGW-U) for managing the traffic as well as a Mobility Management Entity (MME) for enabling differentiation of the traffic are disclosed. The PGW-U (120) receives (9) a marking type and a marking value, which originate from the SCS/AS (170) and which are associated with an application identifier for identifying application traffic to be handled according to the marking type and the marking value. The UE (110) receives (14), from the MME (130), the marking type and the marking value. The UE (110) transmits (17), towards the PGW-U (120), application traffic marked according to the marking type and marking value. The PGW-U (120) inspects (18) the traffic according to the marking type to obtain the marking value. The PGW-U (120) handles (18) the traffic based on the marking value.

Abstract: The use of multipath enabled mobile entities accessing a service outside the network in a multipath connection. The invention relates to a method for operating an application server (100) providing a service to a multipath enabled mobile entity (10) connected to the application server with a first bearer of a first access network of a first mobile communications network, wherein the application server is external to the mobile communications network, whereas the method comprises the steps of receiving an indication that the mobile entity (10) has an option to use another bearer not belonging to the first mobile communications network for accessing the application server, and of transmitting a request message towards a policy control entity (50) of the first mobile communications network requesting the policy control entity to disconnect the first bearer.

Abstract: Methods and apparatuses are disclosed for communicating a hybrid user equipment with an Internet server, whereby a hybrid access gateway receives a multi-path request from a user plane system, transmits the multipath request toward an Internet server, and receives a corresponding response from the Internet server. If the received response is a single-path response, the hybrid access gateway assumes the Internet server does not support multi-path, activates a proxy function for the session and transmits a multi-path response for the received single-path response toward the user plane system, and the latter marks transmitting further multi-path requests for this session toward the hybrid access gateway.

Abstract: The invention relates to a method, for controlling at least one path in a multipath environment by a path control entity, wherein the at least one one path is used for transmitting an encrypted video stream comprising a sequence of video segments. The method comprises the following steps: estimating a resolution used in the video stream based on the video segments, and determining that the resolution used in the video stream has changed during the transmission. When it is determined that the resolution used in the video stream has changed, an adaptation of a number of the at least one path used for transmitting the video stream in the multipath configuration is initiated based on the determined change of the resolution.

Abstract: The present invention faces the issue of a user ignoring an alternative second service usable instead of a first service that the user is using, and which is a service subscribed by the user. To solve this issue, the present invention provides for associating a first service identifier and a second service identifier with a same service category at a subscription repository; upon detecting at a policy enforcer the first service is used by the user, notifying a policy controller of the first service identifier; obtaining, by the policy controller from the subscription repository, the second service identifier associated with the same service category as the first service identifier; offering the user, either directly from the policy controller or via the policy enforcer, to accept using the second service instead of the used first service; and, upon user accepting to use the second service, enforcing control rules for the second service at the policy enforcer.

Abstract: The present invention faces the issue of a user ignoring an alternative second service usable instead of a first service that the user is using, and which is a service subscribed by the user. To solve this issue, the present invention provides for associating a first service identifier and a second service identifier with a same service category at a subscription repository; upon detecting at a policy enforcer the first service is used by the user, notifying a policy controller of the first service identifier; obtaining, by the policy controller from the subscription repository, the second service identifier associated with the same service category as the first service identifier; offering the user, either directly from the policy controller or via the policy enforcer, to accept using the second service instead of the used first service; and, upon user accepting to use the second service, enforcing control rules for the second service at the policy enforcer.

Abstract: Methods and apparatus for detecting fraudulent traffic associated with a user of a telecommunications system. A system comprises a monitoring network node comprising a traffic monitor configured to monitor traffic transmitted to or from a user in the telecommunications system, a fraud detector configured to apply to the monitored traffic a fraud profile associated with the user to determine whether the monitored traffic comprises fraudulent traffic, a transmitter configured to transmit data to a receiver of a profiling network node notifying whether the monitored traffic comprises fraudulent traffic. The profiling network node further comprises a fraud profiler configured to determine an updated fraud profile associated with the user based at least on the received data and a transmitter configured to transmit data identifying the updated fraud profile to one or both of a receiver of a subscription profile repository and a receiver of the monitoring network node.

Abstract: A method for classifying packets includes determining an execution indication indicating at least one amongst a service and application being executed on a user terminal and generating uplink packets; determining a marker on the basis of PCC rules available at the user terminal and at least one execution indication, the marker for identifying at least one of a service and an application associated to uplink packets; transmitting the marker and the uplink packets, to a PCEF network entity; determining an uplink classification, at the PCEF network entity, for received uplink packets based on the marker; storing, at said PCEF network entity, an association between information related to an uplink flow corresponding to the uplink packets and uplink classification; receiving, at said PCEF network entity, downlink packets corresponding to the uplink packets; determining a downlink classification, at the PCEF network entity, for received downlink packets based on the stored association.

Abstract: In a mobile network comprising a gateway for establishing a packet data connection with a user equipment, user communication is implemented on the basis of a client interface script to be executed in a browser application of the user equipment. For this purpose, the gateway receives data destined to the browser application of the user equipment. The gateway modifies the received data to provide the user equipment with the client interface script, e.g., by including an identifier of the client interface script in to the data. The gateway sends the modified data to the user equipment, thereby enabling the browser application of the user equipment to execute the client interface script. Execution of the client interface script in the browser application may for example implement a user dialog for customizing functions of the mobile network.

Abstract: A method for classifying packets includes determining an execution indication indicating at least one amongst a service and application being executed on a user terminal and generating uplink packets; determining a marker on the basis of PCC rules available at the user terminal and at least one execution indication, the marker for identifying at least one of a service and an application associated to uplink packets; transmitting the marker and the uplink packets, to a PCEF network entity; determining an uplink classification, at the PCEF network entity, for received uplink packets based on the marker; storing, at said PCEF network entity, an association between information related to an uplink flow corresponding to the uplink packets and uplink classification; receiving, at said PCEF network entity, downlink packets corresponding to the uplink packets; determining a downlink classification, at the PCEF network entity, for received downlink packets based on the stored association.