Abstract: There is provided mechanisms for remote provision of a subscriber entity to a PLMN in a communications network. A method is performed by the subscriber entity. The method comprises obtaining a first list of PLMN IDs in the communications network for which a signal quality criterion is fulfilled. The method comprises providing the first list of PLMN IDs and eUICC ID of the subscriber entity to a network server. The method comprises receiving a third list of PLMN IDs from the network server, wherein the third list of PLMN IDs is based on the first list of PLMN IDs. The method comprises selecting, when the third list of PLMN IDs is a non-empty list, one PLMN from the third list of PLMN IDs to remotely provision the subscriber entity.

Abstract: There is provided mechanisms for remote provision of a subscriber entity to a PLMN in a communications network. A method is performed by the subscriber entity. The method comprises obtaining a first list of PLMN IDs in the communications network for which a signal quality criterion is fulfilled. The method comprises providing the first list of PLMN IDs and eUICC ID of the subscriber entity to a network server. The method comprises receiving a third list of PLMN IDs from the network server, wherein the third list of PLMN IDs is based on the first list of PLMN IDs. The method comprises selecting, when the third list of PLMN IDs is a non-empty list, one PLMN from the third list of PLMN IDs to remotely provision the subscriber entity.

Abstract: An audit processor is interposed between production servers and an auditing server, and is a client to both. The audit processor is an integration point, receiving security audit data from production servers, processing the data (e.g., converting the data from binary to text format), and sending processed audit trails to the auditing server. The audit processor includes data buffering capacity and flow control; accordingly, temporary unavailability of the auditing server does not impact the production servers. The production servers will purge stale audit data; accordingly, temporary unavailability of the audit processor does not impact the production servers. Since the audit processor may process security audit data according to any protocol or format imposed or requested by the auditing server; the production servers are unaffected by auditing server changes.

Abstract: The present invention provides a method, apparatus and system for pre-establishing a secure communication channel by detecting one or more trigger events (302), determining whether the secure communication channel will be needed in the future (304) and establishing the secure communication channel before the secure communication channel is needed (308-316). The secure communication channel is established by sending a SA Query (308) and determining whether the SA Query matches one or more security policies (310). If the SA Query matches the one or more security policies, the present invention determines whether the SA Query matches a SA (314). If the SA Query does not match the SA, a SA is negotiated (318) and a SA Query successful message is returned (316). This method can be implemented as a computer program embodied on a computer readable medium wherein each step is executed by one or more code segments.

Abstract: Methods and apparatus adapted to recover from the reset of an Internet Key Exchange (IKE) node involved in secure IPSec communication with one or more peer IKE nodes. For each phase 1 Security Association (SA) established prior to reset, an Internet Security Association and Key Management Protocol (ISAKMP) phase 1 SA delete message is generated. Each delete message is transmitted to the one or more peer IKE nodes, whereby the peer IKE nodes delete each local phase 1 SA corresponding to each of the phase 1 SAs established prior to the reset.