Abstract: A mediation server for mediating subscription information to a communication device from a network operator providing network connectivity is provided. The server includes a management unit for managing context information of a communication device, which includes data relating to service provided by a network operator; an obtaining unit for obtaining device information of the communication device, which includes data needed to obtain subscription information from a network operator; a selecting unit for selecting, using the context information, a network operator that provides the best service to the communication device out of network operators that are able to provide network connectivity to the communication device; and a request unit for sending a request, with the obtained device information to the selected network operator, for subscription information which is to be used for the communication device to connect to the selected network operator as a home network operator.

Abstract: There is provided a mobile terminal for use in a system which includes a backend server having a first encryption key and an onboard unit (OBU). A first receiving unit receives, from the backend server, a base shared key encrypted with a second encryption key, the base shared key encrypted with the first encryption key, and a digital signature. A deriving unit decrypts the base shared key with the second encryption key and derives first authentication information based on the base shared key and a first temporary parameter. A second sending unit sends, to the OBU, the base shared key encrypted with the first encryption key, the digital signature, the first authentication information, identification information of the base shared key, and the first temporary parameter.

Abstract: There is provided an apparatus (134) for managing assignment of subscription modules (307) for a group (141) of communication devices (140a-140n). The apparatus includes a receiving unit (203) configured to receive a request for assigning a subscription module to a target communication device (140j) so that the target communication device can attach to a network managed by a network (110) operator; and a control unit (205) configured to identify a group which includes the target communication device, determine whether the number of subscription modules which are assigned to the communication devices in the identified group reaches the upper bound, and when the number of the subscription modules does not reach the upper bound, assign a subscription module to the target communication device.

Abstract: A communication device comprising a central processing unit (CPU) and a memory device is disclosed. The CPU is configured to send a first attach request including a first subscription identity (FSI) to the network apparatus, receive an authentication request including a random number and an authentication token from the network apparatus as a response to the first attach request. Further, the CPU is configured to authenticate the authentication token using the random number and a first key associated with the FSI, obtain a second key and a second subscription identity (SSI) in response to authentication of the authentication token failing, where SSI is obtained from the authentication request. The CPU is further configured to send an authentication failure to the network apparatus. The second key and SSI are stored in the memory device such that the second key is associated with SSI.

Abstract: An object of embodiments of the present invention is to establish a secure connection from a device to a private network, to which the device belongs, when the device may be located remotely from the private network. This is achieved by locating a server in the private network while reusing existing authorization mechanisms in the network. A target resource is in this private network and a device located outside the private network can access the target resource by using the server and a proxy agent which intermediates a request from the device by using a one time session URL.

Abstract: There is provided a mobile terminal for use in a system which includes a backend server having a first encryption key and an onboard unit (OBU).A first receiving unit receives, from the backend server, a base shared key encrypted with a second encryption key, the base shared key encrypted with the first encryption key, and a digital signature. A deriving unit decrypts the base shared key with the second encryption key and derives first authentication information based on the base shared key and a first temporary parameter. A second sending unit sends, to the OBU, the base shared key encrypted with the first encryption key, the digital signature, the first authentication information, identification information of the base shared key, and the first temporary parameter.

Abstract: An operator selecting apparatus and a method for selecting a home operator for each communication device in a group. A first selecting unit of the operator selecting apparatus selects, for each quality-oriented communication device in the group, a candidate operator out of a plurality of the candidate operators that is determined based on the quality information to provide the best quality of service to the communication device. The second selecting unit of the operator selecting apparatus then selects, for each cost-oriented communication device in the group, based on the billing system and a number of quality-oriented communication devices assigned to the each candidate operator as a result of the selection by the first selecting unit, a candidate operator out of the plurality of the candidate operators such that a total cost for all the communication devices in the group becomes lowest.

Abstract: There is provided a Local Breakout Gateway node for use in a hierarchical mobile network. The node comprises a database, which stores a plurality of Local Breakout Policy rules. The node further comprises a receiver for receiving an IP packet from a Mobile Node attached to the network at which the node is located, the network being a visited network for the Mobile Node. The node further comprises means for selecting a Local Breakout Policy from the plurality of Local Breakout Policy rules, and means to apply the selected Local Breakout Policy to the received IP packet. The node further comprises a Network Address translation function to apply a Network Address Translation to the received IP packet, and a transmitter for sending the IP packet to a destination according to the applied Local Breakout Policy.

Abstract: The present invention relates to auto-provision of wireless devices. A wireless device (1) has a device identifier and a first private key generated from the device identifier. A registration server (5) has an operator identifier and a second private key generated from the operator identifier. The wireless device (1) transmits the device identifier to the registration server (5), and the registration server (5) transmits a subscriber identifier to the wireless device (1). The wireless device (1) generates a shared key based on the operator identifier and the first private key, and the registration server (5) generates the shared key based on the device identifier and the second private key.

Abstract: The present invention relates to auto-provisioning of authentication data for client devices. A registration server includes a gateway determination unit, which is configured to determine a gateway apparatus transferring a request signal from a device, and a processing unit. The processing unit is configured to transmit a first signal including a token and first access information of the gateway apparatus to the device if an identifier of the gateway apparatus is stored on the server, and to transmit a second signal indicating a positive response to the gateway apparatus when it obtains the token and the identifier based on a third signal received in response to the first signal. The gateway apparatus sends the secret value to the device when it receives the second signal.

Abstract: An image matching apparatus is provided. The apparatus includes a storage unit, an obtaining unit, a specification unit, and an image matching unit. The storage unit is configured to store image data of one or more devices that are connected to a local network. The obtaining unit is configured to obtain image data of device image obtained by capturing a device. The specification unit is configured to specify one or more local networks to be used for image matching. The image matching unit is configured to perform image matching of the obtained image data against the stored image data of one or more devices that are connected to the specified local network.

Abstract: A method and apparatus for managing roaming of a Mobile Node in a Visited network. The Mobile Node is associated with a Home network. In the Visited network, a server selects a Gateway node for use by the Mobile Node based on selection criteria. The server then sends a message to an access node in the Visited network to which the Mobile Node is attached, the message identifying the selected Gateway node. This instructs the Mobile Node to communicate with its Home network via the selected Gateway Node.

Abstract: In the first embodiment, the mobile phone 20 obtains the PCID from the CCE 10, and sends the PCID and the IMSI of the USIM of the mobile phone 20 to the CAPS 50. The MCC+MNC part of the IMSI is later used as the operator identification information by the mediation server 30, which is operated by the RO, in order to identify the SHO for the CCE 10. The MSIN part of the IMSI is later used as the user identification information by the account managing server 40, which is operated by the SHO, in order to identify the user of the mobile phone 20. The mediation server 30 forwards the account request from the CCE 10 to the account managing server 40 of the SHO identified by the operator identification information. The account managing server 40 generates the MCIM that is associated with the user identified by the user identification information.

Abstract: One aspect of the present invention will provide a first gateway apparatus configured to be connectable to a local network and an external network, to obtain presence information of a device apparatus on the local network and to provide the obtained presence information to a presence management apparatus on the external network, the first gateway apparatus comprising, an obtaining unit configured to obtain the presence information of the device apparatus, a transmitter configured to transmit the presence information to the presence management apparatus via the external network, and a receiver configured to receive, from the presence management apparatus, a suppression instruction of the presence information transmission, wherein the transmitter further configured to suppress the transmission of the presence information to the presence management apparatus after the reception of the suppression instruction.

Abstract: There is provided a telephone that is capable of accessing a memory for storing subscription information that includes a phone number. The telephone comprises, among other things: a searching unit that searches the memory for second subscription information that is different from the first subscription information selected by the selecting unit; an obtaining unit that obtains a first phone number included in the first subscription information and transfer source information that enables a call transfer server of a network operator associated with the second subscription information to identify a second phone number included in the second subscription information; and a sending unit that sends, to the call transfer server, a call transfer request for requesting the network operator to transfer a call addressed to a phone number, which is identified by the call transfer server based on the transfer source information, to the first phone number.

Abstract: An information processing system providing a composed service to a user device is provided. The system includes: a service acquisition unit configured to acquire descriptions defining raw services; a capability information acquisition unit configured to acquire capability information; a composition unit configured to compose the acquired descriptions to create a description which defines a composed service to be supported by the user device based on the acquired capability information; a presentation unit configured to present the created description to the user device; a request acquisition unit configured to acquire a request for the composed service from the user device; a specifying unit configured to specify raw services composing the requested composed service; a processing unit configured to gather responses from the specified raw services composing the requested composed service, and to create the composite response; and a response unit configured to respond the composite response to the user device.

Abstract: The present invention generally relates to a gateway, a method for controlling the gateway, an application server, and a method for controlling the application server. The present invention particularly relates, but is not limited to, a technology that facilitates the formation of a single network from a plurality of local networks.

Abstract: A communication terminal comprising an establishing means for establishing a communication session with a communication node by sending a request for establishment to the communication node is provided. The communication terminal further comprises an obtaining means for obtaining a first identifier from an object that is associated with an alternative communication terminal. The first identifier identifies the alternative communication terminal. The communication terminal further comprises a redirecting means for redirecting the communication session to the alternative communication terminal by sending a request for redirection to the communication node. The request for redirection includes the first identifier.

Abstract: A Femto base station which is arranged to connect to a wireless communication network and to generate a first cell for providing a wireless communication service to at least one user equipment existing within a coverage area of the first cell, comprising a transceiver comprising a transmitter and a receiver for the wireless communication with the user equipment and a controller, wherein the controller determines whether the Femto base station has entered an energy-saving mode or not, the controller disables the operation of the transmitter when it is determined that the base station has entered the energy-saving mode, and when the receiver detects a data transmission from the user equipment to a macro base station after disabling the operation of the transmitter, the controller reconfigures the transmitter. The macro base station generates a second cell with a broader coverage than the first cell and including the first cell.

Abstract: An object of embodiments of the present invention is to establish a secure connection from a device to a private network, to which the device belongs, when the device may be located remotely from the private network. This is achieved by locating a server in the private network while reusing existing authorization mechanisms in the network. A target resource is in this private network and a device located outside the private network can access the target resource by using the server and a proxy agent which intermediates a request from the device by using a one time session URL.