Abstract: A mobile terminal for securely communicating with a network includes a user identity module (UIM). The UIM is in operable communication with a user equipment module and includes a password provisioning module (PPM), a password generating module and a response generation module (RGM). The user equipment module includes a client application. The PPM is configured to store a password. The password generating module is in operable communication with the PPM and configured to generate the password. The RGM is in operable communication with both the client application and the PPM. The RGM is configured to generate an authentication response from the password in response to a request from the client application.

Abstract: A mobile terminal for securely communicating with a network includes a user identity module (UIM) and a user equipment module. The user equipment module includes a client application. The UIM is in operable communication with the user equipment and includes a password provisioning module (PPM), a password generating module, a response verification module (RVM) and a response generation module (RGM). The PPM is configured to store a password. The password generating module is in operable communication with the PPM and configured to generate the password. The RGM and RVM are in operable communication with both the client application and the PPM. The RGM is configured to generate an authentication response from the password in response to a request from the client application. The RVM is configured to verify a request for a server digest response and generate a verification result in response to a request from the client application.

Abstract: A system for managing a plurality of identities of a user includes a network entity capable of operating a user naming system (UNS). The UNS is capable of receiving, from an application, a request for an identity of a user. The UNS is also capable of automatically selecting a predefined identity based upon the application and at least one user preference independent of user input to the application. The UNS can then provide the selected identity to the application. More particularly, the UNS can receive a request for the identity of a user from a trusted application. Then, the UNS can select an identity further based upon a status of the user. The UNS can alternatively receive a request for the identity of a user from a non-trusted application. Then, the UNS can select or generate a pseudonym, which the UNS can provide to the application.

Abstract: A mobile terminal for securely communicating with a network includes a user identity module (UIM) and a user equipment module. The user equipment module includes a client application. The UIM is in operable communication with the user equipment and includes a password provisioning module (PPM), a password generating module, a response verification module (RVM) and a response generation module (RGM). The PPM is configured to store a password. The password generating module is in operable communication with the PPM and configured to generate the password. The RGM and RVM are in operable communication with both the client application and the PPM. The RGM is configured to generate an authentication response from the password in response to a request from the client application. The RVM is configured to verify a request for a server digest response and generate a verification result in response to a request from the client application.

Abstract: A mobile terminal for securely communicating with a network includes a user identity module (UIM). The UIM is in operable communication with a user equipment module and includes a password provisioning module (PPM), a password generating module and a response generation module (RGM). The user equipment module includes a client application. The PPM is configured to store a password. The password generating module is in operable communication with the PPM and configured to generate the password. The RGM is in operable communication with both the client application and the PPM. The RGM is configured to generate an authentication response from the password in response to a request from the client application.

Abstract: An approach is provided for securely generating application session keys within a secure module of a user terminal. The secure module includes a secure memory and a secure processor configured to perform session key generation. The secure module is configured to send the session keys to a mobile equipment.

Abstract: A mobile device (10) includes a wireless network adapter (13) for communication with a wireless access network (24), and further includes a memory (23) in the mobile device for securely storing at least one pseudo-identification (IDp) of a mobile device user in conjunction with an actual identification (ID1) of the mobile device user. The mobile device further includes a mobile device identity manager (22), coupled to the memory, for transmitting ID1 from the mobile device to a trusted wireless access network for associating ID1 with a location of the mobile device (12), and for transmitting IDp from the mobile device to an untrusted wireless access network for associating IDp with a location of the mobile device (18).

Abstract: A transport scheme is provided based on Internet protocol (IP) and multiprotocol label switching (MPLS) technology for third generation (3G) radio access networks (RAN). Label switched paths are established and managed for interconnecting base stations and radio network controllers. The process incorporates constraint-based routing and Diffserv to provide transport bearers that can support bandwidth provisioning and a variety of QoS requirements in the RAN.

Abstract: A system for managing a plurality of identities of a user includes a network entity capable of operating a user naming system (UNS). The UNS is capable of receiving, from an application, a request for an identity of a user. The UNS is also capable of automatically selecting a predefined identity based upon the application and at least one user preference independent of user input to the application. The UNS can then provide the selected identity to the application. More particularly, the UNS can receive a request for the identity of a user from a trusted application. Then, the UNS can select an identity further based upon a status of the user. The UNS can alternatively receive a request for the identity of a user from a non-trusted application. Then, the UNS can select or generate a pseudonym, which the UNS can provide to the application.

Abstract: A mobile device (10) includes a wireless network adapter (13) for communication with a wireless access network (24), and further includes a memory (23) in the mobile device for securely storing at least one pseudo-identification (IDp) of a mobile device user in conjunction with an actual identification (ID1) of the mobile device user. The mobile device further includes a mobile device identity manager (22), coupled to the memory, for transmitting ID1 from the mobile device to a trusted wireless access network for associating ID1 with a location of the mobile device (12), and for transmitting IDp from the mobile device to an untrusted wireless access network for associating IDp with a location of the mobile device (18).

Abstract: A method and apparatus for class based bandwidth scheduling for Quality of Service (QoS) for radio air interfaces. In an embodiment, users of an air interface are assigned to at least one of a plurality of QoS classes. Each class is assigned an elasticity value. When traffic congestion is determined on the air interface during a time frame, the actual rate of data transmission for each user is reduced according to the elasticity of the class to which the user belongs.

Abstract: A transport scheme is provided based on Internet protocol (IP) and multiprotocol label switching (MPLS) technology for third generation (3G) radio access networks (RAN). Label switched paths are established and managed for interconnecting base stations and radio network controllers. The process incorporates constraint-based routing and Diffserv to provide transport bearers that can support bandwidth provisioning and a variety of QoS requirements in the RAN.