Abstract: Methods and systems for optimizing Network Function (NF) service authorization are presented. According to one aspect, a method implemented in an NF consumer comprises: sending, to an authorization server, an authorization request for a procedure that involves a plurality of NF services; and receiving, from the authorization server, an authorization response for the procedure, the authorization response including information authorizing access to the plurality of NF services. In some embodiments, the NF consumer may comprise an Access and Mobility Management Function (AMF). In some embodiments, the authorization server may comprise a Network Repository Function (NRF). In some embodiments, the authorization response may include one or more access tokens.

Abstract: Methods and systems for providing flexible information exposure in a Fifth Generation (5G) Core (5GC) and an Operations, Administration, and Maintenance (OAM) system are provided. According to one aspect of the present disclosure, a method, performed by a first network node of a 5GC for providing flexible information exposure in the 5GC and an OAM system, comprises: receiving, from a second network node, a request to register the second network node as a provider of data and/or a compute function; registering the second network node as a provider of the data and/or the compute function; storing information associating the second network node with the data and/or compute function provided by the second network node; and sending, to the second network node, a response to the request to register the second network node as a provider of data and/or a compute function.

Abstract: A method of a communication device of requesting data of a destination network node via at least one intermediate node in a service chain. The method comprises acquiring a secret session key configured to subsequently verify authenticity of the requested data and first seed data to be used by the at least one intermediate node and the destination node to generate the session key, transmitting the data request, an indication of the service chain to be traversed, and the first seed data to a next-hop node in the service chain, receiving, in response to the forwarded data request, the requested data having been provided with an indication of authenticity by the next-hop node, and verifying the authenticity of the received data using the acquired session key, wherein the received requested data is considered authenticated.

Abstract: A method performed by an agent for handling an event of a network service deployed in a cloud environment is provided. The agent is capable to access to a server in the cloud environment. The agent obtains information from the server. The information is about an event of the network service. When the network service relates to a Third Generation Partnership Project (3GPP) network, the agent decides whether to register network service with or without an associated address of a load balancer of the network service. The agent then registers in a core network node operating in the 3GPP network, the network service with or without an associated address of a load balancer of the network service according to the event and according to the outcome of the deciding.

Abstract: Method and apparatus for controlling migration of a Quick User Datagram Protocol (UDP) Internet Connections (QUIC) connection between a server and a neighboring server of a content delivery network (CDN). The server and the neighboring server comprise respective cache memories, are comprised in the CDN and have a same server IP-address. The QUIC connection is identifiable by a connection identifier (CID) and is established to a migrating wireless device having a client IP-address. The method for controlling migration of the QUIC connection comprises receiving static key information representative of the QUIC connection; determining context transfer state information for the QUIC connection; and controlling transmission of a stateless reset token for the QUIC connection based on the determined context transfer state.

Abstract: A method for reusing a tag. The method is performed in a service function node of a mobile communication network and comprises receiving an uplink packet originating from a wireless device; obtaining at least one tag from the uplink packet, wherein each tag is a name value pair added by a node after the packet leaves the wireless device; and adding the at least one tag to a downlink packet destined for the wireless device, wherein the at least one tag influences how the downlink packet is forwarded.

Abstract: A method of a communication device of requesting data of a destination network node via at least one intermediate node in a service chain. The method comprises acquiring a secret session key configured to subsequently verify authenticity of the requested data and first seed data to be used by the at least one intermediate node and the destination node to generate the session key, transmitting the data request, an indication of the service chain to be traversed, and the first seed data to a next-hop node in the service chain, receiving, in response to the forwarded data request, the requested data having been provided with an indication of authenticity by the next-hop node, and verifying the authenticity of the received data using the acquired session key, wherein the received requested data is considered authenticated.

Abstract: It is presented a method for assisting a resource allocation transfer of a wireless device from a source site of a mobile communication network to a target site of the mobile communication network. The method is performed in a service function node at the source site and comprises the steps of: receiving an indication of resource allocation transfer of the wireless device; and transmitting a reset signal to a user service node at the source site, the reset signal commanding the user service node to reset its transport layer session with the wireless device.

Abstract: A method for reusing a tag. The method is performed in a service function node of a mobile communication network and comprises receiving an uplink packet originating from a wireless device; obtaining at least one tag from the uplink packet, wherein each tag is a name value pair added by a node after the packet leaves the wireless device; and adding the at least one tag to a downlink packet destined for the wireless device, wherein the at least one tag influences how the downlink packet is forwarded.

Abstract: It is presented a method for assisting a resource allocation transfer of a wireless device from a source site of a mobile communication network to a target site of the mobile communication network, The method is performed in a service function node at the source site and comprises the steps of: receiving an indication of resource allocation transfer of the wireless device; and transmitting a reset signal to a user service node at the source site, the reset signal commanding the user service node to reset its transport layer session with the wireless device.

Abstract: It is provided a method for assisting preloading of a location of a wireless device in a mobile communication network. The method is performed in a communication tracker and comprises the steps of: receiving an uplink packet originating from the wireless device, the uplink packet comprising a source address and a destination address; determining whether a connection database comprises a matching entry corresponding to both the source address and the destination address; transmitting a new connection message when there is no matching entry in the connection database; and storing a new entry in the connection database, the new entry comprising both the source address and the destination address when there is no matching entry in the connection database.

Abstract: A method performed in a first network node includes the first network node receiving a downlink data packet intended for a user equipment (UE). The method further includes, in response to receiving the downlink data packet, the first network node retrieving, from a second network node, a list of a plurality of top of service function chain (SFC) nodes, each top of SFC node being a first node in a SFC that is in communication with the first network node. The method further includes, the first network node selecting at least one top of SFC node from the plurality of top of SFC nodes in accordance with predetermined criteria. The method further includes the first network node marking the downlink data packet such that the marked downlink data packet is forwarded to the selected top of SFC node.

Abstract: In a first aspect, a method performed by an Internet Protocol Advertisement Point (IAP) in a mobile service chaining network is provided for managing received data intended for an Internet Protocol (IP) address. The method comprises submitting a query to obtain an indication of a current location of a device designated by the IP address being included in the query, from a Location Registry (LR), receiving a reply indicating that the IP address included in the query is not in use, and starting a timer upon receiving the reply that the IP address is not in use. Further, the method comprises discarding received data intended for the IP address not in use until expiry of a set timer interval.