KR102487923B1 - 서비스들 - 사용자-평면 접근법에 대한 네트워크 토큰들을 이용한 효율적인 정책 집행 - Google Patents

서비스들 - 사용자-평면 접근법에 대한 네트워크 토큰들을 이용한 효율적인 정책 집행 Download PDF

Info

Publication number
KR102487923B1
KR102487923B1 KR1020177022720A KR20177022720A KR102487923B1 KR 102487923 B1 KR102487923 B1 KR 102487923B1 KR 1020177022720 A KR1020177022720 A KR 1020177022720A KR 20177022720 A KR20177022720 A KR 20177022720A KR 102487923 B1 KR102487923 B1 KR 102487923B1
Authority
KR
South Korea
Prior art keywords
network token
network
token
application server
packet
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
KR1020177022720A
Other languages
English (en)
Korean (ko)
Other versions
KR20170118732A (ko
Inventor
수범 이
개빈 버나드 호른
존 나시엘스키
스테파노 파킨
Original Assignee
퀄컴 인코포레이티드
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 퀄컴 인코포레이티드 filed Critical 퀄컴 인코포레이티드
Publication of KR20170118732A publication Critical patent/KR20170118732A/ko
Application granted granted Critical
Publication of KR102487923B1 publication Critical patent/KR102487923B1/ko
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H04W12/069—Authentication using certificates or pre-shared keys
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/10—Flow control; Congestion control
    • H04L47/20—Traffic policing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/10—Flow control; Congestion control
    • H04L47/22—Traffic shaping
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/14—Session management
    • H04L67/146—Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/2866—Architectures; Arrangements
    • H04L67/30—Profiles
    • H04L67/303—Terminal profiles
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/08—Access security
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/08—Access security
    • H04W12/084—Access security using delegated authorisation, e.g. open authorisation [OAuth] protocol
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/08—Access security
    • H04W12/088—Access security using filters or firewalls

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
KR1020177022720A 2015-02-24 2016-01-14 서비스들 - 사용자-평면 접근법에 대한 네트워크 토큰들을 이용한 효율적인 정책 집행 Active KR102487923B1 (ko)

Applications Claiming Priority (7)

Application Number Priority Date Filing Date Title
US201562120159P 2015-02-24 2015-02-24
US62/120,159 2015-02-24
US201562161768P 2015-05-14 2015-05-14
US62/161,768 2015-05-14
US14/866,425 2015-09-25
US14/866,425 US10505850B2 (en) 2015-02-24 2015-09-25 Efficient policy enforcement using network tokens for services—user-plane approach
PCT/US2016/013463 WO2016137598A2 (en) 2015-02-24 2016-01-14 Efficient policy enforcement using network tokens for services - user-plane approach

Publications (2)

Publication Number Publication Date
KR20170118732A KR20170118732A (ko) 2017-10-25
KR102487923B1 true KR102487923B1 (ko) 2023-01-11

Family

ID=56690617

Family Applications (1)

Application Number Title Priority Date Filing Date
KR1020177022720A Active KR102487923B1 (ko) 2015-02-24 2016-01-14 서비스들 - 사용자-평면 접근법에 대한 네트워크 토큰들을 이용한 효율적인 정책 집행

Country Status (8)

Country Link
US (4) US10505850B2 (enExample)
EP (1) EP3262821B1 (enExample)
JP (1) JP6687636B2 (enExample)
KR (1) KR102487923B1 (enExample)
CN (1) CN107409125B (enExample)
BR (1) BR112017018021A2 (enExample)
TW (1) TWI668976B (enExample)
WO (1) WO2016137598A2 (enExample)

Families Citing this family (39)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10505850B2 (en) 2015-02-24 2019-12-10 Qualcomm Incorporated Efficient policy enforcement using network tokens for services—user-plane approach
EP3314974B1 (en) * 2015-06-25 2021-01-20 Telefonaktiebolaget LM Ericsson (publ) Setting up a dedicated bearer in a radio communication network
US11290425B2 (en) * 2016-02-01 2022-03-29 Airwatch Llc Configuring network security based on device management characteristics
EP3427517B1 (en) * 2016-03-07 2021-08-04 Telefonaktiebolaget LM Ericsson (PUBL) Method for traffic steering, network device and terminal device
EP3440869B1 (en) * 2016-04-08 2022-12-14 Nokia Technologies Oy Method and apparatus for u-plane sub-service flow mapping
CN108076459B (zh) * 2016-11-08 2021-02-12 北京华为数字技术有限公司 网络接入控制方法、相关设备及系统
US10356830B2 (en) * 2017-01-17 2019-07-16 Cisco Technology, Inc. System and method to facilitate stateless serving gateway operations in a network environment
US10784986B2 (en) 2017-02-28 2020-09-22 Intel Corporation Forward error correction mechanism for peripheral component interconnect-express (PCI-e)
US10250436B2 (en) * 2017-03-01 2019-04-02 Intel Corporation Applying framing rules for a high speed data link
EP3614621B1 (en) * 2017-05-09 2021-04-28 Huawei Technologies Co., Ltd. Data packet checking method and device
US12238104B2 (en) 2017-06-27 2025-02-25 Applied Invention, Llc Secure communication system
US11102194B2 (en) * 2017-06-27 2021-08-24 Applied Invention, Llc Secure communication network
US11856027B2 (en) 2017-06-27 2023-12-26 Applied Invention, Llc Secure communication system
US10419446B2 (en) 2017-07-10 2019-09-17 Cisco Technology, Inc. End-to-end policy management for a chain of administrative domains
US10666624B2 (en) 2017-08-23 2020-05-26 Qualcomm Incorporated Systems and methods for optimized network layer message processing
CN110167067B (zh) * 2018-02-13 2021-10-22 展讯通信（上海）有限公司 数据传输方法及装置、存储介质、终端、基站
US11108812B1 (en) * 2018-04-16 2021-08-31 Barefoot Networks, Inc. Data plane with connection validation circuits
US11528607B2 (en) * 2018-08-13 2022-12-13 Apple Inc. Techniques in evolved packet core for restricted local operator services access
CN109614147B (zh) * 2018-12-03 2022-02-22 郑州云海信息技术有限公司 一种phy寄存器读写方法和装置
US10771189B2 (en) 2018-12-18 2020-09-08 Intel Corporation Forward error correction mechanism for data transmission across multi-lane links
US11637657B2 (en) 2019-02-15 2023-04-25 Intel Corporation Low-latency forward error correction for high-speed serial links
US11249837B2 (en) 2019-03-01 2022-02-15 Intel Corporation Flit-based parallel-forward error correction and parity
US11503471B2 (en) * 2019-03-25 2022-11-15 Fortinet, Inc. Mitigation of DDoS attacks on mobile networks using DDoS detection engine deployed in relation to an evolve node B
US11296994B2 (en) 2019-05-13 2022-04-05 Intel Corporation Ordered sets for high-speed interconnects
CN110392061A (zh) * 2019-08-06 2019-10-29 郑州信大捷安信息技术股份有限公司 一种网络接入控制系统及方法
CN113950802B (zh) * 2019-08-22 2023-09-01 华为云计算技术有限公司 用于执行站点到站点通信的网关设备和方法
KR102739176B1 (ko) * 2019-10-16 2024-12-06 현대자동차주식회사 차량 통신 연결 장치 및 그 방법
US11740958B2 (en) 2019-11-27 2023-08-29 Intel Corporation Multi-protocol support on common physical layer
US11469890B2 (en) * 2020-02-06 2022-10-11 Google Llc Derived keys for connectionless network protocols
CN111356157B (zh) * 2020-03-15 2024-10-25 腾讯科技（深圳）有限公司 实现网络能力开放的方法及相关设备
GB2598084A (en) * 2020-07-16 2022-02-23 The Sec Dep For Foreign Commonwealth And Development Affairs Acting Through The Government Communica Payload assurance at a network boundary
US12189470B2 (en) 2020-09-18 2025-01-07 Intel Corporation Forward error correction and cyclic redundancy check mechanisms for latency-critical coherency and memory interconnects
US11818097B2 (en) * 2021-04-25 2023-11-14 A10 Networks, Inc. Packet watermark with static salt and token validation
US11546358B1 (en) * 2021-10-01 2023-01-03 Netskope, Inc. Authorization token confidence system
WO2023224424A1 (en) * 2022-05-20 2023-11-23 Samsung Electronics Co., Ltd. Application server assisted content management in cellular network
US11895213B2 (en) 2022-05-20 2024-02-06 Samsung Electronics Co., Ltd. Application server assisted content management in cellular network
CN115396186B (zh) * 2022-08-24 2025-01-17 江铃汽车股份有限公司 一种基于车载网关的车内通信防火墙系统的运行方法
US20240414210A1 (en) * 2023-06-09 2024-12-12 Fortinet, Inc. Systems and methods for edge processing using selectively suspended network security
US20250247702A1 (en) * 2024-01-25 2025-07-31 Qualcomm Incorporated Downlink message protection for ambient wireless devices

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080076425A1 (en) * 2006-09-22 2008-03-27 Amit Khetawat Method and apparatus for resource management
US20110131417A1 (en) * 2009-12-02 2011-06-02 Microsoft Corporation Identity based network policy enablement
US20110171953A1 (en) * 2010-01-11 2011-07-14 Research In Motion Limited System and method for enabling discovery of local service availability in local cellular coverage
WO2014056523A1 (en) * 2012-10-08 2014-04-17 Nokia Solutions And Networks Oy Methods, devices, and computer program products for keeping devices attached without a default bearer
WO2015023537A2 (en) * 2013-08-16 2015-02-19 Interdigital Patent Holdings, Inc. Methods and apparatus for hash routing in software defined networking

Family Cites Families (38)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPH07307752A (ja) * 1994-05-10 1995-11-21 Toshiba Corp 計算機の通信方式
US7370004B1 (en) 1999-11-15 2008-05-06 The Chase Manhattan Bank Personalized interactive network architecture
US6621793B2 (en) * 2000-05-22 2003-09-16 Telefonaktiebolaget Lm Ericsson (Publ) Application influenced policy
US6941326B2 (en) * 2001-01-24 2005-09-06 Microsoft Corporation Accounting for update notifications in synchronizing data that may be represented by different data structures
FI115687B (fi) * 2002-04-09 2005-06-15 Nokia Corp Pakettidatan siirtäminen langattomaan päätelaitteeseen
JP4782139B2 (ja) 2004-10-26 2011-09-28 テレコム・イタリア・エッセ・ピー・アー モバイルユーザーをトランスペアレントに認証してウェブサービスにアクセスする方法及びシステム
CN101120573A (zh) * 2004-12-22 2008-02-06 高通股份有限公司 使用灵活协议配置的连接建立
US7990998B2 (en) 2004-12-22 2011-08-02 Qualcomm Incorporated Connection setup using flexible protocol configuration
WO2006114628A2 (en) 2005-04-26 2006-11-02 Vodafone Group Plc Sae/lte telecommunications networks
EP2027666B1 (en) * 2006-06-09 2018-02-28 Telefonaktiebolaget LM Ericsson (publ) Access to services in a telecommunications network
US7957306B2 (en) 2006-09-08 2011-06-07 Cisco Technology, Inc. Providing reachability information in a routing domain of an external destination address in a data communications network
CN101064695A (zh) * 2007-05-16 2007-10-31 杭州看吧科技有限公司 一种P2P(Peer to Peer)安全连接的方法
US8955088B2 (en) 2007-11-07 2015-02-10 Futurewei Technologies, Inc. Firewall control for public access networks
CN101984778B (zh) 2008-01-26 2014-08-13 思杰系统有限公司 用于细粒度策略驱动的cookie代理的系统和方法
US8452011B2 (en) * 2008-10-24 2013-05-28 Qualcomm Incorporated Method and apparatus for billing and security architecture for venue-cast services
WO2010066295A1 (en) * 2008-12-10 2010-06-17 Telefonaktiebolaget Lm Ericsson (Publ) Token-based correlation of control sessions for policy and charging control of a data session through a nat
US8527774B2 (en) 2009-05-28 2013-09-03 Kaazing Corporation System and methods for providing stateless security management for web applications using non-HTTP communications protocols
US8750370B2 (en) * 2009-09-04 2014-06-10 Brocade Communications Systems, Inc. Congestion-adaptive compression
US8949978B1 (en) * 2010-01-06 2015-02-03 Trend Micro Inc. Efficient web threat protection
JP5440210B2 (ja) * 2010-01-28 2014-03-12 富士通株式会社 アクセス制御プログラム、アクセス制御方法およびアクセス制御装置
US8565091B2 (en) 2010-10-28 2013-10-22 Telefonaktiebolaget L M Ericsson (Publ) Dynamic control of air interface throughput
CN102469020B (zh) * 2010-11-19 2017-10-17 华为技术有限公司 一种业务控制方法及系统、演进基站、分组数据网网关
CN102625271B (zh) * 2011-01-26 2016-09-07 中兴通讯股份有限公司 一种共设mtc设备的信令优化方法和系统
US8978100B2 (en) * 2011-03-14 2015-03-10 Verizon Patent And Licensing Inc. Policy-based authentication
US9173099B2 (en) 2011-03-30 2015-10-27 Htc Corporation Method of subscription control in a mobile communication system
EP2884812B1 (en) * 2011-04-01 2016-12-28 Interdigital Patent Holdings, Inc. Apparatus and method for sharing a common PDP context
US20120323990A1 (en) * 2011-06-15 2012-12-20 Microsoft Corporation Efficient state reconciliation
US8976813B2 (en) 2011-09-08 2015-03-10 Motorola Solutions, Inc. Secure quality of service
US8667579B2 (en) 2011-11-29 2014-03-04 Genband Us Llc Methods, systems, and computer readable media for bridging user authentication, authorization, and access between web-based and telecom domains
EP2820794B1 (en) * 2012-02-27 2020-01-01 Deshpande, Nachiket Girish Authentication and secured information exchange system, and method therefor
US8621590B2 (en) 2012-03-19 2013-12-31 Cable Television Laboratories, Inc. Multiple access point zero sign-on
US9818161B2 (en) * 2012-06-05 2017-11-14 Apple Inc. Creating a social network message from an interface of a mobile device operating system
US9693366B2 (en) 2012-09-27 2017-06-27 Interdigital Patent Holdings, Inc. End-to-end architecture, API framework, discovery, and access in a virtualized network
DE102013102487A1 (de) 2013-03-12 2014-09-18 Deutsche Telekom Ag Verfahren und Vorrichtung zur Steuerung des Zugriffs auf digitale Inhalte
US9098687B2 (en) 2013-05-03 2015-08-04 Citrix Systems, Inc. User and device authentication in enterprise systems
US10505850B2 (en) 2015-02-24 2019-12-10 Qualcomm Incorporated Efficient policy enforcement using network tokens for services—user-plane approach
US9648141B2 (en) * 2015-03-31 2017-05-09 Cisco Technology, Inc. Token delegation for third-party authorization in computer networking
US10362011B2 (en) 2015-07-12 2019-07-23 Qualcomm Incorporated Network security architecture

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080076425A1 (en) * 2006-09-22 2008-03-27 Amit Khetawat Method and apparatus for resource management
US20110131417A1 (en) * 2009-12-02 2011-06-02 Microsoft Corporation Identity based network policy enablement
US20110171953A1 (en) * 2010-01-11 2011-07-14 Research In Motion Limited System and method for enabling discovery of local service availability in local cellular coverage
WO2014056523A1 (en) * 2012-10-08 2014-04-17 Nokia Solutions And Networks Oy Methods, devices, and computer program products for keeping devices attached without a default bearer
WO2015023537A2 (en) * 2013-08-16 2015-02-19 Interdigital Patent Holdings, Inc. Methods and apparatus for hash routing in software defined networking

Also Published As

Publication number Publication date
WO2016137598A3 (en) 2016-11-03
US10505850B2 (en) 2019-12-10
EP3262821B1 (en) 2024-08-14
CN107409125A (zh) 2017-11-28
JP6687636B2 (ja) 2020-04-22
EP3262821A2 (en) 2018-01-03
US11910191B2 (en) 2024-02-20
KR20170118732A (ko) 2017-10-25
US20160248682A1 (en) 2016-08-25
JP2018508146A (ja) 2018-03-22
US11570622B2 (en) 2023-01-31
US20190349306A1 (en) 2019-11-14
TW201644238A (zh) 2016-12-16
US20230091356A1 (en) 2023-03-23
WO2016137598A2 (en) 2016-09-01
US20220150699A1 (en) 2022-05-12
BR112017018021A2 (pt) 2018-04-10
CN107409125B (zh) 2021-02-19
TWI668976B (zh) 2019-08-11
US11265712B2 (en) 2022-03-01

Similar Documents

Publication Publication Date Title
US11910191B2 (en) Efficient policy enforcement using network tokens for services—user-plane approach
JP6438593B2 (ja) サービスｃプレーン手法のためにネットワークトークンを使用する効率的なポリシー実施
US11290382B2 (en) Efficient policy enforcement for downlink traffic using network access tokens—control-plane approach
US10397268B2 (en) Method and apparatus for providing notification of detected error conditions in a network
WO2020034864A1 (zh) 一种用户面安全策略实现方法、装置及系统
US9647935B2 (en) Inter-layer quality of service preservation
CN104506406B (zh) 一种鉴权认证设备
EP3552367B1 (en) Method and intermediate network node for managing tcp segment
WO2022174729A1 (zh) 保护身份标识隐私的方法与通信装置

Legal Events

Date Code Title Description
PA0105 International application

Patent event date: 20170814

Patent event code: PA01051R01D

Comment text: International Patent Application

PG1501 Laying open of application
A201 Request for examination
PA0201 Request for examination

Patent event code: PA02012R01D

Patent event date: 20201229

Comment text: Request for Examination of Application

E902 Notification of reason for refusal
PE0902 Notice of grounds for rejection

Comment text: Notification of reason for refusal

Patent event date: 20220511

Patent event code: PE09021S01D

E701 Decision to grant or registration of patent right
PE0701 Decision of registration

Patent event code: PE07011S01D

Comment text: Decision to Grant Registration

Patent event date: 20221017

GRNT Written decision to grant
PR0701 Registration of establishment

Comment text: Registration of Establishment

Patent event date: 20230109

Patent event code: PR07011E01D

PR1002 Payment of registration fee

Payment date: 20230109

End annual number: 3

Start annual number: 1

PG1601 Publication of registration