Back to results
US 2019/0200411 A1Published application
Infrastructure-Based D2D Connection Setup Using OTT Services
AssigneesKoninklijke KPN N.V., Nederlandse Organisatie voor toegepast-natuurwetenschappelijk onderzoek TNO
InventorsSander De Kievit, Jose Almodovar Chico, Antonius Norp, Bernardus Hillen
Life of this patent
Estimating the term…
Abstract
Methods and systems enabling the end users of cellular devices to set up infrastructure-based D2D connections with other devices from within the over-the-top (OTT) applications running on their devices are disclosed. The methods are based on dynamically reconfiguring respective network-level firewalls protecting different end user devices.
Claims20
A method for a first routing entity controlled by a mobile network operator to enable establishment of a connection between a first device connected to a telecommunications network of the first mobile network operator and a second device connected to the telecommunications network, the method comprising:
- receiving from the first device a connection request comprising a first identifier for the second device;
- resolving the first identifier of the second device into a second identifier of the second device identifying a second routing entity controlled by the mobile network operator;
- providing to the second routing entity a connection request for the connection between the first device and the second device, the connection request comprising at least one of the first identifier or the second identifier of the second device;
- providing to the second routing entity contact information of the first device;
- receiving from the second routing entity contact information of the second device;
- and;
- configuring a first firewall for a data exchange over the connection between the first device and the second device in accordance with the contact information of the first device and the contact information of the second device, wherein the first firewall is a firewall of the telecommunications network to which the first device is connected that is configured to protect the first device.
4 more elements
A method for a second routing entity controlled by a mobile network operator to enable establishment of a connection between a first device connected to a telecommunications network of the mobile network operator and a second device connected to the telecommunications network, the method comprising:
- receiving from a first routing entity controlled by the mobile network operator a connection request for the connection between the first device and the second device, the connection request comprising at least one of a first identifier or a second identifier of the second device;
- resolving the at least one of the first identifier or the second identifier of the second device to determine a third identifier of the second device;
- providing the connection request, or a derivative thereof, to the second device identified by the third identifier;
- receiving, from the first routing entity, contact information of the first device;
- providing contact information of the second device to the first routing entity;
- and
- configuring a second firewall for a data exchange over the connection between the first device and the second device in accordance with the contact information of the first device and the contact information of the second device, wherein the second firewall is a firewall of the telecommunications network to which the second device is connected that is configured to protect the second device.
4 more elements
A non-transitory computer-readable storage medium having instructions stored thereon for a first routing entity controlled by a mobile network operator to enable establishment of a connection between a first device connected to a telecommunications network of the mobile network operator and a second device connected to the telecommunications network, wherein the instructions, when executed by a processor of a node, cause the node to carry out operations including:
- receiving from the first device a connection request comprising a first identifier for the second device;
- resolving the first identifier of the second device into a second identifier of the second device identifying a second routing entity controlled by the mobile network operator;
- providing to the second routing entity a connection request for the connection between the first device and the second device, the connection request comprising at least one of the first identifier or the second identifier of the second device;
- providing to the second routing entity contact information of the first device;
- receiving from the second routing entity contact information of the second device;
- and
- configuring a first firewall for a data exchange over the connection between the first device and the second device in accordance with the contact information of the first device and the contact information of the second device, wherein the first firewall is a firewall of the telecommunications network to which the first device is connected that is configured to protect the first device.
4 more elements
A node comprising:
- a non-transitory computer readable storage medium having computer readable instructions stored thereon for a first routing entity controlled by a mobile network operator to enable establishment of a connection between a first device connected to a telecommunications network of the mobile network operator and a second device connected to the telecommunications network;
- and
- a processor coupled to the non-transitory computer readable storage medium, wherein responsive to executing the computer readable instructions, the processor is configured to cause the node to carry out operations including:
- receiving from the first device a connection request comprising a first identifier for the second device;
- resolving the first identifier of the second device into a second identifier of the second device identifying a second routing entity controlled by the mobile network operator;
- providing to the second routing entity a connection request for the connection between the first device and the second device, the connection request comprising at least one of the first identifier or the second identifier of the second device;
- providing to the second routing entity contact information of the first device;
- receiving from the second routing entity contact information of the second device;
- and
- configuring a first firewall for a data exchange over the connection between the first device and the second device in accordance with the contact information of the first device and the contact information of the second device, wherein the first firewall is a firewall of the telecommunications network to which the first device is connected that is configured to protect the first device.
7 more elements
A node comprising:
- a non-transitory computer readable storage medium having computer readable instructions stored thereon for a second routing entity controlled by a mobile network operator to enable establishment of a connection between a first device connected to a telecommunications network of a mobile network operator and a second device connected to the telecommunications network;
- and
- a processor coupled to the non-transitory computer readable storage medium, wherein responsive to executing the computer readable instructions, the processor is configured to cause the node to carry out operations including:
- receiving from a first routing entity controlled by the mobile network operator a connection request for the connection between the first device and the second device, the connection request comprising at least one of a first identifier or a second identifier of the second device;
- resolving the at least one of the first identifier or the second identifier of the second device to determine a third identifier of the second device;
- providing the connection request, or a derivative thereof, to the second device identified by the third identifier;
- receiving, from the first routing entity, contact information of the first device;
- providing contact information of the second device to the first routing entity;
- and
- configuring a second firewall for a data exchange over the connection between the first device and the second device in accordance with the contact information of the first device and the contact information of the second device, wherein the second firewall is a firewall of the telecommunications network to which the second device is connected that is configured to protect the second device.
7 more elements
A method for a routing entity controlled by a mobile network operator to enable establishment of a connection between a first device connected to a telecommunications network of the mobile network operator and a second device connected to the telecommunications network, the method comprising:
- receiving from the first device a connection request comprising a first identifier for the second device;
- resolving the first identifier of the second device into a second identifier of the second device identifying the routing entity;
- resolving at least one of the first identifier or the second identifier of the second device to determine a third identifier of the second device;
- providing the connection request, or a derivative thereof, to the second device identified by the third identifier;
- configuring a first firewall for a data exchange over the connection between the first device and the second device in accordance with contact information of the first device and the contact information of the second device, wherein the first firewall is a firewall of the telecommunications network to which the first device is connected that is configured to protect the first device;
- and
- configuring a second firewall for a data exchange over the connection between the first device and the second device in accordance with the contact information of the first device, wherein the second firewall is a firewall of the telecommunications network to which the second device is connected that is configured to protect the second device.
4 more elements
A non-transitory computer-readable storage medium having instructions stored thereon for a routing entity controlled by a mobile network operator to enable establishment of a connection between a first device connected to a telecommunications network of the mobile network operator and a second device connected to the telecommunications network, wherein the instructions, when executed by a processor of a node, cause the node to carry out operations including:
- receiving from the first device a connection request comprising a first identifier for the second device;
- resolving the first identifier of the second device into a second identifier of the second device identifying the routing entity;
- resolving at least one of the first identifier or the second identifier of the second device to determine a third identifier of the second device;
- providing the connection request, or a derivative thereof, to the second device identified by the third identifier;
- configuring a first firewall for a data exchange over the connection between the first device and the second device in accordance with contact information of the first device and the contact information of the second device, wherein the first firewall is a firewall of the telecommunications network to which the first device is connected that is configured to protect the first device;
- and
- configuring a second firewall for a data exchange over the connection between the first device and the second device in accordance with the contact information of the first device, wherein the second firewall is a firewall of the telecommunications network to which the second device is connected that is configured to protect the second device.
4 more elements
A node comprising:
- a non-transitory computer readable storage medium having computer readable instructions stored thereon for a routing entity controlled by a mobile network operator to enable establishment of a connection between a first device connected to a telecommunications network of the mobile network operator and a second device connected to the telecommunications network;
- and
- a processor coupled to the non-transitory computer readable storage medium, wherein responsive to executing the computer readable instructions, the processor is configured to cause the node to carry out operations including:
- receiving from the first device a connection request comprising a first identifier for the second device;
- resolving the first identifier of the second device into a second identifier of the second device identifying the routing entity;
- resolving at least one of the first identifier or the second identifier of the second device to determine a third identifier of the second device;
- providing the connection request, or a derivative thereof, to the second device identified by the third identifier;
- configuring a first firewall for a data exchange over the connection between the first device and the second device in accordance with contact information of the first device and the contact information of the second device, wherein the first firewall is a firewall of the telecommunications network to which the first device is connected that is configured to protect the first device;
- and
- configuring a second firewall for a data exchange over the connection between the first device and the second device in accordance with the contact information of the first device, wherein the second firewall is a firewall of the telecommunications network to which the second device is connected that is configured to protect the second device.
7 more elements
Dependencies are inferred from the claim text.