# US 2019/0379701 A1 · Node Access Control > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0379701 A1 - Document ID: US20190379701A1 - Status: Published application - Kind: A1 - Application number: 16/418,687 - Filed: 2019-05-21 - Published: 2019-12-12 - Earliest claimed: 2018-05-23 - Assignees: Nokia Technologies Oy - Applicants: Nokia Technologies Oy - Inventors: Kiran Channakeshavapura Sathyanarayanamurthy - Web page: https://patentgrep.com/patent/US20190379701A1 ## CPC - H04L 63/10: {for controlling access to devices or network resources} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/108: {when the policy decisions are valid for a limited amount of time} - H04W 12/06: Authentication - H04L 63/166: {at the transport layer} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract According to an example aspect of the present invention, there is provided an apparatus comprising a memory configured to store access control parameters, and at least one processing core, configured to replace a first access control mechanism in a remote node with a second access control mechanism which is defined by the access control parameters, the access control parameters comprising references to a mathematical operations database, the references comprising mathematical operation identifiers, and at least one connector defining a sequence of mathematical operations. ## Claims ### Claim 1 An apparatus comprising at least one processing core, at least one memory including computer program code, the at least one memory and the computer program code being configured to, with the at least one processing core, cause the apparatus at least to: store access control parameters; replace a first access control mechanism in a remote node with a second access control mechanism which is defined by the access control parameters, the access control parameters comprising references to a mathematical operations database, the references comprising mathematical operation identifiers, and at least one connector defining a sequence of mathematical operations. ### Claim 2 (depends on 1) The apparatus according to claim 1, wherein the access control parameters comprise a time validity period for the second access control mechanism. ### Claim 3 (depends on 1) The apparatus according to claim 1, wherein the mathematical operations database is in a server distinct from both the apparatus and the remote node. ### Claim 4 (depends on 1) The apparatus according to claim 1, wherein the at least one processing core is further configured to cause the apparatus to inform the remote node of the access control parameters, to thereby replace the first access control mechanism with the second access control mechanism. ### Claim 5 (depends on 1) The apparatus according to claim 1, wherein the at least one processing core is configured to cause the apparatus to transmit the access control parameters to the remote node over an encrypted connection between the apparatus and the remote node. ### Claim 6 (depends on 1) The apparatus according to claim 1, wherein the at least one processing core is further configured to receive a challenge from the remote node, to obtain a response to the challenge using the access control parameters and to cause the response to be transmitted to the remote node. ### Claim 7 (depends on 6) The apparatus according to claim 6, wherein the at least one processing core is configured to obtain the response using processing outsourced from the apparatus to a computation node distinct from the apparatus, and to apply the at least one connector locally in the apparatus. ### Claim 8 (depends on 1) The apparatus according to claim 1, wherein the at least one processing core is configured to obtain, from a peer node of the apparatus, second access control parameters relating to a second remote node. ### Claim 9 (depends on 1) The apparatus according to claim 1, wherein the at least one processing core is configured to provide, to a peer node of the apparatus, the access control parameters. ### Claim 10 An apparatus comprising at least one processing core, at least one memory including computer program code, the at least one memory and the computer program code being configured to, with the at least one processing core, cause the apparatus at least to: receive, from a user equipment, access control parameters defining an access control mechanism, the access control parameters comprising references to a mathematical operations database, the references comprising mathematical operation identifiers, and at least one connector defining a sequence of mathematical operations; obtain a random sequence and a response to the random sequence using the access control parameters, and transmit the random sequence to a second user equipment as a challenge, and verify a reply from the second user equipment matches the response. ### Claim 11 (depends on 10) The apparatus according to claim 10, wherein the mathematical operations database is in a server distinct from both the apparatus and the first and second user equipments. ### Claim 12 A method in an apparatus, comprising: storing access control parameters, and replacing a first access control mechanism in a remote node with a second access control mechanism which is defined by the access control parameters, the access control parameters comprising references to a mathematical operations database, the references comprising mathematical operation identifiers, and at least one connector defining a sequence of mathematical operations. ### Claim 13 (depends on 12) The method according to claim 12, wherein the access control parameters comprise a time validity period for the second access control mechanism. ### Claim 14 (depends on 12) The method according to claim 12, wherein the mathematical operations database is in a server distinct from both the apparatus and the remote node. ### Claim 15 (depends on 12) The method according to claim 12, further comprising informing the remote node of the access control parameters, to thereby replace the first access control mechanism with the second access control mechanism. ### Claim 16 (depends on 12) The method according to claim 12, further comprising transmitting the access control parameters to the remote node over an encrypted connection between the apparatus and the remote node. ### Claim 17 (depends on 12) The method according to claim 12, further comprising receiving a challenge from the remote node, obtaining a response to the challenge using the access control parameters and causing the response to be transmitted to the remote node. ### Claim 18 (depends on 17) The method according to claim 17, further comprising obtaining the response using processing outsourced from the apparatus to a computation node distinct from the apparatus and applying the at least one connector locally in the apparatus. ### Claim 19 A method in an apparatus, comprising: receiving, from a user equipment, access control parameters defining an access control mechanism, the access control parameters comprising references to a mathematical operations database, the references comprising mathematical operation identifiers, and at least one connector defining a sequence of mathematical operations; obtaining a random sequence and a response to the random sequence using the access control parameters, and transmitting the random sequence to a second user equipment as a challenge, and verifying a reply from the second user equipment matches the response. ### Claim 20 A non-transitory computer readable medium having stored thereon a set of computer readable instructions that, when executed by at least one processor, cause an apparatus to at least: store access control parameters; replace a first access control mechanism in a remote node with a second access control mechanism which is defined by the access control parameters, the access control parameters comprising references to a mathematical operations database, the references comprising mathematical operation identifiers, and at least one connector defining a sequence of mathematical operations.