Trusted solutions for enabling user equipment belonging to a home network to access data communication services in a visited network

A method for enabling user equipment belonging to a home network to access data communication services in a visited network of a wireless communication system, wherein the method comprises:

• obtaining at least one cryptographic token from the user equipment that represents means for accessing data communication services via user data transport functions of the visited network,
• wherein said at least one cryptographic token is a double-signed token cryptographically signed by a private key associated with the home network and cryptographically signed by a private key associated with the user equipment;
• and
• validating the double-signed token for enabling the user equipment to access data communication services via the user data transport functions of the visited network.

A method for enabling user equipment belonging to a home network to access data communication services in a visited network of a wireless communication system, wherein the method comprises:

• issuing, to the user equipment, at least one cryptographic token representing means for accessing data communication services via user data transport functions of the visited network;
• cryptographically signing the cryptographic token by a private key associated with the home network;
• and
• sending the signed token to the user equipment and requesting the user equipment to cryptographically sign the signed token by a private key associated with the user equipment to generate a double-signed token for enabling the user equipment to access data communication services via the user data transport functions of the visited network when presenting the double-signed token to a network node of the visited network.

An user equipment configured for operation in a wireless communication system,

• wherein the user equipment is configured to obtain at least one cryptographic token originating from a network node of a home network of the user equipment and cryptographically signed by a private key associated with the home network,
• said at least one cryptographic token representing means for accessing data communication services via user data transport functions of a visited network;
• wherein the user equipment is configured to cryptographically sign the received and signed token by a private key associated with the user equipment to generate a double-signed token;
• and
• wherein the user equipment is configured to send the double-signed token to a network node of the visited network for enabling the user equipment to access data communication services via the user data transport functions of the visited network.

A system for operation with a home network and configured to enable user equipment belonging to the home network to access data communication services in a visited network of a wireless communication system,

• wherein the system is configured to issue, to the user equipment, at least one cryptographic token representing means for accessing data communication services via user data transport functions of the visited network;
• wherein the system is configured to cryptographically sign the cryptographic token by a private key associated with the home network;
• and
• wherein the system is configured to send the signed token to the user equipment and request the user equipment to cryptographically sign the signed token by a private key associated with the user equipment to generate a double-signed token for enabling the user equipment to access data communication services via the user data transport functions of the visited network when presenting the double-signed token to a network node of the visited network.

A system for operation with a visited network and configured to enable user equipment belonging to a home network to access data communication services in the visited network of a wireless communication system,

• wherein the system is configured to obtain at least one cryptographic token from the user equipment that represents means for accessing data communication services via user data transport functions of the visited network,
• said at least one cryptographic token being a double-signed token cryptographically signed by a private key associated with the home network and cryptographically signed by a private key associated with the user equipment;
• and
• wherein the system is configured to validate the double-signed token for enabling the user equipment to access data communication services via the user data transport functions of the visited network.