Deutsche Telekom Patente

Provided are methods, computer programs, and apparatuses for using dynamic addressing for mobile devices in a telecommunication system. The method (10) for using dynamic addressing for mobile devices in a telecommunication system comprises assigning (12) a first address to a mobile device, the first address being from a first group of addresses with a first lower address persistency for provision of a first service with a higher Quality of Service, QoS, requirement. The method (10) further comprises assigning (14) a second address to the mobile device, the second address being from a second group of addresses with a second higher address persistency for provision of a second service with a lower QoS requirement.

Provided is a method for allocating resources of a mobile telecommunications network. The method comprises receiving data indicative of an intent. The intent is a declarative goal or user demand specified by at least one of a user of the UE, the UE, a client of the network, and at least a part of the network. The method further comprises determining, based on the intent, a current and a projected network resource status using a network digital twin. The apparatus further comprises allocating network resources in accordance with the intent based on the determined network resource status.

Provided is a method for a mobile telecommunication network for controlling access of user equipment, UE, to an external network, using a walled garden environment in a core network. The walled garden environment is configured to allow, before authentication of the UE, only at least one pre-approved service to the UE. The method includes receiving, at the core network, a connection request from the UE. The connection request further comprises authentication data of the UE. The method further includes routing the connection request into the walled garden environment. The method further includes determining, based on the authentication data, an access policy for the UE. The method further includes establishing bidirectional data communication between the UE and the external network.

Provided is a method for determining an action in a telecommunications network. The method includes receiving, by a prompt gateway, a first prompt corresponding to a request of a client in the network. The method further includes identifying, based on the first prompt, at least one action to be taken for at least one of a UE or at least one network layer. The method further includes generating, by the prompt gateway, at least one second prompt for at least one of the UE or a network layer agent provided for the at least one network layer for invoking the at least one action.

Provided are methods, computer programs, and apparatuses for providing firewall services in a mobile communication system. The method (10) for providing firewall services in a mobile communication system comprises storing (11) user plane information about a user plane data flow of a data service in the mobile communication system and providing (12) the information about the user plane data flow to a firewall entity to enable firewall services to be applied to the user plane of the mobile communication system.

Provided is a method for establishing a connection between user equipment, UE, and a common core network via at least one base station of a mobile communications network. The method includes receiving, at the base station, a connection request from the UE. The connection request is based on internet protocol, IP, packets generated by the UE. The method further includes forwarding, by the base station, the received IP packets as native IP packets via an IP interface to the common core network. The method further includes enabling, via the common core network, bidirectional IP data communication between the UE and an external network based on an established IP session.

Verfahren und System zur Übertragung von Datenpaketen in einer Ende zu Ende (E2E) Verbindung innerhalb einer IP-basierten Telekommunikationsnetzwerk-Infrastruktur unter Verwendung einer einheitlichen Datenpaketgröße (MTU, Maximum Transmission Unit), wobei die Datenpakete von einem ersten Telekommunikationsanbieter über einen IP-Exchange Anbieter (IPX-Provider) zu einem zweiten Telekommunikationsanbieter übertragen werden, wobei- für die beiden Telekommunikationsanbieter und den IPX-Provider die Größe einer für ihn jeweils nutzbaren MTU einer zentralen Verwaltungseinheit mitgeteilt werden,- die zentrale Verwaltungseinheit als einheitliche MTU die kleinste der mitgeteilten MTUs bestimmt,- die zentrale Verwaltungseinheit die Größe der einheitlichen MTU dem ersten Telekommunikationsanbieter übermittelt und- der erste Telekommunikationsanbieter die Datenpakete unter Verwendung der einheitlichen MTU über den IPX Provider an den zweiten Telekommunikationsanbieter überträgt.

The present disclosure relates to method, apparatus and computer program for controlling cross-border Public Land Mobile Network (PLMN) handover and to a method, apparatus and computer program for communicating information on cross-border PLMN handover being enabled or disabled for a User Equipment (UE). A method for restricting cross-border PLMN handover comprises obtaining (110, 120, 130) information on cross-border PLMN handover being enabled or disabled for a User Equipment, UE, being associated with a serving PLMN, and restricting (150, 160, 170) a set of PLMN being available for handover based on the information on the cross-border PLMN handover being enabled or disabled.

The invention relates to a method for using a user equipment with a mobile communication network and/or for transmitting data on, or using, an additional communication plane besides the user plane and the control plane, wherein the mobile communication network comprises a radio access network comprising at least one base station entity serving the user equipment, and wherein the user equipment indicates, to the mobile communication network and/or to the at least one base station entity, the transmission of data or the intended transmission of data on, or using, the additional communication plane, this transmission or intended transmission of data being in uplink direction, from the user equipment towards the mobile communication network, wherein the method comprises the step of the user equipment transmitting an indication information that specifies, relates to, or indicates the use of, the additional communication plane, wherein the indication information is part of, or carried by, at least one medium access control sub protocol data unit, MAC subPDU, and/or at least one medium access control, MAC, control element and/or at least one medium access control, MAC, subheader.

A method for maintaining a hardware component, wherein a hardware component of a central office, CO, of a telecommunication network is maintained, a maintenance system for an operation support system of a telecommunication network and a computer program product.

Ausführungsbeispiele der vorliegenden Erfindung schaffen ein Verfahren 100 zur Anpassung eines maschinellen Lernmodells. Das Verfahren 100 umfasst Erhalten 110 eines ersten maschinellen Lernmodells zur Ausführung einer dialogbasierten Eingabe- und Ausgabe-Zielanwendung. Ferner umfasst das Verfahren 100 Erhalten 120 eines zweiten maschinellen Lernmodells zur Erzeugung von Eingabedaten für das erste maschinelle Lernmodell zum Führen eines Dialogs zwischen dem ersten und dem zweiten maschinellen Lernmodell. Das Verfahren 100 umfasst weiterhin Trainieren 130 einer oder mehrerer Anpassungsmatrizen für das zweite maschinelle Lernmodell, die mit dem zweiten maschinellen Lernmodell kombiniert werden. Schließlich umfasst das Verfahren 100 Kombinieren 140 der einen oder mehreren Anpassungsmatrizen mit einer Gewichtsmatrix des zweiten maschinellen Lernmodells. Die einen oder mehreren Anpassungsmatrizen werden trainiert, um Eingabedaten durch das kombinierte zweite maschinelle Lernmodell für das erste maschinelle Lernmodell zu erzeugen, die darauf ausgelegt sind, das erste maschinelle Lernmodell zu einer Ausgabe zu veranlassen, die gegen vorherbestimmte Richtlinien verstößt. Die einen oder mehreren Anpassungsmatrizen weisen einen kleineren Rang auf als die Gewichtsmatrix des zweiten maschinellen Lernmodells, mit der sie kombiniert werden.

Ausführungsbeispiele der vorliegenden Erfindung schaffen ein Verfahren 100 zum Auffinden eines Richtlinienverstoßes eines generativen maschinellen Lernmodells. Das Verfahren 100 umfasst das Erhalten 110 eines ersten maschinellen Lernmodells zur Ausführung einer dialogbasierten Eingabe- und Ausgabe-Zielanwendung. Ferner umfasst das Verfahren 100 das Erzeugen 120 von Eingabedaten durch ein zweites maschinelles Lernmodell, um einen Dialog zwischen dem ersten maschinellen Lernmodell und dem zweiten maschinellen Lernmodell zu führen. Die Eingabedaten sind dabei ausgelegt, das erste maschinelle Lernmodell zu einer Ausgabe zu veranlassen, die gegen vorherbestimmte Richtlinien verstößt. Das Verfahren 100 umfasst ferner das kontinuierliche Prüfen 130 durch ein Prüfungsmodell, ob eine Ausgabe des ersten maschinellen Lernmodells während des Dialogs gegen die vorherbestimmten Richtlinien verstößt. Falls das Prüfungsmodell erkennt, dass eine Ausgabe gegen die vorherbestimmten Richtlinien verstößt, umfasst das Verfahren 100 das Beenden 140 des Dialogs.

Verfahren zum Ermitteln von Verkehrsdaten eines Verkehrsmittels, bei dem ein mit einem Mobilfunknetz verbundenes mobiles Endgerät eine einen gegenwärtigen Zeitpunkt und eine Position des mobilen Endgeräts zu dem gegenwärtigen Zeitpunkt bestimmende Anfrage über das Mobilfunknetz zu einem Server übermittelt und von dem Server eine Antwort mit Verkehrsdaten eines zu dem gegenwärtigen Zeitpunkt in einer Umgebung der Position angeordneten Verkehrsmittels über das Mobilfunknetz in Echtzeit empfängt, sowie System zum Ermitteln von Verkehrsdaten eines Verkehrsmittels und Computerprogrammprodukt.

Provided is a method (10) for managing a mobile communication network using a semantic knowledge graph (20; 30). The method (10) includes modeling (12) the mobile communication network and telecommunication domain knowledge as a semantic knowledge graph (20; 30) representing data describing an ontology of the mobile communication network and the telecommunication domain knowledge, the ontology including structured concepts, taxonomies, relationships, and constraints, wherein the semantic knowledge graph (20; 30) is configured to enable logical operations for inference. The method (10) includes obtaining (14) runtime data from the mobile communication network and correlating the runtime data with the semantic knowledge graph to perform reasoning (16), derive optimization decisions, and implement network changes based on the derived decisions.

Verfahren zum Ermitteln eines Erfolgs einer Außenwerbung, bei dem ein Knoten eines Mobilfunknetzes eine Position eines mit einer Basisstation des Mobilfunknetzes drahtlos verbundenen mobilen Endgeräts ermittelt und das mobile Endgerät während einer Messdauer in einer definierten Umgebung einer Au-ßenwerbung angeordnet wird, Knoten für ein Mobilfunknetz und Computerprogrammprodukt.

Die Erfindung betrifft eine Lösung, welche es einem Konsumenten eines digitalisierten Videos ermöglicht, die Authentizität des Herausgebers und die Integrität der Videodaten zu überprüfen. Mittels einer Videosicherungseinrichtung des Herausgebers wird das Video in jeweils mehrere, aufeinanderfolgende Videoframes umfassende Videoblöcke unterteilt. Zu den Videoframes jedes Videoblocks wird eine Hashinformation erzeugt und mit einem privaten Schlüssel des Herausgebers signiert. In jeden Videoblock wird ein Kennzeichnungs- und Signaturframe MSF eingebettet, welcher zumindest ein ihn als MSF kenntlich machendes Kennzeichen und die Signatur der Hashinformation zum Videoblock enthält. Der Mediaplayer des wiedergebenden Endgeräts erkennt die in die Videoblöcke eingebetteten MSFs. Er speichert für den Videoblock, auf welche sich der jeweilige MSF bezieht, die enthaltene Signatur und validiert den Videoblock, indem er zu diesem mittels der auch in der Videosicherungseinrichtung verwendeten Hashfunktion eine Hashinformation erzeugt, die er mit der in dem MSF in signierter Form übermittelten Hashinformation durch Verifikation der zwischengespeicherten Signatur mit dem öffentlichen Schlüssel des Herausgebers vergleicht.

An RL-based framework for energy efficient onboard anomaly detection of a satellite moving in a predetermined orbit, comprising a repository of pre-trained anomaly detection models, trained on a specific subset of samples, or rule-based detectors; onboard sensors for continuously monitoring the satellite systems and data network and the onboard collected data; an RL-based agent for deciding which model to activate each time and what features to monitor via a subset of sensors, according to the location, cyber vulnerability level, previous anomalous activity, functions to be executed and energy state of the battery of the satellite, to achieve in each state the highest performance of each anomaly detection task, while investing the lowest amount of energy possible; means for providing alerts in the event of a detected cyber-attack.

A method for analyzing a quantum key distribution network, QKDN, wherein a QKDN analyzer module measures a key system attribute, KSA, of the QKDN and/or checks a functionality of the QKDN; a QKDN analyzer device for analyzing a QKDN, QKD nodes for a QKDN, a QKDN and a computer program product.

The invention relates to a method for using an application enabler layer and/or a service enabler architecture layer for verticals, SEAL, for providing communication services to a user equipment in a dynamic and/or flexible manner, using an application enablement layer and/or a vertical application layer of or via a telecommunications network, especially for supporting and providing an energy-related selection of an application enabler entity or a network entity of or associated to the telecommunications network or of or associated to a third party, wherein the telecommunications network comprises, or is associated with, a network repository function for providing profile information of or regarding a plurality of application enabler entities or of or regarding a plurality of network entities, in a discovery process of such application enabler entities or network entities, wherein, in order for providing communication services in a dynamic and/or flexible manner, the method comprises the following steps: -- in a first step, a requesting application enabler entity or a requesting network entity transmits a discovery request information to the network repository function of the telecommunications network, -- in a second step, the network repository function provides, to the requesting application enabler entity or requesting network entity, a profile information of or regarding at least one application enabler entity or of or regarding at least one network entity (502).

An optic terminal for an optic network, comprising a first optic receiver, RX, port, a first optic transmitter, TX, port, a second optic RX port, a second optic TX port and an optic engine connected to the first optic RX port, the first optic TX port, the second optic RX port and the second optic TX port, further comprising an electric plug and a digital signal processor, DSP, connected to the electric plug and the optic engine; an optic terminal stack for an optic network, an optic terminal stack arrangement for an optic network, an optic network, a method for operating an optic terminal and a method for operating an optic network.

An LLM-based method for detecting Advanced Persistent Threat (APT) and providing natural language interpretability of the detection findings, according to which unsupervised learning is performed, for statistical anomaly detection in provenance data of provenance-based systems. Large Language Models (LLMs) with implicit knowledge are used to detect unknown attack patterns by performing context-aware graph-based analysis of detected anomalies in the provenance data, for accurate interpretation of the detected anomalies and underlying context of potential attacks; natural language explanations, drawing connections between events, and outputting insights, based on the interpretation are provided.

Provided is a concept for selectively applying cryptographic processing to user plane (UP) traffic in a telecommunication network. It includes receiving cryptographic policy information indicative of cryptographic policies for at least one portion of UP traffic. It includes determining, based on the cryptographic policy information, whether to apply cryptographic processing to the at least one portion of the UP traffic. The cryptographic processing comprises at least one of encryption or integrity protection. Further, the proposed concept includes selectively applying the cryptographic processing to the portion of the UP traffic at a granularity of at least one of an interface, a tunnel, a protocol data unit (PDU) session, or a quality-of-service (QoS) flow

Provided are methods, computer programs, and apparatuses for providing services of multiple generations of telecommunication systems. The method (10) for providing services of multiple generations of telecommunication systems comprises enabling (11) services of a first telecommunication system, wherein the first telecommunication system supports network slicing and wherein the network slices are configurable to pro-vide different service characteristics and supporting (12) a second telecommunication system, the second telecommunication system being a different generation of telecommunication systems than the first telecommunication system. The first telecommunication system being configured to provide access to at least one feature of the second telecommunication system using at least one network slice.

A method for monitoring a fiber-optic routing platform, the fiber-optic routing platform comprising a rack and a plurality of optic ports, cables, connectors and fixed optic attenuators, FOATT, arranged in the rack, wherein the fiber-optic routing platform is monitored during a maintenance session of the fiber-optic routing platform. The invention further relates to a monitoring unit for a fiber-optic routing platform and computer program product.

The present disclosure relates to a first network node in a communication network. The first network node comprises processing circuitry configured to receive a status update message from a second network node in the communication network. The processing circuitry is further configured to decide whether to forward the status update message to at least one third network node in the communication network based on at least one forwarding criterium. The processing circuitry is further configured to decide whether to process the status update message based on at least one processing criterium.

Method and System for managing distributed entities (2) within an IP network, comprising, at an Application Layer Gateway (4): - intercepting IP network traffic used to steer and manage the distributed entities (2), - extracting steering and management commands from the intercepted IP network traffic, - analyzing the extracted commands to evaluate their compliance with predefined security rules, wherein a security control instance implemented within the Application Layer Gateway (4) is configured remotely to define and update the predefined security rules; and - forwarding only those steering and management commands that meet the predefined security rules to an application associated with a distributed entity (2), wherein the Application Layer Gateway operates at the application layer to analyze the protocol and semantics of the intercepted traffic.

A method for routing data within a global communication mesh, wherein data volumes transmitted during a time interval by a local communication network connected to a local point of presence, POP, of a global communication mesh are routed from the local POP along a plurality of paths within the global communication mesh to a plurality of remote POPs by a router of the local POP, the global communication mesh comprising a plurality of POPs including the local POP and the remote POPs and a plurality of links respectively linking exactly two POPs; a computing system for a local communication network and a computer program product.

Verwendung eines Neutrino-Detektors als vertrauenswürdiger Knoten (Trusted Node) in einem Verfahren zum kryptographischen Schlüsselaustausch zwischen einem ersten Kommunikationsendpunkt und einem zweiten Kommunikationsendpunkt, wobei der Neutrino-Detektor:- über einen ersten Neutrino-basierten Kommunikationskanal einen ersten kryptographischen Schlüssel von dem ersten Kommunikationsendpunkt empfängt,- über einen zweiten Neutrino-basierten Kommunikationskanal einen zweiten kryptographischen Schlüssel von dem zweiten Kommunikationsendpunkt empfängt,- die beiden kryptographischen Schlüssel in einem Schlüsselspeicher speichert,- über einen öffentlichen Kommunikationskanal eine am ersten Kommunikationsendpunkt erzeugte Zufallszahl (RND) empfängt, die unter Verwendung des ersten kryptographischen Schlüssels verschlüsselt ist,- die Zufallszahl (RND) unter Verwendung des gespeicherten ersten kryptographischen Schlüssels entschlüsselt und- die entschlüsselte Zufallszahl (RND) unter Verwendung des im Schlüsselspeicher gespeicherten zweiten kryptographischen Schlüssels verschlüsselt und über einen öffentlichen Kommunikationskanal an den zweiten Kommunikationsendpunkt sendet, um dem zweiten Kommunikationsendpunkt die Rekonstruktion der Zufallszahl (RND) unter Verwendung des ihm bekannten zweiten kryptographischen Schlüssels zu ermöglichen, sodass dem ersten und dem zweiten Kommunikationsendpunkt eine gemeinsame Zufallszahl (RND) als kryptographischer Schlüssel zur symmetrischen Verschlüsselung von Nutzdaten vorliegt.

An LLM-based method for calculating lead scores and generating product recommendations for a user of a troubleshooting chatbot, comprising providing an orchestrator module that is adapted to wrap the chatbot for receiving user prompts from the user; in response to the user prompts, conducting a troubleshooting conversation with the chatbot user; inferring lead scores for the user; generating a solution to each difficulty raised by the user during the troubleshooting conversation; providing a recommender system being in data communication with the orchestrator module; sending the generated solution and the history of the troubleshooting conversation to the recommender system; analyzing the solution, history and lead scores and providing a recommendation that corresponds to the user, to the orchestrator module; if the lead scores of the user are higher than a predetermined threshold, presenting the solution, augmented with the recommendation to the user, by the orchestrator module .

Verfahren zum Austausch eines kryptografischen Schlüssels zwischen einem Sender und einem Empfänger unter Verwendung eines Neutrino-basierten Kommunikationskanals, umfassend die Schritte:Senderseitige Erzeugung eines Neutrino-Strahls durch:- Beschleunigen von Protonen in einem Protonenstrahl,- Auslenkung des Protonenstrahls auf ein Target zur Erzeugung von Neutrinos durch den Zerfall kurzlebiger Teilchen;Senderseitige Generierung einer Folge von Zufallsbits, die den kryptografischen Schlüssel repräsentiert, und Kodierung der Zufallsbits durch:- Steuerung der Auslenkung des Protonenstrahls mittels eines steuerbaren Ablenksystems, um entsprechend der Zufallsbits den Protonenstrahl entweder auf das Target oder auf einen Absorber zu lenken, wodurch die Zufallsbits als Neutrino-Pulse kodiert werden;Übertragung der Neutrino-Pulse vom Sender zum Empfänger;Synchronisierung von Sender und Empfänger mittels einer Zeitsynchronisationseinheit, die die Taktung der erzeugten Neutrino-Pulse mit Zeitfenstern des Empfängersystems synchronisiert;Empfang der Neutrino-Pulse durch einen Neutrino-Detektor des Empfängers, wobei:- Zerfallsprodukte, insbesondere Lichtsignale, die bei der Wechselwirkung der Neutrinos mit einem Detektormedium erzeugt werden, detektiert werden und- die detektierten Signale jeweils einem Schlüsselbit zugeordnet werden;Speicherung und Aneinanderreihung der empfangenen Schlüsselbits zur Erzeugung des kryptografischen Schlüssels, der in einem Schlüsselspeichermodul des Empfängers gespeichert wird.

An LLM-based method for profiling chatbot users' technical proficiency and performing adaptation in the chatbot response, comprising the step of receiving encountered problem by the troubleshooting chatbot via a user prompt; using a profile inference LLM to obtain inferred profiles of chatbot users' technical proficiency regarding cybersecurity troubleshooting, by analyzing current prompt as entered by the user, from a data storage; the most recently updated user profile, which encapsulates the past user data; troubleshooting-oriented cybersecurity taxonomy consisting of proficiency domains and subdomains; a collection of inferred profiles of all users; hardware, software or networking-related data collected from the user's device; generating a vector of profile scores that quantify troubleshooting-oriented cybersecurity proficiency subdomains; updating the user's inferred profile by sending the inferred profile to the collection; replacing the older profile of the user by an updated profile; sending the inferred profile to a response adaptation LLM, along with the response generated by the chatbot; adapting the technical instructions, produced by the chatbot to the inferred user's profile; sending the profile-adapted response to the user, to follow the chatbot's instructions.

Verfahren zum Austausch einer Nachricht zwischen einem Sender und einem Empfänger unter Verwendung eines Neutrino-basierten Kommunikationskanals, umfassend die Schritte:senderseitiges Kodieren der Nachricht in ein Codewort mittels deterministischer oder stochastischer Post-Shannon-Kodierung (PSK),senderseitige Erzeugung eines Neutrino-Strahls durch:- Beschleunigen von Protonen in einem Protonenstrahl,- Auslenkung des Protonenstrahls auf ein Target zur Erzeugung von Neutrinos durch den Zerfall kurzlebiger Teilchen;senderseitige Amplitudenmodulation des Neutrino-Strahls durch:- Steuerung der Auslenkung des Protonenstrahls mittels eines steuerbaren Ablenksystems, um entsprechend der Bits der PSK kodierten Nachricht den Protonenstrahl entweder auf das Target oder auf einen Absorber zu lenken, wodurch die PSK kodierte Nachricht als Neutrino-Pulse kodiert werden, wobei gilt:∘ das Ausbleiben eines Neutrino-Pulses in einem Zeitschlitz repräsentiert ein "0"-Bit und∘ das Aussenden eines Neutrino-Pulses in einem Zeitschlitz repräsentiert ein "1"-Bit oder umgekehrt,Übertragen der Neutrino-Pulse vom Sender zum Empfänger;Synchronisieren von Sender und Empfänger mittels einer Zeitsynchronisationseinheit, die die Taktung der erzeugten Neutrino-Pulse mit Zeitfenstern des Empfängersystems synchronisiert;Empfangen der Neutrino-Pulse durch einen Neutrino-Detektor des Empfängers, wobei:- Zerfallsprodukte, insbesondere Lichtsignale, die bei der Wechselwirkung der Neutrinos mit einem Detektormedium erzeugt werden, detektiert werden und- die detektierten Signale als Bitfolge gespeichert werden;Dekodieren der empfangenen Bitfolge, wobei ein Vergleich zwischen dem erwarteten und dem empfangenen Codewort durchgeführt wird, um eine Identifikation der Nachricht zu ermöglichen.

Examples of the present disclosure relate to methods, apparatuses, and computer programs for route control and for determining a route for a data packet to be transmitted in a communication network. The method (10) for route control and for determining a route for a data packet to be transmitted from a first node to a second node in a communication network comprises obtaining (11) a first network address for the first node and a second network address for the second node and obtaining (12) transmission requirements for the data packet. The method (10) further comprise determining (13) the route from the first node to the second node via a plurality of intermediate nodes based on the transmission requirements.

A method for operating a scheduler of an access point of a radio access network, RAN, wherein an access point of a radio access network forwards data packets transmitted by the distributed real-time application via a wireless connection provided by the access point and a scheduler of the access point assigns spectral resources to the wireless connection; a distributed real-time application, an access point for a radio access network, a radio access network and a computer program product.

The invention relates to a method for operating an optical protection element and/or for protecting an optical network, especially an optical distribution network as part of a telecommunications network, by means of the optical protection element,wherein the optical protection element is configured to protect the optical distribution network on a first side of the optical protection element, at least in part, from inappropriate input signals arriving from a second side, opposite the first side, of the optical protection element, wherein inappropriate input signals comprise optical signals having an optical input power exceeding a threshold value and/or optical signals outside of a predefined optical spectral range,wherein the optical protection element comprises an optical power detector on the second side of the optical protection element as well as a variable optical protector being configured to be switched between at least a first and a second mode of operation, the first mode of operation being a transmission mode of operation allowing the transmission of optical signals for the optical distribution network being operatively used, and the second mode of operation being an optical protection mode of operation,wherein, in order to operate the optical protection element and/or to protect the optical distribution network from inappropriate input signals, the method comprises the following steps:-- in a first step, and while the variable optical protector being in its first mode of operation, the optical power detector detects an inappropriate input signal,-- in a second step, the variable optical protector is switched to its second mode of operation,-- in a third step, the variable optical protector is triggered to be switched to its first mode of operation.

Provided is a user equipment, UE. The UE includes processing circuitry configured to gather data about at least one end-to-end, E2E, service and a procedure to verify availability of the E2E service via an access network. The processing circuitry is further configured to attach to a wireless network. The processing circuitry is further configured to execute the procedure to verify availability of the at least one E2E service via the attached wireless network as the access network.

Techniques for managing data traffic in a multipath communication system, comprising:• receiving traffic, by a classifying entity, having Low Latency, Low Loss, and Scalable Throughput, L4S, properties by:∘ monitoring Explicit Congestion Notification, ECN, signaling in the traffic stream, and/or∘ analyzing traffic patterns, service types, and/or quality of service, QoS, requirements;• classifying the detected L4S traffic and non-L4S traffic into separate queues by means of the classifying entity, in particular into a L4S-queue and a non-L4S-queue;• applying a traffic scheduling logic, by a priority scheduler entity, that prioritizes L4S traffic over non-L4S traffic according to a criteria, wherein the criteria determines which data amount of L4S traffic and/or non-L4S traffic is being passed through the priority scheduler entity;• wherein the classifying entity, and the priority scheduler entity are each associated with a multipath scheduler of a sender entity, in particular associated with a scheduler buffer of the sender entity.

The present disclosure provides secure communication in telecommunication systems by enabling efficient key management for Non-Access Stratum (NAS) security contexts and user plane (UP) flows. It provides a hierarchical key derivation framework where a further key such as a security anchor key, derived from a long-term key shared between the User Equipment (UE) and the Core Network (CN), is distributed to control plane (CP) and user plane (UP) entities. These entities may further derive encryption and integrity protection keys specific to their functions, ensuring robust and context-specific security. The UE, CP, and UP entities may maintain cryptographic state machines for synchronization and support dynamic management of keys for multiple simultaneous flows. The present disclosure may apply to modular and scalable network architectures, such as 5G and future 6G systems, enhancing security, flexibility, and interoperability across diverse network scenarios, including private, hybrid, and distributed networks.

A method for operating a fiber-optical line system, wherein a first transceiver of the fiber-optical line system transmits light signals via a fiber-optical line of the fiber-optical line system to a second transceiver of the fiber-optical line system, the first transceiver and the second transceiver respectively connected to opposite free ends of the fiber-optical line and the fiber-optical line comprising a plurality of separate optical cables and a plurality of in-line erbium-doted fiber amplifiers, EDFA, interconnecting the separate optical cables; an orchestration system for a fiber-optical line system, a fiber-optic transmission system and a computer program product.

A method and system for a communication between a first network element and a second network element in a communication system utilizing decentralized identifiers (DIDs), the method comprising:a) using, by the first network element, a DID comprising:i) a unique identifier uniquely associated with the first network element; andii) a stakeholder identifier associated with the first network element and/or a mobile virtual network operator, MVNO, identification associated with the first network element;b) transmitting, from the first network element to the second network element, a request message comprising the DID;c) receiving, at the second network element, the request message and extracting the stakeholder identifier and/or extracting the MVNO identification from the DID;d) evaluating, at the second network element, the stakeholder identifier based on a first criteria, in particular a first security criteria, and/or evaluating the MVNO identification based on a second criteria, in particular a second security criteria;e) determining, based on the evaluation, whether to accept or deny the request for establishing a communication; andf) establishing a communication, in particular a secure communication, between the first and second network elements if the request is accepted.