Identifiers in a communication system

Abstract

An identifier containing at least one encrypted part is received at a first network entity. A second network entity may then be determined based on the identifier. A request for assistance in decryption of the identifier from the second network entity may be sent from the first entity to the second network entity. The second network entity may then assist the first networks entity in an appropriate manner.

1 . A method comprising: 
 receiving an identifier containing at least one encrypted part at a first network entity;    determining a second network entity based on the identifier; and    requesting for assistance in decryption of the identifier from the second network entity.    
     
     
         2 . The method as claimed in  claim 1 , further comprising, subsequent to requesting for assistance, receiving the identifier in a decrypted format at the first network entity from the second network entity.  
     
     
         3 . The method as claimed in  claim 1 , further comprising receiving information from the second network entity for use in decryption of the identifier and decrypting of the identifier based on said information.  
     
     
         4 . The method as claimed in  claim 1 , wherein the receiving comprises receiving the identifier at a mobility management entity of a visited network.  
     
     
         5 . The method as claimed in  claim 1 , wherein the requesting comprises requesting for decryption of the identifier from a mobility management entity of the home network of the identifier.  
     
     
         6 . The method as claimed in  claim 1 , wherein the determining comprises determining a mobility management entity of the home network of the identifier based on a network specific part of the identifier.  
     
     
         7 . The method as claimed in  claim 1 , comprising receiving a public key and secret key pair along with a key identifier from the second network entity.  
     
     
         8 . The method as claimed in  claim 1 , wherein the receiving of an identifier comprises receiving an international mobile subscriber identity from a visiting user equipment.  
     
     
         9 . A method comprising: 
 receiving a request for assistance in decryption of an identifier containing at least one encrypted part;    decrypting the identifier; and    sending the decrypted identifier to the requester.    
     
     
         10 . The method as claimed in  claim 9 , wherein the receiving comprises receiving at a mobility management entity of a home network the identifier from a mobility management entity of a visited network.  
     
     
         11 . The method as claimed in  claim 9 , comprising sending a public key and secret key pair along with a key identifier.  
     
     
         12 . The method as claimed in  claim 9 , wherein the receiving of an identifier comprises receiving an international mobile subscriber identity from a visited network.  
     
     
         13 . An apparatus configured to: 
 receive an identifier containing at least one encrypted part;    determine a network entity based on the identifier; and    signal to the network entity a request for assistance in decryption of the identifier.    
     
     
         14 . The apparatus as claimed in  claim 13 , the apparatus being configured to receive the identifier in a decrypted format from the second network entity.  
     
     
         15 . The apparatus claimed in  claim 13 , the apparatus being configured to decrypt the identifier based on information from the second network entity.  
     
     
         16 . The apparatus as claimed in  claim 13 , comprising a mobility management entity of a visited network.  
     
     
         17 . The apparatus as claimed in  claim 13 , the apparatus being configured to determine a mobility management entity of the home network of the identifier based on a network specific part of the identifier.  
     
     
         18 . The apparatus as claimed in  claim 13 , the apparatus being configured to encrypt the identifier based on a key pair identifier of a public key and secret key pair.  
     
     
         19 . The apparatus as claimed in  claim 13 , the apparatus being configured to process an international mobile subscriber identity from visiting user equipment.  
     
     
         20 . An apparatus configured to: 
 receive a request for assistance in decryption of an identifier containing at least one encrypted part;    decrypt the identifier; and    send the decrypted identifier to the requestor.    
     
     
         21 . The apparatus as claimed in  claim 20 , comprising a mobility management entity of a home network of a user equipment associated with the identifier.  
     
     
         22 . The apparatus as claimed in  claim 20 , configured to send a public key and secret key pair along with a key identifier to the requester.  
     
     
         23 . A system comprising: 
 a first network entity provided in a first network, and    a second network entity provided in a second network    wherein the first network entity is configured to receive an identifier containing at least one encrypted part and to receive from the second network entity assistance in decryption of the identifier, and the second network entity is configured to send said assistance to the first network entity.    
     
     
         24 . The system as claimed in  claim 23 , wherein the second network entity is configured to decrypt the identifier in response to the request by the first network entity.  
     
     
         25 . The system as claimed in  claim 23 , wherein the second network entity is configured to send information for use in decryption of the identifier in response to the request by the first network entity  
     
     
         26 . A method comprising 
 receiving a request for assistance in decryption of an identifier containing at least one encrypted part,    decrypting the identifier, and    sending the decrypted identifier to the requester.    
     
     
         27 . The method as claimed in  claim 26 , comprising receiving the identifier at a mobility management entity of a home network.  
     
     
         28 . A communication device configured to send a message containing at least partially encrypted identifier and an identifier of a key for decryption of the at least partially encrypted identifier.  
     
     
         29 . A computer program embodied on a computer-readable medium, the computer program configured to provide a method comprising: 
 receiving an identifier containing at least one encrypted part at a first network entity;    determining a second network entity based on the identifier; and    requesting for assistance in decryption of the identifier from the second network entity.    
     
     
         30 . A computer program embodied on a computer-readable medium, the computer program configured to provide a method comprising: 
 receiving a request for assistance in decryption of an identifier containing at least one encrypted part,    decrypting the identifier, and    sending the decrypted identifier to the requestor.