Pasi Eronen: Publications

This material is presented to ensure timely dissemination of scholarly and technical work. Copyright and all rights therein are retained by authors or by other copyright holders. All persons copying this information are expected to adhere to the terms and constraints invoked by each author's copyright. In most cases, these works may not be reposted without the explicit permission of the copyright holder.

Conference papers and book chapters

• Henry Haverinen, Jonne Siren, and Pasi Eronen. Energy Consumption of Always-On Applications in WCDMA Networks. In Proceedings of the 65th Semi-Annual IEEE Vehicular Technology Conference (VTC 2007 Spring), Dublin, Ireland, April 2007.
• Teemu Koponen, Pasi Eronen, and Mikko Särelä. Resilient Connections for SSH and TLS. In Proceedings of the 2006 USENIX Annual Technical Conference, Boston, Massachusetts, May-June 2006.
• Jari Arkko, Pasi Eronen, Hannes Tschofenig, Seppo Heikkinen, and Anand Prasad. Quick NAP — Secure and Efficient Network Access Protocol. In Proceedings of the 6th International Workshop on Applications and Services in Wireless Networks (ASWN 2006), pages 163-170. Berlin, Germany, May 2006.
• Juha Pärssinen, Teemu Koponen, and Pasi Eronen. Pattern Language for Service Discovery. In Dragos Manolescu, Markus Voelter, and James Noble: Pattern Languages of Program Design 5, pages 189-209. Addison-Wesley, April 2006.
• Sandro Grech and Pasi Eronen. Implications of Unlicensed Mobile Access (UMA) for GSM security. In Proceedings of IEEE/Create-Net SecureComm 2005, The First International Conference on Security and Privacy for Emerging Areas in Communication Networks, pages 3-12. Athens, Greece, September 2005.
• Juha Pärssinen, Teemu Koponen, and Pasi Eronen. Pattern Language for Service Discovery. In Proceedings of the 9th European Conference on Pattern Languages of Programs (EuroPLoP '04), pages 645-660. Irsee, Germany, July 2004.
• Pasi Eronen and Jari Arkko. Authentication components: Engineering experiences and guidelines. In Security Protocols, 12th International Workshop, Lecture Notes in Computer Science vol. 3957 (Springer), Cambridge, UK, April 2004.
• Pasi Eronen and Jukka Zitting. An expert system for analyzing firewall rules. In Proceedings of the 6th Nordic Workshop on Secure IT Systems (NordSec 2001), pages 100-107. Copenhagen, Denmark, November 2001. Technical Report IMM-TR-2001-14, Technical University of Denmark.
• Pasi Eronen and Pekka Nikander. Decentralized Jini security. In Proceedings of the Network and Distributed System Security Symposium (NDSS 2001), pages 161-172. San Diego, California, February 2001. Internet Society.
• Pasi Eronen, Christian Gehrmann, and Pekka Nikander. Securing ad hoc Jini services. In Proceedings of the 5th Nordic Workshop on Secure IT Systems (NordSec 2000), pages 169-177. Reykjavik, Iceland, October 2000. Reykjavik University.
• Pasi Eronen, Johannes Lehtinen, Jukka Zitting, and Pekka Nikander. Extending Jini with Decentralized Trust Management. In Short Paper Proceedings of the 3rd IEEE Conference on Open Architectures and Network Programming (OPENARCH 2000), pages 25-29. Tel Aviv, Israel, March 2000.

IETF

• Jari Arkko, Vesa Lehtovirta, Vesa Torvinen, and Pasi Eronen. Improved Extensible Authentication Protocol Method for 3GPP Mobile Network Authentication and Key Agreement (EAP-AKA'). RFC 9048, October 2021.
• Charlie Kaufman, Paul Hoffman, Yoav Nir, Pasi Eronen, and Tero Kivinen. Internet Key Exchange Protocol Version 2 (IKEv2). RFC 7296, October 2014.
• Pasi Eronen, Hannes Tschofenig, and Yaron Sheffer. An Extension for EAP-Only Authentication in IKEv2. RFC 5998, September 2010.
• Charlie Kaufman, Paul Hoffman, Yoav Nir, and Pasi Eronen. Internet Key Exchange Protocol Version 2 (IKEv2). RFC 5996, September 2010.
• Hugo Krawczyk and Pasi Eronen. HMAC-based Extract-and-Expand Key Derivation Function (HKDF). RFC 5869, May 2010.
• Pasi Eronen, Julien Laganier, and Cheryl Madson. IPv6 Configuration in Internet Key Exchange Protocol Version 2 (IKEv2). RFC 5739, February 2010.
• Pasi Eronen and David Harrington. Enterprise Number for Documentation Use. RFC 5612, August 2009.
• Jari Arkko, Vesa Lehtovirta, and Pasi Eronen. Improved Extensible Authentication Protocol Method for 3rd Generation Authentication and Key Agreement (EAP-AKA'). RFC 5448, May 2009.
• Pasi Eronen. DES and IDEA Cipher Suites for Transport Layer Security (TLS). RFC 5469, February 2009.
• Bernard Aboba, Dan Simon, and Pasi Eronen. Extensible Authentication Protocol (EAP) Key Management Framework. RFC 5247, August 2008.
• Vijay Devarapalli and Pasi Eronen. Secure Connectivity and Mobility using Mobile IPv4 and IKEv2 Mobility and Multihoming (MOBIKE). RFC 5266, June 2008.
• Joseph Salowey, Hao Zhou, Pasi Eronen, and Hannes Tschofenig. Transport Layer Security (TLS) Session Resumption without Server-Side State. RFC 5077, January 2008.
• Pasi Eronen and Jouni Korhonen. Multiple Authentication Exchanges in the Internet Key Exchange (IKEv2) Protocol. RFC 4739, November 2006.
• Pasi Eronen and Paul Hoffman. IKEv2 Clarifications and Implementation Guidelines. RFC 4718, October 2006.
• Pasi Eronen. IKEv2 Mobility and Multihoming Protocol (MOBIKE). RFC 4555, June 2006.
• Joseph Salowey, Hao Zhou, Pasi Eronen, and Hannes Tschofenig. Transport Layer Security (TLS) Session Resumption without Server-Side State. RFC 4507, May 2006.
• Farid Adrangi, Victor Lortz, Farooq Bari, and Pasi Eronen. Identity Selection Hints for the Extensible Authentication Protocol (EAP). RFC 4284, January 2006.
• Bernard Aboba, Mark Beadles, Jari Arkko, and Pasi Eronen. The Network Access Identifier. RFC 4282, December 2005.
• Pasi Eronen and Hannes Tschofenig. Pre-Shared Key Ciphersuites for Transport Layer Security (TLS). RFC 4279, December 2005.
• John Vollbrecht, Pasi Eronen, Nick Petroni, and Yoshihiro Ohba. State Machines for Extensible Authentication Protocol (EAP) Peer and Authenticator. [TXT] RFC 4137, August 2005.
• Pasi Eronen, Tom Hiller, and Glen Zorn. Diameter Extensible Authentication Protocol (EAP) Application. RFC 4072, August 2005.

Patents

• Gabor Bajko, Teemu Savolainen, Pasi Eronen, and Lars Eggert. Methods, apparatuses, and computer program products for facilitating randomized port allocation. US Patent 9,807,112, filed December 2008, granted October 2017.
• Hannes Tschofenig and Pasi Eronen. Performing interactive connectivity checks in a mobility environment. US Patent 8,867,553, filed June 2007, granted October 2014.
• Dajiang Zhang, Changhong Li, and Pasi Eronen. Support of UICC-less calls. US Patent 8,526,408, filed February 2008, granted September 2013.
• Henry Haverinen and Pasi Eronen. Proxy smart card applications. US Patent 8,095,179, filed October 2004, granted January 2012.
• Pasi Eronen, Nadarajah Asokan, and Shreekanth Lakshmeshwar. Method for distributing certificates in a communication system. US Patent 7,984,291, filed February 2006, granted July 2011.
• Hannes Tschofenig and Pasi Eronen. Reducing keep-alive messages in connection with element traversal by relay mechanism. European Patent EP2003841, filed June 2007, granted August 2010.
• Henry Haverinen and Pasi Eronen. Protection against denial-of-service attacks. US Patent 7,617,524, filed October 2005?, granted November 2009.
• Pasi Eronen, Lauri Tarkkala, and Henry Haverinen. Methods, device and computer program product for maintaining mapping relationship. European Patent EP1798890, filed January 2005?, granted March 2009.
• Pasi Eronen, Henry Haverinen, and Kaisa Nyberg. Replay prevention mechanism for EAP/SIM authentication. US Patent 7,418,595, filed January 2004, granted August 2008.
• Hannu Hietalahti and Pasi Eronen. Method and apparatus for indicating service set identifiers to probe for. US Patent 7,313,111, filed November 2004, granted December 2007. Also Korean Patent 731642, granted June 2007.
• Pasi Eronen. Subscriber authentication for unlicensed mobile access signaling. US Patent 7,200,383, filed April 2004, granted April 2007.

Patent applications

• Henry Haverinen, Sandro Grech, and Pasi Eronen. Adaptive IPsec processing in mobile-enhanced virtual private networks. US Patent Application 20070006295, filed June 2006.
• Henry Haverinen and Pasi Eronen. Selection of wireless local area network (WLAN) with a split WLAN user equipment. US Patent Application 20050272466, filed May 2005.
• Henry Haverinen, Heikki Riittinen, and Pasi Eronen. IP mobility in mobile telecommunications system. US Patent Application 20050195780, filed February 2005.
• Pasi Eronen. Setting up a short-range wireless data transmission connection between devices. US Patent Application 20050273609, filed June 2004.
• Seamus Moloney, Jaakko Teinila, Nadarajah Asokan, and Pasi Eronen. Linking security association to entries in a contact directory of a wireless device. US Patent Application 20050266798, filed May 2004.

Others

• Pasi Eronen. TCP Wake-Up: Reducing Keep-Alive Traffic in Mobile IPv4 and IPsec NAT Traversal. Technical report NRC-TR-2008-002, Nokia Research Center, January 2008.
• Seppo Heikkinen, Mark Priestley, Jari Arkko, Pasi Eronen, and Hannes Tschofenig. Securing Network Attachment and Compensation. 15th Wireless World Research Forum (WWRF) meeting, Paris, France, December 2005.
• Hannes Tschofenig, Vesa Torvinen, and Pasi Eronen. Advanced HIP-based Firewall Traversal. Position paper in Workshop on HIP and Related Architectures, Washington D.C., November 2004.
• Pasi Eronen and Jari Arkko. Role of authorization in wireless network security. Presentation in DIMACS Workshop on Mobile and Wireless Security, Piscataway, New Jersey, November 2004.
• Jari Arkko, Pasi Eronen, Pekka Nikander, and Vesa Torvinen. Secure and Efficient Network Access. Presentation in DIMACS Workshop on Mobile and Wireless Security, Piscataway, New Jersey, November 2004.
• Pasi Eronen, Teemu Koponen, and Juha Pärssinen. Service Discovery in Future Mobile Terminals: A Holistic View. Paper presented in Helsinki University of Technology's Research Seminar on Telecommunications Software course (T-110.557, Fall 2003), December 2003.
• Pasi Eronen. Security in the Jini Networking Technology: A Decentralized Trust Management Approach. Master's thesis, Helsinki University of Technology, March 2001.
• Pasi Eronen and Jonna Särs. Applying decentralized trust management to DNS dynamic updates. Paper presented in the NordU/USENIX 2001 conference, Stockholm, Sweden, February 2001.
• Pasi Eronen. Denial of service in public key protocols. Paper presented in Helsinki University of Technology's Seminar on Network Security course (Tik-110.501, Fall 2000), December 2000.