Netsia, Inc.

Argela Yazilim Ve Bilisim Teknolojileri San Ve Tic A.s.

Argela Technologies

Argela Yazilim Ve Bilism Teknolojileri San. Ve Tic. A.s.

Burak Gorkemli

Seyhan Civanlar

Beytullah Yigit

Burcu Yargicoglu

Erhan Lokman

Bulent Kaytaz

Arda Akman

Can Altay

Sinan Tatlicioglu

Gamze Abaka

Murat Parlakisik

Metin Balci

Oguz Oktay

Nazli Guney

Melih Karaman

Can Ozumuztoprak

Altug Simsek

Aziz Sever

Oguz Sunay

Uygar Ozen

Hanife Senol

Tulay Sazak

Can Ozpak

Esra Ozlem Sakar

Adnan Burak Gurdag

Ertan Onur

Gurkan Gur

Ismail Bayraktar

Mahir Gunyel

Onur Koyuncu

A Murat Tekalp

Aydin Ulas

The embodiments in this invention extend distributed unit (DU), central unit (CU) and control plane of F1 (F1-C) capabilities so that differentiated DRBs of F1-U are placed on differentiated transport network components of equivalent QoS. This is achieved by a transport-aware DU and CU that can map each F1-U DRB into appropriate OSI layer 2-4 headers and can, subsequently, store such mappings. The F1-C interface is extended to distribute the layer 2-4 headers acquired from the transport network controller to the DUs and CU. A new control interface TN-C is defined between transport network controller and CU/DU. Furthermore, a trivial mapping of those embodiments is applicable for the N3 interface as well, which solves the same problem on the backhaul transport network.

Apparatus and method for QoS aware GTP-U transport in mobile networks

Software Defined Networking concepts apply to access, fronthaul, backhaul and core networks of 5G mobile networks and beyond. Such network components currently have individual/segmented control planes and associated controllers to provide configurability, provisioning, and network slicing. This is because of technology disparity between these network components: access is wireless/cellular, backhaul and fronthaul are optical/fiber, and core is electrical/wire-line. A system/method is detailed that enables a coordinated and unified end-to-end slicing, wherein the coordination is provided in the system/method that (a) attaches to the respective controllers of these network components in real-time, (b) collects the connectivity topology of each network segment as the network evolves, (c) passes the slice-profile information (translating according to capabilities of that network segment to configure an end-to-end slice with a specified bandwidth requirement and service quality level), and (d) passes across a VLAN tag to be used across network segments to associate with the same slice.

Apparatus and method for joint profile-based slicing of mobile access and optical backhaul

A new control function is defined for the control plane of a 5G mobile network to enable the operator's mobile user, who is using a premium network slice, to access application services on the public Internet, by operator sign-on only when accessing the application on said slice. This unique single sign-on capability allows the user to bypass the service authentication after operator authenticates the mobile device by the user session establishment procedure. The new function registers a plurality of service applications, which sign-up for single sign-on capability. It also coordinates the mapping and storage of credentials of the user across the mobile operator's service and the service provider's application for each of said plurality of service applications, and transfers user credentials to the application so that the user's sign-in step is bypassed.

Single sign-on control function (SOF) for mobile networks

A method as implemented in a controller in a SDN: (a) receiving service function chain orders of packet flows comprising a service function chain; (b) receiving, in real-time, delay measurements from either one of the virtual network functions and/or one of the network switches; (c) determining a plurality of realizations of the service function chain orders of (a) in order to minimize a total delay; (d) choosing an optimal realization corresponding to a least delay; and (e) determining one or more flow rules for the one or more network switches, the determining based on the optimal realization in (d). A controller and an article of manufacture implementing such a method are also described.

Path determination method and system for delay-optimized service function chaining

A novel system and a new data communication method are invented in a software-defined (SDN) network to provide delivery of certain types of critical data flows with certain QoS and/or extra security requirements in a congested network. The method of invention allows such critical data not to traverse the data plane, as it normally would, but instead to go from the ingress switch directly to the egress switch, thereby always in two hops using the control channels. By shortcutting all other switches along the traditional data path computed by normal routing, it potentially provides guaranteed throughput, lower latency/jitter or higher level of security.

System, method and article of manufacture for using control plane for critical data communications in software-defined networks

Sensitive data is sent through insecure network regions across different software defined networks (SDNs) over an encrypted path without requiring encryption applications at the source or destination hosts. One or more special-purpose encryptors are strategically placed within each SDN, which can act as an encryptor or decryptor, of both the data packet content and the header. Using the controller and a special encryption service application, the encrypted IP packets are forwarded from an encryptor, closest to the source, towards a decryptor, closest to the destination, utilizing a tagging method. Each encryptor has a static and globally unique tag. Each controller advertises to other controllers its encryptor information: IP of the encryptor, the IP block of the users the encryptor is responsible for and the unique encryptor tag(s). Each forwarder along the flow path is instructed by its respective controller how to forward packets towards the destination according to the tag.

System and method for programmable network based encryption in software defined networks

A system and method that rely on a centralized and trusted control mechanism for a software-defined network (SDN) to dynamically assign routes between two end points, and to simultaneously change their real IP addresses to fake IP addresses to establish short-lived obfuscated communications paths with a goal of preserving anonymity. The SDN controller determines the short-lived routes from a feasible route-set and new fake IP addresses from a reserved address pool for the source and destination hosts. It provisions only the switches along the route with rules so that a switch can forward packets of the data flow to another switch without needing to know the actual IP addresses of the communicating endpoints, and hence, providing strict anonymity even when the switches are compromised.

Anonymous communications in software-defined networks via route hopping and IP address randomization

A novel (software defined network) SDN control plane is introduced having new system capabilities to activate and deactivate controllers in real-time upon automatic measurement of network control traffic and service requirements, and proper controller interactions with network switches as control plane topology changes. Also introduced is a control flow table, which defines the assignment of certain control flows (by originator, location, service type, etc.) to different controllers within the SDN.

System and method for control flow management in software defined networks

A method to check health of automatically discovered controllers comprises the steps of: (a) a first controller generating a first Controller-Advertisement message carrying the information required to identify and access the first controller when a new switch port becomes active; (b) the first controller sending the generated first Controller-Advertisement to a first switch having the newly activated port; (c) the first controller receiving at least a second Controller-Advertisement message from at least a second controller; (d) the first controller generating a third unsolicited Controller-Advertisement message with its access information to check health of the second controller; (e) the first controller receiving at least a fourth Controller-Advertisement message from the second controller indicating health information of the second controller, wherein the health information is stored in first controller's Controller Information Base (CIB).

Method to check health of automatically discovered controllers in software defined networks (SDNs)

A novel method and system is introduced leveraging the data collected by a network probe to enhance cellular network capabilities to detect a man in the middle attack without using any software on the 3G mobile terminal. The new capabilities compile and process the data of call records collected from SS7 and location update messages in real time to determine the active 3G subscribers and to tag cells as 2G within a 3G coverage area to instantly identify an unknown cell generated by a fake base station. The system also has a component to notify authorities or to terminate the call once the fraud is identified.

Statistical system and method for catching a man-in-the-middle attack in 3G networks

Controllers in a Software Defined Network (SDN) automatically discover and authenticate each other as part of the control plane operations, without any need for manual configuration of other controllers. The new capability of such controllers is based on Controller-Advertisement messages transferred between controllers in the same or different SDNs. In doing so, multiple controllers can be used for load sharing, improved reliability under failure of a controller by enabling seamless take over and recovery. Moreover, controllers can cooperate to enable end-to-end services to work across multiple SDNs. Controller-Advertisement messages are also used to check the health statuses of discovered controllers in the same or different SDNs.

Automatic discovery of multiple controllers in Software Defined Networks (SDNs)

Growing community of inventors

Istanbul, Turkey

Burak Gorkemli