Sprint Communications Comapny L.p.

T-mobile Innovations LLC

Carl Joseph Persson

Lyle W Paczkowski

Matthew Carl Schlesener

William Michael Parsel

Thomas Henry Wilson

Robin Dale Katzer

Arun Rajagopal

Michael Arthur Gailloux

Marouane Balmakhtar

Sei Yen Ng

Serge J L Bushman

Ronald R Marquardt

Jeremy Richard Breau

Eric Eugene Miller

Jason Delker

M Jeffrey Stone

Deborah L Gilbert

Trevor Daniel Shipley

Devon L Biere

Stephen James Bye

Deborah L Miller

Lyle Thomas Bertz

John Michael Everson

Don Gunasekara

Brian Douglas Mauer

Cesar Perez

Jason Kent Whitney

Wing K Lee

James Walter Norris

Galip Murat Karabulut

Woojae Lee

Sarah A Persson

Ken W Heitland

A method of electronic communication via a virtual network function (NFV) implementation of a core network. The method comprises receiving a hypertext transfer protocol (HTTP) content request from a user equipment (UE), wherein the HTTP content request comprises an identification of a content source and determining by an orchestrator service that insufficient NFV processing capacity is available to perform the HTTP content request, where the orchestrator service is an application that executes on a first physical host. The method further comprises dynamically increasing the NFV processing capacity by the orchestrator service, performing the HTTP content request using the increased NFV processing capacity, and returning a HTTP content response to the UE, wherein the HTTP content response does not comprise identification of the content source.

Securing communications in a network function virtualization (NFV) core network

Systems and methods for a micro-service data gateway are provided. In some embodiments, the micro-service data gateway comprises at least a micro-service data reflector and a micro-service data synthesizer. The data reflector operates to serve cached micro-service data in response to UE micro-service data requests. The reflector receives requests for micro-service data available from at least one data source exposed by a network exposure function (NEF) of a network operator core, retrieves the micro-service data from a data cache comprising at least a subset of micro-service data available from the data source, and provides the micro-service data to a requestor of the micro-service data. The synthesizer operates to ensure that the cache of micro-service data available to the reflector is fresh and updated. The micro-service data gateway may be positioned near the UE at a network edge of the core network and/or in part implemented within the UE.

Systems and methods for a micro-service data gateway

A network interface controller (NIC). The NIC includes a first physical port, a second physical port, a non-transitory memory, a processor coupled to the first and second physical ports, and a data packet grooming application stored in the non-transitory memory. When executed by the processor, the application is configured to parse datagrams encapsulated within data link layer packets received by the first physical port, analyze the encapsulated datagrams based on a processing policy stored in the non-transitory memory, transmit some of the received data link layer packets via the second physical port to a server computer associated with the NIC, and transmit the remainder of the received data link layer packets via the first physical port to a second server computer.

Network interface controller (NIC) with trusted execution environment (TEE) that redirects packets based on a processing policy

A cloud computing system. The system comprises a network, a data store communicatively coupled to the network, a plurality of compute nodes, at least some of the compute nodes comprising a cloud computing framework agent coupled to an agent gate keeper, where the cloud computing framework agent communicates with the network via the agent gate keeper, an image management component coupled to an image management gate keeper, where the image management component manages images that execute in the compute instances on the compute nodes and communicates with the network via the image management gate keeper, and a security engine coupled to the network that receives a request to initiate an image on a compute instance, analyzes the image to determine an authentication metric, and when the authentication metric matches a validated authentication value, sends the image to the image management component for loading and instantiating in the compute instance.

Secure cloud computing framework

An electronic device. The electronic device comprises a memory comprising a confidential information region and a non-confidential information region, a processor, and an application stored in the memory. When executed by the processor, the application determines if a reboot has occurred after a most recent power-off boot, where a reboot takes place without removing power from the processor and memory and, in response to determining that the reboot occurred after the most recent power-off boot, prevents access of applications to the confidential information region in the memory.

Electronic device security through boot cycles

In a Software Defined Network (SDN), a source SDN switch in a source geographic area generates switch performance data. The source SDN switch detects when its switch performance reaches a switch performance threshold based on its switch performance data, and in response, the source SDN switch transfers source switch information. An SDN controller receives the source switch information and selects a target SDN switch in a target geographic area based on the switch performance threshold and the source geographic area. The SDN controller transfers the source switch information to the target SDN switch in the target geographic area. The target SDN switch generates switch performance data and detects when SDN performance reaches a network performance threshold based on its switch performance data and the source switch information. The target SDN transfers SDN performance information to the SDN controller.

Software defined network (SDN) information distribution across an SDN data-plane

A computer system that comprises a processor, a non-transitory memory, and a system application stored in the non-transitory memory. When executed by the processor, the application receives a request to create a software container, creates the container, generates a signature of the container, creates a container security token that comprises the signature and embeds the container security token in the container, and returns the container with the embedded container security token. The application receives a request to launch an application in the container, determines a confirmation signature of the container provided by the application launch request, compares the confirmation signature to the signature of the container security token in the container, determines that the confirmation signature and the signature of the container security token in the software container match, and responsive to determining the signatures match launches the application in the software container provided by the application launch request.

Secure software containers

A Software-Defined Network (SDN) distributes Proxy Correlation Index (PCI) control in an SDN data-plane. An SDN controller transfers SDN signaling that indicates a data-plane PCI configuration. An SDN data machine processes the SDN signaling and configures a PCI generator and a flow controller to implement the data-plane PCI configuration. The SDN data-plane machine processes user data flows per a Flow Description Table (FDT) and generates Key Performance Indicators (KPIs) for the user data flows. The PCI generator generates PCIs based on the KPIs and the data-plane PCI configuration. The flow controller updates the FDT based on the PCIs and the data-plane PCI configuration. The SDN data-plane machine processes the user data flows per the updated FDT.

Software defined network (SDN) proxy correlation index (PCI) data-plane control

A Software-Defined Network (SDN) distributes Proxy Correlation Index (PCI) information across an SDN data-plane. A central SDN controller receives inbound SDN signaling from a source SDN controller serving a source geographic area indicating a PCI threshold breach in the SDN data-plane in the source geographic area. The central SDN controller generates PCI information that characterizes the PCI threshold breach. The central SDN controller selects a target SDN controller in a target geographic area responsive to the PCI threshold breach. The central SDN controller transfers outbound SDN signaling having the PCI information for delivery to the target SDN controller in the target geographic area.

Software defined network (SDN) proxy correlation index (PCI) information distribution across an SDN data-plane

A cloud computing system. The system comprises a network, a data store communicatively coupled to the network, a plurality of compute nodes, at least some of the compute nodes comprising a cloud computing framework agent coupled to an agent gate keeper, where the cloud computing framework agent communicates with the network via the agent gate keeper, an image management component coupled to an image management gate keeper, where the image management component manages images that execute in the compute instances on the compute nodes and communicates with the network via the image management gate keeper, and a security engine coupled to the network that receives a request to initiate an image on a compute instance, analyzes the image to determine an authentication metric, and when the authentication metric matches a validated authentication value, sends the image to the image management component for loading and instantiating in the computer instance.

A Network Function Virtualization (NFV) data system controls virtual Probe (vProbe) deployment in an NFV Infrastructure (NFVI). An NFV Management and Orchestration (MANO) system receives Key Performance Indicators (KPIs) for the NFVI and processes the KPIs to generate NFV indices. The MANO system processes the NFV indices to trigger a vProbe deployment in the NFVI. Before vProbe deployment, the NFV MANO system compares the NFV indices that triggered the vProbe deployment to false-positive vProbe deployment criteria. The NFV MANO system blocks the vProbe deployment when the NFV indices that triggered the vProbe deployment correspond to the false-positive vProbe deployment criteria. The NFV MANO system initiates the vProbe deployment when the triggering NFV indices do not correspond to the false-positive vProbe deployment criteria. The NFVI may execute SDN applications and controllers that communicate over a virtual switch that hosts the vProbe.

False positive protection for Network Function Virtualization (NFV) virtual probe deployment

A Network Function Virtualization (NFV) Software Defined Network (SDN) performs a network task. An NFV management system processes Key Performance Indicators (KPIs) to identify the network task and to direct an NFV orchestration system to install a virtual Probe (vProbe) with filter criteria to collect additional KPIs for the network task. The NFV orchestration system directs an NFV Infrastructure (NFVI) to install the vProbe. The vProbe sends the filter criteria to a virtual Switch (vSW) in the NFVI, and the vSW applies the filter criteria to Virtual Network Function (VNF) traffic and transfers the filtered data to the vProbe. The vProbe processes the filtered data to generate the additional KPIs for the NFV management system. The NFV management system processes the additional KPIs to perform the network task.

Growing community of inventors

Olathe, KS, United States of America

Carl Joseph Persson