Cisco Technology, Inc.

Desmond Joseph O'Connor

Mark Grayson

Bart A Brinckman

Malcolm Muir Smith

Humberto Jose La Roche

Timothy Peter Stammers

Jerome Henry

John T Chapman

Simon Dyke

Systems, methods, and computer-readable media are disclosed for facilitating bi-directional edge proxy-to-edge proxy communications across an enterprise firewall in 5G service-based architecture. In one aspect, a method includes receiving a subscription request from a user device to operate on a visited private network; determining that the user device is associated with a home network; and establishing a communication protocol between a security edge protection proxy of the visited private network and a security edge protection proxy of the home network, wherein the communication protocol enables bi-directional exchange of roaming signals between the visited private network and the home network while user device is operating on the visited private network.

Bi-directional communication protocol for private networks

Presented herein are techniques associated with replicating an OpenRoaming™ policy federation in a Third Generation Partnership Project (3GPP) network environment. For example, techniques herein provide a roaming policy federation architecture for a 3GPP network environment. In one example a method is provided that may include encoding at least one multi-bit roaming policy for an identity provider and a plurality of bit-wise combinatorial permutations of the at least one multi-bit roaming policy within each of a plurality of multi-bit 3GPP broadcast identifiers, wherein the at least one multi-bit roaming policy includes bit-wise roaming policy information for the identity provider and configuring the multi-bit 3GPP broadcast identifiers for a mobile device associated with the identity provider, wherein the multi-bit 3GPP broadcast identifiers indicate that the mobile device is to connect to a visited radio access network associated with a local Internet Protocol (IP) access service or a home routed access service.

Providing a roaming policy federation in a third generation partnership project (3GPP) network environment

The present technology is directed to providing enhanced capacity for tenants in a neutral host network (NHN) via multi-connectivity such as dual connectivity or carrier aggregation. The present technology can identify, at a small cell gateway, signaling traffic passing from an access network to a respective core network of an NHN operating at mid-band frequencies and add an interface between the small cell gateway of the NHN and a base station of a tenant network operating at low-band frequencies to establish dual connectivity. Furthermore, the present technology can establish a radio resource control (RRC) connection in a primary cell residing in a macro network operating at low-band frequencies and add, at a fronthaul gateway, one or more secondary cells in a small cell network operating at mid-band frequencies to enable carrier aggregation of the one or more secondary cells with the primary cell the small cell network.

Providing enhanced capacity for tenants in a neutral host network via multi-connectivity

In one embodiment, a method for providing access to wireless networks may include receiving, by a wireless network access provider from a user device, a request to access a wireless network. The method may include obtaining data representing a policy applicable to the access request, sending the access request, augmented with the policy, to an identity provider associated with the user and having no pre-existing relationship with the access provider, and receiving, from the identity provider, an access request response indicating whether or not the policy is met. The method may include communicating, to the wireless device, an indication that the access request has been accepted, if the policy is met, or an indication that the access request has been rejected, if the policy is not met. The access provider and identity provider may be members of an identity and access federation that communicate over a dynamically established secure connection.

Dynamic policy-based on-boarding of devices in enterprise environments

Profile prioritization in a roaming consortium environment may be provided. First, a client device may initiate a network discovery with a network device. Next, the client device may receive in response to initiating the network discovery, a response. The response may comprise an organization identifier and a plurality of response access identifiers corresponding to the organization identifier. A one of the plurality of response access identifiers may be labeled as preferred. Then the client device may determine to access the network based on the organization identifier. The client device may then select, from a plurality of profiles, a profile for accessing the network. The selected profile may have a profile access identifier corresponding to the one of the plurality of response access identifiers labeled as preferred.

Profile prioritization in a roaming consortium environment

In accordance with various implementations, a method is performed at a gateway with one or more processors, non-transitory memory, and a data interface. The method includes: obtaining a request to instantiate a tunnel for data from a guest service provider (GSP) to a user device that traverses an operator network; determining whether the request satisfies tunneling criteria, where the tunneling criteria at least includes a first criterion associated with intrinsic information associated with the operator network and a second criterion associated with extrinsic information that characterizes network resources of the network operator based on a relationship between the operator network and the GSP; instantiating the tunnel in response to determining that the request satisfies the tunneling criteria, where instantiating the tunnel includes the gateway transmitting tunnel instructions to other nodes of the operator network; and routing the data through the tunnel to transmit the data to the user device.

Growing community of inventors

London, United Kingdom

Desmond Joseph O'Connor