T-Mobile Innovations LLC

Greg Schumacher

Marouane Balmakhtar

Serge M Manning

A system for compressing a blockchain. The system comprises a processor; a non-transitory memory; an inactive block evaluator function stored in the non-transitory memory that, when executed by the processor, traverses a first blockchain stored in the non-transitory memory to identify inactive blocks on the first blockchain; a threshold evaluator function stored in the non-transitory memory that, when executed by the processor, evaluates whether a percentage of inactive blocks on the first blockchain exceeds a predefined threshold; and a compression function stored in the non-transitory memory that, when triggered by the threshold evaluator and executed by the processor, builds a second blockchain that comprises blocks built to contain a data content of each of the active blocks in the first blockchain and none of a data content of the inactive blocks in the first blockchain.

System and method of blockchain compression

A method of testing a communication system implementing a zero trust architecture. The method comprises sending a request by a test equipment platform to access a microsegment to a policy enforcement point (PEP); sending an authorization request by the PEP to a policy decision point (PDP); authorizing access of the test equipment platform to the microsegment by the PDP; sending authorization of access of the test equipment platform to the microsegment by the PDP to the PEP; establishing a secure tunnel by the PEP between the test equipment platform and the microsegment; sending a command to provide test data by the test equipment platform via the secure tunnel to a probe in the microsegment; analyzing the test data by the test equipment platform; and producing a test result by the test equipment platform based on analyzing the test data.

Testing network communication within a zero trust security model

A method of user equipment (UE) implemented network slice security protection is disclosed. The method comprises the UE receiving a request to initialize an application, querying a UE Route Selection Policy (URSP) stored on the UE, and receiving traffic descriptors and security descriptors in response to the querying. The traffic descriptors identify a network slice for the application. The security descriptors comprise a security flag and a virtualization container ID. The method also comprises the UE initiating the application within a virtualization container corresponding to the virtualization container ID based on the security flag indicating that the network slice is secure and binding traffic for the application in the virtualization container to a PDU session based on the traffic descriptors. The method further comprises communicating, by the application executing within the virtualization container, with a core network over the PDU session via the network slice bound to the virtualization container.

5G network slice device security protection

A method comprises generating, by a test application in a test system of the zero trust network, a test packet comprising a unique token identifying the penetration test based on a test log, wherein the test log indicates that the penetration test is to be performed on a communication between a source microsegment and a target microsegment, transmitting, by the test application, the test packet to a policy enforcement point in the target microsegment, wherein a result log stores data, in association with the unique token, regarding at least one of a reception or processing of the test packet by the policy enforcement point, and comparing, by a log application in the test system, the test log and the result log to determine that the test packet has impermissibly passed through the policy enforcement point or been processed by the policy enforcement point.

Growing community of inventors

Holliston, MA, United States of America

Greg Schumacher