AT&T Intellectual Property I, LP

At&t Mobility II LLC

Jayaraman Ramachandran

Cristina Serban

David Gross

Donald Levy

Roger Piqueras Jover

Joshua Lackey

Daniel Solero

Jason Godfrey

Neerav Mehta

Craig Harvey

Rebecca Finnin

Thusitha Jayawardena

Daniel G Sheleheda

Christopher Van Wart

Steven M Adams

John Liefert

Deon Ogle

Shawn M Hiemstra

Robert K Sharp

Justin Kenneth Kirsten

Donald E Levy

Maureen Langevin

Christine Murphy

Toby Avino

William O′Hern

A method to create a serial wire speed firewall that can monitor and enforce security policy on a CAN buy network and prevent cyber-attacks.

CANBUS cybersecurity firewall

Aspects of the subject disclosure may include, for example, monitoring network messages at a network edge of a service provider network, wherein the network edge is coupled via a network edge device to a local area network comprising a plurality of network-addressable (IoT) devices, wherein the network edge device is in communication with a service provider network via a transmission medium in which electromagnetic waves comprising the network messages propagate along the transmission medium without requiring an electrical return path. A network-addressable device of the plurality of network-addressable devices is detected to obtain a detected network-addressable device according to the monitoring of the network messages. Information obtained from the detected network-addressable device is evaluated to obtain an evaluation result and a listing of the plurality of network-addressable devices is updated based on the evaluation results. Other embodiments are disclosed.

Network security management based on collection and cataloging of network-accessible device information

Concepts and technologies are disclosed herein for tag-based security policy creation in a distributed computing environment. A security management module can receive an inventory event that relates to instantiation of a service. The security management module can identify the service that was instantiated and obtain a tag set that relates to the service. The tag set can include security tags that include a string that identifies a communications link associated with the entities included in the service that was instantiated. The security management module can identify policy rules associated with the security tags. The policy rules can define security for the service that was instantiated. The security management module can compute a security policy for the service and can provide the security policy to the computing environment for implementation.

Tag-based security policy creation in a distributed computing environment

Aspects of the subject disclosure may include, for example, a network device that accesses internet protocol addresses associated with a group of end point devices where the network device is a closest network device to the group of end point devices, and transmitting data to another network device responsive to a determination that an internet protocol address associated with the data from an end point device is one of the internet protocol addresses associated with the group of end point devices. Other embodiments are disclosed.

Method and apparatus for authentication and identity management of communicating devices

Aspects of the subject disclosure may include, a communication system that facilitates generating, by a waveguide system of the communication system based on a first wireless signal, first electromagnetic waves that convey sensor data, where the first electromagnetic waves propagate along a transmission medium to a server, where the transmission medium comprises an external surface, and where the first electromagnetic waves propagate along the transmission medium without requiring an electrical return path; and receiving, by the waveguide system, second electromagnetic waves that convey instruction information, where the second electromagnetic waves propagate along the transmission medium to the waveguide system, where the second electromagnetic waves propagate along the transmission medium without requiring the electrical return path, and wherein the instruction information is generated by the server according to the sensor data. Other embodiments are disclosed.

Method and apparatus for electromagnetic wave communications associated with vehicular traffic

Aspects of the subject disclosure may include, for example, a method including obtaining a first set of votes from devices that are registered and enabled by a registration system to form a first network communicating with a processing system. The first set of votes relate to performance of a target device and indicate conformance to performance criteria for the first network. The processing system receives a reputation score for the target device from the registration system, and receives a second set of votes regarding target device performance from voting systems over a second network comprising a peer network including the processing system and the voting systems. The first and second sets of votes and the reputation score are aggregated to generate an updated reputation score for the target device. The registration system disables the target device when the reputation score falls below a threshold. Other embodiments are disclosed.

Method and procedure for generating reputation scores for IoT devices based on distributed analysis

Aspects of the subject disclosure may include, for example, determining whether communications are encrypted, determining a communication type for the communications according to sensitivity criteria, encrypting the communications according to the communication type to generate encrypted communications, and transmitting to a second network device the encrypted communications. Other embodiments are disclosed.

Method and apparatus for encryption of communications over a network

Aspects of the subject disclosure may include, a communication system that facilitates monitoring communications associated with a second particular device, where a group of devices operate in a premises, where a first subset of the group of devices communicate directly with a monitoring device located at the premises via a local area network of the premises, where a second subset of the group of devices do not communicate directly with the monitoring device, where the first subset of the group of devices includes the first particular device, and where the second subset of the group of devices includes the second particular device. The communications can be analyzed to detect an anomaly associated with the second particular device. A plurality of messages can be transmitted, via the local area network, to the monitoring device over a time period indicating the anomaly. Other embodiments are disclosed.

Method and apparatus for managing a local area network

Aspects of the subject disclosure may include, for example, determining a first access point name according to a first service set identifier associated with a first wireless message transmitted according to a first wireless protocol from a first device, where the first access point name is included in a set of access point names of a cellular communication system, and transmitting a second wireless message according to a second wireless protocol to a communication node of a guided wave communication system, where the guided wave communication system is communicatively coupled to the cellular communication system, where the second wireless message is associated with the first wireless message and includes the first access point name, and where the cellular communication system determines a first routing of first communications associated with the first device according to first access point name. Other embodiments are disclosed.

Method and apparatus for managing communication routings in a communication system

Aspects of the subject disclosure may include, for example, receiving electromagnetic waves at a physical interface of a transmission medium that propagate along the transmission medium without requiring an electrical return path, wherein the electromagnetic waves are guided by the transmission medium, and wherein the electromagnetic waves have a non-optical frequency range. A determination is made as to whether the electromagnetic waves are being received from a second network device according to a comparison of a fingerprint of the electromagnetic waves and an expected fingerprint of expected parameters for the electromagnetic waves transmitted by the second network device. Other embodiments are disclosed.

Signal fingerprinting for authentication of communicating devices

Aspects of the subject disclosure may include, for example, a first network device receiving from a second network device a software, the first network device adjusting operations at the first network device according to the software, the first network device providing a digital signature to the software to generate an adjusted software where the digital signature indicates that the first network device has received the software, and the first network device transmitting, to a third network device, the adjusted software. Other embodiments are disclosed.

Method and apparatus for distributing software

Aspects of the subject disclosure may include, for example, receiving data from an external network device positioned outside of a neighborhood network, wherein the first waveguide system is a first network node of the neighborhood network. Electromagnetic waves are sent to a second waveguide system via a transmission medium, wherein the electromagnetic waves are guided by the transmission medium without utilizing an electrical return path, wherein the electromagnetic waves convey the data. The second waveguide system is determined according to a neighborhood routing scheme that limits delivery of the data to a group of recipient devices within a service area of the neighborhood network and the second waveguide system is a second network node of the neighborhood network. Other embodiments are disclosed.

Method and apparatus for communications management in a neighborhood network

Aspects of the subject disclosure may include, for example, generating first traffic for transmitting along a network path toward a recipient device, determining a schedule for transmitting the first traffic, and facilitating transmission of the first traffic along the network path using a first waveguide system. The first waveguide system has a dielectric coupler, and operates by communicating electromagnetic waves via the dielectric coupler at a physical interface of a transmission medium that propagate without utilizing an electrical return path. The electromagnetic waves are guided by the transmission medium, wherein the electromagnetic waves at least partially surround an outer surface of the transmission medium, and wherein the electromagnetic waves have a non-optical frequency range. Other embodiments are disclosed.

Growing community of inventors

Plainsboro, NJ, United States of America

Jayaraman Ramachandran