T-Mobile USA, Inc.

Plutovr

T-Mobile Innovations LLC

Nokia Corporation

Jean-Luc Rene Bouthemy

Mark R Gibson

Jared Cheshier

Brian Douglas

Ahmad Arash Obaidi

Christopher Harvey Joul

Michael Kemery

Winston Wang

Adam Holt

Christopher S Park

Omar Hassan

Samir M Hodroj

Cristian Asandului

Ovidiu Cristian Serban

Ahmad O Alkabra

Khurram Ahmad Mirza

Ruskin Taylor Lhamon

Tuomo Sipila

Systems and methods for preventing a denial-of-service attack at a victim agent of a telecommunication network include a victim agent and a session management system communicatively coupled to the victim agent and an attacker agent. The session management system is to receive a call termination message during a session, determine whether the call termination message includes a first call termination message or a subsequent call termination message, determine that one or more call terminations are greater than or equal to a threshold, based on the one or more call terminations being greater than or equal to the threshold, determine an occurrence of a denial-of-service attack at the victim agent, and based on the occurrence of the denial-of-service attack, forward one or more calls associated with the victim agent during a period of time.

Silent voice over IP denial of service—repetitive call setup and hang up from an attacker

A network provider implements network slicing. Each network slice instance is configured to provide a configured set of services that are associated with controlled access to a set of user devices. An access profile for a first user device is identified and analyzed. In response to determining that the access profile matches security capabilities of a configured set of services for one of the instantiated network instances, the first user device is enabled to securely access the matching instantiated network instance.

Security for network slicing in a communication system

Systems and methods for detecting and preventing a denial-of-service attack at one or more victim agents of a telecommunication network include one or more session management systems communicatively coupled to one or more attacker agents. The one or more session management systems to receive a call initiation message during a session, provide a provisional response during the session, activate a connection timer, determine whether a provisional acknowledgement message is received within a pre-determined period associated with the connection timer, deactivate the connection timer if the provisional acknowledgement message is not received within the pre-determined period, determine whether a call counter is greater than or equal to a threshold in response to the connection timer deactivation, and activate a block timer if the call counter is greater than or equal to the threshold. The block timer to block one or more calls from the attacker agent.

Ghost call vulnerability during call setup silent voice over IP denial-of-service

Methods, apparatus, and systems for detecting signals interfering with satellite signaling and determining a location of the interfering source are disclosed. In one example aspect, a method for detecting a signal directed at interfering with satellite signaling includes receiving, by a receiving node, a signal from a signal source, the signal produced by the signal source disguised as a satellite signal; determining an estimated position of the receiving node based on an orbital position of the satellite and a characteristic of the signal; comparing the estimated position of the receiving node with a reference position of the receiving node; determining that the signal source is a spoofing source different than the satellite; and determine a location of the spoofing source in part based on the estimated position.

Global navigation satellite system interference attack detection

In a 4G LTE wireless carrier network, network slice instances are instantiated that are configured to provide a configured set of services that are accessible to a controlled set of user devices. A service profile for a user device is identified and analyzed. When the service profile matches a configured set of services for one of the instantiated network slice instances, the user device is enabled to access the matching instantiated network instance. The provisioning of the network slice instances is performed by a dedicated node.

Network slicing using dedicated network node

A network provider implements network slicing. Network instances are instantiated on a communication network that are configured to provide a configured set of services that are accessible to a controlled set of devices. When a first device is either registered or authenticated with the communication network or has entered a service area, a service profile is identified and analyzed. In response to determining that the service profile matches a configured set of services for one of the instantiated network instances, the first device is enabled to access the matching instantiated network instance.

Provisioning of network slicing in a communication system

Techniques and architectures for establishing and/or evaluating a communication session that enables users from the same physical environment, different physical environments, or a combination to interact in a virtual coordinate system and perceive each other as being present are described herein. In some examples, representations of users may be aligned within a coordinate system while maintaining spatial alignment of the user in a physical environment and/or spatial alignment of the representations in another coordinate system. In some examples, a representation of a user may be output to another user in a manner that is aligned to input for the user. In some examples, a human model may be created for a user and used to provide representations of users that map to a human. In some examples, a representation of a user may be evaluated to determine if the representation is properly aligned to the user and/or a coordinate system.

Evaluating alignment of inputs and outputs for virtual environments

Reference frames for virtual environments

Aligning virtual representations to inputs and outputs

Techniques pertaining to seamless WebRTC support on mobile appliances are described. In one aspect, a method includes one or more processors of one or more gateway servers receiving from a browser-based application executed by a mobile device a request for access to multimedia provided by a multimedia access platform. The method also includes the one or more processors retrieving information related to a profile associated with a user of the mobile device from an identity and access management server. The method further includes the one or more processors enabling the browser-based application to receive from the multimedia access platform one or more types of multimedia based at least in part on the profile associated with the user of the mobile device.

Seamless web real-time communication support on mobile appliances

During voice communication between multiple telecommunications devices, a shareable application facilitates concurrent sharing of data and processes between the devices. The application may be configured to monitor the voice communication and execute a predetermined function upon detecting a predetermined condition in the voice communication. The application may further facilitate sharing of functionality and user interface displays during the voice communication. In some implementations, a server computing device on a communications network may facilitate functions of shareable applications on one or more telecommunications devices.

Shareable applications on telecommunications devices

Systems and methods for home hub for IMS/Web services interaction are described. In one aspect, a data communication gateway operating as a home hub includes a processor that executes computer program instructions to provide IMS/Web services interaction to one or more client computing devices. The client computing device(s) are operatively coupled to the home hub. The client computing device(s) are not Session Initiation Protocol (SIP)-enabled devices. To provide SIP- or IMS-based services to such client computing devices, the home hub registers on behalf of the client computing device(s) to a SIP network. The home hub replies to SIP messages on behalf of the SIP network registered device(s) to process all SIP request(s) and provide the registered device(s) with corresponding SIP-based service(s).

Home hub for IP multimedia subsystem (IMS) web services interaction

In some implementations, a universal integrated circuit card (UICC) of a computing device activates a primary mobile network operator (MNO) subscription profile associated with a primary MNO based on: (i) whether the computing device is connected to a network, (ii) whether the primary MNO subscription profile is active, and (iii) a number of unacknowledged messages to a message that is periodically sent from the computer to a server associated with the primary MNO. The primary MNO may provide network services to a first geographic area and a secondary MNO may provide network services to a second geographic area. After the computing device moves to the second geographic location from the first geographic location, the eUICC received a secondary MNO profile associated with the secondary MNO, activates the secondary MNO profile, and deactivates the primary MNO profile.

Polling by universal integrated circuit card for remote subscription

A system is described herein that includes mobile communication devices and a cellular base station to communicate with a telecommunication network. The mobile communication devices access telephony service through the cellular base station when inside a geofence. The mobile communication devices determine whether they are inside the geofence based on distances from proximity beacons. When outside of the geofence, the mobile communication devices are prevented from accessing telephony service through the cellular base station. When inside the geofence, the mobile communication devices may access telephony service through the cellular base station. The mobile communication devices may only make and receive calls from mobile communication devices of a specific other system. When a call is received at the system, the mobile communication devices of the system are rung. To enable this, a serving call session control function of the telecommunication network forks a call directed to the system.

Growing community of inventors

Sammamish, WA, United States of America

Jean-Luc Rene Bouthemy