Verizon Patent and Licensing Inc.

Jerry Steben

Maqbool Chauhan

David Taft

Parry Cornell Booker

Sudhakar Reddy Patil

Ye Huang

Imtiyaz Shaikh

Satish S Vasamsetti

Kalyani Bogineni

Vinod Kumar Choyi

Emerando M Delos Reyes

Hossein M Ahmadi

Shanthala Kuravangi-Thammaiah

Raymond So

Helen Osias Eglip

Anthony Mathias George

Lalit R Kotecha

Violeta Cakulev

Samirkumar Patel

Amir Saghir

Ali Imdad Malik

Minbao Li

Nicklous D Morris

John P Demko

Jayshree A Bharatia

Lily H Zhu

Kristen Sydney Young

Hans Raj Nahata

Maria G Lam

Matthew W Nelson

Kirk Campbell

Robert Avanes

Mark T Watts

Yousef Abdelmalek

Anthony Clay Reynolds

Muthukumar Retnasamy

Madhan Muralimanohar

Vijayakrishna P Guduru

William W Wong

Peter B Sensenbrenner

Eric T Handley

Tony Ferreira

Anthony Sirignano

Edward G Leyton

Chad Allenbrand

Muralidhar Devarakonda

Julian Jimenez

Harinder S Lakhian

In the various embodiments, systems and methods are disclosed for determining the location of User Equipment (UE) in a network and for authorizing access to content based on said location. An aspect of the present disclosure is a method including receiving, by a Content Authorization Function (CAF), a request to provide a UE type of a UE and a physical location associated with the UE, the request including a UE Internet Protocol (IP) address associated with the UE; querying, by the CAF, a Network Function (NF), to provide the UE type and associated physical location, the query including the UE IP address; receiving, by the CAF from the NF, the UE type and associated physical location; and transmitting the UE type and associated physical location.

System and method for determining device location and providing access authorization

Systems and methods described herein enable premium session retainability for differentiation of services with respect to network function failures. A first network function of a core network obtains a session retention indicator during establishment of a protocol data unit (PDU) session. The first network function calculates a compute footprint for the first network function to support the PDU session and any other premium sessions currently serviced by the first network function. An orchestration device receives the compute footprint and provisions a second network function based on the compute footprint. The first network function and the second network function perform data replication of state information for the PDU session to allow premium sessions to continue with no or minimal interruption in the event of a failover scenario.

Systems and methods for premium session retainability in core networks

A primary application cloud instance may receive historical usage of an application, may allocate, based on the historical usage, a quantity of cloud resources for enabling the application to be accessed, and may enable the application to be accessed. The primary application cloud instance may provide, to a backup application cloud instance that allocates a minimum quantity of cloud resources for providing a skeletal version of the application, heartbeat and session state information associated with the primary application cloud instance, and the quantity of cloud resources for enabling the application to be accessed. The primary application cloud instance may provide, to the backup application cloud instance, an indication of a failure of the primary application cloud instance, via the heartbeat and session state information, to cause the backup application cloud instance to allocate the quantity of cloud resources and to enable access to the application.

Systems and methods for optimizing resources for applications deployed in primary and backup geographically dispersed cloud environments

A computer device may include a memory storing instructions and processor configured to execute the instructions to host a network function container that implements a microservice for a network function in a wireless communications network, wherein the network function container is deployed by a container orchestration platform; host a service proxy container associated with the network function container, wherein the service proxy container is deployed by the container orchestration platform; and configure the hosted service proxy container to apply a wireless network policy to the microservice for the network function. The processor may be further configured to intercept messages associated with the microservice for the network function using the configured service proxy container; and apply the wireless network policy to the intercepted messages using the configured service proxy container.

Wireless network policy manager for a service mesh

A method, a network device, and a non-transitory computer-readable storage medium are described in relation to an EASDF secure service. The EASDF secure service may include a network-side service that may validate access and authorization to use a domain name system (DNS) resolver device, such as an edge application server discovery function. The network-side service may validate access and authorization of an end device based on tokens. The EASDF secure service may include an end device-side service that includes a token with a DNS query to the DNS resolver device. The end device-side service may further provide authorization regarding access and use of applications, networks, and application devices that host applications and/or assets by the end device at the end device. The end device-side service may determine access and/or authorization based on tokens and a validation procedure performed at the end device.

Method and system for EASDF secure service

A device may include a processor configured to maintain a plurality of session management entities (SMEs) for a core network associated with a radio access network (RAN). The processor may be further configured to establish a communication session using a first SME, of the plurality of SMEs; store session data for the communication session in a communication session database accessible by each of the plurality of SMEs; receive, using a second SME of the plurality of SMEs, a message associated with the communication session; retrieve, using the second SME, session data for the communication session from the communication session database, based on receiving the message; and process, using the second SME, the message using the retrieved session data.

Systems and methods for virtualized session management

Disclosure are techniques for allocating aggregation devices in a lawful intercept system. In an embodiment, a method includes maintaining a list of point of interception aggregation (PAG) functions in a network function repository function (NRF) of a cellular network upon instantiation of the PAG functions; receiving a lawful intercept (LI) request; querying the NRF to determine a respective PAG function; and associating a point of interception (POI) function with the respective PAG function.

Network discovery in a lawful intercept system

Systems and methods described herein enable distribution of a Charging Function group identifier ('CHF-Group-ID') and other CHF selection data to CHF consumers during Protocol Data Unit (PDU) session establishment in a 5G network. A Unified Data Repository (UDR) is provisioned with CHF-Group-ID details for each subscriber of the network. In one aspect, during PDU session establishment, CHF consumers obtain CHF-Group-ID information as part of a subscriber profile that is provided to all CHF consumers. No additional step or hop is needed for the CHF consumers to obtain the CHF-Group-ID. Thus, regionally segmented CHFs can be implemented without replication of data between CHFs in different regional segments and without additional signaling between network functions.

Systems and methods for regional segmentation and selection of charging function

A system described herein may identify a requested communication session between a UE and a network, such as a core of a wireless network. The system may identify Quality of Service ('QoS') information associated with the UE and/or the requested communication session. The QoS information may include or may be based on a network slice identifier, a QoS value, a Service Level Agreement (“SLA”), one or more models associated with UE attributes, or other suitable information. The system may determine a maximum transmission unit (“MTU”) configuration for the UE based on the identified QoS information and/or models that associate UE attributes to MTU configurations. The system may implement the determined MTU configuration, including providing the MTU configuration to one or more gateways or endpoints of the network and/or to the UE. The UE and the network may accordingly use the MTU configuration when communicating via the requested communication session.

Systems and methods for dynamic maximum transmission unit adjustment in a wireless network

Systems and methods described herein provide for User Equipment (UE)-initiated authentication and authorization updates to Network Slice-Specific Authentication and Authorization (NSSAA). A network device in a core network receives a message from a user device outside of the core network, wherein the message includes a request to initiate a NSSAA procedure. The network device initiates the NSSAA procedure in response to the request. The systems and methods also provide for UE-initiated authorization revocation of NSSAA.

Systems and methods for UE-initiated NSSAA procedures

In some implementations, a network device may receive a subscription request to subscribe to receive notifications associated with context data related to a registered session associated with a user equipment (UE). The registered session may be associated with a reauthorization timer that is associated with triggering the network device to provide a request for reauthorization of the registered session. The network device may provide, based on an expiration of the reauthorization timer, the request for reauthorization of the registered session.

Systems and methods for reauthorization request notification

A device may receive load data identifying loads of network functions provided by a cloud computing environment, resource data associated with resources of the cloud computing environment, and resource distribution data associated with the resources. The device may perform data analytics on the load data, the resource data, and the resource distribution data to identify, from the network functions, a network function being impacted and to determine that the network function requires resource modification. The device may calculate, based on the data analytics and based on determining that the network function requires resource modification, parameters for the resource modification and may perform one or more actions based on the parameters for the resource modification.

Systems and methods for providing fifth-generation network function on demand resource distribution

Systems and methods described herein provide binding support function (BSF) service registration and discovery for environments using oversubscribed network addresses. A network device in a core network receives a registration request from a binding support device. The registration request includes a binding group identifier associated with the binding support device. The network device stores, based on the registration request, a profile for the binding support device that includes the binding group identifier and receives, from a policy control device, a discovery request for a that includes a unique identifier of user equipment (UE) device. The network device provides, to the policy control device, a response to the discovery request that identifies the binding support device.

BSF service registration and discovery enhancement

A device may include a processor configured to establish a data traffic flow for a user equipment (UE) device and determine per flow descriptor attributes associated with the data traffic flow, wherein the per flow descriptor attributes identify at least a source, a destination, and a protocol associated with the data traffic flow. The processor may be further configured to determine at least one additional per flow descriptor attribute for the data traffic flow and send the per flow descriptor attributes and the at least one additional per flow descriptor attribute to a network exposure device of a core network, wherein the network exposure device is configured to communicate with servers outside the core network.

Systems and methods for exposing custom per flow descriptor attributes

A method, a device, and a non-transitory storage medium are described in which an uplink classifier and branching point service is provided. The service may include the management of user plane function devices or uplink classifier devices according to various architectures and connectivity among the user plane function devices or uplink classifier devices. The service may allow end devices situated in different locations to connect to different application service host devices and application service layer networks based on such management.

Method and system for uplink classifier and branching point service

Growing community of inventors

Fort Worth, TX, United States of America

Jerry Steben