Amazon Technologies, Inc.

Plume Design, Inc.

Kaixiang Hu

Kiran Kumar Edara

Diwakar Gupta

Shane Ashley Hall

Ishwardutt Parulkar

Igor A Kostic

Upendra Bhalchandra Shevade

Benjamin Wojtowicz

Evan Jeng

Aman Singla

Hong Fan

William John McFarland

Adam R Hotchkiss

Paul White

Andrew David Price

Balaji Rengarajan

Sameer Vaidya

Leslie Andrew Prock

Srinivasa Tagirisa

Sahil Mansukhlal Koladiya

Joshua Aaron Karsh

Abhishek Kumar

Joseph Elmar Magerramov

Alexey Gadalin

Stephen Callaghan

Kah Kuen Fu

Ethan Joseph Torretta

Yi Zhu

Jian Lu

Rudresh Amin

Nikhil Dinkar Joshi

Rangaprabhu Parthasarathy

Evan Rusackas

Yatin Patil

Dimitrios Elissaios

Kevin Tseng

Viritha Yella

Yingshuo Chen

Disclosed are various embodiments for managing radio-based private networks. In one embodiment, a request is received from an organization for a provider to provision a radio-based private network to cover a site of the organization. Equipment is preconfigured to implement the radio-based private network before shipping the equipment to the organization. A core network is provisioned for the organization.

Managing radio-based private networks

Disclosed are various embodiments for customer-managed authentication in radio-based networks. In one embodiment, a radio-based network is managed for an organization. The radio-based network includes a radio access network and an associated core network. A request is received from the organization to configure one or more parameters affecting primary keys in the associated core network. The primary keys correspond to pre-shared keys of client devices permitted to access the radio-based network. Storage of the primary keys is customized in the associated core network based at least in part on the one or more parameters in response to the request.

Customer-managed authentication for radio-based networks

Disclosed are various embodiments for interfaces for creating radio-based private networks. In one embodiment, a request is received via an interface to create a radio-based private network for a customer. The request indicates a quantity of wireless devices that will connect to the radio-based private network. A quantity of radio units to serve the radio-based private network is determined based at least in part on the quantity of wireless devices. The radio units are preconfigured to implement a radio access network for the radio-based private network. A shipment is initiated to the customer of the radio units that have been preconfigured. Resources in a cloud provider network are provisioned to function as a core network for the radio-based private network.

Interfaces for creating radio-based private networks

Disclosed are various embodiments for on-demand application-driven network slicing. In one embodiment, first data is transmitted to or from a first application in a particular computing device using a first network slice in a communications network. A request is sent from the particular computing device to configure a second network slice in the communications network based at least in part on a requirement of a second application. Second data is transmitted to or from the second application using the second network slice.

On-demand application-driven network slicing

Disclosed are various embodiments for provisioning radio-based networks with locality rules. In one embodiment, at least one locality rule associated with an organization is accessed. The locality rule(s) require that at least a subset of network traffic for a radio-based network remain within a particular geographic area. The radio-based network includes a radio access network and an associated core network. A topology for the radio-based network is determined based at least in part on the locality rule(s). The radio-based network is provisioned or reconfigured for the organization to have the topology complying with the at least one locality rule.

Provisioning radio-based networks with locality rules

Disclosed are various embodiments for configurable security policies in radio-based networks. In one embodiment, a security event detection rule or a security event mitigation rule for a radio-based network is accessed. The radio-based network includes a radio access network and an associated core network. At least a portion of the radio-based network is operated by a cloud provider on behalf of an organization. A security event is detected based at least in part on the security event detection rule. At least one action is performed in response to the security event based at least in part on the security event mitigation rule.

Configurable security policies for radio-based networks

Disclosed are various embodiments for managing computing capacity in radio-based networks and associated core networks. In one embodiment, it is determined that a set of computing hardware implementing a radio-based network for a customer has an excess capacity. At least one action is implemented to reallocate the excess capacity of the computing hardware.

Managing computing capacity in radio-based networks

Disclosed are various embodiments for certificate-based authentication in radio-based networks. In one embodiment, a request for service from a radio-based network is received from a client device. The request for service includes a secure certificate. The radio-based network includes a radio access network and an associated core network. The authenticity of the secure certificate is validated based at least in part on a certificate signature in the secure certificate signed by a certificate authority. It is determined that an entity identified in the secure certificate is permitted to access the radio-based network. Radio-based network access is provided to the client device in response to determining that the entity is permitted to access the radio-based network.

Certificate-based authentication for radio-based networks

Disclosed are various embodiments that provide highly available data-processing network functions for radio-based networks. In one embodiment, a tunnel host consistently routes network traffic associated with a range of network addresses in a radio-based network to a first instance of a data-processing network function instead of a second instance of the data-processing network function. A problem with the first instance of the data-processing network function is then detected. Additional network traffic associated with the range of network addresses is redirected from the first instance of the data-processing network function to the second instance of the data-processing network function.

Highly available data-processing network functions for radio-based networks

Disclosed are various embodiments for on-demand application-driven network slicing. In one embodiment, it is determined that an application implemented in a particular computing device has an increased quality-of-service requirement in order to send or receive data via a communications network. The increased quality-of-service requirement is greater than an existing quality-of-service provided to the application by the communications network. The application sends a request that causes capacity in a network slice having the increased quality-of-service requirement in the communications network to be allocated for the application. The data is transmitted to or from the application using the network slice.

Disclosed are various embodiments for provisioning radio-based networks on demand. In one embodiment, a request to provision a radio-based network to cover an area is received. At least one radio access network operated by at least one communication service provider that covers the area is determined. A capacity is provisioned in the radio access network(s) for the radio-based network to cover the area. At least a portion of a core network is provisioned for the radio-based network in a cloud provider network.

Provisioning radio-based networks on demand

Disclosed are various embodiments for automated deployment of radio-based networks. In one embodiment, a request to provision a radio-based network for a customer by a provider according to a network plan is received via an application programming interface (API) of a cloud provider network. An arrangement of a plurality of cells for the customer is determined. Respective antennas and radio units for individual ones of the plurality of cells are preconfigured to implement the radio-based network before shipping the respective antennas and the radio units to the customer.

Automated deployment of radio-based networks

Disclosed are various embodiments for managing radio-based private networks. In one embodiment, a cellular network comprises at least one cell that provides a radio-based private network coverage of a site of an organization. The system further comprises at least one computing device in a cloud provider network that implements one or more network functions for an associated core network of the radio-based private network.

Systems and methods for visualization and troubleshooting of a distributed Wi-Fi network, implemented through one of a mobile application and a web page, include, responsive to obtaining data from the distributed Wi-Fi network, providing a map of the distributed Wi-Fi network based on the obtained data, wherein the map includes a first icon designating a gateway node, one or more second icons each designating one or more nodes, and connectors between the gateway node, wherein the gateway node and the one or more nodes are in a tree topology; providing a visualization in the map based on a current operational status of the distributed Wi-Fi network from the obtained data, wherein the visualization comprises a plurality of visual indicators of the current operational status; and providing notifications based on the current operational status.

Growing community of inventors

Fremont, CA, United States of America

Kaixiang Hu