T-Mobile Innovations LLC

Sprint Communications Comapny L.p.

T-Mobile USA, Inc.

Sprint Spectrum L.p.

Marouane Balmakhtar

Lyle W Paczkowski

Arun Rajagopal

Galip Murat Karabulut

Serge M Manning

Gregory David Schumacher

Carl Joseph Persson

Robert Keith Butler

Aaron Paul Hinkle

Brian David Waters

Lyle Thomas Bertz

Laurent Alexandre Laporte

Greg Schumacher

G Murat Karabulut

Geoffrey Todd Gibson

Zheng Fang

James Patrick Sisul

Thomas Golden

Ramana Venkata Gollamudi

Nagi A Mansour

Mark Richard Bales

Roger Danforth Bartlett

George Jason Schnellbacher

Kafi Hassan

Joao Teixeira

Peter Paul Dawson

Khoi Dinh Nguyen

Zhisheng Chen

Aaron Pawlowski

Rajesh Nautiyal

Kaushik Goswami

Willie Dorance King

A radio-frequency identification (RFID) system includes RFID tags arranged in a plurality of separate rows, a RFID reader, and a computer system including a processor, a non-transitory computer readable medium, and one or more applications stored in the non-transitory computer readable medium. The one or more applications, when executed by the processor, initiate by the RFID reader a row scan, and modulate, using a beamforming control module, a configuration of a radiation beam. In addition, the one or more applications, when executed by the processor, modulate by a power control module an emission power of the reader antenna during the performance of the row scan, and detect by the RFID reader one or more of the RFID tags positioned along a row.

Selective beam modulation for radio frequency identification device readers

In various embodiments, systems and methods for ledger-based cookie management are provided. Rather than store cookie data as text files on the local device drive, cookie data is recorded to a blockchain technology cookie ledger store on a network resource. When a client application (e.g., a browser) on the UE is directed to a cloud-based service, and that cloud-based service calls for access to a cookie, that call is processed by a cookie gateway executing on the UE. The cookie gateway may verify authenticity of the user and generate a cookie access token that it transmits to the cloud-based service. The cloud-based service may use the cookie access token to locate the cookie ledger and access one or more records storing cookie data used by the cloud-based service. The cookie access token may expire upon termination of the session between the user equipment and the cloud-based service.

Systems and methods for ledger-based cookie management

A data communication system serves a wireless communication device over a Non Third Generation Partnership Project (non-3GPP) network slice. The data communication system receives a request for the non-3GPP slice from the wireless communication device over a non-3GPP access node. The data communication system exchanges network signaling with a 3GPP network. The data communication system receives an authorization from the 3GPP network for the wireless communication device to use the non-3GPP network slice. The data communication system establishes a Virtual Private Network (VPN) for the wireless communication device over the non-3GPP access node in response to the authorization from the 3GPP network. The data communication system exchanges user data with the wireless communication device over the VPN. The data communication system exchanges the user data with a non-3GPP communication system over the VPN or another VPN for the non-3GPP communication system.

Data communications over a wireless communication network slice

Techniques related to the management of communication devices using a combination of local and centralized blockchains to enable the detection of state changes that deviate from the expected behaviors are disclosed. In one example aspect, a method for detecting code injection activity in communication devices by a machine learning based platform includes determining, by a verification system, baseline information about a communication device; detecting a state change of the communication device, responsive to the state change of the communication device; appending, by the verification system, a current-state block representing the state change to a prior-state block representing a previous state of the communication device in a blockchain; and detecting whether a suspicious attack has occurred by comparing the payload of the current-state block to the baseline information.

Code injection prevention for communication devices

Global mobile communication event identifiers (IDs) improve security by enabling early detection of cybersecurity events in cellular networks. The event IDs are each unique to a category of mobile communication events and consistent across the network functions (NF), even from different vendors. NFs assign event IDs to mobile communication events, which are reported to a cybersecurity operations center. The cybersecurity operations center has visibility into network-wide events and is thus able to match occurrences of event IDs with categorized attacks, when an attack is occurring. This enables rapid, intelligent selection of a defensive response.

Global mobile communication event IDs for improved network and security operations

A programmable radio exposure function switches between real-time and near-real-time modes of operation for a radio access network (RAN) intelligent controller of a telecommunications system. An application programming interface is exposed by the radio exposure function and performs radio resource management for the telecommunications system. The application programming interface communicates with services and/or applications to control RAN functions, and allocates RAN resources of the telecommunications system to a user equipment for the services and/or applications. A machine learning module is embedded within the radio exposure function and trained to identify network slices of the telecommunications system for the services and/or applications. The machine learning module analyzes data received from the user equipment to detect that the user equipment has violated a security constraint of the telecommunications system.

Radio exposure function for telecommunications networks

A method for configuring a network of a communication system to secure applications executable on user equipment (UE) connectable to the network. The method includes receiving a predefined first traffic signature corresponding to a first application, and configuring a network traffic monitoring tool to detect an activation of the first application executing on the UE. The method additionally includes configuring the network traffic monitoring tool to monitor active traffic manifested on the network associated with the first application, configuring a traffic signature comparison tool to detect a security breach associated with the first application, and configuring an alarm tool issue an alarm and/or act against the first application.

Systems and methods for securing applications executed on communication systems

A wireless communication system delivers a wireless data service to a wireless communication device using content-addressing. The wireless communication system generates a content-address from a data set. The wireless communication system stores the content-address in association with the data set. The wireless communication system encrypts the content-address with a system key and transfers the encrypted content-address to the wireless communication device. The wireless communication device decrypts the encrypted content-address with a user key to obtain the content address. The wireless communication device re-encrypts the content-address with the user key. The wireless communication system receives the re-encrypted content-address from the wireless communication device and decrypts the re-encrypted content-address with the system key to obtain the content-address. The wireless communication system retrieves the data set from the memory circuitry with the decrypted content-address. The wireless communication system delivers the wireless data service to the wireless communication device based on the retrieved data set.

Wireless data service using content-addressing

Systems, methods, and devices are disclosed herein to identify and deploy policy changes from a policy source in a wireless communication network to enforcement points in the network based on trends identified by the policy source in KPIs reported by the enforcement points. In an implementation, enforcement points in the network report KPIs to the policy source. The KPIs are related to authorization attempts made by user equipment in the network. The policy source, upon receiving the KPIs, identifies a trend in the KPIs and identifies a policy change based on the KPIs. The policy source then deploys the policy change to the enforcement points. In various implementations, the policy source is a Policy Decision Point (PDP), and the enforcement points are Policy Enforcement Points (PEPs).

Quality of trust framework for wireless communication networks

In a wireless communication system, wireless communication devices filter smart contract data. The wireless communication devices generate source smart contract outputs. The wireless communication devices select some of the source smart contract outputs. The wireless communication devices select at least one target smart contract. The wireless communication devices transfer the selected source contract outputs to the ones of the selected target smart contracts. The selections that comprise this filtering may be based on device location, device identifier, digital certificates, device application identifiers, device component identifiers, alarms, messages, time, day, date, and/or some other factors.

Smart contract filtration in a wireless communication system

A first wireless network slice executes a first slice input and generates a first slice output. The first slice transfers the first slice output to a second wireless network slice. The second slice receives and authorizes the first slice output and transfers a first acknowledgement to the first slice. The first slice receives the first acknowledgement and responsively uses the first slice output to deliver a data communication service. The second slice executes a second slice input and generates a second slice output. The second slice transfers the second slice output to the first slice. The first slice receives and authorizes the second slice output and transfers a second acknowledgement to the second slice. The second slice receives the second acknowledgement and responsively uses the second slice output to deliver the data communication service.

Synchronized wireless network slicing

A wireless communication network serves a Network Exposure Function (NEF) slice to User Equipment (UE). An Access and Mobility Management Function (AMF) selects a NEF slice for the UE. A Session Management Function (SMF) selects a NEF address for the NEF slice for the UE. A User Plane Function (UPF) exchanges Application Programming Interface (API) calls and responses between the UE and a NEF based on the NEF address. The NEF exchanges the API messages with the UE over the UPF. The NEF slice may comprise an edge NEF slice that is selected based on the geographic location of the UE and that features a local NEF element that is coupled to a core NEF element.

Network exposure function (NEF) slice in a wireless communication network

A method for implementing a slice security zone (SSZ) in a 5G network. The method comprises storing by an SSZ function executing on a first network server an SSZ security profile of the SSZ in a secure storage function, receiving by the SSZ function from a slice management function a slice registration request comprising information relating to a slice security profile of a slice managed by the slice management function, if the slice security profile complies with the SSZ security profile, storing by the SSZ function a slice registration association between the slice and the SSZ in the secure storage function, and sending by the SSZ function to the slice management function a slice registration response comprising information relating to whether the slice was registered in the SSZ.

5G hyperledger slice security framework

Systems and methods are provided for duplicate message detection and removal. A method includes receiving a message tagged with a sequence number during one of a first timing window and a second timing window, wherein the first and second timing windows are consecutive recurring timing windows in a network. The method additionally includes sending a response to the message during one of the timing windows and marking the sequence number with the timing window of the response. The method further includes adding the marked sequence number to an exclusion list and after a next timing window expires, deleting the sequence number from the exclusion list.

Duplicate message removal technique for improving retransmission success rate

A method of testing a communication system implementing a zero trust architecture. The method comprises sending a request by a test equipment platform to access a microsegment to a policy enforcement point (PEP); sending an authorization request by the PEP to a policy decision point (PDP); authorizing access of the test equipment platform to the microsegment by the PDP; sending authorization of access of the test equipment platform to the microsegment by the PDP to the PEP; establishing a secure tunnel by the PEP between the test equipment platform and the microsegment; sending a command to provide test data by the test equipment platform via the secure tunnel to a probe in the microsegment; analyzing the test data by the test equipment platform; and producing a test result by the test equipment platform based on analyzing the test data.

Growing community of inventors

Alexandria, VA, United States of America

Marouane Balmakhtar