Cisco Technology, Inc.

Mickael James Graham

Anton Okmyanskiy

Mark Grayson

Swaminathan A Anantha

Santosh Ramrao Patil

Jeffrey Antoline

Rajesh S Pazhyannur

Edward Haynes

Archie Hensley

Srinath Gundavelli

Ziv Nuss

Andrea Giustina

Gangadharan Byju Pularikkal

Eric Philippe Hamel

Joshua B Littlefield

Mansoorali Naushadali Kudsi

Kenneth Kinnear, Jr

Anal Srivastava

Bernard Ernst Volz

Anton Okmianski

James Briers

Chiragkumar P Desai

Shyam Sundar Vaidyanathan

Anvesh Reddy Podduturi

Peter Gaspar

Pei-An Lee

Gregory F Morris

Systems and methods provide for provisioning network access using a tenant service set identifier (SSID) or an SSID of a specified duration and distributed authorization. A network management system can provision a wireless local area network (WLAN) and the SSID in an access point to enable a primary guest device to access the WLAN for a specified time period (e.g., a start time and end time). The network management system can cause the SSID and authentication data (e.g., authentication token, Pre-Shared Key (PSK), etc.) to be transmitted for receipt by the first client device. After the start time and in response to successfully authenticating the first client device, the first client device can authorize a second client device to access the WLAN. The network management system or the AP can disable access to the network via the SSID at the end time.

Tenant service set identifiers (SSIDs)

A server receives a certificate signing request and onboarding information for an applicant device, and identifies a customer associated with the applicant device based on an applicant device identifier and a database identifiers associated with customers. The device determines a registered device associated with the customer is a trusted device, a location trust value for the applicant device based on a geolocation proximity between the applicant device and the trusted device, and an environment trust value for the applicant device based on a proximity in a network topology between the applicant device and the trusted device. The device further determines a trust score for the applicant device based on the location trust value and the environment trust value, and sends a signed certificate to the applicant device over the network when the trust score for the applicant device exceeds a threshold.

Techniques for onboarding devices based on multifactor authentication

A mobility management entity (MME) controls an enterprise fabric. The MME receives from a mobile device via a cellular network a request to initiate an attach procedure. In response, the MME acquires from the mobile device a unique equipment identifier of the mobile device. The MME generates an enterprise identity for the mobile device based on the unique equipment identifier, and registers the enterprise identity in the enterprise fabric. The MME signals to a user plane function of the cellular network that the mobile device has been registered, to trigger the user plane function to acquire an Internet Protocol (IP) address of the mobile device based on the enterprise identity. The MME receives from the user plane function the acquired IP address. The MME sends to the mobile device, through the cellular network, an attach accept message that includes the acquired IP address for use by the mobile device.

Enterprise fabric configured to support cellular mobility

The present disclosure provides improved determinism in systems and methods for wireless communications via real-time visual object tracking using radio, video, and range finding. In one example, a first and a second Access Point (AP) in a constellation in which the APs are positioned at knowns position in the environment, and the APs perform image processing to identify an entity the environment based on captured images and an entity definition. The APs receive, via range finders, ranges between the entity and the first and second APs to determine a location of the entity in the environment. The APs may then create a profile for the entity that includes an entity identifier, the location of the entity, and indicates whether one of the first AP and the second AP is in wireless communication with the entity.

Real-time object tracking

Embodiments include receiving one or more packets of a Wi-Fi calling session via a secure tunnel from a user device, where the user device is connected to a source network via a Wi-Fi access point. Embodiments also include determining whether the Wi-Fi calling session is a threat based, at least in part, on identifying an anomaly of at least one packet of the one or more packets. An action can be taken if the Wi-Fi calling communication is determined to be a threat. More specific embodiments include determining the at least one packet is associated with the Wi-Fi calling session by correlating information in the packet with control plane data of the Wi-Fi calling session. Further embodiments can include intercepting the one or more packets in a second secure tunnel established between an evolved packet data gateway and a service provider network associated with the user device.

System, method, apparatus and machine-readable media for enterprise wireless calling

An example method is provided in one example embodiment and may include determining one or more outlier access points (APs) of a plurality of APs managed by a same service provider, wherein the determining is performed based on performance metrics calculated for each of the plurality of APs and wherein each outlier AP has a performance metric that fails to satisfy a performance metric threshold; identifying a Radio Frequency (RF) cluster to which each outlier AP belongs, wherein each outlier AP belongs to only one RF cluster; applying one or more optimization parameters to one or more APs for one or more RF clusters; and calculating new performance metrics for the plurality of APs to determine whether any of the plurality of APs fail to satisfy the performance metric threshold after the one or more optimization parameters are applied.

System and method to facilitate wireless network optimization

An example method is provided in one example embodiment and may include determining a presence of user equipment (UE) in relation to small cell radio(s) of a small cell network based on information obtained through the small cell network and one or more parallel networks; and adjusting transmit power for the small cell radio(s) based on the presence of UE in relation to the small cell radio(s). Another example method can include determining that a UE in cell paging channel mode has changed its selected macro cell radio; determining that the UE is allowed service on a small cell radio located in a vicinity of a macro cell coverage area of a selected macro cell radio; and adjusting a transmit power of the small cell radio based on a presence of the UE in a surrounding macro cell coverage area of the small cell radio.

System and method for managing interference in a network environment based on user presence

Techniques are provided to perform location verification of a radio access point device such as femtocell. The radio access point device is configured to receive signals from global positioning system (GPS) satellite transmitters to produce GPS location data representing a GPS location of the radio access point device. The radio access point device is also configured to receive wireless signals at one or more specified channels and to generate radio environment data representing characteristics of received wireless signals. A comparison is made between the GPS location data and reference GPS location data for an expected location of the radio access point device. When the GPS location data substantially matches the reference GPS location data, operations of the radio access point device are enabled and the radio environment data is stored to be used as reference radio environment data for purposes of subsequent location verification of the radio access point device.

Radio access point location verification using GPS location and radio environment data

Systems and methods for small cell idle mode mobility include receiving, at a first small cell of a preconfigured cluster of small cells, a mobility area update request from a user equipment (UE). The method can also include registering location information of the UE with a small cell gateway, and retrieving a core network periodic timer for the UE from a mobility server. If certain conditions are met, the first small cell forwards the mobility area update request to a core network via the small cell gateway. Otherwise, the method can include the first small cell updating the location information of the UE with the mobility server, generating a locally-generated mobility area update accept message, and sending a locally generated mobility area update accept message to the UE along with a local periodic timer instructing the UE to send another mobility area update request when the local periodic timer expires.

Systems, methods and media for small cell idle mode mobility

An example method is provided in one example embodiment and may include assigning an identifier to each of a plurality of Home Node Bs (HNBs); receiving a cell update for a user equipment (UE) transitioning from a first HNB to a second HNB, wherein the cell update for the UE includes a first identifier associated with the first HNB and wherein the UE is in a cell paging channel (PCH) mode; determining based, at least in part, on the first identifier associated with the first HNB, whether the first HNB is operating within a cluster of HNBs including the second HNB; and withholding registration of the cell update for the UE with an HNB gateway (HNB-GW) if the first HNB is operating within the cluster of HNBs including the second HNB until packet switched (PS) traffic for the UE is received by the second HNB.

System and method for supporting cell updates within a small cell cluster for idle mobility in cell paging channel mode

An example method is provided in one example embodiment and includes receiving a handover request from a first radio network to handover a user equipment (UE) to a second radio network, wherein the handover request includes an international mobile subscriber identity (IMSI) for a user associated with the UE and a pseudo cell identifier (ID); determining a target channel configuration for the UE using the pseudo cell ID; querying a third radio network using the user IMSI to determine a location of the UE, wherein at least one access point in the third radio network is in communication with the UE; and selecting a particular target access point in the second radio network for handover of the UE based, at least in part, on the location of the UE, the target channel configuration for the UE and a location of the particular target access point.

System and method for hand-in disambiguation using user equipment WiFi location in a network environment

A method is provided in one embodiment and includes receiving a request for a session at a network element; communicating a query for whitelist data to a provisioning element; receiving the whitelist data at the network element; and communicating a message to an access point that communicated the request, where the message is indicative of whether the session is to be accepted or denied based on the whitelist data. In more specific implementations, the network element is a gateway configured to receive the whitelist data via a RADIUS access accept message. In addition, source Internet protocol (IP) address verification associated with the session can be executed before a wireless device associated with the access point is permitted access to a network.

Growing community of inventors

Bellevue Hill, Australia

Mickael James Graham