T-Mobile USA, Inc.

T-Mobile Innovations LLC

Paul Farag

Ahmad Arash Obaidi

Eric W Yocam

Raymond Thomas Ball

Andrew Lee Watts

Christopher Spanton

Andrei Nicolae Cogan

Michael Zwarts

A system can detect a change associated with a subscriber identity module (SIM) of a wireless device and generate a data record indicative of the change. In one example, the data record is stored on a digital ledger residing on a cryptographically secured and distributed peer-to-peer network (e.g., blockchain) that stores multiple data records of changes to SIMs of wireless devices. The system can determine whether a wireless device is impacted by malicious activity based on an age of its data record stored on the distributed ledger. For example, an aged data record indicates a lower probability that the wireless device was the subject of a SIM swap fraud whereas a newer data record indicates a higher probability of a SIM swap fraud.

Cross-carrier digital ledger for subscriber identification module (SIM) related data

Systems and methods discussed herein are directed to monitoring and/or adjusting levels of ambient radio frequency (RF) signals within a wireless communication network. A geographic region is monitored for ambient radio frequency signal levels. The monitoring may be performed by a device configured for operation in the wireless communication network. For example, one or more of a UE, a base station, an IoT device, etc., may be configured with a sensor for sensing ambient RF signal levels. When it is determined that a measured amount of ambient radio frequency signal level exceeds a predetermined threshold, an operator of the wireless communication network may then provide an alert to at least one user of the wireless communication network.

Monitoring of radio frequency signal levels within a wireless communication network

A method comprises receiving, by a shim application of a user equipment (UE), an outbound communication from a first application destined for an external device, prior to transmitting the outbound communication to the external device, determining, by the shim application, whether to forward the outbound communication to the external device, via a radio interface of the UE, based on a first policy, receiving, by the shim application, an inbound communication destined for a second application from the external device, via the radio interface, determining, by the shim application, whether to forward the inbound communication to the second application based on a second policy, receiving, by the shim application, an inter-enclave communication from the first application destined for the second application, and determining, by the shim application, whether to forward the inter-enclave communication to the second application based on the second policy.

Shim application for enclave separation

The present disclosure describes techniques that facilitate the encryption of data communications between a home and VPLMN, along with the verification of a content and origin of encrypted messages at each end of a data communication. In one non-limiting example, the process of verifying the content and origin of an encrypted message is facilitated partly by an exchange of network public keys between the HPLMN and VPLMNs. In another example, a network certificate aggregator (NCA) may act as a certificate authority (CA) by verifying the identities of interacting home and VPLMNs. The NCA may facilitate and exchange public keys between a home and VPLMN, whereby the HPLMN and VPLMNs need only trust and verify an identity of the NCA. Alternatively, the NCA may act as a conduit for data communications between the HPLMN and VPLMN.

End-to-end security for roaming 5G-NR communications

Systems, methods, and devices for secure and configurable control of user equipment (UE) devices associated with enterprise accounts are disclosed herein. Each enterprise account is associated with a plurality of UE devices, which may access networked assets associated with the enterprise. In order to manage UE device access to enterprise assets and to other networks via an internet connection through a wireless telecommunications network, data associated with different enterprise accounts is virtually separated at the edge routers and maintained as separate data streams to distinct virtual environments associated with the enterprise accounts at one or more asset hosting servers. The virtual environments on the assets hosting servers further facilitate enterprise-specific control of mobile assets, such as enforcing security policies relating to access, connections, filtering, or encryption.

Customer control of their mobile assets

Buffering streaming content includes accessing prior device location data of a device and predicting a future sector that the device will travel through based at least in part on the prior device location data. A predicted quality of service of wireless communications is determined and a streaming buffer is adjusted based at least in part on the predicted quality of service and a caching policy set in accordance with key variables related to network conditions in the future sector.

Cache adjustment before encountering different circumstance

A request from a user device to register as a secure endpoint device of a secure local area network (LAN) is received by a wireless carrier network. A device type of the user device is identified by the network based on device identification information provided by the user device. A data protection policy that corresponds to the device type of the user device is sent to a secure endpoint application on the user device following a registration of the user device as a secure endpoint device by the network, in which the data protection policy includes an Access Point Name (APN). The user device allocated a network slice of the wireless carrier network that corresponds to the APN to the user device. Subsequently, a data file is transported from the user device to an additional secure endpoint device via the network slice that is allocated to the user device.

Wireless carrier network-enabled protection of high value data

Systems and methods are provided for resolving conflicting network addresses by utilizing a DNS server to configure an edge computing device. The DNS server may receive, from a client computing device, a request to resolve a hostname of a recipient computing device. The DNS server may determine a resolved network address corresponding to the hostname and may determine that the resolved network address conflicts with another network address. The DNS server may determine a substitute network address, provide the edge computing device with information for translating the substitute network address into the resolved network address, and provide the substitute network address to the client computing device. The edge computing device may receive the substitute network address from the client computing device, translate the substitute network address into the resolved network address of the recipient computing device, and send network data from the client computing device to the recipient computing device.

Growing community of inventors

Renton, WA, United States of America

Paul Farag