Syniverse Technologies, LLC

Ravi Tandon

Huiyue Xu

Prashant Datar

Edward Yau

Arjun Nandal

Himanshu Garg

Lokdeep Singh

David Zhang

Rakesh Mehta

Paul Sun

An enforcer application is configured to intercept signaling messages in a telecommunications network and select an optimal SGW, PGW, SMF/UPF and application servers in real time. More specifically, the enforcer intercepts and generates GSM MAP, Diameter, GTP-C and HTTP2/JSON signaling messages. The enforcer executes a policy to force the user devices to re-establish the data connection, thus anchoring at different SGW, PGW, SMF/UPF and application server to keep end-to-end routing path optimal, when the impacting factor changes. The enforcer can further feed its performance data and decision matrix into the analyzer and database to further optimize the decision process. Analyzer and KPI metrics databases are installed at central data centers to collect the KPI data from different probes and enforcer, calculate in real-time the optimal routing path with different decision factors considered, and interact with enforcer to update the latest optimal path status based on the data collected.

Network path routing for wireless traffic

This invention relates to a method and a system for performing seamless authentication and identification of a mobile subscriber requesting to access a 3Party Merchant's online platform. The subscriber verification system intercepts a message sent from a first network node to a second network node during a data session establishment procedure. The subscriber verification system extracts a first set of identification values associated with a user equipment (UE) from the intercepted message. After the data session is established, the UE sends an encrypted request to access the Merchant server. The Merchant server identifies a second set of identification values associated with the encrypted request and sends them for validation to the subscriber verification system. The second set of identification values is compared against the first set of identification values. If the two set of identification values match, the UE is authenticated.

System and method for seamless user equipment authentication

A system and method for routing of 5G mobile data traffic along a routing path in an Internetwork Packet Exchange (IPX) network having requisite Quality of Service (QoS). A proxy is deployed in the IPX network to intercept Session Create request and response messages exchanges between the home network and the visited network. The routing platform extracts Single-Network Slice Selection Assistance Information (S-NSSAI) attribute and uses this attribute and the geographic locations of the visited network and the home network to select a routing path in the IPX network having requisite QoS for the network slice use case. The routing platform uses layer-3 routing technique to anchor User Plane Function (UPF) Proxies deployed at different routing paths in the IPX network. Alternately, the routing platform uses layer-2 routing technique, with Software-Defined Networking (SDN) controller and SDN-switches to route traffic via the selected routing path in the IPX network.

Methods and systems for 5G traffic routing in IPX with network slicing

This invention is a system and method for implementing Network Function (NF) Proxy in an IPX network for 5G core roaming. NF Discover queries from Visited Public Land Mobile Network (VPLMN) are manipulated such that the IPX NF Proxy's fully qualified domain name (FQDN) is returned as the FQDN of the Home Public Land Mobile Network (HPLMN) NF. NF Proxy queries the FQDN of a true HPLMN NF through a HPLMN Network Repository Function (NRF) Proxy. Application messages are routed to NF Proxy hosted in the IPX network. NF Proxy performs its proxy function and routes egress messages to the target NF in HPLMN or another location.

5G core roaming network function proxy in an IPX network

A system and method for routing LoRaWAN backend traffic between peer visited and home Network Server nodes to achieve global roaming in a scalable manner. A LoRaWAN Routing and Control System (LRCS) node is deployed between a visited Network Server and a home Network Server and is configured to proxy signaling and payload data messages therebetween. LRCS node can provide policy control, billing and rating based on roaming agreements between peer LoRaWAN roaming networks. LRCS node protects the overall network by discarding blacklisted and malicious traffic. LRCS node can enhance the message flow logic by adding routing information in the messages such that destination networks can identify that message is routed through a trustable source.

Methods and systems for LoRaWAN traffic routing and control

A traffic hub used in mobile communications for data offloading, diversion and security. The traffic hub includes an Evolved Packet Data Gateway (ePDG) module configured to transmit and receive data packets for a mobile device in Roaming Untrusted Wi-Fi network for secured access to an Evolved Packet Core (EPC) network, a Trusted WLAN Access Gateway (TWAG) module configured to transmit and receive the data packets for a mobile device in Roaming Trusted Wi-Fi network for secured access to the EPC network and a General Packet Radio Service (GPRS) Tunneling Protocol (GTP) Proxy (GProxy) module, the GProxy module being the core module of the traffic hub configured to enforce policy rules on the data packets prior to exchanging the data packets with logically selected Peer Gateway General Packet Radio Service (GPRS) Serving Node (GGSN)/Packet Data Network (PDN) Gateway (PGW) and ePDG/TWAG nodes. The GProxy also operates as a GTP-aware firewall to protect Home GGSN/PGW nodes from malicious traffic.

GPRS tunneling protocol (GTP) traffic hub and associated method of use

A routing platform for routing 4G and 5G mobile data traffic in a mobile core networks implementing Option-3 of 5G Non-Standalone deployment. The routing platform captures S6a Diameter messages sent between a Mobility Management Entity (MME) and a Home Subscriber Server (HSS) and examines the captured messages to determine whether a user equipment (UE) is configured for a 5G data connection. The routing platform intercepts a GTP Create-Session-Request message sent from a Serving Gateway (SGW) and determines whether the GTP message is associated with the UE previously determined to be configured for a 5G data connection. If the GTP message is associated with the UE configured for a 5G data connection, the GTP message is either sent to a dedicated 5G Packet Network Data Gateway (PGW) or the GTP message is modified so that a single PGW handling both 4G and 5G traffic can establish a 5G session for the UE.

Methods and systems for routing mobile data traffic in 5G networks

A traffic hub system comprising a roaming data module to send and receive data for a roaming wireless network for a mobile device, the mobile device comprising a service utilizing a high-speed data network, a home data module to send and receive data for a home wireless network for the mobile device, the home wireless network being a different network than the roaming wireless network, the home wireless network comprising a packet data network gateway. The traffic hub system in one embodiment provides a static policy-based HTTP redirection. The traffic hub system in one embodiment, provides a dynamic policy based redirection. The traffic hub system in on embodiment, provides a seamless captive portal access. The traffic hub system in one embodiment provides data-offloading.

Traffic hub system for providing roaming service in a wireless environment

A virtualized Policy, Charging, Negotiation and Enforcement Entity (PCNE) is disclosed for serving cellular traffic across multiple networks. The PCNE manages signaling and user payloads to apply policies compliant to concerned networks in real time. The PCNE provides policy control to a Home network even when its outbound subscriber traffic is locally offloaded at a Visited network or IP Packet Exchange (IPX) cloud. The PCNE protects the Visited network against capacity overuse by inbound subscriber traffic, thereby providing joint control to the Home and Visited network operators resulting in optimal use of bandwidth and resources along with consistent subscriber experience. The PCNE enables the Home network operator to implement domestic quota buckets and policies while its subscriber is roaming in the Visited network by applying differential policy and charging rules. Traffic can be offloaded to a preferred packet data gateway after enforcing the negotiated policies.

Roaming cellular traffic policy and charging negotiation and enforcement entity

The specialized networking and application system includes an enforcer configured to intercept the signaling messages and select an optimal SGW, PGW, SMF/UPF and application servers in real time. More specifically, the enforcer intercepts and generates GSM MAP, Diameter, GTP-C and HTTP2/JSON signaling messages. The enforcer executes a policy to force the user devices to re-establish the data connection, thus anchoring at different SGW, PGW, SMF/UPF and application server to keep end-to-end routing path optimal, when the impacting factor changes. The enforcer can further feed its performance data and decision matrix into the analyzer and database to further optimize the decision process. Analyzer and KPI metrics databases are installed at central data centers to collect the KPI data from different probes and enforcer, calculate in real-time the optimal routing path with different decision factors considered, and interact with enforcer to update the latest optimal path status based on the data collected.

Systems and methods of optimal wireless traffic routing

A Slicing Agent node is deployed between standard Home Subscriber Server (HSS) node and a Serving General Packet Radio Service Support Node (SGSN) node, a Mobility Management Entity (MME) node, or a 3Generation Partnership Project Authentication Authorization and Accounting (3GPP AAA) node on S6a/S6d/SWx interfaces of a Core Network. The Slicing Agent node selects the Packet Data Gateway (PGW) and communicates the identifying information of the selected PGW to SGSN/MME/3GPP AAA nodes. The PGW is selected to serve subscriber sessions based on the subscriber's profile, usage, and business needs. The Slicing Agent node can be positioned in any Core Network setup around the globe irrespective of whether it is a roaming or a non-roaming scenario for subscribers/devices having global or country-specific Subscriber Identity Modules (SIMs), without requiring any enhancements or upgrades in legacy or existing network nodes including SGSN, MME, 3GPP AAA and HSS.

System and method of selective packet data network gateway discovery

Traffic hub system to provide roaming service in a wireless environment

This invention is a system and method for mobile authentication using HTTP redirect in GTP tunnels. The authentication procedure generates a one-time-token that returns to the Enterprise application that requests the authentication. The authentication platform injects a HTTP redirect response to the mobile device via the GTP-U tunnel that corresponds to the GTP session of the inputted-MSISDN. The HTTP redirect response carries a URL with the one-time-token as parameter. The Enterprise application authenticates the HTTP request by comparing the one-time-token in the HTTP request parameter against the value returned by the authentication platform during its authentication request API call.

Mobile authentication with URL-redirect

A traffic hub system comprising a roaming data module to send and receive data for a roaming wireless network for a mobile device, the mobile device comprising a service utilizing a high-speed data network, a home data module to send and receive data for a home wireless network for the mobile device, the home wireless network being a different network than the roaming wireless network, the home wireless network comprising a packet data network gateway. The traffic hub system comprising a bandwidth negotiation module to negotiate bandwidth for the mobile device with the roaming wireless network based on a home network policy when the mobile device is in the roaming wireless network, and a traffic control module, the traffic control module comprising a processor to update a quality of service parameter based on the negotiated bandwidth, transparently to the roaming wireless network and without enforcement of the home network policy by the home wireless network, the enforcement including providing the negotiated bandwidth.

Growing community of inventors

Sandweiler, Luxembourg

Ravi Tandon