Amazon Technologies, Inc.

Shane Ashley Hall

Diwakar Gupta

Kaixiang Hu

Ishwardutt Parulkar

Kiran Kumar Edara

Igor A Kostic

Kevin Christopher Miller

Andrew Bruce Dickinson

Upendra Bhalchandra Shevade

Aniket Deepak Divecha

David Carl Salyers

David Brian Lennon

Ian Roger Searle

Eric Wayne Schultze

Benjamin Wojtowicz

Christopher Ian Hendrie

Mahmoud Ali Abuelela

Mingxue Zhao

Benjamin David Strauss

Xiao Zhang

Steven Gerard Betten

Ralph William Flora

John D Bomkamp

George Wickersham

Tobias Lars-Olov Holgers

Deepak Mohan

Leslie Andrew Prock

Sahil Mansukhlal Koladiya

Joseph Elmar Magerramov

Stephen Callaghan

Ethan Joseph Torretta

Bret David Kiraly

Christopher Sam Goosen

Johannes Stephanus Jansen Van Rensburg

Disclosed are various embodiments for managing radio-based private networks. In one embodiment, a request is received from an organization for a provider to provision a radio-based private network to cover a site of the organization. Equipment is preconfigured to implement the radio-based private network before shipping the equipment to the organization. A core network is provisioned for the organization.

Managing radio-based private networks

Disclosed are various embodiments for customer-managed authentication in radio-based networks. In one embodiment, a radio-based network is managed for an organization. The radio-based network includes a radio access network and an associated core network. A request is received from the organization to configure one or more parameters affecting primary keys in the associated core network. The primary keys correspond to pre-shared keys of client devices permitted to access the radio-based network. Storage of the primary keys is customized in the associated core network based at least in part on the one or more parameters in response to the request.

Customer-managed authentication for radio-based networks

Disclosed are various embodiments for interfaces for creating radio-based private networks. In one embodiment, a request is received via an interface to create a radio-based private network for a customer. The request indicates a quantity of wireless devices that will connect to the radio-based private network. A quantity of radio units to serve the radio-based private network is determined based at least in part on the quantity of wireless devices. The radio units are preconfigured to implement a radio access network for the radio-based private network. A shipment is initiated to the customer of the radio units that have been preconfigured. Resources in a cloud provider network are provisioned to function as a core network for the radio-based private network.

Interfaces for creating radio-based private networks

Disclosed are various embodiments for on-demand application-driven network slicing. In one embodiment, first data is transmitted to or from a first application in a particular computing device using a first network slice in a communications network. A request is sent from the particular computing device to configure a second network slice in the communications network based at least in part on a requirement of a second application. Second data is transmitted to or from the second application using the second network slice.

On-demand application-driven network slicing

Disclosed are various embodiments for configurable security policies in radio-based networks. In one embodiment, a security event detection rule or a security event mitigation rule for a radio-based network is accessed. The radio-based network includes a radio access network and an associated core network. At least a portion of the radio-based network is operated by a cloud provider on behalf of an organization. A security event is detected based at least in part on the security event detection rule. At least one action is performed in response to the security event based at least in part on the security event mitigation rule.

Configurable security policies for radio-based networks

Disclosed are various embodiments for managing computing capacity in radio-based networks and associated core networks. In one embodiment, it is determined that a set of computing hardware implementing a radio-based network for a customer has an excess capacity. At least one action is implemented to reallocate the excess capacity of the computing hardware.

Managing computing capacity in radio-based networks

Disclosed are various embodiments for certificate-based authentication in radio-based networks. In one embodiment, a request for service from a radio-based network is received from a client device. The request for service includes a secure certificate. The radio-based network includes a radio access network and an associated core network. The authenticity of the secure certificate is validated based at least in part on a certificate signature in the secure certificate signed by a certificate authority. It is determined that an entity identified in the secure certificate is permitted to access the radio-based network. Radio-based network access is provided to the client device in response to determining that the entity is permitted to access the radio-based network.

Certificate-based authentication for radio-based networks

Disclosed are various embodiments that provide highly available data-processing network functions for radio-based networks. In one embodiment, a tunnel host consistently routes network traffic associated with a range of network addresses in a radio-based network to a first instance of a data-processing network function instead of a second instance of the data-processing network function. A problem with the first instance of the data-processing network function is then detected. Additional network traffic associated with the range of network addresses is redirected from the first instance of the data-processing network function to the second instance of the data-processing network function.

Highly available data-processing network functions for radio-based networks

Disclosed are various embodiments for on-demand application-driven network slicing. In one embodiment, it is determined that an application implemented in a particular computing device has an increased quality-of-service requirement in order to send or receive data via a communications network. The increased quality-of-service requirement is greater than an existing quality-of-service provided to the application by the communications network. The application sends a request that causes capacity in a network slice having the increased quality-of-service requirement in the communications network to be allocated for the application. The data is transmitted to or from the application using the network slice.

Disclosed are various embodiments for provisioning radio-based networks on demand. In one embodiment, a request to provision a radio-based network to cover an area is received. At least one radio access network operated by at least one communication service provider that covers the area is determined. A capacity is provisioned in the radio access network(s) for the radio-based network to cover the area. At least a portion of a core network is provisioned for the radio-based network in a cloud provider network.

Provisioning radio-based networks on demand

Virtual networks may be launched in a provider network with an initial IP address space (e.g., an IPv4 CIDR block). Methods are described that allow additional IP address spaces to be added to a virtual network. A new IP address space for a virtual network may be specified via an API. The specified space may be checked to insure that it does not overlap with IP spaces that are associated with the virtual network. If there are no overlaps, the space is added to the network, for example by adding the space to the network's route tables.

Resizing virtual private networks in provider network environments

Disclosed are various embodiments for automated deployment of radio-based networks. In one embodiment, a request to provision a radio-based network for a customer by a provider according to a network plan is received via an application programming interface (API) of a cloud provider network. An arrangement of a plurality of cells for the customer is determined. Respective antennas and radio units for individual ones of the plurality of cells are preconfigured to implement the radio-based network before shipping the respective antennas and the radio units to the customer.

Automated deployment of radio-based networks

Disclosed are various embodiments for managing radio-based private networks. In one embodiment, a cellular network comprises at least one cell that provides a radio-based private network coverage of a site of an organization. The system further comprises at least one computing device in a cloud provider network that implements one or more network functions for an associated core network of the radio-based private network.

Methods and apparatus that allow clients to connect resource instances to virtual networks in provider network environments via private IP. Via private IP linking methods and apparatus, a client of a provider network can establish private IP communications between the client's resource instances on the provider network and the client's resource instances provisioned in the client's virtual network via links from the private IP address space of the virtual network to the private IP address space of the provider network. The provider network client resource instances remain part of the client's provider network implementation and may thus also communicate with other resource instances on the provider network and/or with entities on external networks via public IP while communicating with the virtual network resource instances via private IP.

Growing community of inventors

Kirkland, WA, United States of America

Shane Ashley Hall