Verizon Patent and Licensing Inc.

Shanthala Kuravangi-Thammaiah

Lalit R Kotecha

Ye Huang

Jodi A Kelm

Sudhakar Reddy Patil

Violeta Cakulev

Jerry Steben

Vinod Kumar Choyi

Emerando M Delos Reyes

Ce Xu

Robert Avanes

Shweta Sinha

Lixia Yan

Miguel Angel Carames

Hans Raj Nahata

Matthew W Nelson

Yousif Targali

Hossein M Ahmadi

Raymond So

Brian Edmund Somes

Helen Osias Eglip

Muthukumar Retnasamy

Madhan Muralimanohar

Shiva Narayanabhatla

Scott Sheets

Harinder S Lakhian

Systems and methods for an advanced authorization framework that provides advanced network security and control of network hosted data. The framework provides computerized mechanisms that dictate a control of which data is accessible by particular network components, and which operations the privileged components are enabled to be performed. The framework can allow Network Function (NF) service consumers to discover and request network data that is specific to the operational status (e.g., PCF can request policy data). The framework provides an access scope of the NF service consumer that manages which hosted data is accessible, and to what degree it can be manipulated, if at all.

Computerized system and method for enhanced authorization of network data

In some implementations, a network device may store first data associated with a monitoring event, wherein the first data is associated with a subscriber and is stored as persistent data in a memory associated with the network device. The network device may receive second data associated with an occurrence of the monitoring event. The network device may determine that the second data indicates a change to the first data. The network device may provide the second data to a network exposure function (NEF) based on the second data indicating the change to the first data, wherein the second data is not provided to the NEF when the second data does not indicate the change to the first data.

Systems and methods for synchronizing subscriber data and events between networks

A network device executing a Network Exposure Function (NEF) receives, from a requestor, an on-demand Subscription Concealed Identifier (SUCI) deconcealment request associated with a mobile network subscriber. The NEF sends a second SUCI deconcealment request to a network function (NF) in the mobile network, where the second SUCI deconcealment request includes a SUCI associated with the mobile network subscriber. The NEF receives, from the NF, a SUCI deconcealment response that includes a Subscription Permanent Identifier (SUPI), associated with the mobile network subscriber, decrypted from the SUCI by the NF, and forwards the SUCI deconcealment response to the requestor.

On-demand subscription concealed identifier (SUCI) deconcealment for select applications

Systems and methods described herein enable premium session retainability for differentiation of services with respect to network function failures. A first network function of a core network obtains a session retention indicator during establishment of a protocol data unit (PDU) session. The first network function calculates a compute footprint for the first network function to support the PDU session and any other premium sessions currently serviced by the first network function. An orchestration device receives the compute footprint and provisions a second network function based on the compute footprint. The first network function and the second network function perform data replication of state information for the PDU session to allow premium sessions to continue with no or minimal interruption in the event of a failover scenario.

Systems and methods for premium session retainability in core networks

In some implementations, a policy control function (PCF) device may receive a PCF device key uniquely associated with a user equipment (UE). The PCF device may generate an integrity key and an encryption key based on the PCF device key and an identifier of the PCF device. The PCF device may generate, based on the integrity key, integrity data associated with policy information related to the UE. The PCF device may encrypt, based on the encryption key, the policy information to generate encrypted policy information. The PCF device may send, for the UE, a UE policy message indicating the integrity data, the encrypted policy information, and the identifier of the PCF device.

Systems and methods for secure policy messaging

A network device receives a network service request, for network service in a mobile network, from a user equipment device (UE), where the network service request includes a first service identifier (ID) and a subscription concealed ID (SUCI). The network device sends, to a Network Function (NF) in the mobile network, a SUCI deconcealment request that includes the SUCI. The network device receives, from the NF, a deconcealed Subscription Permanent Identifier (SUPI) decrypted from the SUCI. The network device verifies a validity of the first service ID for the deconcealed SUPI, and sends a service authorization response to the UE based on verification of the validity of the service ID from the UE.

Network exposure function (NEF) for SUCI-based UE-initiated service authorization

A device may receive network data for network devices of an IMS network, and may determine that the network devices are active. The device may identify a set of network devices associated with the network data satisfying an upper threshold, and may determine that the network data of the set of network devices indicates healthy redundant network devices and satisfies a lower redundancy threshold. The device may determine that network data of the healthy redundant network devices satisfies an upper redundancy threshold, and may calculate a variance for the network data of the set of network devices. The device may analyze the network data of the set of network devices based on the variance satisfying a variance threshold, and may identify a first increase or a second increase in traffic for a particular network device. The device may perform actions based on identifying the first increase or the second increase.

Systems and methods for monitoring network devices based on predictive analysis

In some implementations, a service communication proxy (SCP) network function device may receive, from a first network function device, a service request associated with a second network function device. The SCP network function device may transmit an access token request to a network repository function (NRF) network function device. The SCP network function device may receive, based on the access token request, an access token associated with the first network function device. The SCP network function device may transmit the service request to the second network function device, wherein the service request is transmitted to the second network function device with an indication of the access token.

Systems and methods for service authorization in a delegated discovery deployment

A method may include subscribing, by a first network repository function (NRF) located in a first segment of a network, to event information associated with a unified data management (UDM) function or a unified data repository (UDR) located in a second segment of the network. The method may also include receiving, by the first NRF and from a second NRF included in the second segment UDM or UDR information associated with the UDM or UDR located in the second segment of the network. The method may further include receiving, at the first NRF, a UDM or UDR discovery request from a network function (NF), wherein the UDM or UDR discovery request is associated with subscriber information stored in a UDM or UDR located in the second segment of the network, and responding, by the first NRF, to the discovery request.

Systems and methods for network function discovery in a segmented network

In some implementations, a network device (e.g., an Internet protocol multimedia subsystem (IMS) application server (IMS-AS) may receive, via a first communication interface, from a call session control function (CSCF) device, a request to register for an Internet protocol multimedia subsystem (IMS) service. The network device may provide via a second communication interface between the network device and a unified data management (UDM) device, and to the UDM device, a request for IMS service information associated with the IMS service. The network device may receive based on providing the request for IMS service information, via the second communication interface, and from the UDM device, IMS service information. The network device may cause, based on the IMS service information, the IMS service to be provided to a user device associated with the request to register for the IMS service.

Systems and methods for facilitating provisioning of internet protocol multimedia subsystem services

Systems and methods described herein enable distribution of a Charging Function group identifier ('CHF-Group-ID') and other CHF selection data to CHF consumers during Protocol Data Unit (PDU) session establishment in a 5G network. A Unified Data Repository (UDR) is provisioned with CHF-Group-ID details for each subscriber of the network. In one aspect, during PDU session establishment, CHF consumers obtain CHF-Group-ID information as part of a subscriber profile that is provided to all CHF consumers. No additional step or hop is needed for the CHF consumers to obtain the CHF-Group-ID. Thus, regionally segmented CHFs can be implemented without replication of data between CHFs in different regional segments and without additional signaling between network functions.

Systems and methods for regional segmentation and selection of charging function

A system described herein may receive a first request to establish, modify, or remove a plurality of communication sessions between a User Equipment ('UE') and a network. The system may output, to a policy element of the network (e.g., a Policy Control Function (“PCF”) or a Policy Charging and Rules Function (“PCRF”)), a second request for policies associated with the UE and the plurality of communication sessions, where the second request includes a plurality of communication session identifiers that are each associated with a particular one of the plurality of communication sessions. The system may receive and enforce the requested policy information when establishing, modifying, or removing the requested plurality of communication sessions based on the received particular policy information. The system may communicate with the policy element via an enhanced interface, such as an enhanced N7 interface or an enhanced Npcf interface.

Systems and methods for enhanced session management policy interface in a wireless network

In some implementations, a network device may receive a subscription request to subscribe to receive notifications associated with context data related to a registered session associated with a user equipment (UE). The registered session may be associated with a reauthorization timer that is associated with triggering the network device to provide a request for reauthorization of the registered session. The network device may provide, based on an expiration of the reauthorization timer, the request for reauthorization of the registered session.

Systems and methods for reauthorization request notification

A network device may receive, from a CSCF device, a request for registration data associated with an IMS service, and may provide, to the CSCF device, the registration data associated with the IMS service. The network device may receive, from the CSCF device, a request for location data associated with the IMS service, and may provide, to the CSCF device, the location data associated with the IMS service. The network device may receive, from the CSCF device, a request for authentication data associated with the IMS service, and may provide, to the CSCF device, the authentication data associated with the IMS service. The network device may receive, from the CSCF device, a request for subscriber profile data associated with the IMS service, and may provide, to the CSCF device, the subscriber profile data associated with the IMS service.

Systems and methods for supporting internet protocol multimedia subsystem services in fifth-generation networks

A system includes a Network Repository Function in a segment of a Fifth Generation (5G) network. The NRF is configured to receive a registration request from a Unified Data Repository (UDR). The request indicates that the UDR includes both UE-specific data and non-UE specific data. The NRF is further configured to: store registration information provided in the registration request; receive a request from a network function within the segment and send a response to the request based on the registration information.

Growing community of inventors

Keller, TX, United States of America

Shanthala Kuravangi-Thammaiah