AT&T Intellectual Property I, LP

Shraboni Jana

Rittwik Jana

Mostafa Tofighbakhsh

Deva-Datta Sharma

Bogdan Ungureanu

Kaustubh Joshi

Yaron Koral

Abhijeet Bhorkar

Dhruv Gupta

The concepts and technologies disclosed herein are directed to home gateway monitoring for vulnerable home Internet of Things ('IoT') devices. According to one aspect disclosed herein, a home gateway can scan a home network address space of a home network for an IoT device. The home gateway can perform a vulnerability test on the IoT device to determine whether the IoT device is vulnerable to a known vulnerability. In response to determining that the IoT device is vulnerable to the known vulnerability, the home gateway can change a device status of the IoT device to a vulnerable status and can change a permissions level of the IoT device to a quarantine permissions level.

Home gateway monitoring for vulnerable home internet of things devices

A distributed denial of service ('DDoS') attack profiler can determine a plurality of DDoS attack properties associated with a DDoS attack that utilizes an Internet of Things (“IoT”) device operating in communication with a home gateway. The DDoS attack profiler can create a DDoS attack profile and can provide a DDoS attack report based upon the DDoS attack profile to a correlator. An IoT device profiler can determine a plurality of IoT device properties and can create, based upon the plurality of IoT device properties, an IoT device profile. The IoT device profiler can create an anomaly report that identifies an anomaly associated with the IoT device. The correlator can correlate the DDoS attack report with the anomaly report to determine if a match exists. In response to determining that the match exists, the home gateway system can store the bot match record in a bot match repository.

Correlating compromised home internet of things devices with distributed denial of service attacks

Aspects of detecting and mitigating denial of service ('DoS') attacks over home gateway network address translation (“NAT”) are disclosed herein. According to one aspect disclosed herein, a home gateway system can detect that a NAT table is overpopulated. In response to detecting that the NAT table is overpopulated, the home gateway system can determine a mitigation action to be performed. The home gateway system can then perform the mitigation action in an attempt to mitigate an effect of the NAT table overpopulation.

Detecting and mitigating denial of service attacks over home gateway network address translation

The described technology is generally directed towards beam recovery for an antenna array. One or more recovery beams or recovery beam patterns can be defined for an antenna array, and in response to a failure, the antenna array can be restored to a defined recovery beam or recovery beam pattern. Techniques for defining recovery beams and recovery beam patterns for the antenna array, selecting a recovery beam or recovery beam pattern for the antenna array, and entering a selected recovery beam or recovery beam pattern by the antenna array are also disclosed.

Beam recovery for antenna array

Deployment of Internet-of-things devices can comprise sensors deployed in remote and hard to reach areas and locations. Due to lack of access to reliable power, these sensors cannot always be connected to a network and also have limited computation power. Consequently, a mechanism can be established to periodically access these sensors and collect data from them. The mechanism can utilize a mobile radio unit device to serve as data collectors. The mobile radio unit device can make use of an adaptive beam scanning to perform sensory data collection via the beam scanning operation. Additionally, the platform can also comprise a radio access network intelligent controller to manage the data collecting radio units by providing specific instructions and data collection methodologies.

Beam provisioning for sensory data collection for 5G or other next generation networks

Given real-time user equipment (UE) measurements from an open radio access network (O-RAN) infrastructure, a radio access network intelligent controller (RIC) can compute a UE distribution context space. The O-RAN can comprise gNode-Bs, centralized units, and distributed units. The UE distribution context space computations can be performed by a UE context correlator module of the RIC. The UE context correlator module can also utilize a pre-defined UE context model, which contains definitions and values for various UE context attributes to generate adaptive beam-forming patterns.

Adaptive beam sweeping for 5G or other next generation network

An intelligent determination of a set of candidate handover-beams for a radio access network (RAN) can be facilitated by a RAN intelligent controller (RIC). The RIC can obtain data associated with user equipment devices and their current state, historical patterns, and a current state of serving network node devices and neighboring network node devices. Based on the obtained data, a handover procedure can be optimized by the user equipment by estimating the signal quality from a source cell and neighboring cells. Additionally, the user equipment can send measurement reports to the network to identify and quantify the quality of reference signals transmitted by the network node devices.

Candidate beam selection and control for 5G or other next generation network

Precoding matrix computations for a large number of antenna arrays can be used to generate efficiencies within a wireless network. Utilizing network topology and context data in conjunction with known available network resources and mobile device measurements can facilitate gains in power and spectral efficiency and reduction in computation complexity posed by current procedures. To take advantage of multiple paths, the precoding matrix can be known at the radio units for each mobile device.

Context-based precoding matrix computations for radio access network for 5G or other next generation network

An example method includes estimating a number of people expected to attend a non-ticketed event, based on electronic data including social media postings, estimating a per-person amount of network traffic expected to be generated on a communications network during the non-ticketed event, based at least in part on historical per-person network traffic statistics for a historical event of a similar type to the non-ticketed event, calculating an amount of total network traffic expected to be generated during the non-ticketed event, based at least on the number of people expected to attend the non-ticketed event and the per-person amount of network traffic, and implementing a modification to an infrastructure of the communications network in a geographic location of the non-ticketed event, based at least in part on the amount of total network traffic expected to be generated during the non-ticketed event.

Network traffic forecasting for non-ticketed events

A radio access network intelligent controller (RIC) platform can enable various highly secure, reliable, fast communications for first responders during emergency situations. Self-organizing service chaining of public safety edge applications, can be enabled in both time and space when triggered by an emergency situation. The RIC platform can perform reassignment of resources and network slices according to historical data and situational analysis. The RIC platform can select and provide the best frequencies and resources to ensure that first responders have communication services that do not get affected by anomalies such as network load, congestion, and/or related degradations.

Beam as a service for 5G or other next generation network

The described technology is generally directed towards an intent design tool for communication networks. A graphical user interface provided by the intent design tool can include a collection of communication network topology elements and a communication network intent topology design area. Selected communication network topology elements can be placed into the communication network intent topology design area, and connection types between the selected communication network topology elements can also be specified in the communication network intent topology design area, in order to define custom communication network intent topologies.

Intent design tool for wireless communication networks

A radio access network intelligent controller (RIC) platform can enable various highly secure, reliable, fast communications for first responders during emergency situations. The RIC can utilize radio access network (RAN) resources, for example, beam management procedures to facilitate the use of virtual zones. The virtual zones can be generated dynamically by leveraging collaborating mobile devices from various zones. The virtual zones can be distributed entities that span across real-physical zones but are managed as a single logical entity under a common set of policies. The creation and management of virtual zones can be performed by a group of corresponding RICs as a distributed system.

Real-time network provisioning for distributed virtual zones of collaborative mobile devices for 5G or other next generation network

In 5G, a high degree of automated management and control mechanisms can coordinate various radios in relatively close proximity, via a zone, or in a cluster. Reactive automation coupled with hybrid algorithms utilizing internal radio states and known or expected external events or entities can enable a smart proactive 5G automation. The smart proactive 5G automation can minimize signaling between the radios and provide a hybrid distributed and centralized model utilizing a radio access network intelligent controller to increase spectrum efficiencies. Additionally, the smart proactive 5G automation can provide new service opportunities that can be offered by service providers.

Coordinated beam forming for 5G or other next generation network

The described technology is generally directed towards network slice management. A mobile communications network can comprise multiple sub-networks, namely, as an access network, a transport network, and a core network. Access network resources can be managed according to the techniques provided herein to meet service level agreement (SLA) commitments associated with network slices. Furthermore, resources of any sub-network can be managed in a manner that accounts for constraints imposed by the other sub-networks.

Growing community of inventors

Danville, CA, United States of America

Shraboni Jana