Huawei Technologies Co., Limited

Cable Television Laboratories, Inc.

Avaya Inc.

Tao Wan

Peter J Ashwood-Smith

Guoli Yin

Xingjun Chu

Yapeng Wu

Mehdi Arashmid Akhavain Mohammadi

Yinfeng Henry Yu

Steven John Goeringer

Massimiliano Pala

Khaldoon Al-Zoubi

Darshak Thakore

William Carson McCormick

Bernard McKIBBEN

Wen Tong

Brian Alexander Scriber

Bernard Richard McKibben

Michael Glenn

Mark J Poletti

Yufei Wang

Ruoyu Sun

Martha Lurie Lyons

Simon Krauss

Chad Riland

Kyle Haefner

David Ward

Khaldoon Al Zoubi

Jay Taugher

William Mccormick

A network server is provided. The network server includes at least one processor in communication with at least one memory device. The network server is programmed to receive an access request originating from a user device, perform an authentication process for connecting with the user device, transmit, to the user device, a request message for a media access control (MAC) address of the user device, receive, from the user device, a response message including the MAC address of the user device, and determine whether to grant the access request based on the MAC address of the user device.

Systems and methods for obtaining permanent MAC addresses

A client-side electronic device includes a receiver, a processor, and a memory. The receiver communicates with a message server over a communication medium of a communication network. The memory stores computer-executable instructions, which, when executed by the processor, cause the device to receive, from the message server, a broadcast message, a timestamp associated with the broadcast message, and a first digital signature of the broadcast message and a second digital signature of the timestamp. The executed instruction further cause the device to verify an integrity of the broadcast message based the first or second digital signatures, determine a freshness of the broadcast message based on the received timestamp, calculate a trust state of the broadcast message based on the integrity verification and the freshness determination, and store the broadcast message in the memory along with the calculated trust state.

Systems and methods for protecting cellular network messages

Systems and methods for securing network communications between a first device and a second device over a service-based architecture, include receiving, at the first device, an access request including: a request to use a service of the service-based architecture, an authentication public key certificate associated with the second device or a proxy device therefore, a unique identifier of the second device, and a digital signature using the private key associated with the authentication public key certificate. The first device may verify the authentication public key certificate and generate an encrypted access response including an access token that allows access to the service, which is then transmitted back to the second device for further use in accessing the service-based architecture.

Systems and method for authentication and authorization in networks using service based architecture

A computer device is provided for HTTPS over Proxy (HoP). The computer device includes a transceiver configured for operable communication with at least one client device of the communication network via a secure connection with a server device, and a processor including a memory configured to store computer-executable instructions. When executed by the processor, the instructions cause the computer device to receive, from a client device via the communication network, a communication request message including a desired domain, determine a communication authentication token associated with the desired domain, transmit, to the client device, the communication authentication token associated with the desired domain, wherein the client device is configured to validate the communication authentication token, and continue communication with the client device if the client device validates the communication authentication token.

Systems and methods for HTTPS over proxy

Systems and methods for protecting network broadcast messages

A privacy proxy device for maintaining privacy on a communication network is provided. The privacy proxy device includes a transceiver, a processor, and a memory. The transceiver communicates with at least one user device and at least one device capable of recording over a communication medium of the communication network. The memory store computer-executable instructions, which, when executed by the processor, cause the privacy proxy device to store a plurality of privacy settings including one or more recording settings. The instructions further cause the privacy proxy device to receive a request to record from a recording device of the at least one device capable of recording. The instructions also cause the privacy proxy device to compare the request to record to the plurality of privacy settings. In addition, the instructions cause the privacy proxy device to generate and transmit a response to the request to record based on the comparison.

Systems and methods for network device advanced privacy

An intelligent border gateway protocol (BGP) device for monitoring and mitigating BGP propagation is provided. The intelligent BGP device includes a transceiver, a processor, and a memory. The transceiver communicates with at least one router over of a communication network. The memory store computer-executable instructions, which, when executed by the processor, cause the intelligent BGP device to store a plurality of historical networking information. The instructions further cause the intelligent BGP device to receive, from a router, a request to analyze an update message, including at least an autonomous system number and a prefix. The instructions also cause the intelligent BGP device to compare the update message to the plurality of historical networking information. In addition, the instructions cause the intelligent BGP device to generate and transmit a probability that the update message is valid based upon the comparison.

Systems and methods for mitigating border gateway protocol attacks in real-time

Systems and methods to authenticate a Non-Fifth Generation Capable (N5GC) device on a Residential Gateway (RG) include a wireline access network comprising the RG and a wireline-access gateway function (W-AGF). The RG connects to the W-AGF using a termination system (e.g., a Cable Modem Termination System (CMTS) and the like) to relay N5GC device messages received at the RG to the W-AGF and vice versa. During a registration/authentication procedure for the N5GC device, the W-AGF generates a Registration Request message on behalf of the N5GC device and sends the Registration Request message to an Access & Mobility Management Function (AMF) of a Fifth Generation (5G) core network. The Registration Request message includes an indication that the N5GC device lacks 5G capabilities (e.g., is N5GC). In response to the Registration Request message, the system causes the N5GC device to be authenticated at least partly in response to the Registration Request message.

Systems and methods to authenticate a non-fifth generation capable device on a residential gateway

A network device for maintaining a communication network is provided. The network device includes a transceiver configured for operable communication with at least one device. The network device also includes a processor including a memory configured to store computer-executable instructions. When executed by the processor the instructions cause the network device to store a plurality of network capabilities associated with a plurality of connectivity categories and a plurality of network settings, receive, from a first device, a connectivity advertisement including at least one connectivity category for the first device, retrieve a subset of the plurality of network capabilities based on the at least one connectivity category, determine one or more network settings for the network device based on the at least one connectivity category for the first device and the subset of network capabilities, and implement the one or more network setting on the network device.

Systems and methods for managing networks for improved device connectivity

A system for provisioning a device is provided. The system includes a computer device. The computer device is programmed to receive, from a user equipment, a connection request via a layer two connection. The computer device is also programmed to accept the connection request. The computer device is further programmed to receive, from the user equipment, a certificate request via the layer two connection. Additionally, the computer device is programmed to determine a destination for the certificate request, and to route the certificate request to the destination.

Systems and methods for subscriber certificate provisioning

Aspects of the invention pertain to methods and devices that allow user equipment (UE), such as for example wireless devices, to reconfigure their respective antennas in a dynamic manner to allow connection to additional or fewer logical networks, also being referred to as network slices. Changing the configuration of the array of antennas may include changing an existing configuration, or allocation, of the antennas that are currently communicating with a first number of logical networks into a different configuration of antennas for communicating with a second, different second number of logical networks. In some cases this may mean that antennas that were allocated for communicating with a primary logical network are re-allocated for communicating with a second logical network, with other antennas remaining in communication with the primary logical network.

Method for dynamically slicing mobile devices

Growing community of inventors

Ottawa, Canada

Tao Wan