Oracle International Corporation

Arris Enterprises LLC

Google Inc.

Virendra Singh

Jay Rajput

Ankit Srivastava

Amarnath Jayaramachar

Vinod Jatti

Murali S Sahasranaman

Lakshmi Arunkumar

Krishna Prasad Panje

Shashikiran Bhalachandra Mahalank

John Nirmal Mohan Raj

Sundar Murthy Tumuluru

Belmannu Harekrishna Acharya

Jeethendra Poral

Manu Shrot

Ravi Chandra Gaddam

Sista Sarada Sastry

George Gnana Jeyaraj

Zoran Maricevic

Rajiv Krishan

John Ulm

Sridhar Karuturi

Dinkar N Bhat

Kawal Sapra

Yeqing Wang

Doki Satish Kumar Patro

Swaroop Mahadeva

Aravind Soundararajan

Sairam Sudhir Pokkunuri

Robert Prestigiacomo

David Harold Grant

Veerabadhran Gopalakrishnan

S Subbarayan

Rajasekhar Babburi

Archan Kooli

Ajit Kumar

A method for offloading verification of consumer NF security certificates includes receiving, by an SCP, an SBI request message including a consumer NF security token signed by a consumer NF for authenticating the consumer NF to a producer NF. The method further includes obtaining, by the SCP and from the consumer NF security token, an identifier for a consumer NF security certificate or a copy of the consumer NF security certificate. The method further includes verifying, by the SCP and on behalf of the producer NF, the consumer NF security certificate. The method further includes performing, by the SCP and based on a verification result of the consumer NF security certificate, a network security action.

Methods, systems, and computer readable media for using service communication proxy (SCP) to offload verification of consumer network function (NF) security certificates

A method for mitigating network security attacks by linking NF discovery results to subsequent messages includes receiving, at a proxy NF, NF discovery messages. The method further includes reading, by the proxy NF, producer NF and consumer-NF-identifying parameters from the NF discovery messages. The method further includes creating, by the proxy NF, records in an NF-discovery-linked security database maintained by the proxy NF, wherein the records include the consumer NF and producer-NF-identifying parameters read from the NF discovery messages. The method further includes receiving, by the proxy NF, a service-based interface (SBI) request message. The method further includes screening, by the proxy NF and using the records in the NF-discovery-linked security database, the SBI request message. The method further includes performing, by the proxy NF, a network security action for the SBI request message based on results of the screening.

Methods, systems, and computer readable media for mitigating network security attacks by linking network function (NF) discovery results with subsequent messages at proxy NF

A method for checking end-to-end SBI message integrity includes receiving a first traffic feed from a first NF, the first traffic feed including copies of SBI messages transmitted from the first NF to an SCP. The method further includes receiving a second traffic feed from a second NF, the second traffic feed including copies of SBI messages received by the second NF from the SCP. The method further includes identifying, from the first traffic feed, a copy of a first SBI message transmitted by the first NF to the SCP. The method further includes identifying, from the second traffic feed, a copy of a second SBI message received by the second NF from the SCP and that is associated with the copy of the first SBI message. The method further includes performing, using the message copies, an end-to-end SBI message integrity check for the first SBI message.

Methods, systems, and computer readable media for providing end-to-end message integrity checking for service-based interface (SBI) messages communicated via a service communication proxy (SCP)

A method for multi-NF Retry-After header field value propagation includes receiving, by an SCP and from a consumer NF, an SBI request message and determining that the SBI request message requests a service that can be provided by first and second producer NFs. The method further includes forwarding the SBI request message to a first producer NF and receiving a response message indicating that the first producer NF failed to process the SBI request message and including a first Retry-After header field value. The method further includes forwarding the SBI request message to the second producer NF and receiving a response message from the second producer NF indicating that the second producer NF failed to process the SBI request message and including a second Retry-After header field value. The method further includes communicating, by the SCP and to the consumer NF, the first and second Retry-After header field values.

Methods, systems, and computer readable media for communicating retry-after header field values to consumer network functions (NFs) via service communication proxies (SCPs)

A method for improving inter-PLMN routing by implementing health checks for remote SEPPs includes storing a target SEPP database including records corresponding to remote SEPPs to which SBI request messages can be routed. The method further includes receiving SBI request messages destined for NFs in PLMNs protected by the remote SEPPs, using the target SEPP database to select and route messages to the remote SEPPs. The method further includes, for each of the remote SEPPs, sending a health check message to the remote SEPP, determining, based on a response or lack of a response to the health check message that the remote SEPP is unhealthy or unreachable, and, in response, removing a record for the remote SEPP from the target SEPP database or marking the record for the remote SEPP to indicate that the remote SEPP is unhealthy or unreachable.

Methods, systems, and computer readable media for improving inter-public land mobile network (PLMN) routing across security edge protection proxies (SEPPs) by implementing health checks for remote SEPPs

A method for prioritizing among alternate network function (NF) instances includes registering a first NF profile of a first NF instance with a first NF repository function (NRF), and defining, as part of the first NF profile, alternate NF instance information identifying a plurality of individual alternate NF instances to function as backups in response to unavailability of the first NF instance and specifying, for each alternate NF instance, a priority attribute value indicating a relative priority of the alternate NF instance with respect to the other alternate NF instances. The method further includes, at a first consumer NF or SCP, discovering, from the first NRF, the first NF profile of the first NF instance, detecting unavailability of the first NF instance, and, using the alternate NF instance information in the first NF profile to select and contact one of the alternate NF instances identified by the alternate NF instance information.

Methods, systems, and computer readable media for prioritizing among alternate network function (NF) instances

A system, method, and computer-readable recording media implementing detection of wireless home digital interface (WHDI) devices and the configuration of parental control for each. Authenticating through a set-top box (STB) at least one end device (ED), being a WHDI device, on a wireless network. The STB includes a database that provides access codes/set of pins for each ED that is added to the wireless network. When an identification of an ED is already in the database of the STB, and parental control is part of a content access request, a MAC address of the ED is authenticated and an access code/set of pins is obtained. The content access request is processed when the access code/set of pins obtained matches the access code/set of pins that is configured in the database of the STB.

System, method, and computer-readable recording medium of detecting wireless home digital interface devices and configuring parental control for each

A method for error information propagation from an SCP to a NF to support a circuit breaker design at the consumer NF includes receiving, at the SCP and from the consumer NF, a first SBI service request message. The method further includes attempting, by the SCP, to forward the first SBI service request to N producer NF instances. The method further includes detecting, by the SCP, an error involving the N producer NF instances. The method further includes performing, by the SCP, successful alternate routing of the first SBI service request message to an (N+1) th producer NF instance. The method further includes receiving, by the SCP, a success response message from the (N+1) th producer NF instance. The method further includes propagating, by the SCP, with the success response message and to the consumer NF, error information regarding the N producer NF instances.

Methods, systems, and computer readable media for supporting circuit breaker design pattern at consumer network function (NF)

A system and method for dynamically routing each of multiple independent content streams from a single media gateway appliance to specific output ports. The particular content and the identity of the port or ports to which it will be routed are defined by the contents of user commands received by media gateway appliance. The disclosed technology enables a single appliance to simultaneously route independent content to particular identified displays, thereby providing independent viewing experiences to multiple users.

System and method for dynamically configuring the output of a device

A method for selective inter-PLMN security handshake validation includes receiving, at a SEPP, a first inter-PLMN security handshake request message. The method further includes performing, by the SEPP and in an SEPP trust relationship database, a lookup to determine whether the first inter-PLMN security handshake request message originates from a trusted SEPP. The method further includes determining that the first inter-PLMN security handshake request message does not originate from a trusted SEPP, and, in response, performing, by the SEPP, an inter-PLMN security handshake validation procedure on the first inter-PLMN security handshake request message. The method further includes determining that the first inter-PLMN security handshake request message fails the inter-PLMN security handshake validation procedure, and, in response, performing a network protective operation.

Methods, systems, and computer readable media for selective inter-public land mobile network (PLMN) security handshake validation

A method and system are disclosed for capturing observations of customer-premise equipment or customer-provided equipment (CPE) devices. The method includes reporting a problem detect by a user during use of a customer-premise equipment or customer-provided equipment (CPE) device with one or more specific buttons on a remote controller; and entering the problem into a log with a timestamp.

Method and system for advanced customer bug reporting

A method for delegated authorization at a security edge protection proxy (SEPP) includes intercepting, from a consumer network function (NF) that does not support access token based authorization, a service based interface (SBI) service request for accessing a service provided by a producer NF that requires access token based authorization. The method further includes operating as an access token authorization client to obtain a first access token on behalf of the consumer NF. The method further includes using the first access token to enable the consumer NF to access the service provided by the first producer NF. The SEPP may also operate as an access token authorization server on behalf of an NRF that does not support access-token-based authorization.

Methods, systems, and computer readable media for delegated authorization at security edge protection proxy (SEPP)

A user environment can be enhanced by the interconnection of multiple network devices. A principal network device can connect to one or more auxiliary network devices. Based on one or more profile parameters, the principal network device can alter, change or modify an aspect or operation of one or more client devices in the user environment. The principal and auxiliary network devices can monitor, detect or sense environment parameters associated with a user or a location within the user environment so as to control one or more aspects or operation of the one or more client devices. The user environment can be controlled for any number of users and any number of client devices. Automatically or dynamically controlling the user environment based on profile parameters can enhance the experience of the user no matter where the user is within the user environment.

Interconnectivity of voice interface network devices to control aspects of a network environment

An apparatus, method, and computer-readable recording medium act upon a voice input and replay a portion of streaming media data. The smart media device has a controller, a display, a buffer for maintaining a portion of streaming media data, a speaker, a microphone, a non-transitory memory storing a program, and a communication interface configured to establish communication connections with a remote server. The smart media device receives streaming media data for output to the display and speaker from the remote server, stores a portion of the streaming media data within the buffer, receives a voice command via the input microphone while media content is output to the display and speaker, generates a data representation of dialog contained within the buffer, and outputs the data representation of dialog to the display.

Interactive smart media device

The subject matter described herein includes a method for reducing the likelihood of successful denial of service (DoS) attacks by validating overload control information (OCI) scope information against network function (NF) profile information obtained using target resource identification information. The method includes receiving a service based interface (SBI) request message, obtaining, from the SBI request message, target resource identification information, obtaining NF profile information using the target resource identification information and storing the NF profile information, receiving an SBI response message including overload control information and scope information for the overload control information, using the stored NF profile information to determine whether the scope information for the overload control information is valid, and, in response to determining that the scope information for the overload control information is invalid, rejecting the SBI response message.

Methods, systems, and computer readable media for reducing the likelihood of successful denial of service (DoS) attacks by validating overload control information (OCI) scope against network function (NF) profile information obtained using target resource identification information

Growing community of inventors

Bengaluru, India

Virendra Singh