Sprint Communications Comapny L.p.

T-mobile Innovations LLC

T-mobile Lnnovations LLC

William Michael Parsel

Lyle W Paczkowski

Matthew Carl Schlesener

Carl Joseph Persson

Trevor Daniel Shipley

John Eric Belser

Stephen James Bye

Lyle Thomas Bertz

Warren Bruce Cope

Tracy Lee Nelson

Robert L Spanel

Robin Dale Katzer

Arun Rajagopal

Brandon Christopher Annan

Stephen P O'Neal

Ashish Kumar Singh

Embodiments of the present disclosure are directed to systems and methods for artificial intelligence-based filtering of user devices on a wireless network. Upon a request from a user device to access a requested network service, a trustlet executed in a trusted execution environment of the user device is activated. The trustlet provides data associated with the user device. The data is used to distinguish normal from anomalous device behavior. Analysis of the data can be facilitated by an artificial intelligence module. Based on the analysis, the requested network service may be selectively authorized or prohibited. Additionally, the trustlet can be activated while a network service is being utilized by a user device to detect anomalous and potentially deceptive activity.

Network access based on AI filtering

A method of validating the contents of an electronic file. The method comprises requesting an electronic file by an application executing on a computer system by providing a multi-segment filename, wherein the multi-segment filename comprises a unique delimiter between each of the segments of the multi-segment filename and one of the segments of the multi-segment filename is a hash of a content of the electronic file referenced by the multi-segment filename, receiving by the application the electronic file referenced by the multi-segment filename, determining a hash over the content of the electronic file by the application, comparing by the application the hash determined by the application to the hash of the content stored in the one of the segments of the multi-segment filename, and, based on the two hashes agreeing, opening by the application the contents of the electronic file for use.

Use of semantically segmented filenames

Methods and systems are provided for identifying the true identity of senders of messages, for example based on hardware identifiers and other information, such as timestamps and/or register-transfer level licenses. In some cases, a hyper ledger provides a protocol for combining information such as hardware identifiers (for example silicon identification information) with other information and logic instructions to generate ledger identifications. Embodiments can be used to authorize transmission of messages, such as SMS or RCS messages, and to provide an archive or message information. In some cases, messages from certain domains can be aggregated for routing.

Ledger-based protocol to verify sources and transmit communications

A method for delivering a network slice to a user is disclosed. The method includes receiving communication from a network slice artifact comprising a multi-segment filename that includes a first segment comprising instructions for executing the network slice artifact, and a second segment comprising an identity of a network slice instantiable by the network slice artifact. The method also includes retrieving a set of executable instructions associated with the network slice from a data store of the network in response to receiving the communication from the network slice artifact, and communicating the set of executable instructions to the network slice artifact whereby the network slice artifact instantiates the network slice transforming the computer system into an endpoint node of the network slice. The method further includes completing the instantiation of the network slice in response to receiving the communication from the network slice artifact.

Methods for delivering network slices to a user

A method of restoring an image of a computer, including identifying, by a backup application executing on the computer, artifacts of the computer to back up, creating a mirror image of a hard drive of the computer, wherein the mirror image comprises the artifacts, establishing a local environment within the computer, communicating with a backup server, by the backup application, using the local environment in the computer, backing up the mirror image, by the backup application, to the backup server using the local environment, updating the mirror image, by the backup application, in the backup server in response to a change in the computer, constructing the local environment on the computer in response to an event, loading a program from the local environment, and restoring the computer, by the backup application, from the mirror image in the backup server based on the artifacts, the program, and the restore process.

Trusted backup of computer including operating system, firmware, and essential data

A system for preventing unauthorized replay of a software container is disclosed. The system comprises a container manager configured to receive a software container from a customer and send a software container validation request comprising a software container identity in response. The software container enables delivery of a network slice and comprises a plurality of elements. The system also comprises an anti-rollback platform that is configured to receive the validation request from the container manager, search a data store for the software container identity, compare the elements of the software container to corresponding elements stored in the data store as associated with the software container identity in response to locating the software container identity in the data store, and validate the software container based on the comparison. The container manager provides the network slice to the customer in response to the validation.

System and methods for preventing unauthorized replay of a software container

A method of boot-loading an electronic device. The method comprises boot-loading a trusted execution environment (TEE) in a trusted security zone of a processor of the electronic device, where the TEE boot-loads before a rich execution environment (REE) boot-loads, launching a boot-loader authentication application by the TEE in the trusted security zone, determining a signature value of an REE boot-loader by the boot-loader authentication application over the instructions of the REE boot-loader, comparing the signature value of the REE boot-loader to an authentication signature value stored in the TEE, and, in response to the signature value of the REE boot-loader not matching the authentication signature value, taking action by the boot-loader authentication application.

Trusted boot-loader authentication

A method for delivering a network slice to a user is disclosed. The method includes receiving communication from a network slice artifact comprising a multi-segment filename that includes a first segment comprising instructions for executing the network slice artifact, and a second segment comprising an identity of a network slice instantiable by the network slice artifact The method also includes retrieving a set of executable instructions associated with the network slice from a data store of the network in response to receiving the communication from the network slice artifact, and communicating the set of executable instructions to the network slice artifact whereby the network slice artifact instantiates the network slice transforming the computer system into an endpoint node of the network slice. The method further includes completing the instantiation of the network slice in response to receiving the communication from the network slice artifact.

A data connection recovery system is disclosed that includes a data connection management platform configured to monitor a status of a data connection of a wireless communication device with a wireless network. In response to a determination that the data connection is nonfunctional, the data connection management platform is configured to initiate a command to the wireless communication device via a control plane of the wireless network commanding the wireless communication device to switch to a different network slice in a user plane of the wireless network. The system also includes a remote device manager on the wireless communication device configured to receive the command and to initiate establishment of a new data connection with the wireless network via the different network slice in response to the command. The wireless communication device transmits data via the new data connection.

Data connection recovery for electronic devices in a wireless network

A method of configuring a computing service on a virtual network with a multi-segment filename. The method comprises requesting an encrypted file by an application executing on a computer by providing a hash filename extracted from a multi-segment filename, wherein the multi-segment filename comprises a unique delimiter between each of the segments of the multi-segment filename, wherein each segment comprises one of a hash filename, a plain text instruction, or plain text content. The application organizes a network slice with one or more VNFs from coded instructions in a segment of the multi-segment filename. The application constructs the computing service within the VNF by transferring one or more executables, the data file, and one or more artifacts decrypted from hash filenames saved within the multi-segment filename to the network slice.

VNF slice portability

A network interface controller (NIC). The NIC includes a first physical port, a second physical port, a non-transitory memory, a processor coupled to the first and second physical ports, and a data packet grooming application stored in the non-transitory memory. When executed by the processor, the application is configured to parse datagrams encapsulated within data link layer packets received by the first physical port, analyze the encapsulated datagrams based on a processing policy stored in the non-transitory memory, transmit some of the received data link layer packets via the second physical port to a server computer associated with the NIC, and transmit the remainder of the received data link layer packets via the first physical port to a second server computer.

Growing community of inventors

Overland Park, KS, United States of America

William Michael Parsel