Secondary carrier and cellular network integration

Abstract

Various configurations are presented herein for operating a cellular network with advanced secondary carrier privacy. A first set of user equipment can communicate with the cellular network using a first radio unit and a first radio spectrum. A second set of user equipment can communicate with the cellular network using a second radio unit and a second radio spectrum. The second radio unit can be operated by a secondary carrier different from the cellular network carrier. The second radio unit can encrypt the second communication so that the cellular network cannot decrypt the second communication. The cellular network can route the encrypted second communication of the second cellular network slice from the second radio unit to a data center operated by a secondary carrier separate and different from the cellular network.

Description

[Technical Field]

[0001] Cross-reference to related applications This application claims priority to U.S. Provisional Patent Application No. 63 / 104,981, entitled "DYNAMIC SPECTRUM SHARING," filed October 23, 2020, which claims the benefit of U.S. Non-Provisional Patent Application No. 17 / 192,176, entitled "SECONDARY OPERATOR INTEGRATION WITH A CELLULAR NETWORK," filed May 4, 2021, the disclosure of which is incorporated herein by reference in its entirety for all purposes.

[0002] This application is related to U.S. patent application Ser. No. 17 / 192,182, entitled "DYNAMIC CELLULAR NETWORK SPECTRUM SHARING," filed on even date herewith, the disclosure of which is incorporated herein by reference in its entirety for all purposes. [Background technology]

[0003] In 4G Long-Term Evolution (LTE) cellular networks and earlier generation cellular networks, it was difficult to allocate a defined amount of network resources to a particular entity or group of user equipment. However, in later generation cellular networks, such as 5G New Radio (NR) cellular networks, it is possible to define network slices. A network slice can effectively function as a virtual network with its own logical topology, security rules, and performance characteristics that operate within the constraints of the underlying physical network. Summary of the Invention

[0004] Various embodiments are described with respect to a cellular network with advanced secondary carrier privacy. In some embodiments, a cellular network with advanced secondary carrier privacy is described. The network may include a first radio unit capable of communicating with a first plurality of user equipment using a first radio spectrum. The first communication between the first radio unit and the cellular network may be implemented as part of a first cellular network slice. The first radio unit may be operated by a cellular network carrier. The network may include a second radio unit capable of communicating with a second plurality of user equipment using a second radio spectrum. The second radio unit may be operated by a secondary carrier different from the cellular network carrier. The second communication between the second radio unit and the cellular network may be implemented as part of a second cellular network slice. The second radio unit may encrypt the second communication such that the cellular network cannot decrypt the second communication. The network may include a cellular access network of the cellular network that may route a second communication encrypted by the second radio unit and conducted as part of the second cellular network slice to a data center operated by a secondary carrier and separate from the cellular network.

[0005] Embodiments of such a network may include one or more of the following features: a distributed unit (DU) of a cellular access network capable of communicating with the first radio unit and the second radio unit; the DU may be operated by a cellular network carrier; the DU may route the first communication and the second communication to a central unit (CU) of the cellular network; the CU may be operated by the cellular network carrier; the CU may route the second communication to a data center of a secondary carrier that may be separate and distinct from the cellular network; the second radio unit may further transmit a third communication between the second radio unit and the cellular network as part of a third cellular network slice; the cellular network may route the second communication and the third communication to separate components of the same network that may be operated by a secondary carrier distinct from the cellular network; the DU may route the first communication to a CU of the cellular network operated by the cellular network carrier and the second communication to a data center that may be operated by a secondary carrier and distinct from the cellular network. The cellular network may include a 5G New Radio (NR) cellular core network. The network may further include user equipment of a second plurality of user equipment. The user equipment of the second plurality of user equipment may be configured to switch communication with either the first radio unit or the second radio unit based on a command. The first radio unit may use a different cellular network radio access technology (RAT) for communication with the first plurality of user equipment than for communication with the second radio unit and the second plurality of user equipment.

[0006] Some embodiments describe a method for operating a cellular network with advanced secondary carrier privacy. The method may include communicating with a first set of user equipment using a first radio unit and a first radio spectrum. The first communication between the first radio unit and the cellular network may be implemented as part of a first cellular network slice. The first radio unit may be operated by a cellular network carrier. The method may include communicating with a second set of user equipment using a second radio unit and a second radio spectrum. The second radio unit may be operated by a secondary carrier different from the cellular network carrier. The second communication between the second radio unit and the cellular network may be implemented as part of a second cellular network slice. The second radio unit may encrypt the second communication such that the cellular network cannot decrypt the second communication. The method may include routing, by the cellular network, the encrypted second communication of the second cellular network slice from the second radio unit to a data center operated by the secondary carrier. The data center can be separate from the cellular network.

[0007] Embodiments of such a method may include one or more of the following features: the first communication and the encrypted second communication may be routed through a distributed unit (DU) in communication with the first radio unit and the second radio unit. The DU may be operated by a cellular network carrier. The method may further include routing, by the DU, the first communication and the second communication to a central unit (CU) of the cellular network. The CU may be operated by the cellular network carrier. The method may further include routing, by the CU, the second communication to a data center of a secondary carrier that may be separate and different from the cellular network. The method may further include transmitting, by the second radio unit, the third communication over the cellular network as part of a third cellular network slice. The method may further include routing, by the cellular network, the second communication and the third communication to separate components of the same network that may be operated by a secondary carrier different from the cellular network. The method may further include routing, by the DU, the first communication to a CU of a cellular network operated by a cellular network carrier and the second communication to a data center that may be operated by a secondary carrier and that may be separate from the cellular network. The cellular network may be a 5G New Radio (NR) cellular network. The method may further include switching, by user equipment of the second plurality of user equipment, communication between the first radio unit and the second radio unit based on the command. The first radio unit may use a different cellular network radio access technology (RAT) for communication with the first plurality of user equipment than for communication with the second radio unit and the second plurality of user equipment.

[0008] The nature and advantages of various embodiments can be further understood by reference to the following drawings. In the accompanying drawings, similar components or features may have the same reference label. Furthermore, various components of the same type may be distinguished by following the reference label with a dash and a second label that distinguishes between the similar components. When only a first reference label is used in this specification, the description applies to any one of the similar components having the same first reference label, regardless of the second reference label. [Brief explanation of the drawings]

[0009] [Figure 1] FIG. 1 is a block diagram of an embodiment of a cellular network. [Figure 2] FIG. 1 is a block diagram of an embodiment of a cellular network with advanced secondary carrier control. [Figure 3] FIG. 1 is a block diagram of another embodiment of a cellular network with advanced secondary carrier control. [Figure 4] FIG. 1 is a diagram of an embodiment of a method for operating a cellular network with advanced secondary carrier control. [Figure 5] 1 is a diagram of an embodiment of a method for operating a cellular network using dynamic secondary spectrum sharing. [Figure 6] FIG. 1 is a diagram of an embodiment of a method for operating a cellular network with advanced secondary carrier control over multiple cellular network slices. DETAILED DESCRIPTION OF THE INVENTION

[0010] Using cellular network slicing, a secondary carrier, distinct from the network carrier of the cellular network, can have the autonomy to control a defined cellular network slice. As detailed herein, the secondary carrier can use a dedicated radio unit (RU) that communicates through components of the network carrier's cellular network to communicate with the secondary carrier's network. Such a configuration gives the secondary carrier autonomy and allows it to effectively operate a (virtual) cellular network without having to fully build out its own cellular network.

[0011] The use of dedicated RUs gives the secondary operator considerable autonomy over how it operates its network slice. As one possible example, the dedicated RU can perform upstream (from the UE to the cellular network) payload encryption and / or downstream (from the cellular network to the UE) decryption. As communications are routed through the cellular network to the secondary operator's network and the secondary operator's RU, the communications can remain encrypted except to the extent required for data routing. Thus, none of the secondary operator's data is exposed on the cellular network or to the cellular network's operator. Furthermore, the cellular network does not even need to care about the type of encryption or scrambling used for the secondary operator's payload, since encryption and decryption are handled by the secondary operator's network and either the secondary operator's RU or UE.

[0012] Such a configuration may be particularly useful for secondary carriers requiring a high level of security or privacy. As an example, the military may want to have its own virtual cellular network without having to build out a full cellular network. The military may install RUs in desired areas that use various components of a commercial carrier's cellular network, as detailed herein. The military may have a defined cellular network slice, where communications conducted using the cellular network are routed between the military network and the military RUs via the cellular network. The military network may fully manage UE prioritization, UE bandwidth allocation, cellular services provided, encryption, and UE configuration within the military-dedicated cellular network slice.

[0013] In some embodiments, a RU operated by a secondary carrier may be used in conjunction with two (or more) cellular network slices. Depending on the particular cellular network slice being used to communicate with the UE, the cellular network carrier's cellular network may route data differently to the secondary carrier's network. The secondary carrier may further be permitted to manage which cellular network slice the UE is assigned to. For example, one cellular network slice may be used for highly secure communications, while a second cellular network slice is used for relatively less secure communications. Additionally or alternatively, the UE may connect to a cellular network slice operated by the cellular network carrier. The instruction to use this cellular network slice may be made by the UE's carrier, or a command may be sent to the UE by the secondary carrier's network.

[0014] In some situations, a secondary carrier may not need to use all of the spectrum and / or bandwidth of a cellular network slice allocated to it in a given geographic area at a particular time. A secondary carrier may temporarily release resources, such as spectrum, bandwidth, and / or processing resources, for acceptable use by another cellular network slice. For example, a secondary carrier may have rights to a particular spectrum in a given area. If the secondary carrier does not need that spectrum, the secondary carrier's network can send a command to the cellular network carrier's cellular network indicating that the spectrum is available, at least temporarily. While available, the cellular network carrier may change the bandwidth portion (BWP) definition (or active BWP definition) used for the cellular network slice it operates to utilize the spectrum available from the secondary carrier. When the secondary carrier reclaims the spectrum, the cellular network carrier can again change the BWP definition or active BWP profile for the UE so that the spectrum is again reserved for the secondary carrier. Such a configuration request allows the secondary carrier to maintain the ability to use its reserved spectrum and / or bandwidth, but makes this spectrum and / or bandwidth available for use by another carrier when the spectrum and / or bandwidth is not needed by the secondary carrier.

[0015] Further details regarding these and other embodiments are provided in conjunction with the drawings. FIG. 1 is a block diagram of an embodiment of a cellular network system 100. The cellular network system 100 may be operated by a cellular network operator (also referred to as a cellular network provider). A cellular network operator may be a commercial entity that allows subscribers to access the cellular network using UEs in exchange for a subscription or on a fixed fee basis. The cellular network 110 may include both a cellular access network and a cellular core network. The cellular network 110 may include: a national data center (NDC) 115; a central unit (CU) 120; a distributed unit (DU) 125; and a radio unit (RU) 130. The cellular access network may be defined as including the RU 130, the DU 125, and the CU 120. The cellular core network may be defined as including the NDC 115. The cellular network 110 may represent a 5G New Radio (NR) cellular network, or more specifically, a "standalone" 5G cellular network. Accordingly, the cellular core network may be a 5G Core (5GC) network. The cellular network 110 may operate according to an Open Radio Access Network (O-RAN) cloud-native architecture, which enables mobile fronthaul, midhaul, and backhaul to be performed using cloud computing principles. Thus, rather than using specialized hardware to perform access network and core network functionality, more general-purpose server systems running specialized software or firmware are used to perform the functions of the cellular network 110. Additionally or alternatively, the cellular network 110 may be native 5G according to 3GPP 5G standards.

[0016] An RU, such as RU 130-1, serves as an interface between the cellular network 110 and wireless radio-based communications involving UE 140. RU 130-1 handles transmission and reception of wireless communications with UE 140 via one or more antennas located on communication tower 135-1. RU 130-1 may be located on or near communication tower 135-1. RU 130-1 handles transmission and reception of data according to a particular wireless communication protocol, such as 3G, 4G LTE, 5G NR, or some future technology, such as 6G or beyond. As shown in FIG. 1 , RU 130-1 is connected to communication tower 135-1 using one or more antennas located on communication tower 135-1 and currently communicates with UE 140. Cellular network traffic for UE 140 may occur on a particular cellular network slice between RU 130-1 and DU 125-1. RU 130-2 communicates with other UEs via one or more antennas on communication tower 135-2. In some embodiments, structures other than communication towers, such as buildings and bridges, may be used to mount antennas. Group 141 indicates that UE 140 communicates over cellular network 110 using a single cellular network slice.

[0017] Multiple RUs can communicate with a single DU, such as DU 125-1. DUs, such as DU 125-1, function as logical nodes in a cellular network between RUs and CUs, such as CU 120-1. DU 125-1 can perform a variety of functions that can be customized based on the specific cellular network. For example, DU 125-1 can operate aspects of the Radio Link Control (RLC) layer, Medium Access Control (MAC) layer, and physical (PHY) layer in conjunction with connected DUs and CUs. DU 125-2 can also communicate with CU 120-1. It should be noted that multiple RUs communicating with a single DU may be made by different manufacturers. Because cellular networks operate according to O-RAN, cellular networks can tolerate RUs of different makes / models. Therefore, secondary carriers are not limited to using RUs of a specific make / model.

[0018] The CU 120-1 may function to operate different layers than the DU 125. Again, the specific functions and layers provided by the CU 120 may be customized based on the particular cellular network. For example, the CU 120 may operate the Radio Resource Control (RRC) layer and the Packet Data Convergence Protocol (PDCP) layer. From another perspective, a gNodeB may include one CU and at least one DU. A CU may also be referred to as a local data center of the cellular network 110. In the hierarchical structure of the cellular network, a CU may be located between the DU 125 and a national or centralized data center. The RU 130, the DU 125, and the CU 120 may be connected using high-speed optical fiber communications.

[0019] The CU 120 may communicate with the NDC 115 of the cellular network 110. Depending on the architecture of the cellular network 110, various other networks may be accessed via the NDC 115, such as the Internet 117 and / or network 119, which may be some other public or private network. In other embodiments, such networks may be accessible via the CU 120 and / or the DU 125.

[0020] The UE 140 may represent various types of devices capable of communicating using a cellular network. For example, a smartphone, a cellular modem, a wireless sensor device, an access point (AP), and a gaming device may function as the UE 140. Collectively, the UE 140 may be allocated to a particular cellular network slice. Thus, the fronthaul (data transmission between the RU 130 and the DU 125), the midhaul (data transmission between the DU 125 and the CU 120), and the backhaul (data transmission between the CU 120 and the NDC 115) may be implemented by the cellular network 110 using the cellular network slice to which the UE 140 is allocated. If other cellular network slices exist, these physical resources may be reserved for UEs associated with the other cellular network slices.

[0021] 1 shows a simplified embodiment of a cellular network. It should be understood that in practice a much more extensive network may exist with numerous communication towers, RUs 130, DUs 125, and CUs 120. The cellular network may be a native 5G NR cellular network, using 5G NR for both communication with the UEs and for the cellular network 110. However, other cellular technologies are possible.

[0022] While Figure 1 illustrates a cellular network operated by a single cellular network operator, Figure 2 illustrates a secondary operator that relies on the cellular network operator's access and / or core network for at least some functionality and communications. Figure 2 is a block diagram of an embodiment of a cellular network 200 with advanced secondary operator control. Cellular network 200 is an embodiment of cellular network system 100 in which secondary operators are allocated cellular network slices on the cellular network.

[0023] In the cellular network 200, the secondary carrier maintains its own RUs 230 and other network components, such as a local data center (LDC) 210 and a national data center (NDC) 205, as part of the secondary carrier network 211. Notably, the secondary carrier does not operate all of the components necessary to operate an independent cellular network. In the embodiment shown in FIG. 2, the secondary carrier does not operate its own DUs or CUs.

[0024] 2, the secondary operator does not operate its own DUs or CUs, but it maintains full operational control of the LDC 210, NDC 205, and RU 230 that are part of the secondary operator network 211. By having control of its own RU 230, the secondary operator has control over UE prioritization, radio access technology (RAT), bandwidth allocation, BWP definition for its spectrum, data encryption, and more as discussed below.

[0025] The LDC 210 of the secondary carrier can communicate (e.g., via an optical fiber link) with components of the cellular network carrier's cellular network. For simplicity, the secondary carrier and the cellular network carrier are separate entities. For example, the cellular network carrier may be a commercial entity, and the secondary carrier may be a separate commercial entity (e.g., a casino) or government entity (e.g., the military). In the embodiment of FIG. 2, the LDC 210 communicates with the CU 120-1. The secondary carrier has a designated cellular network slice on the cellular network 110. Thus, a specific amount of the cellular network 110's physical communication and processing resources may be reserved for the secondary carrier. The secondary carrier can collate, manage, and interpret operational and security logs on its designated network slice. Having a designated network slice enables the secondary carrier to perform advanced analytics, including behavioral pattern analysis, including artificial intelligence (AI)-based analysis, on its communication traffic. In the secondary operator's cellular network slice, the secondary operator may implement a variety of security controls specific to the secondary operator, including, but not limited to: UE protection; Denial of Service (DoS) protection; Identity and access management; Behavioral anomaly detection; Endpoint protection; Certificate lifecycle management; Firewall / Gateway; Container security; Zero Trust Architecture; Mutual authentication; Network Function Communication management; and an integrated security incident and event management platform.

[0026] The RU 230 may be installed, maintained, and / or configured by the secondary carrier. The RU 230 may be installed on the same communication tower or structure as the RU 130-1, or on a different communication tower or structure. The RU 230 may communicate on a different frequency than the RU 130-1. In some embodiments, at least some of the frequencies that the RU 230 uses to communicate with UEs are the same as the frequencies that the RU 130-1 can use to communicate with the UE 140. The RU 230 communicates with the UE 240 associated with the secondary carrier. The secondary carrier has complete operational control over the authentication of the UE 240 to access the secondary carrier's network via the RU 230 and the LDC 210.

[0027] Via the RU 230, the secondary carrier's NDC 205 and / or LDC 210 can be used to configure characteristics of how communications with the UE 240 are handled. Specifically, the secondary carrier can control the priority of each of the UEs 240, the amount of bandwidth allocated to each of the UEs 240, and / or the cellular services provided to each of the UEs 240. The secondary carrier can control and optimize the use of radio resources allocated to the UEs 240 based on the services supported and optimized for each application enabled by the secondary carrier. The optimization can take into account any number of variables, including, but not limited to, application performance, time of day, and the geographic location of the UE 240.

[0028] Notably, the RU 230 of the secondary carrier cannot communicate directly with the LDC 210. Rather, the secondary carrier relies, at least in part, on the access network and / or core network of the cellular network carrier. The RU 230 communicates with the DU 125-1, which in turn communicates with the CU 120-1. The DU 125-1 and the CU 120-1 can implement appropriate processing and management of data required for the RU 230, similar to that implemented for the RU 130-1. However, by virtue of the UE 240 operating as part of a second cellular network slice (as indicated by group 241) that is separate from the cellular network slice used by the cellular network to serve group 141, the CU 120-1 routes all cellular network traffic belonging to these UEs to the LDC 210.

[0029] For UEs operating as part of group 241 allocated to the second cellular network slice, packet-based communications between RU 230, DU 125-1, and CU 120-1 may be partially encrypted. Data and / or voice information may be encrypted / decrypted by UE 240 and / or by RU 230. Neither the DU, CU, nor any other component of the cellular network 110 can decrypt this information. RU 230 may leave addressing and / or other information other than the data payload unencrypted to allow the encrypted data to be routed by the cellular network to LDC 210. LDC 210 and / or NDC 205 may be configured to perform encryption / decryption. Thus, secondary carrier data can remain encrypted while being transmitted and, to some extent, while being processed by the cellular network 110. Arrow 245 represents that data payloads can be transmitted between RU 230 and LDC 210 in encrypted form without being decrypted. In other embodiments, the data payload may be transmitted in encrypted form between the LDC 210 and the UE 240 as part of a cellular network slice without any decryption therebetween.

[0030] Not only is end-to-end encryption possible between the RU 230 (or UE 240) and the LDC 210, but the particular radio access technology (RAT) used by the RU 230 remains independent of the RU 130 and the rest of the cellular network 110. Thus, the secondary carrier may independently use GSM, 3G, 4G LTE, 5G NR, 6G, or some other or future RAT that is different from the RAT used by the RU 130-1 and the rest of the cellular network 110.

[0031] As shown, CU 120-1 communicates with LDC 210. This architecture is shown by way of example. One or more connections may additionally or alternatively be provided between NDC 115 and NDC 205, or between DU 125-1 and LDC 210.

[0032] A secondary carrier may have a dedicated cellular network slice on the cellular network 110, such that a defined amount of hardware resources of the DUs 125 and CUs 120, and / or communication resources between the DUs 125 and CUs 120, are reserved for the secondary carrier. If such processing / network resources are not needed, the resources may be released back to the original cellular network 110 to be used for one or more other cellular network slices. For example, if the secondary carrier is the military, full use of its cellular network slice may only be needed occasionally. If not needed, the processing / network resources may be used by the cellular network carrier to improve performance for its commercial customers. In some embodiments, a specific instruction or “lease” for the reserved hardware resources of the secondary carrier's cellular network slice must be received from the secondary carrier by the cellular network 110 to permit use of the resources in conjunction with another cellular network slice.

[0033] Additionally or alternatively, spectrum reserved for use by the RU 230 may be released by the secondary carrier if it is not needed. This spectrum may be used by the RU 130-1 of the cellular network carrier for commercial purposes. The NDC 205 or LDC 210 may provide a lease on spectrum to components of the cellular network 110 for spectrum not needed by the RU 230. (Notably, in another geographic area away from the RU 230, the secondary carrier may still be using this spectrum.) The cellular network may then be authorized to use this spectrum until the time indicated in the lease. The RU 130-1 transmits a bandwidth portion (BWP) definition to the UE 140 indicating the spectrum made available through the lease. In some embodiments, the LDC 210 and / or NDC 205 are authorized to reclaim (or cancel the lease) at any time.

[0034] In some embodiments, additional cellular network components may be operated by the secondary carrier. For example, in addition to RU 230, the secondary carrier may maintain its own DU. Communication traffic for the secondary carrier's cellular network slice may be processed using the secondary carrier's DU instead of DU 125-1. The secondary carrier's DU may remain in communication with CU 120-1 and may still rely on CU 120-1 to interface with components of the secondary carrier's network. Thus, for example, if the secondary carrier uses its own DU, it may rely on the cellular network carrier's cellular network for midhaul and backhaul functions.

[0035] Although additional components of the secondary carrier's network are not shown, it should be understood that routing and transmission of communications from UE 240 can extend beyond LDC 210 and / or NDC 205. For example, communications with UE 240 may be routed to another UE of the secondary carrier that is in communication with LDC 210 or NDC 205 via another CU, DU, or RU. Furthermore, LDC 210 and / or NDC 205 may be connected to a public (e.g., Internet) or private network that can exchange data with UE 240.

[0036] FIG. 3 is a block diagram of another embodiment of a cellular network 300 with advanced secondary carrier control. Cellular network 300 may represent a more detailed embodiment of cellular network 200. In cellular network 300, RU 230, operated by a secondary carrier, serves two cellular network slices. Although each of these cellular network slices belongs to the secondary carrier, cellular network 110 treats each cellular network slice independently and differently. Group 241 represents UEs 240-1, 240-3, and 342 operating on a first cellular network slice of the secondary carrier, while group 341 represents UE 340 operating on a second cellular network slice of the secondary carrier. Each of these cellular network slices may be associated with a different amount of bandwidth and processing resources of cellular network 110 (or the slices may be allocated equal shares of the available physical resources).

[0037] Because group 241 is on a first cellular network slice of a secondary carrier, cellular network 110 routes communications differently. Arrow 245 represents upstream and downstream communications for the first cellular network slice being routed between RU 230 and LDC 210 of the secondary carrier via DU 125-1. In contrast, the second cellular network slice is routed differently. Arrow 345 represents upstream and downstream communications for the second cellular network slice being routed between RU 230 and NDC 205 of the secondary carrier via DU 125-1, CU 120-1, and NDC 115. These two possible routes are merely examples of how different cellular network slices of a secondary carrier may be routed to different portions of the secondary carrier's network through various nodes of the cellular network operated by the cellular network provider.

[0038] In addition to being routed differently, other characteristics of the first and second cellular network slices may be managed differently by the secondary carrier. Different types of cryptography may be used for the first and second cellular network slices. In one of the cellular network slices, encryption / decryption may be handled by the UE, while in the other cellular network slice, encryption / decryption may be handled by the RU 230.

[0039] The NDC 205 is illustrated in Figure 3 as acting as a gateway to the network 319 and the Internet 117. UEs may be allocated to a second cellular network slice based on the UE 340 being used to access the Internet 117 and / or the network 319.

[0040] If a UE has the capability to communicate in the spectrum used by RU 130-1 and RU 230, the UE may be authorized to switch between using the secondary carrier's cellular network slice and one of the cellular network slices of the cellular network carrier. For example, a UE used by the military may be switched to the cellular network slice of the cellular network carrier when used for non-military purposes or when the secondary carrier's cellular network slice is experiencing high traffic. Furthermore, a UE capable of communicating using the spectrum used by RU 230, RU 130-1, and other RUs of the cellular network carrier can roam in geographical areas where the secondary carrier does not have any RUs installed. Thus, a UE can use the secondary carrier's RUs, if available, and roaming across the cellular network carrier's networks may be possible.

[0041] Furthermore, in a particular geographic region, a secondary carrier may have spectrum reserved for its use and may have one or more installed RUs that can utilize such spectrum for communication with UEs, but other factors may require that the spectrum not be used for communication between the UE and RU 230. For example, the secondary carrier may operate a radar that uses at least a portion of the spectrum. Simultaneous use of the spectrum for communication with the UE may not be possible due to interference caused by the radar. Thus, to communicate, the UE may switch to communication with RU 130-1 that uses a different spectrum.

[0042] The multimode UE 342 represents a UE that can operate in the spectrum used by both the RU 130-1 and the RU 230. In response to a command from a user (e.g., flipping a switch or some other physical actuation, providing a software command), the multimode UE 342 can transition from functioning as part of group 241 using a first cellular network slice of the secondary carrier to functioning as part of group 141 using a cellular network slice of the cellular network carrier. In some embodiments, rather than a user of the multimode UE 342 making the change, the command may be received from the LDC 210, the NDC 205, or some other component of the secondary carrier's network. In some embodiments, the LDC 210, the NDC 205, or some other component of the secondary carrier's network may monitor the performance of each of the secondary carrier's cellular network slices. When a threshold amount of RF spectrum, bandwidth, or processing capacity of one (or more) of the secondary carrier's cellular network slices is used, one or more UEs may transition to the cellular network slice of the cellular network provider. This may involve commands being sent to the UE (e.g., multimode UE 342) that change characteristics such as the BWP definition active at the UE. Through the cellular network provider's network, the secondary carrier can continue to send commands to the UE, such as commands to transition the UE back to the secondary carrier's cellular network slice. Using such a configuration, the secondary carrier can leverage the capacity of the cellular network carrier's cellular network slice when needed.

[0043] In the embodiment shown in FIG. 3, a total of three cellular network slices are presented. It should be understood that in other embodiments, multiple secondary carriers may have cellular network slices, there may be more cellular network slices, and the cellular network carrier and / or secondary carrier may operate a different number of cellular network slices. Furthermore, the specific architecture of the secondary carrier's network and / or cellular network 110 may vary. In addition, the components of cellular network 110 having communication links with components of secondary carrier network 211 may vary.

[0044] While many different types of entities can function as secondary carriers, two specific types of entities find such a configuration particularly useful. First, a government entity, such as the military, may desire significant autonomy in the operation of its own virtual cellular network. Security may be paramount. Having the ability to operate its own RUs and implement cryptography that cannot be decrypted by a commercial carrier's cellular network may be particularly useful to a government entity. Another type of entity that may desire significant autonomy is a casino. Casinos require advanced monitoring capabilities to detect fraudsters and illegal activity. Implementing cellular-based devices (as opposed to Wi-Fi-based devices) can enhance security. Furthermore, by operating its own RUs, the casino may be able to further customize and improve security, reducing the likelihood that hackers will be able to access information via a cellular service provider's cellular network. In such an embodiment, the secondary carrier's LDC or NDC may be located directly on-site at the casino and connect to a DU that serves one or more nearby casino RUs. Such a configuration may benefit a variety of other types of commercial entities that require significant security and / or flexibility in the operation of cellular network slices.

[0045] Furthermore, as detailed above, such governmental and non-governmental entities may lease or release resources (e.g., spectrum, bandwidth, processing power) to the original cellular network carrier when not needed. Alternatively, if a cellular network carrier detects unused resources on a cellular network slice, the cellular network provider may be permitted to use such resources until needed by the secondary carrier. Such a configuration allows the secondary carrier to reserve capacity that is occasionally needed during peak load times, but allows such resources to be used otherwise efficiently in the absence of peak load.

[0046] Various methods can be implemented using the system embodiments detailed in Figures 1-3. Figure 4 is a diagram of an embodiment of a method 400 for operating a cellular network with advanced secondary carrier control. Method 400 can be implemented using various embodiments of cellular network 200 or cellular network 300 of Figures 2 and 3, respectively. Method 400 can involve both the cellular network carrier and separate and distinct secondary carriers that rely in part on the cellular network of the cellular network carrier.

[0047] In block 405, a first set of one or more UEs communicate with a first RU connected to a cellular network. The first RU may be used as a radio interface for a cellular network carrier, such as to communicate with UEs operated by end-user customers of the cellular network carrier. The RU may communicate with the UEs via one or more antennas, which are typically mounted at fixed mounting locations such as buildings, communication towers, or bridges. The RUs and / or antennas may also be mobile locations, such as vehicle trailers, UAVs, or some other location intended to provide temporary service to a geographic area.

[0048] In block 410, a second set of one or more UEs communicate with a second RU connected to the cellular network. The second RU can be used as an air interface for the UEs of the secondary carrier. This second RU may be owned, maintained, and / or operated by the secondary carrier. The RU can communicate with the UEs of the secondary carrier via one or more antennas, which may be the same as or different from the antennas of block 405. The second RU can be co-located with the first RU, such as being housed together in a base station or attached to the same tower. The second RU of block 410 can operate using the same or a different RAT than the first RU. The second RU may operate using a different frequency spectrum from the first RU, an overlapping frequency spectrum with the first RU, or the same frequency spectrum as the first RU. In the case of overlapping or identical, only one of the RUs can use a particular portion of the frequency spectrum at a given time to avoid interference.

[0049] In block 415, communication with the second set of UEs may be controlled by the secondary carrier through the secondary carrier's network based on a set of parameters and / or characteristics. The secondary carrier's network can update these parameters and characteristics by communicating with the second RU and UE through one or more components of the cellular network provider's cellular network. Thus, while the secondary carrier operates its own secondary network and second RU, the secondary carrier relies on one or more components of the cellular network provider's cellular network for cellular network services and / or communications between the secondary network and the second RU. Controllable parameters and characteristics include: how UEs are authenticated; which UEs are authenticated; the priority of each UE; the amount of bandwidth given to each UE; the encryption method used by each UE; the cellular services given to each UE (e.g., SMS, MMS, data services, voice services, voicemail, etc.); which cellular network slices UEs are assigned to (if the secondary carrier operates multiple cellular network slices); and the BWP active in each UE. The allocation of resources supporting the UE can be dynamically optimized to support the service levels required for each application supported by the network and the UE. Policy management, enforcement, traffic shaping, packet loss, jitter, handover performance, latency, and spatio-temporal service objectives can be considered in providing and controlling communications to and from the UE, respectively. As part of block 415, the second RU can perform encryption and decryption of communications to and from the UE, respectively.

[0050] In block 420, communications with a first set of UEs are conducted between the cellular network and the first set of UEs in the first cellular network slice using a first RU. None of these communications can be conducted using any components specific to a secondary carrier, such as a second RU or a secondary carrier's network. The network carrier of the cellular network controls the parameters and characteristic sets in the UEs and the first RU. Like the secondary carrier, the network carrier can control: the priority of each UE in the first set; the amount of bandwidth given to each UE; the encryption method (if any) used by each UE in the first set; the cellular service given to each UE in the first set; which cellular network slice the UE is assigned to (if the secondary carrier operates multiple cellular network slices); and the BWP active in each UE in the first set.

[0051] In block 425, communications between a second set of UEs on a second cellular network slice of a secondary carrier are routed through the cellular network between the second RU and the secondary carrier's network. Accordingly, at least one component of the cellular network provider's access and / or core network, such as a DU, CU, and / or NDC, is used to process and / or route communications traffic between the second RU and the secondary carrier's network. This communications traffic may remain encrypted while on the cellular network provider's cellular network, except for portions of the data necessary for addressing (e.g., packet headers). For example, the second RU may communicate with a DU of the cellular network that communicates with a LDC of the secondary carrier. For another example, the second RU may communicate with a DU also operated by the secondary carrier. The DU of the secondary carrier may communicate with a CU of the cellular network that communicates with a LDC or NDC of the secondary carrier. The cellular network carrier and the cellular network may not be able to decrypt such data. Rather, encryption / decryption is handled by components of the secondary operator's network and either the second RU or the second set of UEs.

[0052] In block 430, the secondary carrier's network may appropriately process communications between the second set of UEs served by the second RU. Such processing may include acting as a gateway to a network (e.g., the Internet, a private network) with which the UEs attempt to communicate, providing communications services (e.g., phone calls, texts) to any other UEs or devices, etc. From the cellular network's perspective, the exact services being provided by the secondary carrier's network to the second set of UEs may not be able to be determined, especially if the communications traffic is encrypted. From the cellular network's perspective, bandwidth and processing resources may be physically limited according to the second cellular network slice. Otherwise, the characteristics of the communications traffic may be unknown.

[0053] FIG. 5 is a diagram of an embodiment of a method 500 for operating a cellular network using dynamic spectrum sharing between a secondary carrier and a cellular network carrier. Method 500 can be implemented using various embodiments of cellular network 200 or cellular network 300, respectively, of FIGS. 2 and 3. While method 500 focuses on releasing and reclaiming spectrum resources, method 500 may additionally or alternatively be applied to access network and / or core network resources reserved based on cellular network slices, such as fronthaul, midhaul, and / or backhaul bandwidth, and / or processing resources in various components of the cellular network. Furthermore, while method 500 focuses on a secondary carrier releasing resources for temporary use by a cellular network carrier, in other embodiments, a secondary carrier may release resources available for use by another secondary carrier (e.g., one government entity may release resources to be used by another government entity). Method 500 may involve both a cellular network operator and separate and distinct secondary operators that rely in part on the cellular network of the cellular network operator.

[0054] In block 501, a determination may be made, such as by a component of a secondary operator's network (or by a licensed user of the secondary operator's network), indicating spectrum that is not currently needed. This determination may be made by the secondary provider's RU or some higher-order component based on the amount of radio resources (e.g., resource blocks) used compared to a threshold over time. For example, if less than 50% of the available radio resources are unused for a defined period of time, a percentage of such available radio resources may be released.

[0055] In block 505, spectrum may be released by the secondary carrier's network. Block 505 may include the secondary carrier's network activating or defining a new BWP definition to prevent UEs of the secondary carrier from using the spectrum to be released. A command may be sent to the cellular network carrier that spectrum is available in a particular geographic area, such as for at least a defined period of time. Note that the secondary carrier may continue to use the spectrum via other RUs in other geographic areas. For example, spectrum may be released only along the east coast of Florida, but may be reserved for use by RUs by the secondary carrier in the Gulf Coast of Florida. Only spectrum that can be utilized by UEs and / or RUs of the cellular service provider may be released.

[0056] In block 510, a first RU of a cellular network carrier can communicate with a UE managed by the cellular network carrier using the released spectrum. Block 510 can involve updated BWP definitions being sent to and / or activated by the UE of the cellular network carrier to enable the UE to use the spectrum released by the secondary carrier in block 505. Further details of how communications with the first RU can be routed are provided in connection with block 525. In block 515, a second RU of the secondary carrier can communicate with a UE managed by the secondary carrier using its retained spectrum. Either beforehand or as part of block 515, an updated BWP definition is sent to and / or activated by the UE of the secondary carrier so that spectrum released by the secondary carrier is not attempted to be used. Further details of how communications with the second RU can be routed are provided in connection with block 530.

[0057] In block 520, the spectrum released or leased in block 505 may be reclaimed, or the lease may not be renewed. Block 520 may be performed based on steps similar to block 501, and is performed when an opposite result is reached: that a partial amount of the reserved spectrum is now needed. Again, the determination may be based on a comparison with a threshold over time. For example, if, on average over a defined period, more than 75% of the second RU's available spectrum is in use, the previously released spectrum may be reclaimed (or the lease may not be renewed). As part of block 520, the cellular network carrier may transmit a new BWP definition or activate a different BWP definition in the UE so that the bandwidth is no longer used. The secondary carrier may transmit a new BWP definition or activate a different BWP definition in the UE via its RU so that the reclaimed spectrum begins to be used.

[0058] In block 525, communications with a first set of UEs in a first cellular network slice are conducted between the cellular network and the first set of UEs using a first RU. None of these communications can be conducted using any components specific to a secondary carrier, such as a second RU or a secondary carrier's network. The network carrier of the cellular network controls the parameters and characteristic sets in the UEs and the first RU. Like the secondary carrier, the network carrier can control: the priority of each UE in the first set; the amount of bandwidth given to each UE; the encryption method (if any) used by each UE in the first set; the cellular service given to each UE in the first set; which cellular network slice the UE is assigned to (if the secondary carrier operates multiple cellular network slices); and the BWP active in each UE in the first set.

[0059] In block 530, communications between a second set of UEs on a second cellular network slice of a secondary carrier are routed through an access network and / or core network between the second RU and the secondary carrier's network. Accordingly, at least one component of the cellular network provider's cellular access network and / or cellular core network, such as a DU, CU, and / or NDC, is used to process and / or route communications traffic between the second RU and the secondary carrier's network. This communications traffic may remain encrypted while on the cellular network provider's cellular network, except for portions of the data necessary for addressing (e.g., packet headers). For example, the second RU may communicate with a DU of the cellular network that communicates with a LDC of the secondary carrier. For another example, the second RU may communicate with a DU also operated by the secondary carrier. The DU of the secondary carrier may communicate with a CU of the cellular network that communicates with a LDC or NDC of the secondary carrier. The cellular network carrier and the cellular network may not be able to decrypt such data. Rather, encryption / decryption is handled by components of the secondary operator's network and either the second RU or the second set of UEs.

[0060] In block 535, the secondary carrier's network may appropriately process communications between the second set of UEs served by the second RU. Such processing may include acting as a gateway to a network (e.g., the Internet, a private network) with which the UEs attempt to communicate, providing communications services (e.g., phone calls, texts) to any other UEs or devices, etc. From the cellular network's perspective, the exact services being provided by the secondary carrier's network to the second set of UEs may not be able to be determined, especially if the communications traffic is encrypted. From the cellular network's perspective, bandwidth and processing resources may be physically limited according to the second cellular network slice. Otherwise, the characteristics of the communications traffic may be unknown.

[0061] 6 is a diagram of an embodiment of a method 600 for operating a cellular network with advanced secondary carrier control over multiple cellular network slices. Method 600 can be implemented using various embodiments of cellular network 300 of FIG.

[0062] In block 605, a first set of one or more UEs communicate with a first RU connected to the cellular network of the cellular network. The first RU may be used as a radio interface for a cellular network carrier, such as to communicate with UEs operated by end-user customers of the cellular network carrier. The RU may communicate with the UEs via one or more antennas, which are typically mounted at fixed mounting locations such as buildings, communication towers, or bridges. The RUs and / or antennas may also be mobile locations, such as vehicle trailers, UAVs, or some other location intended to provide temporary service to a geographic area.

[0063] In block 610, a second set of one or more UEs communicate with a second RU connected to the cellular network. The second RU can be used as an air interface for the UEs of the second carrier. The RU can communicate with the UEs of the second carrier via one or more antennas, which may be the same as or different from the antennas of block 605. The second RU can be co-located with the first RU, such as being housed together in a base station or attached to the same tower. The second RU of block 610 can operate using the same or a different RAT as the first RU. The second RU may operate using a different frequency spectrum from the first RU, an overlapping frequency spectrum with the first RU, or the same frequency spectrum as the first RU. In the case of overlapping or identical, only one of the RUs can use a particular portion of the frequency spectrum at a given time to avoid interference.

[0064] In block 615, a third set of one or more UEs communicates with a second RU or a third RU connected to the cellular network. If present, the third RU can be used as an air interface for some UEs of the second carrier in addition to the second RU. The second RU and / or the third RU can communicate with additional UEs (the third set) of the second carrier via one or more antennas, which may be the same as or different from the antennas of blocks 605 and 610. If present, the third RU can be co-located with the first and second RUs, such as being housed together in a base station or attached to the same tower. The third RU of block 615 can operate using the same RAT as the first RU and / or the second RU, or a different RAT from the first RU and / or the second RU. The third RU may operate using a different frequency spectrum from the second and / or third RU, an overlapping frequency spectrum with the second and / or third RU, or the same frequency spectrum as the second and / or third RU.

[0065] In block 620, communications with the second set of UEs and the third set of UEs may be controlled by the secondary carrier through the secondary carrier's network based on a set of parameters and characteristics. The parameters and characteristic sets for the second and third sets of UEs may vary for each cellular network slice. The secondary carrier's network may update these parameters and characteristics by communicating with the second RU (and third RU, if present) and the UEs through one or more components of the cellular network provider's cellular network. Thus, although the secondary carrier operates its own secondary network and one or more RUs, the secondary carrier relies on one or more components of the cellular network provider's cellular network for cellular network services and / or communications between the secondary network and the second RU and possibly the third RU. Parameters and characteristics that can be controlled include: the priority of each UE; the amount of bandwidth given to each UE; the encryption method used by each UE; the cellular service given to each UE; which cellular network slice the UE is allocated to (if the secondary operator operates multiple cellular network slices); and the BWP active in each UE.

[0066] In block 625, communications with a first set of UEs in a first cellular network slice are conducted between the cellular network and a first RU for the first set of UEs. None of these communications can be conducted using any components specific to a secondary carrier, such as a second RU, a third RU, or a secondary carrier's network. The network carrier of the cellular network controls the parameters and characteristic sets in the UEs and the first RU. Like the secondary carrier, the network carrier can control: the priority of each UE in the first set; the amount of bandwidth given to each UE; the encryption method (if any) used by each UE in the first set; the cellular service given to each UE in the first set; which cellular network slice the UE is assigned to (if the secondary carrier operates multiple cellular network slices); and the BWP active in each UE in the first set.

[0067] In block 630, communications between a second set of UEs of a secondary carrier are routed through the cellular network as part of a second cellular network slice between the second RU and the secondary carrier's network. Thus, at least one component of the cellular network provider's access network and / or core network, such as a DU, CU, and / or NDC, is used to process and / or route communications traffic between the second RU and the secondary carrier's network. This communications traffic may remain encrypted while on the cellular network provider's cellular network, except for portions of the data necessary for addressing (e.g., packet headers). The cellular network carrier and the cellular network may not be able to decrypt such data. Rather, encryption / decryption is handled by components of the secondary carrier's network and either the second RU or the second set of UEs.

[0068] In block 635, communications between a third set of UEs of the secondary carrier are routed between the second (or third) RU and the secondary carrier's network through the access network and / or cellular core network as part of a third cellular network slice. At least one aspect of communication traffic in the third cellular network slice may be treated differently from the second cellular network slice. In some embodiments, the routing between the cellular network and the secondary carrier's network is different, as indicated by arrows 245 and 345. Additionally or alternatively, other parameters or characteristics may be different, such as the total amount of bandwidth or processing resources of the slice, the available cellular services, the type of cryptography used (if any), etc. Additionally or alternatively, the third slice may serve purposes other than different routing. For example, the third slice may be used as a test environment for different security functionality.

[0069] In block 640, the secondary carrier's network may appropriately receive and process communications between the second and third sets of UEs served by the second (and, if present, third) RUs. Such processing may include acting as a gateway to networks (e.g., the Internet, private networks) with which the UEs attempt to communicate, providing communications services (e.g., phone calls, texts) to any other UEs or devices, etc. From the cellular network's perspective, the exact services being provided by the secondary carrier's network to the second set of UEs may not be able to be determined, especially if the communications traffic is encrypted. From the cellular network's perspective, bandwidth and processing resources may be physically limited according to the allocation of the second and third cellular network slices. Otherwise, the characteristics of the communications traffic may be unknown.

[0070] The methods, systems, and devices discussed above are examples. Various configurations may omit, substitute, or add various procedures or components, as appropriate. For example, in alternative configurations, methods may be performed in an order different from that described, and / or various steps may be added, omitted, and / or combined. Also, features described with respect to particular configurations may be combined in various other configurations. Different aspects and elements of the configurations may be combined in a similar manner. Also, because technology evolves, many of the elements are examples and do not limit the scope of the disclosure or claims.

[0071] In the description, specific details are given to provide a thorough understanding of example configurations (including examples). However, the configurations can be practiced without such specific details. For example, well-known circuits, processes, algorithms, structures, and techniques are shown without unnecessary detail to avoid obscuring the configurations. This description merely provides example configurations and does not limit the scope, applicability, or configurations of the claims. Rather, the foregoing description of the configurations provides those skilled in the art with an effective description for implementing the described technology. Various changes may be made in the functions and arrangement of elements without departing from the spirit or scope of the present disclosure.

[0072] Configurations may also be described as processes that are depicted as flow diagrams or block diagrams. While each may describe operations as a series of processes, many of the operations may be performed in parallel or simultaneously. Additionally, the order of operations may be rearranged. A process may have additional steps not included in the figures. Furthermore, example methods may be implemented by hardware, software, firmware, middleware, microcode, hardware description languages, or any combination thereof. If implemented by software, firmware, middleware, or microcode, the program code or code segments to perform the necessary tasks may be stored in a non-transitory computer-readable medium, such as a storage medium. A processor may perform the described tasks.

[0073] While several example configurations have been described, various modifications, alternative constructions, and equivalents may be used without departing from the spirit of the present disclosure. For example, the elements described above may be components of a larger system, and other rules may take precedence over or modify the application of the present invention. Also, several steps may be performed before, during, or after considering the elements described above.

Claims

1. 1. A cellular network with advanced secondary carrier privacy, the cellular network comprising: a first radio unit configured to communicate with a first plurality of user equipments using a first radio spectrum; the first communication between the first wireless unit and a cellular network is performed as part of a first cellular network slice; the first radio unit is operated by a cellular network carrier; a first radio unit; a second radio unit configured to communicate with a second plurality of user equipment using a second radio spectrum; the second wireless unit is operated by a secondary carrier different from the cellular network carrier; a second communication between the second wireless unit and the cellular network is performed as part of a second cellular network slice; the second wireless unit encrypting the second communication so that the cellular network cannot decrypt the second communication; a second radio unit; and a cellular access network of the cellular network that routes the second communication encrypted by the second radio unit and conducted as part of the second cellular network slice to a data center operated by the secondary carrier and separate from the cellular network; and A cellular network with advanced secondary carrier privacy, comprising:

2. a distributed unit (DU) of the cellular access network that communicates with the first wireless unit and the second wireless unit, the distributed unit (DU) being operated by the cellular network operator; The cellular network with advanced secondary carrier privacy of claim 1 further comprising:

3. 3. The cellular network with advanced secondary carrier privacy of claim 2, wherein the DU routes the first communication and the second communication to a central unit (CU) of the cellular network, the CU being operated by the cellular network carrier.

4. 4. The cellular network with advanced secondary carrier privacy of claim 3, wherein the CU routes the second communication to the data center of the secondary carrier that is separate and different from the cellular network.

5. 5. The cellular network with advanced secondary carrier privacy of claim 4, wherein the second radio unit further transmits a third communication between the second radio unit and the cellular network as part of a third cellular network slice.

6. 6. The cellular network with advanced secondary carrier privacy of claim 5, wherein the cellular network routes the second communication and the third communication to separate components of the same network operated by the secondary carrier different from the cellular network.

7. 3. The cellular network with advanced secondary carrier privacy of claim 2, wherein the DU routes the first communication to a CU of the cellular network operated by the cellular network carrier and the second communication to the data center operated by the secondary carrier and separate from the cellular network.

8. 10. The cellular network with advanced secondary carrier privacy of claim 1, wherein the cellular network includes a 5G New Radio (NR) cellular core network.

9. 10. The cellular network with advanced secondary carrier privacy of claim 1, further comprising: user equipment of the second plurality of user equipment, the user equipment of the second plurality of user equipment configured to switch communication with either the first radio unit or the second radio unit based on a command.

10. 2. The cellular network with advanced secondary carrier privacy of claim 1, wherein the first radio unit uses a different cellular network radio access technology (RAT) for communication with the first plurality of user equipment than between the second radio unit and the second plurality of user equipment.

11. 1. A method for operating a cellular network with advanced secondary carrier privacy, the method comprising: communicating with a first plurality of user equipments using a first radio unit and a first radio spectrum; the first communication between the first wireless unit and a cellular network is performed as part of a first cellular network slice; the first radio unit is operated by a cellular network carrier; communicating with a first plurality of user equipment; communicating with a second plurality of user equipment using a second radio unit and a second radio spectrum; the second wireless unit is operated by a secondary carrier different from the cellular network carrier; a second communication between the second wireless unit and the cellular network is performed as part of a second cellular network slice; the second wireless unit encrypting the second communication so that the cellular network cannot decrypt the second communication; communicating with a second plurality of user equipment; routing, by the cellular network, the encrypted second communication of the second cellular network slice from the second wireless unit to a data center operated by the secondary carrier, the data center being separate from the cellular network; A method for operating a cellular network with a high degree of secondary carrier privacy, comprising:

12. the first communication and the encrypted second communication are routed through a distribution unit (DU) in communication with the first radio unit and the second radio unit; 12. The method for operating a cellular network with enhanced secondary carrier privacy of claim 11, wherein the DU is operated by the cellular network carrier.

13. Routing, by the DU, the first communication and the second communication to a central unit (CU) of the cellular network, the CU being operated by the cellular network carrier.

13. The method for operating a cellular network with advanced secondary carrier privacy of claim 12, further comprising:

14. Routing, by the CU, the second communication to the data center of the second carrier, which is separate and different from the cellular network.

14. The method for operating a cellular network with advanced secondary carrier privacy of claim 13, further comprising:

15. transmitting, by the second wireless unit, a third communication over the cellular network as part of a third cellular network slice; 15. The method for operating a cellular network with advanced secondary carrier privacy of claim 14, further comprising:

16. routing, by the cellular network, the second communication and the third communication to separate components of the same network operated by the secondary carrier different from the cellular network; 20. The method for operating a cellular network with advanced secondary carrier privacy of claim 15, further comprising:

17. Routing, by the DU, the first communication to a CU of the cellular network operated by the cellular network carrier and the second communication to the data center operated by the secondary carrier and separate from the cellular network.

13. The method for operating a cellular network with advanced secondary carrier privacy of claim 12, further comprising:

18. 12. The method for operating a cellular network with advanced secondary carrier privacy of claim 11, wherein the cellular network is a 5G New Radio (NR) cellular network.

19. switching, by user equipment of the second plurality of user equipment, between communication with the first wireless unit and any of the second wireless units based on a command; 12. The method for operating a cellular network with advanced secondary carrier privacy of claim 11, further comprising:

20. 12. The method for operating a cellular network with enhanced secondary carrier privacy of claim 11, wherein the first radio unit uses a different cellular network radio access technology (RAT) for communication with the first plurality of user equipment than between the second radio unit and the second plurality of user equipment.

Images