220 results about "Admission control" patented technology

The invention discloses an equipment access control method and system based on a security sandbox, which adopts an advanced virtualization technology, constructs a highly isolated operation environment, combines technologies such as deep packet inspection, system call interception and process operation logic analysis, comprehensively monitors access behaviors of processes in the sandbox to virtual equipment, and improves the access performance of the virtual equipment. And the security and credibility of the equipment are evaluated, and illegal processes are prevented from running on the access terminal, so that the security access control of the equipment is realized. The monitoring comprises data packet content, protocol filtering, threat detection, system call interception, process creation, execution and termination behavior monitoring and the like. In combination with a trust evaluation algorithm, behavior data features are collected and extracted, trust scoring is performed by applying a machine learning model, and the equipment trust level and the access strategy are dynamically adjusted according to the score. According to the invention, the access control strategy is managed in a unified manner and deployed quickly based on the security sandbox management program and the authentication server. After identity authentication of the equipment, real-time monitoring of process dynamic behaviors in the running process of the equipment is added, and the safety of the equipment in the data exchange process is further improved.

The invention provides a dynamic multi-link intelligent management and scheduling system, and relates to the technical field of network communication. According to the system, real-time monitoring, dynamic management and transmission data scheduling of a network link can be realized, and the problems of low bandwidth utilization rate and insufficient transmission efficiency in the prior art are solved. The method comprises the following steps: firstly, acquiring and monitoring state information of each link in real time through an intelligent agent technology below a link layer; and secondly, the system performs link admission control according to real-time monitoring data by using a dynamic regulation rule method, and dynamically judges whether a new relay link needs to be established and provides an optimal relay node selection when the data transmission bandwidth between the two nodes is insufficient. And finally, multi-link transmission data scheduling is carried out by adopting a mode of combining deep reinforcement learning and a heuristic scheduling algorithm, and the bandwidth utilization rate is improved to the maximum extent. On the whole, an efficient and intelligent network link management scheduling scheme is provided through combination of methods of intelligent proxy, dynamic regulation rules, deep reinforcement learning and the like, and the utilization rate of network resources and the quality of data transmission are effectively improved.

The present disclosure is related to multi-access traffic management in multi-access computing environments. A reliability enhancement engine (REE) operated by a multi-access multipath traffic manager identifies traffic flows that have high reliability requirements (“reliability flows”) and performs admission control for the reliability flows. The REE determines a coding rate (e.g., a redundancy factor) and traffic distribution strategies for the identified reliability flows. The REE applies cross-access network coding (NC) on the reliability flows, and handles multi-access acknowledgements and traffic pacing, which may involve multiplexing traffic of the reliability flows with non-high-reliability traffic. Other embodiments may be described and / or claimed.

A first network node receives, from a second network node, a message indicating whether a first maximum number of protocol data unit (PDU) sessions, of a multi-access protocol data unit (MA-PDU) established for a wireless device on a network slice, has been reached for a first radio access technology (RAT) type, or a second maximum number of PDU sessions established on the network slice has been reached for a second RAT type.

A method performed by an access and mobility management function (AMF) in a wireless communication system is provided. The method includes transmitting, to a network slice admission control function (NSACF), a request message for a slice availability check including information regarding an access type of a user equipment (UE), based on a registration request of the UE for one or more single network slice selection assistance informations (S-NSSAIs), in case that the slice availability check is performed for the one or more S-NSSAIs, based on the access type of the UE at the NSACF, receiving a response message including information regarding a result of the slice availability check, from the NSACF, and transmitting a registration response for the one or more S-NSSAIs to the UE, based on the result of the slice availability check.

Systems and methods for controlling resource utilization for a consensus-based distributed group of replicas are provided. A leader node can receive a write request originating from a tenant and comprising instructions to write to data of replicas of a range. The leader node stores a leader replica, follower nodes each store a follower replica, and the leader node is configured to coordinate a consensus protocol for executing the instructions. The leader node and the follower nodes each correspond to at least one of a plurality of token pools. Sizes of the token pools are determined based on receiving the write request. The write request is evaluated based on the sizes of the token pools by determining a size of the write request and generating a log entry for the write request. The write request is executed using the log entry by writing to the data of the replicas.

Embodiments of the present disclosure relate to an information transmission method and apparatus, a communication device, and a storage medium. A network slice admission control function (NSACF) determines, according to specific area indication information, statistical information of a session created within a specific area range of a network slice.

The embodiments of the present disclosure relate to an information transmission method and apparatus, and a communication device and a storage medium. The method comprises: a network slice admission control function (NSACF) determining, according to specific area indication information, statistical information of a user equipment (UE) registered in a specific area range based on a network slice.

Systems and methods are disclosed for Network Slice Admission Control Function (NSACF) triggered User Equipment (UE) deregistration. In one embodiment, a method performed in a communications system comprises, at a NSACF, determining that one or more UEs need to be deregistered from a particular network slice and, responsive to determining that one or more UEs need to be deregistered from the particular network slice, sending a request to a network node to deregister one or more UEs from the particular network slice. The method further comprises, at the network node, receiving the request from the NSACF and deregistering one or more UEs from the particular network slice in response to receiving the request.

The present disclosure describes a system and a method (1200) for implementing LTM when performing a cell switch procedure of a UE (122) from source cell (118) to target cell (120). The method comprises identifying a target cell for LTM for the UE (122) based on LTM measurements received from the UE and thereafter performing admission control on the target cell. The method further comprises generating, LTM configuration, when the admission control is successful. The method further comprises transmitting the generated LTM configuration to the UE in a RRC reconfiguration message. The method further comprises facilitating early synchronization of the UE (122) in the target cell (120) based on an F1AP message received from a target DU (204). The method further comprises performing an LTM cell switch completion upon receiving an indication from the target DU (204) indicating that an access to the target cell (120) is successful or not.

Methods, system and apparatus are provided to perform network slice admission control within a service area of an operator network and across service areas of the operator network. A central Network Slice Admission Control Function (NSACF) supporting multiple service areas of at least one operator network receives an admission request from a network function (e.g., AMF, SMF or SMF+PGW-C) belonging to a service area of an operator network. The admission request includes information identifying the service area and may include an identifier of the network operator. The central NSACF performs network slice admission control based on whether the UE is newly admitted to the network slice in the service area or whether the UE has already been admitted in a different service area.

A slice admission control method performed by a slice controller in a communication network system deploying a plurality of network slices and comprising:a) receiving a slice request containing slice request parameters from a user equipment,b) obtaining network parameters related to at least an overall state of network resources in the plurality of network slices,c) determining, for each network slice:a slice service variable related to required network resources,a slice utility gain to be expected from a utilization of the required network resources,a slice demand load related to consumed network resources in the network slice,d) transmitting the slice demand loads to the user equipment,e) feeding the slice demand loads to the machine learning model,f) based on the slice utility gain, determining a decision on the admission of the slice request.

The invention relates to the technical field of network information security monitoring, in particular to a DPU-based enterprise intranet illegal external connection detection system, which comprises an access control unit, a host monitoring unit, an identity authentication unit, a security management unit, an intranet resource information management unit, a database unit, an automatic detection unit, an alarm unit and a blocking unit. In the invention, the network access examination and approval module registers and examines the physical address of a network card for each host newly accessed into the intranet of an enterprise, the illegal access detection module performs illegal detection on host equipment subjected to network access registration, and the illegal access blocking module can block the communication between the host and other hosts in the intranet. And meanwhile, the automatic detection unit realizes automatic detection of system illegal external connection information through an illegal external connection information automatic detection model, and judges whether the illegal external connection information exists or not, so that illegal external connection of an enterprise intranet of unknown equipment and leakage of sensitive information in an enterprise intranet database system are avoided, and the overall network security of the enterprise intranet is effectively improved.

A primary network slice admission control function (NSACF) configured to determine a global quota comprising a first number of user equipments (UEs) or protocol data unit (PDU) sessions that are allowed to be registered to a network slice, receive, from a first local NSACF, an indication of a second number of UEs or PDU sessions currently registered to the network slice by the first local NSACF, wherein the first local NSACF is configured with a first local quota comprising a third number of UEs or PDU sessions that are allowed to be registered to the network slice by the first local NSACF, compare the second number to a local quota usage threshold for the first local NSACF and determine, based on the comparing, whether the first local quota for the first local NSACF is to be updated by decreasing the third number.

Apparatuses, systems, and methods for conditional handover (CHO) and extended reality (XR) capacity enhancements. A base station may receive XR traffic characteristics from a user equipment (UE) and / or from a core network. The XR traffic characteristics may be UE specific and / or flow specific. The base station may provide, to one or more target base stations, the XR traffic characteristics as part of a conditional handover request. The XR traffic characteristics may be provided in an information element over an Xn interface. In addition, the base station may receive, from the one or more target base stations, handover request acknowledgments. The handover request acknowledgments may be based, at least in part, on admission control procedures performed based on the XR traffic characteristics. Further, the base station may generate a list of candidate target base stations based on the handover request acknowledgments and provide the list of candidate target base stations to the UE.

One example method includes sending, by a first terminal device, a first request message to a network device, where the first request message is used to request to establish a sidelink radio bearer (SL RB) between the first terminal device and a second terminal device, where the first request message includes at least one of a parameter index or at least one parameter. The first terminal device can then receive a first response message from the network device, where the first response message includes one or more of admission control indication information, the at least one parameter, the parameter index, or first SL RB radio resource configuration information, where the admission control indication information indicates that the network device allows establishment of the SL RB, and where the first SL RB radio resource configuration information includes at least one of an SL RB identifier or protocol layer configuration information.

Systems and methods provide a selective network slice admission control (NSAC) service on a per user equipment (UE) device level, and include manage select NSAC criteria related to a first limit to a number of user equipment (UE) devices and a second limit to a number of protocol data unit (PDU) sessions supportable on a network slice; receive an indication that a first UE device requests a first PDU session on the network slice; apply at least one of the select NSAC criteria to the first UE device and / or the first PDU session; determine, based on the application, that the first UE device is countable toward the first limit and / or the first PDU session is countable toward the second limit; and generate an NSAC update response message indicating that the first UE device and / or the first PDU session is countable.

A system (108) and method (400) for network slice load distribution is described The method includes receiving (402), by a network slice admission control function (NSACF) server (208), a request from an AMF (222), to initiate a registration check and update procedure for one or more UEs (104) associated with a plurality of network slices. The method (400) includes processing (404) the request to perform an admission control for the one or more UEs (104). The method (400) further includes updating (406) a reference count for each of the one or more UEs (104) registered within the defined network slice that is associated with a corresponding public land mobile network (PLMN) based on admission control decision. The method (400) further includes generating (408) a data report pertaining to the one or more UEs (104) registered within the defined network slice for the network slice load distribution.

Technology described herein can employ dynamically changing network variables and / or user entity priorities to determine admission of one or more user entities to the network. In an embodiment, a system can comprise a processor, and a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations. The operations can comprise analyzing resource allocation for a quality of service flow. The operations further can comprise, based on a result of the analyzing the resource allocation, determining a threshold for quality of service for user equipment at the quality of service flow, and determining a connection decision for a user equipment based on a comparison of a quality of service prediction of a quality of service level for the user equipment to the threshold.

The present invention provides a mechanical arm and its adaptive admittance control system and robot, the adaptive admittance control system includes: an observer, which is used to receive a contact force signal and generate an oscillation amplitude parameter according to the contact force signal; an expected trajectory generator, which is used to adjust the initial environment stiffness when the oscillation amplitude parameter is greater than a preset threshold, and generate the expected posture of the mechanical arm according to the adjusted initial environment stiffness; an admittance controller, which is used to adjust the admittance parameter of the admittance controller according to the oscillation amplitude parameter and the preset threshold when the oscillation amplitude parameter is greater than the preset threshold, and generate the posture deviation of the mechanical arm according to the adjusted admittance parameter; a motion controller, which is used to control the mechanical arm according to the posture deviation and the expected posture. When the interactive environment stiffness suddenly changes, the dynamic response performance and stability of the system can still be ensured, and the reliability is high.

A system described herein may identify Key Performance Indicators (“KPIs”) associated with User Equipment (“UEs”) that are connected to a radio access network (“RAN”). Each KPI may be associated with wireless communications between a respective UE and the RAN. The system may identify a plurality of service categories associated with the plurality of UEs, where each particular UE is associated with a respective service category. The system may determine, based on the KPIs and the service category associated with each UE of the plurality of UEs, a radio resource partitioning configuration for the RAN. The particular radio resource partitioning configuration may specify that different portions of a set of radio resources, implemented by the RAN, are associated with different network slices. The RAN may implement the radio resource partitioning configuration by sending and receiving traffic, associated with respective network slices, via a corresponding portion of the set of radio resources.

Facilitating energy aware multi-cell admission control with dynamic load balancing in advanced communication networks is provided herein. A method includes facilitating, by a system comprising a processor, energy efficiency aware load balancing of already served user equipment. The method also includes facilitating, by the system, controlling of admissions of other user equipment to the communication network. The communication network can be deployed as a disaggregated architecture that comprises central units, distributed units, and a near-real-time-radio access network intelligent controller. The group of cells can be configured to operate according to a new radio network communication protocol.

In an embodiment of the present application, an admission control method, an apparatus and a system are provided, which include the repeater receiving a first message related to admission control, the first message including or not including first information, and the repeater ignoring the first information and / or skipping a first process related to the admission control and / or performing a second process related to the admission control.

The present invention provides a robot shaft hole assembly method based on deep reinforcement learning and admittance control, which belongs to the field of intelligent manufacturing; for the single-axis hole search stage and the multi-axis hole search stage, the present invention respectively designs a deep reinforcement learning network I and a deep reinforcement learning network II to train the output of the hole search action, and at the same time, adds hole search priori knowledge in this process to improve the exploration training efficiency of the deep reinforcement learning network; for the single-axis hole plugging stage and the multi-axis hole plugging stage, a variable admittance control method based on the deep reinforcement learning network III is designed to realize the smooth plugging of the robot, and at the same time, the plugging priori knowledge is added, and if the state is the priori state, the robot adjustment posture is directly output, and if not, it is input into the deep reinforcement learning network III for training, thereby improving the efficiency of the robot plugging; adopting the technical solution of the present invention, through the training of the deep reinforcement learning network, the adjustment strategy is output, and the robot can be controlled to complete the assembly of the single-axis hole and the multi-axis hole.

The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. Provided are an access and mobility management function (AMF) and a method performed by an AMF, including receiving, from a terminal, a registration request message for a protocol data unit (PDU) session including information on a requested slice associated with the PDU session; determining whether the requested slice is allowed and whether the requested slice is for a network slice admission control (NSAC); if the requested slice is allowed for the terminal and is for the NSAC, determining whether the requested slice is exempt from the NSAC for the PDU session; and if the requested slice is exempt from the NSAC for the PDU session, transmitting, to the terminal, a registration accept message as a response to the registration request message.

This application provides a network slice admission control method and apparatus. The method includes: a first network element obtaining first information from a second network element, the first information being used to associate a first session of a user equipment (UE), the first network element supporting control over the number of users accessing the network slice, the first session being associated with the network slice, and the second network element serving the first session; the first network element receiving a first request message from the second network element, the first request message being used to instruct a reduction in the number of users already accessing the network slice; and the first network element determining, based on the first information, whether to reduce the number of users already accessing the network slice. This method enables control over the number of users accessing the network slice and the number of sessions established within the network slice, thus facilitating network slice admission control.

Facilitating energy aware multi-cell admission control in advanced communication networks is provided herein. A method includes, based on notification of a denial of an admission request by a first cell, facilitating a transmission of the admission request to a second cell and at least a third cell. The second cell and the third cell are neighbor cells of the first cell. The admission request can be received from a user equipment. The method also includes, based on receipt of an acceptance of the admission request from the second cell and the third cell, and based on a determination that a first utility of the second cell is higher than a second utility of at least the third cell, selecting the second cell as an admission cell for the user equipment. Further, the method includes facilitating admission of the user equipment to a cell cluster via the second cell.

The application discloses a multi-agent hallucination identification and propagation suppression method based on declaration-evidence propagation graph and shared memory access control, and belongs to the field of artificial intelligence credible reasoning and generative model security governance. The method first subdivides the multi-agent cooperation output into the smallest verifiable declaration unit, then collects multi-source evidence for each declaration unit through retrieval, execution, perception and questioning of heterogeneous verification agents, and constructs a declaration-evidence propagation graph containing declaration nodes, evidence nodes, agent nodes, message nodes, shared memory nodes and time nodes. The support strength, contradiction strength, cross-agent divergence, propagation gain, evidence deficiency and historical credit decay are jointly calculated on the propagation graph to obtain the declaration unit level hallucination risk score and diffusion risk score. According to the double-threshold access strategy and the propagation write-in double-channel blocking rule, the high-risk declaration unit is subjected to freezing, directional review, fragment reservation type rewriting and shared memory access control. Finally, the result with evidence annotation and risk label is output by the adjudication agent, and the credit value of each agent is updated. The application realizes fine-grained positioning, traceable judgment, shared memory isolation and propagation suppression of the internal cooperation hallucination of the multi-agent, and can be applied to scenarios such as image-text question answering, code generation, software testing, auxiliary decision-making and multi-modal reasoning.

The invention provides an application probe integration method and system based on a cloud native environment, and relates to the technical field of cloud native, and the method comprises the steps: intercepting a container creation request of a target application instance in the cloud native environment based on a triggering rule of a probe injection service; injecting the probe resource definition in the original resource definition of the target application instance by utilizing the probe injection service to obtain an integrated resource definition; and creating a target application container based on the integrated resource definition, and running the target application instance according to the target application container. Through a dynamic admission control mechanism of a cloud native environment, an application container resource request needing to be integrated with an application probe is automatically intercepted in an application container creation stage, and a self-defined probe resource definition is injected into an original resource definition of an application instance based on a pre-configured probe injection service; non-perceptual modification of application resource definition and decoupling integration of the probe and the application are achieved, and the invasiveness of installation of the probe to the application is effectively reduced.

The disclosure relates to a fifth generation (5G) or sixth generation (6G) communication system for supporting a higher data transmission rate. A method a network entity in a wireless communication system includes determining whether to transmit an update request message for a number of at least one user equipment (UE) with at least one packet data unit (PDU) session or packet data network (PDN) connection established on a network slice, based on the at least one PDU session or PDN connection established on the network slice, transmitting the update request message to a network slice admission control function (NSACF) entity, and receiving, from the NSACF entity, an update response message indicating whether the number of the at least one UE with the at least one PDU session or PDN connection established on the network slice reaches a maximum number of registered UEs with the network slice.