169 results about "Admission control" patented technology

The invention discloses an equipment access control method and system based on a security sandbox, which adopts an advanced virtualization technology, constructs a highly isolated operation environment, combines technologies such as deep packet inspection, system call interception and process operation logic analysis, comprehensively monitors access behaviors of processes in the sandbox to virtual equipment, and improves the access performance of the virtual equipment. And the security and credibility of the equipment are evaluated, and illegal processes are prevented from running on the access terminal, so that the security access control of the equipment is realized. The monitoring comprises data packet content, protocol filtering, threat detection, system call interception, process creation, execution and termination behavior monitoring and the like. In combination with a trust evaluation algorithm, behavior data features are collected and extracted, trust scoring is performed by applying a machine learning model, and the equipment trust level and the access strategy are dynamically adjusted according to the score. According to the invention, the access control strategy is managed in a unified manner and deployed quickly based on the security sandbox management program and the authentication server. After identity authentication of the equipment, real-time monitoring of process dynamic behaviors in the running process of the equipment is added, and the safety of the equipment in the data exchange process is further improved.

The present disclosure is related to multi-access traffic management in multi-access computing environments. A reliability enhancement engine (REE) operated by a multi-access multipath traffic manager identifies traffic flows that have high reliability requirements (“reliability flows”) and performs admission control for the reliability flows. The REE determines a coding rate (e.g., a redundancy factor) and traffic distribution strategies for the identified reliability flows. The REE applies cross-access network coding (NC) on the reliability flows, and handles multi-access acknowledgements and traffic pacing, which may involve multiplexing traffic of the reliability flows with non-high-reliability traffic. Other embodiments may be described and / or claimed.

A first network node receives, from a second network node, a message indicating whether a first maximum number of protocol data unit (PDU) sessions, of a multi-access protocol data unit (MA-PDU) established for a wireless device on a network slice, has been reached for a first radio access technology (RAT) type, or a second maximum number of PDU sessions established on the network slice has been reached for a second RAT type.

Systems and methods for controlling resource utilization for a consensus-based distributed group of replicas are provided. A leader node can receive a write request originating from a tenant and comprising instructions to write to data of replicas of a range. The leader node stores a leader replica, follower nodes each store a follower replica, and the leader node is configured to coordinate a consensus protocol for executing the instructions. The leader node and the follower nodes each correspond to at least one of a plurality of token pools. Sizes of the token pools are determined based on receiving the write request. The write request is evaluated based on the sizes of the token pools by determining a size of the write request and generating a log entry for the write request. The write request is executed using the log entry by writing to the data of the replicas.

The embodiments of the present disclosure relate to an information transmission method and apparatus, and a communication device and a storage medium. The method comprises: a network slice admission control function (NSACF) determining, according to specific area indication information, statistical information of a user equipment (UE) registered in a specific area range based on a network slice.

Systems and methods are disclosed for Network Slice Admission Control Function (NSACF) triggered User Equipment (UE) deregistration. In one embodiment, a method performed in a communications system comprises, at a NSACF, determining that one or more UEs need to be deregistered from a particular network slice and, responsive to determining that one or more UEs need to be deregistered from the particular network slice, sending a request to a network node to deregister one or more UEs from the particular network slice. The method further comprises, at the network node, receiving the request from the NSACF and deregistering one or more UEs from the particular network slice in response to receiving the request.

The present disclosure describes a system and a method (1200) for implementing LTM when performing a cell switch procedure of a UE (122) from source cell (118) to target cell (120). The method comprises identifying a target cell for LTM for the UE (122) based on LTM measurements received from the UE and thereafter performing admission control on the target cell. The method further comprises generating, LTM configuration, when the admission control is successful. The method further comprises transmitting the generated LTM configuration to the UE in a RRC reconfiguration message. The method further comprises facilitating early synchronization of the UE (122) in the target cell (120) based on an F1AP message received from a target DU (204). The method further comprises performing an LTM cell switch completion upon receiving an indication from the target DU (204) indicating that an access to the target cell (120) is successful or not.

A slice admission control method performed by a slice controller in a communication network system deploying a plurality of network slices and comprising:a) receiving a slice request containing slice request parameters from a user equipment,b) obtaining network parameters related to at least an overall state of network resources in the plurality of network slices,c) determining, for each network slice:a slice service variable related to required network resources,a slice utility gain to be expected from a utilization of the required network resources,a slice demand load related to consumed network resources in the network slice,d) transmitting the slice demand loads to the user equipment,e) feeding the slice demand loads to the machine learning model,f) based on the slice utility gain, determining a decision on the admission of the slice request.

A primary network slice admission control function (NSACF) configured to determine a global quota comprising a first number of user equipments (UEs) or protocol data unit (PDU) sessions that are allowed to be registered to a network slice, receive, from a first local NSACF, an indication of a second number of UEs or PDU sessions currently registered to the network slice by the first local NSACF, wherein the first local NSACF is configured with a first local quota comprising a third number of UEs or PDU sessions that are allowed to be registered to the network slice by the first local NSACF, compare the second number to a local quota usage threshold for the first local NSACF and determine, based on the comparing, whether the first local quota for the first local NSACF is to be updated by decreasing the third number.

Apparatuses, systems, and methods for conditional handover (CHO) and extended reality (XR) capacity enhancements. A base station may receive XR traffic characteristics from a user equipment (UE) and / or from a core network. The XR traffic characteristics may be UE specific and / or flow specific. The base station may provide, to one or more target base stations, the XR traffic characteristics as part of a conditional handover request. The XR traffic characteristics may be provided in an information element over an Xn interface. In addition, the base station may receive, from the one or more target base stations, handover request acknowledgments. The handover request acknowledgments may be based, at least in part, on admission control procedures performed based on the XR traffic characteristics. Further, the base station may generate a list of candidate target base stations based on the handover request acknowledgments and provide the list of candidate target base stations to the UE.

One example method includes sending, by a first terminal device, a first request message to a network device, where the first request message is used to request to establish a sidelink radio bearer (SL RB) between the first terminal device and a second terminal device, where the first request message includes at least one of a parameter index or at least one parameter. The first terminal device can then receive a first response message from the network device, where the first response message includes one or more of admission control indication information, the at least one parameter, the parameter index, or first SL RB radio resource configuration information, where the admission control indication information indicates that the network device allows establishment of the SL RB, and where the first SL RB radio resource configuration information includes at least one of an SL RB identifier or protocol layer configuration information.

Technology described herein can employ dynamically changing network variables and / or user entity priorities to determine admission of one or more user entities to the network. In an embodiment, a system can comprise a processor, and a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations. The operations can comprise analyzing resource allocation for a quality of service flow. The operations further can comprise, based on a result of the analyzing the resource allocation, determining a threshold for quality of service for user equipment at the quality of service flow, and determining a connection decision for a user equipment based on a comparison of a quality of service prediction of a quality of service level for the user equipment to the threshold.

A system described herein may identify Key Performance Indicators (“KPIs”) associated with User Equipment (“UEs”) that are connected to a radio access network (“RAN”). Each KPI may be associated with wireless communications between a respective UE and the RAN. The system may identify a plurality of service categories associated with the plurality of UEs, where each particular UE is associated with a respective service category. The system may determine, based on the KPIs and the service category associated with each UE of the plurality of UEs, a radio resource partitioning configuration for the RAN. The particular radio resource partitioning configuration may specify that different portions of a set of radio resources, implemented by the RAN, are associated with different network slices. The RAN may implement the radio resource partitioning configuration by sending and receiving traffic, associated with respective network slices, via a corresponding portion of the set of radio resources.

Facilitating energy aware multi-cell admission control with dynamic load balancing in advanced communication networks is provided herein. A method includes facilitating, by a system comprising a processor, energy efficiency aware load balancing of already served user equipment. The method also includes facilitating, by the system, controlling of admissions of other user equipment to the communication network. The communication network can be deployed as a disaggregated architecture that comprises central units, distributed units, and a near-real-time-radio access network intelligent controller. The group of cells can be configured to operate according to a new radio network communication protocol.

The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. Provided are an access and mobility management function (AMF) and a method performed by an AMF, including receiving, from a terminal, a registration request message for a protocol data unit (PDU) session including information on a requested slice associated with the PDU session; determining whether the requested slice is allowed and whether the requested slice is for a network slice admission control (NSAC); if the requested slice is allowed for the terminal and is for the NSAC, determining whether the requested slice is exempt from the NSAC for the PDU session; and if the requested slice is exempt from the NSAC for the PDU session, transmitting, to the terminal, a registration accept message as a response to the registration request message.

This application provides a network slice admission control method and apparatus. The method includes: a first network element obtaining first information from a second network element, the first information being used to associate a first session of a user equipment (UE), the first network element supporting control over the number of users accessing the network slice, the first session being associated with the network slice, and the second network element serving the first session; the first network element receiving a first request message from the second network element, the first request message being used to instruct a reduction in the number of users already accessing the network slice; and the first network element determining, based on the first information, whether to reduce the number of users already accessing the network slice. This method enables control over the number of users accessing the network slice and the number of sessions established within the network slice, thus facilitating network slice admission control.

Facilitating energy aware multi-cell admission control in advanced communication networks is provided herein. A method includes, based on notification of a denial of an admission request by a first cell, facilitating a transmission of the admission request to a second cell and at least a third cell. The second cell and the third cell are neighbor cells of the first cell. The admission request can be received from a user equipment. The method also includes, based on receipt of an acceptance of the admission request from the second cell and the third cell, and based on a determination that a first utility of the second cell is higher than a second utility of at least the third cell, selecting the second cell as an admission cell for the user equipment. Further, the method includes facilitating admission of the user equipment to a cell cluster via the second cell.

The application discloses a multi-agent hallucination identification and propagation suppression method based on declaration-evidence propagation graph and shared memory access control, and belongs to the field of artificial intelligence credible reasoning and generative model security governance. The method first subdivides the multi-agent cooperation output into the smallest verifiable declaration unit, then collects multi-source evidence for each declaration unit through retrieval, execution, perception and questioning of heterogeneous verification agents, and constructs a declaration-evidence propagation graph containing declaration nodes, evidence nodes, agent nodes, message nodes, shared memory nodes and time nodes. The support strength, contradiction strength, cross-agent divergence, propagation gain, evidence deficiency and historical credit decay are jointly calculated on the propagation graph to obtain the declaration unit level hallucination risk score and diffusion risk score. According to the double-threshold access strategy and the propagation write-in double-channel blocking rule, the high-risk declaration unit is subjected to freezing, directional review, fragment reservation type rewriting and shared memory access control. Finally, the result with evidence annotation and risk label is output by the adjudication agent, and the credit value of each agent is updated. The application realizes fine-grained positioning, traceable judgment, shared memory isolation and propagation suppression of the internal cooperation hallucination of the multi-agent, and can be applied to scenarios such as image-text question answering, code generation, software testing, auxiliary decision-making and multi-modal reasoning.

The invention provides an application probe integration method and system based on a cloud native environment, and relates to the technical field of cloud native, and the method comprises the steps: intercepting a container creation request of a target application instance in the cloud native environment based on a triggering rule of a probe injection service; injecting the probe resource definition in the original resource definition of the target application instance by utilizing the probe injection service to obtain an integrated resource definition; and creating a target application container based on the integrated resource definition, and running the target application instance according to the target application container. Through a dynamic admission control mechanism of a cloud native environment, an application container resource request needing to be integrated with an application probe is automatically intercepted in an application container creation stage, and a self-defined probe resource definition is injected into an original resource definition of an application instance based on a pre-configured probe injection service; non-perceptual modification of application resource definition and decoupling integration of the probe and the application are achieved, and the invasiveness of installation of the probe to the application is effectively reduced.

The disclosure relates to a fifth generation (5G) or sixth generation (6G) communication system for supporting a higher data transmission rate. A method a network entity in a wireless communication system includes determining whether to transmit an update request message for a number of at least one user equipment (UE) with at least one packet data unit (PDU) session or packet data network (PDN) connection established on a network slice, based on the at least one PDU session or PDN connection established on the network slice, transmitting the update request message to a network slice admission control function (NSACF) entity, and receiving, from the NSACF entity, an update response message indicating whether the number of the at least one UE with the at least one PDU session or PDN connection established on the network slice reaches a maximum number of registered UEs with the network slice.

The present disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. According to an embodiment of the present disclosure, a method of a session management function (SMF) entity in a wireless communication system comprises the steps of: receiving, from an access and mobility management function (AMF) entity, a first message including a session management (SM) container, wherein the SM container includes result information of admission control for a quality of service (QoS) flow of a packet data unit (PDU) session; and transmitting a second message including result information of the admission control to a policy control function (PCF) entity, wherein the result information of the admission control includes information indicating whether PDU set QoS parameters are applicable to the QoS flow or PDU QoS parameters are applicable to the QoS flow.

The present application provides a bandwidth adjustment and correction method, apparatus, device, and storage medium. The method includes: if the service bandwidth of a preset path is increased, obtaining the connection admission control (CAC) enabled state of the preset path; if CAC is enabled, obtaining the bandwidth carried by the tunnel layer where the preset path is located; if the bandwidth carried by the tunnel layer is exceeded, determining a target route for the service matching the preset path according to the adjusted bandwidth of the preset path and a preset routing policy; if there is the target route, adjusting the preset path to the target route. By determining whether the tunnel can carry the adjusted bandwidth and performing routing adjustment of the preset path, it is possible to avoid service loss caused by excessive bandwidth adjustment and reduce the workload of operation and maintenance personnel.

The invention relates to the technical field of intelligent storage scheduling, in particular to a cross-roadway cooperative scheduling and congestion control method for a CTU cluster, which comprises the following steps of: in a scheduling stage, performing congestion influence evaluation on a generated candidate cross-roadway scheduling scheme; the congestion influence evaluation represents the expected influence degree on the overall operation state of the shared traffic resource when the candidate cross-roadway scheduling scheme is executed; and according to the congestion influence evaluation result, executing cross-roadway admission control of a scheduling level on the candidate cross-roadway scheduling scheme to obtain a corresponding cross-roadway admission control result, and according to the cross-roadway admission control result, limiting or allowing the target CTU to execute the corresponding cross-roadway scheduling scheme. By performing evaluation, admission and cooperative control on candidate cross-roadway scheduling schemes, executable cross-roadway scheduling schemes are reserved as far as possible, and while the scheduling flexibility is improved, system-level efficiency reduction caused by excessive concentration of cross-roadway scheduling is avoided.

A method for Network Slice Admission Control Function (NSACF) selection is performed by a Session Management Function (SMF). The method includes: receiving, via an Access and Mobility Management Function (AMF), a Protocol Data Unit (PDU) session establishment request from User Equipment (UE); and in response to receipt of the PDU session establishment request, selecting a first NSACF for a network slice based on a service capability of at least one NSACF; wherein the service capability comprises at least one of: a first service capability that supports monitoring and controlling a number of registered UEs for the network slice, or a second service capability that supports monitoring and controlling a number of established PDU sessions for the network slice.

This invention discloses a GPU memory virtualization method and apparatus based on deep parsing of the ioctl protocol, belonging to the field of electronic information technology. The method includes: intercepting ioctl system call requests initiated by the target container to obtain ioctl system call requests for GPU memory management; parsing its parameter blocks and extracting memory-related instructions to obtain memory-related instructions for subsequent auditing; constructing a shadow object tree and intelligently auditing memory allocation and mapping operations to obtain a precise memory usage ledger; determining whether the quota has been exceeded and executing interception during the physical admission control phase to obtain a control result on whether instruction pass-through is allowed; implementing view virtualization and returning virtualized memory information to the application in the target container to achieve transparent application adaptation, thereby completing precise virtualization isolation and multi-tenant secure sharing of GPU memory. This invention combines kernel-level control strength with user-space deployment flexibility.

The present disclosure provides an electronic device and method for network management, and a computer-readable storage medium. The electronic device comprises a processing circuit configured to control the operation of a network slice admission control function (NSACF) of a network slice in a mobile network on the basis of a blockchain, wherein the NSACF has a blockchain function.

The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. The present disclosure provides a method performed by a network function (NF) for network slice access control in a wireless communication system. The method includes transmitting, to a network slice admission control function (NSACF), event exposure subscribe message including information about status of single network slice selection assistance information (S-NSSAI), receiving, from the NSACF, event exposure subscribe response message indicating the result about subscription, receiving, from the NSACF, event exposure notify message including information about event information.

The present invention provides a collaborative communication method, device and equipment for a short-range communication network and a cellular network. The method comprises: receiving an admission control request message sent by a terminal via a short-range communication network, the admission control request message being used to indicate a data stream transmission strategy and / or negotiate a data stream diversion strategy; performing a PLMN search based on the admission control request message to determine the access gateway function of the cellular network; establishing a session connection between the aggregation node and the access gateway function; wherein the session connection is used for the terminal to transmit data via the aggregation node and the access gateway function to the core network deployed by the operator requested by the terminal. The present invention improves the efficiency of heterogeneous network negotiation by enhancing the access negotiation capability of trusted nodes, simplifies or merges the pure signaling interaction process before data stream transmission, avoids unnecessary link establishment overhead, achieves more efficient trusted node detection, and reduces the load on the 5G network.

Techniques of preserving UE and network resources while performing a paging procedure during cell congestion includes a network node informing a UE if the cell to which the UE is attempting to access is too congested to serve the UE. When a gNB, serving a cell, receives a paging request for the gNB to serve a UE, the gNB first performs a pro-active admission control operation to determine whether there are sufficient resources to serve the UE. When there is too much congestion, the gNB may not admit the UE to the cell and sends RAN raging with a paging flag indicating that the gNB will not serve the UE. The UE in response does not trigger a service request, but rather sends an ACK paging over RRC to the gNB, which in turn notifies the AMF of non-service and that the UE is present.

A method performed by an access and mobility management function (AMF) in a wireless communication system may include: transmitting, to a network slice admission control function (NSACF), a request message for a slice availability check including information regarding an access type of a user equipment (UE), based on a registration request of the UE for one or more single network slice selection assistance information (S-NSSAI); in case that the slice availability check is performed for the one or more S-NSSAIs at the NSACF, based on the access type of the UE, receiving a response message including information regarding a result of the slice availability check, from the NSACF; and transmitting a registration response for the one or more S-NSSAIs to the UE, based on the response message.