4458 results about "Core network" patented technology

The invention discloses a big data auxiliary key generation method and system in communication data encryption transmission, and relates to the technical field of big data analysis and processing. The dynamic entropy source processing module is used for generating a high-randomness entropy pool by combining an information entropy quantification model and adopting a Shannon entropy and minimum entropy fusion algorithm; the anti-quantum key generation module is used for generating a dynamic variable-length key seed based on an entropy pool driven post-quantum cryptographic algorithm; the hierarchical key negotiation module adopts a clustering Diffie-Hellman protocol, dynamically divides negotiation according to network topology, and precomputes and reduces the load of a core network through edge nodes; and a lightweight verification and update module. According to the method, high-entropy sources such as environmental noise, user behaviors and equipment hardware fingerprints are fused with low-entropy sources such as network messages and sensor data, and an intelligent acquisition strategy and a nonlinear decorrelation technology are combined, so that the anti-quantum dynamic entropy pool is generated, and the randomness of a secret key and the reliability of the entropy sources are improved.

Provided are a device and a method for controlling data traffic by a core network control plane node. The method may include receiving, from an application function control entity, one or more pieces of information among help information on application traffic characteristics, a PDU-Set QoS parameter, an identifier for grouping flows belonging to a multi-modal application, and a synchronization threshold; transmitting, to a base station, one or more pieces of information among help information on application traffic characteristics, a PDU Set QoS parameter, an identifier for grouping flows belonging to a multi-modal application, and a synchronization threshold during a PDU session establishment or modification procedure; and instructing transmission of a user packet including PDU-Set information to a core network user plane node.

A wireless communication method and system enabling dynamic multi-path data transmission and reception across heterogeneous radio access networks. The method includes selecting between sequential, concurrent, or redundant multipath transmission strategies based on real-time measurements of link quality parameters, including signal-to-interference-plus-noise ratio (SINR), reference signal received power (RSRP), delay, and spectrum availability. The system further enables adaptive transmission power control, modulation scheme selection, and carrier configuration based on physical layer feedback, minimizing interference and optimizing spectral efficiency. Peer-to-peer communication between terminals is supported without base station mediation, reducing RAN load. Multi-base station connectivity is enabled, allowing terminals to simultaneously transmit through multiple nodes and aggregate at the core network. The architecture supports real-time topology control, dynamic link adaptation, and transmission parameter adjustment based on physical-layer constraints.

A method includes sending, by a user equipment (UE), a registration request message to a mobile communication network, the message including a core network capability indication that the UE supports partial registration of at least one network slice that is not available within all of the tracking areas in a registration area. The method includes, receiving, from the mobile communication network, a mobility management message having parameters for (i) one or more allowed network slices supported by each tracking area of the registration area, and (ii) a partial network slice registration identifying at least one local network slice that is supported in at least one, but not supported within all of the tracking areas. The method includes configuring the UE to use the local network slice of the partial network slice registration when the UE is located in the tracking area supporting the local network slice.

The invention discloses an AI-based signaling network vulnerability attack simulation and prevention system, which comprises a signaling sensing layer, which is deployed in a core network element to carry out hardware-level decoding of an SS7 / Diameter / SIP / 5G-NR protocol, dynamically extracts protocol field-level metadata through a YARA rule base and generates a standardized signaling log; the threat modeling layer is used for receiving a signaling log output by the signaling sensing layer, generating mixed traffic after injecting a simulation attack, outputting the mixed traffic to the anomaly detection layer, constructing a multi-dimensional feature encoder by using a parameterized quantum gate based on a quantum generative adversarial network and a GFlowNet stream generation engine, generating a compliance attack vector in combination with the constraint of a 3GPP protocol state machine, and outputting the compliance attack vector to the anomaly detection layer; meanwhile, attack trajectory diversity sampling is completed through a Diameter protocol AVP nested state tree and a two-factor award function; the anomaly detection layer is used for receiving the mixed flow of the threat modeling layer and outputting a threat evaluation result to the response processing layer; and the response processing layer is used for receiving the threat assessment result of the anomaly detection layer and issuing a defense instruction to the signaling sensing layer.

A wireless device receives, from a core network node, one or more messages comprising an identifier of a network slice, an identifier of an alternative network slice mapped to the network slice, and an identifier of a network slice group associated with the alternative network slice.

A system and method, the method including determining, by a centralized user configuration function based on a core network packet delay budget (CN PDB) and a buffer duration, an allowed maximum latency of a time-sensitive network (TSN) stream transmitted between an access network device and a user plane network element, wherein the maximum latency does not exceed a difference obtained by subtracting the buffer duration from the CN PDB, sending, by the centralized user configuration function, first latency information to a centralized network configuration function, wherein the first latency information indicates the maximum latency, receiving, by the centralized user configuration function, first configuration information, wherein the first configuration information indicates a packet transmission time of the transmit end of the TSN stream, and the packet transmission time is associated with the maximum latency, and sending the first configuration information to the transmit end of the TSN stream.

Please delete the Abstract of the Disclosure, and replace it with the following: In the current 3GPP standard(s), there is no mechanism or procedure for Key issue. This disclosure provides a solution to this key issue. A method for a User Plane Function (UPF) includes receiving, from a core network node, at least one of Users Equipment ID (UE ID), Data Network Name (DNN), Single-Network Slice Selection Assistance Information (S-NSSAI) and information related to UE Route Selection Policy rule (URSP). The method includes checking whether user data for a User Equipment (UE) using a User Equipment (UE) session with the DNN and S-NSSAI matches the information related to UE Route Selection Policy rule (URSP) or not. The method includes sending to the core network node a result of the checking.

The invention provides a sensing processing method, a sensing integrated system, electronic equipment and a storage medium, relates to the technical field of communication, and is used for improving the sensing data processing accuracy of the sensing integrated system based on artificial intelligence and the convenience of data transmission between modules. The method is applied to a perception function entity, and comprises the following steps: acquiring a trained artificial intelligence model from a perception server; processing the sensing data based on an artificial intelligence model to obtain a sensing result; and sending the artificial intelligence perception result to the core network element.

The present disclosure relates to the technical field of communication network operation and maintenance. Provided are a key-indicator-based core network anomaly identification method and apparatus, and an electronic device. By taking a network element type and a pool as an aggregation unit, dimensionality reduction is performed on multi-dimensional key indicators of network elements to obtain three-dimensional key indicators for easy visualization; and key indicators of all network elements in a network element pool are input on the basis of pool relationships, such that the capability of horizontal comparison of features across multiple network elements and multiple indicators can be provided, and anomaly analysis is then performed on three-dimensional data by means of a clustering algorithm, so as to find and obtain outliers representing anomalies, and thus, related information can be extracted from the outliers to generate a three-dimensional clustering view, and results such as an anomalous network element list, anomaly time, a complete KPI record and the clustering view are returned. The disclosure can realize quick locating of anomalies of a core network, and significantly improves the effect of multi-dimensional indicator analysis and the accuracy of anomaly detection, thereby facilitating early intervention and early troubleshooting of network problems, and thus ensuring stable and normal network operation.

The invention provides a core network operation and maintenance system construction method based on a large model and a core network operation and maintenance system. The method comprises the following steps: creating sub-graph structures of a plurality of task execution agents and a graph structure of a main agent; establishing a calling relationship between the graph structure and / or the sub-graph structure and a large language model LLM; compiling the graph structure and the sub-graph structure to obtain a graph instance; constructing a core network operation and maintenance system based on the graph instance; wherein the graph instance is used for defining an operation process of the core network operation and maintenance system, and the operation process at least comprises the following steps: responding to a user instruction by a main agent, calling an LLM to analyze the user instruction so as to identify a task intention, and scheduling a corresponding task execution agent based on the task intention; and the task execution agent responds to the scheduling and calls the LLM to generate a task execution process, and executes the operation and maintenance task based on the task execution process. Therefore, a core network operation and maintenance system can be constructed, intelligentization and automation of core network operation and maintenance are realized, and operation and maintenance efficiency and accuracy are improved.

A technique of triggering one or more congestion mitigation actions in a communication network is presented. The communication network comprises a core network domain and a cellular RAN domain having an O-RAN architecture. A method implementation comprises evaluating a temporal behavior of at least one congestion indicator for individual cells in the RAN domain to identify one or more candidate cells that are prone to suffering from congestion. The method also comprises correlating, for at least one of the one or more candidate cells, session-related information from the core network domain with RAN information from the RAN domain to derive at least one quality indicator for the at least one candidate cell. Further, the method comprises triggering, dependent on the at least one quality indicator derived for the at least candidate cell, one or more congestion mitigation actions.

The invention relates to the technical field of 5G-R network detection and monitoring, discloses a 5G-R network situation awareness method based on distributed monitoring and multi-source information fusion, and aims at solving the problems that a 5G-R network is large in scale, high in dynamic performance and complex in data isomerism. Multi-source data of a core network, a wireless network, special equipment, interface monitoring, detection equipment, a GIS and the like are collected in real time; according to the method, technologies such as Pearson's correlation coefficients, FP-Growth, Bayesian analysis, a time sequence point process, a Hookes theory, a Gaussian mixture model, a decision tree, S-ARIMA, Boxplot, N-sigma, iForest, regression analysis, a neural network and KL divergence are combined to realize multi-source data fusion, intelligent analysis and visual perception, including network alarm, application quality, operation and maintenance and resource management. According to the method, the comprehensiveness, the real-time performance, the fault diagnosis accuracy and the operation and maintenance efficiency of the 5G-R network are improved, and the requirements of low delay and high reliability of a railway scene are met.

A radio access network (RAN) can perform a method for managing security protection for multicast and / or broadcast services (MBS). The method includes receiving (802), from a core network (CN) via a DL tunnel, a data packet associated with an MBS session; prior to transmitting the data packet to a plurality of UEs, determining (804) which security protection to apply to the data packet based on an identity of the DL tunnel; and transmitting (806) the data packet to the plurality of UEs using the determined security protection. A UE can receive (902), from a RAN, a configuration for establishing a logical channel with the RAN; receive (904), from the RAN via the logical channel, a data packet associated with an MBS session; determine (906) which security protection to apply to the data packet based on the configuration; and apply (908) the determined security protection to the data packet.

The invention provides a rail transit vehicle-ground security encryption control method based on a national cryptographic algorithm. The method comprises the following steps: realizing rail transit vehicle-ground security encryption control enabled by the national cryptographic algorithm by adopting a layered and segmented three-level security encryption architecture of a vehicle-mounted terminal layer-a network transmission layer-a core network layer; cooperative control of a national cryptographic algorithm is realized through three stages of terminal authentication, data encryption and tunnel encapsulation; in order to solve the problem of encryption interruption caused by wireless link switching such as 5G signal attenuation, the technical scheme of the patent realizes lossless switching through a three-layer linkage mechanism of signal monitoring, switching decision and key synchronization; self-adaptive intelligent adjustment of a key strategy is realized through a three-layer closed-loop architecture of environmental perception, intelligent evaluation and dynamic regulation and control; and the self-adaptive intelligent adjustment of the key strategy is realized through a three-layer closed-loop architecture of environmental perception, intelligent evaluation and dynamic regulation and control. And the national secret algorithm is combined with the block chain evidence storage technology to realize data tampering prevention, and the speed is high.

A disclosure of the present specification provides a method for performing relay communication by a first UE. The method may comprise the steps of: transmitting a request message including UE ID, relay information, UE type information, and UE public key information to an application server through a 5G core network; receiving, from the application server, a security-related message in response to the request message; establishing a security link with the relay UE on the basis of first credential information; and receiving an IP message for configuring a security channel in an IP layer from a second UE.

The invention refers to method and devices for on demand paging for executing a sidelink relay path switch, the method including: Receiving a message from a remote user equipment, UE, including a measurement report and a list of candidate relay UEs; Selecting a target relay UE for the sidelink relay path switch from the list of candidate relay UEs; and performing one of: Transmitting a paging request to an entity of a core network, CN, including instructions to page or instruct the target relay UE to transit to an RRC_CONNECTED state for sidelink relay path switch purposes; and Transmitting a paging request to the target relay UE, including a request or instructions to transit to an RRC_CONNECTED state for sidelink relay path switch purposes.

A method is disclosed, performed by a service API controlling node, for enabling a first wireless device to determine a relative position between a plurality of second wireless devices based on a positioning function of a core network. The method comprises receiving, from the first wireless device, over an established data connection, an authorization request message for using a service API. The method comprises authorizing the first wireless device to use the service API for positioning of wireless devices. The method comprises receiving, from the first wireless device, using the service API for positioning of wireless devices, a message comprising information identifying the plurality of second wireless devices. The method comprises authorizing the first wireless device to determine the relative position of the plurality of second wireless devices. The method comprises performing, based on the positioning function and the message identifying the plurality of second wireless devices, a positioning procedure for determining the relative position of the plurality of second wireless devices.

The invention provides a network side mobility management method and device, a gateway, a network management server and a base station, and relates to the technical field of communication. The method is applied to a gateway, and comprises the following steps: receiving a first switching request sent by core network equipment; the first switching request carries a first cell code corresponding to the target small base station group and identification information of a source macro base station; obtaining a small base station list under the coverage of the source macro base station according to a neighbor relation information table between the macro base station and the small base station; determining a target small base station corresponding to the first cell code from a small base station list covered by the source macro base station; sending a second switching request to the target small base station; the second switching request carries switching access dedicated resource group information; receiving a switching request confirmation message sent by the target small base station; and sending a first switching signaling to a core network device, wherein the first switching signaling carries the switching access dedicated resource group information. According to the scheme of the invention, the switching from the macro base station to the small base station can be realized.

The embodiment of the invention provides a distributed medical equipment management platform and method based on a zero-trust network. In the distributed medical equipment management platform based on the zero-trust network, an edge trusted access module adopts a hardware root of trust mechanism, so that equipment accessed for the first time is connected to a temporary supply network isolated from a medical core network, and a zero-trust security normal form is followed; the distributed trust anchor point cluster constructs a distributed identity verification network based on federated learning, and the access pre-authorization authority is verified through a device distributed identity identification (DID); the dynamic permission arrangement engine injects an attribute-based access control strategy, generates a permission token in combination with network micro-segmentation, and realizes two-way encryption communication between the equipment and a target service; the intelligent isolation gateway cuts off temporary connection through a software defined network technology and sends a network access state proof through a block chain mechanism, and edge module initialization is executed by a trusted node outside the medical cloud.

Methods and apparatuses for handling of data transmission in DL small data transmission (SDT) are disclosed. A network device comprises a processor, and a transceiver coupled to the processor, wherein the processor is configured to: transmit, via the transceiver, DL data during DL SDT to a terminal device that supports an Radio Resource Control (RRC) non-CONNECTED state; determine that the connection with the terminal device is lost before the DL SDT successfully completes; and transmit, via the transceiver, an indication to the terminal device or other network device(s) or a core network device, for completing the DL SDT.

Embodiments of the present disclosure relate to methods, devices, and computer readable medium for communication. According to embodiments of the present disclosure, an artificial intelligence / machine learning (AI / ML) based positioning model is deployed at a terminal device or a network device. If the AI / ML based positioning model is triggered, location related measurement information of the terminal device is determined based on the AI / ML based positioning model. A core network device estimates a position of the terminal device based on the reported location related measurement information. In this way, the terminal device can be positioned more accurately.

The apparatus may be a wireless device or user equipment (UE) configured to obtain a first plurality of generated packets including information related to the L4S service and process, based on the information related to the L4S service, the first plurality of generated packets for transmission by the UE. The apparatus may be a network device configured to some examples, a network device may be configured to include, in each received UL packet of a first plurality of received uplink (UL) packets, explicit congestion notification (ECN) information related to radio network delays and output, for a core network, the first plurality of received UL packets including the ECN information related to the L4S service.

Methods and apparatus for providing L4S support with regard to non-3GPP untrusted / trusted accesses in which a user equipment (UE) is enabled to monitor for uplink and / or downlink congestion with regard to L4S uplink data traffic flows at the UE, detect congestion, and perform explicit congestion notification (ECN) markings or communicate congestion information to perform ECN marking to another device are described. In some embodiments, the UE device indicates detected congestion, at the UE, in an uplink (UL) traffic flow via performing ECN marking of an innermost IP header ECN field. In some other embodiments, the UE device communicates detected congestion information, via a GRE message to a core network interface device, which communicates, via GTP-U, the detected congestion information to a UPF, which then uses the received UE detected congestion information to performs ECN marking in the innermost IP header of an uplink data packet.

A network node obtains, from a core network component, a quality of experience (QoE) configuration associated with a high speed dedicated network (HSDN) indication and outputs the QoE configuration for a user equipment (UE) based on the UE being camped on an HSDN cell or based on a mobility condition of the UE. A UE receives, from a network node, a QoE configuration associated with an HSDN indication and collects QoE information based on at least one of an HSDN status of a cell or a mobility condition of the UE.

A communication system is disclosed in which a number of procedures may be performed between user equipment, a base station, and / or the core network in the context of network slicing. The procedures support, for example efficient configuration of paging areas, roaming, access restriction, mobility, setting up of dual mode connectivity, connection re-establishment, efficient paging and slice selection.

There is provided an apparatus in a user equipment, the apparatus comprising: means for receiving, from a core network entity, at least one user equipment route selection policy rule, wherein the at least one user equipment route selection policy rule comprises a component with information associated with a source device that is able to request data traffic via the user equipment, and means for receiving, from an application of the source device, a request for uplink data traffic, wherein the request comprises information about the source device. The apparatus further comprising means for determining how to route the data traffic from the application, using the at least one user equipment route selection policy rule and based on the received information about the source device in the request, to determine a route, and means for routing the data traffic according to the determined route.

A computing node includes network interface circuitry and processing circuitry. The processing circuitry assigns available computing resources to a plurality of slice contexts. Each slice context of the plurality includes resource allocations of the available computing resources associated with multiple communication networks. A first portion of the resource allocations is designated as dedicated resources and a second, remaining portion is designated as shared resources. A FAFO event associated with a workload is detected. The workload executes on a network slice instance (NSI) associated with a slice context of a subset of slice contexts. The configuration of the NSI is restored to a pre-FAFO event state based on reconfiguring one or both of the dedicated resources or the shared resources of the slice context based on the resource allocations of at least a second slice context in the subset of slice contexts.

Techniques for providing explicit proxy solutions for 5G Service Access Service Edge (SASE) with service provider network attach are disclosed. In some embodiments, a system, a process, and / or a computer program product for providing explicit proxy solutions for 5G SASE with service provider network attach includes receiving data plane traffic associated with a User Equipment (UE) from a mobile core network at a Secure Access Service Edge (SASE) cloud network via a service provider network attach using an interconnect between the mobile core network and the SASE cloud network; enforcing a security policy on data plane traffic associated with the UE based on contextual information associated with the UE to provide secured data plane traffic using the security policy configured per user group and / or per user; and forwarding the secured data plane traffic from the SASE cloud network to its original destination if allowed by the security policy, and blocking or dropping the data plane traffic from the SASE cloud network if not allowed by the security policy.

In some embodiments, a network apparatus in a telecommunications network, wherein the telecommunications network comprises at least one core network and at least one network node, can be configured to receive data comprising an indication to disable, enable or reenable the use of at least one network operation of the network apparatus for a user equipment, UE, wherein the user equipment, UE, is in a radio resource control, RRC, idle or inactive state of operation, and wherein the user equipment, UE, is participating in an active Packet Data Unit, PDU, or Evolved Universal Terrestrial Radio Access Network, E-UTRAN, Radio Access Bearer, E-RAB, session for an emergency call, and use the received data to disable, enable or reenable the at least one network operation.