346 results about "Cyber operations" patented technology

Enhanced mechanism for detecting fake base station attacks In cellular or other wireless networks, false or fake base stations (FBS) behave as proper base stations managed by the network operator and aim at attracting wireless communication devices with different goals including FBS or man-in-the-middle (MitM) attacks. To detect and / or avoid such FBS or MitM attacks, it is proposed to securely perform a random-access procedure between a User Equipment, UE, and an access device in a wireless network, wherein the method comprises: receiving an L-bit sequence s received from the UE; extracting a k-bit value V by masking s with a mask; and sending V.

Systems, apparatuses, and methods for root cause analysis of a computing network are disclosed. A network management system builds a causation model based on causal mappings corresponding to network events. The causal mapping identifies a logical order of occurrence between a given network event and other network events. Network event obtained from the computing network is analyzed using the causation model for performing a root cause analysis for the computing network by generating a network event graph defining a one-to-one relationship between a given network event and one or more other network events. The causation model is built using determined hierarchical relationship of network events with a plurality of network entities as connected within the computing network.

The described embodiments set forth techniques for transferring cellular wireless service from a source wireless device to a target wireless device with multi-factor authentication and consent of a mobile network operator (MNO) account owner of a multi-user MNO account that includes one or more MNO account members. Terms and conditions for transfer of the cellular wireless service can be presented via a native operating system user interface of a wireless device of the MNO account owner. When the target wireless device belongs to an MNO account member, the MNO account owner wireless device facilitates transfer of the cellular wireless service by allowing the MNO account owner to review terms and conditions and provide one-time passcode authentication to the target wireless device. An original equipment manufacturer (OEM) cloud network service can be used for transfer of terms and conditions information and / or the one-time passcode.

Provided is a system including at least one processor configured to detect a communication request for a communication between a protected party and a second party, in response to determining the communication originated from the second party, determine if an identity of the second party is verified by the originating service provider based on at least one of STIR / SHAKEN attestation or a network operator, in response determining that the identity of the second party is verified by the originating service provider, initiate a search in a database maintained by the protected party based on an identifier of the second party, determine if the identifier of the second party matches an entry in the database based on the search, and in response to determining that the identifier of the second does not match an entry in the database, automatically monitor the communication in real-time.

The invention discloses a rail transit multi-network integration method based on a digital trunking technology, relates to the technical field of communication, and aims to solve the problem that a traditional narrowband trunking system cannot meet the requirements of voice and data comprehensive bearing and vehicle-ground large-bandwidth service real-time transmission. The method comprises the following steps: constructing a time division duplex long-term evolution broadband digital trunking unified bearing platform; an intermediate media access control layer fusion architecture is deployed, and seamless mobility management of the heterogeneous network is realized through unified authentication and multi-link aggregation; an intelligent vertical switching algorithm based on prediction and multi-criterion decision is introduced, a bidirectional long-short-term memory network model is utilized to predict a network state trend, and an improved entropy weight method and an analytic hierarchy process are combined to dynamically select an optimal access network according to service requirements. According to the invention, the network operation efficiency and the user experience can be obviously improved, and high reliability and high service quality of the rail transit communication system are ensured.

Certain aspects of the subject matter described in this disclosure can be implemented in a method for wireless communication by a user equipment (UE). The method generally includes registering with a first public land mobile network (PLMN) of a first network operator in response to detection of an interruption event associated with a second PLMN of a second network operator; determining that the interruption event has ended; and taking one or more actions to communicate with the second PLMN in response to the ending of the interruption event, wherein taking the one or more actions to communicate with the second PLMN is based on a constraint associated with access attempts to the second PLMN.

An apparatus configured to receive, from a provisioning server, a request to create at least one sub-profile of at least one profile stored within an embedded universal integrated circuit card of the apparatus; wherein the request comprises encrypted subscription data comprising a symmetric key between a service provider and a user of the apparatus; store the symmetric key within the embedded universal integrated circuit card of the apparatus; and create the at least one sub-profile of the at least one profile stored within the embedded universal integrated circuit card of the apparatus; wherein the at least one sub-profile of the at least one profile stored within the embedded universal integrated circuit card of the apparatus is configured to be used to authenticate the user of the apparatus to the service provider with use of the symmetric key without involvement of a mobile network operator.

Techniques to enable implementation within a network infrastructure of a network operator (550, 560) comprising the following steps: • providing and / or creating a Decentralised Identifier "DID", a private key, a public key and verifiable credentials "VC" for the network element (200, 425, 530, 810); • binding the VC to the DID resulting in a DID-bound VC (205) and add a digital signature of an issuer to the DID-bound VC (205); • providing the DID-bound VC and the private key to the network element (200, 425, 530, 810).

The embodiment of the invention discloses an instance scheduling method, a related method, a related device, a storage medium and equipment. The method comprises the following steps: acquiring object distribution data corresponding to a target cloud game; generating the number of instances to be created of each network operator of each region through the object distribution data; based on the network delay, screening out a preset number of target server clusters from each network operator of each region; determining a creation weight for each target server cluster in each network operator of each region according to a node affinity strategy; and in combination with the number of the instances to be created and the corresponding creation weight, calculating the number of created instances of each target server cluster in each network operator of each region, and performing instance scheduling. Therefore, automatic, efficient and flexible instance scheduling is realized, manual staring is avoided, the utilization rate of instances is improved, the utilization rate of operation resources is further improved, meanwhile, the network time delay of connection can be reduced, and the cloud game experience of players is improved.

A non-transitory computer readable medium stores instructions that, when executed by a processor, cause the processor to receive data associated with a plurality of simulated cyberattacks on a virtual operational technology (OT) network, wherein the virtual OT network comprises a virtualized representation of an OT network based on configuration data of the OT network, identify, based on the received data, one or more cybersecurity vulnerabilities of the OT network, identify one or more modifications to a set of cybersecurity rules implemented in the OT network to address the one or more cybersecurity vulnerabilities of the OT network, provide an indication of the one or more modifications to a computing device associated with the OT network for approval; and update, via a third-party network security service utilized by an operator of the OT network, the set of cybersecurity rules to implement the one or more identified modifications.

Techniques for controllable device deregistration and reregistration provide for enhanced network operator control over the timing of device deregistration and reregistration with the network. Example techniques can be applied by a home subscriber service (HSS) of an internet protocol multimedia core network subsystem (IMS). In response to a reregistration notification initiated by a network operator, the HSS can create an IMS deregistration notification comprising a reregister bit and can set the reregister bit to an enabled state. The HSS can then forward the IMS deregistration notification to downstream network equipment such as call session control functions (CSCF), which can in turn forward the IMS deregistration notification to a user equipment (UE), thereby causing the UE to re-register with the IMS.

Methods, system and apparatus are provided to perform network slice admission control within a service area of an operator network and across service areas of the operator network. A central Network Slice Admission Control Function (NSACF) supporting multiple service areas of at least one operator network receives an admission request from a network function (e.g., AMF, SMF or SMF+PGW-C) belonging to a service area of an operator network. The admission request includes information identifying the service area and may include an identifier of the network operator. The central NSACF performs network slice admission control based on whether the UE is newly admitted to the network slice in the service area or whether the UE has already been admitted in a different service area.

A non-transitory computer readable medium stores instructions that, when executed by a processor, cause the processor to receive data associated with a plurality of simulated cyberattacks on a virtual operational technology (OT) network, wherein the virtual OT network comprises a virtualized representation of an OT network based on configuration data of the OT network, identify, based on the received data, one or more cybersecurity vulnerabilities of the OT network, identify one or more modifications to a set of cybersecurity rules implemented in the OT network to address the one or more cybersecurity vulnerabilities of the OT network, provide an indication of the one or more modifications to a computing device associated with the OT network for approval; and update, via a third-party network security service utilized by an operator of the OT network, the set of cybersecurity rules to implement the one or more identified modifications.

Techniques for providing a language model to detect and remedy a security incident are described. A language model is deployed to respond to prompts from network operators. The language model receives a prompt from the network operator indicating actions to take based on trigger events. When a trigger event occurs, the language model receives a description of a potential security incident and identifies indicators of compromise in the description. The language model calls one or more other models to analyze the indicators and receives from the one or more other models, information indicating that the potential security incident is a real security incident, and outputs a prompt to the network operator to approve confirmation of the security incident.

The embodiment of the invention relates to a network operation management method and system and electronic equipment, and relates to the technical field of operation management, and the method comprises the steps: obtaining to-be-processed network data, and carrying out the spatial domain feature extraction of the to-be-processed network data, and obtaining corresponding spatial domain features; performing time domain feature extraction on to-be-processed network data to obtain a time domain feature corresponding to the to-be-processed network data; and fusing the time domain feature and the spatial domain feature to obtain a fused feature, performing multi-scale feature extraction on the fused feature, and determining a network traffic prediction value corresponding to the to-be-processed network data, so that an operation management system performs operation management on a target network based on the network traffic prediction value. According to the invention, the accuracy of network traffic prediction can be improved.

The invention provides a configuration processing method of an embedded user identification card, electronic equipment and a storage medium, and relates to the technical field of communication. The method comprises the following steps: after a target device starts a Bluetooth broadcast mode, the sharing device establishes a Bluetooth connection with the target device; the sharing device and the target device perform Bluetooth pairing, and after successful pairing, the sharing device and the target device respectively determine a target encryption key; and the target device establishes a Bluetooth personal local area network connection with the shared device through the target encryption key, and the target device obtains a configuration file of the embedded subscriber identity module card from a network operator through a Bluetooth personal local area network communication protocol so as to activate the embedded subscriber identity module card. According to the method, the hardware cost of the target equipment can be effectively reduced, the labor cost and the time cost are reduced, and the product competitiveness is improved.

Disclosed is a method for mapping a subscriber to a mobile network operator in a fifth-generation New Radio (5G NR) cellular telecommunication radio access network (RAN). The method is performed by a Radio Unit (RU) device operated by a first network operator and includes: transmitting system information including first information indicating network slices and second information indicating Physical Random Access Channel (PRACH) occasions mapped to the network slices, receiving a preamble of a Random Access Channel (RACH) during one of the PRACH occasions indicated by the second information, determining a second network operator based on the one of the PRACH occasions during which the preamble of the RACH is received, and transmitting the preamble of the RACH to a Distributed Unit (DU) device that is operated by the second network operator determined based on the one of the PRACH occasions during which the preamble of the RACH is received.

Systems and methods for coordinating and controlling vehicles, for example heavy trucks, to follow closely behind each other, or linking to form a platoon. In one aspect, on-board controllers in each vehicle interact with vehicular sensors to monitor and control, for example, relative distance, relative acceleration or deceleration, and speed. In some aspects, vehicle onboard systems supply various data (breadcrumbs) to a Network Operations Center (NOC), which in turn provides data (authorization data) to the vehicles to facilitate platooning. The NOC suggests vehicles for platooning based on, for example, travel forecasts and analysis of relevant roadways to identify platoonable roadway segments. The NOC also can provide traffic, roadway, weather, or system updates, as well as various instructions. In some aspects, a mesh network ensures improved communication among vehicles and with the NOC. In some aspects, a vehicle onboard system may provide the authorization data.

A communication device and an operating method thereof are provided to prevent data session lost or a torn-down phenomenon, in a case that data communication is performed via a network operator supporting 5th-generation Stand Alone (5G SA) or 5G E-UTRAN New Radio - Dual Connectivity (5G ENDC) network service. According to an embodiment of the present disclosure, the communication device may identify a requirement of a network operator providing a connection-target network service, may obtain network service information of a communication network, may determine an Internet Protocol (IP) protocol type to connect to the communication network, based on at least one of the requirement of the network operator, the network service information, and Radio Access Technology (RAT) information of the communication device, and may transmit a request signal for requesting a PDN access to the communication network, based on the determined IP protocol type.

Techniques for providing a language model with dynamic configuration data for network devices in a network that is then used by the language model to generate network-contextual responses to prompts received at the language model. A network controller may collect configuration data from the network devices where the configuration data includes device configurations of the network devices. The network controller may further receive a prompt from a network operator to which the language model is to respond and identify a relevant device configuration that is contextually relevant to the prompt. Further, the network controller may provide the prompt and the relevant device configuration to the language model, generate, by the language model and using the relevant device configuration, a response to the prompt, and provide the network operator with an indication of the response to the prompt.

The invention provides a network energy efficiency optimization method. A digital twin reinforcement learning network model is used for learning to obtain action strategies of multiple to-be-optimized services; traversing all service establishment states according to an action strategy, determining a service path establishment action with the optimal global energy efficiency in each service establishment state, and obtaining a service path establishment action sequence with the optimal global energy efficiency; establishing an action sequence according to the service path with the optimal global energy efficiency, and determining the path distribution with the optimal energy efficiency of each to-be-optimized service; according to the embodiment of the invention, the problem of low energy efficiency in network operation is effectively identified by adopting a digital twin modeling and analysis technology, and the path distribution with the optimal global energy efficiency of each service is determined, so that the path with the optimal energy efficiency is configured for each service, and the energy efficiency use is optimized and improved. The invention further provides computer equipment and a computer readable medium.

Method for transporting packets in a multi-cluster Network on Chip (NoC) interconnect with a transport protocol significantly enhance packet management in complex NoC chip architectures. This approach involves processing a packet within clusters to determine a destination cluster and a destination node, and executing a node lookup for the packet intended for different clusters. This lookup identifies an optimal path for transporting the packet out of the cluster. The multi-cluster NoC interconnect efficiently outlines cluster-to-cluster connections and manages global traffic, incorporating deadlock prevention techniques. Global bridges and boundary bridges facilitate effective traffic management between clusters. Each node includes a programmable path table that dynamically assigns efficient routes. This method significantly improves packet management across multi-cluster NoCs, offering a scalable, efficient, and reliable solution for complex computing environments.

Methods, systems, and devices for wireless communications are described. An access and mobility management function (AMF) proxy may establish communication links with a RAN and a first AMF of a first network operator, and with a second AMF of a second network operator. The AMF proxy may receive a first message from the RAN, the first AMF, or the second AMF, the message indicating a manipulated or unmanipulated AMF user equipment (UE) identifier (ID) and a manipulated or unmanipulated RAN UE ID. The AMF proxy may perform ID manipulation the UE IDs in the first message based on a first mapping between the manipulated and unmanipulated AMF UE ID and a second mapping between the manipulated and unmanipulated RAN UE ID. The AMF proxy may transmit a second message to the first AMF, the second AMF, or the RAN based on the AMF UE ID or the RAN UE ID.

Aspects of the subject disclosure may include, for example, communicating management plane (M-plane) data at a first port of a radio unit (RU), the RU being one RU of a set of radio units (RUs) at a cell site of a network operator, the M-plane data related to management and control of the RU, wherein the communicating M-plane data comprises communicating the M-plane data with a distributed unit (DU) over an M-plane segment, and initiating communication of the M-plane data at a second port of the RU, the second port configured for data communication over an alternate M-plane segment to a second RU of the set of RUs for forwarding the M-plane data to the DU over a second M-plane segment between the second RU and the DU, wherein the initiating communication is in response to an interruption in the communicating M-plane data.Other embodiments are disclosed.

A system for optimizing one of a 5G New Radio (NR) network or a 4G Long Term Evolution (LTE) network operation, includes: an artificial intelligence (AI) engine configured to: a) implement at least one of the following: i) collection of raw training data set; ii) training of an AI agent; iii) inference generation triggered by UE; iv) using at least one of network key performance indicator (KPI) report and network operator inputs; and v) network KPI collection after application of inferences; andb) at least one of infer and apply at least one of i) network-wide optimal per-gNB or per transmission / reception point (TRP) Synchronization Signal (SS) burst set, and ii) associated channel state information reference signal (CSI-RS) configurations for downlink (DL) reference signal transmissions, thereby enhancing at least one of network transmission power efficiency and spectral efficiency.

Sensing as a service is a new paradigm that researchers have recently started to explore as another way of bringing value to the consumer of cellular services as well as to the operators of the networks. A variety of potential applications will be enabled by this paradigm shift including local sensing services such as localization, tracking, V2X applications, environmental monitoring, etc. In addition to methods, the current invention discloses a new network entity / network function, a sensing manager SM. The SM handles the sensing functionality of the network node gNB as well as the attached (registered) external sensors. The functions carried out by this new network entity are not currently supported by any available network entity in the nowadays networks.

Techniques to enable implementation within a network infrastructure of a network operator (550, 560) comprising the following steps: • providing and / or creating a Decentralised Identifier "DID", a private key, a public key and verifiable credentials "VC" for the network element (200, 425, 530, 810); • binding the VC to the DID resulting in a DID-bound VC (205) and add a digital signature of an issuer to the DID-bound VC (205); • providing the DID-bound VC and the private key to the network element (200, 425, 530, 810).

Detecting, reporting and reducing unsolicited calls in a telecommunications network. Reporting an unsolicited call to a network operator of a telecommunications network. Receiving a message at a user equipment, UE, 500 of the telecommunications network. The message comprises: a unique identifier corresponding to a call to the UE 500 that has been initiated, and one or more pre-defined responses. Receiving at the UE 500 a selected a response of the one or more predefined responses indicating that the call is an unsolicited call. Sending a report to the network operator, the report comprising the unique identifier and the selected response.

The invention discloses a network operation decision-making method, system and device based on flow information and a medium, and the method comprises the steps: obtaining multi-source data related to network operation, including network flow, user behaviors and service operation data; performing cleaning, duplicate removal and format standardization processing on the acquired data to form a structured intelligence data set; key features are extracted from the preprocessed intelligence data, a traffic feature system is constructed, and trend analysis is performed in combination with historical operation data; based on the traffic characteristics and the analysis result, establishing an operation decision model, and generating candidate decision schemes for network resource scheduling and service optimization; and performing quantitative evaluation on the candidate schemes through a preset evaluation index, and screening an optimal decision scheme. Through multi-source traffic information integration and standardized preprocessing, a network layer, an application layer and third-party data are fused, the problem of one-sidedness of single-dimension data decision is solved, a comprehensive traffic feature system is constructed, and a more accurate basis is provided for operation decision.