204 results about "Cyber operations" patented technology

Systems, apparatuses, and methods for root cause analysis of a computing network are disclosed. A network management system builds a causation model based on causal mappings corresponding to network events. The causal mapping identifies a logical order of occurrence between a given network event and other network events. Network event obtained from the computing network is analyzed using the causation model for performing a root cause analysis for the computing network by generating a network event graph defining a one-to-one relationship between a given network event and one or more other network events. The causation model is built using determined hierarchical relationship of network events with a plurality of network entities as connected within the computing network.

The invention discloses a rail transit multi-network integration method based on a digital trunking technology, relates to the technical field of communication, and aims to solve the problem that a traditional narrowband trunking system cannot meet the requirements of voice and data comprehensive bearing and vehicle-ground large-bandwidth service real-time transmission. The method comprises the following steps: constructing a time division duplex long-term evolution broadband digital trunking unified bearing platform; an intermediate media access control layer fusion architecture is deployed, and seamless mobility management of the heterogeneous network is realized through unified authentication and multi-link aggregation; an intelligent vertical switching algorithm based on prediction and multi-criterion decision is introduced, a bidirectional long-short-term memory network model is utilized to predict a network state trend, and an improved entropy weight method and an analytic hierarchy process are combined to dynamically select an optimal access network according to service requirements. According to the invention, the network operation efficiency and the user experience can be obviously improved, and high reliability and high service quality of the rail transit communication system are ensured.

A non-transitory computer readable medium stores instructions that, when executed by a processor, cause the processor to receive data associated with a plurality of simulated cyberattacks on a virtual operational technology (OT) network, wherein the virtual OT network comprises a virtualized representation of an OT network based on configuration data of the OT network, identify, based on the received data, one or more cybersecurity vulnerabilities of the OT network, identify one or more modifications to a set of cybersecurity rules implemented in the OT network to address the one or more cybersecurity vulnerabilities of the OT network, provide an indication of the one or more modifications to a computing device associated with the OT network for approval; and update, via a third-party network security service utilized by an operator of the OT network, the set of cybersecurity rules to implement the one or more identified modifications.

Techniques for providing a language model to detect and remedy a security incident are described. A language model is deployed to respond to prompts from network operators. The language model receives a prompt from the network operator indicating actions to take based on trigger events. When a trigger event occurs, the language model receives a description of a potential security incident and identifies indicators of compromise in the description. The language model calls one or more other models to analyze the indicators and receives from the one or more other models, information indicating that the potential security incident is a real security incident, and outputs a prompt to the network operator to approve confirmation of the security incident.

The invention provides a configuration processing method of an embedded user identification card, electronic equipment and a storage medium, and relates to the technical field of communication. The method comprises the following steps: after a target device starts a Bluetooth broadcast mode, the sharing device establishes a Bluetooth connection with the target device; the sharing device and the target device perform Bluetooth pairing, and after successful pairing, the sharing device and the target device respectively determine a target encryption key; and the target device establishes a Bluetooth personal local area network connection with the shared device through the target encryption key, and the target device obtains a configuration file of the embedded subscriber identity module card from a network operator through a Bluetooth personal local area network communication protocol so as to activate the embedded subscriber identity module card. According to the method, the hardware cost of the target equipment can be effectively reduced, the labor cost and the time cost are reduced, and the product competitiveness is improved.

Techniques for providing a language model with dynamic configuration data for network devices in a network that is then used by the language model to generate network-contextual responses to prompts received at the language model. A network controller may collect configuration data from the network devices where the configuration data includes device configurations of the network devices. The network controller may further receive a prompt from a network operator to which the language model is to respond and identify a relevant device configuration that is contextually relevant to the prompt. Further, the network controller may provide the prompt and the relevant device configuration to the language model, generate, by the language model and using the relevant device configuration, a response to the prompt, and provide the network operator with an indication of the response to the prompt.

Method for transporting packets in a multi-cluster Network on Chip (NoC) interconnect with a transport protocol significantly enhance packet management in complex NoC chip architectures. This approach involves processing a packet within clusters to determine a destination cluster and a destination node, and executing a node lookup for the packet intended for different clusters. This lookup identifies an optimal path for transporting the packet out of the cluster. The multi-cluster NoC interconnect efficiently outlines cluster-to-cluster connections and manages global traffic, incorporating deadlock prevention techniques. Global bridges and boundary bridges facilitate effective traffic management between clusters. Each node includes a programmable path table that dynamically assigns efficient routes. This method significantly improves packet management across multi-cluster NoCs, offering a scalable, efficient, and reliable solution for complex computing environments.

Methods, systems, and devices for wireless communications are described. An access and mobility management function (AMF) proxy may establish communication links with a RAN and a first AMF of a first network operator, and with a second AMF of a second network operator. The AMF proxy may receive a first message from the RAN, the first AMF, or the second AMF, the message indicating a manipulated or unmanipulated AMF user equipment (UE) identifier (ID) and a manipulated or unmanipulated RAN UE ID. The AMF proxy may perform ID manipulation the UE IDs in the first message based on a first mapping between the manipulated and unmanipulated AMF UE ID and a second mapping between the manipulated and unmanipulated RAN UE ID. The AMF proxy may transmit a second message to the first AMF, the second AMF, or the RAN based on the AMF UE ID or the RAN UE ID.

Aspects of the subject disclosure may include, for example, communicating management plane (M-plane) data at a first port of a radio unit (RU), the RU being one RU of a set of radio units (RUs) at a cell site of a network operator, the M-plane data related to management and control of the RU, wherein the communicating M-plane data comprises communicating the M-plane data with a distributed unit (DU) over an M-plane segment, and initiating communication of the M-plane data at a second port of the RU, the second port configured for data communication over an alternate M-plane segment to a second RU of the set of RUs for forwarding the M-plane data to the DU over a second M-plane segment between the second RU and the DU, wherein the initiating communication is in response to an interruption in the communicating M-plane data.Other embodiments are disclosed.

The invention discloses a network operation decision-making method, system and device based on flow information and a medium, and the method comprises the steps: obtaining multi-source data related to network operation, including network flow, user behaviors and service operation data; performing cleaning, duplicate removal and format standardization processing on the acquired data to form a structured intelligence data set; key features are extracted from the preprocessed intelligence data, a traffic feature system is constructed, and trend analysis is performed in combination with historical operation data; based on the traffic characteristics and the analysis result, establishing an operation decision model, and generating candidate decision schemes for network resource scheduling and service optimization; and performing quantitative evaluation on the candidate schemes through a preset evaluation index, and screening an optimal decision scheme. Through multi-source traffic information integration and standardized preprocessing, a network layer, an application layer and third-party data are fused, the problem of one-sidedness of single-dimension data decision is solved, a comprehensive traffic feature system is constructed, and a more accurate basis is provided for operation decision.

A disclosed method may include (i) detecting, by a mobile virtual network operator, that an improvement in telecommunication service would result from performing a network switch that switches a home network of a client of the mobile virtual network operator from a first network infrastructure of a first mobile network operator that is serving clients for the mobile virtual network operator to a second network infrastructure of a second mobile network operator that is also serving clients for the mobile virtual network operator and (ii) detecting, by the mobile virtual network operator, that the network switch is prohibited at least in part by detecting that the client has failed to satisfy a condition that is controlled at least in part by the client and that is necessary for performing the network switch successfully.

A search agent training system includes a trainer device. The trainer device includes a trainer network simulation of variable size, which further includes at least one selectable action, at least one selectable node, and a trainer knowledge base, which further includes at least one selectable action outcome probability value. The trainer knowledge base is populated by a quantification system. The trainer device receives an incoming action message from a search agent device including a selected action and a selected node. Next, based upon: a resulting action outcome probability value, the selected action, and the selected node, a resulting observation and a resulting reward is sent to the search agent device. The trainer device blocks node count report messages to the search agent device from the trainer device.

A datacenter, a communication apparatus, a communication method, and a communication control method in a communication system are provided that can enhance the versatility of a datacenter and a virtual network constructed therein. A communication system includes: a plurality of wireless communication facilities owned by a plurality of network operators, respectively; and a datacenter in which a virtual core network is constructed, wherein the virtual core network implements mobile communication functions by using the plurality of wireless communication facilities.

The present application relates to the field of OTN resource matching, and more particularly to an OTN resource intelligent matching method based on artificial intelligence, comprising: inputting the preprocessed service demand, available wavelength resource, real-time bandwidth utilization and support OTU level into a feature extraction model based on a residual multi-layer perception architecture to generate a prediction base feature; inputting the prediction base feature into a feature interaction model based on a compressed interaction network architecture to generate a service comprehensive interaction feature; and inputting the service comprehensive interaction feature into an OTN resource matching model based on an expert gate network architecture to generate a recommended OTU level. Through the hierarchical intelligent model processing of the residual multi-layer perception architecture, the compressed interaction network architecture and the expert gate network architecture, the present application realizes the significant improvement in the accuracy, efficiency, adaptability and network operation value of OTN resource matching.

Embodiments of the present disclosure are directed to systems, networks and methods for determining, using a network function of an operator core network for a telecommunications network, an occurrence of a slice transaction associated with a network slice having a set of slice data, determining that the slice transaction is a valid slice transaction through the utilization of a consensus mechanism of a blockchain ledger. Aspects may also cause the storage of the set of slice data in a block of the blockchain ledger, orchestrating the slice transaction on the operator core network, based on causing the storage of the set of slice data in the block of the blockchain ledger; and selectively allocating the network slice to one or more user equipment (UE) in communication with the at least one radio access network.

The system obtains an issue associated with a network and resolves the issue by suggesting a solution and receiving an approval from an AR / VR device. Based on the issue, the system creates a ticket describing the issue and obtains diagnostic information associated with the issue. Based on the diagnostic information, the system determines a fix for the issue and sends a first notification to the AR / VR device. The first notification includes a description of the issue, the fix for the issue, and a request to test the fix. Upon receiving an approval to test the fix, the system performs regression testing using the fix and determines whether the fix passed the regression testing. Upon determining that the fix passed the regression testing, the system sends a second notification to the AR / VR device requesting an approval to deploy the fix, and upon receiving the approval, the system deploys the fix.

Disclosed herein is a system (200) and a method (400) for detecting ping-pong behavior of user devices in a communication network. The method processes two categories of data logs, one originating from a core network and other from Radio Access Network (RAN) nodes linked to the user devices. After applying multiple preprocessing steps to refine these logs, the method identifies inter-Radio Access Technology (RAT) transitions for each user device and calculates frequency of such transitions within a specified time interval. If the observed frequency exceeds a predefined threshold, the user device is flagged as exhibiting the ping-pong behavior. The method further generates a structured list of affected user devices along with their associated sectors. By accurately detecting excessive inter-RAT transitions, the method provides actionable insights that enable network operators to optimize handover strategies, reduce unnecessary signaling, and improve overall network performance and user experience.

A bandwidth management system that improves reliability and reduces data retransmission by caching data output by a transmitting node and forwarding the cached data when a path to a destination node is available. In various embodiments, the system may also monitor the availability of each node and find the best path around unavailable nodes, reduce bandwidth usage by receiving bulk data at a node and locally distributing copies to multiple devices, enable network operators to prioritize various types of data using existing quality of service (QOS) priorities, store lower priority data in a mutable queue and drop / overwrite untransmitted data (e.g., after a certain time period, upon receipt of updated data, etc.), provide functionality to monitor / control bandwidth allocated for various types of data, select the wide area network best suited to transmit each type of data, change the QoS value of certain data types, and / or dynamically adjust the data prioritization or network selection based on the current mission or phase.

The application relates to a fine-grained traffic classification method based on an improved residual convolutional network in an SDN environment and belongs to the software technical field. In order to provide finer-grained application-aware traffic classification, let network operators better analyze network composition and manage and schedule network resources, fine-grained classification of the specific application programs is very important. Traditional methods tend to classify traffic based on protocols, which is coarse-grained classification. Inspired by the research in computer vision, the method of the residual convolutional network is applied to the identification and classification of network traffic. The method solves the network degradation problem that occurs in the process of fine-grained network traffic identification by traditional deep learning methods with the increase of network depth, can effectively learn deeper network features, and further realizes fine-grained network traffic classification.

A bandwidth management system for nodes in a network hierarchy that enables network operators to monitor / control bandwidth allocated for various types of data using existing quality of service (QOS) priorities. In various embodiments, the system may store lower priority data in a mutable queue and drop / overwrite untransmitted data (e.g., after a certain time period, upon receipt of updated data, etc.), select the wide area network best suited to transmit each type of data, change the QoS value of certain data types, and / or dynamically adjust the data prioritization or network selection based on the current mission or phase. In various embodiments, the system may also receive bulk data and distribute it locally to multiple devices, monitor the availability of each node and find the best path around unavailable nodes, and / or cache data output by a transmitting node and forward the cached data when a path to a destination node is available.

This application relates to the field of communication technology, providing a method, apparatus, device, and storage medium for analyzing indoor connectivity. The method includes: collecting full gateway resource data and network device model data; extracting at least one network device parameter from the device model data to form a first temporary table; associating the gateway MAC addresses in the first temporary table with the gateway MAC addresses in the full gateway resource data to obtain a second temporary table; and associating the second temporary table with at least one network operation data table based on the device MAC addresses in the second temporary table and the device MAC addresses in at least one network operation data table to obtain at least one indoor connectivity analysis table. This application groups and associates various data tables by MAC values ​​to obtain detailed tables reflecting network quality, enabling multi-dimensional analysis of indoor user connectivity quality, which helps improve user connectivity quality in home environments and enhance user experience.

The application provides a method of reporting an unsolicited call to a network operator of a telecommunications network. A message at a user equipment, UE, of the telecommunications network is receiv

Methods, systems, and devices for wireless communications are described. For example, a shared network entity may provide services for multiple different network operators to a user equipment (UE). In some examples, the shared network entity may advertise a first list of services for a first network operator and a second list of services for a second operator to the UE. Additionally, or alternatively, the shared network entity may provide the second network operator information in a separate indication. In some cases, the shared network entity may transmit a list of network entity identifiers that share the same network operator as the UE and a list of network entity identifiers with a different network operator as the UE, which may enable the UE to construct an allow and block list of the network entities.

Methods, systems, and apparatuses to enable segment routing (SR) based mobile networking (MN), i.e., SRBMN in a mobile communication network are provided. A network node determines one or more SR enabled network paths for a user plane traffic and / or a control plane traffic. A segment identifier (SID) network function (SIDNF) is configured by a network operator with one or more SIDs. The SIDNF provides one or more mobile network SIDs (MN-SIDs) associated with the one or more SR enabled network paths to the node upon request. The one or more SR enabled network paths may include a WTRU, a WTRU to relay link, a WTRU to radio access network (RAN) link, and / or a RAN node to core network link etc. The WTRU may receive the one or more MN-SIDs and insert the one or more MN-SIDs into one or more protocol data units (PDUs) of a PDU session.

The invention provides an Internet of Vehicles two-way communication method and system. The method is applied to the Internet of Vehicles two-way communication system. A plurality of data transmission channels in the system correspond to different network operators and different servers / server ports respectively; the first gateway receives service data issued by an upstream module through a built-in first communication optimization node, and sends the service data to the second gateway through a plurality of data transmission channels; the second gateway filters and aggregates the multiple pieces of service data under the multiple data transmission channels through a built-in second communication optimization node, determines one piece of service data and sends the service data to a downstream module; the first gateway and the second gateway are respectively one of a vehicle-end gateway and a cloud-end gateway. According to the invention, data multi-copy transmission and data filtering aggregation can be carried out based on a plurality of data transmission channels corresponding to different network operators and different servers / server ports, and stable data transmission between the vehicle end and the cloud end is realized.

Methods, systems, and devices for wireless communications are described. An access and mobility management function (AMF) proxy may establish a first communication link between the AMF proxy and a first radio access network (RAN) associated with a first network operator, a second communication link between the AMF proxy and a first AMF associated with the first network operator, and a third communication link between the AMF proxy and a second AMF associated with a second network operator. The AMF proxy may the receive a message from the first RAN that includes a source identifier (ID) associated with a network entity of the first RAN and a target AMF ID. Following, the AMF proxy may transmit the message to the first AMF or transmit the message to the second AMF, based on the target AMF ID corresponding to the first AMF or the target AMF ID corresponding to the second AMF.

An interface (400) couples a mobile network (110) of a mobile network operator to an access network (210) of a fixed network operator, to allow user equipment connected to the mobile network to access a private or public target network via the access network. The interface includes, on the mobile network side, a protocol stack (410) comprising: i) an Ethernet link layer (411, ETH), and ii) a mobile network protocol layer (413, GTP) incorporating UE identification data (10) produced by the mobile network (100). The interface includes, on the access network side, a protocol stack (420) comprising an Ethernet link layer (421) with a virtual MAC address (VETH).The virtual MAC address (VETH) is generated by incorporating a unique identifier specific to the UE, specifically the MSIN identifier of the UE user's IMSI obtained by the mobile network and incorporated into the mobile network protocol layer (413, GTP) of the protocol stack (410) on the mobile network side.