48 results about "Network providers" patented technology

An apparatus and method for users to store, attest, verify, exchange and share information and data without a need of centralized service while ensuring the users data is controlled and stored by the user on their owned mobile devices. Preferably, users have the ability for selective attribute, data and information disclosure while ensuring the end recipient always gets the latest updated information state at any given time. Information and data will be secured, encrypted by the user owned cryptographic keys and will not expose the data to operators of the decentralized network while optionally ensuring that the user data and information can also be stored in non-searchable, non-relatable, non-traceable and non-transferable private state mutable storage engine. A private state mutable storage engine is available to all the decentralized network providers, making it a unique decentralized user encrypted, controlled data and state backup service. User's private identifiable information (Pii) is not in any decentralized storage, not even in the form of encrypted data to ensure the solution is Quantum computing proof.

An apparatus configured to process, based on signaling from a network, parameters related to roaming to an Evolved Packet System (EPS) when a Fifth Generation System (5GS) is in a disaster condition, wherein a subscriber to a Public Land Mobile Network (PLMN) provider operating the 5GS has a 5G only roaming agreement with a PLMN operating the EPS, determine the 5GS is in the disaster condition and generate, for transmission to the EPS, an attach request to attach to the EPS during the disaster condition.

A method, a device, and a non-transitory storage medium are described in which a deployment and management of composite application service is provided. The service may allow a third party to develop and on-board logic that manages an application service hosted in an application layer network of a network provider. The logic may include optimization of the application service and remedial procedures that address events associated with degradation and / or performance of the application service. The service may configure resources of a host device to host the logic and expose services provided by the network provider in support of the management of the application service.

Approaches presented herein relate to human authentication in a computerized environment. In particular, challenge-response authentication can be performed where a requestor must submit a correct and valid response. An automated attack on such an environment may use a proxy network to cause a large number of malicious requests to be received to the environment, over a period of time, that appear to come from different sources. To make such an attack less appealing, challenge-response authentication can require an amount of additional data to be transmitted with each request, where that amount is small enough to not have a significant impact on a single request from a legitimate user, but large enough that the amount of data to be transmitted when aggregated across a large number of malicious requests will be significant, resulting in a high cost to the attacker if the proxy network provider charges based on data transmission.

Techniques for providing multi-operator core SASE solutions (e.g., for 5G SASE) are disclosed. In some embodiments, a system, a process, and / or a computer program product for providing multi-operator core SASE solutions for 5G SASE includes receiving mobile network traffic, at a Secure Access Service Edge (SASE) cloud network, via a service provider interconnect between a plurality of mobile service provider networks and the SASE cloud network; monitoring the mobile network traffic at the SASE cloud network from the plurality of mobile service provider networks for a tenant of the SASE cloud network provider; enforcing a security policy based on one or more parameters associated with the mobile network traffic, wherein the security policy is associated with the tenant of the SASE cloud network provider; and forwarding the secured data plane traffic from the SASE cloud network to its original destination if allowed by the security policy, and block or drop the data plane traffic from the SASE cloud network if not allowed by the security policy.

To enable determination whether a telephone number to be investigated is a valid telephone number with a subscription contract.SOLUTION: A determination method includes a transmission step of transmitting, to a first IP network, transmission information indicating that a call is made to a telephone number to be investigated, the transmission information being response information including an error message from the first IP network using an optical line as an access line or a second IP network connected to the first IP network and operated by a communication network provider different from the first IP network; and a determination step of determining whether the telephone number is the telephone number validated by making a subscription contract in the second IP network or the telephone number invalidated by not making the subscription contract in the second IP network, based on response information received from the first IP network.SELECTED DRAWING: Figure 1

A method of providing network services by a network provider may include receiving, by a uniform policy module of a network provider, a user policy for providing network services to a user device. The method may include generating, by the uniform policy module, one or more network parameters associated with the user device and based at least in part on the user policy. The method may include receiving, by the uniform policy module, a request from a network access controller associated with the network provider to provide network services to the user device. The method may include transmitting, by the uniform policy module, at least some of one or more network parameters to the network access controller, such that the network access controller provides the network services to the user device according to the transmitted network parameters such that the request is fulfilled.

Systems and methods for qualifying external network facilities for a service location of a passive optical network (PON) of a PON service provider are presented. An exemplary method may include obtaining an indication of a service location of the PON and an indication of a set of required optical services at the service location; determining a group of candidate external network provider facilities for the service location of the PON based on geospatial coordinates of the service location and respective geospatial coordinates of the candidate external network provider facilities included in the group; selecting, from among the group of candidate external network provider facilities, an external network provider facility for providing the set of required optical services to the service location; and causing one or more optical services to be delivered to the service location via the selected external network provider facility.

Embodiments of present disclosure provide system (200) and method (300) providing access to services relating to software product of the network provider (206). License enforcement agent (212) implemented in the software product. The license enforcement agent (212) being arranged to obtain the license information indicative of at least one license for at least one service of the one or more services. The license enforcement agent (212) being arranged to map the at least one license for the at least one service to corresponding at least one service in a list of services by using the license information. Thereafter, the license enforcement agent (212) being arranged to generate a respective authorization policy for the at least one service in the list of services. The respective authorization policy is arranged to be of use to provide access to one or more services relating to the software product.

Systems and methods for qualifying external network facilities for a service location of a passive optical network (PON) of a PON service provider are presented. An exemplary method may include obtaining an indication of a service location of the PON and an indication of a set of required optical services at the service location; determining a group of candidate external network provider facilities for the service location of the PON based on geospatial coordinates of the service location and respective geospatial coordinates of the candidate external network provider facilities included in the group; selecting, from among the group of candidate external network provider facilities, an external network provider facility for providing the set of required optical services to the service location; and causing one or more optical services to be delivered to the service location via the selected external network provider facility.

Various embodiments of the present invention relate to a device and method for scheduling data communication links in an electronic device. The electronic device includes communication circuitry and a processor, wherein the processor may: configure the NDP for data communication with an external electronic device included in the NAN cluster based on first scheduling information; storing information related to the NDP based on switching to a low power mode associated with the NDP connection; maintaining synchronization with the external electronic device based on second scheduling information different from the first scheduling information; and in a case where the data communication with the external electronic device is performed, performing data communication with the external electronic device through the NDP to the external electronic device based on the information related to the NDP. Other embodiments are also possible.

Systems and methods for qualifying external network facilities for a service location of a passive optical network (PON) of a PON service provider are presented. An exemplary method may include obtaining an indication of a service location of the PON and an indication of a set of required optical services at the service location; determining a group of candidate external network provider facilities for the service location of the PON based on geospatial coordinates of the service location and respective geospatial coordinates of the candidate external network provider facilities included in the group; selecting, from among the group of candidate external network provider facilities, an external network provider facility for providing the set of required optical services to the service location; and causing one or more optical services to be delivered to the service location via the selected external network provider facility.

Systems and methods are provided for managing network layers. Network providers often define their network with pre-defined network layer priorities depending on their spectrum holdings (e.g., bandwidth) and capability of devices. User device performance metrics are valuable data points that allow for intelligent traffic steering and network layer management based on device-specific performance related to specific network layers. Location session records (LSR) data provides detailed inputs for sessions for each user device in a network. This historical data can be utilized to identify performance issues on certain network layers for specific user devices and proactively steer the devices to other network layers to improve performance.

Embodiments herein selectively transmit probes between network nodes to estimate metrics associated with end-to-end paths through the network. In one embodiment, the network provider identifies key nodes based on a performance heuristic, such as the number of paths that run through each nodes, the amount of traffic that flows through the nodes, and the like. In addition to transmitting probes between the key nodes, supplemental probes can be transmitted from each customer edge device (e.g., a customer endpoint) to the key nodes in the provider's network. The data generated by probing between the key nodes and by probing between the customer edge devices and the key nodes can be combined to estimate metrics associated with end-to-end routes through the network.

An architecture plan for a software-defined traffic routing mesh network that includes multiple tiers of network nodes for routing network data traffic between one or more client devices and an external network may be received. Network nodes for the multiple tiers may be procured via a computing device associated with a mesh network provider or via procurement network nodes that are associated with different independent entities. Subsequently, a configuration file may be generated based at least on the architecture plan and node information of the procured network nodes. The configuration file is then implemented to configure the procured network nodes into the mesh network. In some instances, a configuration command in the configuration file may be modified when the configuration command fails during the implementation of the configuration file. In other instances, the network nodes in the software-defined traffic routing mesh network may be further modified following deployment for use.

Method to perform identification followed by authentication and Key Agreement procedure of a user equipment to a satellite hosting a secure database for AKA acting as a local network provider with intermittent / temporary connectivity, said method including the steps of detecting, by a user equipment, a service link and selecting a network provided by the satellite; sending, by the user equipment, a connection request to the satellite; generating, by the satellite, an AUTHENTICATE request to the local secure database for AKA for the requesting subscriber identifier; generating, by the secure database for AKA, an Authentication Vector (AV) from a key 5 K_nsat derived from a master key for the satellite nsat, and a proprietary bit of Authentication Management Field (AMF); returning, by the local secure database for AKA, an authentication response. Other aspects are described.

This technology defines an envelope of a set of constraints to impose a network characteristic. A function is created to form a combined set of envelopes to configure resources for use in the network. A path is discovered from a first state to a second state based on the combined set of envelopes. A set of service descriptors configures the function based on a load demand for the network. A path selection is tested of a set of envelopes against the load demand for the network. The set of constraints of a path selection is determined as to whether the load demand is met demand. In response to a set of envelopes meeting the load demand, a path selection is enabled for a set of constraints defined by the set of envelopes, else if the load demand is not met, then an error message is returned to the network provider.

Systems and methods are provided for managing network segments that span across geographic regions and / or other types of network divisions in a cloud-based network environment. A cloud-based network provider's geographically dispersed network infrastructure can be used as the core of a customer's private wide area network, and the customer can define isolated segments to which other networks (virtual private clouds, virtual private networks, etc.) can attach. Even if implemented across some or all of the same regions as other segments of the same customer and / or other customers - and using the same physical and / or virtual routing components as them - the various segments can remain logically isolated from one another.

Techniques are provided for validating edge computing devices using verification of network identifiers. One method comprises obtaining an ownership voucher for an edge device, wherein the ownership voucher comprises credentials of the edge device, wherein the edge device comprises an integrated circuit used by the edge device to access a network, such as a mobile network, and wherein the ownership voucher further comprises: (i) an identifier of the integrated circuit used to access the network and / or (ii) an identifier of the network; verifying, by a provider of the network: (i) the identifier of the integrated circuit and / or (ii) the identifier of the network; and automatically enabling the edge device to access the network based on a result of the verifying. The ownership voucher may comprise an identifier of a subscriber of the network and the provider of the network may verify the identifier of the subscriber of the network.

A method and system for authentication and / or authorization of users in network environments, wherein the method comprises the following steps: • A trusted issuer provisions an user Identifier (ID) as a Decentralized IDentifier (DID 44) and a DID-bound-Verifiable Credentials (VC, 45) to a User Equipment (UE 100); • A SIM or eSIM provisions network registration data of a 3GPP network provider to a 3GPP network access module (110); • The network access module (110) sends a network access registration message (62, 31b) to the Core Network (CN), wherein the network access registration message comprises network registration data of the3 GPP network provider; • The Core Network (CN) registers the network access module (110) in the network of the network operator; • The DID (44) and the DID-bound-VC (45) are transmitted from the UE (100) to the network access module (110); • The network access module (110) sends a user authentication message, comprising the DID (44) and the DID-bound-VC (45) to the 3GPP core network; • The DID (44) and the DID-bound-VC (45) are provisioned by the core network to a verification unit (120,120a) which performes the authentication and / or authorization process; • Upon successful authentication, the verification unit communicates the result to the UE (100), granting the user access to a requested service.

The invention provides a computing power network transaction method and device, electronic equipment and a storage medium, and belongs to the technical field of computing power networks, and the method comprises the steps: obtaining computing power network resource information filled and reported by a first terminal and business demand information input by a second terminal; the computing power network resource information is packaged into a computing power network product, and the computing power network product is online and published; and performing computing power network product transaction between the first terminal and the second terminal based on the business demand information. According to the invention, the information interaction between the computing network provider and the computing network consumer is realized, so that the computing network transaction is more convenient; according to the method, the overall service capability from computing power production to computing power consumption can be provided by breaking through a computing network supply side and a computing network consumption side and pulling through roles of a computing network provider, a computing network consumer, a computing network operation and supervision party and the like, end-to-end computing power network social-level services are provided for users, and personalized requirements of the users are met.

The invention provides a communication method and device, relates to the technical field of communication, and is used for solving the authentication problem that a terminal accesses other communication networks except a home communication network and ensuring the security of the terminal accessing the network. The method comprises: a first device receiving a first message from a terminal, the first message comprising an identifier of the terminal and an identifier of a first communication network, the first message being used for instructing the terminal to request to register the first communication network; wherein the identifier of the terminal can be an identifier allocated to the terminal by a network provider of a second communication network to which the terminal belongs, and the first communication network and the second communication network correspond to different network providers; and the first device sends a second message to the second device to trigger authentication of the first communication network and the terminal, and the second device opens an authentication function on the terminal belonging to the second communication network to the device of the first communication network.

A method and system for authentication and / or authorization of users in network environments, wherein the method comprises the following steps: • A trusted issuer provisions an user Identifier (ID) as a Decentralized IDentifier (DID 44) and a DID-bound-Verifiable Credentials (VC, 45) to a User Equipment (UE 100); • A SIM or eSIM provisions network registration data of a 3GPP network provider to a 3GPP network access module (110); • The network access module (110) sends a network access registration message (62, 31b) to the Core Network (CN), wherein the network access registration message comprises network registration data of the3 GPP network provider; • The Core Network (CN) registers the network access module (110) in the network of the network operator; • The DID (44) and the DID-bound-VC (45) are transmitted from the UE (100) to the network access module (110); • The network access module (110) sends a user authentication message, comprising the DID (44) and the DID-bound-VC (45) to the 3GPP core network; • The DID (44) and the DID-bound-VC (45) are provisioned by the core network to a verification unit (120,120a) which performes the authentication and / or authorization process; • Upon successful authentication, the verification unit communicates the result to the UE (100), granting the user access to a requested service.

Systems and methods are provided for management of prefix allocation for a user network through distribution of prefixes to one or more virtual interfaces (VIFs) used to support communication of data between the user network and the network service provider. Management resource(s), which may be implemented by components of a network provider or routing resource(s), may be configured to receive the specified intended allocation of prefixes and verify that the intended allocation of prefixes meets at least one operational criterion based on utilization tracking data for prefix availability with respect to the user network. After verification, routing resources may advertise prefixes to a network service provider in accordance with the specified intended allocation of prefixes. The management resources may also update the utilization tracking data in the first data store to reflect allocation of the prefixes.

This document discloses a technique for measuring the speed experience value of a network provider's customers. The technique provides a better quality of experience (QoE) speed metric that characterizes the customer experience. The technique uses scheduling period statistics to replace or enhance proactive speed measurement. The technique further provides a novel method for measuring QoE speed metrics by adapting the measured network application speed experienced by the customer to meet customer needs. The disclosed QoE speed metric can be used to determine the degree of congestion in communication networks.

Techniques for routing input(s) associated with a machine learned model to various models located at different locations are discussed herein. In some examples, the model may be a generative machine learned model, and in some examples, the different locations may correspond to a first location on a user equipment (UE), a second location in a core network of a network provider, and / or a third location outside of the core network. In some examples, a routing component on the UE may receive an input to a machine learned model and can determine characteristics of the input, and / or characteristics and / or capabilities of the UE, and can route the input to the one or more of the first location, the second location, the third location, or other locations. The UE can receive a response from the location and can present the response at the UE.

The present invention relates to methods and systems for processing a payment transaction, and particularly for providing settlement of payment transactions. The method comprises: receiving at a card payment network provider a payment authorisation request for a payment transaction between a payer and a payee initiated via a card payment network operated by the card payment network provider, the payment authorisation request comprising digital currency network details for a receiving party; comparing non-receiving party digital currency network details with the receiving party digital currency network details, in order to determine if there is a common digital currency network between the non-receiving party and the receiving party, wherein the card payment network provider is authorised to utilise the non-receiving party digital currency network details to initiate a digital currency transaction; and in the event that the common digital currency network can be determined, instructing at the card payment network provider, the payment to be settled via the common digital currency network.

The present invention provides a method and apparatus for capability exchange between a user equipment terminal and a network device, comprising: receiving a message from the network device, the message comprising network provider information for identifying a manufacturer of the network device; updating the capability configuration of the user equipment terminal based on the message; sending an update notification message to the network device to trigger a capability exchange program; and transmitting capability report information to the network device in the capability exchange procedure. The capability report information includes the updated capability configuration and user equipment terminal provider information for identifying at least a portion of the user equipment terminal chipset manufacturer.

Aspects of the subject disclosure may include, for example, a network API service that receives network event data and provides performance hints to a resource manager that manages application containers at edge cloud locations. Network event data may be received from access networks, core networks, nodes within access networks or core networks, or the like. Performance hints may allow booting of application containers at edge cloud locations. Other embodiments are disclosed.