15 results about "Network service provider" patented technology

Systems and methods for service response analysis via out-of-band signaling is provided. A system may obtain, via a first network channel, a network data packet from a network service provider. The system may determine the network data packet comprises a response code indicating a status of the request. The system may extract the response code from the network data packet. The system may generate an out-of-band response message comprising the response code. The system may send, to an external device via a second network channel, the out-of-band response message comprising the response code.

A key master service capable of operating on a service provider in a network enables is disclosed. The key master enables authorized parties to securely exchange client information without compromising client security. One feature of the key master service is the generation of a unique key for each client. All parties in an authorized universe access, exchange and modify client information by referencing the universal key, rather than using known client identifiers. Client information is further secured by advantageously applying an obfuscation function to the data. Obfuscated client information is stored together with the universal key as keyed client data at the client and / or server, where it may be directly accessed by the service provider or third parties. Because client information is stored and exchanged without the ability to discern either the client identity or the nature of the information, such information is secured against malicious third-party interception.

The present disclosure related to the configuration and management of accessibility of vehicle data communications provided to a service technician or other third party. The service technician requests access to the vehicle data with authentication information. The network service provider can facilitate an initial authentication for access to vehicle data, provide access to the vehicle data for authenticated and authorized users, and manage revocation of vehicle data access rights via a common interface provided through the vehicle without requiring customized software, applications or external computing devices.

A system and method for efficiently distributing available bandwidth of a satellite beam among network service providers (NSPs) and virtual network operators (VNOs) associated with the NSPs. The method involves defining bandwidth allocations for each NSP and VNO, receiving demands, dividing the available bandwidth among NSPs and sub-dividing it among VNOs based on respective demands, Minimum Information Rates (MIN), Committed Information Rates (CIR), and Maximum Information Rates (MAX). The method supports multiple traffic priorities, prevents bandwidth starvation, and rebalances bandwidth allocation using a throttle factor during heavy traffic. By sorting demands in ascending order and smoothing beam utilization, the method ensures fairness and efficiency in satellite beam usage.

Systems and methods for transparent service response analysis is provided. A system may obtain a network data packet from a network service provider. The system may determine the network data packet includes a response code indicating a status of the request. The system may extract the response code from the network data packet. The system may modify an IP header of the network data packet based on the response code. The system may encapsulate the network data packet based on the response code. The system may send the network data packet with the modified IP header. The system may send the encapsulated network data packet.

The invention discloses an IPv6 (Internet Protocol Version 6) network dynamic access control method and device for preventing identity counterfeiting. The method comprises the following steps of: deploying a DNS (Domain Name Server) analyzer in an authorized area of a network service provider for processing a DNS query request, and comprising the following steps of: 11) analyzing a source IP (Internet Protocol) address C-IP and a target domain name T of a client C from the DNS query request, and acquiring an IPv6 (Internet Protocol Version 6) prefix P; 12) acquiring a current timestamp S; 13) calculating a dynamic interface identifier by using the key K; 14) taking the IPv6 prefix P and the generated complete dynamic address as an AAAA record and returning the AAAA record to the client C; a service access gateway is deployed at a network service front end of a service provider and is used for receiving flow and executing verification, and the method comprises the following steps of: receiving a data packet from a client C, extracting an interface identifier in a destination address, performing hash verification according to a timestamp S ', C-IP and T pairs, and determining that the data packet is legal if the verification is successful. According to the invention, identity counterfeiting can be effectively prevented.

Systems and methods for guaranteeing end-to-end QoS for wireless connections over a cable network are disclosed. Provisioning of on-demand guaranteed bandwidth connection over a cable network uses mechanisms from DOCSIS domain and Wi-Fi domain. A multi-domain orchestrator is implemented to control both domains. A bandwidth request is received from a client device connecting to a network service provider access point. The bandwidth request is updated for both domains with results of speed test of the wireless link if the speed test results are lower than the bandwidth request. The orchestrator and client device negotiate the bandwidth request using a three-way handshake over PacketCable Multimedia (PCMM) protocol. If the available bandwidth on either the DOCSIS or wireless link is less than the bandwidth request, the orchestrator generates a new bandwidth offer. If the client device accepts the offer, the orchestrator configures the DOCSIS and wireless links using their respective domain protocols to provision the connection with guaranteed end-to-end bandwidth.

The present application discloses a network service access control method and system. The method is applied to a network service provider; a secondary server, a target server, and a firewall are deployed on the network service provider; and a target service runs on the target server. The method comprises: the secondary server receives a request of a user, wherein the request is adapted to a predetermined packet format of the secondary server, the content comprises combined information and a check code, and the combined information comprises an access identifier and a firewall setting command; the secondary server searches for an associated target server on the basis of the access identifier, and forwards the combined information and the check code to the target server; the target server verifies the combined information and the check code; and if the verification is successful, on the basis of the setting command, the target server notifies the firewall to adjust firewall settings regarding access of the user to the target service.

A wireless communication system includes a plurality of master Wireless Access Point (WAP) devices, where each master WAP device is associated with an isolated network slice of one of a plurality of different network service providers. A plurality of hybrid analog-digital repeater devices are interconnected in a mesh topology via point-to-point wireless backhaul links in the wireless backhaul mesh network, where a first analog-digital repeater device receives first data stream in a first intermediate frequency from the first master WAP device and the second data stream in a second intermediate frequency from the second master WAP device. The first analog-digital repeater device then relays the first data stream and the second data stream over the plurality of hybrid analog-digital repeater devices via the point-to-point wireless backhaul links to reach to one or more service WAP devices that serves a plurality of UEs over WLAN signals.

The invention discloses an encrypted communication confusion framework and method based on multi-factor traffic characteristics, and the method comprises the steps: firstly, capturing and analyzing the TLS handshake traffic of a target client, precisely extracting the JA3 fingerprint characteristics of the TLS handshake traffic, and then generating a Client Hello message with the same JA3 fingerprint through a TLS customization library of the client, thereby achieving the precise camouflage of the fingerprint of an application layer of the client. Secondly, a parallel handshake proxy method is adopted, the handshake process of the proxy and the client and the handshake process of the proxy and the back-end server are processed in parallel, and the handshake time feature is compressed to 1-RTT; and finally, in order to match server-side features of mainstream content distribution network service providers, a user-defined multi-level TLS certificate chain is constructed, so that a confusion effect is achieved on traffic size features. According to the method, the disguising technology of three dimensions of the client fingerprint, the connection time sequence and the server certificate size is combined, the concealment of the encrypted traffic in a network monitoring environment can be effectively improved, and the practical value is relatively high.

A voicemail server device receives a voice call from an originating device attempting to access a voicemail account associated with a subscriber of a network service provider. Accessing the voicemail account can require providing by the originating device a personal identification number (PIN) predefined for the voicemail account. The voicemail server device can determine whether the originating device is associated with the subscriber. Responsive to determining that the originating device is not associated with the subscriber, the voicemail server device can activate an attempt limit for the voicemail account. The attempt limit can correspond to a predefined number of failed attempts to access the voicemail account by providing an incorrect PIN. The voicemail server device can receive attempts to access the voicemail account by incorrect PINs. Responsive to determining that a number of the attempts has reached the attempt limit, the voicemail server device can redefine the PIN.

Embodiments of systems and methods for configuring a network service to support an application may include launching an application that communicates with a network element to perform an application operation; sending a service request to a uniform resource locator (URL) associated with a data processing service that supports the application operation in response to launching the application, the service request configured to cause activation of the data processing service; and performing the application operation using a communication received from the network element and supported by the data processing service. In some embodiments, the service request may be automatically sent to the URL associated with the data processing service in response to launching the application. Activation of the data processing service may occur at the UE, in the communication network, or both. The application may be a portal application. The network element may include a network service provider.

A system and method for efficiently distributing available bandwidth of a satellite beam among network service providers (NSPs) and virtual network operators (VNOs) associated with the NSPs. The method involves defining bandwidth allocations for each NSP and VNO, receiving demands, dividing the available bandwidth among NSPs and sub-dividing it among VNOs based on respective demands, Minimum Information Rates (MIN), Committed Information Rates (CIR), and Maximum Information Rates (MAX). The method supports multiple traffic priorities, prevents bandwidth starvation, and rebalances bandwidth allocation using a throttle factor during heavy traffic. By sorting demands in ascending order and smoothing beam utilization, the method ensures fairness and efficiency in satellite beam usage.

The application provides a data transmission method, system and electronic equipment, and relates to the technical field of network transmission. The data transmission method of a network service provider comprises the following steps: determining the service quality level of target data from a sending end; determining a target routing path matching the service quality level from a plurality of to-be-selected routing paths with different service qualities; wherein the to-be-selected routing paths comprise routers of a plurality of regional networks; and transmitting the target data to a receiving end by using the target routing path. According to the technical scheme of the application, hierarchical scheduling can be performed on a backbone network according to the service quality level of transmission data (such as a message or other IP data packets), so that the backbone network has the capability of supporting QoS according to the type of transmission data.

Systems, apparatuses, and methods are described for generating tokens for user devices to request content items from one or more content delivery networks via networks provided by a network service provider. The tokens may be generated based on rules provided by the network service provider and may indicate whether the content delivery networks have permission to send targeted content items to the user device. Tokens provided to a user device may prevent repeated delivery of the same content item to the user device.