1667 results about "Routing control plane" patented technology

Provided are a device and a method for controlling data traffic by a core network control plane node. The method may include receiving, from an application function control entity, one or more pieces of information among help information on application traffic characteristics, a PDU-Set QoS parameter, an identifier for grouping flows belonging to a multi-modal application, and a synchronization threshold; transmitting, to a base station, one or more pieces of information among help information on application traffic characteristics, a PDU Set QoS parameter, an identifier for grouping flows belonging to a multi-modal application, and a synchronization threshold during a PDU session establishment or modification procedure; and instructing transmission of a user packet including PDU-Set information to a core network user plane node.

The invention relates to the technical field of continuous integration and continuous delivery, and discloses a Jenkins continuous integration method based on Kubernetes. According to the method, a Jenkins server is deployed in a Kubernetes cluster to serve as a control plane, a construction environment is created through a preset multi-container Pod template, and a Pod containing a plurality of containers is dynamically created based on the Pod template, so that each container executes different construction tasks. Containers in the Pod realize collaboration through sharing a network namespace and a storage volume, and a Jenkins server monitors task execution states of the containers in the Pod and performs dynamic scheduling according to task priorities and cluster load states. And after the task is completed, automatically destroying the Pod and releasing cluster resources. According to the method and the device, dynamic expansion and contraction of a construction environment and efficient parallel execution of tasks are realized, the problem that a traditional Jenkins static resource pool is difficult to deal with load changes is solved, the resource utilization rate is improved, the expandability of the system is enhanced, and an efficient and reliable solution is provided for an enterprise-level continuous integration system.

The invention relates to a resource allocation system for 5G-A Internet of Vehicles network slices, which belongs to the technical field of intelligent traffic systems and comprises a network slice architecture module, a management and control plane module, a programmable module, a safety and fault-tolerant module, a performance monitoring and optimizing module, a mobility management module, a resource arbitration engine and a cross-domain collaborative interface. And the network slice architecture module is used for dividing Internet of Vehicles communication into a plurality of virtual slices based on a 5G-A network slice technology. According to the resource allocation system and method oriented to the 5G-A Internet of Vehicles network slices, accurate control over end-to-end performance indexes is achieved through the slice definition template library and a QoS dynamic mapping mechanism, the problem that key service performance is degraded due to one-step resource allocation of a traditional network is solved, distributed agent collaboration based on the MAPPO algorithm, and the resource allocation efficiency is improved. LSTM load prediction and a heuristic time delay equalization algorithm are combined, so that the system can respond to business demand changes at a millisecond level, and the resource utilization rate is improved.

The invention belongs to the field of flight path prediction, and discloses a flight path stability optimization method and system, a storage medium and equipment, and the method comprises the steps: responding to aircraft kinetic parameters, pilot physiological state parameters and three-dimensional space environment parameters which are synchronously collected from multiple sources, and constructing a dynamic fusion data set through timestamp alignment; based on a pre-constructed dual-channel feature extraction architecture, dual-channel features of the dynamic fusion data set are extracted, a first channel analyzes a dynamic coupling relationship in a time dimension through a sparse attention mechanism, and a second channel models a spatial correlation topology of environmental parameters through a graph neural network; a deep reinforcement learning decision engine is constructed by fusing dual-channel features, an environment state-control action-flight path stability mapping strategy is established, and control strategy optimization is driven through a reward mechanism; and generating a multi-parameter collaborative optimization instruction of the flight control plane based on the real-time decision engine. According to the method, the efficiency and precision during flight path prediction can be improved, and then the flight path is optimized.

Systems, devices, and techniques are disclosed for network security policy generation and distribution. A security policy written using a Domain Specific Language (DSL) for network security may be received. The security policy may be associated with a service owner and a control plane. A representation of the security policy may be generated from the security policy. A configuration bundle of the service owner may be updated with the representation of the security policy. The security policy may be determined to be approved. A rule set may be generated from the representation of the security policy. A differential between the rule set and a current rule set may be determined. A security component associated with the control plane based on the differential may be configured.

Techniques are described for creating a network-link between a first virtual network in a first cloud environment and a second virtual network in a second cloud environment. The first virtual network in the first cloud environment is created to enable a user associated with a customer tenancy in the second cloud environment to access one or more services provided in the first cloud environment. The network-link is created based on one or more link-enabling virtual networks being deployed in the first cloud environment and the second cloud environment.

The invention provides a network flow regulation and control system and method and a storage medium, and relates to the technical field of network communication. The network traffic regulation and control system comprises: an information collection unit, which is used for obtaining historical traffic data of all media plane network elements connected with a control plane network element and a topological relation of the media plane network elements; the AI model updating unit is used for updating the traffic regulation and control model of the control plane network element according to the historical traffic data and the topological relation, and the strategy generation unit is used for obtaining a traffic distribution strategy of the control plane network element; and the strategy execution unit is used for dynamically adjusting the media traffic of each media plane network element according to the traffic distribution strategy. According to the method, the network data is collected and analyzed in real time, and dynamic updating of the AI model is combined, so that dynamic regulation and control of the network traffic are realized, the method can quickly adapt to changes of network conditions, and the flexibility and efficiency of traffic regulation and control are improved.

A network node may receive a message indicating one or more analytics parameters to be provided to a wireless transmit / receive unit (WTRU). The information may indicate a method for the network to provide the analytics information to the WTRU. The network node may determine whether to send the analytics information to the WTRU via a control plane or a user plane based on a reporting mode indicated in the message. The network node may send the analytics information to the WTRU via the control plane using a non-access stratum message if the network node determines to send the analytics information via the control plane. The network node may send the analytics information to the WTRU via one or more of a user plane function or an application function if the network node determines to send the analytics information via the user plane.

Techniques for cluster failure management in telecommunications systems are provided. In one example, a cellular network includes: a first radio unit (RU) that supports a first cell of the network, a second RU that supports a second cell, and a server system in communication with both RUs. The server system comprises a first server and a second server. A first pod acting as a distributed unit for the first RU is active on the first server and instantiated on the second server. A second pod acting as a distributed unit for the second RU is instantiated on the first server and active on the second server. A control plane executing on the first server manages execution of both pods, in response to determining that a pod is no longer active on a server, activates the pod on the other server.

Some embodiments of this disclosure include systems, apparatuses, methods, and computer-readable media for use in a wireless network for communicating data over control plane in a 5G system. For example, some embodiments are directed to a user equipment (UE). The UE includes processor circuitry and radio front end circuitry. The processor circuitry can be configured to transmit, using the radio front end circuitry, a first message for connecting to a 5G network and indicating a capability of the UE relating to Cellular Internet of Things (CIOT). The processor circuitry can be further configured to transmit, using the radio front end circuitry and via a control plane to the 5G network, a second message comprising mobile originated data. The processor circuitry can be further configured to receive, using the radio front end circuitry, a third message from the 5G network.

Procedures, methods, architectures, apparatuses, systems, devices, and computer program products may be used to communicate with a wireless network. A wireless transmit / receive unit (WTRU) may be configured to multiplex the transmission of measurement data, as control plane data, between the WTRU and a network entity via a first wireless path and the transmission of measurement data, as user plane data, between the WTRU and the network entity via a second wireless path. Switching to / from the second wireless path may be based on a state of the first wireless path, a state of the network, a state of the WTRU and / or an amount of measurement data to be communicated by the WTRU or which has been communicated by the WTRU.

Packets received at a routing intermediary and directed to a resource are transmitted to a data plane node of a partition of a traffic management service. The data plane node transmits an indication of a high-arrival-rate destination group, identified based on a metric of network packets received at the data plane node, to a control plane node of the service. A resource is identified at the control plane node as a rate limiting target based on high-arrival-rate group information from several data plane nodes. A limit is applied to the rate at which packets are received at the target. The control plane node changes the number of data plane nodes in the partition based on a triggering condition.

An apparatus of a user equipment (UE), the apparatus comprising a processor, and a memory storing instructions that, when executed by the processor, configure the apparatus to receive, from a base station of an operator network, Protocol Data Units (PDUs) carrying Artificial Intelligence (AI) model data in either a control plane or a user plane, and decapsulate the PDUs to obtain and store the AI model data, wherein the AI model data is indicative of an AI model configured for inference in Access Network (AN) protocol layers at the UE.

Methods and systems for managing the operation of a deployment are provided. The deployment may be managed in accordance with a subscription model. The subscription model may use subscriptions to define the extent and limits on use of services provided by the deployment. The subscription services and limits may be enforced by management controllers of network devices of the deployment. The management controllers may operate independently from control planes and data planes of the network devices. If a plane is suspected of being compromised, the management controllers may take action to confirm the suspicions. If confirmed, then remedial activity may be initiated to address the compromised plane.

Tunnel endpoints may encapsulate the packets of a network flow, such as a forward flow from one computer to another, in encapsulating packets. A forward flow packet of the forward flow may include static header fields, pseudo-dynamic header fields, and dynamic fields. The control plane and the data plane of a tunnel endpoint may omit the static header fields and may omit the pseudo-dynamic header fields from encapsulating packets after sending a first encapsulating packet that includes the forward flow packet and a forward flow value associated with the forward flow. Subsequent encapsulating packets may include the forward flow value and the dynamic field values of subsequent forward flow packets of the forward flow. The static header fields and / or the pseudo-dynamic header fields of the subsequent forward flow packets may be omitted from the subsequent encapsulating packet.

A method for transmitting content in a communication network comprising a quantum key distribution network of quantum keys, the communication network comprising a key manager device connected to transmission nodes and connected to the quantum key distribution network, the transmission nodes communicating in the communication network and transmitting and receiving quantum keys in the quantum key distribution network, the method comprising sending and receiving control messages to and from the control plane manager to organize the transfer of the content in the communication network. The control messages comprise hash values to identify quantum keys. Also a control plane manager device, a transmission node, and a computer program.

The invention belongs to the technical field of communication, and discloses a communication system supporting NB-IOT voice service, which comprises a terminal, a base station, a core network and an IMS server, wherein the terminal, the base station and the core network all support NB-IOT voice services, the terminal is connected with the base station through a Uu interface, the base station is connected with the core network and the IMS server through an S1 interface, and the terminal is connected with the core network through an Nas logic interface; the terminal is used for initiating and receiving an IMS voice call, supporting establishment of an SIP session with the AS server to complete IMS signaling connection, and establishing a bearer required by IMS voice. According to the invention, the NB-IOT terminal and the NB-IOT base station support measurement and switching functions, so that the voice service continuity is ensured; qCI1 and 5 voice bearing and SIP session processing are established in an NB-IOT terminal, a base station and a core network, and it is ensured that a transmission channel is established for a control plane service and a data plane service of voice; the base station supports voice uplink pre-scheduling, so that the problem of insufficient uplink scheduling capability of the base station is solved.

The invention discloses a multi-tenant adaptive cooperative defense method and system in a hybrid cloud scene, and the method comprises the following steps: obtaining a remote credible proof of hardware, verifying the credibility of a tenant agent and the integrity of a code based on the remote credible proof, granting a mark, and detecting cloud information to generate a machine readable portrait containing key parameters; collecting local multi-mode log data coding embedding vectors of tenants, and after privacy processing, calculating that the abnormal confidence exceeds a threshold value by a local model to trigger current limiting or blocking; and constructing a hierarchical federated architecture containing local nodes of tenants, a regional cloud and a global control plane, encrypting aggregation parameters to generate a cross-tenant attack recognition global model and issuing the cross-tenant attack recognition global model to each tenant on the premise that log data is not out of a domain. According to the invention, integrity verification is carried out on the tenant side security agent through the trusted access mechanism, and the tenant portrait is constructed based on the trusted mark, so that the real and verifiable cooperative defense capability among a plurality of tenants is realized, and the cooperative process has dependency.

Mechanisms are provided for dynamically implementing reactive actions in edge nodes of a network in response to user equipment (UE) behaviors. Data of UE events are collected to infer UE movements and UE behavior within the network. A machine learning computer model is executed on the collected data of UE events to predict UE movements and UE behavior and their impact on edge node conditions within the network with regard to quality of service (QoS) metrics. An accuracy of the precited impacts of the predicted UE movements and UE behavior is evaluated and, based on the accuracy, reactive action(s) to execute to reduce the predicted impact of inaccurate predictions on edge node conditions with regard to the QoS metrics are determined and recommended to a control plane of the network for implementation of at least one of the one or more reactive actions on edge node(s) of the network.

The invention provides an addressing method for a strategy control network element, an application side network element and a control plane network element, and the method comprises the steps: obtaining a device address of a strategy binding network element retrieval database network element based on the local static data configuration information of the application side network element; retrieving a device address of a database network element according to the policy binding network element, and sending the control plane network element query message to a corresponding target policy binding network element retrieval database network element, so as to query an address of a target control plane network element in the target policy binding network element retrieval database network element according to the control plane network element query information; according to the address of the target control plane network element, sending the policy control network element address query request to the target control plane network element; and receiving a query result corresponding to the policy control network element address query request sent by the target control plane network element. According to the invention, the problem that the application side network element cannot acquire the IP address of the policy control network element according to the user IP address information is avoided.

An Open Radio Access Network (O-RAN) communication system includes a GNB Central Unit Control Plane (GNB-CUCP) to establish a connection with a Near-RT RIC via an E2 interface; a User Equipment (UE); a plurality of cells in a Tracking Area (TA) of the GNB-CUCP; and an O-RAN Near-Real Time (Near-RT) RAN Intelligent Controller (RIC) to host an xApp and initiate a subscription procedure with the UE. The GNB-CUCP sends cell location information of the UE to the Near-RT RIC upon a UE context release procedure, the Near-RT RIC creates and maintains a record of the cell location information received from the GNB-CUCP via the xApp, and the GNB-CUCP pages the UE in a subset of cells from the plurality of cells in the TA, the subset of cells corresponding to the record of cell location information created and maintained by via the xApp.

A computing system includes a computing device configured to execute a plurality of virtual machines, each virtual machine of the plurality of virtual machines configured to provide control plane functionality for at least a different respective subset of forwarding units of a network device, the computing device distinct from the network devices. The computing system also includes a policy agent configured to execute on the computing device. The agent is configured to determine that a particular virtual machine of the plurality of virtual machines provides control plane functionality for one or more forwarding units of the network device; determine control plane usage metrics for resources of the particular virtual machine; and output, to a policy controller, data associated with the control plane usage metrics and data associating the particular virtual machine with the one or more forwarding units for which the particular virtual machine provides control plane functionality.

Techniques for configuring an RRC connection including two RRC entities are provided. For example, a method of controlling a user device in a communications network is disclosed. The method comprises: receiving a message from a network node and configuring, at the user device, an RRC connection to the network node including selecting and / or determining either an RRC entity at a central unit control plane of the network node or an RRC entity at a local control plane of the network node for communication with or from the network node.

The invention relates to the technical field of communication, and discloses a route synchronization method, device, system and equipment among multiple SDN clusters and a medium, and the method comprises the steps: obtaining neighbor configuration information issued by a central controller based on a target BGP service; establishing a neighbor relationship between the target BGP service and other BGP services according to the neighbor configuration information; obtaining first node address information of a target SDN cluster collected by the target SDN controller based on the target BGP service, and generating first routing information; and sending the first routing information to other BGP services which establish the neighbor relationship. According to the invention, the BGP service and the SDN controller are utilized to realize the coordination of the control planes, the BGP service and the SDN controller form a double-layer control plane, and the double-layer control plane is utilized to issue the routing forwarding strategy, so that flooding on the data plane is effectively avoided, and the routing synchronization efficiency is improved.

A system and a method to detect an attack on an IoT network is disclosed. The IoT network includes interconnection of multiple IoT devices. The method includes receiving, by a network connection device, multiple ICMPv6 network packets from IoT devices and outputting multiple output packets; and matching, by a routing device, a network traffic pattern to attack signatures structured as a taxonomy according to which part of a packet is misused. The taxonomy includes a branch to a data plane attack and a control plane attack, respectively. When an IPv6 RPL packet is detected, the method includes checking for generating, modifying, and replaying attacks by an attacker. When a non-RPL packet is detected, the method includes checking for dropping and leaking packet attacks by the attacker. When the attack is detected, the method includes invoking a solution to the attack. The solution includes mitigation of the attack by the attacker.

The invention relates to the technical field of network communication and intelligent optimization, in particular to a multi-mode network global routing optimization method and device, electronic equipment and a medium. Comprising the following steps: constructing a data plane and a control plane according to a hierarchical structure of the software defined network, performing multi-modal analysis on an actual network topology of the data plane according to a modal type supported by a switch, and dividing the actual network topology into logic subnets of different modals based on a multi-modal analysis result; generating a set of N paths satisfying a preset condition between the source switch and the destination switch by using a preset path searching algorithm based on a network topology relationship between the logic subnets of different modalities; and based on the N path sets and the global controller of the control plane, generating a global route of the multi-modal network by using a preset global strategy model. Therefore, the problems that a traditional network optimization method is insufficient in collaboration and low in global characteristic utilization rate in a multi-domain data environment are solved, and the network transmission efficiency and the cross-domain collaboration capability are improved.

The invention discloses a data-driven unmanned aerial vehicle cluster digital twin network binding routing method. According to the method, a tight coupling dependency relationship between data transmission and link control is relieved, and a management plane-control plane-data plane decoupling unmanned aerial vehicle cluster network architecture is constructed. The management plane decides a link weight with the help of a depth deterministic strategy gradient learning method by taking minimization of time delay and packet loss probability as optimization targets. And the control plane formulates a forwarding strategy according to the Floyd shortest path algorithm and the weighted topological graph and issues the forwarding strategy to the data plane. And the unmanned aerial vehicle nodes in the data plane concentrate on data forwarding to realize execution of binding routing. A simulation result shows that the link weight is adaptively adjusted by adopting the method, and compared with a traditional routing algorithm with a fixed link weight, the average end-to-end time delay and the packet loss rate can be effectively reduced, and the network service quality is improved.

A method and system for updating a topology on router nodes in a distributed storage system are described. The method can include obtaining, by a first service of a control plane service, topology information from an inventory data store by querying a second service of the control plane service that manages the inventory data store for the topology information. The method can further include generating, by the first service of the control plane service, a topology payload based on the obtained topology information. The method can also include sending, by the first service of the control plane service, a request comprising the topology payload to a router node.

The invention discloses an industrial control network flow abnormity real-time detection method based on a P4 programmable switch, and the method comprises the steps: extracting network flow characteristics related to a timestamp in a data plane in real time, carrying out high-line-speed preliminary detection on the traffic by using an industrial control network traffic anomaly detection algorithm based on a threshold rule to discover suspicious traffic, and uploading a preliminary detection result to a control plane; the control plane obtains suspicious traffic characteristic data based on the periodically maintained key traffic characteristic data and uploads the suspicious traffic characteristic data to the detection plane; the detection plane performs fine-grained detection on the suspicious traffic feature data by using a traffic anomaly detection model based on machine learning to obtain a final detection result; and when the difference between the final detection result and the preliminary detection result exceeds a given value, generating a new preliminary detection threshold rule based on an optimization algorithm or deep reinforcement learning, and updating to optimize the detection accuracy. According to the method, the real-time detection delay of the flow abnormity of the industrial control network can be greatly reduced, and the detection accuracy is remarkably improved.

A system and method are provided for implementing a network component, such as a software-defined wide area network, a firewall, a router, or a load balancer. The network component can be an embedded network edge device that is implemented, e.g., in software, in circuitry, or using hardware acceleration (e.g., a data processing unit (DPU), a smart network interface card (SmartNIC), etc.). The system can include multiple dataplanes, including a primary dataplane and a shadow dataplane. A packet dispatcher relays received data packets to a primary dataplane and the shadow dataplane. The primary dataplane applies a current version of the network component to data packets, and the secondary dataplane applies a new version of the network component to identical replicas of the data packets. A control plane agent compares performance data gathered from the respective dataplanes to perform verification testing on the new version of the network component.