1308 results about "Routing control plane" patented technology

Techniques for cluster failure management in telecommunications systems are provided. In one example, a cellular network includes: a first radio unit (RU) that supports a first cell of the network, a second RU that supports a second cell, and a server system in communication with both RUs. The server system comprises a first server and a second server. A first pod acting as a distributed unit for the first RU is active on the first server and instantiated on the second server. A second pod acting as a distributed unit for the second RU is instantiated on the first server and active on the second server. A control plane executing on the first server manages execution of both pods, in response to determining that a pod is no longer active on a server, activates the pod on the other server.

Procedures, methods, architectures, apparatuses, systems, devices, and computer program products may be used to communicate with a wireless network. A wireless transmit / receive unit (WTRU) may be configured to multiplex the transmission of measurement data, as control plane data, between the WTRU and a network entity via a first wireless path and the transmission of measurement data, as user plane data, between the WTRU and the network entity via a second wireless path. Switching to / from the second wireless path may be based on a state of the first wireless path, a state of the network, a state of the WTRU and / or an amount of measurement data to be communicated by the WTRU or which has been communicated by the WTRU.

An apparatus of a user equipment (UE), the apparatus comprising a processor, and a memory storing instructions that, when executed by the processor, configure the apparatus to receive, from a base station of an operator network, Protocol Data Units (PDUs) carrying Artificial Intelligence (AI) model data in either a control plane or a user plane, and decapsulate the PDUs to obtain and store the AI model data, wherein the AI model data is indicative of an AI model configured for inference in Access Network (AN) protocol layers at the UE.

Tunnel endpoints may encapsulate the packets of a network flow, such as a forward flow from one computer to another, in encapsulating packets. A forward flow packet of the forward flow may include static header fields, pseudo-dynamic header fields, and dynamic fields. The control plane and the data plane of a tunnel endpoint may omit the static header fields and may omit the pseudo-dynamic header fields from encapsulating packets after sending a first encapsulating packet that includes the forward flow packet and a forward flow value associated with the forward flow. Subsequent encapsulating packets may include the forward flow value and the dynamic field values of subsequent forward flow packets of the forward flow. The static header fields and / or the pseudo-dynamic header fields of the subsequent forward flow packets may be omitted from the subsequent encapsulating packet.

The invention discloses a multi-tenant adaptive cooperative defense method and system in a hybrid cloud scene, and the method comprises the following steps: obtaining a remote credible proof of hardware, verifying the credibility of a tenant agent and the integrity of a code based on the remote credible proof, granting a mark, and detecting cloud information to generate a machine readable portrait containing key parameters; collecting local multi-mode log data coding embedding vectors of tenants, and after privacy processing, calculating that the abnormal confidence exceeds a threshold value by a local model to trigger current limiting or blocking; and constructing a hierarchical federated architecture containing local nodes of tenants, a regional cloud and a global control plane, encrypting aggregation parameters to generate a cross-tenant attack recognition global model and issuing the cross-tenant attack recognition global model to each tenant on the premise that log data is not out of a domain. According to the invention, integrity verification is carried out on the tenant side security agent through the trusted access mechanism, and the tenant portrait is constructed based on the trusted mark, so that the real and verifiable cooperative defense capability among a plurality of tenants is realized, and the cooperative process has dependency.

Mechanisms are provided for dynamically implementing reactive actions in edge nodes of a network in response to user equipment (UE) behaviors. Data of UE events are collected to infer UE movements and UE behavior within the network. A machine learning computer model is executed on the collected data of UE events to predict UE movements and UE behavior and their impact on edge node conditions within the network with regard to quality of service (QoS) metrics. An accuracy of the precited impacts of the predicted UE movements and UE behavior is evaluated and, based on the accuracy, reactive action(s) to execute to reduce the predicted impact of inaccurate predictions on edge node conditions with regard to the QoS metrics are determined and recommended to a control plane of the network for implementation of at least one of the one or more reactive actions on edge node(s) of the network.

The invention provides an addressing method for a strategy control network element, an application side network element and a control plane network element, and the method comprises the steps: obtaining a device address of a strategy binding network element retrieval database network element based on the local static data configuration information of the application side network element; retrieving a device address of a database network element according to the policy binding network element, and sending the control plane network element query message to a corresponding target policy binding network element retrieval database network element, so as to query an address of a target control plane network element in the target policy binding network element retrieval database network element according to the control plane network element query information; according to the address of the target control plane network element, sending the policy control network element address query request to the target control plane network element; and receiving a query result corresponding to the policy control network element address query request sent by the target control plane network element. According to the invention, the problem that the application side network element cannot acquire the IP address of the policy control network element according to the user IP address information is avoided.

An Open Radio Access Network (O-RAN) communication system includes a GNB Central Unit Control Plane (GNB-CUCP) to establish a connection with a Near-RT RIC via an E2 interface; a User Equipment (UE); a plurality of cells in a Tracking Area (TA) of the GNB-CUCP; and an O-RAN Near-Real Time (Near-RT) RAN Intelligent Controller (RIC) to host an xApp and initiate a subscription procedure with the UE. The GNB-CUCP sends cell location information of the UE to the Near-RT RIC upon a UE context release procedure, the Near-RT RIC creates and maintains a record of the cell location information received from the GNB-CUCP via the xApp, and the GNB-CUCP pages the UE in a subset of cells from the plurality of cells in the TA, the subset of cells corresponding to the record of cell location information created and maintained by via the xApp.

A system and a method to detect an attack on an IoT network is disclosed. The IoT network includes interconnection of multiple IoT devices. The method includes receiving, by a network connection device, multiple ICMPv6 network packets from IoT devices and outputting multiple output packets; and matching, by a routing device, a network traffic pattern to attack signatures structured as a taxonomy according to which part of a packet is misused. The taxonomy includes a branch to a data plane attack and a control plane attack, respectively. When an IPv6 RPL packet is detected, the method includes checking for generating, modifying, and replaying attacks by an attacker. When a non-RPL packet is detected, the method includes checking for dropping and leaking packet attacks by the attacker. When the attack is detected, the method includes invoking a solution to the attack. The solution includes mitigation of the attack by the attacker.

A method and system for updating a topology on router nodes in a distributed storage system are described. The method can include obtaining, by a first service of a control plane service, topology information from an inventory data store by querying a second service of the control plane service that manages the inventory data store for the topology information. The method can further include generating, by the first service of the control plane service, a topology payload based on the obtained topology information. The method can also include sending, by the first service of the control plane service, a request comprising the topology payload to a router node.

According to one embodiment of this specification, there is provided an operation method of user equipment (UE). The method may comprise: generating an Evolved Packet System (EPS) Mobility Management (EMM) transport message for an initial non-access stratum (NAS) message; and transmitting the EMM transport message with an integrity protected. If the EMM transport message may include a data container, the EMM transport message may be partially ciphered. The EMM transport message may be transmitted if the UE uses an Evolved Packet System (EPS) service with control plane Cellular Internet of Things (CIoT) EPS optimization with overhead reduction.

Disclosed are systems, apparatuses, methods, and computer-readable media for policy-based transparent packet inspection for last mile zero-trust workload protection. The method comprises receiving a packet on a network interface of a provisioned resource in a data center or a user device within a network; determining, by a first intercepting agent provisioned within the network interface, whether to inspect the packet based on rules received from a control plane of the network, wherein the network interface comprises a smart network interface card (SmartNIC) or a data processing unit (DPU) and is configured with the first intercepting agent based on the control plane; selectively invoking a deep packet inspection of the packet based on inspection of the packet by the first intercepting agent using the rules from the control plane; and blocking the packet at the network interface based on the deep packet inspection identifying malicious content within the packet.

This disclosure describes techniques for routing application traffic on a network path based on an application-specific Service Level Agreement (SLA) threshold that may be dynamically and / or automatically determined. An edge device of an SD-WAN may send probes over the SD-WAN over multiple paths and may determine network telemetry data representing the network performance associated with the multiple paths. The edge device may then send the network telemetry data to a control plane. The control plane may also receive quality of experience (QoE) data indicating the quality of an application experience for a user. Based on the network telemetry data and the QoE data, an application-specific SLA threshold may be determined for the application. The edge device may then route traffic of the application through a path of the multiple paths based at least in part on the path satisfying the SLA threshold.

The present disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. Provided is a method performed by a first network entity that performs a session management function (SMF) and a packet data network gateway-control plane function (PGW-C) of a mobile communication system. The method comprises the steps of acquiring, from a user equipment (UE), an indicator indicating a UE route selection policy (URSP) provisioning support in an evolved packet system (EPS);transmitting, based on the indicator, a session management (SM) policy control update request message to a second network entity that performs a policy control function (PCF) related to a session; and receiving, from the second network entity, an SM policy control update response message including URSP information generated by a third network entity that performs a PCF related to the UE.

The invention relates to an FPGA-based satellite-borne file adaptive storage and scheduling method, which comprises the following steps: defining a data plane and a control plane, the data plane being responsible for high-frequency and high-speed data processing, and the control plane being responsible for low-frequency and low-speed data management and decision making; the data plane obtains a real-time data stream to be stored and stores the real-time data stream into a data cache; monitoring the running state of the data cache in real time, generating cache state data and reporting the cache state data to a control plane; the control plane makes a strategy decision based on the cache state data to generate a target strategy instruction; the data plane obtains the instruction and carries out hardware priority judgment in combination with cache state data so as to determine a final data writing instruction; and the data plane responds to the write-in instruction, executes error correction coding processing, data write-in and file verification processing, and reports a file closing state to the control plane. The method has the advantages that the system can dynamically respond to the real-time system load, and the stability and reliability of system scheduling are improved.

The invention provides a policy control network element addressing method, an application side network element and a control plane network element, and the method comprises the steps: obtaining the addresses of a plurality of control plane network elements based on the local static data configuration information of the application side network element according to a user terminal address and a mobile communication network access external network identifier; determining a first target control plane network element, and sending a policy control network element address query request to the first target control plane network element; if the session association information of the user terminal is not queried in the first target control plane network element, acquiring an address of a second target control plane network element sent by the first target control plane network element; sending a policy control network element address query request to the second target control plane network element according to the address of the second target control plane network element; and receiving a query result sent by the second target control plane network element. According to the invention, the problem that the application side network element cannot acquire the IP address of the policy control network element according to the user IP address information is avoided.

The invention discloses a self-adaptive distributed network integration system and method for virtual and real unmanned aerial vehicle cooperation, and relates to the technical field of unmanned aerial vehicle control, the system comprises a central control plane and at least one node agent, the central control plane comprises a global identity manager configured and distributed with globally unique network identity information, recording and recovering the network identity information; the network topology and state manager is configured to generate a virtual and real network state view, responds to query and issues a network simulation instruction to the node agent; the distributed network coordinator is configured to decide and coordinate the node agents to construct a cross-host logic two-layer network domain; the security policy manager is configured to define and store a network access control policy of the virtual unmanned aerial vehicle; the adaptive distributed network integration system and method aim to realize physical presentation of the virtual unmanned aerial vehicle on the network level, so that the virtual unmanned aerial vehicle can directly communicate with and collaboratively work with a real unmanned aerial vehicle in the same network plane.

In communication with components of a cloud platform, namely a software-defined network constructed to overlay at least one public cloud network, a controller features a virtual processor and a data store. The data store includes network address translation (NAT) processing logic configured to determine whether a control plane message from tenant resources is associated with a network address overlapping condition, which represents a first network address included in the control plane message overlaps a network address range relied upon by either (a) at least one of the components of the cloud platform or (b) a component associated with other tenant resources. The NAT processing logic is further configured to alter routing data stores that maintain routing information for each of the components of the cloud platform to substitute the first network address with a first virtual network address for subsequent data message routing.

According to embodiments, a method performed by a distributed unit (DU) may involve: transmitting, to a radio unit (RU), a first control plane message including section extension information for indicating the number of one or more signal-to-interference-plus-noise-ratio (SINR) values for each physical resource block (PRB) corresponding to a frequency resolution of an SINR report by the RU; and receiving, from the RU, a second control plane message including section type information for indicating the one or more SINR values according to the frequency resolution and the number of the one or more SINR values for each PRB.

An information handling system may determine a personality flag value during a boot process, and execute a system update handler configured for connecting to a control plane. The system may also provision a software application in a current operating system environment or erase the existing operating system and provisional new environment including receiving the software application responsive to a secure profile and validating the software application prior to loading.

There is provided an apparatus, said apparatus comprising means for receiving, from a distributed unit of a radio access network node at a centralized unit control plane part of the radio access network node, an indication that the distributed unit supports network slices providing local switching at the distributed unit, indicating, from the centralized unit control plane part of the radio access network node to a core network, that the distributed unit of the radio network node supports network slices providing local switching at the distributed unit, receiving a user equipment context from the core network, for a user equipment providing a request for local switching at the distributed unit, the request including an indication the user equipment is allowed to use at least one of the network slices providing local switching at the distributed unit, configuring for each of the network slices providing local switching at the distributed unit, at least one data transmission context at the distributed unit such that the user plane of the user equipment is terminated at the distributed unit and a protocol data unit session associated with the data transmission context becomes available to the user equipment for local switching at the distributed unit and configuring for each of the network slices providing local switching at the distributed unit at least one data transmission context at the user equipment such that the user equipment can use the protocol data unit session for local switching at the distributed unit.

Devices, systems, methods, and processes for fabric congestion management are described herein. At each ingress switch, virtual output (“VO”) queues are created for egress ports based on identifiers, state indicators, and encapsulation values of the egress ports received via an Ethernet Virtual Private Network (“EVPN”) control plane. When a data packet is received at the ingress switch, an egress port for the data packet is determined, an identifier and an encapsulation value of the egress port are added to the data packet, and the data packet is stored in a corresponding VO queue. The data packet remains at the ingress switch until an egress switch is available. At the egress switch, one or more tags are added in the data packet based on the encapsulation value, whereas the destination egress port is identified based on the identifier. Thus, a quick egress through the egress switch is achieved.

Some embodiments provide a method for implementing a software-defined private mobile network (SD-PMN) for an entity. At a physical location of the entity, the method deploys a first set of control plane components for the SD-PMN, the first set of control plane components including a security gateway, a user-plane function (UPF), an AMF (access and mobility management function), and an SMF (session management function). At an SD-WAN (software-defined wide area network) PoP (point of presence) belonging to a provider of the SD-PMN, the method deploys a second set of control plane components for the SD-PMN that includes a subscriber database that stores data associated with users of the SD-PMN. The method uses an SD-WAN edge router located at the physical location of the entity and a SD-WAN gateway located at the SD-WAN PoP to establish a connection from the physical location of the entity to the SD-WAN PoP.

Techniques are provided for implementing a distributed control plane to facilitate communication between a container orchestration platform and a distributed storage architecture. The distributed storage architecture hosts worker nodes that manage distributed storage that can be made accessible to applications within the container orchestration platform through the distributed control plane. The distributed control plane includes control plane controllers that are each paired with a single worker node of the distributed storage architecture. Thus, the distributed control plane is configured to selectively route commands to control plane controllers that are paired with worker nodes that are current owners of objects targeted by the commands. In this way, the control plane controllers can facilitate communication and performance of commands between the applications of the container orchestration platform and the worker nodes of the distributed storage architecture.

The invention discloses a software and hardware cooperation system and method for satellite network routing simulation, and mainly solves the problem that an existing simulation scheme is difficult to consider high fidelity of protocol behaviors and high performance of data forwarding in a high dynamic satellite network. The system comprises a software control plane unit, a hardware data plane unit, a satellite network simulation upper computer and a switch, and the switch is bidirectionally connected with the software control plane unit, the hardware data plane unit, the satellite network simulation upper computer and the switch and serves as a data exchange platform of the system. The satellite network simulation upper computer is used for system configuration management, operation state monitoring and result visualization; the software control plane is used for executing simulation calculation and routing decision of a satellite network routing protocol and generating a standardized forwarding table item; and the hardware data plane unit performs high-speed and deterministic table lookup forwarding according to the standardized forwarding table item, and simulates a satellite resource constraint environment. According to the method, the integrity of protocol simulation details is guaranteed, meanwhile, high-efficiency forwarding performance and non-interruption updating in a high-dynamic environment are achieved, and the method can be used for routing protocol verification, network performance testing and satellite-borne algorithm evaluation of large-scale low-orbit satellite constellations.

Disclosed are systems and methods for operating a configurable communication device. A network controller includes a communication interface to interface with multiple communication devices and a memory storing instructions. The network controller also includes a processor, that when executing the instructions, is configured to determine that a configurable communication device of the plurality of communication devices is to operate in a first control plane type of multiple control plane types configurable to be used by the configurable communication device. The processor is also configured to operate the configurable communication device using the first control plane type and to receive an indication that the configurable communication device is to switch to a second control plane type. Moreover, the processor is configured to cause the configurable communication device to switch to the second control plane type and operate the configurable communication device using the second control plane type.

The invention discloses a private cloud platform-based micro-service application remote main and standby disaster recovery rapid switching method, relates to the technical field of computers, and is used for solving the problems of long remote main and standby disaster recovery switching time, cold start storm, insufficient capacity evaluation and discharge strategies and complex back switching. The switching process is decomposed into controllable steps by combining real-time state feedback through a clear sequential arrangement and batch reconnection strategy of a data surface and a control surface, so that the switching time is remarkably shortened, the target of minute-level continuous availability is met, and meanwhile, the switching efficiency is greatly improved through heat set construction and standby side quasi real-time preheating before switching. Core hotspot data and indexes are loaded to the standby side in advance, it is ensured that the standby side has the high cache hit rate and index availability during master raising, and therefore the performance bottleneck caused by access of a large amount of cold data is avoided.

The present disclosure relates to a communication method and system for converging a 5th-Generation (5G) communication system for supporting higher data rates beyond a 4th-Generation (4G) system with a technology for Internet of Things (IoT). The present disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services. Disclosed is a method of determining, in a User Equipment, if a PDU session between the UE and a network, can be transferred between 3GPP and non-3GPP access, when the UE is using a Cellular Internet of Things, CIoT, optimisation, wherein the determination is performed on the basis of a Control Plane, CP, only indication and if the determination is positive, then the PDU session is not transferred.

In general, the current subject matter relates to layer 1 / layer 2 (L1 / L2) triggered mobility (LTM) for intra-base station centralized unit user plane (CU-UP) relocation. In some implementations, a target distributed unit (DU) of a base station to serve a user equipment (UE) can be determined to be served by a target CU-UP of the base station. A serving CU-UP of the base station can serve a serving DU of the base station that is currently serving the UE. Using a centralized unit control plane (CU-CP) of the base station, the target CU-UP can be prepared for layer 1 / layer 2 triggered mobility (LTM), and, using the CU-CP, the target DU can be prepared for LTM.

Embodiments of the present disclosure provide method and apparatus for charging. A method performed by a user plane function entity comprises receiving a first message from a control plane function entity. The first message comprises one or more information elements referencing one or more pre-defined packet detection rules (PDRs) configured in the user plane function entity. The one or more pre-defined PDRs specify one or more predefined usage reporting rules (URRs). The method further comprises activating the one or more predefined PDRs. The method further comprises generating a usage report for at least one of the one or more predefined URRs. The usage report comprises information for describing received user traffic which is related to the at least one of the one or more predefined URRs. The method further comprises sending a second message comprising the usage report to the control plane function entity.