Abstract: Stateless network address privacy may be provided. A data packing may be received with an obfuscated destination address and an un-obfuscated source address. An un-obfuscated destination address may be determined based on the obfuscated destination address. An obfuscated source address may be determined based on the un-obfuscated source address. The obfuscated destination address may be replaced with the un-obfuscated destination address and the un-obfuscated source address may be replaced with the obfuscated source address. The packet may be forwarded.

Abstract: Disclosed herein are systems, methods, and computer-readable media for authentication in a multi-cloud cellular service. In one aspect, a method includes receiving, at a controller of a local site within the multi-cloud cellular service, a network connection request from a device, the cloud-based authentication component being a central network component configured to store device credentials and network policies for authenticating devices connecting to the multi-cloud cellular service across all sites associated with the multi-cloud cellular service. In one aspect, the method also includes locally authenticating, by the controller, the device using stored credential information obtained from the cloud-based authentication component prior to losing the connectivity to the cloud-based authentication component.

Abstract: The present technology is generally directed to dynamically adding network resources based on an application function (AF) notification. The present technology can determine, by an AF of a service provider, a network congestion on a network, the network congestion indicating that network resources for servicing a user device using services of the service provider do not meet corresponding Quality of Service (QoS) requirements. Further, the present technology can transmit a notification by the AF to a core network of a network provider to request additional network resources to be allocated for servicing the user device, the network provider providing network connectivity for the user device to receive the services provided by the service provider.

Abstract: The present disclosure is directed to systems and techniques for providing service continuity for User Equipment (UE) services associated with certain network slices. In one example, the systems and techniques can receive a registration request from a UE, wherein the registration request includes a requested slice, and determine a current network location of the UE. In response to determining that the current network location of the UE does not support the requested slice, one or more additional network locations that support the requested slice can be identified. Location information associated with the one or more additional network locations can be identified and a registration response message can be transmitted to the UE, wherein the registration response message includes location information of an one or more additional Tracking Area Identities (TAIs) or additional Registration Areas (RAs) that support the requested slice.

Abstract: Disclosed are a system and method for updating a user equipment route selection policy. The method includes receiving, at a home network in communication with a user equipment, an indication that a user of the user equipment desires to connect to a standalone non-public network for an event, receiving service hosting information for the event, revising a user equipment route selection policy at the home network based on the service hosting information to yield an updated user equipment route selection policy and transmitting the updated user equipment route selection policy to the user equipment. The user equipment registers, based on the updated user equipment route selection policy, with the standalone non-public network for the event.

Abstract: In one aspect, a method of IP obfuscation of a user device includes receiving, over an Extendible Authentication Protocol (EAP) session between a user device and a network access point, location preferences of the user device, generating, based on the location preferences or a network policy, a geohash for the user device, identifying, for the user device, an IP anchor, sending, over the EAP session, the geohash to the user device, and receiving, from the user device, network traffic, wherein the network access point utilizes the geohash and the IP anchor to route the network traffic for the user device and obfuscate IP address of the user device from third-party access.

Abstract: The present disclosure is directed to migrating network traffic from a licensed spectrum to an unlicensed spectrum within the same radio access technology (RAT). In one aspect, a method includes identifying a user device connected to a cellular wireless access technology, over a licensed spectrum; determining whether a condition for switching network traffic associated with the user device to an unlicensed spectrum is triggered; in response to determining that the condition is triggered, determining an unlicensed spectrum to move the network traffic to, the unlicensed spectrum being within a same cell as the licensed spectrum or in a different cell compared to a cell in which the licensed spectrum is; and migrating at least a portion of the network traffic to the unlicensed spectrum while maintaining network connectivity of the user device over the cellular wireless access technology.

Abstract: The present disclosure is directed to a comprehensive Route Selection Policy (URSP) based on Wi-Fi multi-link operation. In one aspect, a method includes identifying a user device connected to an enterprise network that provides network connectivity to user devices over multiple radio access technologies; receiving network capability information indicating that the user device is capable of a multi-link operation over a Wi-Fi network, the Wi-Fi network being one of the multiple radio access technologies; determining a URSP for the user device, wherein the URSP is a singular route selection policy for the user device to send and receive data over the multiple radio access technologies and defines, in part, a per-application traffic routing rule for routing a portion of traffic for an application used on the user device, over one of multiple links available on the Wi-Fi network; and transmitting the URSP to the user device.

Abstract: A system and method for dynamic enablement of a RLC mode of a Data Radio Bearer (DRB) based on UE radiofrequency (RF) conditions. A threshold value for a network characteristic is provided to a gNodeB. Changes in the network characteristic correlates to changes in RF channel conditions of the UE. The trigger configures the gNodeB to identify when the network characteristic meets the threshold value for selectively controlling operation of the gNodeB at one of a plurality of different operation modes including an initial radio link control (RLC) mode based on the network characteristic. A Protocol Data Unit (PDU) session is established with the gNodeB operating in an initial RLC mode with the possibility to dynamically switch to a different RLC mode based on RF channel conditions.

Abstract: Presented herein are techniques to provide selective network slice authentication and authorization in a mobile network environment. In one example, a method may include obtaining, by an access management element of a mobile network, a registration request from a user equipment, wherein the registration request identifies a plurality of network slices with which the user equipment seeks authentication; determining that if authentication for the user equipment with a first network slice is successful, authentication for the user equipment with one or more other network slices can be skipped; and upon successful authentication for the user equipment with the first network slice, skipping authentication for the user equipment with the one or more other network slices.

Abstract: Systems, methods, and computer-readable media are provided for delivering 5G SMS messages over an enterprise wireless local area network (WLAN). An example method can include associating, by an enterprise WLAN, a client device with the enterprise WLAN by assigning an enterprise WLAN identity to the client device, authenticating, by the enterprise WLAN, the client device, and generating, by the enterprise WLAN, a subscription policy for the client device. The client device can be subscribed to a 5G network. The subscription policy can specify how to route to the client device from the 5G network through the enterprise WLAN.

Abstract: The present disclosure relates to simultaneous operation of Wi-Fi access points in a super cell mode and a standalone mode and controlling connectivity of end terminals thereto. In one aspect, a method includes receiving a configuration for a group of access points operating within a network, the configuration allowing each access point of the group to operate in a super cell mode over a shared frequency channel and a standalone mode over a non-shared frequency channel. The method further includes determining, for an end terminal, whether the end terminal is to connect to the network over the shared frequency channel or the non-shared frequency channel based on a network policy to yield a determination; and controlling connectivity of the end terminal to at least one access point of the group of access points over the shared frequency channel or the non-shared frequency channel based on the determination.

Abstract: Techniques and mechanisms for use in facilitating home network assisted concurrent access to network slices in multiple visited public land mobile networks (VPLMNs) are described. A control plane (CP) function for mobility management may receive, from a UE (e.g., configured without dual connectivity), a message which indicates a registration request for registration using a first network slice and a second network slice. The CP function may manage registration for the UE in response to the registration request. The CP function may receive, from the UE, a message which indicates a request for establishing a protocol data unit (PDU) session using the second network slice which is not supported or available in the first VPLMN. The CP function may forward the request for establishing the PDU session to an application function (AF) for managing establishment of the PDU session for the UE using the second network slice in a second VPLMN.

Abstract: The present technology discloses methods, systems, and non-transitory computer-readable storage media for identifying a data communication session within a 5G enterprise network and providing assurance based on the identified data communication session. The present technology provides for establishing a data communication session for user equipment on a 5G network, generating a protocol data unit (PDU) session identifier for the data communication session, and distributing the PDU session identifier to one or more packet core nodes in the 5G network. The PDU session identifier can then be used for collecting one or more key performance indicators in association with the data communication session.

Abstract: Systems, methods, and computer-readable media are provided for on-boarding network devices onto a private 5G network. An example method can include discovering a first private 5G network upon the network device being turned on, authenticating, at the network device, the network device, downloading a second network profile from an SM-DP+ server of a second private 5G network, and on-boarding the network device to the second private 5G network.

Abstract: The present technology is generally directed to dynamically adding network resources based on an application function (AF) notification. The present technology can determine, by an AF of a service provider, a network congestion on a network, the network congestion indicating that network resources for servicing a user device using services of the service provider do not meet corresponding Quality of Service (QoS) requirements. Further, the present technology can transmit a notification by the AF to a core network of a network provider to request additional network resources to be allocated for servicing the user device, the network provider providing network connectivity for the user device to receive the services provided by the service provider.

Abstract: Systems and methods for providing access prioritization to a private Long Term Evolution (LTE) network operating in a Citizens Broadband Radio Service (CBRS) spectrum include receiving, at a network device of the private Long Term Evolution (LTE) network, a functional group associated with a user equipment (UE) and a traffic load of a cell of the private LTE network associated with the UE. An access priority associated with the functional group and the traffic load is determined and provided to a CBRS access point (AP) which controls access to the cell. The access priority indicates to the CBRS AP a priority with which the UE is allowed to access the cell and can include a high priority, a low priority, or no access indication.

Abstract: A system and method for dynamic enablement of a RLC mode of a Data Radio Bearer (DRB) based on UE radiofrequency (RF) conditions. A threshold value for a network characteristic is provided to a gNodeB. Changes in the network characteristic correlates to changes in RF channel conditions of the UE. The trigger configures the gNodeB to identify when the network characteristic meets the threshold value for selectively controlling operation of the gNodeB at one of a plurality of different operation modes including an initial radio link control (RLC) mode based on the network characteristic. A Protocol Data Unit (PDU) session is established with the gNodeB operating in an initial RLC mode with the possibility to dynamically switch to a different RLC mode based on RF channel conditions.

Abstract: The present technology discloses methods, systems, and non-transitory computer-readable storage media for identifying a data communication session within a 5G enterprise network and providing assurance based on the identified data communication session. The present technology provides for establishing a data communication session for user equipment on a 5G network, generating a protocol data unit (PDU) session identifier for the data communication session, and distributing the PDU session identifier to one or more packet core nodes in the 5G network. The PDU session identifier can then be used for collecting one or more key performance indicators in association with the data communication session.

Abstract: Systems, methods, and computer-readable media are provided for delivering 5G SMS messages over an enterprise wireless local area network (WLAN). An example method can include associating, by an enterprise WLAN, a client device with the enterprise WLAN by assigning an enterprise WLAN identity to the client device, authenticating, by the enterprise WLAN, the client device, and generating, by the enterprise WLAN, a subscription policy for the client device. The client device can be subscribed to a 5G network. The subscription policy can specify how to route to the client device from the 5G network through the enterprise WLAN.