Abstract: For a flow of data packets in a communication path from a source host to a destination host, an intermediate node forwards data packets transmitted by the source host on a downstream link towards the destination host; forwards, towards the source host, acknowledgment (ACK) packets transmitted by the destination host in response to receiving the data packets; detects congestion in the downstream link; and directly modifies at least some of the ACK packets to inform the source host of the congestion. ACK-packet modification may include marking, dropping, and/or delaying at least some of the ACK packets.

Abstract: Background-share a one-time pad key from a first location to a second location over a secure background channel. Send a message, encrypted with the one-time pad key, from the first location to the second location, over an unsecure channel.

Abstract: A wireless router that implements a first wireless network associated with a first service set identifier (SSID) and a second wireless network associated with a second SSID, determines that a mobile device connected to the first wireless network should be forced to attempt to reestablish a connection with the wireless router. In response to determining that the mobile device should be forced to attempt to reestablish the connection with the wireless router, the wireless router disables the first wireless network. The wireless router subsequently reenables the first wireless network.

Abstract: Wireless signaling is received from a signal repeater device that repeats signaling originating from a network computing system. The wireless signaling comprises information indicating that the wireless signaling is being repeated. A message responsive to the wireless signaling to the network computing system, wherein the message comprises information indicating that signaling received by the UE is being repeated. A message is sent responsive to the wireless signaling to the network computing system that comprises information indicating that signaling received is being repeated. Information indicative of instructions to switch from a first network slice to a second network slice are received. A network slice switching process is performed to switch from the first network slice configured for a first maximum bitrate to the second network slice configured for a second maximum bitrate less than the first maximum bitrate.

Abstract: Methods and apparatus for using a QUIC connection established between a user equipment (UE) and a Trusted Non-3GPP Gateway Function (TNGF) to support trusted non-3GPP access which facilitates Access Traffic Steering, Switching, and Splitting (ATSSS) are described. An exemplary TGNF, implements Multiplexed Application Substrate over QUIC Encryption (MASQUE) over QUIC. In some embodiments, QUIC connection IDs are used to delineate control plane (CP) traffic and user plane traffic being communicated over the established QUIC connection. In other embodiments, a new 3GPP Payload type header is used to delineate between control plane (CP) traffic and user plane traffic communicated over the established QUIC connection.

Abstract: Systems, methods, and devices for managing multiple service flows through a single Customer Premises Equipment (CPE) device to provide differentiated services to multiple customers, which may be at the same or different locations. A CPE device may be configured to create one or more Virtual Local Area Networks (VLAN) tags within the CPE device, each associated with a specific Service Set Identifier (SSID), which segregates service flows based on customer needs and service types. The CPE device may also generate multiple tunnels from a network gateway to the Wi-Fi routers, with each tunnel corresponding to one of the SSIDs. The tunnels facilitate the segregation of service flows to maintain distinct and independent service streams for different customer segments.

Abstract: Methods and systems for impairment identification and mitigation recommendation using pretrained machine learning models on an access customer premises equipment (CPE) device.

Abstract: Methods and systems for providing distributed hotspot as a service. A method includes registering, by a mobile device with a DHAAS controller, to perform as a DHAAS hotspot, authenticating, by a vehicle proxy in a vehicle, a registered mobile device when the registered mobile device is present in the vehicle, initiating, by the DHAAS controller via the vehicle proxy, the registered mobile device to provide a DHAAS hotspot for the vehicle, and switching, by the DHAAS controller via the vehicle proxy, to another registered mobile device to provide a DHAAS hotspot when a switchover threshold is met or exceeded.

Abstract: A system as discussed herein includes communication management hardware. The communication management hardware: receives a first data packet including a first data payload, the first data packet encoded in accordance with a wireless communication protocol for conveyance to a destination network address; maps a first quality of service associated with the first data packet to a first service flow amongst multiple service flows supported by a backhaul network; and forwards the first data packet over the first service flow of the backhaul network for delivery of the first data packet to the destination network address.

Abstract: A UE is supplied with one or more UE Route Selection Policy (URSP) rules which include an indicator indicating support for a “L4S” Connection Capability. The use of an L4S connection capability indicator allows a UE to obtain L4S support for application traffic data requiring L4S support. The connection capabilities option in the URSP rule or rules allows a UE to select an appropriate route selection for matching L4S connection capability. By allowing a UE to indicate that a packet or packet flow is to be matched to a PDU session which has an L4S connection capability, the UE can trigger establishment of a new PDU session to support a flow of application data packets requiring L4S support or can cause the packet flow to be assigned to an existing PDU session or trigger a modification of an existing PDU Session which supports L4S.

Abstract: Redundant configuration and testing for flexible nodal layer 3 overlay of layer 2 traffic. A network deployed at a site includes a local network to carry layer 2 traffic, a pair of layer 3 tunnel instantiation devices in a failover configuration. Each layer 3 tunnel instantiation device encapsulates the layer 2 traffic into layer 3 traffic and forwards the layer 3 traffic to a network gateway using a configurable layer 3 tunnel. A virtual client on each layer 3 tunnel instantiation device sends simulated client traffic to the network gateway via the local network and a partner layer 3 tunnel instantiation device to check end-to-end operability of the local network, the partner layer 3 tunnel instantiation device, and the network gateway. A testing layer 3 tunnel instantiation device initiates an action with respect to the partner layer 3 tunnel instantiation device based on a response to the simulated client traffic.

Abstract: Resource utilization information including one or more of central processor utilization, memory utilization, and device load values are received from each of a plurality of network devices that compose an access network that is communicatively coupled to a core network. The resource utilization information is provided to a machine learning model to receive an output, wherein the machine learning model has been trained with historical resource utilization information associated with network devices that compose an access network, predetermined thresholds, and an impact to the access network of network resources being added to a core network. A recommended increase in network resources of the core network or the access network is sent to a destination based on the output.

Abstract: A plurality of datasets that correspond to ones of a plurality of digitized voice signal recordings are generated, each digitized voice signal recording corresponding to a support call between a technician and a support representative providing support to the technician, and each dataset including one or more textual documents that include words spoken during the corresponding support call between the technician and the support representative. An unsupervised learning model operative is trained using the datasets to identify clusters of the datasets based on similarity to a corresponding topic of a plurality of topics, each topic including a set of topic terms. Information that corresponds to at least one topic is output.

Abstract: An access point (AP) communicates to one or more stations (STAs) information indicating a set of channels and/or resource units (RUs), corresponding to a wideband basis service set (BSS) for an authorized unlicensed radio local area network (RLAN) using 6 GHz spectrum, which are subject to a lower power spectral density (PSD) level than other portions of the BSS frequency range or are not to be used for transmission. In some, but not necessarily all, embodiments, the AP and the STAs do not encode data on the identified channels or RUs, but do encode data on other channels and/or other RUs, which are not subject to the lower PDS constraint.

Abstract: Various embodiments include methods and devices for identity graphing of network genomes. Embodiments may include processing a node data set having unstructured node identifiers (IDs), determining potential node IDs from the node data set, determining node counts based on the potential node IDs, and classifying probabilities of accuracy of the node counts via a node count machine learning classifier model. Embodiments may further include classifying probabilities of accuracy of node IDs via a node ID machine learning classifier model. Embodiments may further include generating a data structure associating at least a first node ID of the classified node IDs with a network equipment ID. Embodiments may further include associating a classified probability accuracy of the first node ID with the first node ID.

Abstract: A method for Internet of Things (IoT) network security includes collecting information for each network device (device), determining a minimum viable resource allocation for each device based on the information, which defines the minimum resources needed by each device to engage the IoT network and handle data, and for each device, distributing minimum viable resource allocations and rules, determining monitoring sets, monitoring using the monitoring set, collecting updated information based partially on the monitoring set, analyzing the updated information to determine trends and insights relative to the devices and the IoT network, updating the monitoring set, minimum viable resource allocation, and rules based on the analyzed updated information, checking compliance with a current minimum viable resource allocation and rules, identifying devices having violations, and performing same on a continuous as it and automatic basis.

Abstract: A base station, e.g., a CBSD, selects or more user equipment (UE) devices, e.g., cell phones, to operate in monitoring mode. In monitoring mode the UE device, in addition to its normal communications with the base station, performs received power measurements in a frequency band, e.g., a CBRS band. The UE reports to the base station information indicating a UE determined measured power level attributed to incumbent user or measurement information used to derive a power level attributed to incumbent user. One or more base stations report received power measurement values attributed to incumbent user to a system management device, e.g., a SAS. The system management device processes the received information, e.g. combining information, and comparing a result to a threshold level. If the result exceeds the threshold the system management device sends a command to one or more base station to shut down DL traffic in the CBRS band.

Abstract: Apparatus and methods for providing interference management and load balancing in a wireless network. In one embodiment, the method and apparatus utilize quasi-licensed CBRS (Citizens Broadband Radio Service) wireless spectrum in conjunction with enhanced SAS (Spectrum Access System) and base station (e.g., CBSD) components to enable creation and management of virtual clusters of bases stations connected to the network, so as to enable inter-cluster interference mitigation, while also supporting load balancing between the base stations using coverage area overlap. In one implementation, the SAS reduces the coverage area (transmit power) of one or more base stations on a cluster edge to mitigate inter-cluster interference, and increases or adjusts the coverage of one or more base stations inside of the cluster to enable load balancing.

Abstract: In response to receiving instructions from a Spectrum Access System (SAS) to modify (e.g., reduce and/or cease) network transmissions in one or more Citizens Broadband Radio Service (CBRS) sub-bands following the SAS's detection of incumbent activity, the network's Operation Support System (OSS) predicts or measures received signal strength (RSS) levels based on the SAS's original instructions, estimates RSS levels based on modified versions of the SAS's instructions that prioritize higher-NPV (net present value) CBRS base stations (CBSDs) over lower-NPV CBSDs, selects a modified version whose RSS levels are approximately the same as or less than the RSS levels of the SAS's original instructions, and transmits to the SAS requests for the selected modified version. In this way, the OSS can achieves more-efficient allocation of the CBRS spectrum and therefore more-desirable network communications without interfering with the incumbent's communications.

Abstract: To avoid being overwhelmed by repeated authentication requests from faulty user equipment, in response to rejecting at least one authentication request from a UE, a wireless network (i) transmits a timeout message to the UE to instruct the UE to refrain from transmitting subsequent authentication requests for a timeout period corresponding to a specified timeout duration and/or (ii) establishes a local timeout period corresponding to the specified timeout duration during which the local network drops subsequent authentication requests received from the UE.