Abstract: Methods and systems for automated ad hoc customer premise equipment (CPE) bi-directional vulnerability scanning. A method includes an auto provisioning server receiving CPE information for a designated CPE to initiate a bi-directional vulnerability scan, obtaining telemetry data from a cable modem termination system (CMTS) based on the CPE information, configuring switches to form a virtual local area network channel between a LAN scanner and the designated CPE using the CPE information, provisioning the LAN scanner to obtain a LAN side Internet Protocol (IP) address from the designated CPE, initiating vulnerability scans at a wide area network (WAN) scanner and the LAN scanner using a stored WAN side IP address and a stored LAN side IP address, respectively, and generating a vulnerability scan report based on results from the WAN scanner and the LAN scanner. At least one network device can be configured based on the report.

Abstract: Described herein are methods and apparatuses for the provision and management of value added services without a requirement for specific client software on a wireless receive/transmit unit (WRTU). The methods and apparatuses described may be applied to wireless networks supporting HTTP transfers without disrupting the wireless network configuration. In the embodiments described herein, a web request may be received by a Service Management Entity (SME) that may be located in an access point (AP) from a WRTU. The SME may transmit a proxy auto-configuration (PAC) file to the WRTU. This PAC file may include a uniform resource locator (URL) associated with a Service Delivery Entity (SDE), and the URL chosen may be based on rules associated with a location of the WRTU. The SDE may then receive a second web request from the WRTU and respond by transmitting a message to the WRTU such as a transaction trigger.

Abstract: Methods and systems for Internet Protocol (IP) address allocation optimization. A method includes a data collector collecting IP address information from sources of IP address inventory and an optimization controller generating a data set from the collected IP address information, minimizing IP address allocations for network components in a network using IP address allocation and IP address utilization for a network component from the data set, minimizing IP address inventory costs using IP address inventory and IP address utilization from the data set and IP address transactional costs, tracking the IP address inventory, sending configuration information to network component(s) to change respective IP address allocations based on minimized IP address allocation, sending transaction information to IP address provider(s) to change the IP address inventory based on minimized IP address inventory costs, and performing the above on a defined interval.

Abstract: According to one configuration, a system includes a mobile communication device in communication with a wireless base station. During operation, the mobile communication device detects one or more conditions associated with the wireless network environment. Based on the one or more detected conditions, the mobile communication device selects amongst multiple channel access procedures to communicate with the wireless base station and establish a wireless communication link. The mobile communication device can be configured to include supplemental data in a message to the wireless base station to indicate a reason for the mobile communication device selecting a particular channel access procedure of the multiple channel access procedures.

Abstract: A Narrow Band-Internet of Things (NB-IoT) communications link between a wireless access point of a non-cellular network and a cellular base station of a cellular network is implemented and used to support load management operations in a communications system including a cellular network and a non-cellular network. A service management system uses UE performance information and network statistics communicated over the NB-IoT communications link to evaluate network loading with regard to congestion in the non-cellular network. The session management system initiates a communications session for congestion control to offload a session from a congested network to a less congested network. The NB-IoT link is used to communicate session handoff related signaling.

Abstract: Methods and apparatus for providing quasi-licensed spectrum access within an area or application so as to enable “end to end” IoT (Internet of Things) device connectivity. In one embodiment, the quasi-licensed spectrum utilizes 3.5 GHz CBRS (Citizens Broadband Radio Service) spectrum allocated by a Federal or commercial SAS (Spectrum Access System) to a managed content delivery network that includes one or more wireless access nodes (e.g., CBSDs (Citizens Broadband radio Service Devices) and IoT hubs or gateways) in data communication with a controller. In one variant, the controller dynamically allocates (i) spectrum within the area or venue within CBRS bands, and (ii) MSO (multiple systems operator) users or subscribers to CBRS bands or IoT (Internet of Things) bands (e.g., public ISM (industrial, scientific and medical)) bands to maximize connectivity and performance.

Abstract: Millimeter wave access system and method for device-to-device communications (D2D) are described.

Abstract: Methods and systems for service integrated domain name servers are described. A method for out of path border gateway protocol (BGP) validation includes receiving, at a network component, a prefix announcement. The network component denies acceptance of the prefix announcement. A BGP monitor at the network component sends the prefix announcement to an out of path validation controller. The out of path validation controller evaluates the prefix announcement against one or more validation tests, sends a validation notification based on the one or more validation tests, and programs the network component for a validated prefix announcement.

Abstract: An example technique performed by a client on a device includes: detecting a mobility state of the device in a presence of a wireless network; determining, based at least in part on the mobility state, that the wireless network is a preferred wireless network for the device; in response to determining that the wireless network is a preferred wireless network, elevating a priority of the wireless network in a set of wireless networks to which the device is connectable; and connecting the device to the wireless network based, at least in part, on the priority of the wireless network.

Abstract: Systems, methods, and devices of the various embodiments disclosed herein may provide Border Gateway Protocol (BGP) security measures along autonomous system (AS) paths. Various embodiments may provide transparency as to the local security measures implemented along an AS path. Various embodiments may enable routing along secure paths. Various embodiments may enable the selection of AS paths based on a comparison of the security implemented along the AS paths. Various embodiments may reduce the impact of BGP attacks.

Abstract: Systems, methods, and devices of the various embodiments may enable distributed prefix signing by publishing a public key in a Domain Name System (DNS) text record, using a private origination key to generate a signature for a new prefix announcement, including the signature in a transitive Border Gateway Protocol (BGP) attribute of the new prefix announcement, and sending the new prefix announcement to peer components. The peer components may query an address and routing parameter area (ARPA) record to obtain nameserver information for an entity associated with the received prefix announcement in response to determining that the received prefix announcement includes a transitive BGP attribute that includes the signature, retrieve a public key from a Domain Name System (DNS) text record, and determine whether the signature included in the transitive BGP attribute of the received prefix announcement is valid based on the public key retrieved from the DNS text record.

Abstract: Methods and apparatus related to HARQ feedback, e.g. delayed HARQ ACK/NACK, and uplink control information (UCI) multiplexing, in unlicensed spectrum are described. A base station transmits an UCI request to a UE, including: a request for ACK/NACK feedback corresponding to a set of HARQ identified processes, a request for channel state information report, and/or a scheduling request. The UCI request includes information which is used, by the UE, in determining the time and air link resources on which to send the UCI. The HARQ processes are communicated in a first Channel Occupancy Time (COT), while the ACK/NACK feedback is communicated in a later COT.

Abstract: Method and apparatus for overlaying themed imagery onto real-world objects in a head-mounted display device (HMDD). A computing device receives, from an HMDD, depth data that identifies distances from the HMDD to surfaces of a plurality of objects in a user space. The computing device detects at least one object in the user space based at least in part on the depth data. The computing device determines a classification of video content being presented on a display system of the HMDD. The computing device selects, based on the classification, a particular image theme from a plurality of different image themes, the image theme comprising one or more image textures. The computing device sends, to the HMDD, at least one image texture for overlaying the at least one object during presentation of the at least one object on the display system of the HMDD in conjunction with the video content.

Abstract: A method for Internet of Things (IoT) network security includes collecting information for each network device (device), determining a minimum viable resource allocation for each device based on the information, which defines the minimum resources needed by each device to engage the IoT network and handle data, and for each device, distributing minimum viable resource allocations and rules, determining monitoring sets, monitoring using the monitoring set, collecting updated information based partially on the monitoring set, analyzing the updated information to determine trends and insights relative to the devices and the IoT network, updating the monitoring set, minimum viable resource allocation, and rules based on the analyzed updated information, checking compliance with a current minimum viable resource allocation and rules, identifying devices having violations, and performing same on a continuous as it and automatic basis.

Abstract: Various embodiments comprise systems, methods, architectures, mechanisms and apparatus for dynamically adapting category-specific radio coverage area of a mobile network using information received from corresponding common-category user equipment (UE) active within the mobile network indicative of UE capability, UE location, and UE quality of service (QoS) such that category-specific service edge locations and corresponding category-specific coverage gaps therebetween may be determined and automatically mitigated by optimizing or augmenting deployed network equipment.

Abstract: Apparatus and methods for parsing data traffic into queues for efficient routing and prioritization. In one embodiment, methods and apparatus for backhauling small cell data traffic using existing cable network infrastructure using DOCSIS Low Latency queue capabilities are provided. A data traffic classifier may use a two-stages sorting algorithm, including a first stage classification using IP address information and a second stage classification using differentiated services code point (DSCP) value information. In one implementation, the DSCP values of the data traffic are set using QoS Flow Identification (QFI) values.

Abstract: Methods and systems for a multiple domain quality of service software-defined networking (SDN) controller are described. A method includes discovering network devices in a network, collecting traffic flow data from each of the discovered network devices, collecting configuration and operational data from each of the discovered network devices, categorizing the traffic flow data into traffic flow types for presentation as a first level view, determining source and destination pairs for each traffic flow in each of the traffic flow types for presentation as a second level view, generating network device micro-topologies for each of the source and destination pairs for presentation as a third level view, mapping at least one network device characteristic for each network device in each network device micro-topology for presentation as a fourth level view, and performing corrective measures on network devices identified for issues from the presented network device characteristics.

Abstract: A connection including a wireless NB-IoT link is established between a base station in a MNO network and a base station in a MSO network. UE context information, UE radio frequency (RF) information and/or UE Key Performance Indicator (KPI) information are exchanged between the two networks over the established connection via the NB-IoT link, thus facilitating handover preparation and/or handover for a UE. A control server in the MNO controls transfer over the connection including the NB-IoT link, receives and sends information and requests over the connection, evaluates received UE information, makes handover decisions, and generates and sends handover requests.

Abstract: Systems, methods, and devices of the various embodiments may provide for dynamic ad insertion. Systems, methods, and devices of the various embodiments may enable Video-On-Demand (VOD) dynamic ad inventory handling by a network operator. Systems, methods, and devices of the various embodiments may enable augmenting network operator VOD ad inventory in a VOD session.

Abstract: Methods and apparatus for monitoring and controlling access to coexisting first and second networks, such as within a venue. In one embodiment, the first network is a managed network that includes wireless access points (APs) in data communication with a backend controller, which communicates with a client process on a user device. The client process uses indigenous radio technology of the user device to scan for coexisting networks, and report results to the controller. In one variant, the controller dynamically adjusts transmit characteristics of the AP(s) to manage interference between the coexisting networks. In another variant, the controller causes the energy detect threshold of the user device to be lowered so that it may detect WLAN signals when a coexisting RAT (for example, LTE-U or LTE-LAA) occupies the same channel and/or frequency. In another variant, the client process autonomously adjusts user device operation based on the scan.