Abstract: Systems, methods, and devices for performing targeted filtering of network traffic generated by user equipment (UE) devices connected to a customer premise device (CPE) in a communication system that includes a distributed residential gateway. A broadband network gateway may be configured to identify a UE device in a local area network (LAN) associated with the CPE that is compromised, misconfigured, or operating outside normal communication parameters. The broadband network gateway may send a dynamic host configuration protocol (DHCP) force renew message via a wide area network (WAN) to the identified UE device in the LAN, generate a DHCP offer message that presents a new Internet protocol (IP) address assignment that is within a range of IP addresses included in a layer 2/3 access list, and send the generated DHCP offer message to the UE device to quarantine the UE device.

Abstract: Methods and systems for a multiple domain quality of service software-defined networking (SDN) controller are described. A method includes discovering network devices in a network, collecting traffic flow data from each of the discovered network devices, collecting configuration and operational data from each of the discovered network devices, categorizing the traffic flow data into traffic flow types for presentation as a first level view, determining source and destination pairs for each traffic flow in each of the traffic flow types for presentation as a second level view, generating network device micro-topologies for each of the source and destination pairs for presentation as a third level view, mapping at least one network device characteristic for each network device in each network device micro-topology for presentation as a fourth level view, and performing corrective measures on network devices identified for issues from the presented network device characteristics.

Abstract: Disclosed herein are methods and systems for determining conditions for non-terminated service provider network connections. The method includes receiving, at a service provider headend, upstream signals from premises. An uncorrectable metric and a correctable metric are determined from a portion of the upstream signals upon application of signal correction to the upstream signals, where the portion is related to an operating frequency range of a networking device and an operating frequency range of Data Over Cable Service Interface Specification (DOCSIS) devices. An alert is generated when the determined uncorrectable metric meets an uncorrectable threshold and the determined correctable metric is less than a correctable threshold for a persistent period of time, where the non-termination alert indicates a non-terminated pathway to a service provider central office from the premises when service is provided to the premises from a different service provider central office.

Abstract: Methods and apparatus for providing data services to devices at a customer premises. An exemplary method embodiment includes the steps of: switching from a first mode of operation to a second mode of operation with respect to providing data services to a user equipment device located at a customer premises upon detection of a first condition at the customer premises by a wireless base station; receiving, after switching into the second mode of operation, at the wireless base station a first data service request from the user equipment device; transmitting, in response to the first data service request, one or more data packets of a first data packet stream to the user equipment device via a first transmission path and transmitting one or more additional data packets of the first packet stream to the user equipment device via a second transmission path.

Abstract: Various embodiments include computing devices and methods for testing a router device. A processor of the computing device may receive one or more Border Monitoring Protocol (BMP) messages collected from a production router. The processor may obtain header information from a header portion of the one or more BMP messages. The processor may modify an origination address in the header information to match an address of a first test network element. The processor may modify a next hop address in the header information to match an address of a second test network element. The processor may convert the one or more BMP messages including the modified header information to one or more Border Gateway Protocol (BGP) messages. The processor may send the one or more BGP messages to a router under test in the test network.

Abstract: Apparatus and methods for managed or “intelligent” paging of a user device in one or more wireless networks. In one embodiment, the apparatus and methods provide enhanced wireless services which enable prioritized paging operations of a given user device (e.g., a mobile 3 GPP-compliant UE) within two or more mobile networks (e.g., PLMNs) when the UE is operating in a “dual” mode such as 3 GPP 5G NR dual-SIM, dual standby (DSDS) mode. In one implementation, the UE contains multiple SIM cards to enable connection to different PLMNs simultaneously, such that paging associated with one network can be managed and prioritized as needed when the UE is actively utilizing another network.

Abstract: Various embodiments include computing devices and methods for updating a resource address. A processor of a computing device may receive a request for a resource address from a second computing device. The processor may send to the second computing device the resource address and a time-to-live for the resource address. The processor may determine that the resource address has changed within the time-to-live. The processor may send the changed resource address to the second computing device.

Abstract: A router device in a subscriber domain receives communications from a communication device. The communications are destined for delivery over a first network operated by a corresponding service provider to a destination in a second network such as the Internet. To convey communications, the router device maps a network address obtained from the first communications to a corresponding marker assigned to the communication device. The router device then tags the communications from the communication device with the corresponding marker and forwards the tagged communications (with the marker) over the first network to the second network. The first network operated by the service provider conveys the tagged communications in accordance with a data delivery policy as indicated by the corresponding marker in the forwarded communications.

Abstract: Apparatus and methods for registration of e.g., mobile devices in one or more wireless networks. In one embodiment, the apparatus and methods provide enhanced wireless services which enable operation of a given mobile device (e.g., a 3GPP-compliant UE) within two or more mobile networks (e.g., PLMNs) of respective different operators. In one implementation, the UE operates in dual-registration mode or DRM to allow different interworking between the two networks, and includes independent registration capability to 5GC and EPC infrastructure simultaneously. Accordingly, the UE is provided umbrella 4G/4.5G coverage over one or more small-cell 5G networks, with respective independent operators of each. Enhanced DRM-UEe capability as described herein advantageously allows for service provision (e.g., voice service) and interworking between the macro and small-cell layers of the system without complicated network configuration requirements between the two operating networks.

Abstract: Disclosed herein are methods and apparatus for coverage determination and download opportunity notification. A method for content coverage determination and download opportunity includes obtaining, by a content coverage application running on a mobile device, an itinerary from a map application on the mobile device. The content coverage application sends the itinerary and mobile device characteristics to a coverage determination system and receives a wireless coverage profile based on the itinerary and the mobile device characteristics. The content coverage application generates a list of entertainment applications running on the mobile device. The content coverage application provides a notification of a wireless coverage gap based on the wireless coverage profile and displays the list of entertainment applications and status for each listed entertainment application in response to user input.

Abstract: Disclosed herein are methods and apparatus for content searching using a dynamic search keyboard. A method for searching for content includes displaying, on a display device, a search page including at least a dynamic search keyboard and a search bar. A character is selected on the dynamic search keyboard using a remote control device. The selected character is displayed on the search bar. The dynamic search keyboard is reconfigured using the selected character as the focus and relevant characters are positioned proximate to the selected character based on search algorithm analysis. The reconfigured dynamic search keyboard is displayed. The character selection and dynamic search keyboard reconfiguration are repeated until an exit action.

Abstract: Disclosed herein are methods and systems for using out-of-band spectrum for shared spectrum registration and increased link reliability and capacity. A method for customer premise equipment (CPE) attachment and registration in a shared spectrum system includes attaching, by the CPE to a shared spectrum access point, using an out-of-band spectrum, where the out-of-band spectrum is out-of-band with respect to a shared spectrum of the shared spectrum system, registering, by the CPE with a spectrum access system, using the out-of-band spectrum upon successful attachment with the shared spectrum access point, and communicating, by the CPE, using at least the shared spectrum upon successful registration with the spectrum access system.

Abstract: An apparatus for mitigating a DDoS attack in a networked computing system includes at least one detector coupled with a corresponding router in the networked computing system. The detector is configured: to obtain network flow information from the router regarding current data traffic to at least one host; to compare the current data traffic to the host with stored traffic patterns associated with at least one prior DDoS attack; and to generate an output indicative of a match between the current data traffic and at least one of the stored traffic patterns. The apparatus further includes at least one mitigation unit coupled with the at least one detector. The mitigation unit is configured: to receive the output indicative of the match between the current data traffic and at least one of the stored traffic patterns; and to initiate a DDoS attack mitigation action in response to the received output.

Abstract: Systems, methods, and devices of the various embodiments disclosed herein may provide a protocol and architecture for decentralization of content delivery. Various embodiments may provide a client based method for content delivery from content delivery networks (CDNs) via tiered caches of content hosted by Internet Service Providers (ISPs). In various embodiments, content delivery protocol (CDP) messages may enable clients to discover local cache network topologies and request content from a CDN based on a discovered local cache network topology. In various embodiments, security may be provided for the content delivery by the use of key encryption and/or file hashing.

Abstract: A customer premises device including an optical modem including at least one upstream laser is power controlled to provide one or more reduced power levels of service in response to a detected AC input power failure, and/or in response to control commands, e.g., from an optical line terminal (OLT). The commands control the customer premises device to switch to a reduced power consumption mode of operation. During the reduced power mode one or a few lasers are powered, e.g., on an intermittent but predictable basis. During normal operation mode each of the upstream lasers are powered. One or more receiver circuits are also powered off during reduced power mode operation in some embodiments. A schedule is used in some embodiments to control when one or more upstream lasers and/or receivers are powered. In some embodiments the schedule is determined based on information provided by the OLT.

Abstract: Methods and apparatus for providing bandwidth which can be used to support network connectivity and to obtain services from elements in a network, e.g., 5G network, are described. In various embodiments a DOCSIS link is connects a residential gateway at a customer premises to devices outside the customer premises, e.g., to devices in a 5G network or another network. Devices which support EAP authentication are provided with their dedicated bandwidth over the DOCSIS link. Devices which do not support EAP authentication, e,g, WiFi devices, share bandwidth to which a subscriber residing at the customer premise subscribes. Devices which support EAP authentication are provided reserved resources corresponding to a subscription associated with the individual device thereby allowing a user of a device which supports EAP authentication to obtain more bandwidth than is normally provided to a visited premises based on the service subscription associated with the visiting device.

Abstract: Apparatus and methods for registering and authenticating a client device with a wireless-enabled network. In one embodiment, the apparatus and methods provide an alternate wireless connectivity link to register an installed high-power fixed wireless apparatus (FWA) or Customer Premises Equipment (CPE) with a managed wireless network infrastructure, such as one utilizing “quasi-licensed” CBRS (Citizens Broadband Radio Service) wireless spectrum or another shared access approach. In one variant, the alternate wireless link comprises a mobile cellular channel established via an application program executing on a mobile device. In another variant, an Internet of Thing Network (IoT) is used for the alternate link. In one implementation, spectrum grants are communicated back the FWA/CPE via the alternate link to enable subsequent CBRS-band high-power operation.

Abstract: Systems, methods, and devices for provisioning user equipment devices. A zero touch configuration proxy (ZTCP) component may be configured to receive a client certificate and a request for a configuration file from a UE device, verify the authenticity of the received client certificate, use PKI and the SSL_CLIENT_S_DN_CN field of the client certificate to identify the UE, issue various commands/API calls to a provisioning system, determine whether the specific UE device is currently authorized to receive a particular service (e.g., VoIP, etc.), determine whether the specific UE device is allowed to access the requested configuration file, and send the configuration file to the UE device in response to determining, based on SSL_CLIENT_S_DN_CN field in the client certificate, that the UE device is authorized to access the configuration file and receive the requested service.

Abstract: Apparatus and methods for unified high-bandwidth, low-latency data services. In one embodiment, a network architecture having service delivery over at least portions of extant infrastructure (e.g., a hybrid fiber coaxial infrastructure) is disclosed, which includes standards-compliant ultra-low latency and high data rate services (e.g., 5G NR services) via a common service provider. In one variant, parallel MIMO data streams supported by 3GPP 5G NR are shifted in frequency before being injected into the single coaxial cable feeder, so that frequency diversity (instead of spatial diversity) is leveraged to achieve the maximum total carrier bandwidth that 3GPP 5G NR chipsets. Intermediate Frequencies (IF) are transmitted over the media in one implementation, (i.e., instead of higher frequencies), and block-conversion to RF carrier frequency is employed subsequently in the enhanced consumer premises equipment (CPEe) for 3GPP band-compliant interoperability with the 3GPP 5G NR chipset in the CPEe.

Abstract: A method, performed by a first customer premises equipment (CPE) at a first customer premises within a fixed wireless access (FWA) network comprising a plurality of base stations, includes: connecting remotely over a first interface to a first base station of the FWA network, providing access over the first interface to the FWA network to at least a first client device locally connected to the first CPE at the first customer premises, and receiving information over a second interface from a second CPE at a second customer premises within the FWA network to modify operation of at least the first CPE. The second CPE provides access to the FWA network to at least a second client device locally connected to the second CPE at the second customer premises, and the information received from the second CPE over the second interface comprises information about operation of the second CPE.