Abstract: A method for performing a software update that reduces down time in a Radio Access Network (RAN) is disclosed. A first computing device receives first Distributed Unit (DU) configuration information including an address of a first radio unit (RU) device. The first computing device cause the first RU device to stores an address of the first computing device as a value of a configuration parameter. After a second computing device installs software, the second computing device receives the first DU configuration information including the address of the first RU device. The first computing device receives an instruction to stop data transmission to the first RU device. The second computing device causes the first RU device stores an address of the second computing device as the value of the configuration parameter. The second computing device receives an instruction to start data transmission to the first RU device.

Abstract: Techniques are described for cognitive defined network management (CDNM) that seek to perform real-time collection and analysis of raw network data from across a disaggregated wireless network and to dynamically orchestrate network management functions substantially in real time, accordingly. For example, a multi-modal artificial intelligence (AI) engine is trained to normalize the heterogeneous raw network data into homogeneous so-called “golden record data.” A repository of historical golden records can be maintained for generating data models for use in training AI network management applications. An orchestrator can operate to directing execution of pre-developed network management workflows based on results obtained from querying the trained AI network management applications with newly received (real-time) golden records.

Abstract: Systems, devices and automated processes are described to securely grant access to components of a cloud-based data processing system implementing a 5G wireless network. Secure mechanisms are provided to generate, store and retrieve private and public encryption keys that are associated with virtual machines implementing the various components of the wireless network. Generated keys can be retrieved from secure storage associated with the data processing system to provide access to the components as desired.

Abstract: A method for obfuscating an application programming interface (API) can include creating a polarization library. The library can include for each of a plurality of websites: website endpoints, corresponding website endpoint parameters, and an assigned industry category. An API structure of a root API to be obfuscated can be extracted, including root endpoints and corresponding root endpoint parameters. An industry category can be identified for the root API and a website is selected from the polarization library that is in an industry category that is distinct from the root API category. An obfuscator API is created with the extracted API structure using website endpoints and website endpoint parameters from the selected website that match the structure of the root API.

Abstract: Various arrangements for using multiple grant-free transmission configurations are presented. A cellular network may assign multiple grant-free transmission configurations to an instance of user equipment. The cellular network may receive a set of data according to the first grant-free transmission configuration and a replication of the set of data according to the second grant-free transmission configuration.

Abstract: Systems, devices and methods, for customer specific network slicing include a virtual network operator (“VNO”) server, a first node, and a virtualized network. The VNO server instantiates a solution manager engine which identifies a Solution, communicates the Solution to the first node, and upon acceptance of the Solution by the first node, instructs the virtualized network to couple the first node with a second node in accordance with the Solution. The virtualized network may include network function virtualization infrastructure and the Solution may include a slice of the virtualized network. The slice satisfies a Service Level Requirement (SLR), such as one that specifies a maximum latency for the slice. The SLR is specified in a Need received by the VNO server from the first node. The SLR is determined based upon an application program the first Node is at least one of currently executing and expected to later execute.

Abstract: Systems, devices, and automated processes for user equipment (UE) to access network slices at cell sites. An example process includes receiving a registration request from the UE. The registration request includes a list of network slices for access at network cells within range of the UE. The UE is authenticated to the network to identify subscription information of the UE. A list of slice identifications (IDs) available to the UE is transmitted to the UE. A slice-specific authentication of the UE is initiated for a slice identified as available based on the subscription information. The UE is allowed to access the slice in response to the slice-specific authentication.

Abstract: An automated patching system for a cloud-based network includes an instance of a network function running on cloud-based hardware. An agent retrieves a baseline and a list of installed software for the instance. A patching function is in communication with the agent and runs at a first scheduled time in response to a first maintenance window starting at the first scheduled time. The first maintenance window comprises a first target list of instances running in a first availability zone. The patching function also runs at a second scheduled time in response to a second maintenance window. The patching function polls the agent to add the instance to the first target list of the first maintenance window. A first task launched by the patching function runs a patching executable that applies a patch to the instance in response to the patch missing from the list of installed software.

Abstract: A data pipeline architecture provides for efficient and scalable data collection within a 5G wireless network. The data pipeline includes a data collection engine that receives streaming and/or query-based data. The data collection engine collects the data, amalgamates the streaming and the querly-based data into a common format, and provides the amalgamated data for delivery to a data reporting engine. The data reporting engine provides dashboards, reports, alerts or other information about the collected data. The data reporting engine may also interface with a database system for longer-term storage of collected data, report generation and/or the like.

Abstract: Systems, methods, and devices secure executables in a cloud-based environment. An example process includes receiving a first pull request to create an executable document for execution by an instance running in the cloud-based environment. The executable document is stored in a document repository in response to the first pull request and approval of the executable document. A command is generated for a system manager in the cloud-based environment to create the executable document. A second pull request is received to create a script that is executable by the document. The script is stored in a script repository in response to the second pull request and an approval of the script. The executable document runs in response to a run command from the instance running in the cloud-based environment, and the approved script stored in the script repository runs in response to a call from the executable document.

Abstract: Systems and methods for backing up a cloud-based network include a first instance of a computing resource running in a first region. A first backup service is running in the first region and configured to take a first backup of the first instance. The backup service uses a key management service of the first region to encrypt the first backup with a first cryptographic key to generate a first encrypted backup. The first encrypted backup is stored in a first backup vault of the first region. A second backup service runs in a second region and receives a copy of the first backup. A second key management service of the second region encrypts the copy of the first backup using a second cryptographic key to generate a second encrypted backup. The second encrypted backup is stored in a second backup vault of the second region.

Abstract: Various arrangements for performing wireless sensor device activation are presented. A sensor device may be manufactured such that a function of the sensor device is disabled and the sensor device is activated for passive near-field communication (NFC). A housing of the sensor device may be sealed such that only wireless communication with the sensor device is available. An NFC carrier field and a wake message can be received from an activation device. In response to validating the wake message, a sensor device identifier may be transmitted by modulating the NFC carrier field and the disabled function of the sensor device may be enabled.

Abstract: A method and apparatus for non-terrestrial network beam switching is provided. A non-terrestrial network base station includes a transmitter configured to transmit downlink data to user equipment and a receiver configured to receive uplink data from the user equipment. A channel bandwidth of the non-terrestrial network base station is divided into a plurality of bandwidth parts respectively corresponding to a plurality of geographic areas, and each bandwidth part is respectively associated with a satellite beam. When the user equipment is located in a first geographic area, the transmitter transmits the downlink data to the user equipment over a corresponding first bandwidth part. After the user equipment transitions from the first geographic area to a second geographic area, the transmitter transmits the downlink data to the user equipment over a corresponding second bandwidth part of the plurality of bandwidth parts.

Abstract: Systems and methods of adaptive bandwidth (BW) management are provided by a control unit of distribution and central units to monitor power and traffic loads at a plurality of network nodes; a BW management unit communicating with the control unit to reassign a set of network slices with a set of smaller bandwidth parts (BWPs); the BW management unit configured to define a smaller BWP from a slice mapping for the slice reassignment during a AC power outage, the slicing mapping includes network slices tied to smaller BWPs in the network; and the BW management unit configured to adapt BW for users at the node by reassigning of at least one network slice with a defined smaller BWP at the node in response to a condition determined by the BW management unit, the condition of at least one of a AC power outage and reduced traffic load.

Abstract: Various arrangements for using different air interfaces on adjacent frequency channels for side-link communications are presented. A first side-link channel may be split into a first bandwidth portion and the second bandwidth portion, in which the first bandwidth portion of the first side-link channel is directly adjacent to the second side-link channel. A first subcarrier spacing may be assigned to the first bandwidth portion of the first side-link channel. The second side-link channel may also use the first subcarrier spacing. A second subcarrier spacing may be assigned to the second bandwidth portion of the first side-link channel that differs from the first subcarrier spacing.

Abstract: A cellular network system for cellular communications observability, the system comprising: domains comprising systems generating data from a cellular network employing a core and clusters created using a containerized application; an observability (OBF) layer configured to collect the data and store the data over all of the domains; and a streaming platform data store configured for ingesting and processing streaming data in real-time and distributing the data to applications requesting such data, wherein the streaming platform extends completely over the OBF layer so that all data collected by the OBF layer is available to the streaming platform data store; and at least one storage transport layer.

Abstract: A method includes determining if a distributed unit (DU) can be deployed at a cluster created using a containerized application by determining if the DU exceeds a maximum capacity of DUs at the cluster, and in response to determining that the DU exceeds the maximum capacity of DUs at the cluster, creating a second cluster. Also, in another embodiment, in response to determining that the DU exceeds the maximum capacity of DUs at the first cluster, a portion of the DUs in the first cluster is moved to a second cluster. In yet another embodiment, in response to determining that the DU does not exceed the maximum distance from each of DUs in the first cluster, preventing deployment of the DU in the first cluster.

Abstract: A 5G cellular network system includes a series of clusters that each comprise a distributed unit (DU); and a public network. The public network includes a central unit (CU) configured to communicate with each DU; a processor configured for managing communications from the CU through the DU via the cluster; and a series of availability zones that each is a zone that includes its own infrastructure independent of other availability zones to control the communications between each DU and the CU and to hand over cellular communications between availability zones if one of the availability zones fails.

Abstract: Systems, methods, and devices for managing permissions generate a first list of excess permissions of a first user account belonging to a group, score a first account drift of the first user account based on the list of excess permissions, and generate a second list of excess permissions associated with a second user account belonging to the group. A second account drift of the second user account is scored based on the second list of excess permissions. A group consistency is scored based on the first account drift and the second account drift. A first new configuration of permissions for the first user account and the second user account is determined to increase the group consistency. Removing a permission from the first user account and the second user account implements the first new configuration. Removing the permission may include removing the first and second user accounts from the group.

Abstract: A system includes domains comprising systems generating data from a cellular network employing clusters created using a containerized application, and an observability (OBF) layer configured to collect the data over all of the domains and store the data at a common source. The system also includes a streaming platform data store configured for ingesting and processing streaming data in real-time and distributing the data to applications requesting such data. The streaming platform extends completely over the OBF layer so that all data collected by the OBF layer is available to the streaming platform data store. The system also includes a processor configured to collect data at the common source and manage the domains directly using the data collected at the common source.