Abstract: A system and method for delivering and receiving Short Message Service (SMS) messages between users connected to satellite and cellular networks. The system includes a communication device capable of operating in either satellite or cellular modes, a satellite service provider, a satellite proxy network, and a cellular operator. The method involves monitoring the network mode of the user device, relaying information about the user device's connection to the satellite network via a specially formatted SMS payload and registering the user device with a cellular operator when in satellite mode. The satellite proxy network serves as an anchoring point for sending and receiving SMS messages, ensuring seamless message exchange between satellite network users and cellular network users. The user device is designed to automatically switch between satellite and cellular modes based on network availability, ensuring continuous communication.

Abstract: The invention provides a system and method for detecting message drift within registered message campaigns to ensure compliance with predefined use case parameters. Utilizing a messaging compliance registry (MCR), the system downloads campaign data and employs control vectors derived from sample texts, representing intended communications within specific use cases. These vectors enable real-time comparison of incoming messages against expected messaging, employing methods such as cosine similarity measures and various vectorization models. If an incoming message's vector significantly deviates from the established threshold, indicating message drift, the system can delay, quarantine, or tag the message, while notifying the MCR. The process ensures that messages adhere to their registered campaign's guidelines, enhancing regulatory compliance and content integrity across messaging platforms.

Abstract: This invention provides a method and system for secure messaging on a mobile network, leveraging public/private key encryption. The method includes steps for deploying a trusted application by a mobile carrier on a device with a Trusted Execution Environment (TEE). A wireless Software Development Kit (SDK) on the subscriber device interacts with the trusted application and a wireless original equipment manufacturer (OEM) cloud service for mutual attestation, confirming the identity and trustworthiness of the device. A pair of public and private keys are generated, with the private key secured on the device. Messages are encrypted with the public key at a cloud messaging application, and decrypted with the private key at the device, enabling secure, viewable messages. The system can support secure transmission of one-time-passwords (OTPs) from an enterprise application, as well as encrypted chat functionality for device responses to the enterprise application.

Abstract: This invention is a system and method for verifying a sender of messages on a mobile network. Software on a cloud messaging service generates a public/private key pair. The private key is securely retained in a cloud wallet service and is accessible to a messaging cloud service (the trusted sender). The public key is shared with a subscriber device that receives messages from the messaging cloud service. The cloud messaging service receives an inbound message for the subscriber device from a trusted enterprise application via a secure connection. The cloud messaging service signs a special header to the message with its private key. When the message is received by the subscriber device, the public key resident on the device verifies the message header signed with the public key of the cloud messaging service thereby verifying the sender.

Abstract: A method of verifying telecommunications messaging traffic between two entities and monetizing the verified traffic. A receiving entity receives a message from a sending entity. The message includes a hash value computed by the sending entity based on the content of the message. The hash value is encrypted using a private key of the sending entity. The receiving entity identifies, within a blockchain, a Decentralized Identifier (DID) associated with the sending entity, resolves the DID into a DID document, and retrieves therefrom a public key associated with the sending entity. The receiving entity decrypts the hash value provided by the sending entity using the retrieved public key. The receiving entity independently computes a hash value based on the message content and compares the computed hash value against the decrypted hash value. If the hash values match, the message is verified and routed to its target recipient.

Abstract: This invention pertains to a method for provisioning and implementing two-factor authentication (2FA) for enterprise services. The system securely establishes a trusted identity for a subscriber device using an immutable hardware key and public/private key sets. The device's identity is verified by an Original Equipment Manufacturer (OEM) cloud service. The method includes generating unique transaction nonces for each 2FA request, securing private keys within a Trusted Execution Environment (TEE), and employing a cloud wallet service to store keys. The subscriber device interacts with the system, decrypting and re-encrypting transaction nonces using corresponding keys. This process enables secure transaction from enterprise applications. The system also integrates user consent into the 2FA process, displaying a prompt to approve or deny authentication. This technology enhances security in enterprise services, prioritizing user consent and secure data transfer.

Abstract: A system and method for delivering and receiving Short Message Service (SMS) messages between users connected to satellite and cellular networks. The system includes a communication device capable of operating in both satellite and cellular modes, a satellite service provider, a satellite proxy network, and a cellular operator. The method involves monitoring the network mode of the user device, relaying information about the user device's connection to the satellite network via a specially formatted SMS payload and registering the user device with a cellular operator when in satellite mode. The satellite proxy network serves as an anchoring point for sending and receiving SMS messages, ensuring seamless message exchange between satellite network users and cellular network users. The user device is designed to automatically switch between satellite and cellular modes based on network availability, ensuring continuous communication.

Abstract: Detecting and restricting floods of unwanted messages is implemented by cluster analysis over time intervals. Application of streaming machine learning clustering algorithms enables finding clusters of messages (P2P text messages, WHATSAPP, tweets) sharing the same content. Such clusters may be analyzed for finding out offensive messages, unwanted or spam messages, and rumors and take corrective actions as needed. The solution enables visualization of data and/or messages and identification of clusters as the solution works on the data and aggregates data into clusters over time intervals. Corrective actions may be applied on selected clusters based on visualized data clusters or by automated application of defined rules.

Abstract: This invention is a system and method for implementing a VoLTE and circuit switched voice and SMS interworking function to provide voice and SMS service to roaming mobile devices at visiting network based on Circuit-switched (CS) roaming towards VPLMN, and VoLTE voice and SMS roaming towards HPLMN. The interworking function translates CS signaling with VPLMN into IMS signaling towards IMS core at HPLMN. The interworking function also performs location-update registration at HSS at HPLMN for receiving mobile-terminated voice calls and SMS.

Abstract: A computer implemented system and method for providing general data protection regulation (GDPR) compliant hashing in blockchain ledgers. The invention guarantees a user's right to be forgotten, in compliance with the GDPR regulations, utilizing blockchain technologies.

Abstract: A method of securely transmitting a message from a sending entity to a receiving entity via a network. A Processing String Engine is communicatively coupled to the sending and receiving entities. The sending entity requests the Processing String Engine to provide a network routing path for message transmission from the sending entity to the receiving entity and to provide a processing string for the message transmission. The Processing String Engine identifies a network path and generates a processing string. The sending entity appends the processing string to the message and sends the message to the receiving entity. The message is unreadable while the processing string is appended thereto. Upon receipt of the message with the appended processing string, the receiving entity requests removal the processing string. Upon successful verification of the receiving entity, the processing string is removed, and the message is returned to the receiving entity.

Abstract: A method and system for steering a mobile device to a preferred network, such as a Private LTE network or a 5G network, in a scenario in which the coverage area of the preferred network overlaps the coverage area of a non-preferred network. If a network function detects that the mobile device is located within the coverage area of the preferred network, the network steering procedure will be triggered. The mobile device will detach from its current network, place that network on a temporary forbidden list, and perform an automatic network selection. If mobile device selects another non-preferred network, the attachment request will be denied, and the mobile device will add that non-preferred network to the temporary forbidden list. This procedure is repeated until the mobile device attaches to the preferred network or a predefined duration expires.

Abstract: A system and method for implementing Transport Layer Security (TLS) Routing Agent in an Internet Protocol Exchange (IPX) network for 5G core roaming. Transmission Control Protocol (TCP) connections are established between the TLS Routing Agent and consumer Security Edge Protection Proxy (cSEPP) and producer Security Edge Protection Proxy (pSEPP). TLS Routing Agent receives HTTP/2 CONNECT request from cSEPP. The TLS Routing Agent routes subsequent TLS handshake and HTTP/2 application messages to producer-SEPP transparently, so that the end-to-end TLS security is maintained. The TLS Routing Agent enables message firewall to protect mobile operator's SEPP. The TLS Routing Agent applies policy routing to route HTTP/2 message intelligently across the IPX network and improves TCP performance by dividing the long Round-Trip-Time between TCP end points into shorter segments.

Abstract: A method of delivering an orphan delivery receipt for a mobile-terminated message to a messaging platform from which the mobile-terminated message originated. A network of data exchange connectors is deployed, wherein each data exchange connector is associated with a messaging platform. When one of the messaging platforms receives a delivery receipt it cannot reconcile, the delivery receipt is replicated to all data exchange connectors. The data exchange connector associated with the messaging platform from which the mobile-terminated message originated identifies and consumes the delivery receipt based on predefined filtering criteria. The data exchange connector publishes the delivery receipt to the originator messaging platform. The originator messaging platform correlates the delivery receipt with the mobile-terminated message and posts the delivery receipt to a corresponding enterprise customer.

Abstract: A method for steering a mobile device to a preferred network, such as a Private LTE network or a 5G network, in a scenario in which the coverage area of the preferred network overlaps the coverage area of a non-preferred network. A preferred network list is provisioned into a SIM/eSIM module at the mobile device side. The steering application is hosted at the home network and periodically triggers the home network to request from the visited network a set of values for attributes associated with a current location of the mobile device. Based on these values, the steering application determines whether the mobile device is within the coverage area of the preferred network and, if so, directs the home network to send a cancel location request to the non-preferred visited network, thereby triggering the mobile device to attach to the preferred network.

Abstract: This invention is a system and method for implementing a VoLTE and circuit switched voice and SMS interworking function to provide voice and SMS service to roaming mobile devices at visiting network based on VoLTE roaming and ‘SMS over SGs’ towards VPLMN, and circuit-switched voice and SMS towards HPLMN. The interworking function enables and redirects IMS traffic at VPLMN towards a hosted IMS core with voice connectivity to PSTN via MGCF and MGW. The interworking function also performs circuit-switched location-update registration at HLR at HPLMN for receiving mobile-terminated voice calls and SMS.

Abstract: An enforcer application is configured to intercept signaling messages in a telecommunications network and select an optimal SGW, PGW, SMF/UPF and application servers in real time. More specifically, the enforcer intercepts and generates GSM MAP, Diameter, GTP-C and HTTP2/JSON signaling messages. The enforcer executes a policy to force the user devices to re-establish the data connection, thus anchoring at different SGW, PGW, SMF/UPF and application server to keep end-to-end routing path optimal, when the impacting factor changes. The enforcer can further feed its performance data and decision matrix into the analyzer and database to further optimize the decision process. Analyzer and KPI metrics databases are installed at central data centers to collect the KPI data from different probes and enforcer, calculate in real-time the optimal routing path with different decision factors considered, and interact with enforcer to update the latest optimal path status based on the data collected.

Abstract: A method of privatizing mobile communications using a dynamic International Mobile Subscriber Identity (IMSI) and Mobile Station International Subscriber Director Number (MSISDN). A first privacy token having an associated IMSI and MSISDN is provided to a User Equipment (UE). The first privacy token has a predefined validity period. The IMSI and MSISDN assigned to the privacy token are shared with a plurality of Mobile Network Operators (MNOs), while the International Mobile Equipment Identity (IMEI) of the UE remains concealed. A communications session for the UE can be established based on the first privacy token during the validity period thereof. Upon expiration of the validity period, the first privacy token and the associated IMSI and MSISDN are released to the token database, and their association with one another is deleted. The UE is then provided with a second privacy token having a different associated IMSI and MSISDN.

Abstract: This invention relates to a method and a system for performing seamless authentication and identification of a mobile subscriber requesting to access a 3rd Party Merchant's online platform. The subscriber verification system intercepts a message sent from a first network node to a second network node during a data session establishment procedure. The subscriber verification system extracts a first set of identification values associated with a user equipment (UE) from the intercepted message. After the data session is established, the UE sends an encrypted request to access the Merchant server. The Merchant server identifies a second set of identification values associated with the encrypted request and sends them for validation to the subscriber verification system. The second set of identification values is compared against the first set of identification values. If the two set of identification values match, the UE is authenticated.

Abstract: A system and method for routing of 5G mobile data traffic along a routing path in an Internetwork Packet Exchange (IPX) network having requisite Quality of Service (QoS). A proxy is deployed in the IPX network to intercept Session Create request and response messages exchanges between the home network and the visited network. The routing platform extracts Single-Network Slice Selection Assistance Information (S-NSSAI) attribute and uses this attribute and the geographic locations of the visited network and the home network to select a routing path in the IPX network having requisite QoS for the network slice use case. The routing platform uses layer-3 routing technique to anchor User Plane Function (UPF) Proxies deployed at different routing paths in the IPX network. Alternately, the routing platform uses layer-2 routing technique, with Software-Defined Networking (SDN) controller and SDN-switches to route traffic via the selected routing path in the IPX network.