Abstract: This invention relates generally to the field of security and remote data communications, specifically to data communications between applications running on different devices residing in different service provider networks. The invention includes methods and systems to resolve the application host based on user defined naming schema, automate the secure tunnel creation among the communication entities via Security Enforcement Servers, start up the applications via secure out of band control channel, perform packet inspection and anomaly detection based on injected user rules and historical traffic pattern, generate alert or notifications via email, text, etc. to specific users. The invention further tears down the secure connection based on application demand or inactivity timeout, generates event and statistic data records for troubleshooting and future auditing.

Abstract: A system and method for routing of 5G mobile data traffic along a routing path in an Internetwork Packet Exchange (IPX) network having requisite Quality of Service (QoS). A proxy is deployed in the IPX network to intercept Session Create request and response messages exchanges between the home network and the visited network. The routing platform extracts Single-Network Slice Selection Assistance Information (S-NSSAI) attribute and uses this attribute and the geographic locations of the visited network and the home network to select a routing path in the IPX network having requisite QoS for the network slice use case. The routing platform uses layer-3 routing technique to anchor User Plane Function (UPF) Proxies deployed at different routing paths in the IPX network. Alternately, the routing platform uses layer-2 routing technique, with Software-Defined Networking (SDN) controller and SDN-switches to route traffic via the selected routing path in the IPX network.

Abstract: This invention is a system and method for implementing Network Function (NF) Proxy in an IPX network for 5G core roaming. NF Discover queries from Visited Public Land Mobile Network (VPLMN) are manipulated such that the IPX NF Proxy's fully qualified domain name (FQDN) is returned as the FQDN of the Home Public Land Mobile Network (HPLMN) NF. NF Proxy queries the FQDN of a true HPLMN NF through a HPLMN Network Repository Function (NRF) Proxy. Application messages are routed to NF Proxy hosted in the IPX network. NF Proxy performs its proxy function and routes egress messages to the target NF in HPLMN or another location.

Abstract: This invention is a system and method for implementing a VoLTE and circuit switched voice and SMS interworking function to provide voice and SMS service to roaming mobile devices at visiting network based on VoLTE roaming and ‘SMS over SGs’ towards VPLMN, and circuit-switched voice and SMS towards HPLMN. The interworking function enables and redirects IMS traffic at VPLMN towards a hosted IMS core with voice connectivity to PSTN via MGCF and MGW. The interworking function also performs circuit-switched location-update registration at HLR at HPLMN for receiving mobile-terminated voice calls and SMS.

Abstract: A contextual SS7 firewall filter is inserted between a network operator and its roaming partners intra network and inter network SS7 traffic. SS7 firewall filter validates GSM MAP and GSM CAP messages based on specific criteria as provisioned for those message types and either allows them or blocks them from reaching their intended destination based on the validation results. The validation step involves verification of MSU correctness, verification of correctness of SS7 MTP fields for each MSU, and verification of correctness of SS7 SCCP fields for each MSU. SS7 firewall filter blocks GSM messages that fail at least one of the verification steps.

Abstract: GTP firewall service to block or allow GTP-C v1 messages from specific SGSN/GGSN and GTP-C v2 messages from specific SGW/PGW to prevent fraudulent activity occurring from any specific serving node or home node. GTP Traffic from specific SGSN (3G) or SGW (4G) can be blocked going to specific home operator, including 3G GSM to 4G LTE and 4G LTE to 3G GSM protocol interoperability provided by GTP Firewall. Individual Information Elements within GTP-C v1 and GTP-C v2 messages will be monitored based on home and serve operator configuration as well as GTP messages and Information Elements mapped from GTP-C v1 to GTP-C v2 for 3G GSM to 4G LTE interoperability and GTP-C v2 to GTP-C v1 for 4G LTE to 3G GSM interoperability.

Abstract: A Virtual Global Title Translation (V-GTT) Service implemented in a Signaling Connection Control Part (SCCP) Gateway using a single American National Standards Institute (ANSI) SS7 Point Code and a single International Telecommunications Union (ITU) SS7 Point Code for access to destination hubs on ITU and ANSI SS7 side of the SS7 network. The V-GTT enables ANSI SS7 and ITU SS7 operators to send their destination SS7 hub-specific traffic to a single hub-specific protocol for either the ANSI or ITU SS7 Point Code of V-GTT. The V-GTT Service application manages the traffic between ANSI/ITU SS7 operator and destination SS7 hub operators and performs ANSI SS7 to ITU SS7 (or ITU SS7 to ANSI SS7) protocol conversion if the destination hub is on a different SS7 protocol, thereby enabling an originating operator to send traffic to a single V-GTT Service hub-specific point code using the protocol that the originating operator currently employs.

Abstract: A method of enabling a home network to identify a location of its subscriber roaming within a visited network. An Intelligent Data Routing (IDR) application functions as a proxy between a Serving GPRS Support Node (SGSN) of the visited network and a Gateway GPRS Support Node (GGSN) of the home network. The IDR receives a Create PDP Context Request message or an Update PDP Context Request message that is sent from the SGSN to GGSN. The IDR determines whether the Routing Area Identity (RAI) and User Location Information (ULI) Information Elements (IEs) of the Request message have been populated by the SGSN. If the IDR application determines that at least one of these IEs is absent, the IDR application populates them with appropriate values obtained from the SGSN. The routing application sends the modified Request message having the populated RAI and ULI IEs to the GGSN.

Abstract: A method of verifying telecommunications messaging traffic between two entities and monetizing the verified traffic. A receiving entity receives a message from a sending entity. The message includes a hash value computed by the sending entity based on the content of the message. The hash value is encrypted using a private key of the sending entity. The receiving entity identifies, within a blockchain, a Decentralized Identifier (DID) associated with the sending entity, resolves the DID into a DID document, and retrieves therefrom a public key associated with the sending entity. The receiving entity decrypts the hash value provided by the sending entity using the retrieved public key. The receiving entity independently computes a hash value based on the message content and compares the computed hash value against the decrypted hash value. If the hash values match, the message is verified and routed to its target recipient.

Abstract: A method of providing voice call, data, and SMS services to a user equipment roaming in a 2G/3G visited network and subscribed to an LTE home network. An Interworking Function communicates with both the visited network and the home network. The Interworking Function translates between Mobile Application Part (MAP) protocol used by the 2G/3G visited network and Session Initiation Protocol (SIP) used by the LTE home network. The Interworking Function establishes both a MAP Registration with the 2G/3G visited network and also a SIP Registration with the LTE home network, thereby enabling provision of voice call, data, and SMS services to the roaming UE.

Abstract: A blockchain gateway device and associated method of use for reconciling and insuring the consistency of integrated blockchain networks and legacy database-based systems. The blockchain gateway device and associated blockchain scheme harmonizes and reconciles the data elements from multiple independent blockchain databases.

Abstract: A system and method for implementing Steering of Roaming for 5G core roaming in an Internet Packet Exchange (IPX) network. A Hypertext Transfer Protocol (HTTP)/2 Proxy is deployed in an IPX network. The HTTP/2 Proxy receives N32-f request message from a Visited Public Land Mobile Network (VPLMN). The N32-f request has an embedded N12 authorization request message or an embedded N8 registration request message. If VPLMN is a non-preferred roaming partner, the HTTP/2 Proxy appends a patch-request to N32-f request message and routes it to the Home Public Land Mobile Network (HPLMN). The patch-request causes the home Security Edge Protection Proxy (hSEPP) to replace Mobile Country Code (MCC) or Mobile Network Code (MNC) value with a predefined value that will trigger a rejection from HPLMN. The mobile device will select another VPLMN. If the VPLMN is a preferred roaming partner, the HTTP/2 Proxy routes the request without appending a patch-request.

Abstract: A system and method for routing LoRaWAN backend traffic between peer visited and home Network Server nodes to achieve global roaming in a scalable manner. A LoRaWAN Routing and Control System (LRCS) node is deployed between a visited Network Server and a home Network Server and is configured to proxy signaling and payload data messages therebetween. LRCS node can provide policy control, billing and rating based on roaming agreements between peer LoRaWAN roaming networks. LRCS node protects the overall network by discarding blacklisted and malicious traffic. LRCS node can enhance the message flow logic by adding routing information in the messages such that destination networks can identify that message is routed through a trustable source.

Abstract: A roaming method that enables the home network (HPMN) to use S8 Home Routed (S8HR) model for out-bound roaming while the visited network (VPMN) uses Local Breakout (LBO) model for in-bound roaming. An IMS Roaming Gateway (IR-GW) establishes an IMS bearer between the IR-GW and the home network's Packet Data Network Gateway (P-GW). The IR-GW replaces the source IP address on the SIP-Register message with the client IP address assigned to the UE by the HPMN P-GW. Upon receiving a SIP-Response message responsive to successful authentication of the UE with the HPMN, the IR-GW inserts its own IP address into the SIP-Response message and forwards it to the UE. IR-GW performs network address translation (NAT) between the source IP assigned to the UE by the VPMN and the client IP assigned to the UE by the HPMN.

Abstract: A system and method for routing of 5G mobile data traffic along a routing path in an Internetwork Packet Exchange (IPX) network having requisite Quality of Service (QoS). A proxy is deployed in the IPX network to intercept Session Create request and response messages exchanges between the home network and the visited network. The routing platform extracts Single-Network Slice Selection Assistance Information (S-NSSAI) attribute and uses this attribute and the geographic locations of the visited network and the home network to select a routing path in the IPX network having requisite QoS for the network slice use case. The routing platform uses layer-3 routing technique to anchor User Plane Function (UPF) Proxies deployed at different routing paths in the IPX network. Alternately, the routing platform uses layer-2 routing technique, with Software-Defined Networking (SDN) controller and SDN-switches to route traffic via the selected routing path in the IPX network.

Abstract: A method and system for steering a mobile device to a preferred network, such as a Private LTE network or a 5G network, in a scenario in which the coverage area of the preferred network overlaps the coverage area of a non-preferred network, such as a 3G or a 4G Public Land Mobile Network (PLMN). A preferred network list is provisioned into a SIM/eSIM module at the mobile device side. The mobile device periodically collects a set of values for attributes associated with a current location of the mobile device and reports the collected values to the Steering application, hosted at the network side. The Steering application detects whether the mobile device is within the coverage area of the preferred network and, if so, triggers the mobile device to perform network steering.

Abstract: A system and method for validating an Internet of Thing (IoT) device on an IoT network. The IoT device captures and stores the historical sensor values, along with corresponding timestamps in a local memory. A controller receives the historical sensor values and also receives a heartbeat token over a network that is different than the IoT network. The controller calculates a historical hash value using the historical sensor value and the heartbeat token as inputs and stores the historical hash values and the corresponding timestamp in a blockchain ledger of an IoT management platform. At a later time, in response to a validation request from the IoT management platform, the controller polls the IoT device for the historical sensor value associated with a particular timestamp. The IoT device responds with the stored historical sensor value and the controller calculates a reconstructed hash value using the historical stored sensor value and a stored heartbeat token as inputs.

Abstract: The invention relates generally to the field of network connectivity management, specifically to provisioning and controlling the data access of multiple client devices to application servers via a connectivity management device. The invention includes apparatuses, methods, and systems for automating the management of such apparatus and its associating client devices. The management includes initializing and storing device data, ownership proof, connectivity credentials, and security policies into a management system, such as blockchain digital ledger or device management application server. The stored information is used for auto pairing and authenticating the devices via a second wireless technology and triggering secure connection setup over the first wireless technology.

Abstract: A traffic hub used in mobile communications for data offloading, diversion and security. The traffic hub includes an Evolved Packet Data Gateway (ePDG) module configured to transmit and receive data packets for a mobile device in Roaming Untrusted Wi-Fi network for secured access to an Evolved Packet Core (EPC) network, a Trusted WLAN Access Gateway (TWAG) module configured to transmit and receive the data packets for a mobile device in Roaming Trusted Wi-Fi network for secured access to the EPC network and a General Packet Radio Service (GPRS) Tunneling Protocol (GTP) Proxy (GProxy) module, the GProxy module being the core module of the traffic hub configured to enforce policy rules on the data packets prior to exchanging the data packets with logically selected Peer Gateway General Packet Radio Service (GPRS) Serving Node (GGSN)/Packet Data Network (PDN) Gateway (PGW) and ePDG/TWAG nodes. The GProxy also operates as a GTP-aware firewall to protect Home GGSN/PGW nodes from malicious traffic.

Abstract: A computer implemented system and method for providing general data protection regulation (GDPR) compliant hashing in blockchain ledgers. The invention guarantees a user's right to be forgotten, in compliance with the GDPR regulations, utilizing blockchain technologies.