Abstract: Systems, methods, and computer-readable media are provided for an efficient roaming management method using a single association identifier token for associating with different access points. In one aspect of the present disclosure, a network controller includes memory having computer-readable instructions stored therein and one or more processors. The one or more processors are configured to execute the computer-readable instructions to receive a request from an endpoint to connect to a first access point; generate association identification token (e.g., PMK and PMKID) for the endpoint to connect to the first access point; and distribute the association identification token to a second access point prior to the endpoint attempting to connect to the second access point, the association identification token being used by the second access point to validate a subsequent request by the endpoint to connect to the second access point.

Abstract: Techniques are presented herein for provisioning network devices based on device type. In one example, a packet core gateway of a cellular core network identifies a device type of a network device and obtains an indication to provision the network device. In response to obtaining the indication to provision the network device, the packet core gateway provisions the network device with one or more network resources based on the device type of the network device.

Abstract: A user plane function (UPF) node may receive a packet for traffic associated with a user equipment (UE). During packet classification, the UPF node may identify that a packet filter for the packet is not found in a packet filter set of an existing Quality of Service (QoS) Flow. In response, the UPF node may configure the packet filter in the packet filter set of the QoS Flow based on a flow tuple of the packet. The UPF node may send, to a control plane function node, a message which indicates a request for adding the flow tuple to the QoS Flow. The message may be for triggering communication of a message which indicates a session modification command for receipt by the UE, for adding an uplink packet filter that is based on the flow tuple for the QoS Flow.

Abstract: A system and method for dynamic enablement of a RLC mode of a Data Radio Bearer (DRB) based on UE radiofrequency (RF) conditions. A threshold value for a network characteristic is provided to a gNodeB. Changes in the network characteristic correlates to changes in RF channel conditions of the UE. The trigger configures the gNodeB to identify when the network characteristic meets the threshold value for selectively controlling operation of the gNodeB at one of a plurality of different operation modes including an initial radio link control (RLC) mode based on the network characteristic. A Protocol Data Unit (PDU) session is established with the gNodeB operating in an initial RLC mode with the possibility to dynamically switch to a different RLC mode based on RF channel conditions.

Abstract: A user plane function (UPF) node may receive a packet for traffic associated with a user equipment (UE). During packet classification, the UPF node may identify that a packet filter for the packet is not found in a packet filter set of an existing Quality of Service (QoS) Flow. In response, the UPF node may configure the packet filter in the packet filter set of the QoS Flow based on a flow tuple of the packet. The UPF node may send, to a control plane function node, a message which indicates a request for adding the flow tuple to the QoS Flow. The message may be for triggering communication of a message which indicates a session modification command for receipt by the UE, for adding an uplink packet filter that is based on the flow tuple for the QoS Flow.

Abstract: Techniques are presented herein for provisioning network devices based on device type. In one example, a packet core gateway of a cellular core network identifies a device type of a network device and obtains an indication to provision the network device. In response to obtaining the indication to provision the network device, the packet core gateway provisions the network device with one or more network resources based on the device type of the network device.

Abstract: The present technology discloses methods, systems, and non-transitory computer-readable storage media for identifying a data communication session within a 5G enterprise network and providing assurance based on the identified data communication session. The present technology provides for establishing a data communication session for user equipment on a 5G network, generating a protocol data unit (PDU) session identifier for the data communication session, and distributing the PDU session identifier to one or more packet core nodes in the 5G network. The PDU session identifier can then be used for collecting one or more key performance indicators in association with the data communication session.

Abstract: A network function is configured to initiate a bulk session cleanup with a single release request. The network function detects a configuration change to a wireless network system that affects multiple user sessions for multiple user devices. The network function generates a single bulk session release request identifying the affected user sessions and provides the single bulk session release request to at least one other network function responsible for the user sessions.

Abstract: A network function is configured to initiate a bulk session cleanup with a single release request. The network function detects a configuration change to a wireless network system that affects multiple user sessions for multiple user devices. The network function generates a single bulk session release request identifying the affected user sessions and provides the single bulk session release request to at least one other network function responsible for the user sessions.

Abstract: A system and method for dynamic enablement of a RLC mode of a Data Radio Bearer (DRB) based on UE radiofrequency (RF) conditions. A threshold value for a network characteristic is provided to a gNodeB. Changes in the network characteristic correlates to changes in RF channel conditions of the UE. The trigger configures the gNodeB to identify when the network characteristic meets the threshold value for selectively controlling operation of the gNodeB at one of a plurality of different operation modes including an initial radio link control (RLC) mode based on the network characteristic. A Protocol Data Unit (PDU) session is established with the gNodeB operating in an initial RLC mode with the possibility to dynamically switch to a different RLC mode based on RF channel conditions.

Abstract: Authentication with security in wireless networks may be provided. A first confirm message comprising a first send-confirm element and a first confirm element may be received. Next, an Authenticator Number Used Once (ANonce) may be generated and a second confirm message may be sent comprising the ANonce, a second send-confirm element, and a second confirm element. Then an association request may be received comprising a Supplicant Number Used Once (SNonce) and a Message Integrity Code (MIC). An association response may be sent comprising an encrypted Group Temporal Key (GTK), an encrypted Integrity Group Temporal Key (IGTK), the ANonce, and the MIC. An acknowledgment may be received comprising the MIC in an Extensible Authentication Protocol (EAP) over LAN (EAPoL) key frame and a controller port may be unblocked in response to receiving the acknowledgment.

Abstract: The present technology discloses methods, systems, and non-transitory computer-readable storage media for identifying a data communication session within a 5G enterprise network and providing assurance based on the identified data communication session. The present technology provides for establishing a data communication session for user equipment on a 5G network, generating a protocol data unit (PDU) session identifier for the data communication session, and distributing the PDU session identifier to one or more packet core nodes in the 5G network. The PDU session identifier can then be used for collecting one or more key performance indicators in association with the data communication session.

Abstract: Disclosed are embodiments that leverage a central control plane of a managed 5G network service architecture across multiple serviced tenants by deploying tenant specific user plane function (UPF) and gNB components within tenant managed compute infrastructure. To enable this architecture, the disclosed embodiments assign gNBs and UPF instances to specific tenants and communicate those assignments to core components. Policies can be defined and applied to specific tenants from the central control plane. Inbound data routing to a specific tenant is accomplished by referencing a data store in the control plane that identifies which gNBs are assigned to a tenant associated with the incoming data. Those gNBs are then paged to service the incoming data.

Abstract: In one illustrative example, a user plane function (UPF) may detect initial traffic for an application for a user equipment (UE) for which no current dedicated Quality of Service (QoS) flow is established. In response, the UPF may send, to a control plane function, a message which indicates a request for creating a dedicated QoS Flow for traffic for the application for the UE. The message may include flow metadata and an application identifier obtained in detecting the initial traffic. A QoS Flow may then be created for the traffic based on a selected QoS policy associated with the application identifier. Subsequently, the UPF may determine that a measured time period of traffic inactivity for the QoS Flow is outside a limit set by a threshold. Based on the determining, the UPF may send, to the control plane function, a message which indicates a request for deleting the QoS Flow.

Abstract: In one illustrative example, a user plane function (UPF) node may receive, from a controller node, a configuration of an allocated bandwidth for a predefined service classification associated with different predefined types of a communication resource at the UPF node, for each one of a plurality of different predefined service classifications associated with different predefined types of the communication resource. The UPF node may monitor a total bandwidth usage for each predefined service classification. Based on identifying that the total bandwidth usage exceeds a threshold limit, the UPF node may send, to the controller node, a message which indicates a request for readjusting the allocated bandwidth for the predefined service classification, and indicating the total bandwidth usage. The different predefined types of the communication resource may be different network slices at the UPF node, or different Quality of Service (QoS) Flow resource types at the UPF node, as examples.

Abstract: A user plane function (UPF) node may receive a packet for traffic associated with a user equipment (UE). During packet classification, the UPF node may identify that a packet filter for the packet is not found in a packet filter set of an existing Quality of Service (QoS) Flow. In response, the UPF node may configure the packet filter in the packet filter set of the QoS Flow based on a flow tuple of the packet. The UPF node may send, to a control plane function node, a message which indicates a request for adding the flow tuple to the QoS Flow. The message may be for triggering communication of a message which indicates a session modification command for receipt by the UE, for adding an uplink packet filter that is based on the flow tuple for the QoS Flow.

Abstract: Systems, methods, and computer-readable media are provided for an efficient roaming management method using a single association identifier token for associating with different access points. In one aspect of the present disclosure, a network controller includes memory having computer-readable instructions stored therein and one or more processors. The one or more processors are configured to execute the computer-readable instructions to receive a request from an endpoint to connect to a first access point; generate association identification token (e.g., PMK and PMKID) for the endpoint to connect to the first access point; and distribute the association identification token to a second access point prior to the endpoint attempting to connect to the second access point, the association identification token being used by the second access point to validate a subsequent request by the endpoint to connect to the second access point.

Abstract: Systems, methods, and computer-readable media are provided for an efficient roaming management method using a single association identifier token for associating with different access points. In one aspect of the present disclosure, a network controller includes memory having computer-readable instructions stored therein and one or more processors. The one or more processors are configured to execute the computer-readable instructions to receive a request from an endpoint to connect to a first access point; generate association identification token (e.g., PMK and PMKID) for the endpoint to connect to the first access point; and distribute the association identification token to a second access point prior to the endpoint attempting to connect to the second access point, the association identification token being used by the second access point to validate a subsequent request by the endpoint to connect to the second access point.

Abstract: A network function is configured to initiate a bulk session cleanup with a single release request. The network function detects a configuration change to a wireless network system that affects multiple user sessions for multiple user devices. The network function generates a single bulk session release request identifying the affected user sessions and provides the single bulk session release request to at least one other network function responsible for the user sessions.

Abstract: In one illustrative example, a user plane function (UPF) may detect initial traffic for an application for a user equipment (UE) for which no current dedicated Quality of Service (QoS) flow is established. In response, the UPF may send, to a control plane function, a message which indicates a request for creating a dedicated QoS Flow for traffic for the application for the UE. The message may include flow metadata and an application identifier obtained in detecting the initial traffic. A QoS Flow may then be created for the traffic based on a selected QoS policy associated with the application identifier. Subsequently, the UPF may determine that a measured time period of traffic inactivity for the QoS Flow is outside a limit set by a threshold. Based on the determining, the UPF may send, to the control plane function, a message which indicates a request for deleting the QoS Flow.