Abstract: An improved core network that includes a network resilience system that can detect network function virtualization (NFV)-implemented nodes that have been compromised and/or that are no longer operational, remove such nodes from the virtual network environment, and restart the removed nodes in a last-known good state is described herein. For example, the network resilience system can use health status messages provided by nodes, intrusion data provided by intrusion detection agents running on nodes, and/or operational data provided by the nodes as applied to machine learning models to identify nodes that may be compromised and/or non-operational. Once identified, the network resilience system can delete these nodes and restart or restore the nodes using the last-known good state.

Abstract: A system including: a transceiver; a boot processor configured to: capture an image of a container of the system, determine whether the system container image has been modified, and post, to a node of a distributed ledger network, a first attestation based on a determination of whether an anomaly exists in the system container image; a system processor; and a memory storing instructions that instruct the system processor to: receive a request to connect to an external device, request a second attestation from a node of the distributed ledger network as to whether an anomaly exists in the external device container image, determine whether an anomaly exists in the external device container image, and either: establish, in response to determining that an anomaly does not exist, a connection with the external device, or deny the request to connect to the external device in response to determining that an anomaly exists.

Abstract: A video stream from a user device that is destined for a recipient device is received at a core network of a wireless carrier network. The video stream has a video quality that at least meets a quality threshold for behavioral biometric analysis. A determination of whether a video privacy policy for the user device permits transmission of the video stream of the video quality to the recipient device is made. In response to the video privacy policy not permitting the transmission of the video stream of the video quality, the video quality of the video stream is downgraded to generate a downgraded video stream that prevents behavioral biometric analysis for transmission to the recipient device. However, in response to the video privacy policy permitting the transmission of the video stream of the video quality, the video stream of the video quality is transmitted to the recipient device.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for implementing a weapon manager are disclosed. In one aspect, a method includes the actions of determining, by the server, that the weapon is in a particular location. The actions further include determining, by the server, a projected travel path of the weapon. The actions further include, based on determining that the weapon is in a particular location and the projected travel path of the weapon, generating, by the server, an instruction to disable the weapon. The actions further include providing, for output to the weapon, the instruction to disable the weapon.

Abstract: A request from a user device to register as a secure endpoint device of a secure local area network (LAN) is received by a wireless carrier network. A device type of the user device is identified by the network based on device identification information provided by the user device. A data protection policy that corresponds to the device type of the user device is sent to a secure endpoint application on the user device following a registration of the user device as a secure endpoint device by the network, in which the data protection policy includes an Access Point Name (APN). The user device allocated a network slice of the wireless carrier network that corresponds to the APN to the user device. Subsequently, a data file is transported from the user device to an additional secure endpoint device via the network slice that is allocated to the user device.

Abstract: This disclosure describes techniques that enable a security monitoring application to detect the use of plaintext sensitive data by a user application on a user device. The security monitoring application may reside on a user device or may reside on a standalone device, such as a security monitoring controller, within an enterprise network. The security monitoring application may be configured to intercept a computing operation executed by a user application that includes user-plane data. In doing so, the security monitoring application may determine whether the user-plane data includes plaintext sensitive data and if so, quarantine the user-plane data.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for implementing a weapon manager are disclosed. In one aspect, a method includes the actions of determining, by the server, that the weapon is in a particular location. The actions further include determining, by the server, a projected travel path of the weapon. The actions further include, based on determining that the weapon is in a particular location and the projected travel path of the weapon, generating, by the server, an instruction to disable the weapon. The actions further include providing, for output to the weapon, the instruction to disable the weapon.

Abstract: Described herein are techniques for preventing software applications from gaining access to unauthorized biometric data in accordance with user preferences. In some embodiments, a software application requests access to sensor data collected by a sensor installed on a user device via a gateway application installed on the user device. Upon receipt of the request, the gateway application determines what types of biometric data the software application is authorized to obtain within the sensor data. The gateway application then identifies biometric data that is present within the sensor data. The sensor data is then altered such that biometric data that the software application is not authorized to obtain is obfuscated.

Abstract: Systems and methods are described herein for provisioning a home automation hub, or one or more of IoT devices, with blockchain nodes (or sub-nodes). The hub, an IoT device, and/or a group of IoT devices can perform operations similar to a node on a blockchain network. The operations can include blockchain transactions and other operations, such as transactions performed to verify or confirm an IoT device is authorized to be part of the shared network and thus is authorized to connect to the hub.

Abstract: A system including: a transceiver; a boot processor configured to: capture an image of a container of the system, determine whether the system container image has been modified, and post, to a node of a distributed ledger network, a first attestation based on a determination of whether an anomaly exists in the system container image; a system processor; and a memory storing instructions that instruct the system processor to: receive a request to connect to an external device, request a second attestation from a node of the distributed ledger network as to whether an anomaly exists in the external device container image, determine whether an anomaly exists in the external device container image, and either: establish, in response to determining that an anomaly does not exist, a connection with the external device, or deny the request to connect to the external device in response to determining that an anomaly exists.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for implementing a recording manager are disclosed. In one aspect, a method includes the actions of receiving, from a first computing device, a request to disable an audio, video, or image capture feature of one or more other computing devices in a particular location. The actions further include, based on receiving the request to disable the recording feature of the one or more other computing devices, identifying a second computing device in the particular location. The actions further include providing, for output to the second computing device in the particular location, an instruction to disable the audio, video, or image capture feature.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for identity management are disclosed. In one aspect, a method includes the actions of receiving, from a first computing device, first audio data that includes representations of one or more words in a first voice. The actions further include generating second audio data that includes representations of the one or more words in a second voice. The actions further include providing, for output to a second computing device, the second audio data.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for implementing a recording manager are disclosed. In one aspect, a method includes the actions of receiving, from a first computing device, a request to disable an audio, video, or image capture feature of one or more other computing devices in a particular location. The actions further include, based on receiving the request to disable the recording feature of the one or more other computing devices, identifying a second computing device in the particular location. The actions further include providing, for output to the second computing device in the particular location, an instruction to disable the audio, video, or image capture feature.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for implementing a privacy manager are disclosed. In one aspect, a method includes the actions of receiving, from a client device, an indication of a first setting of the client device. The actions further include receiving, from the client device, an indication of a type of data that the client device is prepared to transmit. The actions further include, based on the first setting and the type of data, generating an instruction to adjust the first setting or a second setting of the client device. The actions further include, before the client device transmits the data, providing, for output to the client device, the instruction to adjust the first setting or the second setting of the client device.

Abstract: Biological organs and tissues can be identified using imaging or other data representing the organs and tissues. Example imaging modalities include 3D x-rays (including CT scans), MRI imaging, and millimeter wavelength scanning commonly used for airport security. Biomarkers may be identified as part of daily activities, such as airport travel, applying for government identifications (licenses and passports), medical appointments, and fitness monitoring. These imaging approaches may create static and dynamic data sets for comparison against existing data sets in a database. Biomarkers may identify (and predict) normal, morphological or morbidity changes over time. Such imaging biomarkers may securely identify individuals at critical checkpoints such as airports and border crossings. This approach is also applicable to plant identification and can provide a secure chain of custody for virtually any object.

Abstract: Systems and methods are described herein for managing communications for a connected vehicle, such as between the connected vehicle and other connected vehicle and/or between the connected vehicle and infrastructure entities, such as providers of services to the connected vehicle. For example, a communication network, such as a network provided by a network carrier, may include various cloud engines or other network-based servers that manage, coordinate, and/or provision communications between the connected vehicle and other parties, such as vehicles, road devices, buildings, and other infrastructure entities.

Abstract: An improved core network that includes a network resilience system that can detect network function virtualization (NFV)-implemented nodes that have been compromised and/or that are no longer operational, remove such nodes from the virtual network environment, and restart the removed nodes in a last-known good state is described herein. For example, the network resilience system can use health status messages provided by nodes, intrusion data provided by intrusion detection agents running on nodes, and/or operational data provided by the nodes as applied to machine learning models to identify nodes that may be compromised and/or non-operational. Once identified, the network resilience system can delete these nodes and restart or restore the nodes using the last-known good state.

Abstract: Updated radio protocol data may be propagated in a peer-to-peer (P2P) distribution scheme so that peer devices that are incompatible with a particular radio protocol may be dynamically re-configured to communicate with other devices using the particular radio protocol. A remote server(s) may push updated radio protocol data to a hub device, which thereafter disseminates the radio protocol data to other peer devices. These peer devices can forward the data to downstream peer devices, and so on, without further intervention by the remote server(s) that initiated the distribution. The transfer of radio protocol data over P2P connections may occur using a broadcasting technique where, prior to the transfer, a device in possession of the radio protocol data broadcasts an indication to nearby peer devices, which can receive the broadcast and indicate to the broadcaster whether they are ready to receive the radio protocol data.

Abstract: Systems and methods discussed herein are directed to monitoring and/or adjusting levels of ambient radio frequency (RF) signals within a wireless communication network. A geographic region is monitored for ambient radio frequency signal levels. The monitoring may be performed by a device configured for operation in the wireless communication network. For example, one or more of a UE, a base station, an IoT device, etc., may be configured with a sensor for sensing ambient RF signal levels. When it is determined that a measured amount of ambient radio frequency signal level exceeds a predetermined threshold, an operator of the wireless communication network may then provide an alert to at least one user of the wireless communication network.

Abstract: Systems and methods are described herein for managing communications for a connected vehicle, such as between the connected vehicle and other connected vehicle and/or between the connected vehicle and infrastructure entities, such as providers of services to the connected vehicle. For example, a communication network, such as a network provided by a network carrier, may include various cloud engines or other network-based servers that manage, coordinate, and/or provision communications between the connected vehicle and other parties, such as vehicles, road devices, buildings, and other infrastructure entities.