Abstract: Embodiments of the present invention provide systems, methods, and computer storage media directed to propagating and authenticating border gateway protocol route advertisements. A trusted authority device stores and distributes routing information for various autonomous systems. The trusted authority device also issues and maintains digital certificates that are each assigned to one of the autonomous systems. The digital certificate can be utilized by autonomous systems to verify the authenticity of routing information advertised by another autonomous system. Each autonomous system can employ a routing device that can generate a route advertisement based on routing information received from the trusted authority device. The route advertisement can include a digital signature, a digital certificate, and a time-to-live value, among other things, each of which can be utilized by routing devices of other autonomous systems to determine the authenticity and validity of received routing information.

Abstract: A method and system to facilitate session continuity where a user-plane function (UPF) serves user-equipment devices (UEs) and communicates with a transport network by default through a first firewall. As each of various ones of the UEs establishes a respective TCP session via the first firewall, the UPF determines if the UE is likely to engage in latency-sensitive communication, such as if the UE is a Ultra-Reliable Low-Latency Communication (URLLC) device and if so causes the first firewall to record the UE's TCP session 5-tuple to a centralized data storage. Thereafter when the UPF switches to use a second firewall instead of the first firewall (e.g., because the first firewall goes out of service), the UPF causes the second firewall to get from the centralized data store the TCP session 5-tuple of each such UE, for access-control use by the second firewall, to help provide session continuity.

Abstract: In a wireless access node, a Protocol Data Convergence Protocol (PDCP) separates data into direct data and indirect data. The wireless access node wirelessly transfers the direct data to User Equipment (UE) and transfers the indirect data to a wireless support node. The wireless support node wirelessly transfers the indirect data to the UE. The PDCP estimates a transmission time difference between the direct data and the indirect data. The PDCP separates additional data into direct data and indirect data. The PDCP delays the additional direct and/or indirect data based on the time difference to synchronize delivery. The wireless access node wirelessly transfers the direct data to the UE and transfers the indirect data to the wireless support node. The wireless support node wirelessly transfers the indirect data to the UE.

Abstract: Methods and systems are provided for identifying, to an external device, a client device having an external IP address assigned by a Network Address Translation (NAT) device. Initially, the NAT device provides an external IP address assigned to a client device to access an external device. Upon the client device communicating with the external device, the NAT device also provides an internal IP address assigned to the client device in an option field of the external IP address. If the external device later requests to communicate with the client device, and includes in the request the internal IP address in the option field of the external IP address assigned to the client device, the NAT device checks for sessions mapping to the client device. Upon determining there are no sessions mapped to the client device, a new connection is opened to the client device utilizing the internal IP address.