Abstract: In a Software Defined Network (SDN), a source SDN switch in a source geographic area generates switch performance data. The source SDN switch detects when its switch performance reaches a switch performance threshold based on its switch performance data, and in response, the source SDN switch transfers source switch information. An SDN controller receives the source switch information and selects a target SDN switch in a target geographic area based on the switch performance threshold and the source geographic area. The SDN controller transfers the source switch information to the target SDN switch in the target geographic area. The target SDN switch generates switch performance data and detects when SDN performance reaches a network performance threshold based on its switch performance data and the source switch information. The target SDN transfers SDN performance information to the SDN controller.

Abstract: A Software-Defined Network (SDN) distributes Proxy Correlation Index (PCI) control in an SDN data-plane. An SDN controller transfers SDN signaling that indicates a data-plane PCI configuration. An SDN data machine processes the SDN signaling and configures a PCI generator and a flow controller to implement the data-plane PCI configuration. The SDN data-plane machine processes user data flows per a Flow Description Table (FDT) and generates Key Performance Indicators (KPIs) for the user data flows. The PCI generator generates PCIs based on the KPIs and the data-plane PCI configuration. The flow controller updates the FDT based on the PCIs and the data-plane PCI configuration. The SDN data-plane machine processes the user data flows per the updated FDT.

Abstract: A data communication system exchanges user data between a first System-On-Chip (SOC) and a second SOC. The SOCs hash and transfer their read-only hardware-trust keys and receive hardware-trust digital certificates. The SOCs exchange and validate the hardware-trust digital certificates. The first SOC encrypts user data and transfers the encrypted user data responsive to the hardware-trust validations. The second SOC receives the encrypted user data, decrypts the encrypted user data, and processes the decrypted user data responsive to the hardware-trust validations. In some examples, the second SOC encrypts and transfers other user data responsive to the hardware-trust validations, and the first SOC receives, decrypts, and processes the other user data responsive to the hardware-trust validations. The first and/or the second SOC could be wireless communication devices.

Abstract: A data communication system controls Software Defined Network (SDN) Virtual Network Functions (VNFs). A Network Function Virtualization Infrastructure (NFVI) executes the SDN VNFs and responsively transfers SDN Key Performance Indicators (KPIs) to a Management and Orchestration (MANO) computer. The MANO computer processes the SDN KPIs from the NFVI to determine an NFVI task to perform for the SDN VNFs. The NFVI task comprises at least one of: SDN VNF relocation, SDN VNF off-boarding, SDN VNF darkening, SDN VNF lightening, and SDN VNF on-boarding. The MANO computer transfers NFVI control data indicating the NFVI task to the NFVI. The NFVI performs the NFVI task for the SDN VNFs responsive to the NFV control data.

Abstract: A Network Function Virtualization (NFV) Software Defined Network (SDN) controls NFV resources consumed by Virtual Network Functions (VNFs) that support a data service. An NFV Infrastructure (NFVI) executes SDN application VNFs, SDN controller VNFs, and SDN virtual Switches (vSWs) to support the data service. The NFVI responsively transfers SDN Key Performance Indicators (KPIs). An NFV Management and Orchestration (MANO) system processes the SDN KPIs to generate VNF control data to darken one of the SDN VNFs. The NFV MANO system processes the VNF control data to generate and transfer NFV control data to darken the SDN VNF. The NFVI darkens the SDN VNF responsive to the NFV control data by restricting access to NFVI hardware for the SDN VNF.

Abstract: A wireless communication network delivers a wireless communication service. The wireless communication network comprises a base station computer system and a network server. The base station computer system executes a Network Function Virtualization Infrastructure (NFVI) virtual layer and responsively supports base station Virtual Network Functions (VNFs). The base station computer system executes base station VNFs and responsively delivers wireless communication services and generates base station Key Performance Indicators (KPIs). The network server processes the base station KPIs and responsively directs the base station computer system to modify its support of a base station VNF. The base station computer system modifies its support of the base station VNF responsive to the network server.

Abstract: A Software-Defined Network (SDN) distributes Proxy Correlation Index (PCI) information across an SDN data-plane. A central SDN controller receives inbound SDN signaling from a source SDN controller serving a source geographic area indicating a PCI threshold breach in the SDN data-plane in the source geographic area. The central SDN controller generates PCI information that characterizes the PCI threshold breach. The central SDN controller selects a target SDN controller in a target geographic area responsive to the PCI threshold breach. The central SDN controller transfers outbound SDN signaling having the PCI information for delivery to the target SDN controller in the target geographic area.

Abstract: A System-On-Chip (SOC) exchanges hardware trusted data communications. A Central Processing Unit (CPU) executes an internal application. A transceiver receives a data message from an external data application for the internal data application. The message has encrypted user data and an encrypted hardware trust certificate for the external data application. The transceiver decrypts the hardware trust certificate for the external data application and transfers the decrypted hardware trust certificate to a SOC kernel. The transceiver decrypts the user data. The SOC kernel validates the decrypted hardware trust certificate for the external data application and notifies the transceiver. The transceiver transfers the decrypted user data to the CPU for delivery to the internal data application responsive to the notification from the SOC kernel.

Abstract: A Network Function Virtualization (NFV) Software Defined Network (SDN) controls NFV resources consumed by Virtual Network Functions (VNFs) that support a data service. Multiple NFV Infrastructures (NFVIs) execute SDN application VNFs and SDN controller VNFs, and SDN virtual Switches (vSWs) to support the data service. The NFVIs responsively transfer SDN Key Performance Indicators (KPIs). An NFV Management and Orchestration (MANO) system processes the SDN KPIs to generate VNF control data to relocate one of the SDN VNFs. The NFV MANO system processes the VNF control data to generate and transfer NFV control data to relocate the SDN VNF. The first NFVI and the second NFVI relocate the one SDN VNF from the first NFVI to the second NFVI.

Abstract: A base station will be configured to provide service on a host carrier that has a particular frequency range and, concurrently, on a guest carrier that has a narrower frequency range and that is defined as a portion of and fully within the host-carrier's frequency range. With this arrangement, a portion of the host-carrier's air interface resources would thus also be air interface resources of the guest carrier.

Abstract: A cloud computing system. The system comprises a network, a data store communicatively coupled to the network, a plurality of compute nodes, at least some of the compute nodes comprising a cloud computing framework agent coupled to an agent gate keeper, where the cloud computing framework agent communicates with the network via the agent gate keeper, an image management component coupled to an image management gate keeper, where the image management component manages images that execute in the compute instances on the compute nodes and communicates with the network via the image management gate keeper, and a security engine coupled to the network that receives a request to initiate an image on a compute instance, analyzes the image to determine an authentication metric, and when the authentication metric matches a validated authentication value, sends the image to the image management component for loading and instantiating in the computer instance.

Abstract: A Network Function Virtualization Infrastructure (NFVI) controls a Software Defined Network (SDN) Application Programming Interface (API) between a source SDN Virtual Network Function (VNF) and a target SDN VNF. NFV circuitry executes the source SDN VNF and transfers an identity code embedded in the source SDN VNF to Management and Orchestration (MANO) circuitry. The MANO circuitry translates the SDN VNF identity code into API privileges between the source SDN VNF and the target SDN VNF. The MANO circuitry transfers the SDN API privileges to the target SDN VNF. The NFV circuitry executes the source SDN VNF and transfers SDN API data from the source SDN VNF to the target SDN VNF. The NFV circuitry executes the target SDN VNF and processes the SDN API data based on the SDN API privileges.

Abstract: A wireless communication network delivers a wireless communication service. The wireless communication network comprises a base station computer system and a network server. The base station computer system executes a Network Function Virtualization Infrastructure (NFVI) virtual layer and responsively supports base station Virtual Network Functions (VNFs). The base station computer system executes base station VNFs and responsively delivers wireless communication services and generates base station Key Performance Indicators (KPIs). The network server processes the base station KPIs and responsively directs the base station computer system to modify its support of a base station VNF. The base station computer system modifies its support of the base station VNF responsive to the network server.

Abstract: A Network Function Virtualization (NFV) Software-Defined Network (SDN) communicates across network boundaries with other NFV SDNs to support a data communication service. An NFV orchestrator transfers forwarding graphs for service, NFV, and SDN Network-to-Network Interfaces (NNIs) to an SDN controller. The SDN controller converts the forwarding graphs into forwarding instructions and transfers the forwarding instructions for the service, NFV, and SDN NNIs to an NFV SDN switching system. The NFV orchestrator uses the NFV NNI to transfer its forwarding graphs over the NFV SDN switching system across the network boundary to another NFV orchestrator. The SDN controller uses the SDN NNI to transfer its forwarding instructions over the NFV SDN switching system across the network boundary to another SDN controller. The NFV SDN switching system uses the service NNI to transfer user data across the network boundary to another NFV SDN switching system.

Abstract: In a wireless data network, network circuitry serves a wireless user device with hardware-trusted wireless data communications. The network circuitry comprises a physically-embedded hardware trust code and maintains hardware trust with a hardware trust server based on the physically-embedded hardware trust code. The network circuitry determines when a network server has hardware trust. The network circuitry determines when a wireless user device has hardware trust. The processing circuitry then exchanges user data between the wireless user device the network server when both the wireless user device and the network server have hardware trust. The processing circuitry does not exchange the user data between the wireless user device the network server when the wireless user device or the network server lack hardware trust.

Abstract: A Software-Defined Network (SDN) data-plane machine stores flow data and a hardware-trust key. The SDN data-plane machine receives and processes a hardware-trust challenge based on the hardware-trust key to generate and transfer a hardware-trust response. The SDN data-plane machine receives and routes user data based on the flow data. The SDN data-plane machine receives flow modification data from SDN controllers and determines if the SDN controllers are authorized by the hardware-trust controller before modifying the flow data. The SDN data-plane machine receives and routes additional user data responsive to the modified flow data. The SDN data-plane machine reports SDN controllers that attempt to modify the flow data but that are not authorized by the hardware-trust controller to modify the flow data.

Abstract: A Network Function Virtualization (NFV) server executes virtual Network Elements (vNEs). A hardware-trust computer maintains hardware-trust in hardware-trusted ones of the vNEs. The NFV server uses actual vNEs to exchange user data for a user communication device. The NFV server indicates the actual vNEs to the hardware-trust computer. The hardware-trust computer compares the actual vNEs to the hardware-trusted vNEs. The NFV server transfers a hardware-trust alarm for the user communication device when the actual vNEs for the user communication device do not correspond to the hardware-trusted vNEs.

Abstract: A Network Function Virtualization (NFV) data system controls virtual Probe (vProbe) deployment in an NFV Infrastructure (NFVI). An NFV Management and Orchestration (MANO) system receives Key Performance Indicators (KPIs) for the NFVI and processes the KPIs to generate NFV indices. The MANO system processes the NFV indices to trigger a vProbe deployment in the NFVI. Before vProbe deployment, the NFV MANO system compares the NFV indices that triggered the vProbe deployment to false-positive vProbe deployment criteria. The NFV MANO system blocks the vProbe deployment when the NFV indices that triggered the vProbe deployment correspond to the false-positive vProbe deployment criteria. The NFV MANO system initiates the vProbe deployment when the triggering NFV indices do not correspond to the false-positive vProbe deployment criteria. The NFVI may execute SDN applications and controllers that communicate over a virtual switch that hosts the vProbe.

Abstract: A Software-Defined Network (SDN) controller receives controller Application Programming Interface (API) calls from an SDN application and transfers SDN data machine API calls. SDN data machines receive the SDN data machine API calls and process user data responsive to the SDN data machine API calls. The SDN controller transfers SDN controller Key Performance Indicators (KPIs) that indicate an amount of the SDN application API calls for the SDN data machine API calls. The SDN data machines transfers SDN data machine KPIs that indicate an amount of the processed user data for the SDN data machine API calls. An SDN server receives the SDN data machine KPIs and the SDN controller KPIs. The SDN server determines an SDN Quality-of-Service (QoS) score for a data communication service based on the amount of the SDN application API calls relative to the corresponding amount of the processed user data.

Abstract: A Software Defined Network (SDN) exerts policy control over a data service. An SDN computer system executes SDN applications to direct the data service. The SDN computer system executes SDN controllers to control the data service responsive to the SDN applications. SDN data machines deliver the data service responsive to the SDN controllers. The SDN applications, SDN controllers, and SDN data machines transfer SDN Key Performance Indicators (KPIs). An SDN server processes the SDN KPIs to generate data service indices. The SDN server processes the data service indices to select policies for the data service.