Abstract: A system and method are described that are carried out by a core network element of a host mobile carrier core network to perform an access point name resolution to facilitate establishing a session between a user equipment and a target packet gateway (PGW) of a mobile virtual network operator (MVNO). The method includes receiving a connection request from a user equipment identified as falling within particular ranges of mobile subscriber identity number (MSIN) values corresponding to user equipment of hosted MVNOs. The connection request includes: an international mobile subscriber identity (IMSI), and an access point name (APN). The method further includes establishing an MVNO identifier from the provided IMSI and thereafter generating an MVNO-specific APN by appending the MVNO identifier to the APN. The method further includes submitting a name resolution request including the MVNO-specific APN to a naming service server.

Abstract: Geographical coordinates for a cell are obtained based upon the location of the cell, generating a physical layer cell identity matrix for the cell based upon a subset of physical layer cell values allocated for the location of the cell which is performed to eliminate interference among primary and secondary synchronization signaling for the cell based upon a subset of physical layer cell values allocated for the location of the cell, using one of the cell identities contained in the generated matrix for the new cell which is mapped to the location of the new cell and monitoring for physical layer cell color code collisions among neighboring cells reported by one or more user equipment in range of the new cell and neighboring cells, and if a collision occurs re-generate a physical layer cell matrix using unallocated physical layer cell values for the location of the new cell.

Abstract: Geographical coordinates for a cell are obtained based upon the location of the cell, generating a physical layer cell identity matrix for the cell based upon a subset of physical layer cell values allocated for the location of the cell which is performed to eliminate interference among primary and secondary synchronization signaling for the cell based upon a subset of physical layer cell values allocated for the location of the cell, using one of the cell identities contained in the generated matrix for the new cell which is mapped to the location of the new cell and monitoring for physical layer cell color code collisions among neighboring cells reported by one or more user equipment in range of the new cell and neighboring cells, and if a collision occurs regenerate a physical layer cell matrix using unallocated physical layer cell values for the location of the new cell.

Abstract: A method (400) of automatically generating policies and/or roles for role based access (RBAC). The method can include presenting a policy or policy generation table (300) identifying scripts (304) and roles (302) to which the scripts correspond to an operator, and receiving at least one operator input selecting a plurality of desired scripts to be associated with a desired policy or role. The method also can include parsing the scripts to identify corresponding verb-switches (204), and comparing the parsed verb-switches to existing policies or roles (114). When there is at least one of the parsed verb-switches that does not correspond to at least one existing policy, the parsed verb-switch that does not correspond to at least one existing policy can be identified and a policy (106) that includes the identified verb-switch can be generated.

Abstract: A method (400) of automatically generating policies and/or roles for role based access (RBAC). The method can include presenting a policy or policy generation table (300) identifying scripts (304) and roles (302) to which the scripts correspond to an operator, and receiving at least one operator input selecting a plurality of desired scripts to be associated with a desired policy or role. The method also can include parsing the scripts to identify corresponding verb-switches (204), and comparing the parsed verb-switches to existing policies or roles (114). When there is at least one of the parsed verb-switches that does not correspond to at least one existing policy, the parsed verb-switch that does not correspond to at least one existing policy can be identified and a policy (106) that includes the identified verb-switch can be generated.

Abstract: A method for identifying non-orthogonal roles (112, 114, 116, 118) in an access control system (100). The method can include, for at least one policy (Pn,i) defined for a first role (112) in the access control system, automatically determining whether there is at least one policy (Pm,j) defined in a second role that conflicts with the policy defined in the first role. The method also can include, responsive to determining that the policy defined in the second role conflicts with the policy defined in the first role, providing a conflict indicator.

Abstract: A method and system for managing objects in a O&M RBAC system includes a first step of dynamically discovering an object and associated command actions by the RBAC system. A next step includes defining roles and tasks to users assigning authorization privileges for the object. A next step includes updating a graphical user interface with information about the objects, roles, tasks, and command actions. A next step includes adding information about the objects, roles, tasks, and command actions to a database for the network. A next step includes entering a command with an action from a user. A next step includes determining a role of a requesting user. A next step includes comparing the role against the database to find authorization to execute the task and action against the object.