Abstract: In a Software Defined Network (SDN), a source SDN switch in a source geographic area generates switch performance data. The source SDN switch detects when its switch performance reaches a switch performance threshold based on its switch performance data, and in response, the source SDN switch transfers source switch information. An SDN controller receives the source switch information and selects a target SDN switch in a target geographic area based on the switch performance threshold and the source geographic area. The SDN controller transfers the source switch information to the target SDN switch in the target geographic area. The target SDN switch generates switch performance data and detects when SDN performance reaches a network performance threshold based on its switch performance data and the source switch information. The target SDN transfers SDN performance information to the SDN controller.

Abstract: In a Software Defined Network (SDN), a source SDN switch in a source geographic area generates switch performance data. The source SDN switch detects when its switch performance reaches a switch performance threshold based on its switch performance data, and in response, the source SDN switch transfers source switch information. An SDN controller receives the source switch information and selects a target SDN switch in a target geographic area based on the switch performance threshold and the source geographic area. The SDN controller transfers the source switch information to the target SDN switch in the target geographic area. The target SDN switch generates switch performance data and detects when SDN performance reaches a network performance threshold based on its switch performance data and the source switch information. The target SDN transfers SDN performance information to the SDN controller.

Abstract: A Software-Defined Network (SDN) distributes Proxy Correlation Index (PCI) control in an SDN data-plane. An SDN controller transfers SDN signaling that indicates a data-plane PCI configuration. An SDN data machine processes the SDN signaling and configures a PCI generator and a flow controller to implement the data-plane PCI configuration. The SDN data-plane machine processes user data flows per a Flow Description Table (FDT) and generates Key Performance Indicators (KPIs) for the user data flows. The PCI generator generates PCIs based on the KPIs and the data-plane PCI configuration. The flow controller updates the FDT based on the PCIs and the data-plane PCI configuration. The SDN data-plane machine processes the user data flows per the updated FDT.

Abstract: A Software-Defined Network (SDN) distributes Proxy Correlation Index (PCI) information across an SDN data-plane. A central SDN controller receives inbound SDN signaling from a source SDN controller serving a source geographic area indicating a PCI threshold breach in the SDN data-plane in the source geographic area. The central SDN controller generates PCI information that characterizes the PCI threshold breach. The central SDN controller selects a target SDN controller in a target geographic area responsive to the PCI threshold breach. The central SDN controller transfers outbound SDN signaling having the PCI information for delivery to the target SDN controller in the target geographic area.

Abstract: A Network Function Virtualization (NFV) data system controls virtual Probe (vProbe) deployment in an NFV Infrastructure (NFVI). An NFV Management and Orchestration (MANO) system receives Key Performance Indicators (KPIs) for the NFVI and processes the KPIs to generate NFV indices. The MANO system processes the NFV indices to trigger a vProbe deployment in the NFVI. Before vProbe deployment, the NFV MANO system compares the NFV indices that triggered the vProbe deployment to false-positive vProbe deployment criteria. The NFV MANO system blocks the vProbe deployment when the NFV indices that triggered the vProbe deployment correspond to the false-positive vProbe deployment criteria. The NFV MANO system initiates the vProbe deployment when the triggering NFV indices do not correspond to the false-positive vProbe deployment criteria. The NFVI may execute SDN applications and controllers that communicate over a virtual switch that hosts the vProbe.

Abstract: A Software-Defined Network (SDN) distributes Proxy Correlation Index (PCI) control in an SDN data-plane. An SDN controller transfers SDN signaling that indicates a data-plane PCI configuration. An SDN data machine processes the SDN signaling and configures a PCI generator and a flow controller to implement the data-plane PCI configuration. The SDN data-plane machine processes user data flows per a Flow Description Table (FDT) and generates Key Performance Indicators (KPIs) for the user data flows. The PCI generator generates PCIs based on the KPIs and the data-plane PCI configuration. The flow controller updates the FDT based on the PCIs and the data-plane PCI configuration. The SDN data-plane machine processes the user data flows per the updated FDT.

Abstract: A Network Function Virtualization (NFV) Software Defined Network (SDN) performs a network task. An NFV management system processes Key Performance Indicators (KPIs) to identify the network task and to direct an NFV orchestration system to install a virtual Probe (vProbe) with filter criteria to collect additional KPIs for the network task. The NFV orchestration system directs an NFV Infrastructure (NFVI) to install the vProbe. The vProbe sends the filter criteria to a virtual Switch (vSW) in the NFVI, and the vSW applies the filter criteria to Virtual Network Function (VNF) traffic and transfers the filtered data to the vProbe. The vProbe processes the filtered data to generate the additional KPIs for the NFV management system. The NFV management system processes the additional KPIs to perform the network task.

Abstract: A wireless communication system to secure data communications between APIs. The wireless communication system includes a first API for a first sensor in a first wireless communication device and a second API for a second sensor in a second wireless communication device. In the first wireless communication device, identifying an API request to externally share sensor data, and in response, performing a security challenge to verify the first API. If the first API is verified, then the API request is transferred to the second wireless communication device. In the second wireless communication device, performing a security challenge to verify the second API. If the second API is verified, then the API share request is transferred to the second API in the second wireless communication device.

Abstract: Systems, methods, and software for operating communication systems are provided herein. In one example, method of operating a communication system to establish secure communications between a first user device communicating in a first communication network and a second user device communicating in a second communication network is presented. The method includes, responsive to a communication request received from the first user device, establishing a secure communication link between the first user device and a first security node. When a second security node has a security relationship established with the first security node, the method includes establishing the secure communication link for the secure communications between the first user device and the second user device using at least the security relationship between the first security node and the second security node, and exchanging the secure communications over the secure communication link.

Abstract: Systems, methods, and software for operating communication systems are provided herein. In one example, method of operating a communication system to establish secure communications between a first user device communicating in a first communication network and a second user device communicating in a second communication network is presented. The method includes, responsive to a communication request received from the first user device, establishing a secure communication link between the first user device and a first security node. When a second security node has a security relationship established with the first security node, the method includes establishing the secure communication link for the secure communications between the first user device and the second user device using at least the security relationship between the first security node and the second security node, and exchanging the secure communications over the secure communication link.

Abstract: Examples disclosed herein provide systems, methods, and software for communication using Common Public Radio Interface. In one example, a system for CPRI communication includes a radio equipment control system configured to generate a timing security flag for a basic frame, insert the security flag into the basic frame, and initiate transfer of the basic frame to a radio equipment system. The radio equipment system is further configured to receive the basic frame, identify validity of the timing security flag, and upon validation, update timing on the radio equipment.

Abstract: Systems, methods, and software for operating communication systems and wireless communication devices are provided herein. In one example, a method of operating a wireless communication is provided. In security circuitry of the wireless communication device, the method includes receiving a request from processing circuitry for an application to access a first communication network with a first communication transceiver, and processing the request and a security key to authorize the application to use the first communication transceiver to access the first communication network. In the first communication transceiver, the method includes exchanging communications over the first communication network for the application responsive to the authorization.

Abstract: An image encodes a voice message and communication data for delivery of the voice message. A wireless communication device optically receives and processes the received image to generate image data. The image data represents the voice message and indicates the communication data. The wireless communication device processes the image data, and in response, wirelessly transmits the voice message for delivery based on the communication data.

Abstract: An image encodes processing parameters for a set of images. A wireless communication device optically receives and processes the received image to generate first image data. The image data represents the processing parameters. The wireless communication device processes the first image data to obtain the processing parameters. The wireless communication device then optically receives the set of images. The set of images encode second image data. The wireless communication device processes the optically received set of images based on the processing parameters to obtain second image data.

Abstract: A communication system wherein a wireless communication device optically receives an image of a location, processes the image to obtain image data, and transmits the image data and wireless communication device user information to a communication network as a control request. A server receives the control request and processes the image data and user information to determine the location. The server then processes the location to determine contact information for an authorizing party and transfers an authorization request to the authorizing party. If the server receives authorization from the authorizing party, then the server transfers a control interface to the wireless communication device. The wireless communication device receives a control instruction responsive to the control interface and transfers a control message to the server. The server receives the control message and transfers the control message to a control system at the location. The control system implements the control instruction.

Abstract: A wireless communication device optically receives an image and processes the optically received image to generate image data. The wireless communication device receives a Radio Frequency (RF) signal and processes the RF signal to derive an image data processing parameter. The image data processing parameter could be an encryption key, authentication code, access code, or some other parameter. The wireless communication device processes the image data and the image data processing parameter to convert the image data into a different format. The different format could be decrypted, authenticated, accessed, or some other converted form of image data.

Abstract: A wireless communication device optically receives an image and processes the optically received image to generate image data. The wireless communication device receives a Radio Frequency (RF) signal and processes the RF signal to derive an image data processing parameter. The image data processing parameter could be an encryption key, authentication code, access code, or some other parameter. The wireless communication device processes the image data and the image data processing parameter to convert the image data into a different format. The different format could be decrypted, authenticated, accessed, or some other converted form of image data.