Abstract: The present disclosure provides techniques for providing probing data in a privacy enhanced network, including receiving, at a first access point (AP) and from a first wireless station (STA) connected to the first AP, an information request associated with a second AP, where the first AP and the second AP are Basic Service Set (BSS) Privacy Enhancement (BPE) APs. The first AP may determine probing data associated with a first probing BSS identifier (BSSID) of the second AP. The first AP may transmit a first response comprising the probing data to the first wireless STA. The first AP may receive, from a second wireless STA connected to the second AP, a probe request for a second probing BSSID of the first AP, where the probe request comprising an authorization token. Based on successfully validating the probe request, the first AP may transmit a probe response to the second wireless STA.

Abstract: The present disclosure provides techniques for identifying and transmitting future Basis Service Set identifiers (BSSIDs) for access points (APs) in an Extended Service Set (ESS), including implementing, by a first AP, a BSS for one or more wireless stations, where an ESS includes the first AP and a second AP neighboring the first AP, and where the second AP is a basic service set privacy enhancements (BPE) AP. The first AP may encode a wireless management frame including a neighbor report element for the second AP, where the neighbor report element includes data indicating a basic service set identifier (BSSID) for one or more next epochs. Further, the wireless management frame may be transmitted by the first AP to a wireless station of the BSS.

Abstract: The present disclosure provides techniques for identifying and transmitting future association identifiers (AIDs) for wireless stations (STAs) in a Basic Service Set, including identifying, by an access point (AP), a frame to be transmitted. The AP may determine, during a current epoch, a first AID for a first station. The AP may determine a first epoch discriminator, such as an even/odd bit, of the current epoch with respect to the first AID. The AP may transmit the first frame comprising the first AID and the first epoch discriminator, such as transmitting the first frame to the first station.

Abstract: The present disclosure provides techniques for managing association identifier (AID) assignment in enhanced data privacy (EDP) operation. An access point (AP) establishes a wireless communications link with a station, comprising receiving an association request frame from the wireless station, assigning the station to an EDP group, generating a first list of N AIDs for the station, each of the N AIDs to be used in a corresponding epoch of N epochs associated with the EDP group, and transmitting an association response frame to the station, where the response frame comprises information indicating the assigned EDP group and the first list of N AIDs for the wireless station. The AP maintains the wireless communications link with the wireless station based at least in part on the timing information for randomized MAC address rotation for the EDP group, comprising using each AID in the list of N AIDs during corresponding epochs.

Abstract: In one implementation, a device may obtain performance metrics from vantage points distributed across a computing network. The device may map the performance metrics to a corresponding application based on a network address associated with the performance metrics. The device may establish a performance metric baseline for the corresponding application based on the performance metrics that are mapped to the corresponding application. The device may identify an anomaly in a performance metric mapped to the corresponding application based on a comparison to the performance metric baseline.

Abstract: The present disclosure provides techniques for establishing and managing subscription- based telemetry in wireless networks. An access point (AP) receives a discovery frame from a client device requesting information on subscribable data sources, transmits a discovery response frame identifying one or more data sources supported by the first AP, each data source being associated with one or more subscription types, receives a subscription request frame from the client device, the subscription request frame identifying one or more selected data sources, each selected data source being associated with a respective selected subscription type, transmits an acknowledgement frame to the client device, the acknowledgement frame comprising an approval of the subscription request frame and a subscription identifier assigned to the client device, and sends data from the selected data sources to the client device based on the respective selected subscription types.

Abstract: Hybrid Multi-Link Device (MLD) wireless networking for automotive may be provided. A mobile device can, using an out-of-band (OOB) connection, discover a virtual access point (AP) that provides wireless local area network (WLAN) services. Information identifying a service area and APs within the service area is received from the virtual AP via the OOB connection. A virtual wireless network session is established with the virtual AP over the OOB connection in response to determining the mobile device is entering the service area, including performing an association procedure and an authentication procedure between the mobile device and the virtual AP. In response to determining that the mobile device is entering a WLAN coverage area associated with an AP of the APs, a link is established between the mobile device and the AP. Data is then exchanged between the mobile device and an application via the link through the AP.

Abstract: Split Media Access Control (MAC) for automotive wireless may be provided. A client device may report a position of the client device to a cloud-based service through an Out-of-Band (OOB) connection. Next the client device may receive, from the cloud-based service, a mapping of services available to the client device. The client device may then communicate according to the mapping of services available to the client device wherein the cloud-based service may implement control-plane functions and the client device may implement data-plane functions.

Abstract: Devices, systems, methods, and processes for tackling the problem of sticky clients in wireless networks using machine learning processes are described herein. Thresholds related to data rates and/or Received Signal Strength Indicators (RSSI), for Access Points (APs) in a network are identified. These thresholds are configured to dynamically adjust, either based on the time of day or real-time roaming patterns, with the aim of mitigating sticky clients and enhancing overall network performance. Advanced machine learning techniques such as Graph Neural Networks are implemented within the domain of deep learning to significantly alleviate sticky client concerns and promote seamless connectivity for all users.

Abstract: The present disclosure provides techniques for APs to evaluate status updates received from STAs for adaptive AID management. An AP establishes a wireless communications link with a station, generates a list of N AIDs, each of the N AIDs to be used in a corresponding epoch of N epochs associated with an EDP group, transmits to the station in a protected wireless frame, information indicating the list of N AIDs for the station, receives from the station a response frame to the protected wireless frame, where the response frame includes a status code indicating whether the station successfully stored at least a portion of the list of N AIDs, and maintains the wireless communications link with the station based at least in part on the timing information for randomized MAC address rotation for the EDP group, and including using each AID in the list of N AIDs during corresponding epochs.

Abstract: A system and method for using 802.11v action report messages to enhance roaming. In one embodiment, a method includes transmitting, to a station, a transition management message that identifies a recommended access point for roaming for the station, receiving, from the station, an action report in response to the transition management message, where the action report indicates feedback to the recommended access point identified in the transition management message, and determining a roaming recommendation based on the action report.

Abstract: In one embodiment, a device obtains telemetry data indicative of a plurality of different types of events that occurred in a network. The device computes event counts for each of the plurality of different types of events within each of a sequence of predefined timespans based on the telemetry data and generates timeseries for each of the plurality of different types of events using the event counts. The device provides display data that causes a user interface to display a selected two or more of the timeseries concurrently.

Abstract: The present disclosure provides techniques for device authorization using a per-device identifier. A network device authenticates a client device using simultaneous authentication of equals (SAE) with a shared passphrase. After completing association, the network device sends a first message to the client device, comprising an access point (AP)-generated random value to the client device. The network device receives a second message from the client device, comprising a station (STA)-generated random value and an authorization identifier. The network device decrypts the authorization identifier using a session key. In response to determining that the authorization identifier matches an entry in the authorization database, the network device sends a third message confirming authorization of the client device as a trusted entity. The network device receives a fourth message confirming completion of a security key exchange.

Abstract: In one embodiment, a method can receive transmission metadata associated with a plurality of devices within an Internet of Things (IoT) network. The method can use a transmission sensing component (TSC) to measure transmission energy cost for each of the plurality of devices over a time period using the transmission metadata. The method can use a central compute engine (CCE) and the transmission energy cost for each of the plurality of devices to determine a plurality of transmission features associated with the plurality of devices having a transmission energy cost that is minimized. The method can use a transmission scheduling engine (TSE) and the plurality of transmission features to generate a transmission mode schedule to reduce a transmission energy cost for the plurality of devices within the IoT network. The method can adjust a transmission mode associated with the plurality of devices based on the transmission mode schedule.

Abstract: In one implementation, a device may obtain performance metrics from vantage points distributed across a computing network. The device may map the performance metrics to a corresponding application based on a network address associated with the performance metrics. The device may establish a performance metric baseline for the corresponding application based on the performance metrics that are mapped to the corresponding application. The device may identify an anomaly in a performance metric mapped to the corresponding application based on a comparison to the performance metric baseline.

Abstract: In one implementation, a device obtains traceroute results for a forward path from a first endpoint in a network to a second endpoint in the network that indicates a plurality of intermediate nodes along the forward path. The device causes the second endpoint to perform traceroute testing with respect to the plurality of intermediate nodes, to obtain traceroute results for a reverse path between the second endpoint and the first endpoint that includes the plurality of intermediate nodes. The device computes a delay metric associated with a particular intermediate node among the plurality of intermediate nodes, based on the traceroute results for the forward path and the traceroute results for the reverse path. The device provides the delay metric for presentation via a user interface.

Abstract: In one implementation, a device generates a routing graph using path trace data, wherein nodes of the routing graph represent different entities in one or more computer networks. The device computes importance metrics for the nodes in the routing graph based on their traffic loads. The device generates an insight regarding the one or more computer networks based on the importance metrics for the nodes. The device provides the insight to a user interface for presentation to a user.

Abstract: In one embodiment, a device detects a performance anomaly in a network based on a plurality of time series of network metrics collected from the network. The device determines a loss of visibility in the network based on results from probing the network. The device identifies a particular location in the network as a root cause of the performance anomaly based on the loss of visibility. The device provides, to a user interface, an indication of the particular location being the root cause of the performance anomaly.

Abstract: The present disclosure provides techniques for TID obfuscation. A network device generates a first transformation matrix comprising a plurality of rows and a plurality of columns, each row corresponding to a real traffic identifier (TID) value, and each column corresponding to an epoch identifier within a sequence of epochs. The network device populates each entry of the first transformation matrix with an over-the-air-TID (OTA-TID) value, where each OTA-TID value is mapped from a respective TID and a respective epoch identifier. The network device transmits the first transformation matrix to a station (STA).

Abstract: In one implementation, a device obtains node information regarding a plurality of nodes in a computer network. The device identifies a topology of the computer network. The device determines an optimal agent deployment plan for probing agents in the computer network based on the node information and the topology of the computer network. The device causes probing agents to be deployed to a selected set of nodes from the plurality of nodes in accordance with the optimal agent deployment plan.