Abstract: A method and system for steering a mobile device to a preferred network, such as a Private LTE network or a 5G network, in a scenario in which the coverage area of the preferred network overlaps the coverage area of a non-preferred network. If a network function detects that the mobile device is located within the coverage area of the preferred network, the network steering procedure will be triggered. The mobile device will detach from its current network, place that network on a temporary forbidden list, and perform an automatic network selection. If mobile device selects another non-preferred network, the attachment request will be denied, and the mobile device will add that non-preferred network to the temporary forbidden list. This procedure is repeated until the mobile device attaches to the preferred network or a predefined duration expires.

Abstract: A method and system for steering a mobile device to a preferred network, such as a Private LTE network or a 5G network, in a scenario in which the coverage area of the preferred network overlaps the coverage area of a non-preferred network. If a network function detects that the mobile device is located within the coverage area of the preferred network, the network steering procedure will be triggered. The mobile device will detach from its current network, place that network on a temporary forbidden list, and perform an automatic network selection. If mobile device selects another non-preferred network, the attachment request will be denied, and the mobile device will add that non-preferred network to the temporary forbidden list. This procedure is repeated until the mobile device attaches to the preferred network or a predefined duration expires.

Abstract: A method for steering a mobile device to a preferred network, such as a Private LTE network or a 5G network, in a scenario in which the coverage area of the preferred network overlaps the coverage area of a non-preferred network. A preferred network list is provisioned into a SIM/eSIM module at the mobile device side. The steering application is hosted at the home network and periodically triggers the home network to request from the visited network a set of values for attributes associated with a current location of the mobile device. Based on these values, the steering application determines whether the mobile device is within the coverage area of the preferred network and, if so, directs the home network to send a cancel location request to the non-preferred visited network, thereby triggering the mobile device to attach to the preferred network.

Abstract: This invention is a system and method for implementing a VoLTE and circuit switched voice and SMS interworking function to provide voice and SMS service to roaming mobile devices at visiting network based on VoLTE roaming and ‘SMS over SGs’ towards VPLMN, and circuit-switched voice and SMS towards HPLMN. The interworking function enables and redirects IMS traffic at VPLMN towards a hosted IMS core with voice connectivity to PSTN via MGCF and MGW. The interworking function also performs circuit-switched location-update registration at HLR at HPLMN for receiving mobile-terminated voice calls and SMS.

Abstract: A method for steering a mobile device to a preferred network, such as a Private LTE network or a 5G network, in a scenario in which the coverage area of the preferred network overlaps the coverage area of a non-preferred network. A preferred network list is provisioned into a SIM/eSIM module at the mobile device side. The steering application is hosted at the home network and periodically triggers the home network to request from the visited network a set of values for attributes associated with a current location of the mobile device. Based on these values, the steering application determines whether the mobile device is within the coverage area of the preferred network and, if so, directs the home network to send a cancel location request to the non-preferred visited network, thereby triggering the mobile device to attach to the preferred network.

Abstract: An enforcer application is configured to intercept signaling messages in a telecommunications network and select an optimal SGW, PGW, SMF/UPF and application servers in real time. More specifically, the enforcer intercepts and generates GSM MAP, Diameter, GTP-C and HTTP2/JSON signaling messages. The enforcer executes a policy to force the user devices to re-establish the data connection, thus anchoring at different SGW, PGW, SMF/UPF and application server to keep end-to-end routing path optimal, when the impacting factor changes. The enforcer can further feed its performance data and decision matrix into the analyzer and database to further optimize the decision process. Analyzer and KPI metrics databases are installed at central data centers to collect the KPI data from different probes and enforcer, calculate in real-time the optimal routing path with different decision factors considered, and interact with enforcer to update the latest optimal path status based on the data collected.

Abstract: This invention relates to a method and a system for performing seamless authentication and identification of a mobile subscriber requesting to access a 3rd Party Merchant's online platform. The subscriber verification system intercepts a message sent from a first network node to a second network node during a data session establishment procedure. The subscriber verification system extracts a first set of identification values associated with a user equipment (UE) from the intercepted message. After the data session is established, the UE sends an encrypted request to access the Merchant server. The Merchant server identifies a second set of identification values associated with the encrypted request and sends them for validation to the subscriber verification system. The second set of identification values is compared against the first set of identification values. If the two set of identification values match, the UE is authenticated.

Abstract: This invention relates generally to the field of security and remote data communications, specifically to data communications between applications running on different devices residing in different service provider networks. The invention includes methods and systems to resolve the application host based on user defined naming schema, automate the secure tunnel creation among the communication entities via Security Enforcement Servers, start up the applications via secure out of band control channel, perform packet inspection and anomaly detection based on injected user rules and historical traffic pattern, generate alert or notifications via email, text, etc. to specific users. The invention further tears down the secure connection based on application demand or inactivity timeout, generates event and statistic data records for troubleshooting and future auditing.

Abstract: A system and method for routing of 5G mobile data traffic along a routing path in an Internetwork Packet Exchange (IPX) network having requisite Quality of Service (QoS). A proxy is deployed in the IPX network to intercept Session Create request and response messages exchanges between the home network and the visited network. The routing platform extracts Single-Network Slice Selection Assistance Information (S-NSSAI) attribute and uses this attribute and the geographic locations of the visited network and the home network to select a routing path in the IPX network having requisite QoS for the network slice use case. The routing platform uses layer-3 routing technique to anchor User Plane Function (UPF) Proxies deployed at different routing paths in the IPX network. Alternately, the routing platform uses layer-2 routing technique, with Software-Defined Networking (SDN) controller and SDN-switches to route traffic via the selected routing path in the IPX network.

Abstract: This invention is a system and method for implementing Network Function (NF) Proxy in an IPX network for 5G core roaming. NF Discover queries from Visited Public Land Mobile Network (VPLMN) are manipulated such that the IPX NF Proxy's fully qualified domain name (FQDN) is returned as the FQDN of the Home Public Land Mobile Network (HPLMN) NF. NF Proxy queries the FQDN of a true HPLMN NF through a HPLMN Network Repository Function (NRF) Proxy. Application messages are routed to NF Proxy hosted in the IPX network. NF Proxy performs its proxy function and routes egress messages to the target NF in HPLMN or another location.

Abstract: This invention is a system and method for implementing a VoLTE and circuit switched voice and SMS interworking function to provide voice and SMS service to roaming mobile devices at visiting network based on VoLTE roaming and ‘SMS over SGs’ towards VPLMN, and circuit-switched voice and SMS towards HPLMN. The interworking function enables and redirects IMS traffic at VPLMN towards a hosted IMS core with voice connectivity to PSTN via MGCF and MGW. The interworking function also performs circuit-switched location-update registration at HLR at HPLMN for receiving mobile-terminated voice calls and SMS.

Abstract: This invention is a system and method for implementing a VoLTE and circuit switched voice and SMS interworking function to provide voice and SMS service to roaming mobile devices at visiting network based on VoLTE roaming and ‘SMS over SGs’ towards VPLMN, and circuit-switched voice and SMS towards HPLMN. The interworking function enables and redirects IMS traffic at VPLMN towards a hosted IMS core with voice connectivity to PSTN via MGCF and MGW. The interworking function also performs circuit-switched location-update registration at HLR at HPLMN for receiving mobile-terminated voice calls and SMS.

Abstract: This invention is a system and method for implementing a VoLTE and circuit switched voice and SMS interworking function to provide voice and SMS service to roaming mobile devices at visiting network based on VoLTE roaming and ‘SMS over SGs’ towards VPLMN, and circuit-switched voice and SMS towards HPLMN. The interworking function enables and redirects IMS traffic at VPLMN towards a hosted IMS core with voice connectivity to PSTN via MGCF and MGW. The interworking function also performs circuit-switched location-update registration at HLR at HPLMN for receiving mobile-terminated voice calls and SMS.

Abstract: A system and method for routing of 5G mobile data traffic along a routing path in an Internetwork Packet Exchange (IPX) network having requisite Quality of Service (QoS). A proxy is deployed in the IPX network to intercept Session Create request and response messages exchanges between the home network and the visited network. The routing platform extracts Single-Network Slice Selection Assistance Information (S-NSSAI) attribute and uses this attribute and the geographic locations of the visited network and the home network to select a routing path in the IPX network having requisite QoS for the network slice use case. The routing platform uses layer-3 routing technique to anchor User Plane Function (UPF) Proxies deployed at different routing paths in the IPX network. Alternately, the routing platform uses layer-2 routing technique, with Software-Defined Networking (SDN) controller and SDN-switches to route traffic via the selected routing path in the IPX network.

Abstract: The invention relates generally to the field of network connectivity management, specifically to provisioning and controlling the data access of multiple client devices to application servers via a connectivity management device. The invention includes apparatuses, methods, and systems for automating the management of such apparatus and its associating client devices. The management includes initializing and storing device data, ownership proof, connectivity credentials, and security policies into a management system, such as blockchain digital ledger or device management application server. The stored information is used for auto pairing and authenticating the devices via a second wireless technology and triggering secure connection setup over the first wireless technology.

Abstract: A method and system for steering a mobile device to a preferred network, such as a Private LTE network or a 5G network, in a scenario in which the coverage area of the preferred network overlaps the coverage area of a non-preferred network, such as a 3G or a 4G Public Land Mobile Network (PLMN). A preferred network list is provisioned into a SIM/eSIM module at the mobile device side. The mobile device periodically collects a set of values for attributes associated with a current location of the mobile device and reports the collected values to the Steering application, hosted at the network side. The Steering application detects whether the mobile device is within the coverage area of the preferred network and, if so, triggers the mobile device to perform network steering.

Abstract: A system and method for routing of 5G mobile data traffic along a routing path in an Internetwork Packet Exchange (IPX) network having requisite Quality of Service (QoS). A proxy is deployed in the IPX network to intercept Session Create request and response messages exchanges between the home network and the visited network. The routing platform extracts Single-Network Slice Selection Assistance Information (S-NSSAI) attribute and uses this attribute and the geographic locations of the visited network and the home network to select a routing path in the IPX network having requisite QoS for the network slice use case. The routing platform uses layer-3 routing technique to anchor User Plane Function (UPF) Proxies deployed at different routing paths in the IPX network. Alternately, the routing platform uses layer-2 routing technique, with Software-Defined Networking (SDN) controller and SDN-switches to route traffic via the selected routing path in the IPX network.

Abstract: A system and method for routing LoRaWAN backend traffic between peer visited and home Network Server nodes to achieve global roaming in a scalable manner. A LoRaWAN Routing and Control System (LRCS) node is deployed between a visited Network Server and a home Network Server and is configured to proxy signaling and payload data messages therebetween. LRCS node can provide policy control, billing and rating based on roaming agreements between peer LoRaWAN roaming networks. LRCS node protects the overall network by discarding blacklisted and malicious traffic. LRCS node can enhance the message flow logic by adding routing information in the messages such that destination networks can identify that message is routed through a trustable source.

Abstract: A traffic hub used in mobile communications for data offloading, diversion and security. The traffic hub includes an Evolved Packet Data Gateway (ePDG) module configured to transmit and receive data packets for a mobile device in Roaming Untrusted Wi-Fi network for secured access to an Evolved Packet Core (EPC) network, a Trusted WLAN Access Gateway (TWAG) module configured to transmit and receive the data packets for a mobile device in Roaming Trusted Wi-Fi network for secured access to the EPC network and a General Packet Radio Service (GPRS) Tunneling Protocol (GTP) Proxy (GProxy) module, the GProxy module being the core module of the traffic hub configured to enforce policy rules on the data packets prior to exchanging the data packets with logically selected Peer Gateway General Packet Radio Service (GPRS) Serving Node (GGSN)/Packet Data Network (PDN) Gateway (PGW) and ePDG/TWAG nodes. The GProxy also operates as a GTP-aware firewall to protect Home GGSN/PGW nodes from malicious traffic.

Abstract: A system and method for routing of 5G mobile data traffic along a routing path in an Internetwork Packet Exchange (IPX) network having requisite Quality of Service (QoS). A proxy is deployed in the IPX network to intercept Session Create request and response messages exchanges between the home network and the visited network. The routing platform extracts Single-Network Slice Selection Assistance Information (S-NSSAI) attribute and uses this attribute and the geographic locations of the visited network and the home network to select a routing path in the IPX network having requisite QoS for the network slice use case. The routing platform uses layer-3 routing technique to anchor User Plane Function (UPF) Proxies deployed at different routing paths in the IPX network. Alternately, the routing platform uses layer-2 routing technique, with Software-Defined Networking (SDN) controller and SDN-switches to route traffic via the selected routing path in the IPX network.