Abstract: Presented herein are techniques for scheduling Ultra-Wideband (UWB) anchors and mobile devices for client ranging. A control device can determine respective ranging priorities for a plurality of mobile devices, which are each assigned to at least one UWB anchor. The control device can obtain at least one collision mapping identifying, for a respective pair of the mobile devices, a collision probability that a UWB signal associated with a ranging procedure involving a first mobile device of the respective pair will collide with a UWB signal associated with a ranging procedure involving a second mobile device of the respective pair. The control device can establish a ranging schedule for the mobile devices and UWB anchors based on the respective UWB ranging priorities and the collision mapping(s). The control device can send at least one command to cause UWB ranging procedures to be performed according to the ranging schedule.

Abstract: Techniques for improved networking are provided. An indication that a mobile device is in a first region of a physical space is received, and one or more current exogenous factors are determined for the physical space. Positioning technique accuracy is predicted for each respective positioning technique of a plurality of positioning techniques by processing the indication of the first region and the one or more current exogenous factors using a machine learning model. A first positioning technique of the plurality of positioning techniques is selected based on the predicted positioning technique accuracies.

Abstract: Differentiated time-difference of arrival for Ultra-Wideband (UWB) may be provided. A location tracking information for a venue may be broadcasted. Broadcasting the location tracking information may include notifying a user device that a location information is expected from the user device and providing an entity identity of an entity seeking the location information from the user device. A ranging message may then be received from the user device in response to the user device detecting the location tracking information. A position of the user device on the venue may be determined from the ranging message.

Abstract: The disclosed technology relates to a process of evaluating any number of different identity providers (IDPs) and their respective set of credentials that are used to authenticate corresponding users to assist with the onboarding of the different IDPs in connection with Wi-Fi identity federations. In particular, the process allows a person's electronic identity and attributes (stored across one or more IDPs) to be determined once using a standard. Once trust has been established for the user, that trust can then be utilized across a number of different systems (e.g., Single-sign on). The same trust determination can be used without the need for the authenticity of the user identity to be re-evaluated with each new access request.

Abstract: A device includes a memory and a hardware processor communicatively coupled to the memory. The hardware processor determines that a computing device communicatively coupled to an access point performed an action with respect to the access point and in response to determining that the action causes a deviation from a multi-user uplink policy of the access point, transmits a disciplinary message to the computing device.

Abstract: Presented herein are infrastructure triggering techniques for secure Ultra-Wideband (UWB) ranging. In one example, a method may include providing UWB ranging parameters to a mobile device via a first radio communication, wherein the first radio communication is a non-UWB radio communication; and triggering the mobile device to perform UWB ranging with a UWB anchor, wherein the triggering is performed using a second radio communication. In another example, a method may include, obtaining, by a mobile device, UWB ranging parameters for a geographic area; obtaining a UWB ranging instruction for the geographic area; and performing UWB ranging with a target UWB anchor based on the UWB ranging parameters and the UWB ranging instruction.

Abstract: Device-to-Device (D2D) communications in hybrid networks are provided by identifying a first dual-mode endpoint seeking to communicate with a second dual-mode endpoint via a D2D communications session; identifying a first communications pattern of network resource usage for the first Radio Access Technology (RAT) and a second communications pattern of network resource usage for the second RAT in the heterogeneous wireless network environment; assigning the D2D communications session to the first RAT based on the first communication pattern and the second communication pattern; and in response to detecting network resource usage changes in the first RAT, transitioning the D2D communications session to the second RAT. In some embodiments, the D2D communications session is assigned to the first RAT using a shared frequency regulated by a band access controller that is reserved as a static resource for D2D communication while high-priority signals are absent from the shared frequency.

Abstract: Embodiments herein describe techniques for conveying performance parameters to client devices using BSS coloring. IEEE 802.11ax introduced BSS color to help with interference between BSSs operating in the same channel or partially overlapping channels in a frequency band. The BSS colors are typically assigned at random. However, in the embodiments herein, the BSS colors can still be relied to help with co-channel interference as intended by IEEE 802.11ax but also can convey performance parameters to the client devices. The AP can leverage the BSS color to convey (or encode) a performance parameter such as radio frequency (RF) conditions, quality of service (QoS) conditions, or a policy of the network in response to expected (or future) conditions to receiving client devices.

Abstract: Presented herein are techniques for assigning Ultra-Wideband (UWB) anchors for client ranging. A location server can estimate a coarse location of a mobile device using a localization technique other than a UWB localization technique. The localization technique can involve multiple wireless access points or other radio devices. The location server can define an area around the coarse location to identify a set of candidate anchors for UWB ranging. The set of candidate anchors can be disposed within the area and include at least a subset of the radio devices. The location server can modify the set of candidate anchors to create a modified set of candidate anchors that includes only UWB-enabled devices. The location server can select a primary anchor from the modified set of candidate anchors and send a command to cause a UWB ranging procedure to be initiated between the primary anchor and the mobile device.

Abstract: In one embodiment, an illustrative method herein may comprise: determining, by a device, a profile of an asset in a network, the profile identifying a type of the asset and a particular activity of the asset; determining, by the device, a specific context of the asset within the network; assigning, by the device, a risk score for the profile based on one or more risk factors associated with the profile and a comparison of the profile to an expected behavior of the type of the asset within the specific context; and performing, by the device, one or more mitigation actions based on the risk score.

Abstract: Systems, methods, and computer-readable media for controlling link selection and aggregation across multiple wireless networks based on a location of a mobile device. A location of a mobile device in a physical environment can be identified. At least portions of the physical environment can be in wireless range of a first wireless network and a second wireless network. Whether to access network services through either or both the first wireless network and the second wireless network can be determined based on the location of the mobile device in the physical environment. Further, a first interface at the mobile device to the first wireless network and a second interface at the mobile device to the second wireless network can be selectively toggled according to whether it is determined to access the network services through either or both the first wireless network and the second wireless network based on the location.

Abstract: Systems, methods, and computer-readable media for the secure creation of application containers for 5G slices. A MEC application in a MEC layer of a 5G network can be associated with a specific network slice of the 5G network. A backhaul routing policy for the MEC application can be defined based on the association of the MEC application with the specific network slice of the 5G network. Further, a SID for the MEC application that associates the MEC application with a segment routing tunnel through a backhaul of the 5G network can be generated. A MEC layer access policy for the MEC application can be defined based on the SID for the MEC application. As follows, access to the MEC application through the 5G network can be controlled based on both the backhaul routing policy for the MEC application and the MEC layer access policy for the application.

Abstract: Techniques to adaptively support/enable a wireless network feature for certain wireless client devices without hampering the performance or connectivity of wireless client devices which do not support that wireless network feature. An access point or wireless network controller adaptively enables a wireless network feature without advertising support for the wireless network feature in a wireless network-standard compliant manner to allow one or more wireless clients that support the wireless network feature to use the wireless network feature when associated to the access point while enabling association of one or more wireless clients that do not support the wireless network feature.

Abstract: Improved mesh performance using Overlapping Basic Service Set (OBSS) coloring and transmission scheduling may be provided. A controller may determine that a plurality of Access Points (APs) in a mesh network each have a Received Signal Strength Indicator (RSSI) that is in a predetermined range. Next, the controller may assign, in response to determining that the plurality of APs each have the RSSI that is in the predetermined range, OBSS colors to links between the plurality of APs to limit packet collision in the mesh network between the plurality of APs. The controller may then create a transmission schedule for transmissions between the plurality of APs in the mesh network based on the assigned OBSS colors.

Abstract: Best links for wireless clients may be provided. A computing device may receive, from a client device, a request to join a network. Then, in response to receiving the request to join the network, initial characteristics of the client device may be evaluated. Next, an initial plurality of links list may be provided to the client device in response to evaluating the initial characteristics of the client device. Subsequent characteristics of the client device may then be evaluated. An updated plurality of links list may be provided to the client device in response to evaluating the subsequent characteristics of the client device.

Abstract: Presented herein are techniques to facilitate wireless authorization based on in-line assurance and tariffing information. In one example, a method may include determining, by a roaming subscriber, that a visited network is a chargeable network; querying, by the roaming subscriber, the visited network for charging policies for at least two identity realms; obtaining, by the roaming subscriber, charging policy metadata associated with the charging policies for the at least two identity realms; selecting, by the roaming subscriber, an identity realm through which to connect to the visited network based on the charging policy metadata for the at least two identity realms; and connecting to the visited network using the selected identity realm.

Abstract: Time synchronization distribution in a network may be provided. Time synchronization may be performed by an Access Point (AP) with a plurality of client devices. Next, based on information received from performing the time synchronization with the plurality of client devices, it may be determined that a first client device of the plurality of client devices is a representative client device. Then, for a predetermined time period, time synchronization with the first client device and not with others of the plurality of client devices may be performed. The data associated with the time synchronization with the first client device may be broadcast to others of the plurality of client devices.

Abstract: Disclosed are methods, systems, and non-transitory computer-readable media for using a sponsor as a proxy for multi-factor authentication of a first user account for a first user when a primary multi-factor authentication mechanism is unavailable to the first user account, comprising registering the sponsor in a multi-factor authentication chain of trust associated with the first user account; requesting verification of an identity of the first user from the sponsor; receiving, from the sponsor, a verification of the identity of the first user; and granting access to a service to the first user account.

Abstract: Presented herein are techniques for assigning Ultra-Wideband (UWB) anchors for client ranging. A control device can monitor UWB ranging between a mobile device and a primary anchor. In response to determining that a signal strength between the mobile device and the primary anchor is below a threshold, the control device can identify anchors for which the mobile device has had a signal strength above the threshold during a period of time, and select one of the anchors as a new primary anchor for the mobile device. For example, the control device can select the new primary anchor based on a relative collision tolerance mapping for the new primary anchor and at least one other anchor within a UWB range of the new primary anchor. The control device can send a command causing UWB ranging to be performed between the mobile device and the new primary anchor.

Abstract: A method comprising: at a multi-link device (MLD) configured for multi-link operation: establishing a first Internet Protocol (IP) stack of a first IP type and configured with a first IP address of the first IP type, wherein the first IP stack is associated to a first MLD media access control (MAC) address of a first station of the MLD; establishing a second IP stack of a second IP type and configured with a second IP address of the second IP type, wherein the second IP stack exists concurrently with the first IP stack and is associated to a second MLD MAC address of a second station of the MLD; and exchanging, with a peer MLD, IP traffic using one or more of (i) the first IP stack and the first MLD MAC address, and (ii) the second IP stack and the second MLD MAC address.