Abstract: A technique of associating each Serving Gateway (SGW) with a corresponding Packet Data Network (PDN) gateway (PGW) to provide a particular type of wireless service to mobile devices in the wireless communication network is discussed herein. In configurations, the technique includes co-locating a SGW with a corresponding PGW in the same, physical node of the wireless communication network to provide a first S/PGW pair. In configurations, the first co-located S/PGW pair may be dedicated to provide data services to mobile devices in the wireless communication network. The technique also includes co-locating another SGW with a corresponding PGW in the same, physical node of the wireless communication network that is different from the physical node that includes the first S/PGW pair to provide a second S/PGW pair. In configurations, the second co-located S/PGW pair may be dedicated to provide voice services to mobile devices in the wireless communication network.

Abstract: Systems and methods for extended quality of service class identifier (QCI) masking are described. Subscriber accounts may be assigned an extended QCI value, which may be unsupported by a user device associated with the subscriber account. The communications network maintains a mapping between extended QCI values and standard QCI values. When a user device requests a new session with the communication network, the session may be established such that priority for the session within the communication network is based on the extended QCI value associated with the subscriber account, while the mapped standard QCI value is communicated to the user device in establishing the session.

Abstract: Systems, devices, and techniques described herein are directed to function selection based on utilization level in mobile networks. In particular, the systems, devices, and techniques can be implemented in fifth generation (5G) mobile networks to provide intelligent selection of a user plane function (UPF) based on utilization levels, capability information, and/or locality information. UPFs can provide indications of a utilization level to a network resource function (NRF), which can manage a database of the various utilizations levels of various UPFs. Based on a current, historical, or expected utilization of one or more UPFs, and/or based on the services requested and various locations of the services in a network, the NRF can select and provide, in part, a UPF to the UE, so that the UPF can carry user traffic associated with the UE.

Abstract: A method and system of detecting a source of an intrusion in a mobile network. A data packet is captured of a plane traffic of a user device that is using the mobile network. The data packet has a header portion and a payload. The payload is inspected for a security event. Upon determining a presence of the security event, a unique session identifier is extracted from the header portion of the data packet. A source of the security event is identified based on the extracted unique session identifier.