Abstract: New intrusion detection system (IDS) rules to be deployed on an IDS that generates alerts based on an applied ruleset are accessed. A trial window that includes incorporating the new IDS rules into a candidate list to enable summarization and filtering of the alerts is started and the applied ruleset that includes existing IDS rules is supplemented with the candidate list that includes the new IDS rules. The applied ruleset is transmitted to a network sensor associated with the IDS upon the supplementation and alerts generated based on network events implicated by both the existing IDS rules and the new IDS rules in the applied ruleset are received from the IDS. Upon completion of the trial window, a set of alerts generated only by the new IDS rules in the applied ruleset are designated as suppressed alerts and a set of new IDS rules is eliminated from the applied ruleset upon determining that the set of new IDS rules generate a subset of alerts that exceed an alert threshold.

Abstract: A modification to an applied ruleset intended for consumption by intrusion detection systems (IDSs) is detected. A service event that is configured to push the applied ruleset to a set of test network sensors associated with the IDSs is triggered. A service subscribed to the service event updates the set of test network sensors with the applied ruleset and designates a configuration version to the applied ruleset. A notification is received from the set of test network sensors that the applied ruleset has been tested and is ready for deployment to other network sensors and a request is received to deploy the applied ruleset to a set of network sensors. A determination is made whether the request includes the configuration version designated to the applied ruleset by the service. If the request includes the configuration version designated to the applied ruleset, the request to deploy the applied ruleset to the set of network sensors is authorized.

Abstract: New intrusion detection system (IDS) rules to be deployed on an IDS that generates alerts based on an applied ruleset are accessed. A trial window that includes incorporating the new IDS rules into a candidate list to enable summarization and filtering of the alerts is started and the applied ruleset that includes existing IDS rules is supplemented with the candidate list that includes the new IDS rules. The applied ruleset is transmitted to a network sensor associated with the IDS upon the supplementation and alerts generated based on network events implicated by both the existing IDS rules and the new IDS rules in the applied ruleset are received from the IDS. Upon completion of the trial window, a set of alerts generated only by the new IDS rules in the applied ruleset are designated as suppressed alerts and a set of new IDS rules is eliminated from the applied ruleset upon determining that the set of new IDS rules generate a subset of alerts that exceed an alert threshold.

Abstract: Certain aspects of the present disclosure relate to methods and apparatus for cell DTX (Discontinuous Transmission) scheduling. A Base Station (BS) determines an operational schedule for the BS including at least one ON period and at least one OFF period, wherein the BS provides a reduced level of service during the at least one OFF period relative to the at least one ON period. The BS transmits the determined operational schedule. A User Equipment (UE) receives the BS's operational schedule and determines, based on the BS's operational schedule and its own operational schedule also including ON and OFF periods, whether to perform at least one service associated with the BS.

Abstract: A method of wireless communication by a user equipment (UE) without a radio resource control (RRC) connection to a base station includes receiving system information from the base station and transmitting a data communication to the base station over a control plane without establishing an RRC connection with the base station. A UE in an RRC suspended state may transmit a data communication to the base station over a user plane without resuming an RRC connection with the base station. The data communication may comprise data and UE identity information and/or a cause indication. A base station may indicate resources in the system information for the transmission of the data communication information and receive the data communication over the control plane without establishing an RRC connection with the UE or over a user plane without resuming an RRC connection with an RRC suspended UE.

Abstract: Methods and techniques are described for economically supporting a cluster of transmission points (TPs) that serve as positioning only beacons in a wireless network. A TP may broadcast a positioning reference signal (PRS) for positioning of a user equipment (UE) using the 3GPP OTDOA method for LTE wireless access. TPs are controlled by a TP Controller (TPC) that may function as an evolved NodeB (eNB) or Home eNB. A TPC may configure (or retrieve) PRS parameters in (or from) a controlled TP, may provide an accurate time reference to the TP and may be connected to the TP using a LAN or WLAN. A location server such as an E-SMLC may retrieve information for TPs, such as PRS parameters, TP location, and TP identity, from a controlling TPC, e.g. using the LPPa protocol. An E-SMLC may access a TPC via an MME to which the TPC may be connected.

Abstract: Certain aspects of the present disclosure relate to methods and apparatus for cell DTX (Discontinuous Transmission) scheduling. A Base Station (BS) determines an operational schedule for the BS including at least one ON period and at least one OFF period, wherein the BS provides a reduced level of service during the at least one OFF period relative to the at least one ON period. The BS transmits the determined operational schedule. A User Equipment (UE) receives the BS's operational schedule and determines, based on the BS's operational schedule and its own operational schedule also including ON and OFF periods, whether to perform at least one service associated with the BS.

Abstract: A method and apparatus for radio frequency (RF) fingerprint distribution is provided herein. In particular, when a mobile node wishes to access a restricted-access base station, the mobile node will access a database containing RF fingerprint identification information for the RF environment surrounding the restricted-access base station. When the RF environment matches the RF fingerprint, the mobile node will know that it can access the restricted-access base station.

Abstract: A cellular communication system comprises an access point (101) which supports an underlay cell of a first cell on an underlay frequency using another frequency. A proximity detector (113) detects user equipment (109) in response to a wireless transmission therefrom, which uses a different transmission technology from a transmission of the cellular communication system. In response to the proximity detection, the access point (101) temporarily transmits a pilot signal on the first cell frequency. The user equipment (109) is then switched to the access point (109) and the underlay frequency in response to a detection indication from the user equipment (109) indicating that the pilot signal has been detected. Following the switch the access point (101) terminates the transmission of the pilot signal.

Abstract: A method and apparatus is provided for controlling network access in a communication system comprising a packet data network and a circuit switched network. The packet data network receives, from the circuit switched network, a message indicating that the circuit switched network is congested. In response to receiving the indication, the packet data network broadcasts a message informing that access to one or more services of the circuit switched network is restricted. In various embodiments, the message received from the circuit switched network may include access class barring parameters identifying one or more classes of user equipment or service classes that are one or more of being barred from accessing the circuit switched network or whose access to the circuit switched network is being reduced and/or may identify one or more coverage areas or access nodes of the circuit switched network where access is being restricted.

Abstract: A method and apparatus for radio frequency (RF) fingerprint distribution is provided herein. In particular, when a mobile node wishes to access a restricted-access base station, the mobile node will access a database containing RF fingerprint identification information for the RF environment surrounding the restricted-access base station. When the RF environment matches the RF fingerprint, the mobile node will know that it can access the restricted-access base station.

Abstract: A base station (103) for a cellular communication system comprises a user equipment store (205) which provides a user equipment subset which identifies at least one user equipment (107) associated with the base station. An access processor (203) restricts access to the base station (103) to the user equipments (107) that belong to the user equipment subset. A path loss processor (209) determines a path loss estimate indication from at least one neighboring base station (101) to a cell supported by the base station (103). A parameter controller sets an operating parameter for the cell (105) in response to the path loss estimate indication. The invention may allow facilitated or improved introduction and/or configuration of restricted base stations supporting only specific user equipments. In many scenarios, a restricted base station may be configured depending on a path loss estimate such that improved performance may be achieved without any frequency planning for the base station.

Abstract: A cellular communication system comprises a Mobile Management Entity, MME, 117 and a load characteristic processor 203 that determines an MME load characteristic for base stations 101-107 in response to a measured operating characteristic thereof. A selection processor 207 selects a subset of base stations in response to the MME load characteristics, and a load monitor 205 determines an MME load level measure. A transmit controller 209 transmits a load reduction indication for the MME to the subset of base stations in response to the MME load level measure meeting a criterion. The base stations receiving the load reduction indication bias their operation towards a reduced load level of the MME.

Abstract: A cellular communication system comprises a base station which can to operate in a restricted mode wherein support is restricted to user equipments of a first associated set of user equipments, such as a Closed Subscriber Group. The base station comprises a profile unit which determines a first transmit power profile where the first transmit power profile is indicative of the base station operating in the restricted mode. The base station further comprises a transmitter for transmitting at least one common channel, such as a pilot signal or a broadcast signal, with a transmit power according to the first transmit power profile. User Equipments may measure the power profile to evaluate whether the base station employs restricted access. The invention may in particular reduce the number of access attempts to restricted base stations by non-eligible User Equipments.

Abstract: A system and method for resolving conflicting physical cell identification in a wireless communication system includes a first step 200-204 of detecting a physical cell identification conflict. A next step 206 includes correcting a neighbour relation table in response to the conflict. A next step 208 includes receiving an ambiguous physical cell identification. A next step 210 includes resolving the ambiguous physical cell identification.

Abstract: A system and method for physical cell identity assignment in a wireless communication system includes a first step 500 of starting up a new cell in the communication system. A next step 502 includes allocating a temporary operating frequency for the new cell. A next step 506 includes building a list of physical cell identity assignments being used by neighbouring cells. A next step 508 includes configuring the new cell with a permanent physical cell identity assignment that is not being used in the list.

Abstract: A system and method for physical cell identification in a wireless communication system includes a first step 500 of providing a set of temporary physical cell identifications for cells. A next step 502 includes identifying a new cell in the communication system. A next step 506 includes allocating a temporary physical cell identification for the new cell. A next step 510 includes changing the temporary physical cell identification of the new cell to a permanent physical cell identification.

Abstract: A cellular communication system comprises a base station which is arranged to support user equipments associated with a plurality of operators or Private Land Mobile Networks (PLMNs). The base station comprises a first unit determining a first operator/PLMN of the plurality of operators/PLMNs serving a first user equipment. A second unit then generates a first message comprising an indication of the first user equipment and an indication of the first operator/PLMN. The first message is transmitted to a management entity of a fixed network of the cellular communication system. The system may allow improved support for equipment sharing in cellular communication networks.

Abstract: A base station (103) for a cellular communication system comprises a user equipment store (205) which provides a user equipment subset which identifies at least one user equipment (107) associated with the base station. An access processor (203) restricts access to the base station (103) to the user equipments (107) that belong to the user equipment subset. A path loss processor (209) determines a path loss estimate indication from at least one neighbouring base station (101) to a cell supported by the base station (103). A parameter controller sets an operating parameter for the cell (105) in response to the path loss estimate indication. The invention may allow facilitated or improved introduction and/or configuration of restricted base stations supporting only specific user equipments. In many scenarios, a restricted base station may be configured depending on a path loss estimate such that improved performance may be achieved without any frequency planning for the base station.

Abstract: A cellular communication system comprises an access point (101) which supports an underlay cell of a first cell on an underlay frequency using another frequency. A proximity detector (113) detects user equipment (109) in response to a wireless transmission therefrom, which uses a different transmission technology from a transmission of the cellular communication system. In response to the proximity detection, the access point (101) temporarily transmits a pilot signal on the first cell frequency. The user equipment (109) is then switched to the access point (109) and the underlay frequency in response to a detection indication from the user equipment (109) indicating that the pilot signal has been detected. Following the switch the access point (101) terminates the transmission of the pilot signal.