Abstract: The present disclosure is directed to systems and techniques for providing zero-touch deployment (ZTD) and/or adaptive network traffic control policy management for deployed Internet-of-Things (IoT) devices. In one example, the systems and techniques can include obtaining a network traffic policy from a network traffic control service and obtaining one or more data usage policies from an IoT hub. Data usage measurements can be obtained for a plurality of IoT devices. One or more IoT device traffic policies can be automatically generated based at least in part on the network traffic policy, the one or more data usage policies, and the data usage measurements. The IoT device traffic policies can be used to provision or configure at least a portion of the plurality of IoT devices.

Abstract: Disclosed are techniques for dynamically creating policy-based intermediate certificates to sign device certificates of devices deployed in an enterprise network using ZTD. In one aspect, a method includes receiving network policy information to be used for creating policy-based intermediate certificates, each one of the policy-based intermediate certificates being used by a network controller for signing devices certificates of a different cluster of connected IoT devices; receiving, from an IoT device, a request for registration with the network controller; based on identifying information of the IoT device included in the request, determining one of the policy-based intermediate certificates to sign a device certificate of the loT device; and transmitting, to the IoT device, the device certificate signed using the one of the policy-based intermediate certificates.

Abstract: The present disclosure is directed to systems and techniques for providing zero-touch deployment (ZTD) and/or adaptive network traffic control policy management for deployed Internet-of-Things (IoT) devices. In one example, the systems and techniques can include obtaining a network traffic policy from a network traffic control service and obtaining one or more data usage policies from an IoT hub. Data usage measurements can be obtained for a plurality of IoT devices. One or more IoT device traffic policies can be automatically generated based at least in part on the network traffic policy, the one or more data usage policies, and the data usage measurements. The IoT device traffic policies can be used to provision or configure at least a portion of the plurality of IoT devices.

Abstract: A method in which an enterprise switches its devices to various federated network slices across operators based on cost, time, quality, and/or availability parameters defined in flexible rules managed by the enterprise. The method includes obtaining, by a controller of an enterprise, one or more parameters of a device served by a network slice of a core network. The method further includes, based on the one or more parameters of the device and one or more rules, determining, by the controller, whether a triggering event associated with a slice reselection occurred and based on the triggering event and the one or more rules, selecting, by the controller, a federated network slice from among a plurality of network slices provided by a plurality of core networks. The method further includes the controller causing the device to switch from the network slice to the federated network slice.

Abstract: The present disclosure is directed to techniques for streamlining the process of configuring IoT devices during their onboarding to a network by eliminating the need for pre-provisioning IoT devices with zero-touch deployment (ZTD) specific configurations during manufacturing. In one aspect, a method includes receiving, from an IoT device connected to a ZTD service, a message for establishing a connection to the ZTD service; provisioning, at the zero-touch deployment service, the IoT device with ZTD specific configurations; and completing, at the zero-touch deployment service, initial bootstrapping of the IoT device to establish the connection to the ZTD service using the ZTD specific configurations.

Abstract: The present disclosure is directed to techniques for bootstrapping and certificate management of Internet of Things (IoT) devices using a zero-touch deployment (ZTD) service. In one aspect, a method of managing Internet of Thing (IoT) devices includes receiving, at an IoT management component, a bootstrapping request from an IoT device, the request including location information of the IoT device; receiving, from a controller, credential information for the IoT device; generating a policy for bootstrapping the IoT device based at least on the location information and the credential information; and sending the policy to the IoT device for the IoT device to complete the bootstrapping.

Abstract: The present disclosure is directed to systems and techniques for providing zero-touch deployment (ZTD) and/or adaptive network traffic control policy management for deployed Internet-of-Things (IoT) devices. In one example, the systems and techniques can include obtaining a network traffic policy from a network traffic control service and obtaining one or more data usage policies from an IoT hub. Data usage measurements can be obtained for a plurality of IoT devices. One or more IoT device traffic policies can be automatically generated based at least in part on the network traffic policy, the one or more data usage policies, and the data usage measurements. The IoT device traffic policies can be used to provision or configure at least a portion of the plurality of IoT devices.

Abstract: In one example, a charging filtering function may obtain a request for one or more rules that control whether or when one or more charging data records associated with a user equipment are to be provided to one or more billing systems. The request includes an identification of the user equipment. Based on the identification of the user equipment, the charging filtering function may identify the one or more rules. The charging filtering function may provide the one or more rules to control whether or when the one or more charging data records associated with the user equipment are to be provided to the one or more billing systems.

Abstract: A method in which an enterprise switches its devices to various federated network slices across operators based on cost, time, quality, and/or availability parameters defined in flexible rules managed by the enterprise. The method includes obtaining, by a controller of an enterprise, one or more parameters of a device served by a network slice of a core network. The method further includes, based on the one or more parameters of the device and one or more rules, determining, by the controller, whether a triggering event associated with a slice reselection occurred and based on the triggering event and the one or more rules, selecting, by the controller, a federated network slice from among a plurality of network slices provided by a plurality of core networks. The method further includes the controller causing the device to switch from the network slice to the federated network slice.

Abstract: In one example, a charging filtering function may obtain a request for one or more rules that control whether or when one or more charging data records associated with a user equipment are to be provided to one or more billing systems. The request includes an identification of the user equipment. Based on the identification of the user equipment, the charging filtering function may identify the one or more rules. The charging filtering function may provide the one or more rules to control whether or when the one or more charging data records associated with the user equipment are to be provided to the one or more billing systems.

Abstract: A method in which an enterprise switches its devices to various federated network slices across operators based on cost, time, quality, and/or availability parameters defined in flexible rules managed by the enterprise. The method includes obtaining, by a controller of an enterprise, one or more parameters of a device served by a network slice of a core network. The method further includes, based on the one or more parameters of the device and one or more rules, determining, by the controller, whether a triggering event associated with a slice reselection occurred and based on the triggering event and the one or more rules, selecting, by the controller, a federated network slice from among a plurality of network slices provided by a plurality of core networks. The method further includes the controller causing the device to switch from the network slice to the federated network slice.

Abstract: Methods are provided for switching networks for a mobile device using location based predictive algorithm. In these methods, a controller obtains a first network coverage map of a first network and a second network coverage map of a second network. The first network and the second network are configured to provide network connectivity to a mobile device. The method further includes the controller tracking the mobile device along a path over which the mobile device travels while the mobile device is connected to the first network, determining that a predicted future location along the path of the mobile device is not serviced by the first network and is serviced by the second network, and causing the mobile device to switch from the first network to the second network based on the mobile device reaching the predicted future location.

Abstract: Methods are provided for switching networks for a mobile device using location based predictive algorithm. In these methods, a controller obtains a first network coverage map of a first network and a second network coverage map of a second network. The first network and the second network are configured to provide network connectivity to a mobile device. The method further includes the controller tracking the mobile device along a path over which the mobile device travels while the mobile device is connected to the first network, determining that a predicted future location along the path of the mobile device is not serviced by the first network and is serviced by the second network, and causing the mobile device to switch from the first network to the second network based on the mobile device reaching the predicted future location.

Abstract: In one embodiment, a device receives a plurality of network alerts over a time frame. A sliding transaction window is used across the time frame to associate each network alert occurring within the transaction window with one or more transactions. A pruning test is applied to subsets of the plurality of network alerts, with the network alerts in a given subset being associated with the same transaction. The pruning test is based in part on the number of co-occurrences of network alerts in a given subset for different transaction windows. The subsets of network alerts are assigned to network alert clusters based on the applied pruning test. The network alerts are then joined within a network alert cluster to identify the largest grouping of network alerts that pass the pruning test. A notification that the identified grouping of network alerts is associated with the same transaction is also provided.

Abstract: In one embodiment, a device receives a plurality of network alerts over a time frame. A sliding transaction window is used across the time frame to associate each network alert occurring within the transaction window with one or more transactions. A pruning test is applied to subsets of the plurality of network alerts, with the network alerts in a given subset being associated with the same transaction. The pruning test is based in part on the number of co-occurrences of network alerts in a given subset for different transaction windows. The subsets of network alerts are assigned to network alert clusters based on the applied pruning test. The network alerts are then joined within a network alert cluster to identify the largest grouping of network alerts that pass the pruning test. A notification that the identified grouping of network alerts is associated with the same transaction is also provided.