Abstract: A computer device may include a memory storing instructions and processor configured to execute the instructions to host a network function container that implements a microservice for a network function in a wireless communications network, wherein the network function container is deployed by a container orchestration platform; host a service proxy container associated with the network function container, wherein the service proxy container is deployed by the container orchestration platform; and configure the hosted service proxy container to apply a wireless network policy to the microservice for the network function. The processor may be further configured to intercept messages associated with the microservice for the network function using the configured service proxy container; and apply the wireless network policy to the intercepted messages using the configured service proxy container.

Abstract: A method, a network device, and a non-transitory computer-readable storage medium are described in relation to an EASDF secure service. The EASDF secure service may include a network-side service that may validate access and authorization to use a domain name system (DNS) resolver device, such as an edge application server discovery function. The network-side service may validate access and authorization of an end device based on tokens. The EASDF secure service may include an end device-side service that includes a token with a DNS query to the DNS resolver device. The end device-side service may further provide authorization regarding access and use of applications, networks, and application devices that host applications and/or assets by the end device at the end device. The end device-side service may determine access and/or authorization based on tokens and a validation procedure performed at the end device.

Abstract: Disclosure are techniques for allocating aggregation devices in a lawful intercept system. In an embodiment, a method includes maintaining a list of point of interception aggregation (PAG) functions in a network function repository function (NRF) of a cellular network upon instantiation of the PAG functions; receiving a lawful intercept (LI) request; querying the NRF to determine a respective PAG function; and associating a point of interception (POI) function with the respective PAG function.

Abstract: A device of a first network, to which a User Equipment (“UE”) is wirelessly connected, may receive, a request to access a service provided by a second network. The device may establish, based on the request, a user plane connection between the first network and the second network while the UE remains wirelessly connected to the first network. The first network may receive, from the UE, traffic that is associated with the service, and may output the received traffic to the second network via the user plane connection. The first and second networks may communicate via a connection, such as a tunnel, via respective User Plane Functions (“UPFs”) of the first and second networks. The UPFs may communicate via an N9 interface. The service may be provided by an edge computing device of the second network.

Abstract: In some implementations, a domain name system (DNS) server may receive, from a user equipment (UE), a DNS request message that indicates location information. The DNS server may select a node for the UE based on the location information. The DNS server may transmit, to the UE, an indication of the node.

Abstract: A system described herein may dynamically determine whether a User Equipment (“UE”) is authorized to access a given Local Area Data Network (“LADN”) based on dynamically determined factors, such as temporal factors, network load factors, registration or de-registration of the UE for the LADN, etc. Updates to such polices may be further used to determine whether the UE is authorized to access the LADN. Thus, the providing of services associated with a LADN may be more dynamic and based on additional factors than a determination of whether UE subscription information (e.g., as provided by a UE information repository) indicates that a given UE has subscribed to the LADN.

Abstract: Disclosure are techniques for allocating aggregation devices in a lawful intercept system. In an embodiment, a method includes maintaining a list of point of interception aggregation (PAG) functions in a network function repository function (NRF) of a cellular network upon instantiation of the PAG functions; receiving a lawful intercept (LI) request; querying the NRF to determine a respective PAG function; and associating a point of interception (POI) function with the respective PAG function.

Abstract: Systems and methods described herein enable network slice selection from different service providers using embedded Subscriber Identity Modules (eSIMs). A user equipment (UE) device stores a first eSIM associated with a first service provider of a first mobile network and a second eSIM associated with a second service provider of a second mobile network. The UE device also stores policy rules governing selection of the first eSIM and the second eSIM, wherein the policy rules limit use of second eSIM to a network slice on the second mobile network. The UE device initiates a session connection request associated with an application and directs the session connection request through one of the first eSIM or the second eSIM based on the policy rules.

Abstract: A device may receive performance requirements for a service, and may receive RAN factors that influence a RAN, core factors that influence a core network, and transport factors that influence a transport network. The device may determine a RAN capability to satisfy the performance requirements, and may determine a core capability to satisfy the performance requirements. The device may determine a transport capability to satisfy the performance requirements, and may determine RAN configuration settings, core configuration settings, and transport configuration settings based on the RAN capability, the core capability, and the transport capability, respectively. The device may generate a RAN SON based on the RAN configuration settings, a core SON based on the core configuration settings, and a transport SON based on the transport configuration settings. The device may create a network slice based service area based on the RAN SON, the core SON, and the transport SON.

Abstract: Systems and methods described herein provide for User Equipment (UE)-initiated authentication and authorization updates to Network Slice-Specific Authentication and Authorization (NSSAA). A network device in a core network receives a message from a user device outside of the core network, wherein the message includes a request to initiate a NSSAA procedure. The network device initiates the NSSAA procedure in response to the request. The systems and methods also provide for UE-initiated authorization revocation of NSSAA.

Abstract: A method, a network device, and a non-transitory computer-readable storage medium are described in relation to an EASDF secure service. The EASDF secure service may include a network-side service that may validate access and authorization to use a domain name system (DNS) resolver device, such as an edge application server discovery function. The network-side service may validate access and authorization of an end device based on tokens. The EASDF secure service may include an end device-side service that includes a token with a DNS query to the DNS resolver device. The end device-side service may further provide authorization regarding access and use of applications, networks, and application devices that host applications and/or assets by the end device at the end device. The end device-side service may determine access and/or authorization based on tokens and a validation procedure performed at the end device.

Abstract: A device in a network may be configured to: receive a request from a User Equipment (UE) device to establish a session with a network slice in the network; obtain a device type of the UE device; select, by using the device type, a Session Management Function (SMF), among a set of SMFs, which manages sessions for UE devices of the device type; and send a message to the selected SMF to create a session context. When the selected SMF receives the message, the selected SMF is configured to select a User Plane Function (UPF) based on the device type and cause the selected UPF to establish the session between the UE device and the network slice.

Abstract: In some implementations, a network device may receive a subscription request to subscribe to receive an event notification based on an event. The event may be associated with the network device receiving a request for discovery of a unified data management (UDM) device. The request for discovery of the UDM device may be based on an identifier of a user equipment (UE). The network device may transmit, based on the subscription request, an indication of a subscription to receive the event notification based on the event.

Abstract: A system comprises one or more devices. The devices may be configured to: receive information pertaining to a multicast broadcast service (MBS) session; identify, based on the information, User Equipment devices (UEs) that have joined the MBS session; identify at least two modulation schemes that are to be used by the UEs during the MBS session; receive multicast data from a network component; transmit, during the MBS session, the received multicast data to the UEs using the identified at least two modulation schemes.

Abstract: A network device may select a first user plane function for establishing, with a user equipment, a protocol data unit session with a single flow and may receive an application function trigger associated with a first new flow for a first application of the user equipment. The network device may cause a first traffic filter to be provided to the user equipment to enable the user equipment to route first application traffic, based on the first traffic filter, to a second user plane function and a first multi-access edge computing device associated with the second user plane function.

Abstract: A method, a device, and a non-transitory storage medium are described in which an uplink classifier and branching point service is provided. The service may include the management of user plane function devices or uplink classifier devices according to various architectures and connectivity among the user plane function devices or uplink classifier devices. The service may allow end devices situated in different locations to connect to different application service host devices and application service layer networks based on such management.

Abstract: A device may include a processor configured to establish a data traffic flow for a user equipment (UE) device and determine per flow descriptor attributes associated with the data traffic flow, wherein the per flow descriptor attributes identify at least a source, a destination, and a protocol associated with the data traffic flow. The processor may be further configured to determine at least one additional per flow descriptor attribute for the data traffic flow and send the per flow descriptor attributes and the at least one additional per flow descriptor attribute to a network exposure device of a core network, wherein the network exposure device is configured to communicate with servers outside the core network.

Abstract: A method, a network device, and a non-transitory computer-readable storage medium are described in relation to an integrated network slice encryption service. The integrated network slice encryption service may manage and provision encryption and/or decryption services associated with a third party and relative to a network slice and end device application associated with a service provider and application provider. The integrated network slice encryption service may provision end devices, core network devices, and application layer devices of an external network.

Abstract: A method, a device, and a non-transitory storage medium are described in which an uplink classifier and branching point service is provided. The service may include the management of user plane function devices or uplink classifier devices according to various architectures and connectivity among the user plane function devices or uplink classifier devices. The service may allow end devices situated in different locations to connect to different application service host devices and application service layer networks based on such management.

Abstract: A network device may select a first user plane function for establishing, with a user equipment, a protocol data unit session with a single flow and may receive an application function trigger associated with a first new flow for a first application of the user equipment. The network device may select a second user plane function for the first new flow and may create a first traffic filter for the first new flow. The network device may cause the first traffic filter to be provided to the user equipment so that first application traffic is routed, based on the first traffic filter, to the second user plane function and a first multi-access edge computing device associated with the second user plane function.