Abstract: Systems and methods provide for provisioning network access using a tenant service set identifier (SSID) or an SSID of a specified duration and distributed authorization. A network management system can provision a wireless local area network (WLAN) and the SSID in an access point to enable a primary guest device to access the WLAN for a specified time period (e.g., a start time and end time). The network management system can cause the SSID and authentication data (e.g., authentication token, Pre-Shared Key (PSK), etc.) to be transmitted for receipt by the first client device. After the start time and in response to successfully authenticating the first client device, the first client device can authorize a second client device to access the WLAN. The network management system or the AP can disable access to the network via the SSID at the end time.

Abstract: A server receives a certificate signing request and onboarding information for an applicant device, and identifies a customer associated with the applicant device based on an applicant device identifier and a database identifiers associated with customers. The device determines a registered device associated with the customer is a trusted device, a location trust value for the applicant device based on a geolocation proximity between the applicant device and the trusted device, and an environment trust value for the applicant device based on a proximity in a network topology between the applicant device and the trusted device. The device further determines a trust score for the applicant device based on the location trust value and the environment trust value, and sends a signed certificate to the applicant device over the network when the trust score for the applicant device exceeds a threshold.

Abstract: A mobility management entity (MME) controls an enterprise fabric. The MME receives from a mobile device via a cellular network a request to initiate an attach procedure. In response, the MME acquires from the mobile device a unique equipment identifier of the mobile device. The MME generates an enterprise identity for the mobile device based on the unique equipment identifier, and registers the enterprise identity in the enterprise fabric. The MME signals to a user plane function of the cellular network that the mobile device has been registered, to trigger the user plane function to acquire an Internet Protocol (IP) address of the mobile device based on the enterprise identity. The MME receives from the user plane function the acquired IP address. The MME sends to the mobile device, through the cellular network, an attach accept message that includes the acquired IP address for use by the mobile device.

Abstract: A mobility management entity (MME) controls an enterprise fabric. The MME receives from a mobile device via a cellular network a request to initiate an attach procedure. In response, the MME acquires from the mobile device a unique equipment identifier of the mobile device. The MME generates an enterprise identity for the mobile device based on the unique equipment identifier, and registers the enterprise identity in the enterprise fabric. The MME signals to a user plane function of the cellular network that the mobile device has been registered, to trigger the user plane function to acquire an Internet Protocol (IP) address of the mobile device based on the enterprise identity. The MME receives from the user plane function the acquired IP address. The MME sends to the mobile device, through the cellular network, an attach accept message that includes the acquired IP address for use by the mobile device.

Abstract: Systems and methods provide for provisioning network access using a tenant service set identifier (SSID) or an SSID of a specified duration and distributed authorization. A network management system can provision a wireless local area network (WLAN) and the SSID in an access point to enable a primary guest device to access the WLAN for a specified time period (e.g., a start time and end time). The network management system can cause the SSID and authentication data (e.g., authentication token, Pre-Shared Key (PSK), etc.) to be transmitted for receipt by the first client device. After the start time and in response to successfully authenticating the first client device, the first client device can authorize a second client device to access the WLAN. The network management system or the AP can disable access to the network via the SSID at the end time.

Abstract: A mobility management entity (MME) controls an enterprise fabric. The MME receives from a mobile device via a cellular network a request to initiate an attach procedure. In response, the MME acquires from the mobile device a unique equipment identifier of the mobile device. The MME generates an enterprise identity for the mobile device based on the unique equipment identifier, and registers the enterprise identity in the enterprise fabric. The MME signals to a user plane function of the cellular network that the mobile device has been registered, to trigger the user plane function to acquire an Internet Protocol (IP) address of the mobile device based on the enterprise identity. The MME receives from the user plane function the acquired IP address. The MME sends to the mobile device, through the cellular network, an attach accept message that includes the acquired IP address for use by the mobile device.

Abstract: Embodiments include receiving one or more packets of a Wi-Fi calling session via a secure tunnel from a user device, where the user device is connected to a source network via a Wi-Fi access point. Embodiments also include determining whether the Wi-Fi calling session is a threat based, at least in part, on identifying an anomaly of at least one packet of the one or more packets. An action can be taken if the Wi-Fi calling communication is determined to be a threat. More specific embodiments include determining the at least one packet is associated with the Wi-Fi calling session by correlating information in the packet with control plane data of the Wi-Fi calling session. Further embodiments can include intercepting the one or more packets in a second secure tunnel established between an evolved packet data gateway and a service provider network associated with the user device.

Abstract: A server receives a certificate signing request and onboarding information for an applicant device, and identifies a customer associated with the applicant device based on an applicant device identifier and a database identifiers associated with customers. The device determines a registered device associated with the customer is a trusted device, a location trust value for the applicant device based on a geolocation proximity between the applicant device and the trusted device, and an environment trust value for the applicant device based on a proximity in a network topology between the applicant device and the trusted device. The device further determines a trust score for the applicant device based on the location trust value and the environment trust value, and sends a signed certificate to the applicant device over the network when the trust score for the applicant device exceeds a threshold.

Abstract: An example method is provided in one example embodiment and may include determining one or more outlier access points (APs) of a plurality of APs managed by a same service provider, wherein the determining is performed based on performance metrics calculated for each of the plurality of APs and wherein each outlier AP has a performance metric that fails to satisfy a performance metric threshold; identifying a Radio Frequency (RF) cluster to which each outlier AP belongs, wherein each outlier AP belongs to only one RF cluster; applying one or more optimization parameters to one or more APs for one or more RF clusters; and calculating new performance metrics for the plurality of APs to determine whether any of the plurality of APs fail to satisfy the performance metric threshold after the one or more optimization parameters are applied.

Abstract: An example method is provided in one example embodiment and may include determining one or more outlier access points (APs) of a plurality of APs managed by a same service provider, wherein the determining is performed based on performance metrics calculated for each of the plurality of APs and wherein each outlier AP has a performance metric that fails to satisfy a performance metric threshold; identifying a Radio Frequency (RF) cluster to which each outlier AP belongs, wherein each outlier AP belongs to only one RF cluster; applying one or more optimization parameters to one or more APs for one or more RF clusters; and calculating new performance metrics for the plurality of APs to determine whether any of the plurality of APs fail to satisfy the performance metric threshold after the one or more optimization parameters are applied.

Abstract: An example method is provided in one example embodiment and may include determining a presence of user equipment (UE) in relation to small cell radio(s) of a small cell network based on information obtained through the small cell network and one or more parallel networks; and adjusting transmit power for the small cell radio(s) based on the presence of UE in relation to the small cell radio(s). Another example method can include determining that a UE in cell paging channel mode has changed its selected macro cell radio; determining that the UE is allowed service on a small cell radio located in a vicinity of a macro cell coverage area of a selected macro cell radio; and adjusting a transmit power of the small cell radio based on a presence of the UE in a surrounding macro cell coverage area of the small cell radio.

Abstract: Systems and methods for small cell idle mode mobility include receiving, at a first small cell of a preconfigured cluster of small cells, a mobility area update request from a user equipment (UE). The method can also include registering location information of the UE with a small cell gateway, and retrieving a core network periodic timer for the UE from a mobility server. If certain conditions are met, the first small cell forwards the mobility area update request to a core network via the small cell gateway. Otherwise, the method can include the first small cell updating the location information of the UE with the mobility server, generating a locally-generated mobility area update accept message, and sending a locally generated mobility area update accept message to the UE along with a local periodic timer instructing the UE to send another mobility area update request when the local periodic timer expires.

Abstract: Systems and methods for small cell idle mode mobility include receiving, at a first small cell of a preconfigured cluster of small cells, a mobility area update request from a user equipment (UE). The method can also include registering location information of the UE with a small cell gateway, and retrieving a core network periodic timer for the UE from a mobility server. If certain conditions are met, the first small cell forwards the mobility area update request to a core network via the small cell gateway. Otherwise, the method can include the first small cell updating the location information of the UE with the mobility server, generating a locally-generated mobility area update accept message, and sending a locally generated mobility area update accept message to the UE along with a local periodic timer instructing the UE to send another mobility area update request when the local periodic timer expires.

Abstract: An example method is provided in one example embodiment and may include determining a presence of user equipment (UE) in relation to small cell radio(s) of a small cell network based on information obtained through the small cell network and one or more parallel networks; and adjusting transmit power for the small cell radio(s) based on the presence of UE in relation to the small cell radio(s). Another example method can include determining that a UE in cell paging channel mode has changed its selected macro cell radio; determining that the UE is allowed service on a small cell radio located in a vicinity of a macro cell coverage area of a selected macro cell radio; and adjusting a transmit power of the small cell radio based on a presence of the UE in a surrounding macro cell coverage area of the small cell radio.

Abstract: An example method is provided in one example embodiment and may include determining a presence of user equipment (UE) in relation to small cell radio(s) of a small cell network based on information obtained through the small cell network and one or more parallel networks; and adjusting transmit power for the small cell radio(s) based on the presence of UE in relation to the small cell radio(s). Another example method can include determining that a UE in cell paging channel mode has changed its selected macro cell radio; determining that the UE is allowed service on a small cell radio located in a vicinity of a macro cell coverage area of a selected macro cell radio; and adjusting a transmit power of the small cell radio based on a presence of the UE in a surrounding macro cell coverage area of the small cell radio.

Abstract: An example method is provided in one example embodiment and may include determining a presence of user equipment (UE) in relation to small cell radio(s) of a small cell network based on information obtained through the small cell network and one or more parallel networks; and adjusting transmit power for the small cell radio(s) based on the presence of UE in relation to the small cell radio(s). Another example method can include determining that a UE in cell paging channel mode has changed its selected macro cell radio; determining that the UE is allowed service on a small cell radio located in a vicinity of a macro cell coverage area of a selected macro cell radio; and adjusting a transmit power of the small cell radio based on a presence of the UE in a surrounding macro cell coverage area of the small cell radio.

Abstract: Embodiments include receiving one or more packets of a Wi-Fi calling session via a secure tunnel from a user device, where the user device is connected to a source network via a Wi-Fi access point. Embodiments also include determining whether the Wi-Fi calling session is a threat based, at least in part, on identifying an anomaly of at least one packet of the one or more packets. An action can be taken if the Wi-Fi calling communication is determined to be a threat. More specific embodiments include determining the at least one packet is associated with the Wi-Fi calling session by correlating information in the packet with control plane data of the Wi-Fi calling session. Further embodiments can include intercepting the one or more packets in a second secure tunnel established between an evolved packet data gateway and a service provider network associated with the user device.

Abstract: Systems and methods for small cell idle mode mobility include receiving, at a first small cell of a preconfigured cluster of small cells, a mobility area update request from a user equipment (UE). The method can also include registering location information of the UE with a small cell gateway, and retrieving a core network periodic timer for the UE from a mobility server. If certain conditions are met, the first small cell forwards the mobility area update request to a core network via the small cell gateway. Otherwise, the method can include the first small cell updating the location information of the UE with the mobility server, generating a locally-generated mobility area update accept message, and sending a locally generated mobility area update accept message to the UE along with a local periodic timer instructing the UE to send another mobility area update request when the local periodic timer expires.

Abstract: Systems and methods for small cell idle mode mobility include receiving, at a first small cell of a preconfigured cluster of small cells, a mobility area update request from a user equipment (UE). The method can also include registering location information of the UE with a small cell gateway, and retrieving a core network periodic timer for the UE from a mobility server. If certain conditions are met, the first small cell forwards the mobility area update request to a core network via the small cell gateway. Otherwise, the method can include the first small cell updating the location information of the UE with the mobility server, generating a locally-generated mobility area update accept message, and sending a locally generated mobility area update accept message to the UE along with a local periodic timer instructing the UE to send another mobility area update request when the local periodic timer expires.

Abstract: Systems and methods for small cell idle mode mobility include receiving, at a first small cell of a preconfigured cluster of small cells, a mobility area update request from a user equipment (UE). The method can also include registering location information of the UE with a small cell gateway, and retrieving a core network periodic timer for the UE from a mobility server. If certain conditions are met, the first small cell forwards the mobility area update request to a core network via the small cell gateway. Otherwise, the method can include the first small cell updating the location information of the UE with the mobility server, generating a locally-generated mobility area update accept message, and sending a locally generated mobility area update accept message to the UE along with a local periodic timer instructing the UE to send another mobility area update request when the local periodic timer expires.