Abstract: In one embodiment, a method includes transmitting, to a multi-factor authentication (MFA) agent running on a user device, a request for a location of the user device, receiving, from the MFA agent, the location of the user device, wherein the location is determined by the MFA agent to be a most common location indicated by a plurality of location indicators, receiving, from a policy server, a location-based access policy, appending, to the location-based access policy, the location of the user device and determining, based on the location of the user device and the location-based access policy, whether to allow the user device to access one or more of: a remote service, a remote database, and a remote device.

Abstract: In one embodiment, a first entity of a 5G network identifies an action that the first entity would like performed in the 5G network. The first entity of the 5G network sends a signed Holochain transaction indicative of the action to a second entity of the 5G network. The second entity of the 5G network generates a mutually-signed Holochain transaction by signing the signed Holochain transaction. The first entity of the 5G network receives the mutually-signed Holochain transaction from the second entity of the 5G network. The first entity of the 5G network publishes the mutually-signed Holochain transaction to a distributed hash table.

Abstract: A method is performed by a destination node connected to wireless mesh routers configured to implement a source routing protocol in which the mesh routers propagate route request packets broadcasted by a source node to the destination node, the mesh routers add their addresses to accumulated paths in the route request packets, and add to the accumulated paths trust indicators that indicate whether mesh routers among the mesh routers from previous hops along the accumulated paths are trusted or compromised. The destination node receives the route request packets which convey the accumulated paths. The destination node determines trusted paths among the accumulated paths for which all of the mesh routers along the accumulated paths are trusted based on the trust indicators for the accumulated paths. The destination node determines a preferred path among the trusted paths, and forwards an indication of the preferred path to the source node.

Abstract: A quantum resistant method is provided for supporting user equipment (UE) roaming across APs/eNBs/gNBs belonging to various Wireless LAN Controllers (WLCs) in enterprise 5G and WiFi co-located deployments. The method may include initializing a SKS server in an electrical communication with a master WLC with a random post-quantum common secret seed (PQSEED) to generate a post-quantum pre-shared key (PQPSK) and a respective PQPSK-ID. The method may also include sending an encrypted PQSEED along with a PQPSK-ID to a second WLC. The method may further include joining AP (WiFi) to the master WLC using a CAPWAP/DTLS protocol. The method may further include sending the PQPSK-ID from the master WLC to the UE in an EAP success packet when the UE is associated with the AP (WiFi).

Abstract: In one embodiment, a first entity of a 5G network identifies an action that the first entity would like performed in the 5G network. The first entity of the 5G network sends a signed Holochain transaction indicative of the action to a second entity of the 5G network. The second entity of the 5G network generates a mutually-signed Holochain transaction by signing the signed Holochain transaction. The first entity of the 5G network receives the mutually-signed Holochain transaction from the second entity of the 5G network. The first entity of the 5G network publishes the mutually-signed Holochain transaction to a distributed hash table.

Abstract: This disclosure describes methods and systems for a service discovery gateway to interoperate with a client device. The service discovery gateway receives a first message, originating from the client device. The message comprising at least a service discovery query to the service discovery gateway. Based at least in part on receiving the first message, the service discovery gateway sends a second message comprising at least a first indication of at least one service provider corresponding to the service discovery query. The service discovery gateway determines a condition is met based at least in part on an elapsed time associated with the second message. The service discovery gateway sends a third message based at least in part on the determining, the third message comprising at least a second indication of at least one service provider corresponding to the service discovery query.

Abstract: This disclosure describes methods and systems to for a method for a first computing node to receive frequency information of a system clock. The first computing node receives the frequency information of the system clock from a second computing node at a physical layer of a connection between the first computing node and the second computing node. The first computing node also receives a message from the second computing node at above the physical layer of the connection between the first computing node and the second computing node. The message includes an attestation of the frequency information from which the first computing node may verify that the second computing node is a trusted source of the frequency information.

Abstract: A method is performed by a destination node connected to wireless mesh routers configured to implement a source routing protocol in which the mesh routers propagate route request packets broadcasted by a source node to the destination node, the mesh routers add their addresses to accumulated paths in the route request packets, and add to the accumulated paths trust indicators that indicate whether mesh routers among the mesh routers from previous hops along the accumulated paths are trusted or compromised. The destination node receives the route request packets which convey the accumulated paths. The destination node determines trusted paths among the accumulated paths for which all of the mesh routers along the accumulated paths are trusted based on the trust indicators for the accumulated paths. The destination node determines a preferred path among the trusted paths, and forwards an indication of the preferred path to the source node.

Abstract: This disclosure describes methods and systems for a service discovery gateway to interoperate with a client device. The service discovery gateway receives a first message, originating from the client device. The message comprising at least a service discovery query to the service discovery gateway. Based at least in part on receiving the first message, the service discovery gateway sends a second message comprising at least a first indication of at least one service provider corresponding to the service discovery query. The service discovery gateway determines a condition is met based at least in part on an elapsed time associated with the second message. The service discovery gateway sends a third message based at least in part on the determining, the third message comprising at least a second indication of at least one service provider corresponding to the service discovery query.

Abstract: This disclosure describes methods and systems to for a method for a first computing node to receive frequency information of a system clock. The first computing node receives the frequency information of the system clock from a second computing node at a physical layer of a connection between the first computing node and the second computing node. The first computing node also receives a message from the second computing node at above the physical layer of the connection between the first computing node and the second computing node. The message includes an attestation of the frequency information from which the first computing node may verify that the second computing node is a trusted source of the frequency information.