Abstract: In one embodiment, a method includes determining first configuration information for configuring a first user plane device of a first network slice associated with a control plane device, generating a first configuration identifier based on the first configuration information, sending the first configuration identifier and the first configuration information, releasing an association with the first user plane device, receiving a first request to establish the association from the first user plane device comprising a first local configuration identifier, and determining whether the first user plane device is configured using second configuration information by comparing the first local configuration identifier and a second configuration identifier generated based on the second configuration information, where the second configuration information is latest configuration information for the first user plane device.

Abstract: Presented herein are certificate-based techniques through which a Radio Interface Unit may be securely onboarded to a service provider network. In one example, a method is provided that includes obtaining, by a Dynamic Host Configuration Protocol (DHCP) server, an address assignment request for the, wherein the address assignment request comprises a vendor device certificate, a signed nonce, a non-encrypted serial number for the RIU, a signed serial number for the RIU, and a vendor identifier; validating the vendor device certificate, the signed nonce, and the signed serial number for the RIU based on a vendor root certification authority certificate; validating the non-encrypted serial number for the RIU; and generating an address assignment response based on validating the non-encrypted serial number for the RIU, the vendor device certificate, the signed nonce, and the signed serial number for the RIU.

Abstract: In one embodiment, a method includes determining a first configuration information for configuring a user plane device of the first network slice associated with the control plane device, generating a first configuration identifier based on the first configuration information, sending, to the user plane device of the first network slice, the first configuration identifier and the first configuration information, receiving, from the user plane device of the first network slice, a second configuration identifier, wherein the second configuration identifier is generated by the user plane device of the first network slice based on the first configuration information received from the control plane device, and verifying, by comparing the first configuration identifier and the second configuration identifier, that the user plane device of the first network slice is configured using the first configuration information.

Abstract: A network function (NF) entity in a communication network receives User Plane Function (UPF) registration information for a plurality of UPFs, the registration information including a respective network attribute for each UPF. The NF entity associates each UPF with a corresponding network based on the respective network attribute, and map one or more User Equipment (UE) to the corresponding network based on a security policy to create a UE-to-network table. The NF further receives a request to establish a session for a subsequent UE, the request including a subsequent UE identifier, and determine an access permission for the subsequent UE to access the corresponding network based on the subsequent UE identifier and the UE-to-network table. The NF selects one UPF from the plurality of UPF to service the session for the subsequent UE based on the access permission, and an association between the one UPF and the corresponding network.

Abstract: Blockchain technology is used to provide distributed authentication, entitlements and trust among different virtual Radio Access Network (vRAN) elements. An enterprise blockchain with interfaces enables multi-vendor vRAN deployment across multiple service providers. In another embodiment, a method is provided for authenticating entities in a virtualized radio access network to ensure various entitles are in fact entitled to participate in various radio access network operations.

Abstract: When a packet data session is established for a user equipment (UE), a comparative assessment of load information factors from different sets of load information factors associated with a plurality of user plane function (UPF) instances may be performed. Each set of load information factors of a UPF instance may include predicted load information factors indicative of a predicted load at the UPF instance. A UPF instance may be selected for the packet data session of the UE based on the comparative assessment. The comparative assessment may additionally consider a predicted load contribution of the packet data session to be established for the UE. A data analytics function may utilize a model (e.g. a multiple linear regression model) to calculate predicted load contribution factors, where the model is derived based on historical usage data from previous sessions of one or more UEs, for example, data from charging data records (CDRs).

Abstract: A solution for selecting an optimal user Plane entity (with Control and User Plane Separation (CUPS)) per UE during seamless roaming. In one embodiment, a method is provide that is performed by a control plane entity in a mobile core network that supports inter public land mobile network (PLMN) roaming among two or more PLMNs. The method includes obtaining a create session request from an entity in a second PLMN to which a user equipment has roamed from a first PLMN; selecting a particular user plane entity among a plurality of user plane entities based on one or more user equipment related parameters; and establishing a session with the particular user plane entity to serve user plane traffic in the mobile core network for the user equipment.

Abstract: A system is provided that includes one management cluster to manage network function virtualization infrastructure (NFVI) resources lifecycle in more than one edge POD locations, where resources include hardware and/or software, and where software resources lifecycle includes software development, upgrades, downgrades, logging, monitoring etc. Methods are provided for decoupling storage from compute and network functions in each virtual machine (VM)-based NFVI deployment location and moving it to a centralized location. Centralized storage could simultaneously interact with more than one edge PODs, and the security is built-in with periodic key rotation. Methods are provided for increasing NFVI system viability by dedicating (fencing) CPU core pairs for specific controller operations and workload operations, and sharing the CPU cores for specific tasks.

Abstract: Blockchain technology is used to provide distributed authentication, entitlements and trust among different virtual Radio Access Network (vRAN) elements. An enterprise blockchain with interfaces enables multi-vendor vRAN deployment across multiple service providers. In another embodiment, a method is provided for authenticating entities in a virtualized radio access network to ensure various entitles are in fact entitled to participate in various radio access network operations.

Abstract: A system and method are provided to derive Virtual Network Function (VNF) infrastructure and networking requirements from the virtual network function descriptor and network services descriptor definitions (extended). This results in a fully automated system for VIM creation and VNF onboarding in order to prepare the infrastructure for VNF instantiation.

Abstract: In one example, a Network Functions Virtualization Orchestrator (NFVO) obtains a radio service descriptor defining communication parameters for a radio in a virtual Radio Access Network (vRAN). Based on the radio service descriptor, the NFVO determines whether a virtual Distributed Unit (vDU) that is configured in accordance with the communication parameters and a virtual Centralized Unit (vCU) that is configured in accordance with the communication parameters are already instantiated in the vRAN. If it is determined that the vDU or the vCU is not already instantiated, the NFVO automatically instantiates the vDU or the vCU in the vRAN.

Abstract: Techniques for adaptive thresholding are provided. A first data point in a data stream is received, and a first plurality of data points from the data stream is identified, where the first plurality of data points corresponds to a timestamp associated with the first data point. At least a first cluster is generated for the first plurality of data points, and a predicted value for the first data point is generated based at least in part on data points in the first cluster. A deviation is computed between the predicted value for the first data point and an actual value for the first data point. Upon determining that the deviation exceeds a first predefined threshold, the first data point is labeled as anomalous, and reallocation of computing resources is facilitated based on labeling the first data point as anomalous.

Abstract: Techniques associated with localizing data traffic for a time sensitive network within a virtualized radio access network are provided. In one embodiment, a method includes determining that a user equipment (UE) is associated with a time sensitive network; and localizing data traffic for the UE within a virtualized radio access network based on determining that the data traffic for the UE can be localized at one centralized user plane component of the virtualized radio access network for the time sensitive network. The data traffic can be Layer-2 data traffic or unstructured data traffic.

Abstract: Techniques for adaptive thresholding are provided. A first data point in a data stream is received, and a first plurality of data points from the data stream is identified, where the first plurality of data points corresponds to a timestamp associated with the first data point. At least a first cluster is generated for the first plurality of data points, and a predicted value for the first data point is generated based at least in part on data points in the first cluster. A deviation is computed between the predicted value for the first data point and an actual value for the first data point. Upon determining that the deviation exceeds a first predefined threshold, the first data point is labeled as anomalous, and reallocation of computing resources is facilitated based on labeling the first data point as anomalous.

Abstract: Techniques and mechanisms for asynchronously initiating online charging triggers in mobile networks are described. A control plane gateway or “GW-C” may obtain from a mobility management entity (MME) a create session request associated with an attach request for a user equipment (UE). The GW-C may send to an online charging system (OCS) a Gy credit-control request for requesting a quota of units (e.g. a resource usage quota) associated with a subscriber of the UE. Prior to sending the Gy credit-control request or obtaining a Gy credit-control answer, the GW-C may send to the MME a create session response which prompts an attach accept or reject of the attach request. The Gy credit-control request may be sent to the OCS during an attach procedure associated with the attach request for the UE or, alternatively, in response to receiving a user data packet of the session as a notification.

Abstract: Techniques are provided to communicate the serving Radio Access Network (RAN) element information to the packet core network to enable operators to provide differential treatment for fifth generation (5G) subscribers. The techniques presented herein fill these gaps and help drive faster adoption of Dual Connectivity New Radio (DCNR) subscribers by service operator to offer customized policy and quota management to address different business requirements in the 5G Non-Stand Alone (NSA) architecture.

Abstract: When a packet data session is established for a user equipment (UE), a comparative assessment of load information factors from different sets of load information factors associated with a plurality of user plane function (UPF) instances may be performed. Each set of load information factors of a UPF instance may include predicted load information factors indicative of a predicted load at the UPF instance. A UPF instance may be selected for the packet data session of the UE based on the comparative assessment. The comparative assessment may additionally consider a predicted load contribution of the packet data session to be established for the UE. A data analytics function may utilize a model (e.g. a multiple linear regression model) to calculate predicted load contribution factors, where the model is derived based on historical usage data from previous sessions of one or more UEs, for example, data from charging data records (CDRs).

Abstract: Techniques for adaptive thresholding are provided. First and second data points are received. A plurality of data points are identified, where the plurality of data points corresponds to timestamps associated with the first and second data points. At least one cluster is generated for the plurality of data points based on a predefined cluster radius. Upon determining that the first data point is outside of the cluster, the first data point is labeled as anomalous. A predicted value is generated for the second data point, based on processing data points in the cluster using a machine learning model, and a deviation between the predicted value and an actual value for the second data point is computed. Upon determining that the deviation exceeds a threshold, the second data point is labeled as anomalous. Finally, computing resources are reallocated, based on at least one of the anomalous data points.

Abstract: In one example, a User Plane Function (UPF) in a Visited Public Land Mobile Network (V-PLMN) that includes a first network and a second network obtains network traffic from user equipment via the first network. The UPF provides the network traffic obtained via the first network to a data network with an Internet Protocol (IP) address allocated to the network traffic obtained from the user equipment. In response to a handover of the user equipment from the first network to the second network, the UPF obtains the network traffic from the user equipment via the second network. The UPF provides the network traffic obtained via the second network to the data network with the IP address.

Abstract: A network function (NF) entity in a communication network receives User Plane Function (UPF) registration information for a plurality of UPFs, the registration information including a respective network attribute for each UPF. The NF entity associates each UPF with a corresponding network based on the respective network attribute, and map one or more User Equipment (UE) to the corresponding network based on a security policy to create a UE-to-network table. The NF further receives a request to establish a session for a subsequent UE, the request including a subsequent UE identifier, and determine an access permission for the subsequent UE to access the corresponding network based on the subsequent UE identifier and the UE-to-network table. The NF selects one UPF from the plurality of UPF to service the session for the subsequent UE based on the access permission, and an association between the one UPF and the corresponding network.