Abstract: Computer-implemented systems, methods, and computer-readable media are provided for managing access of a wireless device to a network based on one or more policies. In accordance with some embodiments, a request for authorization to associate a wireless device with a network is received. A policy associated with the network is retrieved from a storage device in response to the request. A determination is then made as to whether information included in the request satisfies a condition in the policy. If the information satisfies the condition, a response is transmitted granting authorization to associate the wireless device with the network. If the information does not satisfy the condition, a response is transmitted denying authorization to associate the wireless device with the network.

Abstract: Described herein are techniques for providing content aware quality of service (QoS) metadata for a Wi-Fi connection to nodes in a network by incorporating the QoS metadata into a packet header so that the nodes in the network can access the QoS metadata. The Wi-Fi access gateway receives a data packet for an internet protocol (IP) connection with a radio node across the network, wherein the radio node is configured to connect to one or more Wi-Fi devices located near the radio node The Wi-Fi access gateway classifies underlying data content of the IP connection to determine QoS metadata for the IP connection based on the underlying data content. The Wi-Fi access gateway incorporates the QoS metadata into a packet header of the data packet so that nodes in the network can access the QoS metadata for the IP connection.

Abstract: Described herein are techniques for providing carrier grade dynamic network address translation (NAT). The disclosed techniques allow for dynamic switching from regular NAT to network address ports translation (NAPT) based on system load. Under the NAPT mode, the disclosed techniques allow the ports of a public IP address to be broken up into contiguous blocks of ports (e.g., of the same size and/or of varying size) such that each block can be assigned to an associated (e.g., different) private IP address. For each new connection from the private IP address, if the port used is the next port sequentially, the NAT device can store an offset from the starting public/private IP address ports. If the port is not the next port sequentially, the network address translation device can associate a new block of public ports to the private IP address.

Abstract: Computer-implemented systems, methods, and computer-readable media are provided for assigning an IP address to a client device through an authentication process without needing to receive a dynamic host configuration protocol (DHCP) discover message to trigger the authentication process. In accordance with some embodiments, a message requesting assignment of an IP address to the client device is received, and a determination is made that identification information for the client device is not stored in a storage device. A request for authentication of the client device is then sent in response to the determination. An indication that the server authenticated the client device is received in response to the request, and the network address is assigned to the client device in response to the indication.

Abstract: A management system implemented in a cloud computing environment for automatically managing a plurality of Wi-Fi access points in a network can receive information from each of the plurality of Wi-Fi access points. The system can analyze the received information from each Wi-Fi access point to determine at least one operation condition of at least one Wi-Fi access and determine at least one new operation setting for the at least one Wi-Fi access point based on the analyzed information. The system can remotely configure the at least one Wi-Fi access point based on the at least one new operation setting.

Abstract: Described herein are techniques for providing a virtual Wi-Fi service using internet protocol (IP) connections between a central Wi-Fi access gateway (WAG) and one or more radio nodes. The WAG establishes an IP connection with a first radio node across a network, where the first radio node is configured to connect to one or more Wi-Fi devices located near the first radio node. The WAG receives network traffic over the IP connection, where the network traffic is associated with a Wi-Fi device from the one or more Wi-Fi devices connected to the first radio node. The WAG provides a virtual Wi-Fi service through the network to the Wi-Fi device based on the network traffic such that the Wi-Fi device connects to the virtual Wi-Fi service as if the virtual Wi-Fi service is a physical device locally connected to the first radio node.

Abstract: A method and system for automatically configuring and transforming a universal device into a feature specific device to provide desired network hardware functionality for a plurality of different conventionally single purpose devices. The universal device receives data configured for handling by a network hardware device capable of providing desired network hardware functionality. Based on the data received, the universal device identifies the desired network hardware functionality from network hardware functionalities. The universal device selects one or more virtual ports capable of providing the desired network hardware functionality. The universal device automatically configures and transforms itself into a feature specific device to provide the desired network hardware functionality by implementing the selected one or more virtual ports to handle the data received.

Abstract: A combination cellular and Wi-Fi hardware device has an IP interface that is configured to communicate with a first cellular network, a Wi-Fi network, or both. The combination cellular and Wi-Fi hardware device is configured to provide the network functionality (e.g., virtualized network cloud) that is required to facilitate communication and data flow between the IP interface and either a second cellular network or a cloud computing infrastructure network. The IF interface is accessed using a single IP address by a mobile device in wireless communication with the combination cellular and Wi-Fi hardware device. The single IP address is maintained when the mobile device switches between using the first cellular network and the Wi-Fi network to communicate with the combination cellular and Wi-Fi hardware device, and vice versa.

Abstract: Methods for steering the access technology selection by a mobile device in an overlay Small-Cell and Macro Network, such as UMTS, LTE, CDMA, or WIFI are disclosed. This selection determination is based on the observed, real-time correlated and estimated network congestion, content-awareness, application/service expectations, and other criteria. Methods and procedures to influence network selection or control currently selected networks by propagating real-time correlated and consolidated information on a plurality of Radio Access Technologies to Access Points, or modifying the list of alternative Radio Access Technologies available at a location using standards defined mechanisms and parameters are identified.

Abstract: Described herein are techniques for providing centrally managed Wi-Fi using internet protocol (IP) connections between a central Wi-Fi access gateway and one or more radio nodes. The Wi-Fi access gateway establishes an IP connection with a radio node across a wide area network, wherein the radio node is configured to wirelessly connect to one or more Wi-Fi devices located near the radio node. The Wi-Fi access gateway receives Layer 2 traffic over the IP connection, wherein the Layer 2 traffic is associated with a Wi-Fi device from the one or more Wi-Fi devices connected to the radio node. The Wi-Fi access gateway controls one or more Wi-Fi services for the Wi-Fi device based on the Layer 2 traffic so that the Wi-Fi access gateway can provide centrally managed Wi-Fi for the Wi-Fi device.

Abstract: Systems, methods, media, and means for hiding network topology are provided. In some embodiments, methods for hiding network topology are provided, the methods including: receiving a message including topology information from a sender; removing at least part of the topology information; associating the removed topology information with an identifier; saving the topology information; sending the message to a receiver; receiving a response from the receiver; retrieving the removed topology information based on the identifier; inserting the removed topology information into the response; and sending the response to the sender.

Abstract: Systems and methods for managing packet flows in a communication network are provided. Packet information can be cached on different levels and used to avoid external queries. The cache information can also be correlated with other types of information, such as location information, to be able to serve that information quicker than if one or more external queries were to be made. A demux manager can provide routing and session setup, by routing packets that already have a session to the session manager and assigning packets to a session manager if they are not already assigned to a session. The tiered architecture also provides scalability to many users and minimizes delays even during high call volumes because the load can be distributed well across the gateway's resources.

Abstract: The present invention identifies methods and procedures for correlating control plane and user plane data, consolidating and abstracting the learned and correlated data in a form convenient for minimizing and exporting to other network devices, such as those in the Core Network and the Access Network, or the origin server, CDN devices or client device. These correlation methods may use Control Plane information from a plurality of interfaces in the RAN, and User plane information from other interfaces in the RAN or CN. IF the device is deployed as an inline proxy, this information may be exported using in-band communication, such as HTTP extension headers in HTTP Request or Response packets, or another protocol header, such as the IP or GTP-U header field. Alternatively, this information can be exported out-of-band using a separate protocol between the RAN Transit Network Device (RTND) and the receiving device.

Abstract: Computerized systems and computerized methods are provided for internet protocol (IP) address allocation for Wi-Fi clients in a manner that avoids assigning a public IP address to a device if the device is not first activated to use services provided by the network. A private IP network address is allocated to a device, wherein the private IP network address is only valid for a predetermined period, and only allows the device to activate itself with the network instead of providing the device full access to the network. The device is monitored during the predetermined period so that if the device is activated to use the network during the predetermined period, the computing device assigns a public IP address to the device so that the device can access a full set of services provided by the network.

Abstract: Systems and methods are provided that allow inter-working between communication networks for the delivery of service to mobile nodes. A gateway is provided that communicates with a femto cell to extend service to an area that otherwise does not receive coverage from a service provider. The femto cell is a small scale base station used to provide coverage over a small area (such as a home or business), and connect to a home or enterprise network. The femto cell provides service for a mobile node and a gateway permits communication over a broadband network. The gateway integrates the mobile nodes connecting via a femto cell into the service provider's network. The gateway also allows provisioning of services and applications, control of service levels, and provides seamless handoffs to marco base stations and other types of access technologies such as Wi-Fi.

Abstract: Systems and methods are described for providing cloud-based virtual local networks. A computerized method for providing cloud-based virtual local networks includes receiving at a network gateway a request for a network address from a network switch, communicating with a user device management entity (uDME) server to authorize the network switch, receiving an authorization response from the uDME server for the network switch, receiving a network address pool at the network gateway from the uDME server, and creating at the network gateway a virtual home router containing a virtual home router context that is unique to the virtual home router and associated with the network address pool.

Abstract: Systems and methods are described for extending multicast/broadcast service to wide area networks. A computerized method includes receiving a multicast/broadcast discovery message from a client, encapsulating the multicast/broadcast discovery message at a gateway, forwarding the encapsulated multicast/broadcast discovery message to a multicast/broadcast server, receiving a multicast/broadcast discovery response message from the multicast/broadcast server with a server IP address, generating a server alias IP address for the multicast/broadcast server at the gateway, replacing the server IP address with the server alias IP address in the multicast/broadcast discovery response message, encapsulating the multicast/broadcast discovery response message at the gateway, and forwarding the encapsulated multicast/broadcast discovery response message to the client.

Abstract: Systems and methods for managing packet flows in a communication network are provided. Packet information can be cached on different levels and used to avoid external queries. The cache information can also be correlated with other types of information, such as location information, to be able to serve that information quicker than if one or more external queries were to be made. A demux manager can provide routing and session setup, by routing packets that already have a session to the session manager and assigning packets to a session manager if they are not already assigned to a session. The tiered architecture also provides scalability to many users and minimizes delays even during high call volumes because the load can be distributed well across the gateway's resources.

Abstract: Systems and methods for providing voice communications and data communications are provided, including: receiving an attach message from a mobile node indicating the mobile node can fallback from a first radio access technology to a second radio access technology and including location information identifying a location of the mobile node, the attach message received via the first radio access technology; sending a translated location updated message to a remote switching device; receiving a service request message from the mobile node, the service request message requesting initiation of a voice call, the service request message received via the first radio access technology; and based on the service request message and the indication that the mobile node can fallback to the second radio access technology, setting up the voice call with the mobile node via the second radio access technology.

Abstract: Systems and methods are provided that allow inter-working between communication networks for the delivery of service to mobile nodes. A gateway is provided that communicates with a femto cell to extend service to an area that otherwise does not receive coverage from a service provider. The femto cell is a small scale base station used to provide coverage over a small area (such as a home or business), and connect to a home or enterprise network. The femto cell provides service for a mobile node and a gateway permits communication over a broadband network. The gateway integrates the mobile nodes connecting via a femto cell into the service provider's network. The gateway also allows provisioning of services and applications, control of service levels, and provides seamless handoffs to marco base stations and other types of access technologies such as Wi-Fi.