Abstract: In one example, a server obtains, from a device having an embedded Subscriber Identification Module (eSIM), a unique identifier of the eSIM. The server validates the device based on the unique identifier of the eSIM. The server provides, to the device, a unique credential for a profile of the eSIM. The profile of the eSIM corresponds to a network of an enterprise. The server provides, to a credential database, the unique credential for the profile of the eSIM. The credential database including the unique credential for the profile of the eSIM indicates that the device is permitted to access the network of the enterprise.

Abstract: Systems and methods are provided for receiving, at an enterprise network, first authentication data of a citizens broadband radio service (CBRS)-enabled device, receiving, at the enterprise network, second authentication data of the CBRS-enabled device, the first authentication data of the CBRS-enabled device being a different type of authentication data than the second authentication data of the CBRS-enabled device, determining a class of the CBRS-enabled device based on the first authentication data and the second authentication data of the CBRS-enabled device, determining a network segment for the CBRS-enabled device based on the class of the CBRS-enabled device, and providing access to the CBRS-enabled device based on the determining of the network segment for the CBRS-enabled device.

Abstract: Technologies for systems, methods and computer-readable storage media for reducing the time to complete authentication during inter-technology handovers by reusing security context between 5G and Wi-Fi. Assuming, that the administrative domain for Wi-Fi and 5G match (and belongs to an enterprise for instance), using an already established security context in one technology to do fast authentication in the other technology during handover. Specifically, if UE is on Wi-Fi and handing over to 5G, use its Wi-Fi security context to do fast security setup in 5G, which includes a corresponding method for use when the UE goes from 5G to Wi-Fi.

Abstract: Systems and methods are provided for providing, by a user equipment, a short message service (SMS) message to initiate Wi-Fi onboarding to a mobile network, receiving, by the user equipment, a binary SMS message including a request for a certificate signing request by a server, generating, by the user equipment, the certificate signing request based on the request for the certificate signing request of the binary SMS message, providing, by the user equipment, the certificate signing request to the mobile network, and receiving, by the user equipment, a binary SMS message including Wi-Fi login data based on the certificate signing request provided to the mobile network.

Abstract: Systems and methods are provided for user equipment (UE) multi-factor authentication enrollment. An example method can include receiving, by a first mobile network, an authentication request from a UE; performing a first authentication of the UE at the first mobile network; based on a determination that the UE has not been onboarded at a second mobile network, initiating, by the first mobile network, enrollment of the UE with the second mobile network for additional authentication of the UE with the second mobile network, wherein the first mobile network is separate from the second mobile network; and after the enrollment of the UE with the second mobile network, coordinating, by the first mobile network, a second authentication of the UE with the second mobile network.

Abstract: Technologies for attestation techniques, systems, and methods to that reduces handover delay between LTE/5G eNBs by leveraging Wi-Fi for determining UE location. The systems, methods and computer-readable storage media disclosed here in may operate in the following deployments: the User Equipment (UE) is connected to enterprise Wi-Fi system in addition to being connected to private LTE/5G; enterprise Wi-Fi system having indoor location enabled; and the location system provides an API to give indoor location of the UE; and wherein Wi-Fi AP and LTE eNBs can communicate with each other, which can be accomplished in one instance wherein the two are co-located.

Abstract: Systems, methods, and computer-readable media for an integrated Wi-Fi Access Point and cellular network Radio Unit (RU) include a communication system interfacing with a wired network for communicating Wi-Fi traffic and cellular network traffic, the communication system integrating a Wi-Fi Access Point (AP) with a cellular network Radio Unit (RU). The Wi-Fi traffic and cellular network traffic can be processed in the communication system. The communication system can interface with at least one programmable Radio Frequency (RF) front end configured for wireless communication over one or more frequency bands for Wi-Fi traffic and one or more frequency bands for cellular network traffic (e.g., 5G, LTE, Wi-Fi).

Abstract: The present disclosure is directed to mapping indoor user movement using a combination of Wi-Fi and 60 GHz sensing. The methods include detecting, via a Wi-Fi access point, a wireless device associated with a first user, wherein the Wi-Fi access point is configured to determine location information and a device signature associated with the wireless device; transmitting the location information of the wireless device to a 11ay sensor; detecting the first user, via the 11ay sensor, based on the location information of the wireless device; creating a user signature associated with the first user, wherein the user signature is based on one or more physical characteristics of the first user detected by the 11ay sensor; and using the device signature associated with the wireless device and the user signature associated with the first user to subsequently identify the first user.

Abstract: Certain embodiments disclose systems and methods for creating a user private network (UPN) based on 11ay technology. Methods of the present disclosure include creating a personal basic service set (PBSS) having a service device and one or more 11ay devices, the service device configured to wirelessly communicate with the one or more 11ay devices in the PBSS, creating a UPN having an access point located in communicative proximity with the service device, and associating at least one 11ay device of the one or more 11ay devices with the UPN, wherein the at least one 11ay device is configured to establish a wireless connection with the one or more 11ay devices using the service device when within a coverage area of the PBSS, and to establish a wireless connection with the one or more 11ay devices using the access point when outside the coverage area of the PBSS.

Abstract: An access point for a private network onboards a wireless device obtaining a connection request from the wireless device and detecting a standardized identifier that indicates the wireless device is unprovisioned for access to the private network. The access point disables an authentication protocol for granting access to the wireless device on the private network and limits access of the private network by the wireless device to accessing a provisioning server. The access point provides a connection response to the wireless device that indicates limited access to the private network.

Abstract: In one example, a user equipment (UE) has a non-Third Generation Partnership Project (non-3GPP) radio transceiver for communication in a local private non-3GPP wireless network and a 3GPP radio transceiver for communication in a 3GPP network, where the 3GPP network may be a public 3GPP network or a local private 3GPP network operative in a shared spectrum according to a system for shared spectrum access. Initially, the UE may operate the 3GPP radio transceiver for communication in the public 3GPP network, without performing regular scanning for the local private 3GPP network. In a scan operation using the non-3GPP radio transceiver, the UE may receive from a non-3GPP access point of the local private non-3GPP wireless network one or more messages including one or more information elements. If an information element indicates presence of the local private 3GPP network, the UE may identify and register with the local private 3GPP network.

Abstract: Wireless configuration diagnosis framework may be provided. A label for a choreography comprising a sequence of frames to be exchanged between a first access point and a first client device may be created by a controller. A reference footprint for the choreography may be created. The reference footprint may comprise, for each frame of the sequence of frames, a frame type, an information element for the frame type, and a bit value for the information element. The reference footprint may be sent to the first access point. A plurality of frames exchanged between the first access point and the first client device associated with the choreography and an outcome for the choreography may be received from the first access point in response to the choreography being triggered.

Abstract: Techniques are described for providing wireless network connectivity using a distributed mobility management functionality. In one example, each of a plurality of on-premise access points co-locate a mobility management functionality and a packet routing and forwarding functionality. Each of the plurality of on-premise access points obtain, from user equipment, a request to wirelessly connect to the on-premise access point. Each of the plurality of on-premise access points provide the user equipment with wireless network connectivity using the co-located mobility management functionality and the packet routing and forwarding functionality.

Abstract: Techniques are described for providing wireless network connectivity using a distributed mobility management functionality. In one example, each of a plurality of on-premise access points co-locate a mobility management functionality and a packet routing and forwarding functionality. Each of the plurality of on-premise access points obtain, from user equipment, a request to wirelessly connect to the on-premise access point. Each of the plurality of on-premise access points provide the user equipment with wireless network connectivity using the co-located mobility management functionality and the packet routing and forwarding functionality.

Abstract: A mobility management entity (MME) controls an enterprise fabric. The MME receives from a mobile device via a cellular network a request to initiate an attach procedure. In response, the MME acquires from the mobile device a unique equipment identifier of the mobile device. The MME generates an enterprise identity for the mobile device based on the unique equipment identifier, and registers the enterprise identity in the enterprise fabric. The MME signals to a user plane function of the cellular network that the mobile device has been registered, to trigger the user plane function to acquire an Internet Protocol (IP) address of the mobile device based on the enterprise identity. The MME receives from the user plane function the acquired IP address. The MME sends to the mobile device, through the cellular network, an attach accept message that includes the acquired IP address for use by the mobile device.

Abstract: A mobility management entity (MME) controls an enterprise fabric. The MME receives from a mobile device via a cellular network a request to initiate an attach procedure. In response, the MME acquires from the mobile device a unique equipment identifier of the mobile device. The MME generates an enterprise identity for the mobile device based on the unique equipment identifier, and registers the enterprise identity in the enterprise fabric. The MME signals to a user plane function of the cellular network that the mobile device has been registered, to trigger the user plane function to acquire an Internet Protocol (IP) address of the mobile device based on the enterprise identity. The MME receives from the user plane function the acquired IP address. The MME sends to the mobile device, through the cellular network, an attach accept message that includes the acquired IP address for use by the mobile device.

Abstract: In one example, a server obtains, from a device having an embedded Subscriber Identification Module (eSIM), a unique identifier of the eSIM. The server validates the device based on the unique identifier of the eSIM. The server provides, to the device, a unique credential for a profile of the eSIM. The profile of the eSIM corresponds to a network of an enterprise. The server provides, to a credential database, the unique credential for the profile of the eSIM. The credential database including the unique credential for the profile of the eSIM indicates that the device is permitted to access the network of the enterprise.

Abstract: Various implementations disclosed herein provide a method for authenticating users to an enterprise network using closed subscriber groups. The method includes determining whether the client device is associated with a subscriber group that corresponds to the enterprise network. The method further includes granting the client device access to the enterprise network in response to determining that the client device is associated with the subscriber group that corresponds to the enterprise network.

Abstract: In one embodiment, a method is performed. A device comprising a non-transitory memory and a processor coupled to the non-transitory memory may be in communication with a plurality of network devices. The device may detect an anomaly in a detected sequence of events occurring during a connectivity process for establishing a connection between a first network device and a second network device of the plurality of network devices. The anomaly may comprise a difference between the detected sequence of events and a predetermined sequence of events. The device may determine whether the anomaly satisfies a criterion for triggering a packet capture operation. If so, the device may cause at least one of the first network device or the second network device to capture at least one target packet.

Abstract: Systems, methods and computer-readable storage media are provided for detecting and simulating issues in a network.