Abstract: The solution introduces a method and system in a network node of a telecommunication network such as the MME. The method includes receiving, from an eNodeB, an attach request that originated from a UE, the attach request including an identifier associated with a subscriber of the UE; checking a UE blacklist to determine whether the identifier in the attach request is on the UE blacklist; in response to the UE identifier being on the UE blacklist: rejecting the attach request; updating a success rate metric to reflect the failed attach request; comparing the success rate metric to a threshold; and in response to a decrease in the success rate metric below the threshold, recognizing a malicious attack and taking mitigating steps.

Abstract: The solution introduces a flexible mechanism to avoid paging a delay-tolerant UE prematurely by buffering its high frequency, low priority data for a time duration set according to the UE's current and historic activity data, thereby increasing radio resource and network efficiency, and reducing UE batter drainage. A method of managing frequent low priority downlink data transmissions comprises receiving a downlink data packet intended for a UE, buffering the received downlink data packet in response to a determination that the received downlink data packet is low priority, and the UE is delay-tolerant, starting a timer, the timer being set in response in response to the UE currently being in an idle state, the timer being set according to a next anticipated activity time for the UE, and transmitting the downlink data packet to the UE upon the expiration of the timer.

Abstract: The solution introduces a method and system in a network node of a telecommunication network such as the MME. The method includes receiving, from an eNodeB, an attach request that originated from a UE, the attach request including an identifier associated with a subscriber of the UE; checking a UE blacklist to determine whether the identifier in the attach request is on the UE blacklist; in response to the UE identifier being on the UE blacklist: rejecting the attach request; updating a success rate metric to reflect the failed attach request; comparing the success rate metric to a threshold; and in response to a decrease in the success rate metric below the threshold, recognizing a malicious attack and taking mitigating steps.

Abstract: The solution introduces a flexible mechanism to avoid paging a delay-tolerant UE prematurely by buffering its high frequency, low priority data for a time duration set according to the UE's current and historic activity data, thereby increasing radio resource and network efficiency, and reducing UE batter drainage. A method of managing frequent low priority downlink data transmissions comprises receiving a downlink data packet intended for a UE, buffering the received downlink data packet in response to a determination that the received downlink data packet is low priority, and the UE is delay-tolerant, starting a timer, the timer being set in response in response to the UE currently being in an idle state, the timer being set according to a next anticipated activity time for the UE, and transmitting the downlink data packet to the UE upon the expiration of the timer.