Abstract: Systems, methods, and devices are disclosed for providing a quality of service between nodes. A service provider can receive, from a first node of a customer network to an ingress node of a service provider network, packets bound for a second node on the customer network that is remote from the first node. The packets are mapped to a network segment according to a traffic type based on an identifier associated with the packets that identifies the traffic type of the packets. The packets are sent via their mapped network segment to an egress node with connectivity to the second node of the customer network according to a quality of service associated with the traffic type identified by the identifier.

Abstract: Systems and methods provide for provisioning network access using a tenant service set identifier (SSID) or an SSID of a specified duration and distributed authorization. A network management system can provision a wireless local area network (WLAN) and the SSID in an access point to enable a primary guest device to access the WLAN for a specified time period (e.g., a start time and end time). The network management system can cause the SSID and authentication data (e.g., authentication token, Pre-Shared Key (PSK), etc.) to be transmitted for receipt by the first client device. After the start time and in response to successfully authenticating the first client device, the first client device can authorize a second client device to access the WLAN. The network management system or the AP can disable access to the network via the SSID at the end time.

Abstract: A method is performed at a gateway device including one or more processors and a non-transitory memory. The method includes, receiving, from a first wireless network, a first get authentication token request, where the first get authentication token request includes network information of a second wireless network and information of a first user equipment (UE). The method further includes forwarding the first get authentication token request to the second wireless network in response to receiving the first get authentication token request. The method additionally includes receiving a first authentication token from the second wireless network. The method also includes forwarding the first authentication token to the first UE via the first wireless network in order to associate the first UE with the second wireless network.

Abstract: Systems, methods, and devices are disclosed for providing a quality of service between nodes. A service provider can receive, from a first node of a customer network to an ingress node of a service provider network, packets bound for a second node on the customer network that is remote from the first node. The packets are mapped to a network segment according to a traffic type based on an identifier associated with the packets that identifies the traffic type of the packets. The packets are sent via their mapped network segment to an egress node with connectivity to the second node of the customer network according to a quality of service associated with the traffic type identified by the identifier.

Abstract: Systems, methods, and devices are disclosed for providing a quality of service between nodes. A service provider can receive, from a first node of a customer network to an ingress node of a service provider network, packets bound for a second node on the customer network that is remote from the first node. The packets are mapped to a network segment according to a traffic type based on an identifier associated with the packets that identifies the traffic type of the packets. The packets are sent via their mapped network segment to an egress node with connectivity to the second node of the customer network according to a quality of service associated with the traffic type identified by the identifier.

Abstract: Techniques for handling requests from a remote device are disclosed. A server receives a first unsolicited activation request from a first device of a plurality of devices. A probabilistic hash filter, associated with a data set, is queried using a first identifier associated with the first device. In response, a first result is received from the probabilistic hash filter indicating that the first device is not ready for activation. In response to receiving the first result, a back-off indication is transmitted to the first device.

Abstract: The disclosed technology relates to systems and methods for automatically scaling down network resources, such as servers or gateway instances, based on predetermined thresholds. A system is configured to detect a reduction in one or more network metrics related to a first server, and instruct the first server to issue a rekey request to a plurality of devices connected to the first server. The system is further configured to instruct a load balancer to route to at least one other server responses from the plurality of devices to the rekey request, and determine a number of connections remaining between the first server and the plurality of devices. The system may be further configured to instruct the load balancer to terminate the first server based on the detected number of connections remaining between the first server and the plurality of devices.

Abstract: The disclosed technology relates to systems and methods for automatically scaling down network resources, such as servers or gateway instances, based on predetermined thresholds. A system is configured to detect a reduction in one or more network metrics related to a first server, and instruct the first server to issue a rekey request to a plurality of devices connected to the first server. The system is further configured to instruct a load balancer to route to at least one other server responses from the plurality of devices to the rekey request, and determine a number of connections remaining between the first server and the plurality of devices. The system may be further configured to instruct the load balancer to terminate the first server based on the detected number of connections remaining between the first server and the plurality of devices.

Abstract: Techniques for handling requests from a remote device are disclosed. A server receives a first unsolicited activation request from a first device of a plurality of devices. A probabilistic hash filter, associated with a data set, is queried using a first identifier associated with the first device. In response, a first result is received from the probabilistic hash filter indicating that the first device is not ready for activation. In response to receiving the first result, a back-off indication is transmitted to the first device.

Abstract: A server receives a certificate signing request and onboarding information for an applicant device, and identifies a customer associated with the applicant device based on an applicant device identifier and a database identifiers associated with customers. The device determines a registered device associated with the customer is a trusted device, a location trust value for the applicant device based on a geolocation proximity between the applicant device and the trusted device, and an environment trust value for the applicant device based on a proximity in a network topology between the applicant device and the trusted device. The device further determines a trust score for the applicant device based on the location trust value and the environment trust value, and sends a signed certificate to the applicant device over the network when the trust score for the applicant device exceeds a threshold.

Abstract: The present disclosure provides improved determinism in systems and methods for wireless communications via real-time visual object tracking using radio, video, and range finding. In one example, a first and a second Access Point (AP) in a constellation in which the APs are positioned at knowns position in the environment, and the APs perform image processing to identify an entity the environment based on captured images and an entity definition. The APs receive, via range finders, ranges between the entity and the first and second APs to determine a location of the entity in the environment. The APs may then create a profile for the entity that includes an entity identifier, the location of the entity, and indicates whether one of the first AP and the second AP is in wireless communication with the entity.

Abstract: In an example, a wireless communication system and apparatuses thereof are described. In an example long-term evolution (LTE) network, a first base station hands over a connection to a second base station. The first base station may be a (femto) home eNodeB (HeNB) or (macro) eNodeB. The second base station may also be a HeNB or eNodeB connected to a different gateway. The first base station may send “Handover Request” on an X2 connection, identifying the gateway that the second base station is connected to as the correct gateway. After sending a “Handover Request Acknowledgement,” the second base station correctly establishes a tunnel to a connected gateway device.

Abstract: Systems, methods, and devices are disclosed for providing a quality of service between nodes. A service provider can receive, from a first node of a customer network to an ingress node of a service provider network, packets bound for a second node on the customer network that is remote from the first node. The packets are mapped to a network segment according to a traffic type based on an identifier associated with the packets that identifies the traffic type of the packets. The packets are sent via their mapped network segment to an egress node with connectivity to the second node of the customer network according to a quality of service associated with the traffic type identified by the identifier.

Abstract: Systems and methods provide for provisioning network access using a tenant service set identifier (SSID) or an SSID of a specified duration and distributed authorization. A network management system can provision a wireless local area network (WLAN) and the SSID in an access point to enable a primary guest device to access the WLAN for a specified time period (e.g., a start time and end time). The network management system can cause the SSID and authentication data (e.g., authentication token, Pre-Shared Key (PSK), etc.) to be transmitted for receipt by the first client device. After the start time and in response to successfully authenticating the first client device, the first client device can authorize a second client device to access the WLAN. The network management system or the AP can disable access to the network via the SSID at the end time.

Abstract: A method is performed at a gateway device including one or more processors and a non-transitory memory. The method includes, receiving, from a first wireless network, a first get authentication token request, where the first get authentication token request includes network information of a second wireless network and information of a first user equipment (UE). The method further includes forwarding the first get authentication token request to the second wireless network in response to receiving the first get authentication token request. The method additionally includes receiving a first authentication token from the second wireless network. The method also includes forwarding the first authentication token to the first UE via the first wireless network in order to associate the first UE with the second wireless network.

Abstract: Systems, methods, and devices are disclosed for providing a quality of service between nodes. A service provider can receive, from a first node of a customer network to an ingress node of a service provider network, packets bound for a second node on the customer network that is remote from the first node. The packets are mapped to a network segment according to a traffic type based on an identifier associated with the packets that identifies the traffic type of the packets. The packets are sent via their mapped network segment to an egress node with connectivity to the second node of the customer network according to a quality of service associated with the traffic type identified by the identifier.

Abstract: Systems, methods, and devices are disclosed for providing a quality of service between nodes. A service provider can receive, from a first node of a customer network to an ingress node of a service provider network, packets bound for a second node on the customer network that is remote from the first node. The packets are mapped to a network segment according to a traffic type based on an identifier associated with the packets that identifies the traffic type of the packets. The packets are sent via their mapped network segment to an egress node with connectivity to the second node of the customer network according to a quality of service associated with the traffic type identified by the identifier.

Abstract: The disclosed technology relates to systems and methods for automatically scaling down network resources, such as servers or gateway instances, based on predetermined thresholds. A system is configured to detect a reduction in one or more network metrics related to a first server, and instruct the first server to issue a rekey request to a plurality of devices connected to the first server. The system is further configured to instruct a load balancer to route to at least one other server responses from the plurality of devices to the rekey request, and determine a number of connections remaining between the first server and the plurality of devices. The system may be further configured to instruct the load balancer to terminate the first server based on the detected number of connections remaining between the first server and the plurality of devices.

Abstract: The present disclosure provides improved determinism in systems and methods for wireless communications via real-time visual object tracking using radio, video, and range finding. In one example, a first and a second Access Point (AP) in a constellation in which the APs are positioned at knowns position in the environment, and the APs perform image processing to identify an entity the environment based on captured images and an entity definition. The APs receive, via range finders, ranges between the entity and the first and second APs to determine a location of the entity in the environment. The APs may then create a profile for the entity that includes an entity identifier, the location of the entity, and indicates whether one of the first AP and the second AP is in wireless communication with the entity.

Abstract: Presented herein are techniques for detecting establishment of a bearer associated with a communication session offloaded from a mobile carrier network to a wireless local area network, such as a Wi-Fi® network, and sending, from the mobile carrier network to the wireless local area network, an indication of a level of quality of service (QoS) to be applied to a segment of the communication session that is conveyed by the wireless local area network. The indication of the level of QoS may be passed via a network controller.