Abstract: Methods, systems, and computer readable media for providing mobile device connectivity are disclosed. A system includes a mobile gateway implemented on one or more processors. The mobile gateway includes an on-premises telecommunications network core configured for establishing mobile data sessions for mobile user devices and enabling communication between the mobile user devices through the on-premises telecommunications network core. The mobile gateway includes a software-defined wide-area network (SD-WAN) controller configured for establishing an SD-WAN overlay network for connecting the mobile user devices to an external telecommunications network.

Abstract: A system for providing integrated service capability exposure function (SCEF), service capability server (SCS) and application server (AS) functions is provided. The system includes at least one processor. The system further includes a cellular device connectivity (CDC) service module implemented by the at least one processor for providing SCEF services and for determining whether to invoke Internet of things (IoT) service handling based on content of received messages. The system further includes an IoT service module implemented by the at least one processor for providing SCS and AS services for received messages identified by the CDC service module as requiring IoT service handling.

Abstract: Methods, systems, and computer readable media for providing mobile device connectivity are disclosed. A system includes a mobile gateway implemented on one or more processors. The mobile gateway includes an on-premises telecommunications network core configured for establishing mobile data sessions for mobile user devices and enabling communication between the mobile user devices through the on-premises telecommunications network core. The mobile gateway includes a software-defined wide-area network (SD-WAN) controller configured for establishing an SD-WAN overlay network for connecting the mobile user devices to an external telecommunications network.

Abstract: A method for access network session correlation for policy control includes detecting a remote authentication dial in user service (RADIUS) access session for a user device, including binding the RADIUS access session to a policy node. The method includes detecting a Diameter session for the user device. The method further includes correlating the RADIUS access session with the Diameter session, including binding the Diameter session to the policy node.

Abstract: A system for providing integrated service capability exposure function (SCEF), service capability server (SCS) and application server (AS) functions is provided. The system includes at least one processor. The system further includes a cellular device connectivity (CDC) service module implemented by the at least one processor for providing SCEF services and for determining whether to invoke Internet of things (IoT) service handling based on content of received messages. The system further includes an IoT service module implemented by the at least one processor for providing SCS and AS services for received messages identified by the CDC service module as requiring IoT service handling.

Abstract: A system for providing a cloud-based service capability exposure function (SCEF) includes a cloud computing platform having at least one processor. A cellular device connectivity (CDC) service module implemented by the processor for provides SCEF services, including determining whether to invoke Internet of things (IoT) service handling based on content of received messages and forwarding messages requiring IoT service to a service capability server (SCS) or an application server (AS) for receiving the IoT service handling. At least one cloud access interface allows IoT devices and network equipment external to the CDC service module to access the first CDC service module. The cloud computing platform, the CDC service module, and the cloud access interface are hosted by a cloud service provider separate from a mobile network operator hosting the network equipment external to the CDC service module that access the CDC service module via the cloud access interface.

Abstract: A system for providing integrated service capability exposure function (SCEF), service capability server (SCS) and application server (AS) functions is provided. The system includes at least one processor. The system further includes a cellular device connectivity (CDC) service module implemented by the at least one processor for providing SCEF services and for determining whether to invoke Internet of things (IoT) service handling based on content of received messages. The system further includes an IoT service module implemented by the at least one processor for providing SCS and AS services for received messages identified by the CDC service module as requiring IoT service handling.

Abstract: A system for providing a service capability exposure function (SCEF) as a Diameter routing agent (DRA) feature includes a DRA including a plurality of message processors. The system further includes a cellular device connectivity (CDC) service module operatively associated with the DRA for providing SCEF services as a feature of the DRA, the SCEF services including determining whether to invoke Internet of things (IoT) service handling based on content of received messages and for forwarding messages requiring IoT service to a service capability server (SCS) or an application server (AS) for receiving the IoT service handling.

Abstract: A method for RADIUS proxy or Diameter agent address resolution is disclosed. The method may be implemented in a network node including a plurality of message processors. The method includes receiving an inbound RADIUS or Diameter message. The method further includes determining whether address resolution is required for the inbound message. The method further includes, in response to determining that address resolution is required for the inbound message, performing the address resolution. The method further includes routing an outbound message to a destination based on a result of the address resolution, where at least one of the inbound message and the outbound message comprises a RADIUS message.

Abstract: A system for providing a service capability exposure function (SCEF) as a Diameter routing agent (DRA) feature includes a DRA including a plurality of message processors. The system further includes a cellular device connectivity (CDC) service module operatively associated with the DRA for providing SCEF services as a feature of the DRA, the SCEF services including determining whether to invoke Internet of things (IoT) service handling based on content of received messages and for forwarding messages requiring IoT service to a service capability server (SCS) or an application server (AS) for receiving the IoT service handling.

Abstract: A system for providing integrated service capability exposure function (SCEF), service capability server (SCS) and application server (AS) functions is provided. The system includes at least one processor. The system further includes a cellular device connectivity (CDC) service module implemented by the at least one processor for providing SCEF services and for determining whether to invoke Internet of things (IoT) service handling based on content of received messages. The system further includes an IoT service module implemented by the at least one processor for providing SCS and AS services for received messages identified by the CDC service module as requiring IoT service handling.

Abstract: A system for providing a cloud-based service capability exposure function (SCEF) includes a cloud computing platform having at least one processor. A cellular device connectivity (CDC) service module implemented by the processor for provides SCEF services, including determining whether to invoke Internet of things (IoT) service handling based on content of received messages and forwarding messages requiring IoT service to a service capability server (SCS) or an application server (AS) for receiving the IoT service handling. At least one cloud access interface allows IoT devices and network equipment external to the CDC service module to access the first CDC service module. The cloud computing platform, the CDC service module, and the cloud access interface are hosted by a cloud service provider separate from a mobile network operator hosting the network equipment external to the CDC service module that access the CDC service module via the cloud access interface.

Abstract: A method for remote authentication dial-in user service (RADIUS) topology hiding includes, at a RADIUS signaling router including at least one message processor, receiving a RADIUS message. The method further includes determining whether RADIUS topology hiding is indicated for the RADIUS message. The method further includes, in response to determining that RADIUS topology hiding is indicated for the message, performing RADIUS topology hiding for the message. The method further includes forwarding the message to an intended recipient.

Abstract: Methods, systems, and computer readable media for performing stateful Diameter routing with Diameter routing agents (DRAs) using different mechanisms to achieve stateful routing are disclosed. According to one aspect, a system for performing stateful Diameter routing with DRAs that use different mechanisms to achieve stateful routing includes a set of Diameter signaling routing nodes. Each node has access to at least one database for maintaining state information. The nodes are configured to be members of a first group, where each member of the first group is configured to use a first mechanism to achieve stateful routing with other members of the first group, and to use a second mechanism to achieve stateful routing with nodes that are not members of the first group. Members of the first group include signaling nodes provided by a same vendor, and members not in the group include signaling nodes provided by a different vendor.

Abstract: According to one aspect, the subject matter described herein includes a method for screening Diameter messages within a Diameter signaling router (DSR) having a distributed message processor architecture. The method includes steps occurring at a DSR comprising a plurality of Diameter message processors, each configured to perform at least one Diameter function. The steps include receiving, at an ingress Diameter message processor of the Diameter message processors, a Diameter message from a Diameter peer node. The steps also include identifying, at a Diameter application message processor of the Diameter message processors, a Diameter message screening rule associated with the received Diameter message. The steps further include performing, at the Diameter application message processor of the Diameter message processors, a screening function associated with the identified Diameter message screening rule on the received Diameter message.

Abstract: A method for access network signaling protocol interworking for user authentication includes receiving, from a node in an access network, a message formatted according to a signaling protocol of the access network and containing an authentication payload formatted according to an authentication protocol. The method further includes, in response to receiving the message, formulating a message formatted according to a signaling protocol of a cellular network, the message including the authentication payload formatted according to the authentication protocol. The method further includes forwarding the message formatted according to the signaling protocol of the cellular network to a node in the cellular network that implements the authentication protocol, the message including the authentication payload formatted according to the authentication protocol.

Abstract: Methods, systems, and computer readable media for remote authentication dial in user service (RADIUS) message loop detection and mitigation are disclosed. One method includes receiving, at a RADIUS proxy node, a RADIUS signaling message. The method further includes determining whether the RADIUS signaling message includes an attribute with a host identifier corresponding to the RADIUS proxy node. In response to determining that the RADIUS signaling message includes the attribute that includes the host identifier corresponding to the RADIUS proxy node, performing a RADIUS loop mitigation action for the RADIUS signaling message.

Abstract: The subject matter described herein includes methods, systems, and computer readable media for access network protocol interworking and authentication proxying. One method includes receiving an authentication request from a node in an access network for authenticating a user using cellular network authentication. The method further includes, in response to the request, using a native protocol of the cellular network to obtain an authentication challenge from a node in the cellular network. The method further includes communicating the authentication challenge to the node in the access network. The method further includes receiving a response to the authentication challenge from the node in the access network. The method further includes determining whether the response matches an expected response. The method further includes, in response to determining that the response matches the expected response, communicating an indication of successful authentication to the node in the access network.

Abstract: A method for access network signaling protocol interworking for user authentication includes receiving, from a node in an access network, a message formatted according to a signaling protocol of the access network and containing an authentication payload formatted according to an authentication protocol. The method further includes, in response to receiving the message, formulating a message formatted according to a signaling protocol of a cellular network, the message including the authentication payload formatted according to the authentication protocol. The method further includes forwarding the message formatted according to the signaling protocol of the cellular network to a node in the cellular network that implements the authentication protocol, the message including the authentication payload formatted according to the authentication protocol.

Abstract: The subject matter described herein includes methods, systems, and computer readable media for access network protocol interworking and authentication proxying. One method includes receiving an authentication request from a node in an access network for authenticating a user using cellular network authentication. The method further includes, in response to the request, using a native protocol of the cellular network to obtain an authentication challenge from a node in the cellular network. The method further includes communicating the authentication challenge to the node in the access network. The method further includes receiving a response to the authentication challenge from the node in the access network. The method further includes determining whether the response matches an expected response. The method further includes, in response to determining that the response matches the expected response, communicating an indication of successful authentication to the node in the access network.