Abstract: In one illustrative example, a controller for use in a private mobile network may determine network service requirements for an industrial device. The controller may select, from a set of network slices, a subset of network slices having network service requirement configurations that most closely support the network service requirements. Each network slice of the set may be associated with an affinity ranking value that is indicative of a service performance of the network slice for industrial device operation in a cell or a zone associated with a zone or security level value assigned to the industrial device. The controller may identify, from the subset of network slices, a selected network slice associated with a best affinity ranking value for the zone or security level value assigned to the industrial device. The controller may assign the selected network slice and associated service parameters for the communications of the industrial device.

Abstract: Techniques are described for extending a cellular quality of service bearer through an enterprise fabric network. In one example, a method obtaining, by a first switch of a network, a packet to be delivered to a client connected to the network via a cellular access point; identifying quality of service (QoS) bearer information associated with the packet, wherein the QoS bearer information is associated with a radio access bearer for the client and the QoS bearer information comprises a bearer indicator and a QoS class identifier; providing a fabric tunnel encapsulation for the packet, wherein the bearer indicator and the QoS class identifier are included within the fabric tunnel encapsulation of the packet; and forwarding the packet within the fabric tunnel encapsulation toward a second switch of the network via a fabric tunnel, wherein the cellular access point is connected to the network via the second switch.

Abstract: An approach to automatically provision a data service name (APN or DNN) when an endpoint device connects to a mobile network is described. A methodology includes receiving from an endpoint device a first request to connect to a mobile network, the first request including an identifier of the endpoint device and a default data service name, responsive to detecting the default data service name, determining, from the identifier of the endpoint device, a group to which the endpoint device belongs along with a corresponding group identifier for the group, querying a repository with the group identifier, and receiving, in response, an assigned data service name that is associated with the group identifier, providing the assigned data service name to the endpoint device, and receiving from the endpoint device a second request to connect to the mobile network, the second request including the assigned data service name.

Abstract: Techniques are described to provide for authentication and subscription management that are decoupled from a Home Subscriber Server (HSS).

Abstract: Presented herein are techniques to provide a network-initiated group disconnect for wireless devices belonging to one or more device group(s). In one example, a method may include determining, by a control element of a network, that at least one device group is to be disconnected from the network, wherein the at least one device group comprises a plurality of wireless devices connected to the network; identifying one or more access network radios through which the plurality of wireless devices are connected to the network; and triggering a disconnect command for the at least one device group to be broadcast from each of the one or more access network radios to trigger the plurality of wireless devices to disconnect from the network.

Abstract: Presented herein are techniques to facilitate delivering standalone non-public network (SNPN) credentials from an enterprise authentication server to a user equipment (UE) using an Extensible Authentication Protocol (EAP) process. In one example, a method may include determining, by an authentication server of an enterprise, that a UE for the enterprise is to receive credentials to enable the UE to connect to a SNPN of the enterprise in which the determining is performed based, at least in part, on connection of the UE to an access network that is different than the SNPN for the enterprise; and performing an authentication process with the UE by the authentication server in which the authentication process includes providing the credentials to the UE via a first authentication message and obtaining confirmation from the UE via a second authentication message that indicates successful provisioning of the credentials for the UE.

Abstract: Techniques are described for extending a cellular quality of service bearer through an enterprise fabric network. In one example, a method obtaining, by a first switch of a network, a packet to be delivered to a client connected to the network via a cellular access point; identifying quality of service (QoS) bearer information associated with the packet, wherein the QoS bearer information is associated with a radio access bearer for the client and the QoS bearer information comprises a bearer indicator and a QoS class identifier; providing a fabric tunnel encapsulation for the packet, wherein the bearer indicator and the QoS class identifier are included within the fabric tunnel encapsulation of the packet; and forwarding the packet within the fabric tunnel encapsulation toward a second switch of the network via a fabric tunnel, wherein the cellular access point is connected to the network via the second switch.

Abstract: Presented herein are techniques to facilitate delivering standalone non-public network (SNPN) credentials from an enterprise authentication server to a user equipment (UE) using an Extensible Authentication Protocol (EAP) process. In one example, a method may include determining, by an authentication server of an enterprise, that a UE for the enterprise is to receive credentials to enable the UE to connect to a SNPN of the enterprise in which the determining is performed based, at least in part, on connection of the UE to an access network that is different than the SNPN for the enterprise; and performing an authentication process with the UE by the authentication server in which the authentication process includes providing the credentials to the UE via a first authentication message and obtaining confirmation from the UE via a second authentication message that indicates successful provisioning of the credentials for the UE.

Abstract: Techniques are described herein for providing radio resource ownership indicators in charging records for a charging function. In one example, a method may include determining, by a session management node of a mobile network, that a user equipment is utilizing a particular radio resource of a mobile network resource for a Protocol Data Unit (PDU) session of the user equipment, wherein the mobile network resource is capable of being utilized via a plurality of radio resources and the particular radio resources is associated with an enterprise entity; and reporting charging information for the PDU session of the user equipment to a charging function of the mobile network to facilitate storing a charging record for the user equipment that is to include an identifier of the enterprise entity that is associated with the particular radio resource.

Abstract: Presented herein are techniques associated with replicating an OpenRoaming™ policy federation in a Third Generation Partnership Project (3GPP) network environment. For example, techniques herein provide a roaming policy federation architecture for a 3GPP network environment. In one example a method is provided that may include encoding a multi-bit roaming policy for an identity provider within a plurality of multi-bit 3GPP broadcast identifiers in which the multi-bit roaming policy includes bit-wise roaming policy information for the identity provider. The method may further include configuring the plurality of multi-bit 3GPP broadcast identifiers for a mobile device associated with the identity provider. In one instance, detecting, by the mobile device, at least one multi-bit 3GPP broadcast identifier of the plurality of multi-bit broadcasting identifiers being broadcast by a visited radio access network triggers the mobile device to perform an authentication with the identity provider.

Abstract: In one illustrative example, a user plane (UP) entity for use in a mobile network may receive a data packet from a user equipment (UE) operative to communicate in one or more sessions via a serving base station (BS) (e.g. eNB or gNB) of the mobile network. The UP entity may detect, in a header (e.g. SRH) of the data packet, an identifier indicating a new serving BS or session of the UE. The identifier may be UE- or BS-added data (e.g. iOAM data) that is inserted in the header by the UE or BS. In response, the UP entity may cause a message to be sent to an analytics function (e.g. a NWDAF) to perform analytics for session or flow migration for the UE.

Abstract: Techniques are described herein for providing radio resource ownership indicators in charging records for a charging function. In one example, a method may include determining, by a session management node of a mobile network, that a user equipment is utilizing a particular radio resource of a mobile network resource for a Protocol Data Unit (PDU) session of the user equipment, wherein the mobile network resource is capable of being utilized via a plurality of radio resources and the particular radio resources is associated with an enterprise entity; and reporting charging information for the PDU session of the user equipment to a charging function of the mobile network to facilitate storing a charging record for the user equipment that is to include an identifier of the enterprise entity that is associated with the particular radio resource.

Abstract: Techniques are described to provide for authentication and subscription management that are decoupled from a Home Subscriber Server (HSS).

Abstract: Presented herein are techniques to facilitate data stream routing and entitlement for Internet of Things (IoT) data streams. In one example, a method is provided that may include causing an IoT device to connect to a plurality of access networks based on a data stream policy; directing, based on the data stream policy, an IoT gateway to transmit a plurality of output data streams to a plurality of destinations in which the plurality of output data streams are based on a source data stream obtained by the IoT gateway from the IoT device via one or more of the plurality of access networks. The method may further include determining a degradation for at least one access network and, upon determining the degradation, causing a remediation action to be performed by at least one of the IoT device and the IoT gateway based on the data stream policy.

Abstract: Techniques are described herein for providing radio resource ownership indicators in charging records for a charging function. In one example, a method may include determining, by a session management node of a mobile network, that a user equipment is utilizing a particular radio resource of a mobile network resource for a Protocol Data Unit (PDU) session of the user equipment, wherein the mobile network resource is capable of being utilized via a plurality of radio resources and the particular radio resources is associated with an enterprise entity; and reporting charging information for the PDU session of the user equipment to a charging function of the mobile network to facilitate storing a charging record for the user equipment that is to include an identifier of the enterprise entity that is associated with the particular radio resource.

Abstract: A controller of a macro wireless network provisions a user device for access to local private networks based on the cell that the user device uses to attach to the macro wireless network. The controller obtains information on private networks operating within a coverage area of the macro wireless network. The controller associates a particular cell of the macro wireless network with one or more private networks operating within the particular cell. The controller detects a user device in the particular cell and provisions the user device with access to the one or more private networks.

Abstract: Techniques are described for extending a cellular quality of service bearer through an enterprise fabric network. In one example, a method obtaining, by a first switch of a network, a packet to be delivered to a client connected to the network via a cellular access point; identifying quality of service (QoS) bearer information associated with the packet, wherein the QoS bearer information is associated with a radio access bearer for the client and the QoS bearer information comprises a bearer indicator and a QoS class identifier; providing a fabric tunnel encapsulation for the packet, wherein the bearer indicator and the QoS class identifier are included within the fabric tunnel encapsulation of the packet; and forwarding the packet within the fabric tunnel encapsulation toward a second switch of the network via a fabric tunnel, wherein the cellular access point is connected to the network via the second switch.

Abstract: In one illustrative example, a user plane function (UPF) configured for use in a private 5G network of an enterprise may receive, from a user device, a domain name system (DNS) query associated with an application; send, to a DNS server, one or more corresponding DNS queries based on the DNS query; receive, from the DNS server, one or more DNS query responses which include an IP address and metadata including an application identifier for the application; and send, to a control plane function, a message for reporting which includes the application identifier. In response, a dedicated Quality of Service (QoS) Flow may be created for traffic for the application according to a selected QoS policy associated with the application identifier. For obtaining the metadata, the UPF may interact with a DNS server configured with Extension mechanisms for DNS (EDNS) or a DNS as Authoritative Source (DNS-AS) mechanism.

Abstract: Techniques are described for extending a cellular quality of service bearer through an enterprise fabric network. In one example, a method obtaining, by a first switch of a network, a packet to be delivered to a client connected to the network via a cellular access point; identifying quality of service (QoS) bearer information associated with the packet, wherein the QoS bearer information is associated with a radio access bearer for the client and the QoS bearer information comprises a bearer indicator and a QoS class identifier; providing a fabric tunnel encapsulation for the packet, wherein the bearer indicator and the QoS class identifier are included within the fabric tunnel encapsulation of the packet; and forwarding the packet within the fabric tunnel encapsulation toward a second switch of the network via a fabric tunnel, wherein the cellular access point is connected to the network via the second switch.

Abstract: Presented herein are techniques associated with replicating an OpenRoaming™ policy federation in a Third Generation Partnership Project (3GPP) network environment. For example, techniques herein provide a roaming policy federation architecture for a 3GPP network environment.