Abstract: A method is performed at a server that manages embedded subscriber identity module (eSIM) profiles. The method includes, when a user equipment that belongs to a global enterprise network relocates from a first locale to a second locale in which a first private network and a second private network of the global enterprise network are located, wherein the user equipment includes a locale-specific first eSIM profile that includes a first non-public network identifier of the first private network, receiving, from the user equipment over a network in the second locale, information that indicates the user equipment is in the second locale. The method further includes identifying the second private network based on the information, and generating a locale-specific second eSIM profile that includes a second non-public network identifier for the second private network. The method includes configuring the user equipment with the locale-specific second eSIM profile.

Abstract: A method is performed at a server that manages embedded subscriber identity module (eSIM) profiles. The method includes, when a user equipment that belongs to a global enterprise network relocates from a first locale to a second locale in which a first private network and a second private network of the global enterprise network are located, wherein the user equipment includes a locale-specific first eSIM profile that includes a first non-public network identifier of the first private network, receiving, from the user equipment over a network in the second locale, information that indicates the user equipment is in the second locale. The method further includes identifying the second private network based on the information, and generating a locale-specific second eSIM profile that includes a second non-public network identifier for the second private network. The method includes configuring the user equipment with the locale-specific second eSIM profile.

Abstract: An approach to automatically provision a data service name (APN or DNN) when an endpoint device connects to a mobile network is described. A methodology includes receiving from an endpoint device a first request to connect to a mobile network, the first request including an identifier of the endpoint device and a default data service name, responsive to detecting the default data service name, determining, from the identifier of the endpoint device, a group to which the endpoint device belongs along with a corresponding group identifier for the group, querying a repository with the group identifier, and receiving, in response, an assigned data service name that is associated with the group identifier, providing the assigned data service name to the endpoint device, and receiving from the endpoint device a second request to connect to the mobile network, the second request including the assigned data service name.

Abstract: Techniques are described to provide for authentication and subscription management that are decoupled from a Home Subscriber Server (HSS).

Abstract: Techniques are provided to use a trusted identity and location to select the most appropriate point of interconnect to edge application execution environments as well as a specific edge application execution environment. The techniques may involve obtaining, on behalf of a wireless mobile device, an access identifier that indicates an access location of the wireless mobile device that is wirelessly connected to wireless network infrastructure equipment operated by an access network provider that is associated with, and a member of, a federation of access network providers. The access location for the wireless mobile device is derived based on the access identifier, and the access location is used to select an edge resource to be used by the wireless mobile device.

Abstract: In one example, a charging filtering function may obtain a request for one or more rules that control whether or when one or more charging data records associated with a user equipment are to be provided to one or more billing systems. The request includes an identification of the user equipment. Based on the identification of the user equipment, the charging filtering function may identify the one or more rules. The charging filtering function may provide the one or more rules to control whether or when the one or more charging data records associated with the user equipment are to be provided to the one or more billing systems.

Abstract: In one illustrative example, a user plane function (UPF) configured for use in a private 5G network of an enterprise may receive, from a user device, a domain name system (DNS) query associated with an application; send, to a DNS server, one or more corresponding DNS queries based on the DNS query; receive, from the DNS server, one or more DNS query responses which include an IP address and metadata including an application identifier for the application; and send, to a control plane function, a message for reporting which includes the application identifier. In response, a dedicated Quality of Service (QoS) Flow may be created for traffic for the application according to a selected QoS policy associated with the application identifier. For obtaining the metadata, the UPF may interact with a DNS server configured with Extension mechanisms for DNS (EDNS) or a DNS as Authoritative Source (DNS-AS) mechanism.

Abstract: In a mobile network, an identity of a security group associated with user equipments (UEs) may be obtained. A segment route (SR) path for session communications in the mobile network for the UEs may be selected based on the identity of the security group. The SR path may be one of a plurality of SR paths in a transport network used by the mobile network and defined at least in part by one or more segment IDs (SIDs). An identity of a virtual network associated with the security group may also be obtained. The selected SR path and the identity of the virtual network may be provisioned in one or more routers of the transport network, such that IP messages communicated for the UEs in the mobile network are forwarded via the selected SR path and (at least ultimately) via the tunnel associated with the security group.

Abstract: In one embodiment, a device receives data regarding a node from a plurality of management platforms, each management platform being associated with a different access network used by the node. The device applies a unified data model to the data regarding the node received from the plurality of management platforms, to form unified data regarding the node. The device analyzes the unified data regarding the node, to generate insight information. The device provides the insight information to an application associated with a manufacturer of the node.

Abstract: In one illustrative example, a user plane function (UPF) configured for use in a private 5G network of an enterprise may receive, from a user device, a domain name system (DNS) query associated with an application; send, to a DNS server, one or more corresponding DNS queries based on the DNS query; receive, from the DNS server, one or more DNS query responses which include an IP address and metadata including an application identifier for the application; and send, to a control plane function, a message for reporting which includes the application identifier. In response, a dedicated Quality of Service (QoS) Flow may be created for traffic for the application according to a selected QoS policy associated with the application identifier. For obtaining the metadata, the UPF may interact with a DNS server configured with Extension mechanisms for DNS (EDNS) or a DNS as Authoritative Source (DNS-AS) mechanism.

Abstract: Methods for selecting network slice, session management, and user plane functions for user equipment (UE) are described. In one example, a control plane (CP) entity for mobility management may select a CP entity for session management for a session of a UE based on a first set of data items. The CP entity for mobility management may further select a user plane (UP) entity for the session of the UE based on a second set of data items, where second set of data items include at least some of the same data items of the first set. The CP entity for mobility management may send, to the selected CP entity, a message including an identity or indication of the selected UP entity for the session of the UE. The selected CP entity may select the identified or indicated UP entity for use in the session of the UE.

Abstract: In one illustrative example, a user plane (UP) entity for use in a mobile network may receive a data packet from a user equipment (UE) operative to communicate in one or more sessions via a serving base station (BS) (e.g. eNB or gNB) of the mobile network. The UP entity may detect, in a header (e.g. SRH) of the data packet, an identifier indicating a new serving BS or session of the UE. The identifier may be UE- or BS-added data (e.g. iOAM data) that is inserted in the header by the UE or BS. In response, the UP entity may cause a message to be sent to an analytics function (e.g. a NWDAF) to perform analytics for session or flow migration for the UE.

Abstract: In one illustrative example, a user plane function (UPF) configured for use in a private 5G network of an enterprise may receive, from a user device, a domain name system (DNS) query associated with an application; send, to a DNS server, one or more corresponding DNS queries based on the DNS query; receive, from the DNS server, one or more DNS query responses which include an IP address and metadata including an application identifier for the application; and send, to a control plane function, a message for reporting which includes the application identifier. In response, a dedicated Quality of Service (QoS) Flow may be created for traffic for the application according to a selected QoS policy associated with the application identifier. For obtaining the metadata, the UPF may interact with a DNS server configured with Extension mechanisms for DNS (EDNS) or a DNS as Authoritative Source (DNS-AS) mechanism.

Abstract: Presented herein are techniques to facilitate data stream routing and entitlement for Internet of Things (IoT) data streams. In one example, a method is provided that may include causing an IoT device to connect to a plurality of access networks based on a data stream policy; directing, based on the data stream policy, an IoT gateway to transmit a plurality of output data streams to a plurality of destinations in which the plurality of output data streams are based on a source data stream obtained by the IoT gateway from the IoT device via one or more of the plurality of access networks. The method may further include determining a degradation for at least one access network and, upon determining the degradation, causing a remediation action to be performed by at least one of the IoT device and the IoT gateway based on the data stream policy.

Abstract: Techniques are provided to use a trusted identity and location to select the most appropriate point of interconnect to edge application execution environments as well as a specific edge application execution environment. The techniques may involve obtaining, on behalf of a wireless mobile device, an access identifier that indicates an access location of the wireless mobile device that is wirelessly connected to wireless network infrastructure equipment operated by an access network provider that is associated with, and a member of, a federation of access network providers. The access location for the wireless mobile device is derived based on the access identifier, and the access location is used to select an edge resource to be used by the wireless mobile device.

Abstract: Techniques are described to provide industrial machine configurations using private wireless networking. In one example, a method includes provisioning a segmentation policy for a network area, wherein the segmentation policy identifies policy groups for the network area in which each policy group comprises a plurality of devices capable of inter-device communications; provisioning, at a proximity services controller, a connectivity policy for each policy group, wherein the connectivity policy for each of policy group identifies at least one proxy configuration for one or more types of information to be communicated among the plurality of devices of each policy group; establishing connectivity between each device of each of the policy groups and an access point; and communicating the one or more types of information to each of the policy groups based on the at least one proxy configuration for each policy group.

Abstract: Presented herein are techniques to facilitate electronic profile management by an enterprise entity in which the enterprise entity can utilize an enterprise infrastructure to provision one or more electronic profiles for one or more enterprise device(s). In one example, a method is provided that may include determining, by a management node of an enterprise network, whether a user equipment (UE) supports an electronic profile capability and a wireless wide area access network connectivity capability; and based on determining that the UE supports the electronic profile capability and the wireless wide area access network connectivity capability, providing, by the management node, at least one electronic profile to the UE via a wireless local area access network of the enterprise network, wherein the at least one electronic profile enables the UE to connect to at least one wireless wide area access network of the enterprise network.

Abstract: Presented herein are techniques to facilitate policy assurance for high-resiliency network environments. In one example, a method is provided that may include calculating an intended resiliency for each of a plurality of access networks based on resiliency characteristics; determining zone policies for each of a plurality of connectivity zones of a geographical area and for each of a plurality of traffic service classes; determining a network access resiliency policy for each client of a plurality of clients within each of the plurality of connectivity zones; determining a client access resiliency policy for each access network of the plurality of access networks; and communicating each network access resiliency policy to each client of the plurality of clients and communicating each client access resiliency policy to each access network of the plurality of access networks.

Abstract: In one example, a charging filtering function may obtain a request for one or more rules that control whether or when one or more charging data records associated with a user equipment are to be provided to one or more billing systems. The request includes an identification of the user equipment. Based on the identification of the user equipment, the charging filtering function may identify the one or more rules. The charging filtering function may provide the one or more rules to control whether or when the one or more charging data records associated with the user equipment are to be provided to the one or more billing systems.

Abstract: In one embodiment, a device receives data regarding a node from a plurality of management platforms, each management platform being associated with a different access network used by the node. The device applies a unified data model to the data regarding the node received from the plurality of management platforms, to form unified data regarding the node. The device analyzes the unified data regarding the node, to generate insight information. The device provides the insight information to an application associated with a manufacturer of the node.