Abstract: Various embodiments of the present technology generally relate to systems and methods for network intrusion detection. In certain embodiments, a network traffic analysis system may comprise one or more processors, and a memory having stored thereon instructions. The instructions, upon execution, may cause the one or more processors to receive, from a first network function (NF) in a communication exchange on a 5G network, a first copy of traffic from the communication exchange, determine whether a second copy of traffic corresponding to the first copy of traffic has been received from a second NF in the communication exchange, and in response to not receiving the second copy of traffic, issue a security notification to the first NF indicating a network intrusion.

Abstract: Various embodiments of the present technology generally relate to systems and methods for preventing malicious service access over long-lived connections. In certain embodiments, a network traffic analysis system may comprise one or more processors, and a memory having stored thereon instructions. The instructions, upon execution, may cause the one or more processors to receive, from a first network function (NF) on a 5G network, a copy of a message sent over a long-lived connection between the first NF and a second NF on the 5G network, the copy of the message including details for a transport layer security (TLS) certificate involved in the long-lived connection. The network traffic analysis system may compare the details against a list of revoked certificates to determine whether the TLS certificate has been revoked, and when the TLS certificate has been revoked, send a notification directing the first NF to close the long-lived connection.

Abstract: A system may include a substrate having a tensile strength of at least 10,000 PSI at an ambient temperature. The system may also include a carbon rich layer deposited on the substrate, wherein the carbon rich layer comprises at least one of a carbide, a nitride, a boride, a silicide, an oxide, a sulfide, or a transition-metal or non-metal ceramic-forming element, wherein the carbon rich layer comprises a carbon content including sp2 carbon and sp3 carbon, wherein the carbon content has greater than 40% sp3 carbon, a sp2/sp3 ratio of the carbon content is less than 1.5, or both. The carbon-rich layer is designed to reduce or prevent the formation of adherent scales on flow system surfaces used in well production, fluid injection or gas sequestration, and includes electrically-actuated downhole components having dynamic sliding surfaces.

Abstract: A method for error information propagation from an SCP to a NF to support a circuit breaker design at the consumer NF includes receiving, at the SCP and from the consumer NF, a first SBI service request message. The method further includes attempting, by the SCP, to forward the first SBI service request to N producer NF instances. The method further includes detecting, by the SCP, an error involving the N producer NF instances. The method further includes performing, by the SCP, successful alternate routing of the first SBI service request message to an (N+1) th producer NF instance. The method further includes receiving, by the SCP, a success response message from the (N+1) th producer NF instance. The method further includes propagating, by the SCP, with the success response message and to the consumer NF, error information regarding the N producer NF instances.

Abstract: A system and method for dynamically routing each of multiple independent content streams from a single media gateway appliance to specific output ports. The particular content and the identity of the port or ports to which it will be routed are defined by the contents of user commands received by media gateway appliance. The disclosed technology enables a single appliance to simultaneously route independent content to particular identified displays, thereby providing independent viewing experiences to multiple users.

Abstract: A method for selective inter-PLMN security handshake validation includes receiving, at a SEPP, a first inter-PLMN security handshake request message. The method further includes performing, by the SEPP and in an SEPP trust relationship database, a lookup to determine whether the first inter-PLMN security handshake request message originates from a trusted SEPP. The method further includes determining that the first inter-PLMN security handshake request message does not originate from a trusted SEPP, and, in response, performing, by the SEPP, an inter-PLMN security handshake validation procedure on the first inter-PLMN security handshake request message. The method further includes determining that the first inter-PLMN security handshake request message fails the inter-PLMN security handshake validation procedure, and, in response, performing a network protective operation.

Abstract: A method for delegated authorization at a security edge protection proxy (SEPP) includes intercepting, from a consumer network function (NF) that does not support access token based authorization, a service based interface (SBI) service request for accessing a service provided by a producer NF that requires access token based authorization. The method further includes operating as an access token authorization client to obtain a first access token on behalf of the consumer NF. The method further includes using the first access token to enable the consumer NF to access the service provided by the first producer NF. The SEPP may also operate as an access token authorization server on behalf of an NRF that does not support access-token-based authorization.

Abstract: A method and system are disclosed for capturing observations of customer-premise equipment or customer-provided equipment (CPE) devices. The method includes reporting a problem detect by a user during use of a customer-premise equipment or customer-provided equipment (CPE) device with one or more specific buttons on a remote controller; and entering the problem into a log with a timestamp.

Abstract: A method for automatically binding an SBI communications digital certificate lifecycle to an NF lifecycle includes receiving, at an NRF, an NF deregister request message for deregistering an NF. The method further includes generating, by the NRF and in response to the NF deregister request message or successful completion of deregistration of the NF, a certificate revocation request message for revoking at least one digital certificate used by NF for SBI communications. The method further includes transmitting, by the NRF, the certificate revocation request message to a certificate authority. The method further includes receiving, by the NRF, an NF register request message identifying the NF. The method further includes determining, by the NRF, that the at least one digital certificate of the NF has been revoked.

Abstract: A method for protecting against unauthorized use of CMP client identity private keys and CMP public key certificates associated with NFs includes receiving, by a CMP CA proxy, a first CMP certificate request for renewing a security certificate associated with a first NF, the CMP certificate request including a public key certificate associated with the first NF and is protected by a CMP client identity private key associated with the first NF.

Abstract: A user environment can be enhanced by the interconnection of multiple network devices. A principal network device can connect to one or more auxiliary network devices. Based on one or more profile parameters, the principal network device can alter, change or modify an aspect or operation of one or more client devices in the user environment. The principal and auxiliary network devices can monitor, detect or sense environment parameters associated with a user or a location within the user environment so as to control one or more aspects or operation of the one or more client devices. The user environment can be controlled for any number of users and any number of client devices. Automatically or dynamically controlling the user environment based on profile parameters can enhance the experience of the user no matter where the user is within the user environment.

Abstract: A method for improving inter-PLMN routing by implementing health checks for remote SEPPs includes storing a target SEPP database including records corresponding to remote SEPPs to which SBI request messages can be routed. The method further includes receiving SBI request messages destined for NFs in PLMNs protected by the remote SEPPs, using the target SEPP database to select and route messages to the remote SEPPs. The method further includes, for each of the remote SEPPs, sending a health check message to the remote SEPP, determining, based on a response or lack of a response to the health check message that the remote SEPP is unhealthy or unreachable, and, in response, removing a record for the remote SEPP from the target SEPP database or marking the record for the remote SEPP to indicate that the remote SEPP is unhealthy or unreachable.

Abstract: The subject matter described herein includes a method for reducing the likelihood of successful denial of service (DoS) attacks by validating overload control information (OCI) scope information against network function (NF) profile information obtained using target resource identification information. The method includes receiving a service based interface (SBI) request message, obtaining, from the SBI request message, target resource identification information, obtaining NF profile information using the target resource identification information and storing the NF profile information, receiving an SBI response message including overload control information and scope information for the overload control information, using the stored NF profile information to determine whether the scope information for the overload control information is valid, and, in response to determining that the scope information for the overload control information is invalid, rejecting the SBI response message.

Abstract: A method, apparatus, article of manufacture, and a memory structure for managing media content having group watermarking data is disclosed. The method comprises transmitting a request to receive the media content from a content playback device, receiving a response to the transmitted request, fetching, by the content playback device according to the response, the requested media content and a watermark schema, the watermark schema fetched from cloud-based storage, identifying, by the content playback device, the group watermarking data in the media content according to the fetched watermarking schema, determining, by the content playback device if the media content is authorized for provision according to the group watermarking data and the fetched watermarking schema, and providing the media content for playback according to the determined authorization.

Abstract: An apparatus, method, and computer-readable recording medium act upon a voice input and replay a portion of streaming media data. The smart media device has a controller, a display, a buffer for maintaining a portion of streaming media data, a speaker, a microphone, a non-transitory memory storing a program, and a communication interface configured to establish communication connections with a remote server. The smart media device receives streaming media data for output to the display and speaker from the remote server, stores a portion of the streaming media data within the buffer, receives a voice command via the input microphone while media content is output to the display and speaker, generates a data representation of dialog contained within the buffer, and outputs the data representation of dialog to the display.

Abstract: A method for providing a security edge protection proxy (SEPP) router for routing messages between roaming hub SEPPs includes registering, at an SEPP router, a first roaming hub SEPP. Registering the first roaming hub SEPP includes receiving an NFRegister request from the first roaming hub SEPP, the NFRegister request including an NF profile of the first roaming hub SEPP, and storing, by the SEPP router, at least a portion of the NF profile of the first roaming hub SEPP. The method further includes receiving, at the SEPP router, a service-based interface (SBI) request message from a second roaming hub SEPP, and determining, by the SEPP router, a public land mobile network (PLMN) as an intended destination for the SBI request message. The method further includes routing, by the SEPP router, the SBI request message to the first roaming hub SEPP.

Abstract: A method for providing for optimized service based interface (SBI) communications by performing network function (NF) fully qualified domain name (FQDN) resolution at an NF repository function (NRF) includes, at an NRF including at least one processor, receiving NF register requests including NF profiles and/or NF service profiles, at least some of which include FQDNs and do not include Internet protocol (IP) addresses. The method further includes storing the NF profiles and/or NF service profiles in an NF profiles database. The method further includes resolving the FQDNs in NF profiles and/or NF service profiles into IP addresses. The method further includes receiving NF discovery requests. The method further includes generating lists of NF profiles and/or NF service profiles that match query parameters in the NF discovery requests. The method further includes providing the lists of NF profiles and/or NF service profiles including the IP addresses to consumer NFs in NF discovery responses.

Abstract: A method, apparatus, and computer program product for trickplay in HTTP live streaming (HLS), includes: establishing a connection to a content source; receiving a piece of content from a content source as a multimedia stream, wherein the multimedia stream comprises a digital living network alliance stream; converting the multimedia stream into a client stream that comprises a HLS stream, the HLS stream including a manifest file containing a plurality of transport stream packets; storing a pre-determined number of the plurality of transport stream packets in a temporary storage; outputting the client stream to a media player; receiving a first trickplay request from the media player, the first trickplay request being a pause request; in response to the first trickplay request: pausing the client stream; transmitting a signal keeping the connection to the content source alive and the multimedia stream active; and storing the multimedia stream in the temporary storage.

Abstract: A method for optimized routing of service based interface (SBI) request messages to remote network function (NF) repository functions (NRFs) using indirect communications via a service communication proxy (SCP) includes, at an SCP including at least one processor, receiving an SBI request message. The method further includes forwarding the SBI request message to a remote NRF. The method further includes determining that the remote NRF is unable to process the SBI request message, and, in response to determining that the remote NRF is unable, identifying a georedundant mate of the remote NRF. The method further includes forwarding the SBI request message to the georedundant mate NRF of the remote NRF that is unable to process the SBI request message.

Abstract: Methods and set-top boxes are disclosed for automated error detection. The method includes detecting, on an electronic device, a display device connected to the electronic device via a cable; identifying, on the electronic device, a type of display device connected to the electronic device via the cable; classifying, on the electronic device, the type of display device connected to the electronic device via the cable as one of a specific television model or a regular television model; and executing, on the electronic device, a fix for the specific television model. The method can include detecting, on an electronic device, a HDMI cable-related error from a HDMI transmitter of the electronic device; classifying, on the electronic device, a cause of the HDMI cable-related error from the HDMI transmitter; and communicating, by the electronic device, a recommendation to a user to remedy the HDMI cable-related error detected by the HDMI transmitter.