Abstract: One or more computing devices, systems, and/or methods for identifying anomalous behavior of users are provided. In an example, users of a telecommunication service provider may be segmented into a plurality of user segments based upon telecommunication service metrics associated with the users. A machine learning model may be trained using telecommunication service information associated with users of the first user segment to generate a trained machine learning model. Using the trained machine learning model, a forecast of telecommunication service usage associated with a first user segment of the plurality of user segments. A telecommunication service usage metric, associated with a user belonging to the first user segment, may be compared with a range indicated by the forecast. The user may be flagged as having anomalous behavior based upon a determination that one or more telecommunication usage metrics, associated with the user, are outside one or more ranges indicated by the forecast.

Abstract: The present disclosure relates to systems and methods for contactless checkout in a retail environment including a security pedestal located at an entrance or exit to a retail location. The system further includes a scanning device that is communicably coupled with the security pedestal. The self-checkout system and methods may also include a processing system that is configured to receive a list of items from the security pedestal and customer identification code from the scanning device. The system and method is configured to allow for a customer to scan his purchases at the security pedestal and pay for the purchases through the use of the customer identification code generated, preferably, using the customer's personal computing device.

Abstract: A computer-implemented method for identifying possible leakage paths of sensitive information may include (i) discovering an original set of users having permission to read the sensitive information at an originating storage device in an originating location via an original set of information transfer paths and (ii) performing a security action. The security action may include (A) determining an additional set of information transfer paths having information transfer paths other than the information transfer paths already discovered, via which the original set of users can write the sensitive information and (B) identifying an additional set of users having permission to read the sensitive information via the additional set of information transfer paths.

Abstract: In one embodiment, a method includes receiving, by a tracking system server, an instruction from relating to a feature of a second computing device. The method includes, in response to receiving a notification that a third computing device has received a tracking signal from the second computing device, transmitting an instruction for the second computing device relating to the feature to the third computing device. The method includes receiving a response message indicating that the second computing device has not received the instruction for the second computing device and transmitting a request to retransmit the instruction to the second computing device. The method includes receiving a response message from the third computing device indicating that the second computing device has acknowledged the instruction and transmitting a response message to the first computing device indicating that the second computing device has acknowledged the instruction.

Abstract: Methods, systems, and computer storage media for providing a network conflict management service that is associated with a network management engine of a cloud computing system. In operation, cross-premises networking information is accessed at a cross-premises networking information database. The cross-premises networking information comprises on-premise network extension data associated with managing and routing on-premise networks and a cloud-provider network. Networking information for a first network is retrieved from the cross-premise networking information database. The networking information of the first network is compared to networking information of a second network, the networking information of the second network (e.g., networking information associated with a request to create the second network). Based on comparing the networking information of the first network to the networking information of the second network, a determination is made that a network conflict exists.

Abstract: A method of updating a background data transfer, BDT, policy negotiated between an application function, AF, and a Core Network, CN, is disclose. The method is performed by a Policy Control Function, PCF, of the CN and comprises determining updated BDT policy information including updated conditions for the negotiated BDT policy and at least one candidate BDT policy for the AP to select when the PCF determines that the negotiated BDT policy is affected by degraded network performance. The determined updated BDT policy information is then sent to the AF by the PCF using notification type interaction, thereby effectively updating the negotiated BDT policy.

Abstract: A system described herein may provide for the selection of a charging function (“CHF”) associated with a particular user equipment (“UE”). A particular CHF may be selected, from a group of candidate CHFs, based on CHF selection criteria respectively associated with the candidate CHFs and attribute information associated with the UE. The attribute information may describe attributes of the UE, profile information associated with the UE, and/or attributes of traffic and/or bearers associated with the UE.

Abstract: Mechanisms for implementing a billing process between a first Public Land Mobile Network (PLMN1) and a second Public Land Mobile Network (PLMN2) for a subscriber of the PLMN1 that visits the PLMN2. A method comprises establishing a smart contract between the PLMN1, the PLMN2, and a Data Clearance House (DCH). The method comprises sending a subscriber usage record, represented by a distributed ledger, of the subscriber from the PLMN2 to the DCH using a blockchain upon the subscriber having visited the PLMN2, wherein the blockchain is based on the smart contract. The method comprises sending the subscriber usage record from the DCH to the PLMN1 using the blockchain.

Abstract: Systems, methods, and computer-readable media are disclosed for systems and methods of presentation and management of audio and visual content across devices. Example methods may include causing presentation of first audio content at a speaker device, causing presentation of a first audio notification indicative of visual content available for presentation, causing presentation of second audio content after the first audio notification, and sending first visual content to a first display device for presentation during presentation of the second audio content.

Abstract: Techniques are disclosed to determine one or more specific data points that may be found in or added to call metadata that will assist and/or enhance confidence score algorithms. A call request for an inbound VoIP telephony call may be received by a telephony server in a servicing telecommunications carrier network. The call request may be intended for a called party serviced by the servicing telecommunications carrier network. The servicing telecommunications carrier network telephony server may obtain a plurality of data points associated with the call request wherein at least one of the data points is an interconnect carrier, the interconnect carrier data point identifying which carrier handed the call to the servicing carrier. The servicing telecommunications carrier network telephony server may then send the plurality of data points to a confidence score generating process comprising an algorithm configured to determine a confidence score using the data points.

Abstract: A telecommunications network having enhanced or optimized quality of service (QoS) based on user behavior is described herein. A user behavior profile is generated by tracking the user's use of network services with corresponding location and metric information (e.g., QoS metrics). When a user equipment (UE) of the user connects to a network site, the user behavior profile is compared to a network profile site. The network site alters or adjusts one or more operating parameters to optimize delivery of a network service based on the user behavior profile. The user behavior profile is dynamic as it is continuously or repeatedly updated one or more records of interaction.

Abstract: A computer implemented method for inserting advertisement content into a program content stream includes receiving, by a headend content server, the program content stream. The program content stream includes an advertisement insertion cue. The method further includes detecting the advertisement insertion cue in the program content stream, and the advertisement insertion cue indicates an insertion point in the program content stream for inserting an advertisement. The method further includes modifying the advertisement insertion cue to indicate an expiration date and time for playout of a first advertisement content to be inserted into the program content stream, and inserting the first advertisement content into the program content stream.

Abstract: A method of provisioning radio resources to a user equipment (UE) by a cell site. The method comprises receiving by a cell site an indication of a UE capability from a UE, determining by the cell site a value of a network capability parameter to associate to the UE that is less than a maximum value of the network capability parameter that is compatible with the UE capability category of the UE, wherein the determining is based on a subscription service plan associated with the UE, and providing radio resources to the UE by the cell site based on the determined value of the network capability parameter, wherein the network capability parameter defines one of a radio modulation level, a carrier aggregation (CA) state, and a multiple input multiple output (MIMO) state.

Abstract: Technologies for preprocessing transaction authorization records for clearing data batch file generation include a settlement processing server. The settlement processing server receives transaction authorization records corresponding to authorized transactions. The transaction authorization records are appended to an initial authorization stream. The initial authorization stream is closed and the transaction authorization records appended thereto are split into substreams. The settlement processing server preprocesses the transaction authorization records in each of the substreams. While the transaction authorization records appended to the substreams are preprocessed, the settlement processing server initializes another authorization stream and appends newly received transaction authorization records thereto. A clearing data batch file is generated based at least in part on the transaction authorization records appended to each of the substreams. Other embodiments are described and claimed.

Abstract: Some implementations disclosed herein provide systems and methods that use an inmate-accessible electronic briefcase to facilitate an inmate's organization of significant content. Electronic documents are created and stored in an organized document storage area that may be accessed while the inmates are incarcerated and after the inmates are released.

Abstract: A charging function device may include a processor configured to obtain subscription information associated with a user equipment (UE) device in a wireless communication network. The processor may be further configured to receive, from a gateway device, data flow information relating to data flows associated with the UE device; receive, from a policy device, policy information relating to policies applied to the data flows associated with the UE device; generate a record for the UE device based on the received data flow information and the received policy information, wherein the record identifies at least one account charge based on a particular data flow associated with the UE device; and provide the generated charging record to an account system.

Abstract: Methods and apparatus, including computer program products, are provided for managing user equipment configuration. In some example embodiment, there may be provided an apparatus including at least one processor and at least one memory including computer program code, the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to at least: detect a network for registration; and send, to the network, an indication that the apparatus is using a default configuration for at least one service available at the network, when the apparatus is configured with the default configuration but does not include a network specific configuration for the network. Related systems, methods, and articles of manufacture are also described.

Abstract: A method performed by a charging system includes receiving a message related to delivery of a service to an end user device. The charging system searches a local storage system to find a session identifier associated with the message. In response to determining that the session identifier is not at the local storage system, a backend storage system is queried for subscriber account data associated with the session identifier. As a result, despite the absence of the session identifier and associated subscriber account data at the local storage system, the charging system can grant service units for the end user device based on the subscriber account data retrieved from the backend storage system.

Abstract: This application provides example methods, systems, and devices for performing charging on a network resource. One example method includes sending, by a network slice charging function device, a first message to a network slice management function device, where the first message includes an identifier of a network slice instance and filtering information, the filtering information indicates the network slice management function device to send a value that is of a network slice performance indicator of the network slice instance and that matches the filtering information, and the network slice performance indicator describes network performance of the network slice instance. The network slice charging function device can then receive a second message from the network slice management function device, where the second message includes the value. The network slice charging function device can then perform charging on the network slice instance based on the value.

Abstract: A wireless device to provide mobile gamification services includes a transceiver configured to transmit data, an application to remotely connect via a network to a mobile website, to download a game from the mobile website to the wireless device, to execute the game locally on the wireless device, to execute the game via the mobile website, to redeem game rewards associated with wireless services, and to select the game rewards associated with the wireless services, a processor to control the transceiver and execute the application, a display to display the game and the game rewards, and a computer readable medium to store the application and user preferences associated with the game and with the wireless services.

Abstract: There is disclosed a method for operating a wireless device in a wireless communication network. The method comprises configuring, by the wireless device, a reporting time window for transmitting a report to the wireless communication network and determining, by the wireless device, whether data transmission from the wireless device to the wireless communication network is scheduled for a transmission time within the reporting time window, as well as transmitting the report together with the scheduled data transmission if it is determined that such is scheduled for a transmission time within the reporting time window. There are also disclosed corresponding methods and devices.

Abstract: Systems, computer program products, and methods are described herein for source independent but source value dependent transfer monitoring.

Abstract: Location polygons are defined along traffic lanes and parking spaces to facilitate determination of the location of a vehicle relative to features associated with the location polygons. The location polygons are used, in one application, to identity entrance and exit of a special toll lane along a roadway, and to ensure that the vehicle properly enters and exits the tolling lane.

Abstract: Systems and methods for providing bandwidth congestion control in a private fabric in a high performance computing environment. An exemplary method can provide, at one or more microprocessors, a first subnet, the first subnet comprising a plurality of switches, and a plurality of host channel adapters, wherein each of the host channel adapters comprise at least one host channel adapter port, and wherein the plurality of host channel adapters are interconnected via the plurality of switches, and a plurality of end nodes. The method can provide, at a host channel adapter, an end node ingress bandwidth quota associated with an end node attached to the host channel adapter. The method can receive, at the end node of the host channel adapter, ingress bandwidth, the ingress bandwidth exceeding the ingress bandwidth quota of the end node.

Abstract: A device, such as Network Microphone Device or a playback device, detecting an event associated with the device or a system comprising the device. In response, an input detection window is opened for a given time period. During the given time period the device is arranged to receive an input sound data stream representing sound detected by a microphone. The input sound data stream is analyzed for a plurality of keywords and/or a wake-word for a Voice Assistant Service (VAS) and, based on the analysis, it is determined that the input sound data stream includes voice input data comprising a keyword or a wake-word for a VAS. In response, the device takes appropriate action such as causing the media playback system to perform a command corresponding to the keyword or sending at least part of the input sound data stream to the VAS.

Abstract: Inducements are provided to customers to regularly connect back to a service provider and report usage that is expressed using a count of requests from a local computing device for cloud-based operations such as packet routing, container instantiation, virtual machine (VM) utilization, calls to a service or application, and the like. The count information is reported within a secure context, such as a trusted execution environment (TEE), using public-private key pair cryptography by which key derivation is dependent on some form of counting. For example, a customer computing device that is subject to a usage license encrypts an operation count and reports it to the service provider.

Abstract: Disclosed are various embodiments for using unmanned vehicles to manage radio-based network infrastructure. In one embodiment, a determination is made to add coverage to a radio-based network via a radio unit. An unmanned vehicle carrying the radio unit as a payload is instructed to travel to a particular location. The unmanned vehicle is instructed to deliver the radio unit to the particular location. The radio unit is activated to add the coverage to the radio-based network.

Abstract: In a wireless communication network, distributed ledger circuitry executes a contract from an origin block and transfers an instantiation request for a wireless network slice to network orchestration circuitry. The network orchestration circuitry instantiates the wireless network slice responsive to the instantiation request from the distributed ledger circuitry. The wireless network slice delivers a wireless network service to the UEs and transfers slice usage data to the distributed ledger circuitry. The distributed ledger circuitry executes the contract from middle blocks and a termination block to form a blockchain that stores the slice usage data for the wireless network slice. The distributed ledger circuitry transfers a termination request for the wireless network slice to the network orchestration circuitry responsive to the execution of the contract from the termination block.

Abstract: A host device establishes a wireless communication link with a client device, and implements a wired communication standard on the link to transfer a first data stream. To increase data throughput while complying with the standard, the host device replaces synchronizing information in a packet to be sent during a first synchronizing frame with configuration information indicating that packet exchange data of a second data stream is to be sent or received during a second synchronizing frame. The host device sends or receives the packet exchange data of the second data stream to or from the client device during the second synchronizing frame via the wireless communication link. The host device may send or receive the packet exchange data of the second data stream during delays or idle periods between sending and/or receiving packets of the first data stream via the wireless communication link according to the wired communication standard.

Abstract: A policy-based security system for establishing a secure session from client devices to a web server includes a policy component with policies, a client device with a local application to select a cloud service, and a mid-link server. A set of policies from the policies is determined. An encryption link specified for the set of policies and the cloud service is determined. A set of session protocols is selected to establish the secure session between the client device and the web server based on the set of policies. It is determined whether the client device satisfies security standards of one or more session protocols from the set and based on the determination, either a direct link is selected to establish the secure session using a session protocol from the set or a secure tunnel between the client device and the mid-link server and a corresponding tunnel protocol is selected.

Abstract: A charging method includes: determining, by a control plane function entity (CP), that a data flow that is transmitted by user equipment (UE) on a first data session needs to be migrated to a second data session; charging, by the CP, the data flow on the first UP through a first charging session between the CP and a charging system; obtaining, by the CP, charging information of the data flow before the migration that is counted by the first UP; and determining, by the CP, a quota that is used for the data flow after the migration is necessary to be delivered to the second UP, and delivering the quota to the second UP, thereby charging a service data flow of a user in a case of migration between user planes.

Abstract: Methods and systems are provided for facilitating shared mobile payments. According to an embodiment, a user can initiate a purchase using a mobile device. The mobile device can display a total price for the purchase. The first user can cooperate with one or more second users to share the cost of the purchase. The cooperation can be facilitated via the first and second users' mobile devices.

Abstract: A first charging data record (CDR) generating node can receive charging server information and available CDR storage information from a second CDR generating node. The first CDR generating node can detect that the charging server is unavailable to receive CDRs from the first CDR generating node. The first CDR generating node can also determine that a CDR storage area corresponding to the first CDR generating node should not be used to store additional CDRs. The first CDR generating node can also select the second CDR generating node for storing the additional CDRs that are generated by the first CDR generating node. The second CDR generating node can be selected based at least in part on the charging server information and the available CDR storage information. The first CDR generating node can cause at least one CDR to be sent to the second CDR generating node.

Abstract: Techniques are described herein for providing radio resource ownership indicators in charging records for a charging function. In one example, a method may include determining, by a session management node of a mobile network, that a user equipment is utilizing a particular radio resource of a mobile network resource for a Protocol Data Unit (PDU) session of the user equipment, wherein the mobile network resource is capable of being utilized via a plurality of radio resources and the particular radio resources is associated with an enterprise entity; and reporting charging information for the PDU session of the user equipment to a charging function of the mobile network to facilitate storing a charging record for the user equipment that is to include an identifier of the enterprise entity that is associated with the particular radio resource.

Abstract: Carrier secure communications are provided by receiving, by a service provider device from an application interacting with a user device over a carrier network, an encrypted first request for user information. The carrier network intercepted a first request from the application based on a service provider identifier in the first request, and encrypted the first request to provide the network carrier encrypted first request to the service provider device. The service provider device may decrypt the encrypted first request to provide the first request and process the first request. The first request may include a carrier injected header that includes information about the user and/or user device that provided the first request. The information in the injected header may be used by the service provider device in processing the first request such as retrieving secure information without user credentials or storing data provided in the first request.

Abstract: A method for transaction handoff includes: registering a payment instrument with a server, associating the payment instrument with indirect tokens, and storing a payment token that associates the indirect tokens with the payment instrument and a device identifier in a database record; via a device, receiving an indirect token from the server; via a point-of-sale (POS) terminal, entering the indirect token, and transmitting indirect token via the internet cloud to the server; via the server, using the payment token to access the device identifier and transmitting a push notification; upon acceptance of the push notification, executing an application on the device and simultaneously displaying transaction details on both the device and POS terminal; receiving completion data that is entered via the device and transmitting the completion data to the server; and completing the transaction at the server and notifying the POS terminal and the device that the transaction is complete.

Abstract: The present disclosure is drawn to, among other things, a method of providing a payment terminal application on an electronic device, the electronic device comprising a volatile storage module, a user input module and a network interface module. In some aspects the method includes receiving user credentials from the user input module, transmitting an authentication request message to a remote data center via the network interface module, the authentication request message including the user credentials, receiving an authentication response message from the remote data center, the authentication response message including an indication as to whether authentication was successful, and if the authentication was successful, receiving at least one encryption key from the remote data center; and storing the at least one encryption key in the volatile storage module.

Abstract: Disclosed is technology for applying a differential QoS, that is, service quality for each communication service by implementing a differential QoS control in a radio section in a more detailed unit without an increase in complexity and load compared to a conventional bearer-based QoS control method.

Abstract: A wireless device may include: a radio frequency (RF) front end circuit to receive and process an RF signal; a mixer to downconvert the RF signal to a second frequency signal; a digitizer to digitize the second frequency signal; a channel filter to channel filter the digitized signal; a selection circuit having a first input coupled to the channel filter and a plurality of outputs each to couple to one of a plurality of demodulators; and the plurality of demodulators coupled to the selection circuit. The selection circuit may route the channel filtered digitized signal to a first demodulator of the plurality of demodulators based on a first configuration setting. The wireless device may also include a non-volatile storage with a configuration file including the first configuration setting. The configuration file may be automatically generated by a hardware configurator in response to a plurality of user input parameters.

Abstract: Embodiments include systems and methods for UE signaling a network regarding customized ringing signal (CRS) capability and use of such information by the network. Various embodiments may receiving from the network an INVITE message notifying the UE of an incoming call, determining whether the INVITE message indicates that the network provides CRS service if the UE supports a CRS function, and including an indication in a response to the INVITE that the UE supports the CRS function in response to determining that the INVITE message includes an alert information header field indicating that the network provides CRS service. Various embodiments include a network computing device receiving such information and performing negotiations for CRS service with the UE only if the UE indicates CRS functional capability.

Abstract: Systems and methods for achieving persistent interaction comprise receiving a first communication via a first communication channel, the first communication including a first service request; initiating a response to the first service request; storing information related to a first context of the first communication; in response to the first communication being terminated, storing a first stage information related to completion of the response to the first service request; receiving a second communication via a second communication channel, the second communication including a second service request; in response to the first service request being the same as the second service request, retrieving the information related to the first context; retrieving the first stage information; resuming the response to the first service request; storing information related to a second context and a second stage of completion of the second service request; and storing a second stage of completion of the response.

Abstract: A computer system receives an indication from a user that the user wishes to perform a mobile wallet transaction to transfer funds to a recipient using a mobile device. The transaction is authenticated by the computer system. The authentication includes receiving login credentials manually entered by the user and determining that the login credentials match stored login credentials for the user. The authentication further includes determining that the mobile device has a device token stored thereon that matches a device token stored in a database of the computer system. The device token uniquely identifies the mobile device in the computer system. The authentication further includes determining that the mobile device has a customer token stored thereon that matches the customer token stored in the database. The customer token uniquely identifying the customer in the computer system. The computer system transmits the funds to the recipient responsive to the authenticating step.

Abstract: Apparatus and methods for securing mobile payments during periods when network connections to a cloud computing environment are unavailable are provided. A mobile device may store one or more transaction maps. The transaction maps may include limitations on where offline payment requests may occur and be approved. Limitations may include monetary limitations on a value of an offline payment request. The mobile device may include a secure location for storing the one or more transaction maps. A transaction map may define one or more logical transaction zone. A logical transaction zone may define geographic limits on offline payment requests.

Abstract: A computer-implemented method may include: receiving, from a first electronic device during an unauthenticated session, a request for provisioning data, the request associated with identification data insufficient to begin an authenticated session; determining, based on the identification data, whether the request for the provisioning data is associated with an existing account; when the request for the provisioning data is determined to be associated with an existing account, obtaining the provisioning data based on a modifier not available if the request for the provisioning data is not determined to be associated with an existing account; and sending the provisioning data to the first electronic device.

Abstract: Disclosed herein are various embodiments for publishing a service offer set to a device agent on an end-user device and for on-device selection of a service. In some embodiments, a network system publishes a service offer set to an end-user device over a wireless access network, receives an offer set user selection from the end-user device, and provisions one or more network functions based on the offer set user selection.

Abstract: Systems, methods, and computer readable media are disclosed for providing a hand free interaction between a user and a dispenser device. In embodiments of the invention, a mobile communication device and a beacon device associated with the dispenser device (or the dispenser device operating as a beacon device) may perform mutual authentication with a federated platform. Once the entities are authenticated, the user may be allowed to dispense the resource utilizing the dispenser device. Data associated with the interaction and related to the resource dispensed may be provided to the federated platform via the mobile communication device and the interaction data may be recorded. The federated platform may subsequently provide the interaction data to a resource provider to enable the resource provider to conduct a settlement process.

Abstract: In one embodiment, a policy may be defined, which specifies that an operation be performed over a first set of channels before being performed over a second set of channels different than the first set of channels. The first set of channels may be associated with a first set of frequencies, and the second set of channels may be associated with a second set of frequencies. A network device may perform paging according to the defined policy. A user equipment (UE) may perform paging, page monitoring, cell selection triggered by paging, or cell reselection triggered by paging according to the policy. The policy may be hardcoded, pre-configured or dynamically configured using signaling messages.

Abstract: A method of providing secure communication between users of a network using layered security, the method includes providing a communicator to each user of a network, each user having user information including user hardware, user software, and user location stored within the network, providing multiple keys to each communicator and corresponding locks to the network, each key including a plurality of identifiers to confirm identity of the user, verifying that a user seeking to obtain access to the network has a communicator with keys that match all the locks stored on the network, and providing the user access to the network when the keys on the communicator are verified, wherein the plurality of identifiers is a combination of user hardware, user software, and user location.

Abstract: Systems and methods are described for performing peer-to-peer software distribution in a Unified Endpoint Management environment. In an example, an unenrolled user device can request enrollment from an enrollment server. The enrollment server can send a list of resources to the unenrolled user device that the unenrolled user device needs based on a group that the unenrolled user device is assigned to. The unenrolled user device can send an identifier of the group to a notification server, and the notification server can respond with an ordered list of enrolled user devices that the unenrolled user device can retrieve the resources from. The unenrolled user device can request the resources from the enrolled user devices on the list until the unenrolled user device receives all the resources from the resource list. The unenrolled user device can then install the resources to complete enrollment.

Abstract: Aspects of the subject disclosure may include, for example, determining whether a past throughput of past traffic communicated between a communication device and a communication network meets a first threshold value, resulting in a first determination; responsive to the first determination being that the past throughput meets the first threshold, transmitting an instruction to the communication device to restrict a first subsequent throughput of first subsequent traffic to no greater than a second threshold value; determining whether the first subsequent throughput has been restricted, resulting in a second determination; and responsive to the second determination being that the first subsequent throughput has not been restricted, taking one or more actions to enforce a second subsequent throughput of second subsequent traffic to no greater than a third threshold value, wherein the third threshold value is lower than the second threshold value. Other embodiments are disclosed.