Abstract: Embodiments herein relate e.g. to a method performed by a master node (QQ160) for handling communication of a wireless device (QQ110) in a wireless network. The master node (QQ160) transmits, to a secondary node, SN, a message before initiating a SN change procedure, which message indicates that an SN change is pending and as such the SN should not perform either a secondary cell group, SCG, reconfiguration or trigger any SN triggered procedures.

Abstract: A method, system and non-transitory computer-readable medium used for testing a plurality of circuits to determine open surfaces are disclosed. The method includes: receiving one or more of attack techniques, and known open surfaces; carrying out attacks on a circuit to determine vulnerable surfaces of the circuit; determining when new open surfaces exist in the circuit; updating an attack plan based on the new open surfaces; carrying out the attack plan; generating a report of the open and vulnerable surfaces; and updating a repository to include new attack techniques against newly discovered open surfaces of the circuit.

Abstract: A computer-implemented method for determining potentially undesirable voices, according to some embodiments, includes: receiving a plurality of audio recordings, the plurality of audio recordings comprising voices associated with undesirable activity, and determining a plurality of audio components of each of the plurality of audio recordings. The method may further comprise generating a multi-dimensional vector of audio components, from the plurality of audio components, for each of the plurality of audio recordings to generate a plurality of multi-dimensional vectors of audio components, and comparing audio components between the plurality of multi-dimensional vectors of audio components to determine a plurality of clusters of multi-dimensional vectors, each cluster of the plurality of clusters comprising two or more of the plurality of multi-dimensional vectors of audio components, wherein each cluster of the plurality of clusters corresponds to a blacklisted voice.

Abstract: A communications network is being accessed by a wireless device associated with a coverage class selected from a set of coverage classes. The wireless device performs a method comprising initiating network access to the communications network by transmitting a preamble sequence for random access on a physical random access channel during a starting opportunity defined by the coverage class of the wireless device. Each coverage class may be associated with a unique number of repetitions of the preamble sequence transmission.

Abstract: A method for updating a certificate issuer public key includes receiving, by an eUICC, first information sent by a LPA, where the first information includes a first CI public key identifier, and the first CI public key identifier is a CI public key identifier that the eUICC does not have. The method further includes sending, by the eUICC, second information to an OPS by using the LPA, where the second information includes the first CI public key identifier. The method further includes receiving, by the eUICC, a patch package sent by the OPS by using the LPA, where the patch package includes at least a first CI public key corresponding to the first CI public key identifier. The method further includes updating, by the eUICC, a CI public key of the eUICC by using the first CI public key.

Abstract: A facility for provisioning a device is described. The facility discerns an identifier that identifies the device, and transmits the identifier to a server computer system. The facility receives from the server computer system provisioning measures specified for the device. In response to receiving the specified provisioning measures, the facility performs the specified provisioning measures on the device.

Abstract: Methods and systems described in this disclosure receive a call from a device associated with a caller and request an indication of a context of the call. The system can send a request for authentication credentials in a push notification to the device. The push notification can be linked to an authentication tab or page in an application. After authentication of the caller, the system can direct the application to cause a tab or page associated with the subject matter of the call to be displayed on the qualified device.

Abstract: According to examples, an apparatus may include a processor and a computer readable medium on which is stored machine readable instructions that may cause the processor to determine a call duration threshold assigned to an entity, in which a phone number may be associated with the entity. The processor may also track durations of one or more calls placed to the phone number, determine whether the tracked durations of the one or more calls placed to the phone number meet or exceed the call duration threshold, and based on a determination that the tracked durations meet or exceed the call duration threshold, throttle placement of an additional call to the phone number.

Abstract: A control signaling processing method, a device, and a system relate to the field of communications technologies, to perform integrity protection on control signaling exchanged between a DU and UE in a CU-DU separated access network architecture. The method includes: determining, by a DU, integrity protection parameters and an integrity protection algorithm, where the integrity protection parameters and the integrity protection algorithm are used to perform integrity protection on a signaling radio bearer between the DU and UE; determining, by the DU, a message authentication code MAC-I based on the integrity protection parameters and the integrity protection algorithm; and receiving, by the DU, control signaling sent by an RRC layer of the DU, and sending, to the UE, the control signaling carrying the MAC-I.

Abstract: A setting system comprises a first electronic device and a second electronic device. The first electronic device is configured to output a password and setting information for the second electronic device. The second electronic device is configured to acquire the password and the setting information from the first electronic device, change setting of the second electronic device on the basis of the setting information, and lock the setting of the second electronic device using the password.

Abstract: A method is disclosed. The method includes establishing, by a first device, a wireless connection to a second device; transmitting a request, by the first device and to the second device, for location data indicative of a location of the second device; receiving, by the first device and from the second device, the location data indicative of the location of the second device; determining, by the first device, a distance between the first device and the second device based at least in part on the received location data; generating, by the first device, an altered value based on the received location data and the determined distance; and transmitting, by the first device and to the second device, the altered value and an account identifier associated with a user of the first device.

Abstract: An address retrieval system that retrieves the physical address of a user based on a request from another user. The address retrieval system can be connected to a network, such as a cellphone network, to allow a user to submit a request containing personally identifiable information, such as a phone number, of another user and the address retrieval system can locate/retrieve the requested address information and return the information to the requesting user or a third party. The release of the address information can be managed by a user-configurable privacy policy that provides rules, permissions and/or other management regarding the release of the user's address information.

Abstract: A method for configuring a terminal of a client user of an operator managing a first communications network. The method is implemented prior to the attachment of the terminal to a second communications network, for which transmission resources are temporarily used for routing data from the terminal to a remote server. The method includes receiving, from a control entity of the first network, a management instruction relating to the attachment of the terminal to the second network for a geographical zone. The method further includes configuring a data item relating to the control of the attachment of the terminal on the basis of the received management instruction, and transmitting, to the at least one terminal, at least one configuration parameter for attaching the terminal to the second network.

Abstract: Provided is an electric device, power device, electric device system, and management device capable of providing a theft prevention function that requires less effort as compared to the prior art. A power tool comprises a main power tool unit, and a battery pack 4 which can be attached to and removed from the main power tool unit. The main power tool unit and the battery pack each have a storage means for storing at least one authentication code and a communication means for transmitting and receiving the authentication code, and permit use when an authentication code received via the communication means matches at least one of the authentication codes stored in the storage means, and do not permit use when said authentication code does not match any of the authentication codes. The authentication code is set by a management device which is an external device.

Abstract: Apparatuses, methods, and systems are provided for securely configuring a Java Card virtual machine operating on a cellular device's application processor. In one embodiment, a connected device with an integrated cellular modem, a virtual universal integrated circuit chip and an integrated fingerprint scanner are used. In another embodiment, the cellular device's built-in camera is used, instead of an integrated fingerprint scanner, to capture the user's facial image.

Abstract: Repositioning of a display on a touch screen based on touch screen usage statistics. Usage information of the touch screen is obtained, based on using the touch screen, which includes a plurality of contact points. Based on the usage information, positioning information for a display to be depicted on the touch screen is determined. The display is to be used to enter data and includes multiple contact points. Based on the positioning information, the display is repositioned on the touch screen. The repositioning includes moving one or more contact points of the multiple contact points from one or more locations on the touch screen to one or more other locations on the touch screen.

Abstract: The position of a transmission device is estimated with a sufficient accuracy. A position estimation system includes a transmission device that includes a plurality of transmitters arranged symmetrically with respect to a specific reference position, a plurality of receivers that receive radio waves transmitted from the plurality of transmitters, and an estimation tool that estimates the position of the transmission device, based on reception strengths of the radio waves received at the receivers.

Abstract: Apparatuses that provide for secure wireless communications between wireless devices under cover of one or more jamming signals. Each such apparatus includes at least one data antenna and at least one jamming antenna. During secure-communications operations, the apparatus transmits a data signal containing desired data via the at least one data antenna while also at least partially simultaneously transmitting a jamming signal via the at least one jamming antenna. When a target antenna of a target device is in close proximity to the data antenna and is closer to the data antenna than to the jamming antenna, the target device can successfully receive the desired data contained in the data signal because the data signal is sufficiently stronger than the jamming signal within a finite secure-communications envelope due to the Inverse Square Law of signal propagation. Various related methods and machine-executable instructions are also disclosed.

Abstract: Devices, systems and methods use a first communication interface to connect with a local device via a first protocol and use a second communication interface to connect with a server via a second protocol. Embodiments relay secure communications between the local device and the server for authentication of the at least one local device by the server and responsive to authentication of the local device by the server, transmit information for storage in a secure memory of the authenticated local device.

Abstract: A wireless communication device transfer a high-priority message with a high-priority Quality-of-Service (QoS). Device circuitry receives a request for the high-priority message, and in response, signals a radio to wirelessly attach to a wireless network using a high-priority-attachment Establishment Cause. The circuitry generates a Session Initiation Protocol (SIP) message that includes the high-priority message and that indicates the high-priority-attachment Establishment Cause. The radio wirelessly attaches to the wireless network using the high-priority-attachment Establishment Cause. The radio wirelessly transfers the SIP message that indicates the high-priority-attachment Establishment Cause and that includes the high-priority message to the wireless network. The wireless network transfers the SIP message to a message network using the high-priority QoS responsive to the high-priority-attachment Establishment Cause used for wireless attachment.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for proximity-based device access. In some implementations, a first electronic device receives, over a wireless communication link, a message from a second electronic device in proximity to the first electronic device. The first electronic device determines that the second electronic device has been previously associated with the first electronic device as an authentication factor for accessing the first electronic device. The first electronic device receives an encrypted form of a password from the second electronic device over the wireless communication link. The first electronic device determines the password from the encrypted form of the password and provides the password to software executing on the first electronic device to enable access to the first electronic device.

Abstract: The present disclosure relates to an SMS processing method in an Internet of Things, a mobility management network element, and a terminal device, to provide an SMS service for an Internet of Things terminal device. One example method includes receiving, by a mobility management network element in a packet switched (PS) domain, a non-combined registration request from a terminal device. The non-combined registration request carries SMS only indication information. When determining that the mobility management network element in the PS domain cannot transfer an SMS for the terminal device through the PS domain, the mobility management network element in the PS domain sends a location update request to a mobility management network element in a circuit switched (CS) domain. The location update request is used to implement registration of the terminal device with the CS domain.

Abstract: A plurality of user segments is defined. Each user segment has a respective profile corresponding to one or more characteristics shared by one or more users. A plurality of elements of a user interface for a mobile application is defined. Each user segment is associated with a different subset of the elements. A first request is received to display the user interface on a first mobile device of a first user. In response to the first request, user data of the first user is analyzed. Based on the analysis, a first user segment to which the first user belongs is determined. The mobile application is then instructed to display the user interface according to a first customized layout on the first mobile device. The first customized layout includes a first subset of elements associated with the first user segment.

Abstract: A method includes identifying a real-world object in a scene viewed by a camera of a user device, matching the real-world object with a tagged object based at least in part on image recognition and a sharing setting of the tagged object, the tagged object having been tagged with a content item, providing a notification to a user of the user device that the content item is associated with the real-world object, receiving a request from the user for the content item, and providing the content item to the user. A computer readable storage medium stores one or more computer programs, and an apparatus includes a processor-based device.

Abstract: Systems and methods are disclosed for preventing relay or replay attacks using time-stamped, localized footprint data. An access device may receive, from one or more beacon transmitters, a plurality of broadcast messages, each broadcast message, of the plurality of broadcast messages, comprising a timestamp and a unique identifier for a beacon transmitter, of the one or more beacon transmitters. The access device may store the timestamps and the unique identifiers. The access device may receive, from a user device, an access request comprising timestamps and unique identifiers corresponding to a subset of the broadcast messages received by the access device. The access device may verify that the stored timestamps and unique identifiers match the timestamps and unique identifiers received from the user device. Based on the verifying, the access device may authenticate the access request.

Abstract: A device-to-device (hereinafter referred to as “D2D”) discovery for D2D communication and a related security method during the D2D communication are provided when a proximity based service (hereinafter referred to as “ProSe”), ProSe discovery, ProSe communication, and the D2D communication are performed in a mobile communication network, and thus a device for performing communication is capable of carrying out a security method for the ProSe discovery and the ProSe communication.

Abstract: A financial institution computing system associated with a financial institution includes an account management circuit configured to prompt a user via a user device to capture a first image of an identification item of the user and a second image of the user using the user device in response to receiving, over a network via a network interface, an input from the user device regarding establishing a new account at the financial institution. The account management circuit is further configured to receive, over the network via the network interface, the first image and the second image, verify the identity of the user by comparing the first image with the second image, and create the new account for the user by generating an account number for the user and storing the account number in the accounts database in response to the identity of the user being verified.

Abstract: A system comprises an eyewear device that includes a frame, a temple connected to a lateral side of the frame, a fingerprint sensor, and a sensing circuit. The fingerprint sensor includes an input surface to receive input of a finger skin surface. The sensing circuit is configured to track a pattern of fingerprint ridges of the finger skin surface on the input surface. Execution of programming by a processor configures the system to perform functions to track, via the sensing circuit, the pattern of fingerprint ridges of the finger skin surface on the input surface; generate a fingerprint image having the tracked pattern of fingerprint ridges; extract fingerprint features from the fingerprint image; and authorize the user to utilize the eyewear device based on the extracted fingerprint features.

Abstract: Certain aspects of the present disclosure relate to methods and apparatus for providing beam switch latency using communications systems operating according to new radio (NR) technologies. For example, the method generally includes determining a latency associated with a beam switch from a source antenna array module to a target antenna array module when the target module is in a low power mode; and signaling a base station to use the determined latency after sending a command for the beam switch.

Abstract: A processing method and a terminal device are provided. The processing method comprises, provided that a storage device stores an association relationship between a first communication identifier and a first device identifier corresponding to a terminal device, and the terminal device is not connected to the storage device, monitoring whether a predetermined condition is satisfied. The processing method further comprises, in response to monitoring that the predetermined condition is satisfied, performing a corresponding process. After the terminal device and the storage device are connected, the storage device stores an association relationship between a second communication identifier and a device identifier corresponding to the terminal device.

Abstract: Disclosed are various examples for remotely restricting client devices. A client device can be placed into a restricted mode in which application switching capabilities of the client device are disabled. Additionally, the client device can transmit screen capture data to a management service, which can provide the ability for an administrator user to monitor data shown on a display associated with the client device. The client device can also be removed from the restricted mode in response to a command sent from the management service to the client device.

Abstract: A service interface template for an enterprise mobile service of a mobile network may be provided for use by an enterprise. The service interface template may involve an API at an API endpoint for enterprise exposure and control over at least a subset of mobile service functions of the mobile network for use in relation to a plurality of UEs of the enterprise. The API may be defined by API request types to perform operations in relation to resources of a data store. The resources may include a collection of selectable parameter indication elements corresponding to selectable parameter indications for use in provisioning mobile service functions. A backend interface function may be provided for the API endpoint, to cause the provisionable mobile service function to be provisioned and/or executed with provisionable parameters corresponding to a selected one of the selectable parameter indications received via the API endpoint.

Abstract: Methods, systems and computer program products for intrusion detection are provided. Aspects include receiving, by a processor, internet of things (IoT) device data from each of a plurality of IoT devices, wherein the IoT device data comprises operational data and non-operational data associated with each of the plurality of IoT devices. A security model is built for the plurality of IoT devices based at least in part on the IoT device data, wherein the security model comprises one or more IoT device data ranges. The plurality of IoT devices are monitored to identify a potential intrusion in any of the plurality of IoT devices based at least in part on the IoT device data exceeding any of the one or more IoT device data ranges.

Abstract: Systems, methods and apparatus are disclosed for improving medical procedures and medical procedure management, and, more particularly, for tracking medical instruments throughout a procedure and assisting medical personnel throughout the procedure or at least at the conclusion of the procedure. In one form, an apparatus for tracking medical instruments throughout a procedure is disclosed having a single camera for tracking movement and/or detecting position of a plurality of medical instruments during a medical procedure as at least one of the plurality of medical instruments is moved between multiple zones at least including a first prep zone and a second procedure zone. The apparatus having a controller connected to and collecting images from the camera, and a display in electrical communication with the controller and/or the camera for displaying medical instrument data pertaining to the movement and/or position of the plurality of medical instruments.

Abstract: Aspects of the subject disclosure may include, for example, accessing first information for a first wireless access device associated with a first wireless access network in first communication with a portable communication device and accessing second information for a second wireless access device associated with a second wireless access network. A determination is made according to the first information and the second information, to facilitate second communication between the portable communication device and the second wireless access network via the second wireless access device. A first portion of a first geographic area associated with the second wireless access device is covered via a directional capability responsive to a determination to facilitate the second communication between the portable communication device and the second wireless access network. The directional capability facilitates the second communication between the portable communication device and the second wireless access device.

Abstract: The present invention discloses a system and method of preforming integrated mobile number portability (MNP) and remote SIM provisioning (RSP). The method includes: receiving, by a recipient BSS, a subscription request comprising an MNP request indicator from a user equipment; requesting, by the recipient BSS, the subscription request to a recipient Subscription Manager-Data Preparation (SM-DP) to initiate the RSP, creating, by the recipient SM-DP, a recipient MNO profile comprising a recipient MSISDN upon confirmation receipt of the Download Order by the recipient BSS, registering, by the recipient SM-DP, an MNP event in a Subscription Manager-discovery Server (SM-DS) to initiate the MNP, retrieving, by the UE, RSP event details from the SM-DS to execute profile download, and executing, by the UE, the MNP event and the RSP by transferring an eUICC functioning from a donor MNO profile to the recipient MNO profile at porting date and time.

Abstract: An embodiment of the present invention relates to a method for performing measurement by a terminal in a wireless communication system, the method comprising the steps of: receiving D2D signals transmitted by a plurality of relay terminals; and performing measurement using at least one signal among the D2D signals, wherein the D2D signal subjected to the measurement is a D2D signal having a valid CRC.

Abstract: Examples disclosed herein relate to a method comprising receiving, at a network device, an authentication message intended for a user from an authentication server. The network device may be registered with the authentication server as a source device for the user. The method may also include determining, by the network device, a management device for the user that is the intended recipient of the authentication message. The authentication server is not configured to securely connect to the management device directly. The method may also include transmitting the authentication message from the network device to the determined management device.

Abstract: Methods, systems, and computer readable media for utilizing predetermined encryption keys in a test simulation environment are disclosed. In one embodiment, a method includes generating, prior to an initiation of an Internet protocol security (IPsec) test session, a private key and a public key at a traffic emulation device and storing the private key and the public key in a local storage associated with the traffic emulation device. The method further includes retrieving, from the local storage, the private key and the public key upon the initiation of the IPsec test session between the traffic emulation device and a device under test (DUT) and generating a shared secret key utilizing the retrieved private key and a DUT public key received from the DUT.

Abstract: At a network element, a first TEID is determined that is associated with a default bearer between a UE and a first APN. A determination is made whether a tunnel discovery procedure should be performed to discover a second TEID associated with a dummy bearer. The dummy bearer is associated with the UE and a second APN. The tunnel discovery procedure is performed to discover the second TEID, and the dummy bearer is set up between the network element and the UE. Data arriving at the network element from the core network and toward the UE is routed over one of the default bearer, using the first TEID, or the dummy bearer, using the second TEID. Data arriving at the network element from the UE and toward the core network is routed over only over the default bearer. Apparatus, methods, and computer programs and products are disclosed.

Abstract: A node-enabled logistics vehicular system is described having a logistics vehicle with a storage area (having a lockable opening) and a master node. The master node has location circuitry for self-determining its location and an actuator controlling access to the storage area via the lockable opening. The master node, when executing delivery release control code maintained on the master node's memory, is operative to identify an intended delivery location associated with a node-enabled item being shipped in the storage area from the shipping information stored in the memory, cause the location circuitry to detect a current location of the logistics vehicle, and selectively cause the first actuator to change the state of the first lockable opening to an open state to provide delivery access to the item within the first storage area based upon the detected current location of the logistics vehicle and the identified intended delivery location.

Abstract: One example method of operation may include identifying one or more call parameters associated with each of a number of calls received over a fixed period of time, assigning scores to each of the calls based on the one or more identified call parameters for each of the plurality of calls, assigning one or more of the calls to a scam call category based on the assigned scores, and responsive to the assigning of the one or more of the calls to a scam call category, determining whether a number of remaining calls of the calls, which are not assigned to the scam call category, have increased or decreased beyond a deviation margin of a target percentage of calls.

Abstract: The present disclosure relates to a pre-5th-Generation (5G) or 5G communication system to be provided for supporting higher data rates Beyond 4th-Generation (4G) communication system such as Long Term Evolution (LTE). A method for communicating by a user equipment with a macro cell base station and a small cell base station in a communication system is provided. The method comprises applying a first base station security key to a first communication link with the macro cell base station; generating a second base station security key to be used for a second communication link with the small cell base station based on the first base station security key; applying the second base station security key to the second communication link with the small cell base station; and communicating through at least one of the first communication link and the second communication link.

Abstract: Systems and methods for weak authentication data reinforcement are described. In some embodiments, a request to authenticate a user is received. A user password is determined to be a weak password. The user is verified to be human by initiating a human verification process. In response to verifying that the user is human, an option is provided to replace the weak password with a strong password.

Abstract: A wireless device determines a location, identifies a mobile network operator (MNO), and/or experiences a network event. In some instances, the wireless device recognizes a base station as being operated by the MNO. Based on the location, the MNO and/or the network event, the wireless device determines a security action. The security action can include one or more of: (i) ignoring a network command associated with the network event, (ii) providing an alert notification via a user interface of the wireless device alerting a user of a security risk associated with the location, MNO, and/or network event, or (iii) ignoring communication from the base station temporarily or for an indefinite period of time. In some instances, the security action includes proceeding with normal communication with the base station at the location using network services of the MNO.

Abstract: The present invention discloses, inter alia, a computerized system for building a multisensory location map, the system comprising an interface for receiving multiple multisensory data vectors acquired by multiple mobile devices at multiple locations and accelerometer readings obtained upon movement of at least one device carried by at least one user between the multiple locations; at least a portion of said movement being walking; at least a majority of the multiple locations are located within an area in which an accuracy of global positioning system (GPS) based navigation is below an allowable threshold; and a processor, interconnected with said interface, with accelerometers, a magnetometer and a map calculator, configured for: extracting, out of accelerometer readings, accelerometer information related to multiple walking phases of the walking; for at least two of said multiple walking phases, real-time correcting a currently measured Z vector, and a pitch angle and a roll angle thereof, thereby compensa

Abstract: A method and a device for integrity protection are provided in the present disclosure, wherein the method for integrity protection applied to a base station includes: the base station sending configuration information for integrity protection to a terminal by a radio resource control (RRC) layer message, wherein the configuration information for integrity protection is used for configuring an integrity protection function for at least one transmission resource used by the terminal in the transmission of service data.

Abstract: A security registry and tracking system (SRTS) is described that aims to address a need for security by helping law enforcement identify individuals through tracking of movement of mobile devices, such as cellular phones. A computing device is directed to communicate with a mobile networking and tracking system configured to identify a mobile device entering a premise of a subscriber network; obtain an identification number of the mobile device; store the identification number of the mobile device and forward the identification number to at least one governmental authority system; and receive authentication data from the at least one governmental authority system. Further, the computing device can generate population records and identification databases based at least in part on the location information and the data transferred between the mobile networking and tracking provider and the security registry.

Abstract: Disclosed are systems and methods for improving interactions with and between computers in content searching, hosting and/or providing systems supported by or configured with devices, servers and/or platforms. The disclosed systems and methods provide a novel framework for providing users with electronic retrieval capabilities that are activated upon the users' determined locations respective to real-world locations associated with a message providing entity. The disclosed technology combines the previously separate systems of mail extraction, geo-fencing and content delivery (e.g., notification) into a single system that efficiently manages a user's inbox in order to provide the user with content the user has expressly indicated is of interest to that user.

Abstract: A method of a User Equipment, UE, in a 3rd Generation Partnership Project, 3GPP, compliant mobile communications network supporting dual connectivity, and a corresponding UE. The method comprises detecting a signalled reconfiguration procedure of a Data Radio Bearer, DRB, having or changing to a DRB type in which downlink, DL, data is received from only serving cells of a Secondary Cell Group, SCG, connected to a Secondary eNB, SeNB, via an SCG DRB, or in which DL data is received from a SCG and also from serving cells of a Master Cell Group, MCG, connected to a Master eNB, MeNB, via a split DRB.