Abstract: A method for performing a location and velocity check at an SEPP to protect against a spoofing attack includes receiving an SBI request message relating to authentication of UE. The method further includes querying a database NF to obtain previous authentication information for the UE, the previous authentication information including a previous network identifier and a previous authentication time for the UE. The method further includes receiving a response from the database NF, the response including the previous network identifier and the previous authentication time.

Abstract: A transmit chain (TX chain) of a user equipment (UE) transmits an uplink signal to a first wireless network associated with a first base station or a second wireless network associated with a second base station. The uplink signal includes information indicative of a first receive chain (RX chain) of the UE being synchronized to the first base station to receive first traffic from the first wireless network, and a second RX chain of the UE being synchronized to the second base station to receive second traffic from the second wireless network. The UE transmits uplink traffic for the first wireless network and the second wireless network to the second base station via the TX chain of the UE.

Abstract: The present disclosure provides a method for performing a handoff by a vehicle in an IP-based vehicular network, the method including: transmitting a first router solicitation (RS) message to a first road-side unit (RSU) to access the vehicular network, the first RS message including mobility information of the vehicle; and receiving a first router advertisement (RA) message from the first RSU as a response to the first RS message, the first RA message including a first prefix of the first RSU for configuring an address of the vehicle, wherein the vehicle performs a first address registration procedure based on the first prefix.

Abstract: A method for managing network services for a cellular network provider. The method includes receiving, via a GUI, a query input of an MSISDN number associated with a subscriber and querying a first external system using the MSISDN. In response to the query of the first external system, the method includes receiving a first set of subscriber information. The method includes querying a second external system using the MSISDN number to determine an IMSI number associated with the subscriber, and querying a third external system using the IMSI number. In response to the query of the third external system with the IMSI number, the method includes receiving a second set of subscriber information and populating one or more fields of the GUI with the first and second set of subscriber information.

Abstract: Apparatuses, methods, and systems are disclosed for supporting a notification procedure during 5G registration over a non-3GPP access network. One apparatus includes a transceiver that communicates with a mobile communication network (“MCN”) via a trusted non-3GPP access network (“TNAN”) and a processor that receives a message that starts an EAP session with an access gateway in the TNAN. Here, the EAP session facilitates the establishment of a NAS signaling connection between the apparatus and the MCN and to encapsulate NAS messages exchanged between the apparatus and an AMF in the MCN. The processor receives an EAP notification request from the access gateway before the EAP session is completed. Here, the EAP notification request including at least one access parameter. The processor sends an EAP notification response and completes the EAP session.

Abstract: The disclosed system obtains an international mobile subscriber identity (IMSI) range of multiple UEs operating on a first network. The system obtains a subscription profile and authentication credentials of a UE among the multiple UEs. The system stores the IMSI range, a first subscription profile, and the authentication credentials in a second database of a second network. The second network provides connectivity to the UE when the UE is outside the limited geographical range of the first network. The system receives a request from the UE to connect to the second network when the UE is outside the limited geographical range. The system reduces network traffic by authenticating the UE using the authentication credentials stored in the second database and determining that the service is authorized to be provided to the UE based on the subscription profile stored in the second database without communicating with the first network. Upon authenticating the UE, the system provides the service to the UE.

Abstract: Systems, methods, and software of performing a UE challenge. In one embodiment, User Equipment (UE) initiates a UE challenge procedure to a home network before engaging in a primary authentication procedure by generating a UE challenge by encrypting a random nonce with a home network public key, and transmitting a first message containing the UE challenge toward the home network. The UE receives a second message containing a challenge response to the UE challenge, processes the challenge response to determine whether the home network decrypted the random nonce in response to the UE challenge, and verifies an identity of the home network when the home network decrypted the random nonce in response to the UE challenge.

Abstract: A system includes a session border controller (SBC) coupled to an internet protocol (IP) multimedia core subsystem (IMS) of a telecommunications network. The SBC obtains information indicative of a roaming profile of a particular subscriber associated with the telecommunications network. The roaming profile indicates geographic areas in which the particular subscriber is authorized to access a communications service. The SBC receives a request to connect a particular voice call over a Wi-Fi network from a wireless device on the telecommunications network. The wireless device is associated with the particular subscriber to the telecommunications network. The SBC identifies a current location of the wireless device and compares the current location of the wireless device with geographic areas in which the particular subscriber is authorized to access the communications service. The SBC can then enable or deny the IMS to establish a session for the particular voice call over the Wi-Fi network.

Abstract: Apparatuses, methods, and systems are disclosed for accessing a mobile communication network using a User Identifier. One apparatus (600) includes a processor (605) that establishes (805) a first connection with a remote unit and a transceiver (625) that receives (810) a first request via the first connection to create a User Profile. The processor (605) determines (815) whether the User Profile is to be linked with a third-party account and, if so, creates (820) the User Profile based on information in the third-party account and, if not, creates (825) the User Profile based on information received from the first device. The transceiver (625) sends (830) to the remote unit via the first connection a Device User Profile and sends (835) a second request to the mobile communication network to store the User Profile.

Abstract: A first UE can receive a request to communicate from a second UE. The first UE and the second UE can exchange a first cryptographic key and a second cryptographic key associated with the first and the second UE, respectively. The first UE can receive an encrypted unique identifier associated with the second UE, where the unique identifier identifies a second wireless telecommunication network serving the second UE. The first UE can authenticate the second UE by sending the encrypted unique identifier to a first wireless telecommunication network and sending a request to confirm that the unique identifier is valid. The first UE can receive, from the first wireless telecommunication network, a confirmation that the unique identifier is valid. Upon receiving the confirmation, the first UE can engage in a communication with the second UE.

Abstract: A method for selective inter-PLMN security handshake validation includes receiving, at a SEPP, a first inter-PLMN security handshake request message. The method further includes performing, by the SEPP and in an SEPP trust relationship database, a lookup to determine whether the first inter-PLMN security handshake request message originates from a trusted SEPP. The method further includes determining that the first inter-PLMN security handshake request message does not originate from a trusted SEPP, and, in response, performing, by the SEPP, an inter-PLMN security handshake validation procedure on the first inter-PLMN security handshake request message. The method further includes determining that the first inter-PLMN security handshake request message fails the inter-PLMN security handshake validation procedure, and, in response, performing a network protective operation.

Abstract: Systems, methods, and devices that relate to enabling roaming users to use various communication services by assigning temporary local numbers are disclosed. In one example aspect, a method for wireless communication includes entering a visited network by a roaming device. The roaming device has a primary number associated with its home network. The method includes requesting a local number associated with the visited network by the roaming device and performing a communication using the local number associated with the visited network.

Abstract: Provided is a method for manufacturing a metal smart card comprising a metal insert having a peripheral edge extending to the peripheral edge of the card and at least one printed cover sheet. The method comprises the steps of assembling a printed support sheet and at least one insert using an assembly tray comprising elements for positioning the support sheet and each insert, and extracting each metal smart card from the printed support sheet by cutting or machining the sheet around a periphery of the insert. Other embodiments disclosed.

Abstract: A system and method for delivering and receiving Short Message Service (SMS) messages between users connected to satellite and cellular networks. The system includes a communication device capable of operating in either satellite or cellular modes, a satellite service provider, a satellite proxy network, and a cellular operator. The method involves monitoring the network mode of the user device, relaying information about the user device's connection to the satellite network via a specially formatted SMS payload and registering the user device with a cellular operator when in satellite mode. The satellite proxy network serves as an anchoring point for sending and receiving SMS messages, ensuring seamless message exchange between satellite network users and cellular network users. The user device is designed to automatically switch between satellite and cellular modes based on network availability, ensuring continuous communication.

Abstract: A method for providing call intelligence to a signaling firewall in a communications network includes collecting, by a network security service component, call session data from incoming and outgoing calls involving a mobile device and providing, by the network security service component, the call session data to a signaling firewall via an application programming interface (API). The method further includes receiving, by the signaling firewall, an update location request message associated with the mobile device, extracting signaling message information that includes current location data and timestamp data from the received update location request message, and utilizing the current location data and the timestamp data to identify a correlated portion of the call session data.

Abstract: Techniques are disclosed relating to identifying connection quality for locations within an environment. A first computing device may collect environment information pertaining to a layout of an environment in which the first computing device and a second computing device are located. The first computing device may be in wireless communication with the second computing device. The first computing device may determine, based on the environment information, a location within the environment to locate the first computing device to improve the wireless communication. The first computing device may provide an indication of the location to a user of the first computing device.

Abstract: Systems and methods described herein facilitate the tracking of shared ownership of assets, such as real property as well as other types of property, using distributed ledger technology (DLT) techniques. For example, in timesharing scenarios, by storing data relating to shared ownership of particular assets in a distributed ledger, such as a blockchain, various aspects of the shared ownership of the shared asset may be tracked in an immutable and secure manner with all parties involved having transparency into the data relating to the shared asset. For example, the embodiments described herein enable tracking of certain aspects relating to shared ownership of a shared asset, such as scheduling of time periods during which certain share owners may take custody, tracking of transfers of custody of the shared asset between share owners, transfer of control of smart devices associated with the shared asset, and so forth.

Abstract: A method is provided which includes receiving location information, performing a selection operation to select an International Mobile Subscriber Identity (IMSI) for obtaining temporary bootstrap connectivity, and attempting to register with a network using the selected IMSI. The selection operation is configured to select one of a first plurality of IMSIs in a first location and one of a second, different, plurality of IMSIs in a second location. Each of the first plurality of IMSIs includes a first predetermined value for at least the first portion of each respective IMSI and each of the second plurality of IMSIs includes a second, different, predetermined value for at least the first portion of each respective IMSI. The selection operation comprises a first and second preconfigured selection characteristic. A network access element, host device, and network node, according to the method, are also described.

Abstract: A method comprises storing, at a storage bucket of the communication system, an import file received from a client application at a workstation, wherein a user defined function of the communication system is triggered to execute when the import file is received from the workstation, retrieving, by the user defined function, the import file from the storage bucket, processing, by the user defined function, the import file to obtain a geospatial file, storing the geospatial file in a cloud database of the communication system, fetching, by an application of the communication system, the geospatial file from the cloud database, and generating, by a visualization application of the communication system, the multilayer geographical virtualization based on the geospatial file fetched from the cloud database.

Abstract: Aspects of the subject disclosure may include, for example, a non-transitory, machine-readable medium, comprising executable instructions that, when executed by a processing system including a processor, facilitate performance of operations including receiving a call; selecting a next carrier to handoff the call; generating a call data record (CDR) for the handoff to the next carrier; encrypting the CDR using a call encryption key, thereby creating an encrypted CDR; encrypting the encrypted CDR using a committee encryption key, thereby creating a double encrypted CDR; recording the double encrypted CDR to a blockchain; and sending the call encryption key to the next carrier. Other embodiments are disclosed.

Abstract: According to an embodiment, a communication system includes a plurality of first communication control devices and a second communication control device. The first communication control devices each includes a wireless communication unit and a controller. When receiving data to be transmitted from the first device to the second device, the controller determines a communication path in the mesh network for transmission of the data to the network communication network from the first communication control device that receives the data, performs mutual authentication with the second communication control device communicating via the communication path and the network communication network, and thereafter transmits encrypted data obtained by encrypting the data to the second communication control device.

Abstract: A method for adapting the security settings of a communication station (12) depending on a security relevant event is disclosed, wherein the communication station (12) comprises a mobile terminal (16) with an identification module (18). In a first step, the security relevant event occurring in said communication station and/or said mobile terminal (16) is identified in an event handler (26, 261, 262, 27) and stored in an event registry (28). In a second step, a security registry (30) in the identification module (18) is updated according to the identified event. In a third step, the security level of the communication station (12) and/or the mobile terminal (16) is adapted according to the security registry (30) of the identification module (18). The invention also relates to a communication station (12) and to an identification module (18).

Abstract: In one implementation, a communications satellite includes a main antenna system and a communications controller. The main antenna system is configured to send communications to and receive communications from one or more terrestrial terminal devices. The communications controller has a memory storing a plurality of terminal attribute sets, each of which specifies attributes for communicating with a corresponding class of terrestrial terminal devices.

Abstract: Aspects directed towards steering of roaming (SoR) are disclosed. In one example, a communication from a public land mobile network (PLMN) is received by a user equipment (UE) in which the communication indicates an acceptance of a UE registration with the PLMN. This example further includes performing a determination of whether an SoR indicator associated with a home PLMN (HPLMN) is embedded within the communication. The UE then manages PLMN selection according to the determination. In another example, a UE is configured to operate according to an SoR configuration in which the UE is configured to ascertain whether an SoR indicator is embedded within a communication from a PLMN. An SoR indicator associated with an HPLMN is then generated and subsequently transmitted from the HPLMN to the UE via the PLMN.

Abstract: Seamless communication between mobile communication networks complying with different standards is enabled. A method including a first step group executed by a processor of an information processing apparatus, the first step group including the steps of: acquiring a position registration request from a user terminal; judging whether an identification number of a first communication carrier included in the position registration request is different from an identification number of a communication carrier associated with the user terminal, which is registered with a subscriber database; and instructing a mobility management node to set a first network of the first communication carrier when the identification number of the first communication carrier is different from the identification number of the communication carrier registered with the subscriber database.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for securely certifying products in an ecosystem. In some implementations, a digital platform receives a user request to access digital models. The digital platform determines whether the user is authorized to access the digital models. In response, the digital platform generates a transaction request to send to a location of the digital models, wherein the transaction request comprises data identifying operations to perform using the digital models. The digital platform transmits, to the location of the digital models, the generated transaction request that causes execution of the operations. The digital platform receives data representative of a result of the operations performed. The digital platform provides, to a user interface of the user device, the data representative of the result. The digital platform audits the data related to the transaction request and the data representative of the result.

Abstract: A method for triggering a search for a high-RAT network includes when it is detected that a WI-FI of a terminal device is disconnected, a terminal device moves out of an elevator, or a terminal device moves to another location with a better signal, the terminal device is triggered to start background searching for a network, and attempt to camp on and register with the high-RAT network.

Abstract: A process and system for implementing a dynamic roaming public land mobile network (PLMN) for at least one wireless network and at least one wireless device includes determining with a processor that at least one wireless device would benefit from modification of a public land mobile network (PLMN) based on at least one of the following: the at least one wireless device having poor wireless service performance, a change in wireless service rates for a wireless service carrier, reduced wireless service from a wireless service carrier, and a change in geographic location of a user of the at least one wireless device. Thereafter, the process and system updating a public land mobile network (PLMN) for the least one wireless device.

Abstract: A computer-implemented method of provisioning a software service is provided. In one example, the method includes: receiving a request to provision the software service, the request including information indicating a profile configuring the software service on a source deployment platform; obtaining the profile based on the request from a web server interface; determining a version of the software service for provisioning the software service on a destination deployment platform; and generating a deployment document, the generating comprising writing the determined version of the software service to the deployment document.

Abstract: A method for connecting a terminal outside the range of its home network, to a network of a visited area covered by a plurality of networks. The method includes sending a request relating to the connection, including an identifier relating to the visited area, receiving a response message to the request, including a list of at least one network of the plurality of networks, to which the terminal should connect in priority, disconnecting the terminal and connecting the terminal to the priority network of the list. A processing method includes receiving the request including an identifier relating to the visited area, obtaining, on the basis of the identifier, the list of at least one network from the plurality of networks, to which the terminal should connect in priority, and sending a response message to the request, including the list.

Abstract: This application discloses a measurement method and apparatus, and a device. The method includes: the terminal device divides all neighbors detected on a same measurement frequency into at least two measurement groups, and performs RRM measurement separately on the at least two measurement groups based on an RRM measurement parameter corresponding to each measurement group, where the at least two measurement groups are in a one-to-one correspondence with at least two RRM measurement parameters, and the terminal device has different power consumption when performing RRM measurement on the at least two measurement groups based on the corresponding RRM measurement parameters.

Abstract: A UE may select one or more paging attributes for paging reception. The one or more paging attributes may be selected from a set of network supported paging attributes. The UE may transmit, to a network, an indication of the one or more paging attributes for paging reception. The UE may receive, from the network, a response message based on the indication of the one or more paging attributes. The response message may include a first UE group number. The first UE group number may be based on at least the one or more paging attributes. The UE may receive a paging indication including a UE group number. The UE may proceed to receive and decode the paging message associated with the paging indication when the UE group number in the paging indication matches the first UE group number. Otherwise, the UE may safely disregard the paging message.

Abstract: Disclosed are an electronic apparatus for wireless communication, a wireless communication method and a computer-readable medium. The electronic apparatus for wireless communication comprises a processing circuit. The processing circuit is configured to perform control so as to send, by means of beam-based non-terrestrial network communication, information about beam switching of a base station to a user equipment, to determine a temporal or spatial position of beam switching, and to perform control so as to perform beam switching when the determined temporal or spatial position is reached.

Abstract: Aspects of the subject disclosure may include, for example, a processing system determining a first communication device initiating a communication session with a second communication device, and transmitting a notification to the second communication device. The notification indicates to the second communication device to initiate a location verification application on the second communication device, and the location verification application transmits notifications to adjacent network devices. Each notification indicates to an adjacent network device to provide its location to the processing system. Further embodiments include receiving locations from the adjacent network devices, and identifying a first location associated with the second communication device. Additional embodiments include determining that the first location is in proximity to the locations, and establishing the communication session between the first communication device and the second communication device.

Abstract: Presented herein are techniques to facilitate fast roaming between a mobile network operator-public (MNO-public) wireless wide area (WWA) access network and an enterprise private WWA access network. In one example, a method is provided that may include generating, by an authentication node, authentication material for a user equipment (UE) based on the UE being connected to a public WWA access network, wherein the public WWA access network is associated with a mobile network operator, and the authentication node and the UE are associated with an enterprise entity; obtaining, by the authentication node, an indication that the UE is attempting to access a private WWA access network associated with the enterprise entity; and providing, by the authentication node, the authentication material for the UE, wherein the authentication material facilitates connection establishment between the UE and the private WWA access network.

Abstract: Embodiments of methods, apparatuses, devices and/or systems for manipulating hierarchical sets of data are disclosed. In particular, methods, apparatus devices and or/or systems for analyzing hierarchical data are disclosed.

Abstract: A tracking device can securely communicate with a secondary device by generating a hash value based on the identity of the tracking device. If the secondary device cannot resolve the hash value, the hash value can be provided to a tracking server, such as a cloud server, for resolving the hash value. Upon resolving the hash value, the tracking server can store a location of the tracking device in association with the identity of the tracking device. To preserve power, the secondary device can activate location-detection functionality (such as a GPS receive) only in response to the detection of movement of the tracking device, can obtain location information, and can de-activate the location-detection functionality upon providing the location information to the tracking server. The tracking server can associate one or both of a previous location and the current location information based on movement of the tracking device.

Abstract: Systems, methods, and computer-readable media are described herein to which dynamically provide indications within a database that a monitored communication protocol is congested or otherwise unavailable. Key performance indicators are monitored on a first wireless communication protocol to determine if it is congested. Once the congestion is determined, the database is updated, and a terminating call application server may then receive an indication that the first wireless communication protocol is congested and may suggest to another communication protocol.

Abstract: The subject matter described herein provides techniques to ensure that queries of a distributed database observe a consistent read of the database without locking or logging. In this regard, next-write timestamps uniquely identify a set of write transactions whose updates can be observed by reads. By publishing the next-write timestamps from within an extendable time lease and tracking a “safe timestamp,” the database queries can be executed without logging read operations or blocking future write transactions, and clients issuing the queries at the “safe timestamp” observe a consistent view of the database as it exists on or before that timestamp. Aspects of this disclosure also provide for extensions, done cheaply and without the need for logging, to the range of timestamps at which read transactions can be executed.

Abstract: Various methods are provided for secure two-factor authentication, and more specifically, for incorporating a layer of security to two-factor authentication using Short Message Service in a manner virtually transparent to the end-user. Methods may include receiving a request for registration for two-factor authentication from a client including a username and password; providing a request for a mobile device number; receiving the mobile device number and a pre-shared key; sending to a mobile device an identity of the client and a server key share; receiving from the mobile device a mobile device key share; sending information corresponding to an exchange with the mobile device and a challenge derived from the pre-shared key to the client in response to the device key share corresponding to the server key share; receiving confirmation of registration with the mobile device; and establishing a shared key in response to verification of the confirmation.

Abstract: A redirect server is configured in a service-based architecture, SBA, domain of a wireless communication network. The redirect server may receive configuration signaling indicating that a location of a resource or service in the SBA domain has changed from an old location to a new location. The redirect server receives, from a requestor in the SBA domain, a request that targets the old location of the resource or service in the SBA domain. The redirect, responsive to the request, transmits, from the redirect server to the requestor, a response that redirects the requestor to the new location of the resource or service in the SBA domain.

Abstract: Electronic subscriber identity modules (eSIM) can be more susceptible to hackers and more vulnerable than physical subscriber identity modules. The current disclosure discusses systems and methods to facilitate eSIM security by utilizing a management software application (MSA) hosted on a mobile device. This MSA can cross-reference eSIM registration data with mobile device signature data to determine if the correct user identity is associated with mobile device prior to an eSIM being issued to the mobile device. Additionally, various degrees of data flagging can be utilized to allow an end user to properly address an indication of mobile device vulnerability.

Abstract: This application provides a communication method performed at a control function entity. The method includes: receiving N first requests transmitted by N first network function (NF) entities, each of the first requests including a first valid time in which a first NF entity transmitting the first request provides a service; receiving a second request transmitted by a second NF entity, the second request being used for determining a third NF entity from the N first NF entities; and transmitting a first response to the second NF entity, the first response including a first valid time in which a third NF entity provides a service, such that the second NF entity performs service communication with the third NF entity within the first valid time in which the third NF entity provides the service, the third NF entity being included in the N first NF entities.

Abstract: A communication network allowing at least one user device, thanks to configuration information, to access communication services, the communication being a private communication or a communication within a multimedia group with which the user device is affiliated, the communication network including a plurality of servers, wherein the configuration information of the user device is configured in each server to which the user device is authorised to access.

Abstract: If a first condition for a handover of an analytics calculation for a user equipment by an analytics function is met, the analytics function requests, of at least one other analytics function of the communication network, preparation of the handover of the analytics calculation. If a second condition for the handover of the analytics calculation is met, the analytics function confirms the handover to one of the at least one other analytics function, the analytics calculation for the user equipment at the analytics function being deemed complete.

Abstract: There is provided mechanisms for authenticating an OEM entity as manufacturer of a communication device comprising an identification module. A method is performed by a network entity. The method comprises providing, towards tire identification module, a challenge of a challenge-response authentication procedure. The method comprises obtaining, from the identification module, a first response of the challenge-response authentication procedure. The method comprises providing, towards the OEM entity and upon having obtained the response, the challenge. The method comprises obtaining, from the OEM entity, a second response of the challenge-response authentication procedure. The method comprises authenticating the OEM entity as the manufacturer of the communication device only when the second response matches the first response.

Abstract: A network node is a first network node in a VPLMN (Visited Public land mobile network), the network node including a receiving unit configured to receive information relating to network selection, from a second network node in an HPLMN (Home Public land mobile network); a transmitting unit configured to transmit the information relating to network selection, to a user equipment; and a control unit configured to transmit, to the second network node, a response indicating that the user equipment was unable to receive the information relating to network selection, when a response, with respect to the information relating to network selection transmitted to the user equipment, is not received from the user equipment.

Abstract: The present disclosure relates to external services provided to a network. For example, the disclosure proposes network entities that are involved in at least one of registration of an external network entity or registration of one or more services provided by the external network entity, and entities that are involved in transfer of service traffic from an external network entity providing one or more services to another network entity consuming the one or more services. For instance, the disclosure proposes a network entity for supporting at least one of registration of the external network entity or registration of one or more services of the external network entity at another network entity.

Abstract: In an embodiment, a UE determines a timing for a serving cell, obtains a location of a non-serving cell, determines a location of the UE, and estimates a timing for the non-serving cell based at least in part on the timing for the serving cell, the location of the non-serving cell and the location of the UE.

Abstract: A method, device and computer readable medium are used to support satellite access. The registration management entity of the network determines information regarding which beam covering the location of the terminal device and the corresponding timing; the terminal device triggers a registration update based on the information determined by the registration management entity. Thus, the method, device and computer readable medium can introduce less modification to the network and have good compatibility.