Abstract: Methods, apparatus, and software for efficient encryption in virtual private network (VPN) sessions. A VPN link and an auxiliary link (and associated sessions) are established between computing platforms to support end-to-end communication between respective application running on the platforms. The VPN link may employ a conventional VPN protocol such as TLS or IPsec, while the auxiliary link comprises a NULL encryption VPN tunnel. To transfer data, a determination is made to whether the data are encrypted or non-encrypted. Encrypted data are transferred over the auxiliary link to avoid re-encryption of the data. Non-encrypted are transferred over the VPN link. TLS and IPsec VPN agents may be used to assist in setting up the VPN and auxiliary sessions. The techniques avoid double encryption of VPN traffic, while ensuring that various types of traffic transferred between platforms is encrypted.

Abstract: Extending user equipment (UE) access to resources of a private network via a private core network component (PCNC) and a carrier core network component (CCNC) is disclosed. An allocation component comprised in a carrier core network can receive extension information from a first PCNC that can enable determining a connection between the first PCNC and another core network component that can extend resource access. In an embodiment, the other core network component can be the CCNC resulting in the UE having access via the CCNC and the first PCNC. In another embodiment, the other core network component can be a second PCNC resulting in the UE having access to the resources via the second PCNC, the CCNC, and the first PCNC. In a further embodiment, extending access can result in the UE having access to the resources via a second PCNC, a plurality of CCNCs, and the first PCNC.

Abstract: A communication device, which is capable of communicating through a first communication line and a second communication line different from one another, includes one or more processors configured to: communicate through the first communication line in a keeping state of data to be communicated; in a case where the second communication line is unavailable, limit a communication of the data through the first communication line corresponding to a movement of the communication device; and in response to the second communication line becoming available, communicate the data through the second communication line.

Abstract: Systems and methods for providing on-demand access to resources across global or cloud computer networks are described herein. In particular, the systems and methods can use transformer models to estimate proxy resource capacities. These proxy resource capacities can be leveraged to satisfy certain conditions for executing blockchain actions, enabling resources to be used even when a current capacity of those resources does not satisfy the conditions.

Abstract: The present invention relates to wireless power transmission. A method for controlling a communication connection for a wireless charging device supporting in-band communication and out-band communication, according to an embodiment of the present invention, may comprise: a step of receiving a first packet from a device through in-band communication; a step of generating a power transmission contract on the basis of the first packet; a step of performing an out-band communication connection on the basis of the power transmission contract; a step of controlling power by using out-band communication when the out-band communication connection is successful.

Abstract: Various nodes in a 3GPP network, including a user equipment (UE), can be used to insert metadata in uplink traffic so that the network and/or an (S)Gi-LAN can make traffic steering decisions based on the metadata. For example, the UE can insert metadata into its uplink traffic so that the services in the (S)Gi-LAN can be better leveraged. Network nodes are able to insert metadata that relates directly to the UE and that relates to the operating conditions of the network nodes that the UE is using to send uplink data, so that the services in the (S)Gi-LAN can be better leveraged.

Abstract: There is provided a method for assessing network performance. The method includes acquiring network measurements indicative of any changes in a network following a change to a configuration of the network and data indicative of one or more factors capable of causing the changes in the network. The one or more factors are independent of the change to the configuration of the network. The method includes analysing the acquired network measurements and data to identify a contribution of the one or more factors to a key performance indicator (KPI) and a contribution of the change to the configuration of the network to the KPI. The KPI is predicted by a machine learning model and is a measure of the network performance following the change to the configuration of the network.

Abstract: An apparatus, method and computer program product of a new functional entity, namely an RRC-Inactive Context Hosting (RICH) entity, receiving, from a radio access node, a Push UE context notification or a Fetch UE Context Request. In response to the receiving of the Push UE context notification, the RICH entity sends the radio access node an ACK or NACK, while in response to the receiving of the Fetch UE Context Request, the RICH entity retrieves information requested. In response to the sending of the ACK, the RICH entity stores information contained in the notification, while in response to the retrieving, the RICH entity sends the radio access node the retrieved information.

Abstract: This disclosure provides a method of operating a wireless extender in a wireless frequency band, a corresponding wireless extender and a computer program product. The wireless extender can include a first radio and a second radio. The method can include: controlling a first station (STA) interface of the first radio and a second STA interface of the second radio to connect to a router in response to determining that a connection state of the first STA interface and a connection state of the second STA interface are both disconnected; controlling the second STA interface to stop connecting to the router in response to determining that the first STA interface has connected to the router; and disabling a first access point (AP) interface of the first radio and enabling a second AP interface of the second radio.

Abstract: This application provides a base station switching method and an apparatus. The method includes: A terminal sends one piece of binding signaling that carries SIM card binding information to a source base station; the terminal switches a plurality of SIM cards from being connected to the source base station to being connected to the target base station; and the terminal sends radio resource control reconfiguration complete information to the target base station, where the radio resource control reconfiguration complete information includes information about the plurality of SIM cards that complete the switching operation.

Abstract: A method and system that support re-establishing a dropped call or communication is disclosed. A terminal may publish its parameters to other terminals through in-band or out-of-band signaling. Token values may then be determined by a weighted sum of parameters, where the terminal having the largest weighted sum possesses the token. If the call or communication drops, the terminal possessing the token then initiates communication to the other terminals. In addition, a plurality of tokens may be used when there are more than two terminals in a call. The terminals may be partitioned into groups, where one of the terminals in each group possesses a token.

Abstract: Methods and apparatus for managing user subscription credentials provisioned to user equipment (UEs) and to be released at some future time for reuse and repurposing are disclosed. The methods and apparatus allow previously provisioned UE credentials to be deleted from both the UEs and from the wireless network components that manage and maintain the UE credentials. Four specific methods and apparatus for provisioning UEs with SIM credentials and reclaiming of provisioned credentials are described in detail: (1) a validity timer-based approach to provisioning UEs with SIM credentials and reclaiming of provisioned credentials; (2) a release command-based approach to provisioning UEs with SIM credentials and reclaiming of provisioned credentials; (3) a user-initiated release of previously provisioned SIM credentials; and (4) a Mobile Device Management (MDM) methodology-based approach to provisioning UEs with SIM credentials and reclaiming of provisioned credentials.

Abstract: A method for authenticating a base station involves a user device sending an authentication request to the base station upon connection to the base station. The authentication request is based on a core network signalling protocol. The user device waits a predetermined amount of time for a response to the authentication request signal and disconnects from the base station if a response is not received or if the response is determined to be inauthentic. The Access Control Class (ACC) of the user device is changed to a different ACC after disconnecting from the base station.

Abstract: Disclosed is a system for generating alerts communicated to emergency responders and/or contacts indicating a location of an incident. The system comprises a housing, one or more light sources, and a computing processor. A switch is located in the housing and configured to be accessible to a user. When the switch is actuated by a user indicating an incident, the processor provides power to the at least one light source to output light from the housing thereby indicating the location of the system. The system may also control a speaker to output an audible signal and a transmitter to transmit an emergency signal with location information to a device of an emergency responder and/or an emergency contact. The present invention may also be embodied in a software application that is implemented on a mobile device to thereby leverage the components of the mobile device to send alerts.

Abstract: A method and apparatus for processing flow specification (Flowspec) messages to one or more of a plurality of customer networks by a controller device coupled to the plurality of customer networks. Preferably a network controller monitors network traffic flowing through each of the customer networks for detecting a network attack in one of the plurality of customer networks, via monitoring of the network traffic. Upon detection of a network attack, a Flowspec message is generated for the customer network detected to be under network attack wherein the Flowspec message is configured specifically for that customer network. The generated Flowspec message is transmitted to the customer network detected to be under network attack for implementation by the customer network for mitigation of the detected network attack.

Abstract: Techniques are described for providing location-based information and functionality to people and computing devices in various ways. In at least some situations, the techniques include enabling multiple people in a common geographic area to interact in various ways, such as via devices capable of communications (e.g., cellular telephones, computing devices with wired and/or wireless communications capabilities, etc.), while in other situations at least some users who are remote from a particular geographic area may be allowed to intercommunicate with one or more other users or other entities in or related to that geographic area. In addition, the techniques include enabling the creation and maintenance of location-based virtual groups of users (also referred to as “clouds”), such as for users of mobile and/or fixed-location devices. Such clouds may enable various types of interactions between group members, and may be temporary and/or mobile.

Abstract: Techniques are disclosed for dynamically adjusting associations between radio units (RUs) and a virtualized radio access network (vRAN) by a virtual translational layer running in a controller of the vRAN. Each of the RUs have a number of antennas and are configured to service a cell of a cellular communications network. Based on performance metrics, the virtual translational layer maps the RUs to a virtualized cell of the cellular communications network, the virtualized cell including a mapped selection of the RUs.

Abstract: An example operation includes one or more of monitoring, by a transport exterior a location, an exchange performed in an interior of the location by a recent occupant of the transport, and completing, by the transport, the exchange.

Abstract: An electronic device and method for delivery of extended emergency notifications through sensory feedback is provided. The electronic device receives a signal from an Emergency Alert System (EAS) that includes one or more of a broadcast system or an Internet-based system. The electronic device extracts emergency information from the received signal. Thereafter, the electronic device determines an external device that is communicatively coupled to the electronic device. The electronic device controls the external device to generate a type of sensory feedback that corresponds to an emergency alert. The type of sensory feedback is generated based on at least a portion of the emergency information.

Abstract: A method performed by an Internet of Things (IoT) device is disclosed. The method includes connecting to an access point of a network, transmitting data to a management server via the access point according to a first schedule, wherein the management server is separate from the access point, receiving a configuration parameter from the management server via the access point, wherein the configuration parameter defines a second schedule that is different from the first schedule, and responsive to receiving the configuration parameter transmitting data to the management server via the access point according to the second schedule, wherein the second schedule was determined by the management server such that when the IoT transmits data to the management server according to the second schedule, a number of connections with the access point by IoT devices that occur at a same time does not exceed a threshold number of connections.

Abstract: Methods, systems and apparatuses are described herein to provide adaptive severity functions for alerts, particularly security alerts. The adaptive severity functions may be aligned with an existing global security situation to upgrade or downgrade the severity of new and existing alerts. By taking into consideration the time factor along with other parameters, the alerts may be prioritized or reprioritized appropriately. The modification of the severity level for the alerts may be made based on rules and/or one or more triggering events or by using severity functions with or without the aid of artificial intelligence based on best-practice preferences.

Abstract: A computer-implemented method and system for managing and configuring flow specification (FlowSpec) messages for a customer network by a controller device coupled to the customer network. Network traffic is monitored by the controller device flowing through the customer network detect a network attack in the customer network. The controller device enables a network user to configure a Flowspec message responsive to the detected network attack. The controller device preferably enables the network user to either 1) manually configure a FlowSpec message or 2) configure a Flowspec message utilizing one or more pre-existing FlowSpec rulesets preferably defined for that customer network.

Abstract: In one aspect, a computerized system useful for implementing a virtual private network (VPN) including an edge device that automatically establishes an Internet Protocol Security (IPsec) tunnel alongside an unsecure Multipath Protocol (MP) tunnel with a gateway device in preparation for a transmission of a secure traffic communication. The edge device has a list of local subnets. The edge device sends the list of local subnets to the gateway during an initial MP tunnel establishment handshake message exchange between the edge device and the gateway device. Each subnet includes an indication of whether the subnet is reachable over the VPN. A gateway device that automatically establishes the IPsec tunnel alongside the unsecure MP tunnel with the edge device. An enterprise datacenter server that comprises an orchestrator module that receives a toggle the VPN command and enables the VPN on the orchestrator.

Abstract: In a general aspect, a method is presented for detecting a location of motion using wireless signals that propagate along two or more paths of a wireless communication channel. The method includes storing a set of eigenvectors derived from first motion-sensing data associated with a first time frame. The first motion-sensing data is associated with a first motion-sensing topology of a wireless mesh network. The method also includes obtaining a motion vector based on wireless signals transmitted between access point nodes in the wireless mesh network during a second, subsequent time frame. The wireless mesh network operates in a second, distinct motion-sensing topology during the second time frame. The motion vector is compared with the respective eigen vectors, and a probability vector is generated based on the comparison. A location of the motion of the object during the second time frame is determined based on the probability vector.

Abstract: Policy-based network transmission routing is provided by accessing routing metadata in a wrapper of the transmission packet, the routing metadata representing a feature of the source or the destination, comparing the routing metadata to routing policy data associated with each of multiple routing policies defined within a routing policy structure, identifying, based on the comparing, one or more routing policies applicable to the transmission packet, identifying, based on the routing policy data, a highest priority routing policy from the one or more routing policies, the highest priority routing policy defining a route constraint usable to limit a selection of available routes to the destination, and selecting the route from the available routes based on the route constraint.

Abstract: An electronic device is provide that may identify voiceprint data corresponding to a user from among at least one piece of voiceprint data, based on received user voice data, identify a general voice instruction included in the received user voice data, determine user preference information of the user, based on the identified voiceprint data, determine a control action for determining an action to be performed in at least one external device or the electronic device, based on the general voice instruction identified from the received user voice data, determine a personalized voice instruction, based on at least one of the control action or the user preference information, and transmit, to the at least one external device, through the communication circuit, an audio signal corresponding to the personalized voice instruction to be output by the at least one external device, or output the audio signal through a speaker included in the electronic device.

Abstract: An on-demand secure data entry system and method for representative-assisted transactions that allows for a representative to be present on a call during the entry of private information to assist the customer while still preventing exposure of the private information to the representative. The system and method involve placing an existing call between a representative and customer on hold, creating a secure call “secure call platform,” placing and parking separate calls secured by the secure call platform from the system to the representative and from the system to the customer, bridging the separate calls such that the representative and customer are connected through the calls secured by the secure call platform, and then masking portions of information received on the system-to-customer call from information transmitted to the system-to-representative call.

Abstract: The disclosure relates to a communication interface in a vehicle between a head unit and human interface devices that is flexible, low latency, and comparatively lightweight. The communication interface is centrally defined so that it is valid for all communication paths.

Abstract: A method performed by a UE having multiple USIMs is provided. The method includes registering the UE in a first PLMN. The method includes moving the UE into a CM-connected state in the first PLMN. The method includes setting up a PDU session in the first PLMN. The method includes using a DNS, via the PDU session in the first PLMN, to select a N3IWF in a second PLMN. The method includes accessing the N3IWF via IP connectivity provided by the first PLMN and initiating a registration procedure with an AMF node in the second PLMN using the N3IWF, the UE indicating that the AMF node shall only use N3IFW for NAS notifications after registration. The method includes completing the registration procedure to register with the second PLMN. The method includes setting up a PDU session with a SMF node in the second PLMN without user plane resources.

Abstract: A method and a call routing system (CRS) are provided for routing an incoming call made to one of multiple numbers of a user to a call receiving client application (CRCA) deployed on one or more user devices when the called number is not reachable. The CRS, in communication with the CRCA deployed on one or more user devices, sets up a user account using one or more of the user's multiple numbers. The CRS detects availability of the CRCA on one or more user devices over a data network to accept an incoming call. The CRS receives the incoming call made to one of the numbers, when the called number is not reachable. The CRS routes the incoming call to the CRCA on one or more user devices over the data network on detecting the availability of the CRCA on one or more user devices over the data network.

Abstract: Methods, computer-readable media, software, and apparatuses provide a system that may facilitate communications between drivers who share a route. The system may allow communications to be sent from one driver to another driver and allow drivers to post queries to other drivers sharing a route. Computing devices in the vehicle may collect route data for the system to evaluate and to use in identifying drivers sharing a route.

Abstract: Methods and systems for accessing customer account information involve, for example, binding a computing device with a customer's profile via one or more attributes of the computing device and an encrypted token stored on the computing device and thereafter receiving an authentication request consisting at least in part of the computing device attributes and the encrypted token stored on the computing device. A determination is made as to whether or not entry of a customer credential was received within a pre-determined preceding interval of time, and predefined customer account information is displayed on the computing device without requiring entry of the customer credential when a determination is made that entry of the customer credential was received within the pre-determined preceding interval of time.

Abstract: A system for enforcement of a set of segmentation policies at a gateway switch of a network is provided. Here, the segmentation policies can indicate which other roles are allowed to communicate with a respective role, which can indicate a set of privileges in the network. During operation, the switch can receive a first message associated with a join request for a multicast group from a host. The switch can also receive a second message comprising data from a source of the multicast group. The first and second messages can indicate first and second roles, respectively, of the host and source. Based on the first and second roles and a corresponding segmentation policy, the system can determine whether the host is allowed to receive the data from the source. If not allowed, the system can prevent the second message from being forwarded to the host from the gateway switch.

Abstract: This application provides a communication method and apparatus. The method includes: A terminal receives first configuration information from a network device, and determines a time unit aggregation based on the first configuration information, where the time unit aggregation includes at least one time unit. The terminal receives control information from the network device, and determines at least one first time subunit and at least one second time subunit in the time unit aggregation based on the control information. The terminal receives, in the at least one first time subunit, data corresponding to a first transport block, and receives, in the at least one second time subunit, data corresponding to a second transport block.

Abstract: A method, including: assigning a SIM card to a telecommunications terminal and recording this assignment on a server; providing the SIM card to a mobile radio gateway; logging in a radio module of the mobile radio gateway to the mobile radio network using the provided SIM card; setting up a mobile radio data connection by the logged in radio module of the mobile radio gateway via the mobile radio network to the Internet; setting up a first secure data connection between the mobile radio gateway and the server; setting up a second secure data connection between the telecommunications terminal and the server; and connecting the first secure data connection and the second secure data connection by the server for the provision of a data connection of the telecommunications terminal to the Internet via the second secure data connection, the first secure data connection and the mobile radio data connection.

Abstract: An apparatus includes a transceiver and at least one processor. The at least one processor is configured to identify overheating of the transceiver and/or the at least one processor, and wirelessly transmit a message including overheating assistance information based on the identified overheating to the base station via the transceiver. The overheating assistance information includes information about radio resources to be discontinuously processed by the apparatus in a time domain.

Abstract: An optimization service discovery method for optimizing data transmission by multi-session applications, includes: receiving an optimization service lookup query from one of a plurality of user clients in a network, each of said user clients executing a multi-session application; and identifying an optimization service and responding to the query with a network address of one or more servers providing said optimization service.

Abstract: A system can facilitate assigning guaranteed bitrate (GBR) admission control thresholds in a network with multiple network slices serving multiple GBR services. Thus, each network slice can optionally have its own dedicated GBR admission. For example, based on a requested service, the system can compare a received quality indicator to a threshold value to determine if a bearer shall be admitted in accordance with dedicated GBR admission control region within its slice. If the slice does not have its own GBR admission control region or if its threshold is reached, the system can compare the received quality indicator to another threshold value to determine if the bearer shall be admitted in accordance with a common GBR admission control region.

Abstract: A method, apparatus, and a non-transitory computer readable storage medium are provided for network registration. The method may be applied to a multi-SIM terminal. The multi-SIM terminal may obtain, when a Subscriber Identification Module (SIM) card of the multi-SIM terminal is registered in a network, one International Mobile Equipment Identity (IMEI), and International Mobile Subscriber Identities (IMSIs) of multiple SIM cards in the multi-SIM terminal. The multi-SIM terminal may send the IMEI and the plurality of IMSIs to a network device. The multi-SIM terminal may receive a verification result fed back by the network device. The first verification result is used for indicating whether the SIM card is allowed to stay in the network.

Abstract: An offer decay generation model determines, for a particular customer, a personalized optimal offer decay curve of an incentive corresponding to a product provided by an enterprise, where the offer decay curve defines a set of decreasing incentive values and respective time intervals during which each incentive value is valid. The offer decay generation model is trained on historical data indicative of customers, customer interactions, offered incentives, resulting outcomes of the incentives, and time intervals elapsing between incentives and resulting outcomes. As such, the optimized offer decay curve is structured to maximize a probability that the particular customer is motivated to accept the incentive offer, purchase a product, and/or further interact with the enterprise during the lifetime of the offer decay curve. The offer decay curve may unique to the individual customer, and may be further customized based on other parameters such as location, time/day/date, inventories, etc.

Abstract: A system for data processing, comprising a management controller operating on a processor and configured to load and execute one or more algorithms that provide the function of transmitting a request to a managed device using a Security Protocol and Data Model (SPDM) protocol and to receive a response from the managed device. A system management bus and security policy system operating on the processor is configured to execute one or more algorithms to process the response from the managed device to apply an SPDM security policy to the response.

Abstract: Embodiments compute a target power level referenced at one Access Point (AP) in accordance with path losses between two or more APs and a Station (STA). The calculated target power level is then transmitted to the STA in a downlink message, which may also include resource allocation information that indicates a location of a resource for transmitting an uplink frame. The STA may then use the target power level to calculate an uplink power level for transmitting the uplink frame over the resource location indicated by the downlink frame. In addition to the path loss values, the target power level may also be computed in accordance with measured interference levels at the APs and/or a target receive power level that is associated with, or otherwise required to decode, the uplink frame.

Abstract: Methods, systems, and devices for wireless communications are described. A communication device, otherwise known as a user equipment (UE) may transmit a data transmission to a receiver. In some examples, the data transmission may be a radio link control (RLC) protocol data unit (PDU) transmission. The UE may store the data transmission in a retransmission buffer, and transmit a feedback request to the receiver in a subsequent data transmission based on a system memory utilization threshold for the retransmission buffer being satisfied due to storage of the data transmission.

Abstract: Various embodiments include network computing devices and methods for computing resource management. Various embodiments include network computing devices and methods for managing IP Multimedia Subsystem (IMS) registration of a user equipment (UE). A processor of a network computing device may send to a home subscriber server (HSS) a user authorization request in response to receiving a registration request from the UE. The processor may receive from the HSS a user authorization answer comprising subscriber location information associated with the UE. The processor may send a registration request to register the UE with a serving CSCF (S-CSCF) based on the subscriber location information and S-CSCF location information.

Abstract: A modem is configurable on a satellite, user terminal or gateway generates a radio frequency (RF) signal using an orthogonal frequency division multiplexing (OFDM) protocol including a radio frame including one or more bursts. A burst of the one or more bursts includes a first portion including burst detection data, a second portion including channel characteristic estimation data, a third portion including payload data, and fourth and fifth portions including pilot data. The first portion in a time domain is included in the burst prior to the second, third, fourth, and fifth portions. The first portion can include a pseudo-random noise sequence inserted in the time domain. The same physical modem can be configured to transmit signals on an uplink or downlink between a user terminal and a satellite or on the uplink or downlink between the satellite and the gateway.

Abstract: Techniques for call recovery for call failure are described and may be implemented via a wireless device to adapt to a variety of different wireless scenarios. For instance, when multiple call failures for a call occur over a particular set of radio access technologies, an IP-based call and/or a direct device-to-device call can be implemented to complete the call.

Abstract: An apparatus is disclosed. For example, the apparatus includes a first communication interface to establish a first communication path with a first endpoint device, a second communication interface to establish a second communication path with a second endpoint device, wherein the second endpoint device is to establish a voice call with the first endpoint device, a processor, and a non-transitory computer-readable medium storing a plurality of instructions. The instructions when executed by the processor cause the processor to detect a request to transfer the second communication path from the second endpoint device to a third endpoint device, wherein the request includes information obtained by the third endpoint device via near field communications (NFC) with the second endpoint device and transfer the second communication path from the second endpoint device to the third endpoint device to disconnect the second endpoint device.

Abstract: Methods and systems provided herein ensure that communication sessions established between select parties, and communication devices, are in complete compliance with a predefined condition, or precondition. Upon determining content and addressing of a communication session, at least one precondition for communications is retrieved from a memory device. The precondition corresponds to a required condition for a communication session to be enabled and maintained. Once the precondition is met, the communication session is established and, as long as the precondition remains intact, the communication session is allowed to be maintained. Ensuring that the precondition exists and remains intact includes embedding an authentication signal, that is based on the precondition, along with communications made in the communication session. When at least a portion of the precondition is no longer met, the communication session is instantaneously terminated.

Abstract: Described herein are hybrid adaptive networks (HAN) that enable the use of multiple, independent communications networks as a unified communications system. The disclosed HAN includes multiple communications networks that user terminals can simultaneously access. The disclosed HAN enables a user terminal to seamlessly roam across multiple communications networks. The disclosed HAN can increase the capabilities and resilience of user terminals by providing simultaneous access to multiple communications networks. For example, these communications networks may span multiple orbital regions, operate over multiple frequency bands, provide independent terrestrial infrastructure, and/or feature different network management and cyber defense implementations thereby providing inherent diversity and removing single points of failure and/or targets for attack.

Abstract: In one embodiment, packets are forwarded in a network based on multiple compact forwarding identifiers represented in a single 128-bit Internet Protocol Version 6 (IPv6) address, such as, but not limited to being in the destination address field of the IPv6 header (e.g., possibly in an extended IPv6 header). One embodiment follows the forwarding order of these multiple compact forwarding identifiers by respectively placing them in the single IPv6 address from high-order to lower-order bit positions. In one embodiment, a compact forwarding identifier prefix is part of the address represented by each compact forwarding identifier, typically with the compact forwarding identifier prefix stored in the highest-order bit positions. One embodiment uses a longest prefix matching operation to match the compact forwarding identifier to be used in determining how to next process the packet.