Mobile Communications over Secure Enterprise Networks

    公开(公告)号:US20190036888A1

    公开(公告)日:2019-01-31

    申请号:US15854181

    申请日:2017-12-26

    Abstract: In various implementations, a method includes receiving a request to establish an end-to-end encrypted session between a device in an enterprise network and an external entity that is outside the enterprise network. In some implementations, the end-to-end encrypted session allows encrypted packets to be transmitted between the device and the external entity. In various implementations, the method includes determining whether the request satisfies an enterprise security criterion for establishing the end-to-end encryption session. In various implementations, the method includes in response to determining that the request satisfies the enterprise security criterion, triggering the establishment of the end-to-end encrypted session between the device in the enterprise network and the external entity that is outside the enterprise entity.

    System and method to provide fast mobility in a residential Wi-Fi network environment

    公开(公告)号:US10165608B2

    公开(公告)日:2018-12-25

    申请号:US15171126

    申请日:2016-06-02

    Abstract: An example method is provided in one example embodiment and may include subscribing to a key distribution service by a plurality of Wi-Fi access points belonging to a same mobility domain; receiving a request from a user equipment to connect to a first Wi-Fi access point of the plurality of Wi-Fi access points belonging to the same mobility domain; determining one or more second Wi-Fi access points of the plurality of Wi-Fi access points belonging to the same mobility domain that neighbor the first Wi-Fi access points; and distributing keying parameters to each of the one or more second Wi-Fi access points. The keying parameters can be associated with 802.11r pairwise master key (PMK) keying parameters.

    SYSTEM AND METHOD TO PROVIDE DYNAMIC BANDWIDTH ALLOCATION OVER WIDE AREA NETWORKS

    公开(公告)号:US20170142709A1

    公开(公告)日:2017-05-18

    申请号:US14939884

    申请日:2015-11-12

    Abstract: An example method is provided in one example embodiment and includes intercepting a setup request for a session via a small cell network portion associated with a wide area network (WAN) instance, wherein the WAN instance comprises the small cell network portion and an enterprise network portion and wherein the small cell network portion and the enterprise network portion are interconnected to a service provider network; classifying the session to a particular WAN priority queue, wherein a plurality of WAN priority queues are configured for the WAN instance; determining whether the particular WAN priority queue has available bandwidth for the session; allocating bandwidth for the particular WAN priority queue if the particular WAN priority queue has available bandwidth; and permitting the session to be established if the particular WAN priority queue has available bandwidth.

    SYSTEM AND METHOD FOR MANAGING INTERFERENCE IN A NETWORK ENVIRONMENT BASED ON USER PRESENCE
    165.
    发明申请
    SYSTEM AND METHOD FOR MANAGING INTERFERENCE IN A NETWORK ENVIRONMENT BASED ON USER PRESENCE 审中-公开
    基于用户存在,管理网络环境干扰的系统和方法

    公开(公告)号:US20160295521A1

    公开(公告)日:2016-10-06

    申请号:US14687198

    申请日:2015-04-15

    Abstract: An example method is provided in one example embodiment and may include determining a presence of user equipment (UE) in relation to small cell radio(s) of a small cell network based on information obtained through the small cell network and one or more parallel networks; and adjusting transmit power for the small cell radio(s) based on the presence of UE in relation to the small cell radio(s). Another example method can include determining that a UE in cell paging channel mode has changed its selected macro cell radio; determining that the UE is allowed service on a small cell radio located in a vicinity of a macro cell coverage area of a selected macro cell radio; and adjusting a transmit power of the small cell radio based on a presence of the UE in a surrounding macro cell coverage area of the small cell radio.

    Abstract translation: 在一个示例实施例中提供了示例性方法,并且可以包括基于通过小型小区网络获得的信息和一个或多个并行网络来确定与小型小区网络的小型小区无线电相关的用户设备(UE)的存在 ; 并且基于相对于小小区无线电的UE的存在来调整小小区无线电的发射功率。 另一示例性方法可以包括确定小区寻呼信道模式中的UE已经改变其选择的宏小区无线电; 确定所述UE是否位于位于所选宏小区无线电的宏小区覆盖区域附近的小小区无线电上的允许服务; 以及基于所述小区无线电的周围宏小区覆盖区域中的所述UE的存在来调整所述小小区无线电的发射功率。

    SYSTEM, METHOD, APPARATUS AND MACHINE-READABLE MEDIA FOR ENTERPRISE WIRELESS CALLING
    166.
    发明申请
    SYSTEM, METHOD, APPARATUS AND MACHINE-READABLE MEDIA FOR ENTERPRISE WIRELESS CALLING 审中-公开
    用于企业无线呼叫的系统,方法,设备和机器可读介质

    公开(公告)号:US20160255050A1

    公开(公告)日:2016-09-01

    申请号:US15044957

    申请日:2016-02-16

    Abstract: Embodiments include receiving one or more packets of a Wi-Fi calling session via a secure tunnel from a user device, where the user device is connected to a source network via a Wi-Fi access point. Embodiments also include determining whether the Wi-Fi calling session is a threat based, at least in part, on identifying an anomaly of at least one packet of the one or more packets. An action can be taken if the Wi-Fi calling communication is determined to be a threat. More specific embodiments include determining the at least one packet is associated with the Wi-Fi calling session by correlating information in the packet with control plane data of the Wi-Fi calling session. Further embodiments can include intercepting the one or more packets in a second secure tunnel established between an evolved packet data gateway and a service provider network associated with the user device.

    Abstract translation: 实施例包括经由来自用户设备的安全隧道接收Wi-Fi呼叫会话的一个或多个分组,其中用户设备经由Wi-Fi接入点连接到源网络。 实施例还包括至少部分地基于识别一个或多个分组中的至少一个分组的异常来确定Wi-Fi呼叫会话是否是基于威胁的。 如果Wi-Fi呼叫通信被确定为威胁,则可采取措施。 更具体的实施例包括通过将分组中的信息与Wi-Fi呼叫会话的控制平面数据相关联来确定至少一个分组与Wi-Fi呼叫会话相关联。 另外的实施例可以包括拦截建立在演进的分组数据网关与与用户设备相关联的服务提供商网络之间的第二安全隧道中的一个或多个分组。

    System and method for small cell power control in an enterprise network environment
    168.
    发明授权
    System and method for small cell power control in an enterprise network environment 有权
    企业网络环境中小电池功率控制的系统和方法

    公开(公告)号:US09414310B2

    公开(公告)日:2016-08-09

    申请号:US14092448

    申请日:2013-11-27

    Inventor: Mark Grayson

    Abstract: A method is provided in one embodiment and includes receiving a first message including an indication that a first access point of a first network is a gateway access point of a first network, receiving a second message including an indication that a second access point of the first network is an inner access point of the first network, and receiving an indication of a number of wireless devices registered with at least one of the first access point and the second access point. The method further includes determining a power mode for the second access point based upon whether at least one wireless device is registered with the first access point or the second access point, and sending a power mode command message to the second access point indicative of the determined power mode.

    Abstract translation: 在一个实施例中提供了一种方法,包括接收包括第一网络的第一接入点是第一网络的网关接入点的指示的第一消息,接收第二消息,该第二消息包括第一接入点的第一接入点 网络是第一网络的内部接入点,并且接收对第一接入点和第二接入点中的至少一个登记的无线设备的数量的指示。 该方法还包括基于至少一个无线设备是否向第一接入点或第二接入点注册来确定第二接入点的功率模式,以及向指示所确定的第二接入点的第二接入点发送功率模式命令消息 电源模式。

    SYSTEM AND METHOD FOR PROVIDING DYNAMIC RADIO ACCESS NETWORK ORCHESTRATION
    169.
    发明申请
    SYSTEM AND METHOD FOR PROVIDING DYNAMIC RADIO ACCESS NETWORK ORCHESTRATION 审中-公开
    提供动态无线接入网络协调的系统和方法

    公开(公告)号:US20160156503A1

    公开(公告)日:2016-06-02

    申请号:US15008045

    申请日:2016-01-27

    Abstract: A method is provided in one example embodiment and may include monitoring, by a radio access network (RAN) orchestration function, impairments between a plurality of candidate locations interconnected by a transport network, wherein one or more network elements capable of performing one or more operations associated with a RAN are located at the plurality of candidate locations; determining a decomposition of one or more operations associated with the RAN into a plurality of sets of virtualized network functions (VNFs) to execute the operations; determining a distribution of the plurality of sets of VNFs among the one or more network elements associated with the RAN for one or more optimal locations of the plurality of candidate locations based, at least in part, on the monitored impairments; and instantiating the plurality of sets of VNFs at each of the one or more optimal locations.

    Abstract translation: 在一个示例实施例中提供了一种方法,并且可以包括通过无线电接入网络(RAN)协调功能来监视由传输网络互连的多个候选位置之间的损伤,其中能够执行一个或多个操作的一个或多个网络元件 与RAN相关联地位于多个候选位置; 确定与所述RAN相关联的一个或多个操作的分解为多组虚拟化网络功能(VNF)以执行所述操作; 至少部分地基于所监测的损伤,确定与所述多个候选地点中的一个或多个最佳位置相关联的所述一个或多个网络元件中的所述多个VNF集合的分布; 以及在所述一个或多个最佳位置的每一个处实例化所述多个VNF组。

Patent Agency Ranking