Deutsche Telekom

The present invention relates to a method for authentication based on network sensing in a communication network, wherein an authentication request is received, wherein the authentication request relates to a specific user and a specific user equipment associated with said specific user, and wherein the method comprises the steps of: a) determining a location of the specific user equipment; b) determining an identity of the specific user based on a network sensing in the communication network; c) determining based on network sensing in the communication network a distance between the specific user and the specific user equipment; d) determining a probability of user authentication certainty based on results of steps a), b), and c); and then e) authenticating the specific user based one the probability of user authentication certainty against a predetermined certainty threshold.

The invention relates to a method for using a user equipment with a mobile communication network and/or for transmitting application layer messages, wherein the mobile communication network comprises at least one access network node or entity of an access network and at least one core network node or entity of a core network, -- wherein the access network node or entity and the core network node or entity exchange the application layer messages in uplink and downlink direction over an underlying protocol being a QUIC protocol, and/or -- wherein the access network node or entity and a further access network node or entity exchange application layer messages in uplink and downlink direction over an underlying protocol being a QUIC protocol, and/or -- wherein the user equipment and the core network node or entity exchange - especially involving the access network node or entity - application layer messages in uplink and downlink direction over an underlying protocol being a QUIC protocol, wherein the method comprises the following steps: -- in a first step, regarding a specific application layer message or a specific flow of application layer messages a mapping or an association is performed to a specific QUIC protocol control information, -- in a second step, the specific application layer message or the specific flow of application layer messages is/are processed or routed based on the mapped or associated specific QUIC protocol control information.

An LLM-based method for optimizing Security Information and Event Management (SIEM)'s rule sets, comprising: using LLMs to analyze contextual components of SIEM rules in the rule sets; generating SIEM rule embeddings and using a similarity matching analysis, to identify the most similar rules in the rule sets; analyzing the most similar rules, by the LLMs, to determine rule similarity by performing semantic and syntactic comparisons of SIEM rules in the rule sets; using the comparisons for identifying and eliminating of redundant rules; and providing optimized recommendations for refining the rule set, based on the elimination of redundant rules.

An Al-based method for detecting adversarial cell telemetry vulnerabilities in real time resulting from O-RAN's openness and multi-operator untrusted structure, comprising the steps of: extracting relevant time-series features from the reporting cells and UEs Key Performance Indicators (KPIs); training a dedicated AE model for each cell; generating new enriched feature vectors that capture contextual information from both each specific cell and the entire network using compressed latent space from each AE model, concatenated with the aggregated latent spaces from all other cells; training an additional AE for each cell using the new enriched feature vectors, thereby reconstructing the original features; training a classifier to compare the output of the second model to the input of the first model; and if the loss between the input and output exceeds a predefined threshold, classifying the input as untrusted, otherwise classifying the input as trusted.

A method for controlling a communication network, wherein an artificial intelligence, Al, agent controls a communication network by transmitting control requests to a control interface of the communication network, each control request defining an operational configuration of the communication network to be realized by the communication network, a communication network and a computer program product.

Die vorliegende Offenbarung betrifft ein Verfahren zur Bestimmung eines Netzwerkzustandes eines Mobilfunknetzwerks. Das Verfahren umfasst Erhalten von Netzwerk-Trace-Daten. Das Verfahren umfasst ferner Extrahieren, aus den Netzwerk-Trace-Daten, von wenigstens zwei Attributen. Das Verfahren umfasst ferner Erstellen eines Graphen aus den extrahierten Attributen. Der Graph umfasst wenigstens zwei Knoten und wenigstens eine Kante. Ein Knoten repräsentiert ein Attribut und eine Kante repräsentiert eine Abhängigkeit zwischen zwei Attributen repräsentiert. Das Verfahren umfasst ferner Auswerten des Graphen zur Bestimmung des Netzwerkzustandes.

The invention relates to a method for using a user equipment with a mobile communication network and/or for transmitting next generation application layer protocol messages, NGAP messages, wherein the mobile communication network comprises at least one access network node or entity of an access network and at least one core network node or entity of a core network, wherein the access network node or entity and the core network node or entity exchange NGAP messages in uplink and downlink direction over a transport protocol being a request-response protocol, wherein such NGAP messages comprise class 2 NGAP messages that lack a defined reply message, wherein, in order to provide communication services to the user equipment and/or for using the user equipment with the mobile communication network, the method comprises - regarding a considered pair of class 2 NGAP messages comprising one uplink and one downlink NGAP message - the step of transporting the considered pair of class 2 NGAP messages by means of: -- a request message, and -- a response message of the transport protocol..

The disclosure provides a method for designating a further deployment target for an Al compute workload serving an Al requesting endpoint, preferably utilizing unused capacity on a server running NT (network technology) workloads, the method comprising: receiving a request for an Al service with a defined quality of service (QoS) requirement from the Al requesting endpoint; determining that none of a plurality of deployment targets are running the Al service und fulfil the defined QoS requirement; selecting the further deployment target, wherein the further deployment target is different to each of the plurality of deployment targets running the Al service and having sufficient capacity not used by NT workloads; sending a request to the further deployment target to deploy the Al service; and sending to the Al requesting endpoint information to reconfigure a target for the specific Al service to the further deployment target.

The present disclosure relates to a method for distribution of a secret in a secret recovery system with a reissuance scheme based on at least one verifiable credential, VC, from a user to one or more trusted parties; a method for reconstruction of a secret in a secret recovery system with a reissuance scheme based on at least one verifiable credential from a user to one or more trusted parties; a method for re-issuance of a previously issued verified credential in a secret recovery system with a re-issuance scheme based on at least one verifiable credential for a user by an issuer; and corresponding systems, in which it is assumed that the user has lost the previously issued verified credential.

The invention relates to a method for conducting an emergency communication and/or for configuring an emergency communication, the emergency communication using an in-vehicle system in a country, or a geographic region within a country, that is part of the coverage area of a mobile communication network, wherein the in-vehicle system comprises a terminal equipment entity or functionality as well as a mobile termination entity or functionality, wherein, regarding conducting and/or configuring emergency communication, at least one piece of emergency communication information (or at least one emergency communication-related parameter) is stored in the in-vehicle system and/or at least one action is requested, by the terminal equipment entity or functionality, from the mobile termination entity or functionality, wherein the method comprises the following steps: -- in a first step, the terminal equipment entity or functionality requests the at least one piece of emergency communication information (or the at least one emergency communication-related parameter) and/or requests at least one action by means of an emergency communication request, -- in a second step, the terminal equipment entity or functionality receives the at least one piece of emergency communication information (or the at least one emergency communication-related parameter) and/or the mobile termination entity or functionality conducts the at least one requested action.