Deutsche Telekom Patente

The invention relates to a method for using a user equipment with a mobile communication network and/or for transmitting application layer messages, wherein the mobile communication network comprises at least one access network node or entity of an access network and at least one core network node or entity of a core network, -- wherein the access network node or entity and the core network node or entity exchange the application layer messages in uplink and downlink direction over an underlying protocol being a QUIC protocol, and/or -- wherein the access network node or entity and a further access network node or entity exchange application layer messages in uplink and downlink direction over an underlying protocol being a QUIC protocol, and/or -- wherein the user equipment and the core network node or entity exchange - especially involving the access network node or entity - application layer messages in uplink and downlink direction over an underlying protocol being a QUIC protocol, wherein the method comprises the following steps: -- in a first step, regarding a specific application layer message or a specific flow of application layer messages a mapping or an association is performed to a specific QUIC protocol control information, -- in a second step, the specific application layer message or the specific flow of application layer messages is/are processed or routed based on the mapped or associated specific QUIC protocol control information.

An LLM-based method for optimizing Security Information and Event Management (SIEM)'s rule sets, comprising: using LLMs to analyze contextual components of SIEM rules in the rule sets; generating SIEM rule embeddings and using a similarity matching analysis, to identify the most similar rules in the rule sets; analyzing the most similar rules, by the LLMs, to determine rule similarity by performing semantic and syntactic comparisons of SIEM rules in the rule sets; using the comparisons for identifying and eliminating of redundant rules; and providing optimized recommendations for refining the rule set, based on the elimination of redundant rules.

The present invention relates to a method for authentication based on network sensing in a communication network, wherein an authentication request is received, wherein the authentication request relates to a specific user and a specific user equipment associated with said specific user, and wherein the method comprises the steps of: a) determining a location of the specific user equipment; b) determining an identity of the specific user based on a network sensing in the communication network; c) determining based on network sensing in the communication network a distance between the specific user and the specific user equipment; d) determining a probability of user authentication certainty based on results of steps a), b), and c); and then e) authenticating the specific user based one the probability of user authentication certainty against a predetermined certainty threshold.

An Al-based method for detecting adversarial cell telemetry vulnerabilities in real time resulting from O-RAN's openness and multi-operator untrusted structure, comprising the steps of: extracting relevant time-series features from the reporting cells and UEs Key Performance Indicators (KPIs); training a dedicated AE model for each cell; generating new enriched feature vectors that capture contextual information from both each specific cell and the entire network using compressed latent space from each AE model, concatenated with the aggregated latent spaces from all other cells; training an additional AE for each cell using the new enriched feature vectors, thereby reconstructing the original features; training a classifier to compare the output of the second model to the input of the first model; and if the loss between the input and output exceeds a predefined threshold, classifying the input as untrusted, otherwise classifying the input as trusted.

Die vorliegende Offenbarung betrifft ein Verfahren zur Bestimmung eines Netzwerkzustandes eines Mobilfunknetzwerks. Das Verfahren umfasst Erhalten von Netzwerk-Trace-Daten. Das Verfahren umfasst ferner Extrahieren, aus den Netzwerk-Trace-Daten, von wenigstens zwei Attributen. Das Verfahren umfasst ferner Erstellen eines Graphen aus den extrahierten Attributen. Der Graph umfasst wenigstens zwei Knoten und wenigstens eine Kante. Ein Knoten repräsentiert ein Attribut und eine Kante repräsentiert eine Abhängigkeit zwischen zwei Attributen repräsentiert. Das Verfahren umfasst ferner Auswerten des Graphen zur Bestimmung des Netzwerkzustandes.

A method for controlling a communication network, wherein an artificial intelligence, Al, agent controls a communication network by transmitting control requests to a control interface of the communication network, each control request defining an operational configuration of the communication network to be realized by the communication network, a communication network and a computer program product.

The invention relates to a method for conducting an emergency communication and/or for configuring an emergency communication, the emergency communication using an in-vehicle system in a country, or a geographic region within a country, that is part of the coverage area of a mobile communication network, wherein the in-vehicle system comprises a terminal equipment entity or functionality as well as a mobile termination entity or functionality, wherein, regarding conducting and/or configuring emergency communication, at least one piece of emergency communication information (or at least one emergency communication-related parameter) is stored in the in-vehicle system and/or at least one action is requested, by the terminal equipment entity or functionality, from the mobile termination entity or functionality, wherein the method comprises the following steps: -- in a first step, the terminal equipment entity or functionality requests the at least one piece of emergency communication information (or the at least one emergency communication-related parameter) and/or requests at least one action by means of an emergency communication request, -- in a second step, the terminal equipment entity or functionality receives the at least one piece of emergency communication information (or the at least one emergency communication-related parameter) and/or the mobile termination entity or functionality conducts the at least one requested action.

The invention relates to a method for using a user equipment with a mobile communication network and/or for transmitting next generation application layer protocol messages, NGAP messages, wherein the mobile communication network comprises at least one access network node or entity of an access network and at least one core network node or entity of a core network, wherein the access network node or entity and the core network node or entity exchange NGAP messages in uplink and downlink direction over a transport protocol being a request-response protocol, wherein such NGAP messages comprise class 2 NGAP messages that lack a defined reply message, wherein, in order to provide communication services to the user equipment and/or for using the user equipment with the mobile communication network, the method comprises - regarding a considered pair of class 2 NGAP messages comprising one uplink and one downlink NGAP message - the step of transporting the considered pair of class 2 NGAP messages by means of: -- a request message, and -- a response message of the transport protocol..

The present disclosure relates to a method for distribution of a secret in a secret recovery system with a reissuance scheme based on at least one verifiable credential, VC, from a user to one or more trusted parties; a method for reconstruction of a secret in a secret recovery system with a reissuance scheme based on at least one verifiable credential from a user to one or more trusted parties; a method for re-issuance of a previously issued verified credential in a secret recovery system with a re-issuance scheme based on at least one verifiable credential for a user by an issuer; and corresponding systems, in which it is assumed that the user has lost the previously issued verified credential.

A method for assisting a user of a telecommunications device (200) in detecting potentially harmful content is provided, which comprises the steps ofa) providing a communication message that is received by a communication application (201) executed on the telecommunications device (200) to an assistant device (100),b) checking the communication message by the assistant device (100) for potentially harmful content based on stored parameters and/or usage patterns, andc) notifying the user of the telecommunications device (200), if potentially harmful content is identified by the assistant device (100).Further, an assistant device (100) and a system (50) is proposed, which are adapted to perform the method.

The disclosure provides a method for designating a further deployment target for an Al compute workload serving an Al requesting endpoint, preferably utilizing unused capacity on a server running NT (network technology) workloads, the method comprising: receiving a request for an Al service with a defined quality of service (QoS) requirement from the Al requesting endpoint; determining that none of a plurality of deployment targets are running the Al service und fulfil the defined QoS requirement; selecting the further deployment target, wherein the further deployment target is different to each of the plurality of deployment targets running the Al service and having sufficient capacity not used by NT workloads; sending a request to the further deployment target to deploy the Al service; and sending to the Al requesting endpoint information to reconfigure a target for the specific Al service to the further deployment target.

Provided is a method for detecting presence of coherent light using a photonic processor. The method includes receiving data indicating, for an output of the photonic processor, a characteristic of the coherent light, the coherent light entering the photonic processor at at least two inputs. The method further includes generating a control signal for adjusting at least one parameter relating to the photonic processor such that the coherent light of the at least two inputs interferes in a way to increase the characteristic at the output. The method further includes determining the presence of the coherent light based on an analysis of the increased characteristic at the output.

A method and system for organizing and optimizing sets of dependent and/or interdependent optimization models (OMs) in an Open Radio Access Network (OpenRAN) environment, the method comprising: - storing a set of OMs, especially initial OMs for network management, in a storage module, , - retrieving OMs from the storage module by a scheduler module, wherein the scheduler selects an optimized set of OMs for deployment based on predefined parameters, - deploying the selected OMs into a live OpenRAN environment to manage network operations, - a monitoring module collects network data from the deployed OMs, including especially performance metrics, logs, and optimizer state information, and forwards the collected data to an optimizer module, - optimizing the deployed OMs using an optimizer module especially based on predifind objective functions and - storing the optimized OMs back in the storage module, ensuring that future deployments use improved models especially selected according to objective function values.

Apparatus for servicing a multi-port network device, the multi-port network device comprising a plurality of physical ports, and method for servicing a multi-port network device.

The invention relates to a method for using a user equipment with a mobile communication network and/or for identifying - by the mobile communication network - an application being used by the user equipment, wherein the application interacts with the mobile communication network via, or using, an intermediate aggregator entity, wherein the interaction of the application with the mobile communication network involves both, a first service and a second service, the first service being provided to, and consumed by, the application as well as being provided by the intermediate aggregator entity, and the second service being provided to, and consumed by, the intermediate aggregator entity as well as being provided by the mobile communication network, wherein, in order for the application to be identified by the mobile communication network, the method comprises the following steps: -- in a first step, the application is installed on, or otherwise transferred to, the user equipment by means of using an application store, and -- in a second step, the first and/or second services are initiated, and/or operatively provided or consumed in a manner such that the mobile communication network receives a registry identifier information, wherein the registry identifier information is provided by an application registry entity being different from the application store.

A method for detecting cyberattacks on satellite systems, according to which native telemetry data produced by subsystems of the satellite are collected and transmitted to the ground station for monitoring and control. Data generated by a trusted power monitoring device is also collected, for monitoring the energy consumption data from the satellite's primary power source. The satellite's energy consumption data is then transmitted to a ground station, via a separate dedicated out-of-band communication channel. The native telemetry data which is collected by a data collection apparatus, is compared (by a computerized device having at least one processor and associated memory) to the energy consumption data, collected by the trusted power monitoring device and the comparison results are analyzed by a trained ML model (such as a deep-learning-based model) on the computerized device, to detect discrepancies or anomalies being indicative of possible telemetry data manipulation. Upon detecting discrepancies or anomalies by the model, an alert regarding a potential cybersecurity event is issued by the computerized device.

Provided is a method for a mobile telecommunication network for controlling access of user equipment, UE, to an external network, using a walled garden environment in a core network. The walled garden environment is configured to allow, before authentication of the UE, only at least one pre-approved service to the UE. The method includes receiving, at the core network, a connection request from the UE. The connection request further comprises authentication data of the UE. The method further includes routing the connection request into the walled garden environment. The method further includes determining, based on the authentication data, an access policy for the UE. The method further includes establishing bidirectional data communication between the UE and the external network.

Provided is a method for establishing a connection between user equipment, UE, and a common core network via at least one base station of a mobile communications network. The method includes receiving, at the base station, a connection request from the UE. The connection request is based on internet protocol, IP, packets generated by the UE. The method further includes forwarding, by the base station, the received IP packets as native IP packets via an IP interface to the common core network. The method further includes enabling, via the common core network, bidirectional IP data communication between the UE and an external network based on an established IP session.

Verfahren und System zur Übertragung von Datenpaketen in einer Ende zu Ende (E2E) Verbindung innerhalb einer IP-basierten Telekommunikationsnetzwerk-Infrastruktur unter Verwendung einer einheitlichen Datenpaketgröße (MTU, Maximum Transmission Unit), wobei die Datenpakete von einem ersten Telekommunikationsanbieter über einen IP-Exchange Anbieter (IPX-Provider) zu einem zweiten Telekommunikationsanbieter übertragen werden, wobei- für die beiden Telekommunikationsanbieter und den IPX-Provider die Größe einer für ihn jeweils nutzbaren MTU einer zentralen Verwaltungseinheit mitgeteilt werden,- die zentrale Verwaltungseinheit als einheitliche MTU die kleinste der mitgeteilten MTUs bestimmt,- die zentrale Verwaltungseinheit die Größe der einheitlichen MTU dem ersten Telekommunikationsanbieter übermittelt und- der erste Telekommunikationsanbieter die Datenpakete unter Verwendung der einheitlichen MTU über den IPX Provider an den zweiten Telekommunikationsanbieter überträgt.

Provided is a method for determining an action in a telecommunications network. The method includes receiving, by a prompt gateway, a first prompt corresponding to a request of a client in the network. The method further includes identifying, based on the first prompt, at least one action to be taken for at least one of a UE or at least one network layer. The method further includes generating, by the prompt gateway, at least one second prompt for at least one of the UE or a network layer agent provided for the at least one network layer for invoking the at least one action.

Provided are methods, computer programs, and apparatuses for providing firewall services in a mobile communication system. The method (10) for providing firewall services in a mobile communication system comprises storing (11) user plane information about a user plane data flow of a data service in the mobile communication system and providing (12) the information about the user plane data flow to a firewall entity to enable firewall services to be applied to the user plane of the mobile communication system.

Provided is a method for allocating resources of a mobile telecommunications network. The method comprises receiving data indicative of an intent. The intent is a declarative goal or user demand specified by at least one of a user of the UE, the UE, a client of the network, and at least a part of the network. The method further comprises determining, based on the intent, a current and a projected network resource status using a network digital twin. The apparatus further comprises allocating network resources in accordance with the intent based on the determined network resource status.

Provided are methods, computer programs, and apparatuses for using dynamic addressing for mobile devices in a telecommunication system. The method (10) for using dynamic addressing for mobile devices in a telecommunication system comprises assigning (12) a first address to a mobile device, the first address being from a first group of addresses with a first lower address persistency for provision of a first service with a higher Quality of Service, QoS, requirement. The method (10) further comprises assigning (14) a second address to the mobile device, the second address being from a second group of addresses with a second higher address persistency for provision of a second service with a lower QoS requirement.

The invention relates to a method for using a user equipment with a mobile communication network and/or for transmitting data on, or using, an additional communication plane besides the user plane and the control plane, wherein the mobile communication network comprises a radio access network comprising at least one base station entity serving the user equipment, and wherein the user equipment indicates, to the mobile communication network and/or to the at least one base station entity, the transmission of data or the intended transmission of data on, or using, the additional communication plane, this transmission or intended transmission of data being in uplink direction, from the user equipment towards the mobile communication network, wherein the method comprises the step of the user equipment transmitting an indication information that specifies, relates to, or indicates the use of, the additional communication plane, wherein the indication information is part of, or carried by, at least one medium access control sub protocol data unit, MAC subPDU, and/or at least one medium access control, MAC, control element and/or at least one medium access control, MAC, subheader.

The present disclosure relates to method, apparatus and computer program for controlling cross-border Public Land Mobile Network (PLMN) handover and to a method, apparatus and computer program for communicating information on cross-border PLMN handover being enabled or disabled for a User Equipment (UE). A method for restricting cross-border PLMN handover comprises obtaining (110, 120, 130) information on cross-border PLMN handover being enabled or disabled for a User Equipment, UE, being associated with a serving PLMN, and restricting (150, 160, 170) a set of PLMN being available for handover based on the information on the cross-border PLMN handover being enabled or disabled.

Verfahren zum Ermitteln von Verkehrsdaten eines Verkehrsmittels, bei dem ein mit einem Mobilfunknetz verbundenes mobiles Endgerät eine einen gegenwärtigen Zeitpunkt und eine Position des mobilen Endgeräts zu dem gegenwärtigen Zeitpunkt bestimmende Anfrage über das Mobilfunknetz zu einem Server übermittelt und von dem Server eine Antwort mit Verkehrsdaten eines zu dem gegenwärtigen Zeitpunkt in einer Umgebung der Position angeordneten Verkehrsmittels über das Mobilfunknetz in Echtzeit empfängt, sowie System zum Ermitteln von Verkehrsdaten eines Verkehrsmittels und Computerprogrammprodukt.

Ausführungsbeispiele der vorliegenden Erfindung schaffen ein Verfahren 100 zum Auffinden eines Richtlinienverstoßes eines generativen maschinellen Lernmodells. Das Verfahren 100 umfasst das Erhalten 110 eines ersten maschinellen Lernmodells zur Ausführung einer dialogbasierten Eingabe- und Ausgabe-Zielanwendung. Ferner umfasst das Verfahren 100 das Erzeugen 120 von Eingabedaten durch ein zweites maschinelles Lernmodell, um einen Dialog zwischen dem ersten maschinellen Lernmodell und dem zweiten maschinellen Lernmodell zu führen. Die Eingabedaten sind dabei ausgelegt, das erste maschinelle Lernmodell zu einer Ausgabe zu veranlassen, die gegen vorherbestimmte Richtlinien verstößt. Das Verfahren 100 umfasst ferner das kontinuierliche Prüfen 130 durch ein Prüfungsmodell, ob eine Ausgabe des ersten maschinellen Lernmodells während des Dialogs gegen die vorherbestimmten Richtlinien verstößt. Falls das Prüfungsmodell erkennt, dass eine Ausgabe gegen die vorherbestimmten Richtlinien verstößt, umfasst das Verfahren 100 das Beenden 140 des Dialogs.

Ausführungsbeispiele der vorliegenden Erfindung schaffen ein Verfahren 100 zur Anpassung eines maschinellen Lernmodells. Das Verfahren 100 umfasst Erhalten 110 eines ersten maschinellen Lernmodells zur Ausführung einer dialogbasierten Eingabe- und Ausgabe-Zielanwendung. Ferner umfasst das Verfahren 100 Erhalten 120 eines zweiten maschinellen Lernmodells zur Erzeugung von Eingabedaten für das erste maschinelle Lernmodell zum Führen eines Dialogs zwischen dem ersten und dem zweiten maschinellen Lernmodell. Das Verfahren 100 umfasst weiterhin Trainieren 130 einer oder mehrerer Anpassungsmatrizen für das zweite maschinelle Lernmodell, die mit dem zweiten maschinellen Lernmodell kombiniert werden. Schließlich umfasst das Verfahren 100 Kombinieren 140 der einen oder mehreren Anpassungsmatrizen mit einer Gewichtsmatrix des zweiten maschinellen Lernmodells. Die einen oder mehreren Anpassungsmatrizen werden trainiert, um Eingabedaten durch das kombinierte zweite maschinelle Lernmodell für das erste maschinelle Lernmodell zu erzeugen, die darauf ausgelegt sind, das erste maschinelle Lernmodell zu einer Ausgabe zu veranlassen, die gegen vorherbestimmte Richtlinien verstößt. Die einen oder mehreren Anpassungsmatrizen weisen einen kleineren Rang auf als die Gewichtsmatrix des zweiten maschinellen Lernmodells, mit der sie kombiniert werden.

A method for maintaining a hardware component, wherein a hardware component of a central office, CO, of a telecommunication network is maintained, a maintenance system for an operation support system of a telecommunication network and a computer program product.

Provided is a method (10) for managing a mobile communication network using a semantic knowledge graph (20; 30). The method (10) includes modeling (12) the mobile communication network and telecommunication domain knowledge as a semantic knowledge graph (20; 30) representing data describing an ontology of the mobile communication network and the telecommunication domain knowledge, the ontology including structured concepts, taxonomies, relationships, and constraints, wherein the semantic knowledge graph (20; 30) is configured to enable logical operations for inference. The method (10) includes obtaining (14) runtime data from the mobile communication network and correlating the runtime data with the semantic knowledge graph to perform reasoning (16), derive optimization decisions, and implement network changes based on the derived decisions.

Verfahren zum Ermitteln eines Erfolgs einer Außenwerbung, bei dem ein Knoten eines Mobilfunknetzes eine Position eines mit einer Basisstation des Mobilfunknetzes drahtlos verbundenen mobilen Endgeräts ermittelt und das mobile Endgerät während einer Messdauer in einer definierten Umgebung einer Au-ßenwerbung angeordnet wird, Knoten für ein Mobilfunknetz und Computerprogrammprodukt.

Die Erfindung betrifft eine Lösung, welche es einem Konsumenten eines digitalisierten Videos ermöglicht, die Authentizität des Herausgebers und die Integrität der Videodaten zu überprüfen. Mittels einer Videosicherungseinrichtung des Herausgebers wird das Video in jeweils mehrere, aufeinanderfolgende Videoframes umfassende Videoblöcke unterteilt. Zu den Videoframes jedes Videoblocks wird eine Hashinformation erzeugt und mit einem privaten Schlüssel des Herausgebers signiert. In jeden Videoblock wird ein Kennzeichnungs- und Signaturframe MSF eingebettet, welcher zumindest ein ihn als MSF kenntlich machendes Kennzeichen und die Signatur der Hashinformation zum Videoblock enthält. Der Mediaplayer des wiedergebenden Endgeräts erkennt die in die Videoblöcke eingebetteten MSFs. Er speichert für den Videoblock, auf welche sich der jeweilige MSF bezieht, die enthaltene Signatur und validiert den Videoblock, indem er zu diesem mittels der auch in der Videosicherungseinrichtung verwendeten Hashfunktion eine Hashinformation erzeugt, die er mit der in dem MSF in signierter Form übermittelten Hashinformation durch Verifikation der zwischengespeicherten Signatur mit dem öffentlichen Schlüssel des Herausgebers vergleicht.

An RL-based framework for energy efficient onboard anomaly detection of a satellite moving in a predetermined orbit, comprising a repository of pre-trained anomaly detection models, trained on a specific subset of samples, or rule-based detectors; onboard sensors for continuously monitoring the satellite systems and data network and the onboard collected data; an RL-based agent for deciding which model to activate each time and what features to monitor via a subset of sensors, according to the location, cyber vulnerability level, previous anomalous activity, functions to be executed and energy state of the battery of the satellite, to achieve in each state the highest performance of each anomaly detection task, while investing the lowest amount of energy possible; means for providing alerts in the event of a detected cyber-attack.

A method for analyzing a quantum key distribution network, QKDN, wherein a QKDN analyzer module measures a key system attribute, KSA, of the QKDN and/or checks a functionality of the QKDN; a QKDN analyzer device for analyzing a QKDN, QKD nodes for a QKDN, a QKDN and a computer program product.

The invention relates to a method for using an application enabler layer and/or a service enabler architecture layer for verticals, SEAL, for providing communication services to a user equipment in a dynamic and/or flexible manner, using an application enablement layer and/or a vertical application layer of or via a telecommunications network, especially for supporting and providing an energy-related selection of an application enabler entity or a network entity of or associated to the telecommunications network or of or associated to a third party, wherein the telecommunications network comprises, or is associated with, a network repository function for providing profile information of or regarding a plurality of application enabler entities or of or regarding a plurality of network entities, in a discovery process of such application enabler entities or network entities, wherein, in order for providing communication services in a dynamic and/or flexible manner, the method comprises the following steps: -- in a first step, a requesting application enabler entity or a requesting network entity transmits a discovery request information to the network repository function of the telecommunications network, -- in a second step, the network repository function provides, to the requesting application enabler entity or requesting network entity, a profile information of or regarding at least one application enabler entity or of or regarding at least one network entity (502).

An optic terminal for an optic network, comprising a first optic receiver, RX, port, a first optic transmitter, TX, port, a second optic RX port, a second optic TX port and an optic engine connected to the first optic RX port, the first optic TX port, the second optic RX port and the second optic TX port, further comprising an electric plug and a digital signal processor, DSP, connected to the electric plug and the optic engine; an optic terminal stack for an optic network, an optic terminal stack arrangement for an optic network, an optic network, a method for operating an optic terminal and a method for operating an optic network.

An LLM-based method for detecting Advanced Persistent Threat (APT) and providing natural language interpretability of the detection findings, according to which unsupervised learning is performed, for statistical anomaly detection in provenance data of provenance-based systems. Large Language Models (LLMs) with implicit knowledge are used to detect unknown attack patterns by performing context-aware graph-based analysis of detected anomalies in the provenance data, for accurate interpretation of the detected anomalies and underlying context of potential attacks; natural language explanations, drawing connections between events, and outputting insights, based on the interpretation are provided.

Provided are methods, computer programs, and apparatuses for providing services of multiple generations of telecommunication systems. The method (10) for providing services of multiple generations of telecommunication systems comprises enabling (11) services of a first telecommunication system, wherein the first telecommunication system supports network slicing and wherein the network slices are configurable to pro-vide different service characteristics and supporting (12) a second telecommunication system, the second telecommunication system being a different generation of telecommunication systems than the first telecommunication system. The first telecommunication system being configured to provide access to at least one feature of the second telecommunication system using at least one network slice.

Provided is a concept for selectively applying cryptographic processing to user plane (UP) traffic in a telecommunication network. It includes receiving cryptographic policy information indicative of cryptographic policies for at least one portion of UP traffic. It includes determining, based on the cryptographic policy information, whether to apply cryptographic processing to the at least one portion of the UP traffic. The cryptographic processing comprises at least one of encryption or integrity protection. Further, the proposed concept includes selectively applying the cryptographic processing to the portion of the UP traffic at a granularity of at least one of an interface, a tunnel, a protocol data unit (PDU) session, or a quality-of-service (QoS) flow

A method for monitoring a fiber-optic routing platform, the fiber-optic routing platform comprising a rack and a plurality of optic ports, cables, connectors and fixed optic attenuators, FOATT, arranged in the rack, wherein the fiber-optic routing platform is monitored during a maintenance session of the fiber-optic routing platform. The invention further relates to a monitoring unit for a fiber-optic routing platform and computer program product.