A computer that segments traffic associated with different entities across heterogeneous networks is described. During operation, the computer may provide, addressed to a second computer, information that specifies a mapping of an identifier of an electronic device in a wireless network and a second identifier of a virtual container for traffic associated with the electronic device in the wireless network to a third identifier of the electronic device in a cellular-telephone network, where the electronic device and the virtual container are associated with an entity. Then, the computer may communicate the traffic between the wireless network and the cellular-telephone network within the virtual container based at least in part on the mapping, where the virtual container isolates the traffic from other traffic in the wireless network. Note that the identifier may include a MAC address and the third identifier may include an IMSI.

Embodiments of the prevent disclosure provide a network access authentication method and device. The method includes: receiving an authentication request message sent by a first serving network, the authentication request message carrying a user equipment alias identifier generated by user equipment; determining whether a local user equipment alias identifier is asynchronous with the user equipment alias identifier generated by the user equipment; and when the determination result is positive, obtaining an encrypted International Mobile Subscriber Identification Number IMSI for performing network access authentication on the user equipment.

This application discloses a network slice selection method and apparatus, to resolve a prior-art problem of large transmission load on a network side. The method performed by a core network device includes: receiving a first request message sent by a terminal device, where the first request message is used to request to allocate, to the terminal device, a network slice that provides a business service; sending a query message to a SSF, where the query message carries user information of the terminal device, and is used to query for a network slice that is capable of providing a business service for the terminal device; and after receiving slice information of the network slice that is capable of providing the business service required by the terminal device and that is determined based on the user information, forwarding the first request message to the network slice corresponding to the slice information.

A first subscriber identification module (SIM) of a dual SIM device is connected to a network. A small cell is informed that the dual SIM device is a dual SIM-type device and a first radio frequency device of the dual SIM device is attached to the network. A second radio frequency device of the dual SIM device is attached to the network. The small cell is configured to treat a second SIM as a control SIM and to treat the first SIM a data SIM. User data is transferred to the first radio frequency device, a control channel switch command is sent to the dual SIM device, and control information is transferred to the second radio frequency device.

A mobile-side IP address is translated into an intranet-side MAC address, and an IP address for an intranet is acquired. The present invention provides a network system for transferring a packet, including: a first network that controls transfer of data at a first layer; a second network that is connected to the first network and controls transfer of data at a second layer different from the first layer; and a translation device that translates an address between networks, in which the translation device translates the address of the first layer of the first network attached to data transferred from the first network to the second network into the address of the second layer of the second network.

Identifying groupings of individual users of a mobile network. In particular, some embodiments are configured to obtain transaction data records from one or more mobile network provider(s). Groupings of users may be identified by capturing association patterns in the data by applying word embedding.

A method, system, and apparatus, including a program encoded on computer-readable medium, for routing communications to a mobile device includes registering a cellular telephone identifier with a visitor location register associated with a bridge mobile switching center adapted to receive communication through a cellular backbone network and route communications over a packet-switched network and determining that cellular communications using the cellular telephone identifier are disabled. A home location register associated with the cellular telephone is notified that the cellular telephone is roaming in a network served by the visitor location register. A communication directed to the cellular telephone is received at the bridge mobile switching center. The received communication is routed to the cellular telephone.

A method is provided that includes obtaining an access request for a device to access a visited access network, the access request including an authentication identifier for the device including an identity for the device and a realm comprising a network identifying portion; determining a re-write rule for the realm by querying a database based on an identity type of the device and the network identifying portion of the realm, the database including a plurality of re-write rules for a plurality of networks and a plurality of identity types; re-writing the realm based on the re-write rule using the identity for the device to generate a re-written realm; obtaining, based on the re-written realm, an address for an authentication server of an identity provider associated with the device; and performing an authentication with the authentication server using the authentication identifier to authenticate the device for the visited access network.

A system, method, and computer-readable medium provide for determining that a user device does not include a subscriber identity module (SIM) profile activated to provision a wireless service of a first mobile network operator (MNO); obtaining location data for the user device; generating multiple mobile network codes (MNCs) and corresponding public land mobile network (PLMN) identifiers (IDs) for multiple MNOs that service an area associated with the location data, wherein the multiple MNOs include the first MNO; configuring, using the PLMN IDs, a radio frequency (RF) channel associated with each of the MNOs using each PLMN ID; generating temporary device IDs for the user device; transmitting a discovery message including each device ID via the RF channel associated with each MNO; receiving from the first MNO storing a reserved SIM profile for the device ID, a network address; and downloading the reserved SIM profile via the network address.

Embodiments of the present invention disclose a method, an apparatus, and a system for supporting multiple IMSIs. The method includes: receiving a response message that is returned by a server in response to an IMSI update request message and transmitted by a user terminal; and executing an IMSI update operation for a smart card according to information carried in the response message, where the smart card is a smart card supporting multiple IMSIs, and the IMSI update operation for the smart card includes: an operation of adding an IMSI in the smart card or an operation of deleting an IMSI from the smart card. The foregoing technical solution may dynamically update an IMSI in the smart card, thereby avoiding a phenomenon that one user must occupy multiple IMSIs all along, improving a utilization ratio of IMSIs, and saving IMSI resources.