Techniques for communicating between a first satellite payload in an electronic distributed ledger network and a second satellite payload in the electronic distributed ledger network are presented. The techniques include: providing, by the first satellite payload and to the distributed ledger network, a request for a service; obtaining, by the first satellite payload, a service response from the second satellite payload and an indication of compliance with a policy concerning the service; determining, by the first satellite payload, and based on the indication of compliance, whether the service response conforms to the policy concerning the service; and acting on the service response, by the first satellite payload, based on the determining.

A method, apparatus, a communication device, and a storage medium for service communication control in a network, involving obtaining satellite coverage information of an area where user equipment (UE) is located. The service communication control is performed by: obtaining satellite coverage information of an area where a user equipment (UE) is located; and according to the satellite coverage information, determining whether to perform service communication with the UE.

Authenticating a mobile user device with a mobile network operator in advance of an MNO authentication request from the mobile user device can be done by a satellite network sending an authentication request to the MNO system, obtaining a set of authentication vectors related to the mobile user device, storing them into a proxy home location register, receiving the MNO authentication request from the mobile user device, generating an authentication request response based on the authentication vectors, sending the authentication request response to the mobile user device, receiving an authentication response including a received signed response, comparing the received signed response with the stored signed response, and if the received signed response and stored signed response match, deem that to be a successful authentication, add an MNO location update message to a request queue and forward the MNO location update message to the MNO system over the channel when available.

A method is provided by a Lightweight Machine to Machine (LwM2M) server for providing regulatory aware access to at least one network resource. The method includes obtaining information associated with a wireless device. The information includes a location of the wireless device. The LwM2M server transmits, to at least one device for determining whether to allow the wireless device to access the network resource, an object that includes the information including the location of the wireless device and at least one location-specific policy restriction associated with a satellite serving the location of the wireless device.

An access network satellite network element receives an access request from a terminal, obtains network topology information of a plurality of core network satellite network elements from an interface management function network element, determines a candidate core network satellite network element set based on a location area in which the access network satellite network element is located and the network topology information, where the candidate core network satellite network element set is a subset of the plurality of core network satellite network elements, and determines, from the candidate core network satellite network element set, a core network satellite network element set corresponding to the terminal based on an identifier of the access network satellite network element, an identifier of the terminal, and/or a location of the terminal.

Systems, methods, and apparatus for a virtual transponder utilizing inband commanding are disclosed. In one or more embodiments, a disclosed method comprises receiving, by a payload antenna on a vehicle via a hosted receiving antenna, encrypted hosted commands transmitted from a hosted payload (HoP) operation center (HOC). The method further comprises receiving, by the vehicle, encrypted host commands transmitted from a host spacecraft operations center (SOC). Also, the method comprises reconfiguring a payload on the vehicle according to the unencrypted host commands and/or the unencrypted hosted commands. In addition, the method comprises transmitting, by the payload antenna, payload data to a host receiving antenna and/or the hosted receiving antenna. Additionally, the method comprises transmitting, by a host telemetry transmitter, the encrypted host telemetry to the host SOC. Further, the method comprises transmitting, by a hosted telemetry transmitter, the encrypted hosted telemetry to the HOC via the host SOC.

A satellite communication system which supports encrypted DNS at the customer premise equipment terminal to provide the benefits of local DNS caching. Some implementations use Certificate Authority (CA)-signed Transport Layer Security (TLS) certificates. Implementations may provide encrypted DNS service at the CPE, where the system installs CA-signed TLS certificate at the customer premise equipment (CPE) terminal. The same certificate can be used at multiple terminals using a wild-card certificate distributed by the satellite to provide value added services at a CPE as secure web services to off-the-shelf web clients and applications.

The terrestrial-based satellite telephone monitoring system may be used for, among other things, intelligence gathering purposes that intercept communications to or from target satellite handsets or terminals. The exemplary signal processing units receive wireless signals and extend the line-of-sight range of a terrestrial-based satellite telephone monitoring system. The exemplary signal processing unit may be installed in or on an aerial vehicle, such as an unmanned aerial vehicle (UAV), or a satellite, such as a CubeSat, or other vehicle.

A method implemented by a network device for monitoring a resource usage to communicate with at least one terminal. The method includes: sending data to the at least one terminal; and sending, to a monitoring entity and/or to the at least one terminal, one or more usage proofs indicating resources used by the network device to communicate the data to the at least one terminal.

This disclosure describes techniques for complying with a data sovereignty policy of data routed through a satellite network. An example method includes identifying data comprising a data sovereignty label indicating a first geographical region; determining that a coverage region of a satellite includes a first ground station in the first geographical region; determining that coverage region excludes a second ground station in a second geographical region; and based on determining that the coverage area includes the first ground station and excludes the second ground station, transmitting the data to the satellite.