# US 12,113,825 B2 · Cybersecurity system for services of interworking wireless telecommunications networks > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,113,825 B2 - Document ID: US12113825B2 - Status: Granted - Kind: B2 - Application number: 18/313,883 - Filed: 2023-05-08 - Published: 2023-08-31 - Granted: 2024-10-08 - Earliest claimed: 2020-12-30 - Assignees: T-Mobile USA, Inc. - Applicants: T-Mobile USA, Inc. - Inventors: Venson Shaw; Gaviphat Lekutai - Web page: https://patentgrep.com/patent/US12113825B2 ## CPC - H04L 63/1433: {Vulnerability analysis} - H04W 12/121: Wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS] - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A system obtains security data of interconnected networks. The visibility of the security data is asymmetric for each interconnected network relative to the other. The security data is continuously stored and used in real-time or near real-time to identify services of the interconnected networks that require safeguards against a potential cyberattack. The interworking system determines a security parameter that relates the security data to the potential cyberattack and communicates the security parameter to the interconnected networks. The interconnected networks can safeguard against the potential cyberattack based on the security parameter. ## Claims ### Claim 1 A non-transitory, computer-readable storage medium comprising instructions recorded thereon that, when executed by at least one processor of a system of a wireless telecommunications network, cause the system to: obtain security data of interconnected wireless networks including a first wireless network and a second wireless network, wherein visibility of the security data is asymmetric for each interconnected wireless network relative to the other interconnected wireless network; store the security data of the interconnected networks at one or more memories of the system; identify a particular service of the first wireless network that is accessible by the second wireless network and requires a safeguard against a potential cyberattack based on the security data; determine a security parameter that relates the security data to the potential cyberattack; and communicate security information including the security parameter to the second wireless network, which, when adopting the security parameter, safeguards the interconnected networks against the potential cyberattack. ### Claim 2 (depends on 1) The non-transitory, computer-readable storage medium of claim 1, wherein the system is further caused to, prior to communicating the security information: identify an action executable by the second wireless network to safeguard against the potential cyberattack. ### Claim 3 (depends on 1) The non-transitory, computer-readable storage medium of claim 1, wherein the system is further caused to, prior to communicating the security information: convert the obtained security data into vulnerability-risk-threat (VRT) data that characterizes the security data in relation to: a vulnerability of an interconnected network to the cyberattack, a risk of the cyberattack to the interconnected network, and a threat of the cyberattack to the interconnected network. ### Claim 4 (depends on 1) The non-transitory, computer-readable storage medium of claim 1, wherein the security data indicates a susceptibility to the cyberattack, a scope of the cyberattack, or a source of the cyberattack. ### Claim 5 (depends on 1) The non-transitory, computer-readable storage medium of claim 1, wherein the system is further caused to: refresh the one or more memories of the system with updated security data; and communicate an indication of updated security information to the interconnected networks. ### Claim 6 (depends on 1) The non-transitory, computer-readable storage medium of claim 1, wherein the system operates independent of the interconnected networks. ### Claim 7 (depends on 1) The non-transitory, computer-readable storage medium of claim 1, wherein the system is further caused to, prior to communicating the security information: identify a most frequently used (MFU) security parameter, wherein the security parameter corresponds to the MFU security parameter. ### Claim 8 (depends on 1) The non-transitory, computer-readable storage medium of claim 1, wherein the system is further caused to, prior to communicating the security information: identify a more recently used (MRU) security parameter, wherein the security parameter corresponds to the MRU security parameter. ### Claim 9 (depends on 1) The non-transitory, computer-readable storage medium of claim 1, wherein the system is further caused to, prior to communicating the security information: identify different actions for respective interconnected networks to safeguard against the potential cyberattack; and communicate indications of the different actions to thereby enable the respective interconnected networks to adopt the safeguard. ### Claim 10 (depends on 1) The non-transitory, computer-readable storage medium of claim 1, wherein to communicate the security information comprises causing the system to: broadcast the security information to thereby enable the interconnected networks to uniformly adopt the safeguard. ### Claim 11 (depends on 1) The non-transitory, computer-readable storage medium of claim 1, wherein to obtain the security data of the interconnected networks comprises causing the system to: query each of the interconnected networks for a security capability or vulnerability; and responsive to the query, receive the security data including different respective security capabilities or vulnerabilities for each of the interconnected networks. ### Claim 12 (depends on 1) The non-transitory, computer-readable storage medium of claim 1, wherein the system is further caused to, prior to communicating the security information: identify an action executable for one of the interconnected networks to temporarily safeguard against the potential cyberattack. ### Claim 13 (depends on 1) The non-transitory, computer-readable storage medium of claim 1, wherein the system is further caused to: maintain a logical memory structure for each of the interconnected networks, wherein each logical memory structure is configured to store capabilities or vulnerabilities of a respective interconnected network; and compare the capabilities or vulnerabilities of each interconnected network to the potential cyberattack, wherein the service is identified based on the comparison. ### Claim 14 (depends on 1) The non-transitory, computer-readable storage medium of claim 1, wherein the particular service includes a connection service to switch a connection of a wireless device of the first or second wireless network between the interconnected networks. ### Claim 15 A system that interconnects a first network and a second network, the system comprising: a data processor; and a memory including instructions which, when executed by the data processor, cause the system to: collect security data of the first and second networks, wherein visibility of the security data is asymmetric for each network relative to the other network; store the security data of the first and second networks at one or more memories of the system; detect susceptibility for a cyberattack on the first network based on the security data of the second network, wherein susceptibility for the cyberattack arises from a wireless service of the second network operable by the first network; identify an action configured to mitigate the susceptibility for the cyberattack on the first network; and communicate the action to the first network to mitigate the susceptibility for the cyberattack when the wireless service is accessed by the first network. ### Claim 16 (depends on 15) The system of claim 15, wherein the first network is susceptible to the cyberattack based on a hardware component of a network device. ### Claim 17 (depends on 15) The system of claim 15, wherein the first network is susceptible to the cyberattack due to a security resource of the second network that is absent from the first network. ### Claim 18 A method for mediating an exchange of security data between multiple interconnected networks, the method comprising: monitoring security data of first and second interconnected networks, wherein visibility of the security data is asymmetric for each interconnected network relative to the other interconnected network; storing the security data of the first or second interconnected networks at one or more memories accessible for the first and second interconnected networks; identifying a particular service of the one interconnected network for the other interconnected network, wherein the particular service requires additional security protection based on the security data; and broadcasting an indication of the particular service and the security data to the first or second interconnected networks and a security parameter that enables adoption of the additional security protection. ### Claim 19 (depends on 18) The method of claim 18, wherein the security data characterizes a susceptibility to a cyberattack, a scope of the cyberattack, and a source of the cyberattack, and wherein the method is performed by a system that operates independent of the interconnected networks. ### Claim 20 (depends on 18) The method of claim 18 further comprising, prior to broadcasting the indication of the particular service and the security data: identifying, based on the security data, a most frequently used (MFU) security parameter or a more recently used (MRU) security parameter, wherein the security parameter corresponds to the MFU or MRU security parameter.