US 11,838,273 B2
Extending cloud-based virtual private networks to radio-based networks
Upendra Bhalchandra Shevade, Washington, DC (US); Diwakar Gupta, Seattle, WA (US); Igor A. Kostic, Redmond, WA (US); Kiran Kumar Edara, Cupertino, CA (US); and Ishwardutt Parulkar, San Francisco, CA (US)
Assigned to AMAZON TECHNOLOGIES, INC., Seattle, WA (US)
Filed by Amazon Technologies, Inc., Seattle, WA (US)
Filed on Mar. 29, 2021, as Appl. No. 17/216,349.
Prior Publication US 2022/0311744 A1, Sep. 29, 2022
Int. Cl. H04L 9/40 (2022.01); H04W 12/45 (2021.01); H04L 41/5067 (2022.01); H04W 8/18 (2009.01); H04W 12/06 (2021.01)
CPC H04L 63/0272 (2013.01) [H04L 41/5067 (2013.01); H04L 63/0236 (2013.01); H04W 8/186 (2013.01); H04W 12/06 (2013.01); H04W 12/45 (2021.01)] 20 Claims
OG exemplary drawing
 
1. A system, comprising:
a radio-based network including a network slice; and
a cloud provider network hosting a virtual private cloud network having an associated internet protocol (IP) address range, a first subnet of the virtual private cloud network corresponding to an availability zone in the cloud provider network, the cloud provider network including at least one computing device configured to at least:
create a second subnet of the virtual private cloud network in the network slice;
register an identifier of a subscriber identity module of a client device in one or both of the network slice and the virtual private cloud network;
assign the subscriber identity module to a security group of the virtual private cloud network;
in response to a request from the client device to connect to the radio-based network, determine that the identifier presented in the request is authorized to connect to the radio-based network and assign the subscriber identity module an IP address from the second subnet of the virtual private cloud network; and
provide the client device with access to a compute instance on the first subnet of the virtual private cloud network through the radio-based network based at least in part on the subscriber identity module being assigned to the security group.