Product Sheet Wi-Fi Platform

Transcription

1 Product Sheet Wi-Fi Platform Luxgateway 09/2015

2 Table of Contents 1 Introduction Smart Wi-Fi Core Platform (SWC) Features Support for Mobile Data Offload Overview & Key Features Customer Management Authentication Payment Billing Service Management Location based advertisements Location based designs Smart Services Management delegation (Monetize B2B service partnerships) Platform Management Configuration Management Statistics Monitoring Central control and Security Hotspot Management Provisioning Inventory Peering Module Peering VPN Tunnel MPLS Routing RADIUS Realm Custom gateway Roaming Login Mechanisms Billing and payment mechanisms Partner Wi-Fi network integration Remote Inventory Remote Provisioning Frontend Modules Communication with backend Operator portal System Settings Central Control Inventory Statistics Monitoring B2B Self-care portal Web Portal Non-authenticated users Authenticated users Captive Portal (Landing Page) Mobile applications Marketing tool Customer area Monetizing Wi-Fi How ist works Additional Revenue Generators Integrating Existing Networks Appendix 1: Use case Data offloading to Wi-Fi Appendix 2: Use case Premium WiFi services Appendix 3: Use case Casual Wi-Fi user scenario Appendix 4: Objectives of Wi-Fi monetization ecosystem STRICTLY CONFIDENTIAL Luxgateway 2015 Page 2 of 32

3 1 Introduction Worldwide, mobile data traffic is expected to grow at 11.2 Exabyte per month, a 13 fold increase over This comes in the wake of operators witnessing huge demand for Wi-Fi, the most popular access network in mobile broadband. Today, Wi-Fi has extended its reach for customers across all segments with extensible offerings and latest business models. This unprecedented data consumption growth has achieved proven results that showcase how Wi- Fi manages to take hold of people s day to day activities, be it at the workplace, hospitality, education, entertainment, recreation etc. demonstrating a strong ability to deliver uninterrupted connectivity and seamless experience, anywhere and anytime. 2 Smart Wi-Fi Core Platform (SWC) Smart Wi-Fi Core (SWC) Platform manages all Wi-Fi related components in your operator network automatically. It consists of five independent modules. SWC 1 The Customer Management API offers complete control and configuration over your customers. SWC 2 The Service Management API makes it possible to adapt your service to your users and B2B partners. STRICTLY CONFIDENTIAL Luxgateway 2015 Page 3 of 32

4 SWC 3 The Platform Management API offers central monitoring, statistics, traffic control and configuration management. SWC 4 The Hotspot Management API provisions and imports hotspots. SWC 5 The Peering and Roaming API facilitates data exchange between your network and other operators. The Wi-Fi Core Platform enables service providers to meet the emerging demand of mobile data offload through Wi-Fi to alleviate existing challenges in network congestion. It s a futureready platform comprising of authentication (EAP SIM/AKA & non-eapsim), billing, captive portal, location-aware services, subscriber analytics, mobile app and integration with Mobile core. The solution is highly interoperable and supports innovative business models along with multiple off-the-shelf, use cases. The Wi-Fi Platform has been built around a flexible framework to support carrier-grade ecosystem and enables operators to tap new revenue opportunities with rapid and cost effective deployments. 2.1 Features The Wi-Fi Core Platform has all key features needed for a quick, simple and effortless offload mechanism for operators or in setting up a Wi-Fi hotspot. These include SIM-based user authentication, web self-care, MAC ID-based authentication, integration with HLR/HSS, integration with existing OCS/IN system, WISPr 2.0 compliant support for meeting demands of multiple partner network set-ups, support for roaming and for 3GPP and non-3gpp interworking. The solution provides a secure, sign-on experience between the user equipment and Wi-Fi network. The Wi-Fi Core Platform provides an abstraction layer to the underlying core Wi-Fi systems like AAA servers, hotspots, DHCP servers etc. This abstraction layer ensures manufacturer independence and flexible and easy integration also of heterogeneous infrastructure and simplifies the configuration and management of Wi-Fi backend systems. The communication with the lower layers is relying on standardized interfaces like RADIUS, DHCP and DNS. The Wi-Fi Core Platform provides a powerful session API to control and query the session state of any customer session and provide this information also to higher layer modules like the service management module or location based services interfaces. This Session API also allows fine-grained control and management of user sessions via provided web interfaces or automated processes. The Wi-Fi Core Platform uses a database abstraction layer to encapsulate all requests to the underlying database and thereby greatly improving stability of data and ensuring a consistent data set. It also enables integration of most commercially available database systems like PostgreSQL, MySQL or ORACLE. STRICTLY CONFIDENTIAL Luxgateway 2015 Page 4 of 32

5 The platform provides enhanced AAA features and is able to enrich AAA information provided by the backend systems by additional parameters configured in the Wi-Fi platform. The Wi-Fi platform ensures a seamless handover between Access Points. An integrated DNS Proxy prevents circumvention of the system by attacks like DNS tunneling. The Wi-Fi core platform provides standardized interfaces for lawful intercept and automated information procedure to ensure compliance with government regulations. 2.2 Support for Mobile Data Offload Mobile Data Offload through Wi-Fi is becoming the most preferred solution for alleviating clogged networks. As soon as any mobile subscriber enters the Wi-Fi Zone, the operator offloads to Wi-Fi network thus, providing seamless connectivity and enhanced user experience. Thanks to the Wi-Fi Platform it can provide quantifiable business value to any operator who wants to adopt Wi-Fi for mobile data offload to deal with any/all of these challenges: Declining voice revenues and increasing need to monetize data services Enabling network optimization with local and packet core break out support The need to alleviate network congestion and reduce connected costs by offloading mobile data traffic from 3G-LTE to Wi-Fi hotspots Ensuring a seamless user experience regardless of access network, or device Retaining high value subscribers by offering them the desired Quality of Service across multiple personal devices. STRICTLY CONFIDENTIAL Luxgateway 2015 Page 5 of 32

6 2.3 Overview & Key Features è Seamless Access and Authentication è High Quality User Experience Support for EAP SIM, EAP AKA, TLS, TTLS, FAST, MD5, and PEAP Anytime, Everywhere' Wi-Fi connectivity at Public Places MAC-ID based, login credentials via Mobile App and Captive Portal Device agnostic real time location specific offerings Advanced authentication - GSM MAP D' / Gr' interface Mobile App based personalized & customized services AAA proxy support in Wi-Fi roaming Social Network Trusted 3GPP Wi-Fi access with 802.1X Support for utilizing cable as backhaul & CMTS integration over [DOCSIS 3.0], an n air interface è Dynamic & Flexible Charging Models è Smart Monetization Prepaid/Post paid billing Largest amount of business cases off-the-shelf Network agnostic charging Support for different Wi-Fi Business Models Hybrid Plan based charging Pay as you go Innovative Monetization framework to launch new plans Walk-in/non operator subscriber è Ease in Roaming & Partner Reconciliation WISPr support for Wi-Fi roaming Partner/content settlement with WISPs/other CSPs è Secure Access Support Integration with Lawful Interception systems Telecom Regulatory Compliant Portals STRICTLY CONFIDENTIAL Luxgateway 2015 Page 6 of 32

7 3 Customer Management The Customer Management module provides mechanisms to be able to authorize and authenticate customers. It enables the integration of multiple authentication and payment schemes. For example user can login via social network and pay via PayPal. It is therefore an essential component for a paid Wi-Fi platform operation model. It can be integrated in an existing billing environment. 3.1 Authentication The Customer Management module provides multiple authentication methods. The most convenient one for mobile network users is EAP-SIM/EAP AKA SIM-based authentication (also known as Hotspot 2.0, an approach introduced by Wi-Fi Alliance for public access Wi-Fi to provide secure and ANDSF function (Access Network Delivery Selection Function) of Wi-Fi from a list of Wi-Fi networks available for the client devices.) or TLS/TTLS clients (authentication as secure and seamless as 3G/4G) along with Wi-Fi roaming capabilities. Hotspot 2.0 complies with 3GPP standard, which provides better bandwidth and seamless experience to alleviate mobile carrier traffic overheads. Additionally it supports plain username/password authentication via AAA server and login mechanisms to use social network authentication for guest or prepaid users like Google, Facebook login. To ensure guest user identification, accounts can be verified via SMS at start. STRICTLY CONFIDENTIAL Luxgateway 2015 Page 7 of 32

8 The Authentication module further includes auto-login mechanisms for known customers. This also allows devices to reconnect when they briefly loose connectivity. The Authentication mechanisms can also be used as or in conjunction with a single-sign-on service to enable usage of network operator service without additional login. A restricted free access can also be modeled with this authentication module, so that customers that do not login have a certain level of authorization based on their location (if used with Service Management package) or customer status Authentication Methods User/Password over AAA server via Mobile App and Captive Portal Social Network (Google+ Sign In, Facebook Connect, Log In with PayPal ) EAP SIM, EAP AKA, TLS, TTLS, FAST, MD5, and PEAP MAC-ID based, login credentials via Mobile App and Captive Portal (Single-Sign-On) Advanced authentication - GSM MAP D' / Gr' interface AAA proxy support in Wi-Fi roaming Trusted 3GPP Wi-Fi access with 802.1X Support for utilizing cable as backhaul & CMTS integration over [DOCSIS 3.0], an n air interface 3.2 Payment The Payment module enables customers to pay for the Wi-Fi platform via multiple mechanisms. The payment component provides a Payment API to integrated payment provider modules like PayPal, Credit Card transactions or simple invoices. In addition the payment module enables existing mobile network customers to pay the Wi-Fi fees via their mobile contract. The payment can be based on traffic volume, duration of access to the Wi-Fi or as a flat fee. The payment module also provides non-monetary-payment options to enable various models of free Wi-Fi or advertisement based concepts. These modules can enable free traffic or time contingents for tourists and enables additional functionalities when combined with other packages. A combination with the Service Management package e.g. allows non-paying customers to watch advertisements in exchange for free Wi-Fi, while a combination with the Statistics package enables polls or feedback requests. 3.3 Billing While the Payment module deals with the contractual and booking aspects of the Wi-Fi service usage, the billing module provides the actual money transfer to ensure the customer s account is eligible for Wi-Fi access. The billing API also provides a free Wi-Fi module that enables free Wi-Fi access based on vouchers or entirely free Wi-Fi network usage. In addition, it provides the matching billing modules for the above mentioned payment STRICTLY CONFIDENTIAL Luxgateway 2015 Page 8 of 32

9 modules to send invoices or charge the customers mobile bill. For pre-paid approaches the billing can be performed as automatic bank debit or automatic credit card debit to transfer credits to the customer account as needed Billing Methods Prepaid/Post paid billing Network agnostic charging Hybrid Plan based charging Pay as you go Walk-in/non operator subscriber STRICTLY CONFIDENTIAL Luxgateway 2015 Page 9 of 32

10 4 Service Management The Service Management module provides mechanisms to offer services on top of the physical Wi-Fi platform to end customers and B2B partners. It enables smart services that e.g. notify customers of interesting shops in the vicinity of their current location or provide promotional offers based on current advertisement contracts. Today Wi-Fi accessibility has increased multi-folds, be it hospitality, malls, cafes, airports, transport, retail, enterprises, residences Location specific events etc. users expect Wi-Fi to be ubiquitously available. The only concern for operators is to engage users onto Wi-Fi. Once the user is successfully latched on to available Wi-Fi network with the different techniques as mentioned in Smart Wi-Fi Core, Luxgateway Service Management location-based services enables operators to actually identify and determine the user location up to precise granular proximity and provide contextual awareness with various technological advances like Geographical information system (GIS), operator network attributes, Wireless Access parameters etc. to improve operator service capability and provide experience transformation to end users in terms of location specific promotions / advertisements /updates /map navigation directions / Push notifications etc. Luxgateway Service Management can perform real time user location detection and discovery (considering the critical privacy aspect of the user and maintaining it) in two step process and enhance user experience by delivering timely on-location awareness in any indoor / outdoor STRICTLY CONFIDENTIAL Luxgateway 2015 Page 10 of 32

11 environment. 4.1 Location based advertisements The Service Management module can provide location-based advertisement to customers based on advertisement contracts between network operator and local service providers. The Service Management also enables rich digital advertisement support with capabilities to offer profile & location specific personalized Advertisement display. It also offers an innovative Wi-Fi monetization Framework comprising Smart Wi-Fi Core, Location Based Services, Subscriber Analytics and Revenue Generator to launch innovative business cases ensuring faster time-to-market and better TCO. 4.2 Location based designs B2B partners can be enabled to create their own look & feel for the Wi-Fi web pages and mobile apps. The service management module provides a management GUI and underlying business logic that allow customization of the Wi-Fi web page and mobile app appearance. 4.3 Smart Services The Service Management module provides mechanisms to create so called smart services. These can involve third party service providers like parking garage operators or external advertisement providers. These smart services can be modeled to use network and customer related information to provide specific services with complex business logic & customization. 4.4 Management delegation (Monetize B2B service partnerships) The Service Management module also provides restricted management access to the platform for big partners (e.g. malls). This enables the partners to manage the infrastructure on their premises to a degree the operator sees fit. Monetizing Wi-Fi is detailed under item 9 (page 25) incl. use cases. STRICTLY CONFIDENTIAL Luxgateway 2015 Page 11 of 32

12 Location Capture Luxgateway Service Management Location based services initializes with first step of Location Capture through a mobile client App and server model for operators with customizable and user-friendly Graphical web interface which they can self manage. Location capture client enables operators to pre-capture specific location geographies with accuracy where they wish to promote their location partner services (GPS is not required). It also enables Geo fencing to identify user within a specific range of location and capture their arrival, exit and session duration based on application defined locations and hence offer appropriate advertisement / promotions / campaigns at the specific geo fenced locations Location Identifier Luxgateway Service Management Location based Services enables operators to identify real time location of users considering all environmental metrics and notify them about various location specific advertising / promotional offers / discounts / etc. through various methodologies like Easy Connect Mobile App in end user device Cell Triangulation or Context Awareness Location Mobility API Web interface based identification parameters Cellular network attributes Wireless network attributes Global Positioning system (GPS) and many more... The process includes constant polling of real time location information and updating the Location Management server and sending relevant location specific alerts, push notification or SMS / notification for Advertisement URL / Ad image / Flash / promotions / offers etc. when user device is detected to be nearby one of the partner locations. Luxgateway s Location Management server is flexible to easily integrate with multiple Advertisement / content servers to load the specific advertisements Location Based Services Enablement through Luxgateway Wi-Fi Core Platform with Service Management like: Easy Connect Mobile App for location polling, location identification and updating the Location Management server Location / partner specific customized Captive Portal with GUI for branding and advertising Location Capture Management Application Tool (client server model) to capture precise location capabilities where operator wants to promote services, identify the user on arrival at that location and offer push notification / Ads / promotional offers for the same STRICTLY CONFIDENTIAL Luxgateway 2015 Page 12 of 32

13 d 5 Platform Management 5.1 Configuration Management The Platform Management component is used to control system wide settings. It performs automatic backups of important data and provides configuration management to improve system stability and reliability. Configuration management enables the platform operators to rollback to previous working states of the Wi-Fi system configuration in case of issues or emergencies. 5.2 Statistics In addition to the technical monitoring of the platform the Platform Management component also provides statistics that can be used for marketing or strategic decisions for example regarding the extension and modification of the infrastructure Network Statistics The collected statistics can provide valuable information about regions of the network that need to be extended (e.g. too many customers per hotspot) or performance indicators that can be used for location based advertisement pricing. STRICTLY CONFIDENTIAL Luxgateway 2015 Page 13 of 32

14 Sample Graph Reports Subscriber analytics The efforts of identifying the user location and showcasing venue specific information is fruitful only if operators are able to co-relate the parameters in terms of usage patterns, network performance, location performance, subscriber preferences, revenue statistics, location based partnerships earnings, subscriber profile, duration of access, device used etc. Subscriber Analytics enables operators with business intelligence that collects information from various network and IT systems and correlate the impact of multiple parameters to analyze and hence generate dashboard based reports and monitor them. Subscriber Analytics gets an easy access to historical trends and information such as visitors frequency, user profile, Location name, Partner locations, Device type, duration of data usage, services accessed etc. from Luxgateway Wi-Fi Platform or 3rd party partner components which on aggregation helps to understand usage pattern and user behavior and generate data analytics and reporting. It also possesses the capability of importing reports from any 3rd party servers entities and correlating it with the existing information to generate specific historical, real time and new forecast reports. Based on the insights and analysis through data mining techniques, operators can actually know the impact of their existing plans in terms of revenue streams and accordingly modify or launch customized and innovative plans as per requirement. This enables them to improve network performance and generate new monetizing opportunities resulting in profitability and growth in ARPU (Average Revenue per User). STRICTLY CONFIDENTIAL Luxgateway 2015 Page 14 of 32

15 Sample Graph Reports 5.3 Monitoring The Platform Management module enables monitoring and statistics collection of the Wi-Fi platform to notice upcoming problems regarding for example hardware failure or bandwidth shortage. Many of the underlying systems already offer a monitoring, that is merged into one monitoring system that checks all Wi-Fi platform related systems and reacts also on complex failure scenarios that are only detectable when checking multiple systems in correlation (for example a hotspot with customer sessions decreasing compared to previous months). The monitoring system provides smart alarms to notify the network operators of such conditions. STRICTLY CONFIDENTIAL Luxgateway 2015 Page 15 of 32

16 Sample Monitoring Graph STRICTLY CONFIDENTIAL Luxgateway 2015 Page 16 of 32

17 5.4 Central control and Security The main feature of the Platform Management package is the central control center. The central control center is used to control the Wi-Fi traffic in terms of bandwidth usage and protocol/service identification (e.g. VoIP, Bit Torrent). The central control center can restrict Internet access by blacklisting / whitelisting and provides a walled garden with restricted access (for example for tourists). It allows controlling the access on a per-user basis to e.g. be able to immediately block malicious users. The Platform Management has been designed and developed to support the wireless network platform and facilitate wireless access services. The Platform Management is integrated with Service Management Platform solution, which makes it a comprehensive solution to cater varied networks like Wired and Wi-Fi. The Platform Management is highly flexible and scalable solution, which can be deployed centrally or locally based on the network topology to support single or multiple sites. The Platform Management is a truly end-to-end access control solution offering various features like inbuilt DHCP-DNS, user session monitoring, captive portal capabilities, various protocol request logs, policy management and enforcements, multiple gateway load balancing, bandwidth prioritization and AAA proxy support with Luxgateway Wi-Fi Platform. STRICTLY CONFIDENTIAL Luxgateway 2015 Page 17 of 32

18 6 Hotspot Management 6.1 Provisioning The main functionality of the Hotspot Management module is the provisioning of the actual access points and other related Wi-Fi infrastructure. The Wi-Fi platform database stores abstract configuration values that can be provisioned to access points in standardized or vendor-specific ways. The provisioning module supports standards like SNMP, TR069 or SSH based transfer. It relies on an internal Provisioning API, which enables customized provisioning based on the common core functionality. 6.2 Inventory The second important functionality of the Hotspot Management component is the inventory. To ease integration of new access points during rollout and maintenance during the Wi-Fi platform operation, the Hotspot Management component provides inventory functionality to authorize access points that are newly added to the network and manage their location, hostname and additional properties and attributes via Web GUI. STRICTLY CONFIDENTIAL Luxgateway 2015 Page 18 of 32

19 7 Peering Module The Peering module integrates seamlessly with Customer Management, Hotspot Management and Service Management modules. It consists of three major features regarding third party Wi-Fi infrastructure: 7.1 Peering The Peering component cares about directing traffic intended for third parties to dedicated gateways or VPN tunnels. It provides multiple mechanisms to handle redirection of certain data like tunneling foreign customer traffic directly to the partner network realm or simple custom gateway for certain requests: VPN Tunnel Especially when it comes to sensitive authentication or billing information or simply customer traffic redirection to backend systems of the partner, VPN tunnels are a necessity. The peering module provides mechanisms to configure VPN tunnels dedicated to certain network traffic. This might also be a VPN tunnel to a third party service provider like a mall for location-based services MPLS Routing For scenarios with high volume traffic the traffic can also be redirected using MPLS routing STRICTLY CONFIDENTIAL Luxgateway 2015 Page 19 of 32

20 instead of resource consuming VPN tunnels RADIUS Realm The peering module also provides mechanisms to establish RADIUS realms to separate third party information from the core data originating from the Wi-Fi platform operator network. This realm-based separation can be used for billing and access policy purposes in the subsystems Custom gateway In addition to the more complex peering mechanisms mentioned above the peering module also supports routing certain traffic to a custom gateway based on IPv4 or IPv6 destination or source address or TCP/UDP port numbers. 7.2 Roaming Wi-Fi roaming agreements with third party network operators (Wi-Fi, mobile network, Internet provider) provide an elegant way to gain access to the Wi-Fi platform for foreign customers. To be able to integrate with essential external systems, the Peering module provides roaming interfaces for authorization, authentication, payment and billing. This component provides two-way roaming mechanisms, which means that the integration does not only allow foreign customers to the access the Wi-Fi platform, but also enables your customers to be authenticated when roaming in third party networks Login Mechanisms HLR (EAP-SIM) A very convenient way of authorizing partner mobile network customers is EAP-SIM. This mechanism authenticates the SIM card with the partner network HLR and does not require any user interaction. This mechanism is very suitable for roaming agreements where the customer is not charged for the service directly and where the traffic is tunneled to the partner network, so that no liability is created on the Wi-Fi platform operator side. Username/Password To authenticate third parties via username and password the module provides integration mechanism with a remote AAA server (RADIUS protocol) Billing and payment mechanisms Billing and payment mechanisms for roaming plug in to the regular billing and payment APIs of the Customer Management module and can be implemented on customer specific needs. These can range from RADIUS accounting integration of the roaming partner systems to customized APIs for billing and payment on the roaming partner side. For incoming roaming billing the peering package provides a centralized high-level API for integration of multiple roaming partners to enable unified billing of customers that roam in foreign networks. STRICTLY CONFIDENTIAL Luxgateway 2015 Page 20 of 32

21 7.3 Partner Wi-Fi network integration Also included are standardized interfaces that allow to easily including partner networks into the operator's Wi-Fi platform (e.g. the access point network of a hotel). This allows widening the range of operator's Wi-Fi platform and has mutual benefits for both parties. To integrate a partner network infrastructure, the Wi-Fi platform needs the ability to retrieve detailed information about the underlying technical infrastructure. We have developed the integration of third-parties networks more in details under item 10 enabling a faster rollout. 7.4 Remote Inventory To be able to manage the remote partner network hotspots, the partner integration component provides mechanisms to retrieve a remote inventory (i.e. list of existing hotspots and additional metadata) from the partner network infrastructure. The integration component stores the hotspot information in the internal database with special markers to identify them as remote hotspots and can use this information to perform management tasks seamlessly integrated with the Hotspot Management component. 7.5 Remote Provisioning Once the remote inventory is established, the Wi-Fi platform core can provision the remote hotspots via the same API as the local ones but use the remote provisioning component as a target to accesses the partner network infrastructure to send the provisioning information either directly to the hotspot or to use an API to deliver the provisioning information to the partner infrastructure. STRICTLY CONFIDENTIAL Luxgateway 2015 Page 21 of 32

22 8 Frontend Modules 8.1 Communication with backend The Frontend modules are a set of Graphical User Interfaces (GUI) providing a user-friendly way to interact with the infrastructure s backend. The communication between all entities is made using a RESTful web service. All datasets are transferred in the JSON format, which is the best solution for backend, web-oriented frontends and mobile applications. 8.2 Operator portal The Operator portal is part of the Platform Management Module (for Monitoring, and Statistics) and of the Hotspot Management Module (for Inventory). The Operator portal includes a role based access system that allows the operator to give different level of access to users System Settings This section allows managing system sates and settings and reverting them to previous instances. Also Backups can be scheduled and managed Central Control This section provides the graphical interface to the central control center. The interface STRICTLY CONFIDENTIAL Luxgateway 2015 Page 22 of 32

23 allows to set restrictions to bandwidth or specific Internet protocols. Another part of this interface manages walled gardens, for example by white/blacklisting of specific websites or IP ranges. Lastly it enables the operator to control Wi-Fi users by restricting or blocking their access Inventory This section enables the operator to manage all existing hotspots and trigger provisioning tasks. The inventory also provides a graphical tool to review existing Wi-Fi hardware and systems Statistics This section displays vital statistics of the Wi-Fi system (e.g. number of sessions per hotspots, most frequented areas, etc.). The set of displayed and computed statistics can be managed here. A rule-based system allows the operator to easily create statistics to their special requirements. Restricted access to this view can be easily given to non-technical personnel with a special interest in statistics (e.g. marketing) Monitoring This section helps the operator to monitor vital systems of the Wi-Fi platform and keep informed about system events and alarms. Here the operator can also view and manage existing alarms, events and notification and change their behavior (e.g. send to employees when a specific alarm occurs). 8.3 B2B Self-care portal The B2B Self-care portal is part of the Service Management module (see 4.4). The B2B Self-care portal is dedicated to B2B partners who joined the network. Through this interface, they are able to manage the look and feel of the custom-branded interfaces. For instance, they can easily update their business name, description, and location, upload a logo or change the brand s colors without technical knowledge. The Frontend interfaces are seamlessly updated, matching the new parameters set by the B2B partner. Beyond the visual aspect, the B2B partner can also configure minor information about their hotspot (e.g. name, location). For larger B2B partners (e.g. malls), this interface provides a section to manage restricted infrastructure settings of their premises. 8.4 Web Portal Non-authenticated users For non-authenticated users, the Web-portal provides a full set of information regarding the network: introduction, available products, support page, hotspots locator. The latter takes the form of a combined map view and list view, on which a pin represents each hotspot part of the network. By clicking on a pin, the visitor can access detailed information about a particular access point: location, features, partner It also gives access to the conditions to join the network. From a marketing perspective, the Web-portal will contain advertisement spaces STRICTLY CONFIDENTIAL Luxgateway 2015 Page 23 of 32

24 along with market polls and Smart-City related information (e.g. tourists information) Authenticated users Combined to the Customer Management module, the Web-portal integrates a customer area, providing several management options for the customers. Inside this section, they are able to manage their multiple logins, consult their usage statistics (e.g. traffic information on a given period), download their invoices and update their personal information (name, billing address, address) and financial information (preferred credit card information ). For the customers of Wi-Fi subscription, the remaining time is displayed. 8.5 Captive Portal (Landing Page) The Landing page is part of the Customer Management module. This Web interface, compatible with both desktop and mobile devices, is the main entry point to the network. Each end-user must access this page at its first connection. This interface displays hotspot- and location-based information, such as the current hotspot location, a custom-branded layout based on the hotspot-partner and all the products available at the hotspot s location. It provides a way to authenticate against the network using the user s credentials. Depending on the product type, it can also provide a payment interface (using the gateways pre-defined by the Customer Management module). 8.6 Mobile applications The mobile applications are provided for tablets and smartphones, on both ios and Android. Like the Web-portal, they can be considered as marketing tool and as customer area for users Marketing tool The main marketing function corresponds to the Hotspot Finder feature. In addition to the standard map and list views, it allows the user to get the nearest hotspot information, based on its geolocation. The Nearest Hotspot function does not require any Internet connection. The application is embedding location-based advertisements, market polls and Smart-City related information (e.g. tourists information) Customer area Along with the Customer Management module, the application acts as a landing-page alternative, providing a way to communicate with the backend authentication services directly through the application. It also enables the automatic login functionality. In the customer area, a mobile optimized set of information is proposed. The customer is able to consult information about one s account (e.g. remaining time for subscription packages, usage statistics), and manage some aspects of the account (e.g. change password or other updates). 1 The Location-based advertisement module is required to enable these functionalities. STRICTLY CONFIDENTIAL Luxgateway 2015 Page 24 of 32

25 9 Monetizing Wi-Fi In addition to this support in the Wi-Fi structure of the operator, our expertise lays in monetizing Wi-Fi networks. The challenge here is to build up a Wi-Fi ecosystem integrating existing accounting and billing modules as well as avoiding customer management hurdles. We do that not only with the user session management at application layer level being the base platform for a collection of software modules (framework for mobile devices, multiple SSID support, revenue sharing enabler and accounting modules ). As the mass adoption of Wi-Fi-enabled mobile devices converges with the acceptance of Wi-Fi as a global wireless standard, the business model is shifting from a means to offload congestion and reduce churn to a tool for service differentiation. With more than half of Internet traffic estimated to come from Wi-Fi by 2016 (Cisco VNI) and the land grab for Wi- Fi hotspots already well underway, service providers are quickly moving from the question of whether to develop Wi-Fi monetization strategies to when and how to gain market advantage. Today, consumer use of Wi-Fi is being driven by the demand for mobile Internet access and the desire for lower roaming costs. In Europe and the U.S., the percentage of smartphone data carried over Wi-Fi is already over 50% (Analysis Mason). Most service providers view the business model for Wi-Fi to be revenue-neutral a way to manage delivery costs by taking advantage of the unlicensed spectrum, reduce traffic on congested 3G and 4G networks, and provide a good user experience for customer satisfaction and retention. To go beyond basic Wi-Fi and the expectation of free access, service providers will have to define a new class of Wi-Fi services that provide a seamless user experience, carrier-grade reliability, security and Quality of Service (QoS). Building the infrastructure for Wi-Fi monetization will require service providers to address evolving standards for network discovery and selection, enable transparent authorization and authentication, and support seamless interworking between Wi-Fi and cellular networks (see attached Analysis Mason PDF, May 2015). In the move towards advanced monetization models, Wi-Fi has the potential to become a platform for service differentiation, customer acquisition and value-added partnerships with venue owners, enterprises, advertisers, over-the-top (OTT) content providers and other emerging players. 9.1 How ist works The most common commercial model for telecom operators is data offloading, freeing up capacity in their strained 3G and 4G networks. In addition, not only for evident marketing reasons that provide at least on the paper an extremely high number of hotspots (as we did for Vodafone) can be reached via home-hotspots plans with home broadband subscriptions enabling consumers to experience smooth Internet connectivity while on the go. An additional commercial model we have created concerns enterprise connectivity. In public buildings in the city of Berlin e.g. guests/visitors can access Wi-Fi while waiting for meetings in reception areas. The revenue opportunity resides in management fees for creating and managing the guest network as well as voucher sales with kickback provisions. With the Gastrospots concept we have implemented Wi-Fi hotspots in restaurants, coffee shops and lobby areas. The revenues generated there reside in mandatory subscriber fees and advertisement revenues. This part of the ecosystem can literally be extended to any other type of enterprise such as malls, hotels Other revenue opportunities do depend on the chosen profit sharing model. Therefore, one of it could reside in the fact that a partner STRICTLY CONFIDENTIAL Luxgateway 2015 Page 25 of 32

26 advertising its own SSID could financially profit of each connection/subscription made through its own sub-network. Alternatively, the ownership sub-network could be transferred to the operator, who could manage and maintain it whilst the former owner cashes-in without having the technical and maintenance hurdles. In order to give you a more in-depth example of our monetizing expertise and based on what we are allowed to share as public/non-confidential information we could attach a detailed description of mobile-based tools for self-care handling services with apps, web frontend and self-care portal (KD Hotspotfinder on the App-Store). But as these are technical spec like documents we assume that this information is too detailed for you at this stage. At the end of this document we have attached three different use cases (Appendix 1-3). 9.2 Additional Revenue Generators Voucher Revenue share based in Wi-Fi vouchers redeemed on ticket recharge at public area and transport locations like metros, buses, trams, airports etc. Bundled offers Wi-Fi / 3G (or 4G) + Wi-Fi bundle offers with differential policies for each, also real time notification for hotspot locations. Click & Pay Wi-Fi Revenue model based on number of click done for Ads on portal at various location like Malls, cafés, theatres, event show etc. Roaming Use case for national & international roaming services like Ipass and Boingo. Add on Real time Push notification for discounts coupons, promotions at cafés, shops, eateries and revenue settlement based on number of visits. Hotel freebies Wi-Fi access and location spotting with real time concierge service and local alerts at lobbies, rooms, events, restaurants, recreational activities etc. Promotions Promotions on Mobile App with auto prompt for indoor venue specific maps and navigation / Location directions / video without GPS activations when in range. Location Analytics Offer reports as per partner requirement like football / purchases / user interest / visitor s profiles etc. and charge per report or type of insight provided. Commission model Share Wi-Fi infrastructure & offer Managed services with multiple client partner operators and ISPs. Walled Garden Sites Access certain partner s websites in a specific location without being latched onto Wi-Fi network. STRICTLY CONFIDENTIAL Luxgateway 2015 Page 26 of 32

27 Revenue Generation Enablement through Platform, Service and Hotspot Management like: Location specific Captive Portal for customized branding visibility and Wi-Fi access; Get prompt information about freebies / Ads / promotions / map directions / navigation / videos etc. through Mobile App; Revenue settlement and roaming partnerships between operators and location specific partners / roaming partners through Service Management; Promotional time / volume based voucher offers supported by Voucher in Customer Management; Different Wi-Fi offerings at Hotels for guests with and without check-in through only a single integrations required for hotels with Service Management. STRICTLY CONFIDENTIAL Luxgateway 2015 Page 27 of 32

28 10 Integrating Existing Networks Depending on the used hardware and the setup of the cooperating partner, as well as the form of cooperation, we can integrate their existing network. For example many access point types allow so called "cloud provisioning", where we can simply set them to use our provisioning system. There we can detect them with information provided by the partner and prepare a configuration, that will allow a seamless integration into the Wi-Fi network. Depending on the scale of the partner network, another form of integration is by using a roaming-like forwarding of authorization requests, so that your customers can also use the partner network. A third option is to directly link the existing hotspots with your access point controllers (e.g. Cisco WLC, GRE-Tunnel End Device, etc.) by changing the access point s configuration file. All of these methods might or might not require gapping a foreign network (if the access points are connected to the network of another ISP). Standard solutions for this scenario exist and are not difficult to implement. The business model is based on the idea to use one SSID everywhere. The differentiation happens at the portal page (captured portal). Depending on the ecosystem, customer will get access to different areas and landing pages or areas, like - Wallet-garden services free of-charge or billed - Soft internet limit access - Hard internet without restriction - You name it! The idea is to sell vouchers with the access to a given area, by buying something like coffee shop or presents or simply by ordering a hotel accommodation. The last topic is an interesting one, because the customer is known to the ecosystem belonging to the booked hotel. Therefore it is not important where he connects to the one SSID, he will always be after accessing the portal page on the landing page of his hotel. It is even possible to develop new landing pages in cooperation with the hotel depending on the access point the customer uses. But please be aware, the ecosystem will suffer a lot, if you start to give away an SSID for every vendor. NOBODY will install a dozen or more SSID s to get Internet. But if you plan to do so, only nationwide SSID should be given out, normally you can use up to four (4) Extra SSID, even if some systems can do more like 16 or more. Two SSID you will need as an operator, you will not give away, two could be sold on the market and could bring millions in convertible currency for the operator. BUT this will only work if you are not giving everyone his own SSID. STRICTLY CONFIDENTIAL Luxgateway 2015 Page 28 of 32

29 Appendix 1: Use case Data offloading to Wi-Fi It s 6:30pm and Paul is on his way home. He wants to check the latest sales numbers via his smartphone before the national holiday and tries to connect to the company CRM system to download the statistics. The 3G network is congested. His smartphone detects an available Wi-Fi hotspot from Kabel Deutschland and redirects the data session to Wi-Fi. Using EAP SIM authentication, Paul s phone automatically connects to the Wi-Fi network, where he is transparently authenticated without needing to login manually. He securely accesses the cloud CRM and downloads the data needed. In addition, he can take some more minutes to review other important files. After exiting the session, she receives a notice that she will get a data credit of 1MB for using Wi-Fi during a peak period. Monetization model: Churn Reduction Revenue Opportunities Promotional Offers 1. Provide a better data experience even during peak periods 2. Offer loyalty credits towards the data plan fro Wi-Fi usage 1. Unmetered Wi-Fi usage with service provider hotspots as part of premium data plan 2. Shared wallet plans for Wi-Fi offload and access on non-sim devices with unmetered usage 3. Time limited upgrades to premium Wi-Fi for higher QoS 4. Content-based offers such as speed boost of HD streaming video PROs of Implementing Transparent Offload: Enable seamless and automatic connection to the Wi-Fi network based on SIM card or certificate credentials Provide secure authentication using full SIM security and interfacing with existing subscriber databases Give subscribers access from any EAP-SIM capable devices, including smartphones and tablets Increase ARPU and subscriber loyalty with policy- enabled service redirection and real-time notifications for special offers and usage credits over SMS, or via inline notifications Limit CAPEX on network expansion manage infrastructure investments and reduce congestion in mobile networks STRICTLY CONFIDENTIAL Luxgateway 2015 Page 29 of 32

30 Appendix 2: Use case Premium WiFi services Sandra has a Premium data plan that gives her up to 5GB/month, including roaming. As part of her Premium plan, she has a Wi-Fi add-on. When Sandra is in the Kabel Deutschland hotspot coverage area, she can use the Hotspot Finder application (e.g. software module: framework for mobile devices) to locate the nearest hotspot and she has unlimited and not metered access to Wi-Fi. Sandra s plan includes access to Wi-Fi while roaming, which is counted towards her monthly quota. While traveling to another city on business, she gets immediate access to her service provider s partner Wi-Fi network 2 on her 3G-enabled tablet. She receives a notice about her fair usage limit and is alerted to a promotion for a trial upgrade to the VIP package with premium Wi-Fi speed and 15GB of data for 10. Sandra decides to purchase the upgrade and takes advantage of the higher data quota and enjoys a great experience watching HD streaming video on her tablet. Monetization model: Churn Reduction Revenue Opportunities Promotional Offers 1. Cost savings for Wi-Fi 1. Premium tier with 1. Upsell options, such as usage multiple devices and time-limited speed 2. Flexibility to add new no-charge quotas for boost devices to the plan 3. Notifications and Wi-Fi 2. VIP tier with higher day trial upgrades to higher tier packages options for upgrade data quotas and 3. Value added service services premium Wi-Fi speed 3. Access to partner Wi-Fi offers unlimited music subscription over Wi-Fi hotspots with metering on specific devices, unlimited network gaming pack, premium YouTube pack, premium Happy Hour pack PROs of Implementing Premium Wi-Fi Services: Provide secure, automatic authentication on registered devices Create a better user experience with premium QoS and speed options Build in carrier-grade performance with policy control for QoS, metering and quota management Design post-paid service tiers with Wi-Fi roaming and premium services on partner Wi-Fi hotspots Engage subscribers and increase ARPU with differentiated upsell offers based on realtime contextual data such as home or roaming, device-aware 2 Thanks to the integration of Wi-Fi APs in a global Wi-Fi service (multi-vendor environment is a fact). STRICTLY CONFIDENTIAL Luxgateway 2015 Page 30 of 32

31 Appendix 3: Use case Casual Wi-Fi user scenario Alessandra, who is not a Kabel Deutschland s customer 3, is travelling to Berlin and is concerned about her cellular roaming charges. She decides to get a week Wi-Fi pass for 30, allowing her to connect to the local provider s Wi-Fi network i.e. Kabel Deutschland. In a café or directly at the airport when arriving, Alessandra connects to the Kabel Deutschland s Wi-Fi network and is presented with a portal web page, where she can directly purchase her Wi-Fi pass online, or reuse a pass she has not entirely consumed yet. As she is not a Kabel Deutschland s customer, she enjoys like any visitor of Berlin 30 minutes of free Wi-Fi per day. Kabel Deutschland will store Alessandra s MAC address. The next time Alessandra signs in, she will bypass the login screen and her tablet will be automatically authenticated for immediate connection. Alessandra can enjoy nomadic access to a local service provider s Wi- Fi network without having to worry about cellular roaming charges. Monetization model: Churn Reduction Customer Acquisition Cost savings for using Wi-Fi while roaming international Co-branding opportunities for partner hotspots with international travellers or during events in high capacity venues such as stadiums Revenue Opportunities Shared Wallet options for multiple devices and users Promotional Offers QoS and speed boost for timelimited use PROs of Implementing Casual Wi-Fi Services: Provide secure portal authentication and authorization Use flexible billing options through the self- provisioning portal with payment by credit card, vouchers or coupons Deliver carrier-grade performance with policy control for metering and time/qos Simplify access enable repeat sessions with no sign-on for non-sim devices within a pre-defined period of time Introduce new services quick integration with existing portals using the Amdocs Portal Integration Framework enables rapid monetization of Wi-Fi services 3 Kabel Deutschland s non-customer follow another use case. STRICTLY CONFIDENTIAL Luxgateway 2015 Page 31 of 32