arXiv subjects

Ray-Guang Cheng

Publications and source records attributed to Ray-Guang Cheng.

10 recordsLinked to original sources

arXiv2026

Evaluating Power Control Strategies for UORA in IEEE 802.11be Systems with Capture Effect

Uplink OFDMA-based random access (UORA) is a new channel access mechanism that supports uplink multiuser access in the new generation WiFi systems. Any associated stations (STAs) can use UORA to send their requests or data to the access point (AP) in a contention manner. In this paper, we provide a comprehensive evaluation for simulation study that investigates two power control strategies combined with capture effect in UORA and observes the fairness issue for spatial distribution of STAs. The results demonstrate that power control strategies can improve the performance of access success probability, delay, resource utilization, and power efficiency of UORA.

cs.NI↗

arXiv2026

Uplink SRS-Based Real-Time Indoor Localization System over OpenAirInterface

Indoor localization is one of the important services for future 5G-Advanced and 6G systems. This paper presents an uplink Sounding Reference Signal (SRS)-based real-time indoor localization system implemented over an OpenAirInterface (OAI) 5G Radio Access Network (RAN). The proposed system uses a Positioning xApp to derive Channel Frequency Response (CFR) measurements from uplink SRS measurements. The SRS measurements are obtained from the gNB through the E2 Service Model for Lower Layer Control (E2SM-LLC) over the standardized E2 interface. The xApp transforms the CFR into a 32-dimensional physics-aware feature vector and uses a Random Forest (RF) regressor to estimate the two-dimensional position of the user equipment. We implemented the Positioning xApp on an OAI-based 5G testbed in a multipath-rich indoor laboratory at EURECOM to validate the proposed system. Experimental results show that the proposed system achieves a mean absolute error (MAE) of 0.12 m under random train-test evaluation. These results demonstrate the feasibility and limitations of uplink SRS-based real-time indoor localization over OAI.

cs.NI↗

arXiv2026

LLM-assisted gNB Parameter Configuration for Radio Access Network

gNB parameter misconfigurations are a common cause of system failures in radio access networks (RANs), and their diagnosis and correction rely on manual analysis of complex network logs that does not scale well. This paper proposes a large language model (LLM)-assisted framework for automatic gNB parameter configuration. The framework adopts a synthetic data generation pipeline following a configuration, log, correction workflow. Starting from a workable configuration and the gNB technical references, the pipeline uses a commercial LLM to generate modified configurations and derive structured reasoning traces from gNB error logs. The synthetic training data maps network states to corrective actions and is used to fine-tune an LLM for configuration correction. During inference, the fine-tuned LLM generates valid and deployable gNB parameter configurations from gNB error logs. The framework is validated on an OpenAirInterface (OAI) gNB testbed with 480 unseen misconfiguration scenarios, where fine-tuning improves correction accuracy from 13.8% (zero-shot baseline) to 85.4%, and retrieval-augmented generation (RAG) further improves accuracy to 92.7%. The results demonstrate that the framework may enable automated recovery from misconfigurations without manual intervention and supports scalable and autonomous RAN operation.

cs.NI↗

arXiv2026

Contract-based Agentic Intent Framework for Network Slicing in O-RAN

Intent-based networking aims to simplify network operation by translating operator intents into a collection of policies, configurations, and control actions. However, this translation process relies on heuristics and loose coupling. It often results in unpredictable behavior and ambiguous safety standards. This paper presents a Contract-based Agentic Intent Framework (CAIF) for the radio access network (RAN). The proposed framework employs a closed-loop agentic pipeline that systematically audits user objectives against formal RAN constraints prior to actuation. The proposed CAIF decouples probabilistic intent extraction from strictly governed policy execution to enable the enforcement of deterministic safety guarantees. We use network slicing as a representative use case to demonstrate the design flow and validate the effectiveness of the proposed approach on an O-RAN testbed. Experimental results show that the closed-loop agentic pipeline of the proposed CAIF can effectively eliminate harmful intent executions observed in direct-actuation baseline approaches.

cs.NI↗

arXiv2026

Jamming Attacks on the Random Access Channel in 5G and B5G Networks

Random Access Channel (RACH) jamming poses a critical security threat to 5G and beyond (B5G) networks. This paper presents an analytical model for predicting the impact of Msg1 jamming attacks on RACH performance. We use the OpenAirInterface (OAI) open-source user equipment (UE) to implement a Msg1 jamming attacker. Over-the-air experiments validate the accuracy of the proposed analytical model. The results show that low-power and stealthy Msg1 jamming can effectively block legitimate UE access in 5G/B5G systems.

cs.CR↗

arXiv2025

Intent-Based Network for RAN Management with Large Language Models

Advanced intelligent automation becomes an important feature to deal with the increased complexity in managing wireless networks. This paper proposes a novel automation approach of intent-based network for Radio Access Networks (RANs) management by leveraging Large Language Models (LLMs). The proposed method enhances intent translation, autonomously interpreting high-level objectives, reasoning over complex network states, and generating precise configurations of the RAN by integrating LLMs within an agentic architecture. We propose a structured prompt engineering technique and demonstrate that the network can automatically improve its energy efficiency by dynamically optimizing critical RAN parameters through a closed-loop mechanism. It showcases the potential to enable robust resource management in RAN by adapting strategies based on real-time feedback via LLM-orchestrated agentic systems.

cs.NI↗

arXiv2024

Evaluation of Control/User-Plane Denial-of-Service (DoS) Attack on O-RAN Fronthaul Interface

The open fronthaul interface defined by O-RAN ALLIANCE aims to support the interoperability between multi-vendor open radio access network (O-RAN) radio units (O-RU) and O-RAN distributed units (O-DU). This paper introduces a new tool that could be used to evaluate Denial-of-Service (DoS) attacks against the open fronthaul interface. We launched an array of control/user planes (C/U-Planes) attacks with the tool under different traffic types and data rates, and we evaluated their impacts on the throughput and block error rate (BLER) of real-world O-RAN systems with commercial hardware.

cs.NI↗

arXiv2022

OSC Community Lab: The Integration Test Bed for O-RAN Software Community

O-RAN Software Community (OSC) is an open-source project collaborated by O-RAN Alliance and Linux Foundation, aiming to develop reference software components based on 3GPP and O-RAN Alliance specifications. The OSC has twelve projects. Among them, the Integration and Testing (INT) project is responsible for testing the requirements documented in each release for end-to-end and use case testing. Three OSC Community Laboratories were built to speed up the integration and interoperability testing among different projects. This paper summarizes the software components developed by OSC projects and the status of the three OSC Community Laboratories. The activities of each laboratory, how the community collaborates, and the challenges we encountered along the way were elaborated.

cs.NI↗

arXiv2022

A Survey on Open Radio Access Networks: Challenges, Research Directions, and Open Source Approaches

The open radio access network (RAN) aims to bring openness and intelligence to the traditional closed and proprietary RAN technology and offer flexibility, performance improvement, and cost-efficiency in the RAN deployment and operation. This paper provides a comprehensive survey of the open RAN development. We briefly summarized the RAN evolution history and the state-of-the-art technologies applied in open RAN. The open RAN-related projects, activities, and standardization is then discussed. We then summarize the challenges and future research directions required to support the open RAN. Finally, we discuss some solutions to tackle these issues from the open source's perspective.

cs.NI↗

arXiv2020

Prototyping of Open Source NB-IoT Network

Narrowband Internet-of-Things (NB-IoT) is one of the major access technologies proposed to support massive machine type communications (mMTC) services for the 5th generation (5G) mobile networks. Many emerging services and networking paradigms are expected to be developed on top of NB-IoT networks. This paper summarizes the steps required to build up an open source narrowband Internet-of-Things (NB-IoT) network. This work is a joint research and development (R&D) result from industry and academic collaboration. The open source NB-IoT enhanced Node B (eNB) is jointly developed by B-COM and NTUST based on the well-known OpenAirInterfaceTM (OAI) open source Long-Term Evolution (LTE) eNB developed by EURECOM. The NB-IoT eNB is successfully connected to an evolved packet core (EPC) developed by Nokia Bell Lab. We demonstrate how to use commercial off-the-shelf (COTS) NB-IoT module to forward its sensing data to the Internet via the open source NB-IoT network.

cs.NI↗