Method, device and system for the dynamic development of a data infrastructure

Abstract

The invention relates to a method, a device and a system for the dynamic development of a data infrastructure (Inf) in a communication network, said infrastructure comprising a set of resources (R1, R2, R3) made available by a plurality of entities (ent1, Ent2, Ent 3, Ent4), said method comprising: - obtaining a request to instantiate the service, - determining one of the plurality of entities able to contribute to performing the service, - transmitting, to a device for orchestrating the resources of the determined entity, a first request to deploy a resource in the data infrastructure, - receiving, from the orchestration device (ORCH) of the one of the plurality of entities, an agreement message comprising an identification of the resource (R1, R2, R3) to be deployed in the data infrastructure (Inf).

Description

[0001] DESCRIPTION

[0002] Title of the invention: Method, device and system for dynamically developing a data infrastructure

[0003] 1. Technical field

[0004] The invention is implemented in a data infrastructure, this infrastructure possibly being instantiated by a plurality of actors involved in the provision of a service to a client. The invention aims more specifically at ensuring that a resource of the data infrastructure contributing to the provision of the service is certified and generated automatically in accordance with a set of requirements specific to the data infrastructure and the service provided.

[0005] 2. State of the art

[0006] Data infrastructures are known and make it possible, in particular, to provide a service to a client by relying on the contribution of a plurality of actors pooling resources. The provision of the service requires the actors to make available data useful for the provision of services. Each actor decides which data they wish to share and can ensure the ownership of this data, in particular to prevent its misappropriation, reuse, deletion or modification without authorization. The data infrastructure is therefore instantiated in the form of a network between the actors and the actors allow access, storage, exchange and use of data in accordance with predefined rules specific to the data infrastructure.

[0007] Thus, the provision of services, relating to industrial, tertiary, medical or Internet of Things applications, increasingly relies on the provision of data and resources by separate or diverse actors. Thus, data and application providers, security entities, and communication network operators make their own data available to develop the service required by a customer or by themselves.

[0008] In order to specify a data exchange framework, partners have initiated an IDSA (International Data Spaces Association) forum which defines an architecture and mechanisms for data exchange between separate entities. This architecture, here called data infrastructure or virtual data space, is composed of resources also called connectors allowing the interconnection of the different data spaces maintained by the different actors contributing to the data infrastructure. The connectors, also called resources, can be quite diverse depending on the service offered and include parameters relating to network links, information relating to cloud environments, data types as well as software.Thus, when a service must be instantiated in the data infrastructure, it is necessary to identify the actors who contribute to this service as well as the resources that each actor will share with the other actors in order to effectively implement the service in accordance with the needs specific to the service, for example required by the client benefiting from the service. The pooling of resources assumes that these are guaranteed and certified and on the other hand, knowing that the provision of a service requires increasingly short deadlines, particularly for the implementation of services, in particular in response to events (internet of things, cybersecurity), it is necessary to be able to deploy, certify, activate and pool resources in increasingly short deadlines.However, techniques based in particular on certification by a third-party certification authority or the dynamic creation of data infrastructure by the a priori generation of resources, independently of the needs of a service, are not adapted to these new needs or these new challenges.

[0009] The present invention aims to provide improvements over the state of the art.

[0010] 3. Statement of the invention

[0011] The invention improves the situation using a method for certifying a resource contributing to a communication service capable of being instantiated in a data infrastructure, the method being implemented in an evaluation entity deployed in the infrastructure, said evaluation entity being associated with at least one parameter of the resource, the method comprising a reception from the resource of a request for certification of the at least one parameter of the resource contributing to the service to be instantiated, a comparison of the at least one parameter included in the received request with at least one value required for the implementation of the service in the data infrastructure, a transmission to the resource of certification data of the resource in the data infrastructure for the service to be instantiated in the case where the at least one parameter is equivalent to the required value.

[0012] The method is new and inventive since it allows, upstream of a service to be instantiated, to have a resource certified, and more particularly a parameter of a resource, the parameter being defined according to the constraints of the service to be instantiated. This method thus allows an actor involved in the provision of the service to be able to have the resources that it makes available to the service certified automatically and more quickly than by using a third-party entity as is the case in the prior art. The method being implemented in an evaluation entity deployed in the data infrastructure, it is possible for each actor to have parameters of the resource, and therefore the resource, certified by the evaluation entity prior to the implementation of the service, for example upon generation of the resource.Thus, through this certification, it is ensured that the resource is compatible with the data infrastructure to implement the required service. Knowing that the parameters of a resource can be very diverse, the method provides that an evaluation entity is associated with one or more parameters of the resource, which leads to a resource being able to be certified by a plurality of evaluation entities of the infrastructure, depending on the parameters to be certified. The method also allows dynamic certification of resources since a modification of values ​​required for a given service may impact the certification of certain resources and therefore the possibility of actually being able to use these resources for a service in the data infrastructure.A single resource may also potentially contribute to the provision of several distinct services but ultimately be certified for only some of these services depending on the constraints associated with the services in question. If a new service must be instantiated, resource certifications for the implementation of other services may be used, but only if the values ​​required for this new service match the values ​​of the other services and the resource certification is still valid.

[0013] According to one aspect of the invention, in the certification method, the certification data corresponds to the at least one parameter signed by a certificate using a private encryption key of the validation entity or to a private encryption key of the validation entity.

[0014] In order to guarantee that the resource involved in the service to be instantiated has been certified with certainty and in a valid manner, the certification data can advantageously be signed using a private key of the validation entity, guaranteeing a valid certification for all the actors involved in the provision of the service and for the client receiving the instantiated service. According to an alternative, the certification data comprises the private key of the validation entity. According to another aspect of the invention, in the certification method, F at least one parameter comprises one or more of the following parameters:

[0015] - a parameter relating to the location of the resource,

[0016] - a parameter relating to the data processing capabilities of the resource,

[0017] - a parameter relating to the transfer capabilities of a link from the resource to the data infrastructure,

[0018] - a parameter relating to a protocol and / or a protocol version supported by the resource,

[0019] - a parameter of compatibility of the resource with another resource of the infrastructure,

[0020] - a security parameter supported by the resource

[0021] - a parameter relating to a software function of the resource.

[0022] The certification process advantageously makes it possible to qualify a resource according to a service to be instantiated and therefore to verify that a set of quality of service, security and capacity parameters are indeed supported by the resource potentially made available by an actor involved in the data infrastructure. More specifically, it may be a network link determined by a transfer capacity or even a protocol or protocol version of the resource. According to another example, it may be a virtualized network function or a container implemented in a device. This virtualized network function and / or this container is generically identified as a software function.

[0023] According to another aspect of the invention, in the certification method, the certification data further comprises a validity period of the certification of the resource.

[0024] The certification may advantageously be valid for a period set by the validation entity, for example in accordance with a requirement from a data infrastructure administration entity. This period of validity ensures that the resource regularly requests new certification, thus preventing a resource whose certain parameters have been modified from being used for the same or an equivalent service in the data infrastructure.

[0025] According to another aspect of the invention, in the certification method, the evaluation entity is at least one of the following entities:

[0026] - a network slice selection entity of the infrastructure,

[0027] - an entity for analyzing infrastructure network data

[0028] - an entity for the display of infrastructure functions, - an entity for the management or control of the infrastructure,

[0029] - an infrastructure administration entity.

[0030] Knowing that the certification of the parameters is ensured by a function associated with the respective parameters, the certification of a resource capable of contributing to a service to be instantiated in the infrastructure can be advantageously ensured by functions such as the NSSF (Network Slice Selection Function), NWDAF (Network Data Analytics Function), NEF (Network Exposure Function) functions deployed in the data infrastructure and contributing to the routing and processing of the data of the service. The certification can also be advantageously executed by a management device of the PCF (Policy and Control Function) or BGF (Border Gateway Function) type or an administration device such as an OSS / BSS (Operational / Business Support System), NMS (Network Management System) or EMS (Element Management System) equipment.

[0031] The various aspects of the certification process just described can be implemented independently of each other or in combination with each other.

[0032] The invention also relates to a method for validating at least one parameter of a resource contributing to a communication service to be instantiated in a data architecture, the method being implemented in the resource, capable of communicating with an evaluation entity, the method comprising a determination of at least one parameter corresponding to a prescription of the service obtained from a service management entity of the infrastructure, a transmission to the validation entity of a certification request for the at least one parameter of the resource, a reception from the evaluation entity of certification data of the resource in the data infrastructure for the service to be instantiated in the case where the at least one parameter is equivalent to a value required for the implementation of the service in the data infrastructure.

[0033] According to one aspect of the invention, the validation method further comprises sending to a compliance entity of the infrastructure resources a validation message for the resource comprising the received certification data.

[0034] The validation method advantageously comprises the transmission of a resource validation message to a resource compliance entity allowing the latter to be able to validate the contribution of the resource to the service in accordance with availability, quality of service and security criteria required for said service.

[0035] According to one aspect of the invention, the validation method further comprises, prior to the transmission step, obtaining an identifier of the validation entity associated with the at least one parameter to be validated.

[0036] According to one aspect of the invention, the validation method further comprises the aggregation of certification data received from a plurality of validation entities when at least two validation entities are requested to validate at least two parameters corresponding to the prescription of the service.

[0037] The validation method is based on the certification of a parameter by a validation entity of the infrastructure associated with this parameter. For the validation of a resource used to instantiate a service, the solicitation of several validation entities corresponding to the different parameters is possible. The method can advantageously comprise an aggregation of the certification data received, corresponding to a resource, for example to inform a compliance entity subsequently using a single message.

[0038] The various aspects of the certification process just described can be implemented independently of each other or in combination with each other.

[0039] The invention also relates to a device for certifying a resource contributing to a communication service capable of being instantiated in a data infrastructure, said device being associated with at least one parameter of the resource and implemented in the infrastructure, said device comprising a receiver, capable of receiving from the resource, a request for certification of the at least one parameter of the resource contributing to the service to be instantiated, a comparator, capable of comparing the at least one parameter included in the received request with at least one value required for the implementation of the service in the data infrastructure, a transmitter, capable of transmitting to the resource a data item for certification of the resource in the data infrastructure for the service to be instantiated in the case where the at least one parameter is equivalent to the required value.

[0040] This device is capable of implementing in all its embodiments the certification process which has just been described.The invention also relates to a device for validating at least one parameter of a resource contributing to a communication service to be instantiated in a data architecture, said device being capable of communicating with an evaluation entity and comprising a determination module, capable of determining at least one parameter corresponding to a prescription of the service obtained from an entity for managing the services of the infrastructure, a transmitter, capable of transmitting to the validation entity a request for certification of F at least one parameter of the resource, a receiver, capable of receiving from the evaluation entity certification data of the resource in the data infrastructure for the service to be instantiated in the case where F at least one parameter is equivalent to a value required for the implementation of the service in the data infrastructure.

[0041] This validation device is capable of implementing in all its embodiments the validation method which has been described above.

[0042] The invention also relates to a system for certifying a resource contributing to a communication service capable of being instantiated in a data infrastructure, said system comprising:

[0043] - a certification system described above,

[0044] - a validation device also described above.

[0045] The invention further improves the situation by means of a method for dynamically developing a data infrastructure in a communication network, said infrastructure comprising a set of resources made available by a plurality of entities, said method being implemented in a service management device capable of determining a set of resources for the implementation of a data service, and comprising

[0046] - obtaining a request for instantiation of said service, said request comprising a parameter relating to a user of the service and a parameter relating to the geographical area in which said service must be instantiated,

[0047] - a determination of an entity of the plurality, capable of contributing to the implementation of said service, based on the parameters obtained in the instantiation request,

[0048] - sending to a resource orchestration device of said determined entity a first request for deployment of a resource in the data infrastructure, said first request comprising the parameters obtained and a criterion of conformity of the resource with the data infrastructure, - receiving from the orchestration device of said entity the plurality of an agreement message comprising an identification of the resource to be deployed in the data infrastructure.

[0049] The process for dynamically developing a data infrastructure, also called a virtual data space, is new and inventive since it allows a multi-actor architecture to be dynamically deployed or updated in order to deploy a service in accordance with a set of rules specific to the virtual data space. The dynamic development process corresponds to a creation, a modification, or a change in the configuration of a data infrastructure. The entities contributing to this space by making resources available can thus dynamically add resources to the space according to the services that the space must support. Thus, a service provider can communicate a certain number of service criteria to a service management device of the virtual data space, and the latter can translate these criteria into resources and request these resources from one or more entities.The method thus makes it possible, on the one hand, to deploy only the resources required for the services actually required, thus avoiding excessive consumption of resources within the data space, and on the other hand to ensure that the services actually used for the provision of the service are dynamically compatible with specifications comprising conformity criteria for the virtual data space, in connection with the required service. It is for example possible, thanks to this method, for the resources to comply with routing and security conditions specific to the data space and quality of service parameters specific to the service to be deployed.Thus, a priori and not only a posteriori as is most often the case in prior art techniques, a client or user will be able to obtain a guarantee of compliance with constraints or criteria while limiting the number and type of resources activated for the service.

[0050] According to one aspect of the invention, in the dynamic elaboration method, the parameter relating to a user comprises a parameter indicating the user's consent for an analysis and / or a collection of the data associated with him.

[0051] In a context where more and more user data is processed and analyzed, the method advantageously makes it possible to indicate whether or not a user authorizes the collection and / or analysis of data concerning him, the consent parameter being able to correspond for example to a license for use of the data, according to an alternative for a given period. According to one aspect of the invention, in the dynamic development method, the first deployment request further comprises a deadline to be respected for the deployment of said resource.

[0052] The method aims to enable resources to be deployed and therefore used only according to required services. It is also advantageous to be able to ensure that the resource requested for a given service is actually available at the time the service is activated or used. The management device can therefore advantageously add to its request a deadline to be respected by the requested entity to make the resource available.

[0053] According to one aspect of the invention, in the dynamic development method, the first deployment request further comprises an address of an evaluation entity capable of certifying said resource.

[0054] The advantage of certifying a resource is that it can guarantee that it meets the constraints of a given service. Furthermore, certification by a third-party entity is generally lengthy and does not correspond to the dynamism required for the dynamic development process. Information on an evaluation entity makes it possible to reconcile the speed of certification with the interest in ensuring that a resource made available is properly certified.

[0055] According to one aspect of the invention, in the dynamic development method, the agreement message further comprises certification data for the resource in the data infrastructure associated with the service to be implemented.

[0056] Advantageously, the agreement message received from the orchestration device includes certification data, such as for example a private key and / or a certificate associated with the validation entity having certified the resource made available by the entity. This validation data provides a guarantee to the resource management entity but also possibly to the client that the service is indeed implemented by resources whose operation or content are indeed guaranteed by a validation entity.

[0057] According to one aspect of the invention, in the dynamic development method, the resource comprises at least one of the elements among:

[0058] - data used for the implementation of the service,

[0059] - a routing capacity,

[0060] - a capacity for processing or isolating data relating to the service, - a protocol or protocol version used for the transport of data relating to the service,

[0061] - a data center identifier,

[0062] - a software function capable of ensuring processing of service data.

[0063] - a resource data processing capacity,

[0064] - an identifier or description of a software function, such as a container and / or a virtualized network function implemented in the resource.

[0065] A resource, depending on the method, can correspond to any type of element involved in a service. It can thus be data, for example to enrich a service or corresponding to content required for the service. H can also be a routing capacity such as a network link allowing the routing of the service data. It can be an identifier of a data center, for example of the cloud type, allowing the storage of data. It can also be a software function ensuring for example processing of the service data (optimization, enrichment, filtering, etc.). H can be a protocol or a protocol version used for routing transfer and / or control data relating to the service or even an overall processing capacity of the resource.

[0066] It can also be a combination of these elements.

[0067] According to one aspect of the invention, the dynamic development method comprises, alternatively to receiving an agreement message, receiving a disagreement message, said message comprising data indicating a reason relating to the parameters and / or the conformity criterion included in the deployment request.

[0068] Instead of the agreement message, the requested entity may send a disagreement or refusal message to the service management device, including a cause indicating why the orchestration device cannot propose a resource, this cause being more specifically linked to the conformity criterion linked to the virtual data space and / or to the parameters required for the service. This information can thus be taken into account so that the management device modifies the request, for example in agreement with the client, or revokes the entity, or even requests another entity.

[0069] According to one aspect of the invention, the dynamic development method further comprises sending to the orchestration device of the entity of the plurality of a second request for deployment of a resource in the event of failure of the first request, said request comprising the parameters obtained and a criterion of conformity to the data infrastructure, - incrementing a counter counting the number of deployment requests transmitted to the orchestration device.

[0070] According to one aspect of the invention, the dynamic development method further comprises, in the event of no response from the orchestration device initially requested or if the counter has reached a maximum value,

[0071] - sending to an orchestration device of another entity of the plurality of a new request for deployment of a resource, said request comprising the parameters obtained and a criterion of conformity to the data infrastructure,

[0072] - an update of a resource register in the event of receipt from the orchestration device of the other entity of an agreement message including an identification of the resource deployed in the data infrastructure.

[0073] In order to satisfy the need to deploy the required service, the service management device can advantageously request another orchestration device to obtain provision of a resource required for the service in accordance with the required conformity and quality criteria. This arrangement makes it possible to improve the availability of a service following a number of failed requests from a first entity or in the event of a non-response from a first requested entity. Recording in a resource register makes it possible to directly request this orchestrator in the event of a need for a resource for an equivalent service.

[0074] The various aspects of the dynamic elaboration process just described can be implemented independently of each other or in combination with each other.

[0075] The invention also relates to a method for making a resource available in a data infrastructure of a communication network for the instantiation of a service, said infrastructure comprising a set of resources made available by a plurality of entities, said method being implemented in a resource orchestration device capable of determining the compatibility of the resource with the data infrastructure, and comprising:

[0076] - a reception from a service management device of a request for deployment of a resource in the data infrastructure, said request comprising a parameter relating to the user of the service and a parameter relating to the geographical area in which said service must be deployed and further comprising a criterion of conformity of the resource with the data infrastructure, - a determination of the resource according to the parameters and the conformity criterion received and values ​​relating to the service and the data infrastructure,

[0077] - a transmission to the service management device of an agreement message including an identification of the resource determined to be deployed in the data infrastructure.

[0078] The invention also relates to a device for dynamically developing a data infrastructure in a communication network, said infrastructure comprising a set of resources made available by a plurality of entities, said device being capable of determining a set of resources for the implementation of a data service, and comprising:

[0079] - a obtaining module, capable of obtaining a request for instantiation of said service, said request comprising a parameter relating to a user of the service and a parameter relating to the geographical area in which said service must be instantiated,

[0080] - a determination module, capable of determining an entity of the plurality, capable of contributing to the implementation of said service, based on the parameters obtained in the instantiation request,

[0081] - a transmitter, capable of sending to a resource orchestration device of said determined entity a first request for deployment of a resource in the data infrastructure, said first request comprising the parameters obtained and a criterion of conformity of the resource with the data infrastructure,

[0082] - a receiver, capable of receiving from the orchestration device of said plurality of entities an agreement message comprising an identification of the resource to be deployed in the data infrastructure.

[0083] This dynamic development device is capable of implementing in all its embodiments the dynamic development method which has just been described.

[0084] The invention also relates to a device for making a resource available in a data infrastructure of a communication network for the instantiation of a service, said infrastructure comprising a set of resources made available by a plurality of entities, said device being capable of determining the compatibility of the resource with the data infrastructure, and comprising:

[0085] - a receiver, capable of receiving from a service management device a request for deployment of a resource in the data infrastructure, said request comprising a parameter relating to the user of the service and a parameter relating to the geographical area in which said service must be deployed and further comprising a criterion of conformity of the resource with the data infrastructure,

[0086] - a determination module, capable of determining the resource based on the parameters and the conformity criterion received and values ​​relating to the service and the data infrastructure,

[0087] - a transmitter, capable of transmitting to the service management device an agreement message including an identification of the determined resource, to be deployed in the data infrastructure.

[0088] The invention also relates to computer programs comprising instructions for implementing the steps of the respective validation certification, dynamic development and provision methods which have just been described, when these programs are both executed by a processor and a recording medium readable respectively by a certification device, a validation device, a dynamic development device and a provision device on which the computer programs are recorded.

[0089] The above-mentioned programs may use any programming language, and may be in the form of source code, object code, or intermediate code between source code and object code, such as in a partially compiled form, or in any other desirable form.

[0090] The above-mentioned information carriers may be any entity or device capable of storing the program. For example, a carrier may include a storage medium, such as a ROM, for example a CD ROM or a microelectronic circuit ROM, or a magnetic recording medium.

[0091] Such a storage medium may, for example, be a hard disk, a flash memory, etc. On the other hand, an information carrier may be a transmissible medium such as an electrical or optical signal, which may be conveyed via an electrical or optical cable, by radio or by other means. A program according to the invention may in particular be downloaded from a network such as the Internet.

[0092] Alternatively, an information carrier may be an integrated circuit in which a program is incorporated, the circuit being adapted to perform or to be used in performing the methods in question.

[0093] 4. Brief description of the drawings

[0094] Other characteristics and advantages of the invention will appear more clearly on reading the following description of particular embodiments, given as simple illustrative and non-limiting examples, and the appended drawings, among which: [Fig 1] presents a data infrastructure made available by a set of actors according to one aspect of the invention.

[0095] [Fig 2] shows a method of certifying a resource in a data infrastructure according to one embodiment of the invention.

[0096] [Fig 3] shows a method for dynamically developing a data infrastructure, according to another embodiment of the invention.

[0097] [Fig 4] shows a method for dynamically developing a data infrastructure, according to another embodiment of the invention.

[0098] [Fig 5] presents a method of certifying a resource contributing to a communication service capable of being instantiated in a data infrastructure according to another embodiment.

[0099] [Fig 6] presents a device for certifying a resource contributing to a communication service capable of being instantiated in a data infrastructure according to another embodiment.

[0100] [Fig 7] presents a device for validating at least one parameter of a resource contributing to a communication service to be instantiated in a data architecture according to another embodiment.

[0101] [Fig 8] shows a device for dynamically developing a data infrastructure in a communication network according to another embodiment.

[0102] [Fig 9] presents a device for making a resource available in a data infrastructure of a communication network for the instantiation of a service according to another embodiment.

[0103] 5. Description of embodiments

[0104] In the remainder of the description, embodiments of the invention are presented in a communication network. This network can be implemented to route communication data to fixed or mobile terminals and the network can be implemented from physical equipment and / or virtualized functions. This network can be used for routing and / or processing residential or business customer data.

[0105] We first refer to [Fig 1] which presents a data infrastructure made available by a set of actors according to one aspect of the invention. The data infrastructure Inf is developed in a communication network not shown in [Fig 1]. The data infrastructure Inf can indifferently be called virtual data space. This infrastructure comprises resources RI, R2, ..., R8 made available by the entities Entl, Ent2, Ent3 and Ent4. As examples the resources RI, R2, ..R8 are indifferently storage spaces, for example in centralized or distributed clouds (for example of the MEC (Mobile Edge Computing) type), computing resources for performing processing to be applied to certain data, transmission capacities made available by an entity to route data from one resource to another resource or from a transmitter (client, terminal, server) to a resource or a receiver (server, client terminal). A resource according to another example may also comprise data, for example to enrich a data flow or to associate data with a user according to another example. A resource may also comprise a hardware resource and / or a software resource, for example a virtualized function, of equipment assigned to a data infrastructure, for example for a predefined duration.An entity can be a company, a customer, a communications network operator, a service provider performing, for example, a specific task (security, audit, etc.), a data processing provider, a content provider or even a data storage space manager.

[0106] A communication network may comprise a plurality of data infrastructures developed from distinct resources for each data infrastructure or from resources shared between several data infrastructures. An entity may contribute to one or more data infrastructures and may make available one or more resources, themselves contributing to a single data infrastructure or to several infrastructures. Thus in [Fig 1], the entity Entl makes available the resources RI, R2, R3, the entity Ent2 makes available the resources R4 and R5, the entity Ent3 makes available the resources R6 and R7 and the entity Ent4 makes available to the data infrastructure the resource R8. The entities may furthermore make available to the infrastructure Inf one or more resources for a limited time which may or may not correspond to the time during which the data infrastructure Inf is instantiated.The data infrastructure Inf can also be modified or updated by adding, removing, modifying a resource RI, R2, ..., R8 of the infrastructure for example to meet a requirement of a user or a service or to satisfy a recommendation, for example of a regulatory type.

[0107] In [Fig 1], the data infrastructure Inf is deployed for a time t to allow the terminal Terml (which can be mobile) to download data to the server Srvl, as well as to allow the terminal Term2 (which can be fixed) to obtain data from the server Srvl and to route data to the company Indl. These different services for the terminals Terml and Term2, for the server Srvl and for the company Indl do not necessarily require all the resources RI, R2,..., R8 of the data infrastructure Inf. Thus, a resource RI, R2,.. R8 of the data infrastructure Inf can be specifically made available for the company Indl. For example, the resource R3 of the entity Entl can be made available to the data infrastructure for the need of a data service of the company Indl.According to one example, a data infrastructure is associated with one or more services and a data infrastructure may comprise one or more data infrastructures. For example, in [Fig 1], the data infrastructure Inf may comprise three data sub-infrastructures Inf2, Inf3, Inf4 not shown in [Fig 1], each of these data infrastructures Inf2, Inf3, Inf4 being respectively associated with a service of the company Indl, the terminal Terml and the terminal Term2. It is thus possible to dynamically develop a data infrastructure associated with one or more services within a communication network. The data infrastructure Inf is developed from virtual resources or physical resources.Virtual resources are probably more suited to highly dynamic data infrastructures in terms of their implementation or removal or even their updating, while physical resources will probably be more suited to more sustainable data infrastructures over time.

[0108] We then refer to [Fig 2] which presents a method for certifying a resource in a data infrastructure according to an embodiment of the invention. The certification of a resource intended to be made available to a data infrastructure makes it possible to ensure that the resource corresponds to the constraints of the data infrastructure and is also suitable for the service instantiated in the data infrastructure.

[0109] In a step 200, a service management device indicates to the various participants who may possibly contribute to a data infrastructure the addresses of the evaluation entities of the communication network, on which the data infrastructure is developed, in charge of certifying the resources prior to their deployment or activation in a data infrastructure. Knowing that an evaluation entity can only certify certain parameters of the resource, it is advantageous to provide a plurality of evaluation entities so that each parameter of the resource to be integrated into a data infrastructure can be globally certified thanks to the certification of the respective evaluation entities.According to one example, an evaluation entity may certify a parameter relating to the identifier of the resource to be deployed while another evaluation entity may certify a location parameter, and another evaluation entity may certify a parameter relating to the storage or routing capacity of the resource. The parameters of a resource to be certified are inherent to the resource according to the role of the resource in the data infrastructure (storage, routing, computing, identity of the owner / manager of the resource, etc.) or more generic, for example for identification parameters, location parameters for example. A single evaluation entity may also certify more than one parameter of a resource. The service management device may advantageously indicate the parameters that the evaluation entity may certify in addition to the address of the evaluation entity.The entity address may be an address in the communication network, such as an IP address, or an identifier, such as a DNS identifier. The entity that receives an address from a virtualization entity is, for example, a function orchestrator. The orchestrators of entities that can contribute to a data infrastructure thus receive the addresses or identifiers of the evaluation entities capable of certifying the resources prior to their use in a data infrastructure.

[0110] Entity orchestrators transmit the information received to the various resources so that they can be certified before being made available in a data infrastructure. This certification can be carried out a priori, for example based on generic services whose characteristics are a priori known, or following the request for implementation of a service in a data infrastructure.

[0111] In a step 201, a resource transmits to an evaluation entity a request for certification of a parameter of the resource contributing to the service to be instantiated. This transmission follows the reception of a request for a service to be instantiated or in anticipation of a service to be instantiated. The resource can thus be deployed more quickly since it will have been certified. The resource can send a request to all the validation entities for which it has received an address or to a particular validation entity depending on the parameter to be certified, the information on the valid validation entity depending on the parameter being able to be obtained from the orchestrator or by using a table associating a validation entity and a parameter of a resource.The resource describes the resource parameters in a self-description schema (SSD) and submits this SSD for certification to one or more evaluation entities depending on the number of parameters to be certified. In the case of certification following a service implementation request, the self-description schema includes in particular parameters contributing to the implementation of the service to be implemented via the data infrastructure to be developed from the resources to be certified.

[0112] In a step 202, the evaluation entity compares the received self-description schema comprising one or more parameters with at least one value required for the implementation of the service in the data infrastructure. For example, if a parameter relates to location, the evaluation entity will compare the location parameter with an expected location area for the resource. If it is a routing capacity, the evaluation entity will compare the routing capacity made available by the resource with an expected bandwidth value for the service. If it is a parameter related to storage capacity or computing capacity, the evaluation entity compares the received parameter or the value of the parameter with a capacity required for the service.The assessment entity can certify the various parameters for which it is responsible in a global manner, based on the comparison of all the parameters evaluated, or it can certify each of the parameters individually. The expected values ​​for a service can be discrete values ​​or intervals or even values ​​with percentages above or below which the parameter is considered valid and therefore positive for the certification of the resource for this parameter.

[0113] In a step 203, in the case where the result of the comparison is positive, that is to say that the parameter or parameters compared by the evaluation entity correspond to the expected values, the evaluation entity transmits to the resource a certification data attesting that the evaluated parameters of the self-description schema are valid for the service required in the data infrastructure. If several evaluation entities evaluate different parameters of the resource, this resource will be certified if the different evaluation entities indicate that the different parameters evaluated by the different evaluation entities correspond to the values ​​respectively expected by the different evaluation entities.

[0114] The proof of certification of one or more parameters of a resource by an evaluation entity may comprise a private key of the evaluation entity or a signature of the parameter or parameters evaluated by a private key, attesting to the certification by an evaluation entity. According to an example, the set of private keys or certificates of the evaluation entities having respectively evaluated the different parameters of the resource are used to prove the certification of the resource for all the parameters evaluated.

[0115] In a step 204, in the case where the resource is actually certified, the resource or a manager of the resource having obtained the information of the certification of the resource transmits to the service management device and / or to a resource register information attesting to the conformity of the resource for the service to be implemented in the data infrastructure. This certification is valid for a service in the data infrastructure and cannot be used for another service, unless this other service has characteristics identical to the first service, which can authorize the reuse of the certification information. This conformity information can, according to one example, be transmitted to the service management device.Thus, this device can associate a service with certified resources and can also guarantee that the resources actually used to update a data infrastructure to ensure the provision of a service have been certified beforehand and include parameters compatible with the service to be deployed. According to another example, the information attesting to the conformity of the resource can be transmitted to a manager of the resources of the data infrastructure who is requested by the service management device or by another entity, for example in the event of an audit of the resources.

[0116] In the case where in step 202, the comparison of a parameter with an expected value is not positive and the parameter therefore does not correspond to an expected value to certify the parameter for the service to be implemented, the cause for which the parameter does not correspond to an expected value and the impact on the service are evaluated. Thus, in step 205, the cause of the failure of the certification by the evaluation entity is identified in particular thanks to the information on the failure transmitted by the evaluation entity to the resource. The latter can thus evaluate which parameter of the resource in the self-description schema did not allow certification of the resource.In the case where the parameter cannot be modified, for example if it is a parameter inherent to the resource such as a location parameter of the resource, or a maximum capacity of the resource in terms of storage, calculation or routing for example, the resource is considered as non-compliant for the service to be deployed and information of non-compliance of the resource is transmitted during a step 207 to the service management device and / or to a resource register, not authorizing the use of this resource for the update of the data infrastructure to ensure the implementation of the required service.

[0117] In the case where it is a parameter that can be modified in the self-description schema, for example a number of interfaces available for the service to be instantiated or a bandwidth value that can be modified for the resource, a new self-description schema comprising one or more modified parameters for the same resource can be determined during a step 206 and again submitted for certification to the evaluation entity during a step 201 so that the modified parameters can be compared with expected values ​​for the integration of the resource into the data infrastructure in order to instantiate the service. Several modifications of one or more parameters and therefore several parameter evaluations by an evaluation entity are conceivable before a conformity or non-conformity information (respective steps 204 and 207) is issued.

[0118] In the event of non-compliance or if one or more parameters do not allow certification of the resource by the evaluation entity, another resource of the same entity or of another entity, requested during step 200, contributing to the data infrastructure can be evaluated by the evaluation entity, so as to be able to determine and certify an alternative resource for updating the data infrastructure for the service to be instantiated.

[0119] We then refer to [Fig 3] which presents a method for dynamically developing a data infrastructure, according to another embodiment of the invention.

[0120] This process of dynamically developing a data infrastructure allows you to build or update a data infrastructure to enable the implementation of a data service. Application services, involving a client terminal and / or a data server and / or IOT (Internet Of Things) type applications, require different resources and resource parameters adapted to the different services. Instantiating a new service therefore requires an update of a data infrastructure or even the implementation of a new data infrastructure to ensure appropriate routing of the service data in the communication network in which the data infrastructure, also called virtual data space, is developed.

[0121] In a step 100, a service management device receives a request to instantiate a service. The request includes a parameter relating to a user of the service, corresponding for example to information on the user's consent to share or use data specific to the user, and the request further includes a parameter relating to the geographical area in which said service is to be deployed. According to one example, the geographical area corresponds to GPS data or geographical coordinates. This request is for example issued by a service management device responsible for providing services to a customer base, a telecommunications operator, or an operator of services intended for businesses.

[0122] The request may further include characteristics intrinsic to the service to be implemented, such as characteristics of quality of service, security of the service, or type of service management device, such as the country of affiliation of the device, or confidentiality. The request may further include information on the deadline to be respected for the instantiation of the service, that is to say the deadline by which the service must be instantiated.

[0123] The service management device determines from the received request one or more entities capable of contributing to the implementation of the service via the updating of the data infrastructure. Thus, in step 101, the management device identifies orchestrators of entities capable of providing resources contributing to the data infrastructure, to be modified to satisfy the provision of the required service. The management device thus uses the parameter relating to the user as well as the parameter relating to the geographical area, these parameters being able to limit to entities guaranteeing compliance with the constraints associated with the user and / or constraints of deployment of resources in a given geographical area. Thus, if for example, the geographical area present is France, the management device will request entities having resources in France.The management device thus transmits during this step 101 a request for resources, determined to satisfy the required service, to one (or more) orchestrators of the previously determined entities. The management device can thus use the different parameters associated with the service (security, quality of service, confidentiality, etc.), to determine the resources required for a given service. According to another example, the management device consults or requests another device of the communication network to obtain a list of resources corresponding to the service to be implemented. This correspondence makes it possible to determine the resources to be added or modified in a data infrastructure to guarantee the provision of the service to be instantiated.If resources required for the service, corresponding to the parameters of the request, are already present in the data space, then the management device may refrain from requesting an entity to add such a resource to the virtual data space. The identification of orchestrators to be requested may follow the determination by the service management device of the resources necessary to implement the required service. The orchestrators capable of providing the necessary resources will then be selected according to the resources to be deployed to instantiate the requested service. During a step 102, the orchestrator requested during step 101 identifies resources specific to its entity capable of contributing to the service and therefore potentially adding to the data infrastructure according to the parameters and the conformity criterion received and values ​​relating to the service and the data infrastructure.The newly deployed resources must indeed respect the constraints as received in the deployment request but also constraints relating to the data infrastructure and theoretical values ​​relating to the service. The orchestrator first determines whether the resource is still present in the communication network by requesting, for example, a communication network administration device. In the case where the resource is not present, the orchestrator can deploy or request the deployment of a new resource whose characteristics make it possible to meet the characteristics of the service to be instantiated. In the case where several orchestrators of the same entity or several entities are requested, each orchestrator checks the possible availability of the resources it manages in the data infrastructure of the communication network.Thus, for a VoD (Video On Demand) service, an orchestrator from a telecommunications operator providing routing resources, an orchestrator from a VoD stream storage entity, an orchestrator from a cache network and a billing management orchestrator may, for example, be requested to make their respective resources available. The data infrastructure, capable of supporting VoD data streams, will thus be developed by adding the resources of the different entities involved in providing the VoD service.

[0124] According to a first example, the orchestrator transmits the information received, and in particular the parameters relating to the service to be instantiated, to the various resources so that they can be certified prior to their being made available in a data infrastructure. The orchestrator also transmits an address of an evaluation entity so that the resource, and more precisely the parameters of the resource to be certified, is certified during step 106, prior to its deployment in the communication network with a view to updating the data space. Step 106 corresponds to the certification of a resource as described in [Fig 2] and the corresponding text describing [Fig 2].

[0125] In the case where the resource is actually certified, it transmits during a step 104 certification data, such as for example a private key of the resource, attesting that the resource to be deployed in the data space is actually compliant with the characteristics of the data space for the service to be instantiated. As indicated in [Fig 2], if the resource cannot be certified then non-compliance information is transmitted to the orchestrator and the latter can request another resource belonging to the same entity or to another entity, for example via the orchestrator of the other entity.

[0126] Upon receipt of the certification data, during step 105, the orchestrator transmits to the service management device an agreement message comprising an identification of the resource to be deployed in the data infrastructure, the message comprising, according to one example, an identifier of the resource and the certification data of the resource. When the service management device has obtained the certifications of the various resources required for the service to be instantiated, it can then deploy or transmit information on the resources to a management entity responsible for developing the data infrastructure from the newly certified resources for the instantiation of the required service.For example, these resources may be removed once the service is no longer used or activated so as to reduce the resources included in a data infrastructure to their strict minimum, thereby reducing the management costs and energy consumption of the data infrastructure.

[0127] According to another option, in the case where, for example, the required resource has already been certified for an equivalent service, for example during a service deployment having already given rise to the deployment of the resource in question but that the latter has been removed from the data space following the end of execution of the service, the orchestrator or the resource registry can obtain during a step 103 the certified resource, for example with the certification data, without it being necessary to certify the resource again. According to an alternative, the resource can be stored in a database accessible by the orchestrator or in the resource registry, thus avoiding the need to carry out a new certification. According to one example, the resource registry can be co-located with the service management device allowing optimized management of the resources assigned to a service in a data infrastructure.Since a resource is selected based on a service to be implemented in the data infrastructure, the reuse of a certified resource can be effective if the new service to be instantiated is identical or includes the same parameters or a subset of the parameters as the service for which the resource had previously been certified.

[0128] The certification may have a limited duration and in the event that the deadline has expired, the orchestrator will have to proceed with a certification of the resource in accordance with step 106.

[0129] According to another option, the service to be instantiated does not require certified resources and the orchestrator obtains, during an alternative step to step 106 or step 103 not shown in [Fig 3], resources which are not certified, therefore without certification data for the resource, the obtaining being able to include the solicitation of other orchestrators of entities contributing to the data infrastructure.

[0130] We then refer to [Fig 4] which presents a method for dynamically developing a data infrastructure from certified resources, according to another embodiment of the invention.

[0131] During a step E1, a client requests a service provider SP1 for a service or access to a new service. According to one example, this client, residential or professional, transmits in its request a user parameter (client) relating to a quality of service required for this service, this quality being able to be formulated for example in commercial terms with one of the following terms: standard, silver, gold, these terms being classified according to the expected level of quality from less demanding (standard) to more demanding (gold). The client also inserts one or more parameters relating to the user such as for example a parameter indicating the consent of the user or client for an analysis of the data or a collection of data concerning him in relation to the requested service to be instantiated in a virtual data network. The client also indicates according to one example the geographical area in which the service must be instantiated.This information is optional because in an alternative, the service provider can determine the geographic area from the location of the customer transmitting the request.

[0132] In a step E2, the service provider SP1, following receipt of the request, transmits to a service management device GEST a request for instantiation of the service requested by the client in a data infrastructure, the request comprising the parameters relating to the user of the service as well as a parameter relating to the geographical area in which the service must be instantiated. This request can be transmitted to the service provider via an entity of the OSS (Operation Support System) type. The parameter relating to the geographical area can comprise GPS data or an indication of an area in the data infrastructure, for example in connection with the location of equipment in the data infrastructure. In a step E3, the service management device GEST determines the resources required for the implementation of the requested service, in accordance with the parameters included in the received request.According to one example, for a service providing access to a video telephony service via access to a mobile network, the device determines access resources in a 5G mobile network, a resource corresponding to a server for connecting a video telephony service, a resource corresponding to transmission capacities between the client and the mobile network and between the mobile network and the server. According to an alternative, a resource may indifferently comprise data used for the implementation of the service such as quality of service or billing data, a routing capacity for service data such as access to a fixed or mobile network or a routing link between two devices, an identifier of a data center such as an identifier of a server in a cloud environment, a software function capable of ensuring processing of service data such as an application or a computer program.Furthermore, if the client has given consent for the collection of data relating to the service, the determined resources must allow this collection. In another example, the service management device does not itself determine the resources and requests the various orchestrators to determine the resources necessary for the deployment of the service, information on the service being transmitted by the service management device during a step described below. Step E3 is therefore an optional step in the implementation of the dynamic development method of the data infrastructure.

[0133] In a step E4, the service management device GEST determines whether such resources compatible with the service to be instantiated are present in a database of certified resources. It is considered that the transmission capacities are present in the database and can therefore be used without requiring the solicitation of entities pooling resources in the data infrastructure. It therefore appears that resources must be deployed for the update of the data infrastructure making it possible to instantiate the service required by the client during step E1. According to one example, the service management device can solicit another resource management device, for example of virtualized resources, to determine the resources required for the service to be instantiated.In a step E5, the GEST service management device identifies one or more entities that can make available the missing certified resources for the implementation of the service and, based on these entities, identifies, in this same step E5, the orchestrators of these entities to be requested to deploy the certified resources. The information on the entities, the resources managed by these entities and the orchestrators associated with these entities are advantageously included in a database maintained by the GEST service management device or by an entity that the service management device can contact.

[0134] In a step E6, the service management device requests an orchestrator ORCH to obtain provision of certified resources associated with the service that F orchestrator manages. The orchestrator can be selected based on the resources identified in step E3 or by default, and in this case, F orchestrator determines whether resources that it manages can contribute to the service identified in the message of step E6. According to the example considered in this embodiment, access resources in a 5G mobile network and a server for connecting a videophone service must be instantiated in the data infrastructure and orchestrators capable of providing these resources are requested in step E6. [Fig 4] only includes a single orchestrator to simplify reading of the figure, but a plurality of orchestrators can be requested in step E6.The request for deployment of a resource in the data infrastructure transmitted during step E6 comprises the parameters obtained in step E2, namely the parameter relating to a user or client of the service and a parameter relating to the geographical area in which the service must be instantiated. According to one example, the deployment request may advantageously comprise a deadline to be respected for the provision of the resource and according to another example, the request may also comprise an indication on the necessity for the resource made available to be certified or not. According to an alternative, if the resource must be certified, an identifier or an address of a validation entity capable of certifying the resource(s) may be attached to the deployment request. The deployment request further comprises a criterion of conformity of the resource to be deployed with the data infrastructure.This conformity criterion may include, in particular, an indication of the need to deploy a certified resource, and / or an indication of a quality of service or security parameter specific to the data infrastructure in which the resource is to be instantiated. The resource to be deployed must therefore ensure that the level of security and / or quality of service and / or reliability of the data infrastructure is guaranteed after deployment of the resource.

[0135] The following steps allowing the deployment of certified resources in a data infrastructure for the provision of a service are described in [Fig 5]. During a step E7, the orchestrator ORCH having determined the resources RI and R2 that can potentially be compatible with the required service and the data infrastructure, transmits to these resources RI and R2 a request for creation of a description of these resources, this creation request comprising the parameters relating to the service, as present in the message of step E2 as well as the conformity criterion present in the deployment request received during step E6. According to this example, the resource RI corresponds to a resource for accessing a 5G mobile network and the resource R2 corresponds to a connection server for a videophone service.If, for example, the conformity criterion includes a need for certification of the resource, the request to create a description of the required resource may include an address or an identifier of a validation entity of the resource. This address or identifier may, as an alternative, be contained in a database accessible by the resource in the case where certification is required. In this example, it is considered that the resource, and more precisely its description, must be certified by a validation entity, and the request to create a resource description includes an address of a validation entity, in this example specific to each resource. Thus, the address of the VALID1 entity is transmitted to the RI resource and the address of the VALID2 entity is transmitted to the R2 resource.Depending on the type of resource, the validation entity VALID1 (respectively VALID2) can be an entity of a network of a fixed or mobile operator such as the Network Slice Selection Function entity for selecting the infrastructure network slice, a Network Data Analytics Function entity for analyzing the infrastructure network data, a Network Exposure Function entity for exposing infrastructure functions or even a gateway, for example of the UPF type of mobile network.

[0136] During a step E8, corresponding to the start of a CERTIF phase of resource certification, the RI resource (respectively R2) determines at least one parameter corresponding to a prescription of the service, in accordance with the parameters of the service obtained and the conformity criterion also during step E7. During a step E9, the RI resource (respectively R2) transmits to the validation entity VALID1 a request for certification of the RI resource comprising a description of the RI resource. This description comprises the parameter(s) determined during step E8 and therefore correspond to the service to be instantiated and to the data infrastructure.According to one example, the description of the resource may thus include one or more of the following parameters as well as possibly a generic parameter in addition to all the parameters below (network location such as an IP address, a cell or fixed termination identifier, a geographic location (GPS, zip code):.

[0137] - a parameter relating to the location of the RI resource (respectively R2),

[0138] - a parameter relating to the data processing capabilities of the RI resource (respectively R2),

[0139] - a parameter relating to the transfer capacities of a link from the RI resource (respectively R2) to the data infrastructure,

[0140] - a parameter relating to a protocol and / or a protocol version supported by the RI resource (respectively R2),

[0141] - a parameter of compatibility of the resource with another resource, for example the resource R2 (respectively RI), of the infrastructure,

[0142] - a security parameter supported by the RI resource (respectively R2)

[0143] - an identifier or description of a software function, such as a container and / or a virtualized network function implemented in the RI resource (respectively R2). The certification request may further include a service identifier as well as a data infrastructure identifier in the case where the validation entity VALID 1 (respectively VALID2) is not an entity specific to the service and / or the data infrastructure.

[0144] According to an optional step not shown in [Fig 4], the RI resource (respectively R2) has the parameter description checked by the ORCH orchestrator before having the description certified by the validation entity, therefore before step E9, so as to ensure that the determined parameters correspond to the service to be instantiated in the data infrastructure.

[0145] In a step E10, the validation entity VALID1 (respectively VALID2) compares the parameters present in the description in the certification request received from the resource RI (respectively R2) with at least one value required for the implementation of the service in the data infrastructure. Depending on the parameters, a margin of error or acceptability is possible for the parameters. In the favorable case where the parameters of the resource description correspond to the theoretical values ​​used for the comparison of step E10, then the resource can be certified by the validation entity VALID1 (respectively VALID2). According to an example, it is considered that the resource RI corresponding to a mobile network access resource has been validated by the validation entity VALID1 corresponding in this example to a mobile network gateway of the UPF (User Plane Function) type.Fors step El i, the entity VALID1 sends to the resource RI a certification data of the resource in the data infrastructure for the service to be instantiated. This certification data includes in this alternative a private key of the entity VALID 1 attesting to the certification of the parameters of the resource RI by the entity VALID 1. According to another example, this certification data corresponds to F at least one parameter signed by a certificate using a private key of the validation entity VALID 1.

[0146] According to this example, it is considered that the resource R2 is not certified by the entity VALID2 because one or more parameters of the description do not correspond to the expected values ​​for the service to be instantiated in the data infrastructure. During a step E12, the entity VALID2 transmits a message to the resource R2 indicating that the resource R2 is not certified as well as possibly the criterion and / or the non-conformity criterion that led to the non-certification. According to an alternative, the resource R2 can consider that it is not certified if it does not receive a response to its certification request.

[0147] During the respective steps E13 and E14, the resources RI and R2 inform the ORCH orchestrator of their certification or non-certification. Thus, the resource RI transmits a message comprising the certification data received from the validation entity VALID 1. The resource R2 transmits to the ORCH orchestrator a message indicating that it has not been certified by the validation entity VALID2 or that it is not compliant. Upon receipt of these messages, the ORCH orchestrator registers the resource RI in a register REG of the resources for which the orchestrator manages the resources. The ORCH orchestrator also records the non-certification of the resource R2 as well as the criterion and / or the non-compliance criterion that led to the non-certification so as not to request this resource if the criterion that was lacking is required for a new service to be instantiated.Alternatively, the RI and R2 resources can themselves transmit the certification or non-certification information received from the VALID 1 and VALID2 validation entities. The ORCH orchestrator can request the REG registry when needed in the future. This REG resource registry is also identified as a data infrastructure resource compliance entity.

[0148] According to one example, during a step E7, the orchestrator ORCH transmits a certification request to a resource R3. This request is consistent with the request described in step E7 and the resource R3 has been identified in a manner corresponding to what was described for the resources RI and R2. Like the resource R2, the resource R3 corresponds to a connection server for the videophone service according to this example. The newly requested resource R3 executes steps E8 and E9 in accordance with the same steps described above and the validation entity VALID2 executes the comparison during step E10 described above. According to an alternative, the validation entity responsible for certifying the resource R3 may be different from the validation entity VALID2.

[0149] The validation entity VALID2 having compared the transmitted parameters of the resource R3 with the parameters required for the service and having determined that the resource R3 via this comparison is compliant with the service and the data infrastructure, transmits during step E13 a certification data of the resource R3 to the orchestrator ORCH. During a step E15, the resource conformity entity REG then receives a message from the orchestration entity ORCH or from the resource R3 attesting to the conformity of the resource R3 for the video telephony service in the data infrastructure.

[0150] In one example, certification data includes certification validation durations. These durations allow the orchestrator ORCH and possibly the conformance entity REG to determine whether a resource's certification is still valid and whether that resource can be used for a new equivalent service in the data infrastructure.

[0151] Instead of steps E7 to E15 or prior to these steps, the orchestration entity ORCH can request the compliance entity REG to obtain certified resources for a service by specifying the parameters of the service so that the compliance entity REG can identify the appropriate resources. Thus, the ORCH entity determines resources that can be deployed, these resources respecting the parameters received in the deployment request but also parameters intrinsic to the data infrastructure and values ​​of the service. The ORCH entity can for example compare the parameters received and the compliance criterion received during step E6 with required values ​​called theoretical for the instantiation of the service in the data infrastructure autonomously or via resource validation entities.These validation entities perform this comparison for the benefit of the ORCH entity if no resource corresponding to the parameters and the conformity criterion is present in the REG register or is no longer valid. Steps E7 to E15 are then executed if no resource of the REG conformity entity is suitable or if one of the required resources is not present in the REG conformity entity or is not suitable for the service to be instantiated. The comparison of the received parameters and the conformity criterion with values ​​required for the service to be instantiated is therefore performed autonomously by the ORCH entity or via the VALID 1 and VALID2 entities if no resource making it possible to comply with the required values ​​is present in the REG register. Steps E7 to E15 can therefore, according to one example, correspond to a single Ecomp determination step performed by the ORCH entity.

[0152] The rest of the update of the data infrastructure is described in [Fig 4]. During a step E16, the orchestration entity ORCH transmits to the service management device GEST an agreement message comprising the identifier of the resource that can be deployed in the data infrastructure following steps E7 to E15 or alternatively in step Ecomp. According to the embodiment described in [Fig 4] and [Fig 5], the orchestration entity ORCH has aggregated the certification data received from the requested resources and having transmitted their certification data, namely RI and R3. The orchestration entity ORCH thus transmits the identifiers of the resources RI and R3 corresponding to resources making it possible to instantiate the videophone service in the data infrastructure. According to this embodiment, the resources are certified in accordance with the steps described in [Fig 5].According to another example, the update of the data infrastructure does not require certified resources and the orchestrator ORCH transmits resource identifiers during step E16 by exploiting for example information on these resources in a database, these resources having to correspond to the parameters of the instantiation request and to the criterion of conformity of the resources with the data infrastructure, which according to this example does not correspond to certified resources.

[0153] According to an alternative, the ORCH orchestrator transmits to the GEST service management device one or more resources from among the resources required by the GEST service management device in step E6. In the case where at least one resource is missing for the implementation of the service or one of the transmitted resources is no longer available following information transmitted by the ORCH orchestration entity or following a test of the resource by the GEST service management device, the GEST entity determines during a step E5 a new orchestrator, managed by the same entity as the previous ORCH orchestrator or by a separate entity, capable of providing information on a resource to be deployed in the data infrastructure. According to an example, the GEST service management device requests during a step E17 an orchestrator of an entity different from the first entity requested during step E6 or the same ORCH orchestrator.Several orchestrator requests may occur before the GEST service management device obtains the necessary resources, and possibly the certification data for these resources, to update the data infrastructure. Alternatively, when several deployment requests are transmitted, the GEST service management device initiates a counter when sending the first request and increments this counter when sending a new request. If no required resource is received when the counter reaches a maximum value, a notification message indicating the impossibility of deploying one or more resources is transmitted during step E18, indicating the missing resource(s).If a counter is initialized for a particular entity or even for an orchestrator of the particular entity, the GEST service management device may request another entity or another orchestrator of the same entity when the counter has reached a value predefined by the GEST service management device. In the absence of a counter, this notification message is sent when the GEST service management device does not receive all the required resources from one or more orchestrators following an initial request. If all the resources have been identified by one or more orchestrators, the GEST service management device sends the service provider a notification message indicating that all the resources have been identified, this message including, for example, the certification data.

[0154] During a step E19, the GEST service management device acknowledges the received notification message and, in the case where all the resources have been determined, requests the ORCH orchestrator to effectively deploy the resources, possibly with an effective deployment duration, so that the service at the origin of the update of the data infrastructure can be instantiated.

[0155] During step E20 the orchestrator ORCH deploys the required resources, for example by requesting a configuration device not shown in [Fig 4], in accordance with the parameters received during step E6. Once the deployment is effective, the orchestration entity ORCH informs the service management device GEST during a step E21 which can in turn inform the service provider SP1 during a step E22.

[0156] The data infrastructure has thus been updated with the RI and R3 resources and the service requested by the CLIENT can be satisfied thanks to these new resources in the data infrastructure, the CLIENT being informed by the SP1 service provider of the activation of this service during a step E23.

[0157] It should be noted that the steps in [Fig 5] can be implemented in the absence of an update to the data infrastructure, for example, so that an orchestrator can have an up-to-date list of certified resources corresponding to a service in a data infrastructure.

[0158] We then refer to [Fig 6] which presents a device 300 for certifying a resource contributing to a communication service capable of being instantiated in a data infrastructure according to another embodiment.

[0159] Such a certification device can be implemented by a Network Slice Selection Function entity for selecting a network slice of the infrastructure, a Network Data Analytics Function entity for analyzing network data of the infrastructure, a Network Exposure Function entity for exposing infrastructure functions, an infrastructure management or control entity, an infrastructure administration entity.

[0160] For example, the certification device 300 comprises a processing unit 330, equipped for example with a microprocessor pP, and controlled by a computer program 310, stored in a memory 320 and implementing the certification method according to the invention. Upon initialization, the code instructions of the computer program 310 are for example loaded into a RAM memory, before being executed by the processor of the processing unit 330.

[0161] Such a certification device 300 includes:

[0162] - a receiver 301, capable of receiving from the resource, a request Req for certification of T at least one parameter of the resource contributing to the service to be instantiated,

[0163] - a comparator 303, capable of comparing T at least one parameter included in the received request with at least one value required for the implementation of the service in the data infrastructure, - a transmitter 302, capable of transmitting to the resource a certification data Cert of the resource in the data infrastructure for the service to be instantiated in the case where the at least one parameter is equivalent to the required value.

[0164] We then refer to [Fig 7] which presents a device 400 for validating at least one parameter of a resource contributing to a communication service to be instantiated in a data architecture according to another embodiment.

[0165] Such a validation device may be implemented in a resource, this resource being able to be a software function, physical equipment, a storage space or a manager of this space, a routing link or a manager of this link, a processing and / or computing capacity or a manager of this capacity.

[0166] For example, the validation device 400 comprises a processing unit 430, equipped for example with a microprocessor pP, and controlled by a computer program 410, stored in a memory 420 and implementing the certification method according to the invention. Upon initialization, the code instructions of the computer program 410 are for example loaded into a RAM memory, before being executed by the processor of the processing unit 430.

[0167] Such a validation device 400 comprises:

[0168] - a determination module 401, capable of determining at least one parameter corresponding to a prescription of the service obtained from an infrastructure service management entity,

[0169] - a transmitter 402, capable of transmitting to the validation entity a request Req for certification of at least one parameter of the resource,

[0170] - a receiver 403, capable of receiving from the evaluation entity a certification data Certif of the resource in the data infrastructure for the service to be instantiated in the case where the at least one parameter is equivalent to a value required for the implementation of the service in the data infrastructure.

[0171] Reference is made to [Fig 8] which presents a device for dynamically developing a data infrastructure in a communication network according to another embodiment.

[0172] Such a dynamic processing device 500 may be implemented in a service management device such as a service administration platform of a communication network or a service control server for a client of the communication network. For example, the dynamic processing device 500 comprises a processing unit 530, equipped for example with a microprocessor pP, and controlled by a computer program 510, stored in a memory 520 and implementing the certification method according to the invention. Upon initialization, the code instructions of the computer program 510 are for example loaded into a RAM memory, before being executed by the processor of the processing unit 530.

[0173] Such a dynamic development device 500 comprises:

[0174] - a obtaining module 501, capable of obtaining a request for instantiation of said service, said request comprising a parameter relating to a user of the service and a parameter relating to the geographical area in which said service must be instantiated,

[0175] - a determination module 502, capable of determining an entity of the plurality, capable of contributing to the implementation of said service, according to the parameters obtained in the instantiation request,

[0176] - a transmitter 503, capable of sending to a resource orchestration device of said determined entity a first request for deployment Depl of a resource in the data infrastructure, said first request comprising the parameters obtained and a criterion of conformity of the resource with the data infrastructure,

[0177] - a receiver 504, capable of receiving from the orchestration device of said entity of the plurality of an agreement message Acc comprising an identification of the resource to be deployed in the data infrastructure.

[0178] We then refer to [Fig 9] which presents a device 600 for making a resource available in a data infrastructure of a communication network for the instantiation of a service according to another embodiment.

[0179] Such a provisioning device 600 can be implemented in a resource orchestration device also called an orchestrator in virtualized network architectures.

[0180] For example, the provisioning device 600 comprises a processing unit 630, equipped for example with a microprocessor pP, and controlled by a computer program 610, stored in a memory 620 and implementing the certification method according to the invention. Upon initialization, the code instructions of the computer program 610 are for example loaded into a RAM memory, before being executed by the processor of the processing unit 630.

[0181] Such a dynamic development device 600 comprises: - a receiver 601, capable of receiving from a service management device a request Depl for deployment of a resource in the data infrastructure, said request comprising a parameter relating to the user of the service and a parameter relating to the geographical area in which said service must be deployed and further comprising a criterion of conformity of the resource with the data infrastructure,

[0182] - a determination module 602, capable of determining the resource based on the parameters and the conformity criterion received and on values ​​relating to the service and the data infrastructure,

[0183] - a transmitter 603, capable of transmitting to the service management device an agreement message Acc comprising an identification of the resource to be deployed in the data infrastructure.

Claims

CLAIMS A method for dynamically developing a data infrastructure (Inf) in a communication network, said infrastructure comprising a set of resources (RI, R2, R3) made available by a plurality of entities (entl, Ent2, Ent3, Ent4), said method being implemented in a service management (Gest) device capable of determining a set of resources (RI, R2, R3) for the implementation of a data service, and comprising: - obtaining (E2) a request to instantiate said service, said request including a parameter relating to a user of the service and a parameter relating to the geographical area in which said service is to be instantiated, - a determination (E5) of an entity from the plurality, capable of contributing to the implementation of said service, based on the parameters obtained in the instantiation request, - a transmission (E6) to a resource orchestration device of said determined entity of an initial request to deploy a resource in the data infrastructure, said initial request including the parameters obtained and a criterion for the resource's conformity with the data infrastructure, - a reception (El 6) from the orchestration device (ORCH) of said entity of the plurality of an agreement message including an identification of the resource (RI, R2, R3) to be deployed in the data infrastructure (Inf). Dynamic processing method, according to claim 1, wherein the parameter relating to a user includes a parameter indicating the user's consent for an analysis and / or collection of the data associated with them. Dynamic processing method, according to claim 1 or claim 2, wherein the first deployment request further includes a deadline to be met for the deployment of said resource. Dynamic processing method, according to any one of claims 1 to 3, wherein the first deployment request further includes an address of an evaluation entity capable of certifying said resource.A dynamic processing method according to any one of claims 1 to 4, wherein the agreement message further includes a certification data element for the resource (RI, R2, R3) in the data infrastructure (Inf) associated with the service to be implemented. A dynamic processing method according to any one of claims 1 to 5, wherein the resource (RI, R2, R3) comprises at least one of the following elements: - data used for the implementation of the service, - a delivery capacity, - a capacity to process or isolate data related to the service, - a protocol or a version of a protocol used for transporting data related to the service, - a data center identifier, - a software function capable of processing data from the service. - a data processing capacity for the resource, - an identifier or description of a software function, such as a container and / or a virtualized network function implemented in the resource. A dynamic processing method according to any one of claims 1 to 6, comprising, alternatively to receiving an acceptance message, receiving a disagreement message, said message comprising data indicating a reason relating to the parameters and / or the compliance criterion included in the deployment request. A dynamic processing method according to claim 7, further comprising - the issuance to the orchestration device (ORCH) of the plurality entity of a second request to deploy a resource in case of failure of the first request, said request including the parameters obtained and a criterion of conformity to the data infrastructure, - the incrementing of a counter that counts the number of deployment requests transmitted to the orchestration device. A dynamic processing method, according to claim 8, further comprising, in the event of no response from the initially requested orchestration device or if the counter has reached a maximum value, - the transmission to an orchestration device of another entity of the plurality of a new request for the deployment of a resource, said request including the parameters obtained and a criterion of conformity to the data infrastructure, - Reception from the other entity's orchestration device of an agreement message including an identification of the resource deployed in the data infrastructure. A method for making a resource (RI, R2, R3) available in a data infrastructure (Inf) of a communication network for the instantiation of a service, said infrastructure (Inf) comprising a set of resources (RI, R2, R3) made available by a plurality of entities (Entl, Ent2, Ent3, Ent4), said method being implemented in a resource orchestration device (ORCH) capable of determine the compatibility of the resource (RI, R2, R3) with the data infrastructure (Inf), including: - a reception (E6) from a service management device of a request to deploy a resource in the data infrastructure, said request including a parameter relating to the user of the service and a parameter relating to the geographical area in which said service is to be deployed and further including a criterion of the resource's conformity with the data infrastructure, - a determination (Ecomp, E7 to E15) of the resource based on the parameters and conformity criteria received, and values ​​required for the service and values ​​relating to the service and data infrastructure, - an emission (El 6) to the service management device of an agreement message including an identification of the specified resource to be deployed in the data infrastructure. Device (500) for the dynamic development of a data infrastructure in a communication network, said infrastructure comprising a set of resources made available by a plurality of entities, said device being capable of determining a set of resources for the implementation of a data service, and comprising: - a retrieval module (501) capable of obtaining a request to instantiate said service, said request comprising a parameter relating to a user of the service and a parameter relating to the geographical area in which said service is to be instantiated, - a determination module (502), capable of determining an entity from the plurality, capable of contributing to the implementation of said service, based on the parameters obtained in the instantiation request, - a sender (503), capable of sending to a resource orchestration device of said determined entity a first deployment request (Depl) of a resource in the data infrastructure, said first request including the parameters obtained and a criterion of the resource's conformity with the data infrastructure, - a receiver (504), capable of receiving from the orchestration device of said entity a plurality of an agreement message (Acc) including an identification of the resource to be deployed in the data infrastructure. Device (600) for making a resource available in a data infrastructure of a communication network for the instantiation of a service, said infrastructure comprising a set of resources made available by a plurality of entities, said device being capable of determining the compatibility of the resource with the infrastructure of data, and including: - a receiver (601), capable of receiving from a service management device a deployment request (Depl) of a resource in the data infrastructure, said request comprising a parameter relating to the user of the service and a parameter relating to the geographical area in which said service is to be deployed and further comprising a criterion of the resource's conformity with the data infrastructure, - a determination module (602), capable of determining the resource based on the parameters and conformity criteria received, and values ​​relating to the service and infrastructure, - a transmitter (603) capable of transmitting an agreement message (Acc) to the service management device, including an identification of the resource to be deployed in the data infrastructure. A system for the dynamic development of a data infrastructure in a communication network, said infrastructure comprising a set of resources made available by a plurality of entities, said system comprising: - a dynamic processing device according to claim 11, - a provisioning device, according to claim 12. A computer program comprising instructions for implementing the dynamic processing method according to any one of claims 1 to 9, when the program is executed by a processor. A non-transient, computer-readable recording medium on which is recorded a program comprising instructions for implementing a dynamic processing method according to any one of claims 1 to 9.

Images