5G Function Selection Using OT Security Layer Context
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing 5G network function selection mechanisms in industrial IoT networks fail to consider structural and operational considerations of multilayered models and IEC 62443 security requirements, leading to connection failures, service impacts, and security control failures.
Innovation Solution
A mechanism that associates 5G functions with contextual information mapping to a hierarchical security model, allowing for the selection of functions that satisfy service and security requirements by leveraging network repository functions and enhancing NF selection procedures with contextual information about the multilayer OT network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If 5G network function selection mechanisms are used without considering multilayered model structure and IEC 62443 security requirements, then network connectivity is achieved, but connection failures and security control failures occur
Solution Approach 1:
The patent applies preliminary action by pre-associating 5G network functions with contextual information about multilayered model structures and IEC 62443 security requirements before actual network operations. The network repository function stores these pre-established associations, enabling the selection mechanism to quickly retrieve appropriate functions without complex real-time analysis, thereby improving connection reliability while managing complexity through advance preparation
Solution Approach 2:
The patent introduces a contextual information association mechanism as an intermediary between the 5G network function selection process and the multilayered industrial network structure. This intermediary layer maps network functions to specific layers and security zones according to IEC 62443 standards, enabling reliable function selection without requiring the selection mechanism itself to be overly complex
2Reliability
If 5G functions are deployed without contextual information about multilayered OT networks, then deployment flexibility is maintained, but service requirements and security requirements are not satisfied
Solution Approach 1:
The patent pre-establishes associations between 5G network functions and contextual information including multilayered model layer assignments and IEC 62443 security zone mappings. This preliminary configuration enables the network to automatically satisfy service and security requirements during operation without requiring complex real-time decision-making, thereby improving reliability while keeping deployment manageable
Solution Approach 2:
The contextual information association acts as an intermediary that bridges 5G network functions and industrial network requirements. By pre-mapping functions to layers and security zones, this intermediary enables automatic satisfaction of service and security requirements without requiring the deployment process itself to be overly complex
3Productivity
If standard 5G NF selection procedures are used without contextual information enhancement, then selection process simplicity is maintained, but connection failures and service impacts occur
Solution Approach 1:
The patent enhances standard 5G NF selection procedures by pre-associating contextual information with network functions. This preliminary preparation allows the selection process to remain simple and efficient while automatically producing reliable results, as the contextual mappings are already established and ready for quick retrieval during normal operations
Solution Approach 2:
The contextual information association serves as an intermediary enhancement to standard 5G NF selection procedures. It maintains the simplicity of the original selection process while adding reliability through pre-established mappings between functions and contextual requirements, thereby improving connection stability without sacrificing operational efficiency
Data Source
AI summary
In one embodiment, a device associates available 5G functions stored by a network repository function with contextual information, wherein the contextual information maps each of the available 5G functions with a layer of a hierarchical security model for an industrial network. The device receives a request from a user equipment endpoint to communicate via the industrial network. The device selects a particular user plane function from among the available 5G functions for use by the user equipment endpoint based in part on the layer of the hierarchical security model associated with the particular user plane function. The device causes the user equipment endpoint to communicate via the industrial network using the particular user plane function.