Anti-rollback Platform for Software Container Replay Validation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In 5G technology, there is currently no safeguard to prevent unauthorized replay of software containers, which can be captured and replayed to access network services without authorization, leading to potential fraud and unpaid usage.
Innovation Solution
An anti-rollback platform is introduced to create a hyperledger record of each software container, validating it before providing a network slice by comparing its elements to stored records and managing the number of allowed uses, thereby preventing unauthorized replay.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If software containers are allowed to be replayed without validation, then ease of operation is improved, but security and reliability deteriorate due to unauthorized access and fraud
Solution Approach 1:
The system performs preliminary validation of software containers before allowing replay operations. The container manager validates each container against stored validation records in the data store, checking integrity hashes and licensing information in advance, so that unauthorized containers are rejected before execution.
Solution Approach 2:
The system implements a feedback mechanism where the container manager continuously checks container validity against the data store before each replay. The validation process provides feedback on whether a container is authorized, and this feedback loop ensures that only valid containers can be replayed, maintaining security while enabling operation.
2Reliability
If container validation and tracking systems are implemented, then reliability and security are improved, but device complexity increases
Solution Approach 1:
The patent introduces an intermediary data store that acts as a centralized repository for container validation records, integrity hashes, and licensing information. This intermediary layer simplifies the validation process by providing a single source of truth that the container manager can query, reducing the complexity of implementing comprehensive validation logic throughout the system.
3Manufacturing precision
If container validation is performed by comparing elements to stored records, then manufacturing precision is improved, but loss of time increases due to validation overhead
Solution Approach 1:
The system creates and stores validation records, including integrity hashes and configuration snapshots, as copies when containers are initially validated. These copied records are stored in the data store and used for subsequent validation comparisons, allowing rapid verification without requiring complex real-time analysis of the original container components.
Data Source
AI summary
A system for preventing unauthorized replay of a software container is disclosed. The system comprises a container manager configured to receive a software container from a customer and send a software container validation request comprising a software container identity in response. The software container enables delivery of a network slice and comprises a plurality of elements. The system also comprises an anti-rollback platform that is configured to receive the validation request from the container manager, search a data store for the software container identity, compare the elements of the software container to corresponding elements stored in the data store as associated with the software container identity in response to locating the software container identity in the data store, and validate the software container based on the comparison. The container manager provides the network slice to the customer in response to the validation.