Augmented SCEF Interface for Secure Scalable IoT Communications
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing 3GPP SCEF standards lack a defined product and interface with Application Servers, leading to challenges in deploying end-to-end Internet of Things (IoT) services, particularly in managing and securing communications with diverse IoT devices and applications.
Innovation Solution
The introduction of an Augmented SCEF (A-SCEF) that provides an interface between IoT platforms and the 3GPP Core, offering scalable and secure communication pathways, policy-driven controls, and flexible deployment options, including a Device Gateway (DG) to manage IoT device interactions and network traffic.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If 3GPP SCEF standards are used without augmentation, then standard compliance is maintained, but the ability to interface with Application Servers and manage diverse IoT devices is insufficient
Solution Approach 1:
The SCEF is segmented into a standard SCEF component and an augmented component (A-SCEF or DG). The standard SCEF maintains compliance with 3GPP specifications, while the augmented component provides additional Application Server interface capabilities and device management functions. This segmentation allows the system to gain versatility without compromising standard compliance or overwhelming complexity.
Solution Approach 2:
The Device Gateway (DG) or Augmented SCEF acts as an intermediary between the standard SCEF and Application Servers. It provides the missing interface capabilities by mediating communications between IoT devices and external application servers, enabling diverse IoT device management while maintaining a clear architectural boundary that manages complexity.
2Productivity
If an Augmented SCEF is introduced to provide Application Server interfaces, then IoT service deployment capability is improved, but system complexity increases
Solution Approach 1:
The augmented functionality is segmented as a separate deployable component (A-SCEF or DG) that can be added to the standard SCEF. This allows operators to deploy IoT services with enhanced capability while maintaining the option to use only the standard SCEF for simpler applications, thus improving productivity without mandating increased complexity everywhere.
Solution Approach 2:
The Augmented SCEF is designed to provide multiple functions: it maintains the standard SCEF's device management capabilities while adding Application Server interface functionality. This multi-functionality improves IoT service deployment capability by providing a unified platform that handles both standard and enhanced requirements, reducing the need for separate systems.
3Speed
If external identification tags are mapped to network identifiers in real-time, then communication efficiency is improved, but security verification complexity increases
Solution Approach 1:
Security credential verification is performed as a preliminary action during the device registration and external identifier mapping process. By verifying security credentials upfront when establishing the mapping between external identification tags and network identifiers, the system ensures secure real-time communication without adding verification complexity to each subsequent communication event.
Solution Approach 2:
The A-SCEF/DG acts as an intermediary that manages the mapping between external identification tags and network identifiers while handling security verification. This intermediary absorbs the security verification complexity internally, presenting a simplified real-time mapping interface to application servers while maintaining robust security checks in the background.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Systems and methods are disclosed for an augmented Service Capability Exposure Function (A-SCEF). The A-SCEF may receive upstream or downstream traffic and direct or process that traffic in accordance with policy profiles. The policy profiles may be associated with various entities that may have interrelationships. The policy profiles may allow a network operator to better control multiple entities on the network while simplifying use of the network for the customers, such as those associated with a large number of internet of things (IOT) devices.