Blockchain-Based Network Function Registration for Cross-Operator Trust

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The 5G service-based architecture in mobile networks faces challenges in balancing openness and flexibility with security, privacy, and performance requirements, particularly in cross-operator network function access and authorization scenarios, leading to inefficiencies and security threats.

Innovation Solution

A communication method utilizing blockchain technology for distributed authentication and information sharing, employing symmetric keys and trusted environments to encrypt and decrypt registration and service token requests, ensuring secure network function registration, access, and authorization across multiple operators.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If service-based architecture is implemented in 5G core network, then openness and flexibility are improved, but security and privacy requirements deteriorate

Engineering Contradiction:

Improveopenness and flexibilityVSAvoidsecurity and privacy

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces a blockchain-based distributed authentication mechanism as an intermediary layer between network functions and operators. This intermediary verifies identities and authorizes access without requiring direct trust between operators, thus enabling flexible service-based architecture while maintaining security through cryptographic verification and distributed consensus.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent changes the security parameter from centralized authentication to distributed cryptographic verification. By using blockchain technology, the system transforms traditional security parameters (centralized trust, manual verification) into new parameters (distributed trust, cryptographic verification), enabling both flexibility and security simultaneously.

Inventive Principle:

Principle #35Parameter changes

2Reliability

If centralized authentication is used, then security is improved, but system complexity and scalability deteriorate

Engineering Contradiction:

ImprovesecurityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the authentication function from centralized control to distributed execution across multiple blockchain nodes. Each node independently verifies authentication requests using cryptographic proofs, eliminating the single point of failure and reducing complexity compared to centralized systems while maintaining high security standards.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system implements self-service authentication where network functions present cryptographic proofs of their identity and authorization status. The blockchain network automatically verifies these proofs through distributed consensus mechanisms without requiring manual intervention or complex centralized processing, simplifying the system architecture.

Inventive Principle:

Principle #25Self-service

3Adaptability or versatility

If service-based architecture with multiple operators is implemented, then adaptability is improved, but trust establishment and authorization efficiency deteriorate

Engineering Contradiction:

ImproveadaptabilityVSAvoidtrust establishment and authorization efficiency

Core Design Contradiction:

Adaptability or versatilityVSProductivity

Solution Approach 1:

The patent implements preliminary action by pre-establishing cryptographic identities and authorization policies on the blockchain before service interactions occur. Network functions register their identities and authorized services in advance, so when access requests are made, the blockchain can quickly verify pre-stored credentials without real-time trust establishment, significantly improving authorization efficiency.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system uses feedback mechanisms where the blockchain continuously verifies authentication status and authorization policies during service interactions. This real-time feedback loop ensures that adaptability is maintained while authorization efficiency is improved through automated verification, eliminating manual trust establishment processes.

Inventive Principle:

Principle #23Feedback

Data Source

PatentEP4697774A1Communication method, communication device, medium, and program product

Publication Date: 2026.02.18 HUAWEI TECH CO LTD

Figure 1A~1B
Figure 1C
Figure 1D

AI summary

Embodiments of this application provide a communication method, including: A network registration function device receives a registration request from a network function device. The registration request includes an identity of the network function device. The network registration function device obtains an encrypted identity of the network function device based on the identity of the network function device. In addition, the network registration function device encrypts the registration request of the network function device by using a symmetric key between the network registration function device and a trusted environment device. The network registration function device sends a transaction request to a distributed management device. The transaction request includes a certificate of the network registration function device, an encrypted registration request, the encrypted identity of the network function device, and a signature of the network registration function device for the transaction request. In this way, the registration request of the network function device can be securely transmitted to a blockchain network, to implement distributed authentication and information sharing of a network service function, and ensure secure running of functions such as network function registration, access, and authorization.