Blockchain Identity Management for NFV Orchestration

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The complexity of 5G systems and the need for dynamic, distributed service delivery models in network function virtualization (NFV) pose challenges for existing telecom systems, which struggle to scale and manage identities and resources effectively, especially with the introduction of self-sovereign identities and decentralized orchestration.

Innovation Solution

The implementation of blockchain technology for identity management and decentralized service delivery, enabling self-sovereign identities, secure contract management, and fair resource allocation through distributed ledgers, allowing any entity to participate in NFV ecosystems and manage resources autonomously.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If Network Function Virtualization (NFV) is implemented to provide flexible and dynamic service delivery, then adaptability and service customization improve, but system complexity and difficulty of managing distributed identities increase

Engineering Contradiction:

Improveservice delivery flexibilityVSAvoidsystem complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent introduces a blockchain-based identity management system as an intermediary layer between network functions and users. This decentralized ledger records and verifies identities, permissions, and service delivery transactions, enabling flexible NFV services while simplifying the management of distributed identities through automated consensus mechanisms rather than complex centralized coordination

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system enables self-sovereign identities where users and network functions autonomously manage their own credentials and permissions through cryptographic key pairs. Entities can independently verify identities and execute service delivery agreements without requiring complex centralized authentication infrastructure, reducing operational complexity while maintaining adaptability

Inventive Principle:

Principle #25Self-service

2Ease of operation

If decentralized service delivery models are adopted to allow any entity to participate in NFV ecosystems, then ease of operation and accessibility improve, but security risks and difficulty of managing distributed trust increase

Engineering Contradiction:

ImproveaccessibilityVSAvoidsecurity

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The blockchain serves as a trusted intermediary that establishes security in decentralized environments. It provides immutable recording of identities, permissions, and transactions, enabling any entity to participate in NFV ecosystems while maintaining security through cryptographic verification and consensus mechanisms rather than requiring complex centralized security infrastructure

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system uses cryptographic copies (hashes) of identities and credentials stored on the blockchain to verify authenticity without exposing sensitive information. Entities can prove their identity and permissions through cryptographic proofs rather than sharing actual credentials, enabling secure decentralized operation while protecting against security risks associated with credential exposure

Inventive Principle:

Principle #26Copying

3Productivity

If self-sovereign identities are implemented to allow autonomous resource management, then productivity and efficiency improve, but difficulty of detecting and measuring identity verification increases

Engineering Contradiction:

Improveresource management efficiencyVSAvoididentity verification complexity

Core Design Contradiction:

ProductivityVSDifficulty of detecting and measuring

Solution Approach 1:

The patent replaces manual identity verification processes with automated cryptographic verification based on blockchain records. Entities can independently verify identities and permissions through cryptographic proofs stored on the distributed ledger, enabling autonomous resource management while simplifying verification through automated consensus mechanisms rather than complex manual authentication procedures

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS11757650B2Distributed self sovereign identities for network function virtualization

Publication Date: 2023.09.12 INTEL CORP

AI summary

Various systems and methods for distributing orchestration of network services using blockchain technology are disclosed. A bid is posted for orchestration of a network service to be delivered using NFV using a DSFC contract blockchain. The device, DSFC contract and initiator of a request for the network service are identified using a self-sovereign identity blockchain. The device determines it is to orchestrate the network service based on the DSFC contract blockchain and identifies at least one entity to provide the network service from a DWH contract blockchain that contains DWH contract bids of entities for the network service. The entities and DWH contract are identified using the self-sovereign identity blockchain. The device ensures that the DWH contract is being executed by the at least one entity according to the DWH contract and provides remuneration after fulfillment.