Campus User Plane Tunneling for Secure Passive IoT Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data transmission methods in passive internet of things architectures using control plane channels are vulnerable to data leakage, necessitating a more secure data transmission solution.
Innovation Solution
Implementing user plane channels within a campus environment, where data transmission occurs between a server and passive terminals via a user plane tunnel, utilizing a reader to perform operations based on indication information to ensure data remains within the campus boundaries, leveraging mapping relationships between tunnel identifiers, service types, and operations to prevent data leakage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data transmission is performed through the control plane channel, then data can be transmitted between server and passive terminal, but data leakage risk increases
Solution Approach 1:
The patent segments the network plane into control plane and user plane, directing data transmission through the user plane channel instead of the control plane. This separation isolates data traffic from control signaling, reducing the attack surface and preventing data leakage through control channel exploitation.
Solution Approach 2:
The patent introduces a user plane function network element as an intermediary for data transmission. This intermediary handles data packets through the user plane channel, acting as a buffer and security layer between the server and passive terminal, thereby preventing direct exposure and potential leakage.
2Reliability
If user plane channel is deployed within campus, then data security is improved by preventing data from exiting campus, but network complexity increases
Solution Approach 1:
The user plane function network element is designed to perform multiple functions including data packet routing, security enforcement, and campus boundary control. This multi-functionality consolidates several network operations into a single element, managing complexity while maintaining security.
Solution Approach 2:
The user plane channel is configured to automatically enforce data retention policies within the campus network. The system self-manages data routing and security constraints without requiring external intervention, simplifying operational complexity while ensuring data remains within designated boundaries.
Data Source
AI summary
Embodiments of this application provide a communication method and apparatus. The method includes: A reader receives a first packet sent by a user plane function UPF network element through a first tunnel, where one end of the first tunnel is connected to the reader, the other end of the first tunnel is connected to the UPF network element, the first packet includes first indication information, and the first indication information indicates the reader to perform a first operation; and the reader performs the first operation based on the first indication information. When a server and a passive terminal perform data transmission through the first tunnel, it can be effectively ensured that transmitted data does not go out of the campus, thereby avoiding the risk of data leakage and implementing secure data transmission.