Distributed Ledger Authentication for Multi-Vendor vRAN Components

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The challenge in 5G mobile core networks is the lack of secure and scalable authentication mechanisms for multi-vendor virtualized radio access network (vRAN) components, leading to a 'zero trust' environment that hinders effective radio coordination and resource sharing among different vendors and operators.

Innovation Solution

Implementing distributed ledger technology (DLT) with enterprise blockchain networks to authenticate and authorize vRAN components, using smart contracts to establish trust and secure communication between vDUs and vCUs, enabling resource sharing and coordination across multiple service providers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If distributed ledger technology is implemented to authenticate and authorize multi-vendor vRAN components, then security and trust between vendors is improved, but device complexity increases

Engineering Contradiction:
Improveauthentication securityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a distributed ledger (blockchain) as an intermediary system that mediates authentication and authorization between multi-vendor RAN components. The ledger acts as a trusted third party that stores credentials and validates identities without requiring direct trust between vendors, thereby improving security while distributing the complexity across the network rather than concentrating it at single points.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The authentication system is segmented into separate functional modules: RAN entities that hold credentials, verification functions that validate identities, and a distributed ledger that stores authorization data. This segmentation allows each component to perform its specific function independently, improving overall system reliability while containing complexity within defined boundaries.

Inventive Principle:
Principle #1Segmentation

2Adaptability or versatility

If enterprise blockchain networks are used to establish trust among vRAN components, then coordination between service providers is improved, but manufacturing and deployment complexity increases

Engineering Contradiction:
Improvemulti-vendor coordinationVSAvoiddeployment complexity
Core Design Contradiction:
Adaptability or versatilityVSEase of manufacture

Solution Approach 1:

The distributed ledger system is designed with universal interfaces and standardized protocols that enable multi-vendor participation. The same blockchain infrastructure can serve multiple service providers and vendor combinations, making the system adaptable to various deployment scenarios while using a single unified technology stack to simplify manufacturing and deployment processes.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent implements preliminary registration of RAN entities with the distributed ledger before they begin operating. Credentials and authorization information are pre-stored in the blockchain, allowing entities to authenticate and coordinate immediately upon deployment without requiring complex real-time configuration or trust establishment procedures.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS12413972B2Authenticating radio access network components using distributed ledger technology
Publication Date: 2025.09.09 CISCO TECHNOLOGY INC
  • US12413972B2 patent drawing
  • US12413972B2 patent drawing
  • US12413972B2 patent drawing

AI summary

Blockchain technology is used to provide distributed authentication, entitlements and trust among different virtual Radio Access Network (vRAN) elements. An enterprise blockchain with interfaces enables multi-vendor vRAN deployment across multiple service providers. In another embodiment, a method is provided for authenticating entities in a virtualized radio access network to ensure various entitles are in fact entitled to participate in various radio access network operations.