Dynamic SDP Reconstitution for 5G Microservice Resource Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The static nature of northbound APIs in SDN-based 5G/6G networks leads to overprovisioning or under-provisioning of resources for micro-services network applications, exposing them to security risks and inefficiencies.
Innovation Solution
A dynamic re-constitution method for Software Defined Perimeter (SDP) is implemented, authenticating devices and users, monitoring traffic patterns, and adjusting resource allocation dynamically to match predicted needs, ensuring secure and optimized resource usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If static resource configuration is used in SDP, then security is improved by limiting exposure to necessary resources, but resource allocation efficiency deteriorates due to overprovisioning or underprovisioning
Solution Approach 1:
The patent implements dynamic resource allocation in SDP by continuously monitoring data traffic patterns and automatically adjusting resource provisioning. The system transitions from static configuration to dynamic reconfiguration, where resources are allocated based on real-time traffic analysis and predictive modeling, ensuring both security and efficiency
Solution Approach 2:
The system employs feedback mechanisms by monitoring data traffic flowing through SDP and using this information to adjust resource allocation. Traffic patterns are analyzed and fed back to the resource management system, which then optimizes resource provisioning accordingly, creating a closed-loop control system
2Adaptability or versatility
If additional resources are provisioned to ensure adequate capacity, then resource availability is improved, but security deteriorates due to increased exposure to malicious actors
Solution Approach 1:
The system dynamically adjusts the level of resource exposure based on monitored traffic patterns and predictive analysis. Resources are provisioned adaptively - increasing availability when traffic demands it while maintaining security by limiting exposure to only those resources currently needed, rather than permanently exposing all potential resources
Solution Approach 2:
The patent applies different resource allocation strategies to different resources based on their specific usage patterns. Each resource receives tailored provisioning levels according to its actual traffic demands, ensuring adequate availability where needed while minimizing security exposure for resources with lower utilization
3Ease of manufacture
If static northbound API configuration is used, then implementation simplicity is improved, but resource utilization efficiency deteriorates due to inability to adapt to changing traffic patterns
Solution Approach 1:
The system implements self-service resource management where the SDP automatically monitors its own traffic patterns, analyzes utilization needs, and adjusts resource allocation without external intervention. The northbound API enables the system to self-configure and optimize resource provisioning based on real-time conditions
Solution Approach 2:
The patent employs predictive modeling to anticipate future resource needs before traffic patterns actually require them. By analyzing historical traffic data and predicting future demands, the system proactively adjusts resource allocation in advance, preventing both overprovisioning and underprovisioning
Data Source
AI summary
Dynamic re-constitution of a software defined perimeter (SDP) for micro-services network applications in a 5G/6G telecommunications network includes authenticating both a device and also a user of the device seeking access to an initial set of network resources defining an initial SDP and, responsive to the authentication, generating an individual network communications link through a northbound API to one or more micro-services network applications of the initial SDP. Data traffic from the micro-services network applications is monitored over the link and the monitored data traffic is submitted to a predictor predicting a traffic pattern necessitating a change in the initial set of the network resources of the initial SDP. Finally, in response to the prediction of the traffic patterns, a new SDP is defined with a different set of the network resources, the network communications link terminated, and a new communications link established between the authenticated device and the new SDP.