Edge Computing Device Binding for 5G Data Traceability
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current endpoint-edge combinations in 5G networks lack traceability and security, making it difficult to ensure the origin and integrity of pre-processed data, particularly in time-critical applications, due to the absence of a trustworthy computing platform and data origin verification.
Innovation Solution
A novel security concept is introduced that binds communication terminals with Edge computing devices and services using electronic identities, employing hash values and blockchain storage to ensure data origin and integrity, allowing for traceability even with mobile or changing edge services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of time
If pre-processing is performed at the endpoint-edge combination without binding, then processing speed and latency are improved, but data traceability and origin verification are lost
Solution Approach 1:
The patent applies preliminary action by creating a binding between endpoint and edge service identifiers before data processing occurs. This binding is established in advance through a registration process that links endpoint identifiers with edge service identifiers, enabling subsequent traceability without adding processing delays. The binding information is stored and readily available for verification, ensuring that data origin can be verified immediately when needed.
Solution Approach 2:
The patent introduces an intermediary binding mechanism that connects the endpoint and edge service without interfering with the direct data processing flow. This binding acts as a mediator that carries identification information through the processing pipeline, allowing traceability to be established without requiring additional communication steps between endpoint and edge service during time-critical operations.
2Reliability
If electronic identities and binding mechanisms are implemented, then data origin verification is improved, but system complexity increases
Solution Approach 1:
The patent segments the identification system into distinct components: endpoint identifiers, edge service identifiers, and binding information. Each component has a specific function and can be managed independently. The binding information is segmented into registration, storage, and verification phases, allowing the complexity to be distributed and managed separately rather than as a monolithic system.
Solution Approach 2:
The patent uses copying by creating and storing binding information that replicates the relationship between endpoint and edge service identifiers. This binding copy can be stored in various locations (endpoint, edge service, or external repository) and reused for multiple verification operations, eliminating the need to re-establish the relationship each time verification is needed.
3Loss of information
If binding information is stored and verified, then traceability is improved, but processing overhead increases
Solution Approach 1:
The binding information is prepared and stored in advance during a registration phase, so that during actual data processing, verification can occur by simply checking the pre-stored binding information rather than performing complex computations or communications in real-time.
Solution Approach 2:
The binding mechanism is designed to be self- verifying through cryptographic signatures or hash-based verification, allowing the system to validate traceability information autonomously without requiring manual intervention or complex verification protocols that would slow down processing.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The disclosure relates to a communication assembly (100) for pre-processing data before transmission to a core network (101), in particular a 5G core network, the communication assembly (100), comprising: a communication terminal (120), in particular an Internet-of-Things, loT, terminal for providing data, the communication terminal (120) comprising an electronic identity (121); an Edge computing device (110) providing network-related processing resources at an edge of the core network (101), the Edge computing device (110) running at least one Edge service (113, 115) configured to pre-process data on the network-related processing resources, wherein each, the Edge computing device (110) and the at least one Edge service (113, 115) comprises an electronic identity (111, 114, 116); and a binding channel (122) between the communication terminal (120) and the at least one Edge service (113, 115), configured to bind the at least one Edge service (113, 115) at least temporarily to the communication terminal (120) for pre-processing the data provided by the communication terminal (120), wherein the binding is based on the electronic identities (121, 111, 114, 116) of the communication terminal (120), the Edge computing device (110) and the at least one Edge service (113, 115).