Edge Endpoint Mapping for Secure Multi-Network Application Flows
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing edge computing systems face challenges in setting up application data flows between edge application servers within a mobile network and remote servers outside the network, due to the need for secure communication and separation of concerns between network entities, which complicates the exposure of internal communication endpoints.
Innovation Solution
A mapping system is introduced to facilitate the setup of application data flows by obtaining a client identifier and generating mapping data associating it with an external endpoint identifier, allowing network entities to establish connections while hiding internal network information, thus enabling secure and controlled communication between edge application servers and remote servers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single network slice is dedicated to a specific application, then service quality for that application is improved, but network resource utilization is reduced
Solution Approach 1:
The patent implements multi-tenancy within a single network slice, allowing multiple applications (e.g., VoIP, video conferencing, telemedicine) to share the same slice while maintaining service quality through application-aware routing and QoS policies. This resolves the contradiction by enabling a single slice to serve multiple purposes rather than dedicating separate slices to each application.
Solution Approach 2:
The patent segments the network slice into multiple virtual network instances or tenant-specific sub-slices within the same physical slice infrastructure. This allows differentiated service quality guarantees for different applications while sharing underlying network resources, thereby improving both service quality and resource utilization simultaneously.
2Adaptability or versatility
If network slices are dynamically created and modified, then network adaptability is improved, but operational complexity increases
Solution Approach 1:
The patent introduces a network slice management platform or orchestrator that acts as an intermediary between application providers and the network infrastructure. This intermediary abstracts the complexity of slice creation, modification, and resource allocation, enabling dynamic network adaptability while simplifying operational complexity through centralized management and automated provisioning.
Solution Approach 2:
The patent implements pre-configured network slice templates and policy frameworks that define acceptable slice configurations before they are deployed. This preliminary preparation enables rapid dynamic creation of slices without operational complexity, as the complex configuration tasks are performed in advance through template instantiation rather than manual configuration.
3Quantity of substance
If multiple applications share a network slice, then network resource utilization is improved, but service quality differentiation becomes difficult
Solution Approach 1:
The patent applies local quality differentiation by implementing application-aware routing and QoS policies that provide customized service quality treatment for different applications within the same slice. Each application receives tailored bandwidth guarantees, latency parameters, and priority levels based on its specific requirements, enabling both resource sharing and service quality differentiation simultaneously.
Solution Approach 2:
The patent implements dynamic QoS parameter adjustment and real-time resource allocation based on current network conditions and application demands. This dynamic approach allows the network to adapt bandwidth distribution and service quality parameters on-the-fly, maintaining both high resource utilization and effective service quality differentiation across multiple applications.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A mapping system and method may be provided for facilitating setup of an application data flow between an edge application server which may be instantiated on one or more edge nodes of a mobile network and a remote server outside of the mobile network. The system and method may obtain a client identifier identifying a client device configured to utilize an edge application service of the edge application server, obtain an external endpoint identifier of an external endpoint of the edge application server, wherein the external endpoint allows the edge application server to be reached by data communication from outside of the mobile network, generate mapping data associating the client identifier with the external endpoint identifier, using the mapping data, provide a communication interface to enable a network entity which is configured to setup the application data flow between the edge application server and the remote server to obtain the external endpoint identifier on the basis of the client identifier. Such a mapping system may enable application data flows to be setup between edge application servers in different mobile networks on the basis of the mapping data.