Distributed Edge Security Relay for Roaming Load Offloading
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Modern wireless communication networks face increased computational burdens on security functions at the network edge due to the growing number of neighboring networks, which are potential sources of security threats such as malicious software, data scraping, and denial of service attacks.
Innovation Solution
A distributed security architecture is implemented using security relay nodes and remote security nodes to securely protect control signaling at the network edge, employing standardized interfaces like N32 and TLS for relaying and encrypting control packets, and utilizing a distributed SEPP architecture to delegate security functions to nodes outside the network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security functions are placed at the network edge to combat security threats, then security protection is improved, but computational burden on network edge nodes increases
Solution Approach 1:
The security function is segmented between local network edge nodes and remote security nodes. Local nodes handle only essential security functions, while complex security operations are delegated to remote nodes, reducing computational burden at the network edge while maintaining security protection.
Solution Approach 2:
A remote security node acts as an intermediary between the local network edge node and the external network. This intermediary handles computationally intensive security functions, allowing local nodes to maintain security protection without bearing the full computational burden.
2Adaptability or versatility
If the number of neighboring networks increases to support more roaming relations, then network connectivity is improved, but computational burden on security functions increases
Solution Approach 1:
The remote security node provides universal security services to multiple neighboring networks through a single interface. This multi-functional approach allows the system to support numerous roaming relations without proportionally increasing computational burden on individual nodes.
Solution Approach 2:
Security functions are replicated at remote nodes rather than being duplicated at every local network edge node. This allows the system to scale support for multiple roaming relations by utilizing the replicated remote security node infrastructure.
3Productivity
If security functions are distributed to reduce computational load, then productivity is improved, but device complexity increases
Solution Approach 1:
Complex security functions are extracted from local network edge nodes and relocated to remote security nodes. This extraction simplifies the local node architecture while maintaining overall system productivity through centralized security processing.
Data Source
AI summary
A security relay node in a Public Land Mobile Network (PLMN) delegates, to a remote security node, setup of an N32-c interface. The N32-c interface is directed towards a further PLMN and terminates at the remote security node. The security relay node relays a control packet, received from a Network Function (NF) within the PLMN, over an N32-f interface to the remote security node for delivery of the control packet. The remote security node is outside of both the PLMN and the further PLMN.