Distributed Edge Security Relay for Roaming Control Signaling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Modern wireless communication networks face increased computational burdens on security functions at the network edge due to the growing number of neighboring networks, posing security risks such as malicious software, data scraping, and denial of service attacks.
Innovation Solution
A distributed security architecture is implemented using security relay nodes and remote security nodes to securely protect control signaling at the network edge, employing standardized interfaces like N32 and TLS for relaying and encrypting control packets, and delegating SEPP functions to external entities like IPX providers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security functions are placed at the network edge to combat security threats, then security protection capability is improved, but computational burden on individual networks increases
Solution Approach 1:
The patent segments the security function into two separate components: a Security Edge Protection Proxy (SEPP) deployed at each network edge, and a Remote Security Node (RSN) positioned remotely. The SEPP handles local security operations while delegating computationally intensive tasks to the RSN, thereby distributing the computational burden across multiple entities rather than concentrating it at individual network edges.
Solution Approach 2:
The Remote Security Node acts as an intermediary between multiple networks and their respective SEPPs. It receives security-related computations and tasks from multiple SEPPs and processes them centrally, serving as a mediator that reduces the direct computational burden on individual network edge devices while maintaining security protection capabilities.
2Adaptability or versatility
If the number of neighboring networks increases to provide service continuity, then network connectivity and roaming capability are improved, but security risks and computational load increase
Solution Approach 1:
The RSN serves as a trusted intermediary that mediates security interactions between SEPPs of different networks. It authenticates and manages security contexts for roaming users across multiple networks, thereby enabling enhanced roaming capability while centralizing security risk management and reducing the security burden on individual networks.
Solution Approach 2:
The patent extracts security context management and authentication functions from individual network edges and consolidates them at the remote security node. This extraction allows networks to focus on providing service continuity and roaming connectivity while the RSN handles the complex security verification across multiple networks.
Data Source
AI summary
A method, implemented by a security relay node in a Public Land Mobile Network, PLMN, wherein the method comprising the steps of receiving, from a Network Function, NF, within the PLMN, a control packet to be provided to a further PLMN, relaying said control packet to a remote security node for delivery of the control packet to the further PLMN, wherein the remote security node being outside of both the PLMN and being outside the further PLMN.