Packet Core Microsegmentation via GTP-c Message Interception
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
3GPP service providers face challenges in efficiently segmenting traffic from IoT devices due to the time-consuming and costly nature of implementing and maintaining access point names (APNs), which are not feasible for mobile devices across different logical regions.
Innovation Solution
The method involves intercepting Create Session Request (CSR) GTP-c messages, determining a lookup key based on message content, obtaining a PGW identifier using a slice name, and modifying the message to steer connections through virtual APNs or slice names, allowing for location-based microsegmentation and rapid provisioning without global definitions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional APN-based traffic segmentation is implemented, then traffic can be segmented to specialized PDNs, but the implementation and maintenance becomes time-consuming and costly
Solution Approach 1:
The patent changes the parameter used for traffic segmentation from traditional APN names to alternative parameters such as device identity, location information, or service type. This allows the same segmentation functionality to be achieved without the overhead of APN provisioning and management, thereby reducing provisioning time while maintaining reliable traffic segmentation.
2Reliability
If traditional APN-based traffic segmentation is implemented, then traffic can be segmented to specialized PDNs, but the implementation and maintenance becomes costly
Solution Approach 1:
By changing the segmentation parameter from APN to alternative identifiers already present in the network (such as device identity or location), the patent eliminates the need for costly APN provisioning, validation, and maintenance infrastructure while preserving the essential traffic segmentation capability.
3Adaptability or versatility
If location-based PDN selection is implemented, then devices can be routed to appropriate PDNs based on physical location, but APN proliferation occurs making the system unmanageable
Solution Approach 1:
The patent extracts the location-based routing functionality from the APN management system. Instead of creating separate APNs for each location, the solution uses location information as a parameter to select from a managed set of PDNs, thereby achieving location-based adaptability without the complexity of proliferating APNs.
Solution Approach 2:
The patent makes a single PDN configuration serve multiple locations by using location-based selection logic. Instead of requiring unique APNs for each location (one-to-one mapping), the same PDN can serve multiple locations through the universal location-based routing mechanism, reducing overall system complexity.
4Adaptability or versatility
If mobile devices are supported across different logical regions, then network coverage is improved, but traditional APN-based segmentation becomes infeasible
Solution Approach 1:
The patent introduces dynamic parameter selection for traffic segmentation. Instead of static APN-based segmentation that breaks when devices move between regions, the solution dynamically selects segmentation parameters (such as current location or service type) based on the device's state, enabling seamless support for mobile devices across different logical regions while maintaining segmentation feasibility.
Data Source
AI summary
Methods, non-transitory computer readable media, session director apparatuses, and network traffic management systems that facilitate packet data network (PDN) service slicing with microsegmentation in an evolved packet core are disclosed. With this technology, a create session request (CSR) general packet radio service (GPRS) tunneling protocol (GTP) control (GTP-c) message is intercepted. A lookup key is then determined based on content of the intercepted CSR GTP-c message. A PDN gateway (PGW) identifier for a PGW is obtained using a slice name obtained using the lookup key. The intercepted CSR GTP-c message is modified to include the obtained PGW identifier. Subsequently, the modified CSR GTP-c message is steered based on the obtained PGW identifier, such as directly to the PGW or to a serving gateway (SGW) module associated with the PGW.