Hyperfine Network Slicing for 5G Edge Latency and Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current 5G network slicing technologies face challenges in providing secure, efficient, and latency-reduced data transmission between User Equipment (UE) and Multiaccess Edge Compute (MEC) devices, particularly when data does not need to traverse the cloud, leading to inefficiencies in privacy and cost management.

Innovation Solution

A cloud-based system integrated within the 5G network that offers hyperfine network slicing by providing inline monitoring, zero-trust security, and bandwidth control, using enforcement nodes and a central authority to manage traffic and enforce policies across various interfaces, ensuring secure and efficient data transmission.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If data is transmitted through the cloud for security monitoring, then security control is improved, but network latency increases

Engineering Contradiction:
Improvesecurity controlVSAvoidnetwork latency
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent segments network traffic into different slices with distinct security requirements. Critical latency-sensitive traffic receives localized security enforcement at the edge, while less time-critical traffic undergoes comprehensive cloud-based inspection. This segmentation allows security monitoring to be applied selectively rather than uniformly to all traffic flows.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces edge computing nodes as intermediaries between the core network and end devices. These edge nodes provide localized security enforcement capabilities, acting as mediators that can handle time-critical security decisions locally without requiring all traffic to traverse the full cloud path, thereby reducing latency for security operations.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If network slicing is implemented to provide dedicated resources, then quality of service is improved, but device complexity increases

Engineering Contradiction:
Improvequality of serviceVSAvoidnetwork configuration
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements a universal slicing framework where a single set of mechanisms and protocols can create multiple different slice types (e.g., enhanced mobile broadband, ultra-reliable low-latency, massive IoT). This multi-functional approach allows the same infrastructure to serve diverse QoS requirements without requiring separate complex configurations for each service type.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent utilizes parameter-based slicing where different QoS requirements are achieved by modifying network parameters (bandwidth allocation, latency thresholds, priority levels) rather than creating fundamentally different network architectures. This allows flexible QoS adjustment through parameter tuning within a unified slicing framework.

Inventive Principle:
Principle #35Parameter changes

3Loss of time

If cloud-based security services are deployed at the edge, then security response time is improved, but infrastructure cost increases

Engineering Contradiction:
Improvesecurity response timeVSAvoidinfrastructure resources
Core Design Contradiction:
Loss of timeVSQuantity of substance

Solution Approach 1:

The patent applies local quality by deploying security enforcement capabilities specifically at edge locations where they are most needed for low-latency response, rather than uniformly distributing all security functions across the entire network. This localized approach concentrates infrastructure resources at strategic points to achieve security response time improvements without proportionally increasing overall infrastructure costs.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The patent implements partial deployment of cloud-based security services at the edge, focusing resources on the most critical security functions and traffic flows that require low-latency enforcement. Rather than deploying complete cloud security stacks at every edge location, the system applies security functions selectively to the extent necessary to achieve response time improvements.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS20230422086A1Hyperfine network slicing
Publication Date: 2023.12.28 ZSCALER INC
  • US20230422086A1 patent drawing
  • US20230422086A1 patent drawing
  • US20230422086A1 patent drawing

AI summary

A method implemented via a cloud-based system for network slicing in a 5G network includes connecting with a device that connects to the 5G network, wherein the cloud-based system includes a plurality of nodes interconnected to one another and including one or more nodes integrated in a user plane of the 5G network; inline monitoring traffic between the device and destinations including any of the Internet, cloud services, private applications, edge compute, Multiaccess Edge Compute (MEC), public/private data centers, and public/private clouds; and enforcing bandwidth control, in the 5G network, to a defined Quality of Service for a slice associated with the device.