Location-Based IP Pool Allocation for User Plane Nodes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In 4G and 5G networks with a distributed user plane architecture, random IP pool assignment to user plane nodes facilitates mobile-initiated scams and cybersecurity attacks, as the assigned IP addresses cannot effectively pinpoint the location of malicious actors.
Innovation Solution
Allocate IP pools to user plane nodes based on location information associated with each node, using a centralized control plane node to match IP pools with specific geographic locations, enabling precise IP address assignment that aids in tracking and mitigating scams and attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If IP pools are randomly assigned to user plane nodes, then the system is simple to operate and flexible, but the ability to locate malicious actors is lost
Solution Approach 1:
The patent applies preliminary action by pre-associating specific IP pools with specific user plane nodes based on their geographic locations before any malicious activity occurs. This pre-establishment of location-bound IP allocations enables immediate location tracking when needed, without requiring complex real-time analysis or reconfiguration during security incidents.
Solution Approach 2:
The patent creates a mapping copy between user plane node locations and IP pool assignments. This copy relationship allows the system to track malicious actors by simply referencing which IP pool was assigned to which node location, eliminating the need for complex real-time location analysis while maintaining precise tracking capability.
2Reliability
If centralized control is implemented for IP pool allocation based on location, then security and tracking capability improve, but system complexity increases
Solution Approach 1:
The patent segments the IP pool allocation process into location-based groups, where each user plane node is associated with specific geographic regions and corresponding IP pools. This segmentation allows the centralized control plane to manage security reliably through structured location-to-IP mappings, reducing the complexity of tracking and enforcement while maintaining high security standards.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Described herein are techniques and systems for allocating Internet Protocol (IP) pools amongst user plane nodes in a distributed user plane architecture based on location information associated with the individual user plane nodes. In an example process, a control plane node of a telecommunication network receives, from a user plane node of the telecommunication network, location information during a packet forwarding control protocol (PFCP) association setup procedure, identifies, from a set of IP pools associated with the control plane node, an IP pool that is associated with matching location information that matches the location information received from the user plane node, and assigns the IP pool to the user plane node. By allocating IP pools in this manner, mobile-initiated scams, fraud, and/or cybersecurity attacks can be mitigated.