Multi-Segment Filename for Secure VNF Slice Portability
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Configuring and transferring computing services on network slices in mobile communication networks is time-consuming and resource-intensive, especially when dealing with periodic or event-based services, and secure data transfer across different networks is challenging due to security concerns and proprietary requirements.
Innovation Solution
The use of multi-segment filenames with unique delimiters and encryption keys allows for efficient configuration, backup, and transfer of computing services across networks, enabling secure and automated setup of virtual network functions (VNFs) by separating file segments and using hash filenames and encryption to protect sensitive data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If computing services are configured and transferred on network slices manually, then security can be maintained through careful control, but the process becomes time-consuming and resource-intensive
Solution Approach 1:
The patent segments the configuration process into multiple independent components: multi-segment filenames that separate file identification from content, modular encryption keys for different data portions, and structured file formats with distinct headers and bodies. This segmentation enables automated processing of each component while maintaining security controls, resolving the contradiction between manual security oversight and automated efficiency.
Solution Approach 2:
The patent implements preliminary actions by pre-configuring encryption keys, pre-segmenting filenames, and pre-structuring file formats before actual data transfer. Configuration templates and encrypted placeholders are prepared in advance, allowing rapid deployment when services need to be transferred between networks, thus reducing configuration time while maintaining security through pre-established controls.
2Reliability
If encryption is applied to protect sensitive data during transfer, then security is improved, but the complexity of managing encryption keys and encrypted files increases
Solution Approach 1:
The patent divides encryption management into segments by using different encryption keys for different portions of data (e.g., first encryption key for file content, second encryption key for configuration data). This segmentation simplifies key management compared to encrypting everything with a single key, as each segment can be independently managed and transferred, reducing the overall complexity of encryption management while maintaining strong data protection.
Solution Approach 2:
The patent introduces intermediary elements such as encrypted placeholders and structured file formats that mediate between the encryption process and data transfer. These intermediaries simplify the transfer process by providing standardized formats that automatically handle encryption/decryption coordination, reducing the management complexity despite the use of multiple encryption keys.
3Reliability
If file contents are transferred in encrypted form, then security is maintained, but the files cannot be accessed or modified without decryption
Solution Approach 1:
The patent segments files into encrypted content portions and unencrypted metadata portions (such as headers, filenames, and path information). This allows the encrypted segments to maintain security while unencrypted segments provide easy accessibility for operations like file identification, location, and basic manipulation without requiring decryption, thus resolving the contradiction between security and ease of operation.
Data Source
AI summary
A method of configuring a computing service on a virtual network with a multi-segment filename. The method comprises requesting an encrypted file by an application executing on a computer by providing a hash filename extracted from a multi-segment filename, wherein the multi-segment filename comprises a unique delimiter between each of the segments of the multi-segment filename, wherein each segment comprises one of a hash filename, a plain text instruction, or plain text content. The application organizes a network slice with one or more VNFs from coded instructions in a segment of the multi-segment filename. The application constructs the computing service within the VNF by transferring one or more executables, the data file, and one or more artifacts decrypted from hash filenames saved within the multi-segment filename to the network slice.