5G NEF Matching Processor Identity for Hardware Encryption

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In 5G networks, inefficiencies arise when subscriber devices and edge servers or network servers have different processor architectures, leading to inefficiencies in encryption/decryption processes and root of trust security mechanisms, as they often require software intermediation rather than hardware-based solutions.

Innovation Solution

The Network Exposure Function (NEF) identifies and matches subscriber devices with network servers having matching processor architectures, enabling hardware-based encryption and secure connections by including processor identity information in processor matching messages and utilizing a distributed ledger for auditing and authentication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If subscriber devices connect to network servers with different processor architectures, then network service coverage is improved, but encryption and security mechanisms become less efficient due to requiring software intermediation

Engineering Contradiction:
Improvenetwork service coverageVSAvoidencryption efficiency
Core Design Contradiction:
Adaptability or versatilityVSProductivity

Solution Approach 1:

The patent changes the parameter of processor architecture matching between subscriber devices and network servers. By selecting servers whose processor architecture matches the device's processor architecture, the system enables hardware-based encryption and security mechanisms instead of software intermediation, thereby improving encryption efficiency while maintaining network service coverage

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The Network Exposure Function (NEF) acts as an intermediary that captures processor identity information from subscriber devices, queries the distributed ledger server for matching servers, and establishes connections between devices and compatible servers. This intermediary resolves the contradiction by enabling architecture-matched connections without limiting network accessibility

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If processor identity verification is implemented through distributed ledger, then security is improved, but system complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the complex processor identity verification and matching logic from the subscriber devices and集中ates it in the Network Exposure Function (NEF). Devices only need to provide their processor identity information, while the NEF handles querying the distributed ledger, finding matching servers, and establishing connections. This extraction reduces device complexity while maintaining security through immutable identity verification

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The distributed ledger server performs self-service by automatically verifying processor identities and providing matching server information without requiring complex verification logic in client devices. The immutable nature of the ledger provides security while keeping the system architecture simple and decentralized

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS11778451B25G Network Exposure Function (NEF) capturing processor identity
Publication Date: 2023.10.03 T MOBILE INNOVATIONS LLC
  • US11778451B2 patent drawing
  • US11778451B2 patent drawing
  • US11778451B2 patent drawing

AI summary

A method of establishing a network connection between a subscriber device and a network server having a server processor matching a device processor of the subscriber device. The method comprises receiving a processor matching message (PMM) by an Exposure Function (EF) executing on a computer system, where the PMM comprises a request for a network service and an EF attribute representing an identity of a device processor of a subscriber device, determining by the EF the existence of a matching network server offering the requested network service and having a server processor with an identity matching the identity of the device processor, and based on the determination that the matching network server exists, establishing by the EF a connection between the matching network server and the subscriber device.