Network Event Onboarding for Encrypted Traffic Notifications
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network technologies face challenges in managing event notifications for encrypted traffic, such as HTTPS and QUIC-based applications, and encrypted DNS traffic, as current systems cannot apply traffic redirection or user notifications effectively.
Innovation Solution
A method involving network nodes that support user notification services, enabling registration and policy storage for notifying user equipment of network events, even for encrypted traffic, through a series of requests and responses between network nodes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traffic redirection is applied to notify users of network events, then user notification capability is improved, but it becomes impossible to notify users for encrypted traffic (HTTPS, QUIC) and encrypted DNS traffic
Solution Approach 1:
The patent introduces a preliminary action by having the AF send an onboarding request to the NEF before actual traffic monitoring begins. This onboarding process pre-registers the AF's notification capabilities and preferences with the network core, enabling the system to handle encrypted traffic without needing to decrypt it. The NEF stores this advance information and uses it later to route event notifications appropriately.
Solution Approach 2:
The patent introduces the NEF as an intermediary component between the AF (external application function) and the 5G core network. The NEF receives onboarding requests from external AFs, registers them with the NRF, and manages the connectivity between external applications and internal network events. This intermediary layer allows encrypted traffic to be monitored and notified without requiring the AF to directly access or decrypt the encrypted streams.
2Adaptability or versatility
If the system registers external application functions with the network, then user notification service capability is improved, but network security and trust management complexity increases
Solution Approach 1:
The patent implements a universal onboarding mechanism that handles multiple types of external application functions through a single standardized interface. The onboarding request format, NEF processing logic, and NRF registration procedure are generic and can accommodate different AF types (content providers, notification services, monitoring applications) without requiring separate registration mechanisms. This multi-functional approach simplifies network management despite the diversity of external services.
Solution Approach 2:
The patent establishes a feedback mechanism where the NEF sends registration responses back to the AF, confirming successful onboarding or providing rejection reasons. The NRF also provides feedback to the NEF about registration status. This structured feedback loop enables automated trust management, reducing the need for manual intervention in security decisions while maintaining proper authentication and authorization controls.
Data Source
Figure 1
Figure 2~3
Figure 4~5
AI summary
There is provided a method for handling events in a network. The method is performed by a first network node. The first network node is external to the network and is configured to communicate with the network via a second network node that is internal to the network. The method comprises initiating (102) transmission of a first request towards the second network node. The first request comprises information indicative that the first network node supports a user notification service that notifies one or more user equipments of events in the network.