Network Function Data Minimization via Encryption

The patent introduces an encryption mechanism as an intermediary between the sender and receiver of vendor-specific attributes. The sender encrypts the arbitrary information elements using the receiver's public key before transmission, and the receiver decrypts them using its private key. This intermediary encryption layer ensures that intermediate network functions cannot access the content, thus maintaining data security while preserving the flexibility to send arbitrary information elements.

The patent segments the data processing function into two parts: intermediate network functions handle only the encrypted form of vendor-specific attributes (maintaining communication reliability through proper routing and delivery), while the final receiver performs the decryption operation. This segmentation ensures that intermediate functions never expose the plaintext data, thus reducing data exposure risks while maintaining communication reliability.

The patent implements a self-service encryption model where each network function generates its own key pair (public and private keys) and manages its own encryption and decryption operations. The receiver publishes its public key through the service registry, and the sender automatically retrieves and uses it for encryption. This self-service approach distributes the cryptographic processing burden across individual nodes rather than requiring complex centralized key management infrastructure.