Network Slice Security Templates for Policy Conflict Resolution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In wireless networks, security policy conflicts between different network functions can lead to valid traffic being blocked, causing latency, network outages, and excessive resource consumption, rendering network slices non-functional.
Innovation Solution
A design function identifies security policy conflicts and generates a security template to mitigate these conflicts by prioritizing and overriding conflicting policies, ensuring valid traffic is allowed and reducing resource consumption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security policies are implemented in network functions, then network security is improved, but traffic blocking and network functionality deteriorate due to policy conflicts
Solution Approach 1:
The patent introduces a design function as an intermediary that receives security policy indications from multiple network functions, simulates traffic flow through the network slice, and detects conflicts before deployment. This mediator resolves conflicts by generating a unified security template that all network functions can implement without blocking valid traffic, thus maintaining both security and functionality.
Solution Approach 2:
The patent performs preliminary simulation of traffic flow through the network slice before actual deployment of security policies. By pre-detecting potential conflicts between security policies of different network functions, the system can resolve them in advance by generating an optimized security template, preventing traffic blocking and network outages before they occur.
2Reliability
If security policies are implemented to protect against attacks, then security protection is improved, but resource consumption increases due to conflict resolution overhead
Solution Approach 1:
The design function performs preliminary simulation and conflict detection during the network slice setup phase, before actual traffic flows through the network. By resolving all security policy conflicts in advance and generating a unified security template, the system avoids the excessive resource consumption that would result from continuous conflict resolution, retransmission attempts, and network outages during operation.
3Reliability
If security policies are enforced strictly, then security enforcement is improved, but latency increases due to traffic blocking and retransmission
Solution Approach 1:
The patent performs preliminary simulation of traffic flow through the network slice to detect and resolve security policy conflicts before deployment. By identifying and resolving conflicts in advance, the system ensures that valid traffic flows smoothly without being blocked by conflicting security policies, thus avoiding the latency caused by retransmission attempts and network outages.
Solution Approach 2:
The design function acts as an intermediary that creates a unified security template by resolving conflicts between security policies of different network functions. This template ensures that security enforcement is maintained while eliminating the traffic blocking and retransmission issues that cause latency, allowing smooth traffic flow through the network slice.
Data Source
AI summary
In some implementations, a design function may receive a corresponding set of security policy indications. The design function may identify a plurality of network slices, each network slice including at least a subset of the set of network functions. The design function may generate at least one graph representing the plurality of network slices and may simulate, using the at least one graph, traffic through the plurality of network slices. Accordingly, the design function may determine a security template based on at least one conflict detected based on the simulating and may transmit the security template for resolving the at least one conflict.