Network Slice Routing for Secure Private-Public Roaming
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional systems for enterprise networks lack seamless integration with operator networks, leading to privacy, security, and reliability issues due to non-secure shared slices that allow operator networks access to enterprise user data.
Innovation Solution
A method and system for establishing secure connections between private and public networks using edge managers, enabling seamless roaming and data exchange while maintaining privacy and reliability, utilizing a neutral hosted core for routing and resource sharing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If non-secure shared slices are used to integrate enterprise networks with operator networks, then seamless integration and resource sharing are achieved, but privacy and security are compromised due to operator network access to enterprise user data
Solution Approach 1:
The patent segments the network into distinct virtual network slices - a public network slice for operator services and a private network slice for enterprise services. Each slice operates independently with isolated data paths, allowing seamless integration at the network level while maintaining security boundaries that prevent operator access to enterprise data.
Solution Approach 2:
The patent introduces a network slice selector and secure gateway as intermediary components between the public and private network slices. These intermediaries manage data routing, enforce security policies, and control access permissions, enabling integration while protecting enterprise data from unauthorized operator access.
2Reliability
If dedicated private network infrastructure is deployed to ensure security and privacy, then reliability and isolation are improved, but device complexity and deployment cost increase
Solution Approach 1:
The patent merges public and private network functionalities into a single unified infrastructure using virtualization technologies. Instead of deploying separate physical networks, the system combines operator network resources with enterprise network requirements through virtual network slices, reducing device complexity while maintaining security isolation.
Solution Approach 2:
The patent creates a multi-functional network infrastructure that serves both public operator services and private enterprise services simultaneously. The same physical network infrastructure supports multiple network slices with different security requirements, eliminating the need for dedicated separate infrastructure and reducing overall system complexity.
3Productivity
If network slices are shared between public and private networks to utilize existing resources, then productivity and resource efficiency are improved, but security risks increase due to potential data access by operator network
Solution Approach 1:
The patent applies different security qualities to different parts of the shared infrastructure. The public network slice maintains standard security levels for operator services, while the private network slice implements enhanced security measures including encrypted data paths, strict access controls, and isolated data planes. This local differentiation allows resource sharing while minimizing security risks to enterprise data.
Data Source
AI summary
The present disclosure describes solutions for seamless enterprise network integration with operator networks. Enterprise networks can include full network resources to provide a complete, isolated network. The enterprise network can also host mobile network operator users with edge managers acting as routing agents. Moreover, when an enterprise moves outside of the enterprise network, the enterprise user can still access the enterprise network via an operator network without compromising security, privacy, and reliability. A neutral hosted core can be used as a routing agent to the enterprise network from one or more operator networks.