Core Network Slice Selection Using Terminal Security Information
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing communication traffic and simultaneous connections of various devices in 5G networks require advanced network security techniques to manage and accommodate terminal apparatuses appropriately, as existing systems struggle to handle these new challenges.
Innovation Solution
A core network node and MEC server configured to send commands and messages based on security information to accommodate terminal apparatuses in appropriate network slices, with detection units identifying threats and vulnerabilities to facilitate secure network slicing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional network security techniques (intrusion detection system, firewall) are used, then basic security protection is provided, but they cannot handle the new security challenges in 5G networks with increased communication traffic and simultaneous connections of various devices
Solution Approach 1:
The patent segments the network into multiple network slices, each with different security requirements and characteristics. By dividing the network infrastructure into isolated slices, the system can apply different security policies and techniques to different slices, thereby improving both security reliability and adaptability to diverse 5G scenarios without requiring a complete overhaul of traditional security systems.
Solution Approach 2:
The patent changes security parameters dynamically based on terminal apparatus security information. The core network node adjusts security parameters such as authentication requirements, encryption levels, and access control policies according to the security capabilities and threat levels of different terminals, enabling the security system to adapt to various 5G network scenarios while maintaining robust protection.
2Ease of operation
If more network facilities are held within the 5G system to manage various devices and providers, then network management capability is improved, but system complexity increases
Solution Approach 1:
The patent implements a universal security management mechanism that can handle multiple types of terminal apparatuses, providers, and security scenarios through a single framework. The core network node is designed to universally process security information from different sources and apply appropriate security policies across various network slices, thereby improving network management capability without proportionally increasing system complexity.
Solution Approach 2:
The patent introduces an intermediary security information processing mechanism between terminal apparatuses and network facilities. This intermediary layer collects, analyzes, and standardizes security information from diverse sources, then translates it into appropriate security parameters for network slice selection. This mediator simplifies the management of multiple devices and providers by providing a unified interface and processing logic.
Data Source
AI summary
In order to appropriately accommodate a terminal apparatus, based on security information, a core network node 350 configured to belong to a core network forming a plurality of network slices includes a communication processing unit configured to send, to a terminal apparatus 100, a command indicating a parameter related to a network slice for accommodating the terminal apparatus 100, based on security information related to security of the terminal apparatus 100.