Network Slice Trust Management for Vulnerability-Aware Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing deployment of 5G networks raises concerns about the trustability and security of network slices, particularly in multi-operator and multi-domain environments, where vulnerabilities like Speculative Execution Vulnerabilities can compromise communication reliability and availability, posing risks to critical services such as remote surgery and autonomous vehicles.
Innovation Solution
A method and system for managing network slices that periodically assess and update trust levels based on component vulnerabilities, using mechanisms like Blockchain and Smart Contracts to ensure slice trustability, with automated mechanisms to adjust or rearrange slices to maintain desired trust levels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If network slicing is deployed to support diverse vertical industries and critical services, then service availability and communication reliability are improved, but security vulnerabilities and trust risks increase
Solution Approach 1:
The patent segments the network into multiple isolated slices, each with its own security context and trust level. This allows critical services to be separated from less critical ones, containing security vulnerabilities within specific slices and preventing them from affecting the entire network infrastructure.
Solution Approach 2:
The patent applies different security policies and trust levels to different network slices based on their specific requirements. Critical slices receive enhanced security measures and higher trust validation, while non-critical slices use standard security protocols, optimizing security resources according to local needs.
2Adaptability or versatility
If traditional network architecture is used without slicing, then device and system complexity is low, but ability to meet diverse reliability requirements of vertical industries is insufficient
Solution Approach 1:
The patent creates a universal network slicing framework that can accommodate multiple vertical industries and service types through a common architecture. This framework provides adaptable slice creation, management, and security mechanisms that work across different applications without requiring separate infrastructure for each industry.
Solution Approach 2:
The patent implements dynamic slice creation and management that allows the network architecture to adapt to different service requirements in real-time. Slices can be created, modified, and terminated dynamically based on demand, enabling the network to serve diverse vertical industries flexibly without permanent structural complexity.
3Reliability
If security measures are enhanced to protect against vulnerabilities like Speculative Execution, then security reliability is improved, but network performance and service speed may deteriorate
Solution Approach 1:
The patent applies security measures selectively rather than uniformly across all network traffic. Enhanced security validation and trust verification are applied only to critical slices and sensitive operations, while standard security protocols handle routine traffic, minimizing the performance overhead of security measures.
Solution Approach 2:
The patent introduces security management entities and orchestration layers that act as intermediaries between security mechanisms and network services. These intermediaries efficiently manage security policies, validate trust levels, and coordinate security actions without creating bottlenecks that would significantly impact overall network communication speed.
Data Source
AI summary
The invention relates to a method for operating a slice management entity (100) configured to manage a network slice of a cellular network, the method comprising: —periodically determining a trust level of the network slice based on time dependent trust values of network components used by the network slice, —determining whether the determined trust level of the network slice is lower than a minimum threshold level, wherein in the affirmative, —adapting a controlling of at least one of the network components of the network slice to obtain a new trust value for the at least one network component, wherein the new trust level of the network slice is above the minimum threshold level and is calculated taking into account the new trust value of the adapted controlling of the at least one network component.