NFV Authorization Pre-configuration to Reduce Load
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In Network Function Virtualization (NFV) architectures, the authorization subject experiences a heavy load due to the need for authorization for each life cycle management operation, leading to increased processing time and reduced service efficiency.
Innovation Solution
A method that determines, based on an instance ID and a correspondence between the instance ID and life cycle management operation type, whether the operation type is authorized, allowing direct resource operation requests to the VIM without needing authorization from the authorization subject, thereby reducing the load on the authorization subject and improving processing efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authorization is required for each life cycle management operation, then security and control are improved, but processing time increases and service efficiency deteriorates
Solution Approach 1:
The patent applies preliminary action by pre-establishing authorization relationships between VNFMs and VNFs during the instantiation phase. The NFVO configures authorization information in advance, allowing VNFMs to directly perform authorized operations without repeated authorization requests. This resolves the contradiction by maintaining security through pre-configured authorization while improving efficiency by eliminating real-time authorization overhead.
Solution Approach 2:
The patent implements preliminary action through pre-configuring authorization information in the NFVO before VNF instantiation. This allows the system to maintain strict authorization control while eliminating the need for repeated authorization requests during operational phases, thus resolving the contradiction between security and processing efficiency.
2Measurement precision
If authorization requests are processed for each operation, then authorization accuracy is improved, but processing time increases
Solution Approach 1:
The patent applies preliminary action by pre-establishing authorization relationships between VNFMs and VNFs during the instantiation phase. The NFVO configures authorization information in advance, allowing VNFMs to directly perform authorized operations without repeated authorization requests. This resolves the contradiction by maintaining security through pre-configured authorization while improving efficiency by eliminating real-time authorization overhead.
3Device complexity
If the authorization subject processes all requests, then centralized control is improved, but load on authorization subject increases
Solution Approach 1:
The patent extracts the authorization decision-making function from the NFVO and embeds it directly in the VNFM through pre-configured authorization information. This allows the VNFM to autonomously determine whether it can perform operations without contacting the NFVO, significantly reducing the NFVO's processing load while maintaining centralized control through the initial authorization configuration.
Solution Approach 2:
The patent enables self-service by allowing VNFMs to autonomously perform authorized operations based on pre-configured authorization information without needing to contact the NFVO for each operation. This reduces the processing load on the NFVO while maintaining control through the initial authorization setup.
4Reliability
If repeated authorization requests are made, then authorization verification is improved, but service efficiency deteriorates
Solution Approach 1:
The patent applies preliminary action by pre-establishing authorization relationships between VNFMs and VNFs during the instantiation phase. The NFVO configures authorization information in advance, allowing VNFMs to directly perform authorized operations without repeated authorization requests. This resolves the contradiction by maintaining security through pre-configured authorization while improving efficiency by eliminating real-time authorization overhead.
Data Source
Figure 1
Figure 2~3
Figure 4a
AI summary
The present invention provides a life cycle management method and an apparatus. The method includes: receiving a life cycle management operation request for a first virtualized network function VNF instance, where the life cycle management operation request includes an instance identifier ID of the first VNF instance and an operation type; determining, according to a correspondence between an instance ID of a VNF instance and a life cycle management operation type, that the operation type falls within life cycle management operation types corresponding to the instance ID, where the life cycle management operation type in the correspondence represents that the life cycle management operation type is authorized by an authorization subject; and initiating a resource operation request to a virtualized infrastructure manager VIM, where the resource operation request includes the instance ID.