NRF-Learned Category 1 Message Filtering for 5G SBI Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Manual configuration of Category 1 message filtering rules in 5G networks is labor-intensive and prone to human error, necessitating a more efficient and accurate method to secure network interfaces.
Innovation Solution
A system and method for automatically configuring Category 1 message filtering rules by learning topology information from the Network Function Repository Function (NRF), utilizing NF profiles to dynamically update filtering rules based on NF profile changes, thereby reducing operational overhead and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual configuration of Category 1 message filtering rules is performed, then network security is improved, but labor intensity and human error increase
Solution Approach 1:
The SEPP automatically discovers NF profiles from the NRF and generates Category 1 message filtering rules without manual intervention. The system subscribes to NF profile changes and dynamically updates filtering rules based on discovered services, enabling self-configuration that eliminates labor-intensive manual rule creation while maintaining security
Solution Approach 2:
The SEPP establishes a subscription mechanism with the NRF to receive real-time notifications of NF profile changes. This feedback loop enables the filtering rules to be dynamically updated automatically when network topology changes, ensuring continuous synchronization without manual reconfiguration
2Reliability
If manual configuration of Category 1 message filtering rules is performed, then network security is improved, but susceptibility to human error increases
Solution Approach 1:
The automatic discovery and rule generation process eliminates manual configuration steps that are prone to human error. The SEPP programmatically extracts service information from NF profiles and generates syntactically correct filtering rules, ensuring configuration accuracy while maintaining security requirements
Solution Approach 2:
The manual mechanical process of configuring filtering rules is replaced with an automated information processing system. The SEPP uses machine-to-machine communication with the NRF to discover profiles and algorithmically generates filtering rules, substituting human operators with automated logic that eliminates configuration errors
3Productivity
If automatic configuration of Category 1 message filtering rules is implemented, then operational overhead is reduced, but automation extent increases
Solution Approach 1:
The SEPP autonomously performs NF profile discovery, rule generation, and dynamic updates without human intervention. This complete automation of the filtering rules configuration process dramatically reduces operational overhead while achieving high automation levels through self-service mechanisms
Data Source
AI summary
A method for automatic configuration and use of Category 1 message filtering rules includes, at a network function (NF), subscribing, with an NF repository function (NRF), to receive notification of NF profile changes. The method further includes receiving, from the NRF and as a result of the subscribing, notification of an NF profile change. The method further includes automatically configuring, based on the notification of the NF profile change, at least one Category 1 message filtering rule implemented. The method further includes using the at least one Category 1 message filtering rule to filter service based interface (SBI) messages.