PCF Restricted Service Policy for Abnormal IoT Terminals
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
IoT devices face security risks and inefficient management due to vulnerability to hacker attacks and the need for manual maintenance after deregistration, leading to reduced management efficiency.
Innovation Solution
A method involving a policy control function (PCF) that provides restricted services by sending an identifier and a restricted service policy to network elements when an IoT device is abnormal, rather than deregistering it, allowing for controlled data flow management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the abnormal IoT device is deregistered to reduce security risks, then security risks are reduced, but maintenance and management can only be manually performed, lowering management efficiency
Solution Approach 1:
The patent implements dynamic service restriction policies that can be adjusted based on device abnormality detection. Instead of static deregistration, the system dynamically modifies service permissions (e.g., restricting data flows, limiting access) while keeping the device registered, enabling both security risk reduction and automated continued management
Solution Approach 2:
The patent introduces an intermediate service restriction mechanism between complete registration and full deregistration. This intermediary state allows the device to remain in the network with limited permissions, enabling automated security control while maintaining management capability through policy enforcement functions
2Productivity
If the abnormal IoT device is kept registered to maintain automated management, then management efficiency is improved, but security risks increase due to vulnerability to hacker attacks and abuse
Solution Approach 1:
The patent applies different service quality levels to different devices based on their operational status. Normal devices receive full service permissions while abnormal devices have restricted permissions (e.g., limited data flows, restricted access to certain network functions), achieving localized security control without affecting overall management efficiency
Solution Approach 2:
The patent changes service permission parameters dynamically based on device status. When a device is detected as abnormal, the system modifies parameters such as data flow restrictions, access permissions, and service priorities, thereby reducing security risks while maintaining the device's registered state for automated management
Data Source
AI summary
A method for providing a restricted service and a communications device, where the method includes: receiving, by a policy control function (PCF), an identifier of a terminal and indication information, where the indication information is used to indicate that the terminal is in a state of exception or indicate an exception type of the terminal; and sending, by the PCF, the identifier of the terminal and a first restricted service policy according to the indication information, where the first restricted service policy is used to provide a restricted service for the terminal.