PDU Session Management Using SBA and SMF Key Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network architectures face limitations in managing complex services required by emerging technologies like 5G, cloud, and IoT, particularly in providing flexible and scalable PDU session management.
Innovation Solution
Implementing a Service-Based Architecture (SBA) for managing PDU sessions through direct message exchange between a base station and SMF using SBI, enabling virtualized network functions to communicate via APIs, and utilizing SMF-related keys for encryption and decryption of session management requests.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a Service-Based Architecture (SBA) is implemented for PDU session management, then scalability and adaptability are improved, but device complexity increases due to virtualized network functions and API-based communication
Solution Approach 1:
The network is segmented into distinct virtualized functions (AMF, SMF, UPF, PCF) that can be independently deployed and managed. Each function handles specific aspects of PDU session management, allowing the system to scale by adding or modifying individual functions without redesigning the entire architecture.
Solution Approach 2:
The SBA framework provides universal service management capabilities through standardized APIs that can handle multiple service types (eMBB, mMTC, uRLLC) and various PDU session operations (establishment, modification, release) through a common architectural interface, enhancing adaptability across different service scenarios.
2Productivity
If direct message exchange between base station and SMF using SBI is implemented, then processing speed and productivity are improved, but device complexity increases due to encryption and decryption operations
Solution Approach 1:
Security keys are pre-established between network functions before PDU session management operations begin. The AMF and SMF have pre-configured security contexts that enable rapid encryption and decryption of messages during session establishment, modification, and release without requiring complex real-time key generation.
Solution Approach 2:
The AMF acts as an intermediary that facilitates secure communication between the base station and SMF. It manages the transmission of encrypted PDU session management messages, handling the complexity of security operations while allowing the SMF to focus on session management functions.
3Adaptability or versatility
If virtualized network functions are used for PDU session management, then adaptability and service flexibility are improved, but loss of information increases due to encryption and decryption of session requests
Solution Approach 1:
The system implements feedback mechanisms where the receiving function verifies the integrity and correctness of decrypted messages before processing. The SMF verifies the authenticity of PDU session establishment requests from the base station, and the base station verifies responses from the SMF, ensuring that no information is lost or corrupted during encryption/decryption operations.
Data Source
AI summary
In a method for establishing a PDU session, the method includes: receiving, by an SMF, a PDU session creation request message from an AMF; decrypting, by the SMF, a PDU session establishment request through an SMF-related key and generating a mapping table; performing an association procedure by selecting a PCF and at least one UPF based on the decrypted PDU session establishment request; and encrypting a PDU session establishment accept through the SMF-related key and transmitting a PDU session resource setup including the PDU session establishment accept to a base station.