RIC Access Control for Scalable E2 Node Traffic in RANs

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In RANs, as the number of E2 nodes connected to a RIC increases, a single instance of a RAN application may not be able to handle all traffic, leading to conflicts due to uncontrolled access by multiple applications, and increasing deployment instances exacerbates these issues.

Innovation Solution

Implementing a distributed RIC with multiple datapath pods to manage traffic between RAN applications and E2 nodes, using access control lists to limit access, and employing vertical and horizontal scaling to optimize resources.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Quantity of substance

If the number of E2 nodes connected to a RIC increases, then the system capacity and coverage are improved, but a single RAN application instance cannot handle all traffic and conflicts increase

Engineering Contradiction:
Improvenumber of E2 nodesVSAvoidtraffic handling capacity
Core Design Contradiction:
Quantity of substanceVSProductivity

Solution Approach 1:

The patent divides the single RAN application instance into multiple deployment instances, where each instance can independently handle traffic from a subset of E2 nodes. This segmentation allows the system to scale horizontally to accommodate increasing numbers of E2 nodes while maintaining manageable traffic loads per instance.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a new dimension of access control by implementing access control lists (ACLs) that regulate which deployment instances can access which E2 nodes and RAN functions. This adds a organizational layer that enables efficient traffic distribution across multiple instances.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

2Productivity

If the number of deployment instances and RAN applications is increased to handle more traffic, then the system capacity is improved, but conflicts increase as multiple applications attempt to access the same E2 nodes

Engineering Contradiction:
Improvetraffic handling capacityVSAvoidconflicts between applications
Core Design Contradiction:
ProductivityVSObject-generated harmful factors

Solution Approach 1:

The patent introduces access control lists as an intermediary mechanism that mediates access between multiple deployment instances and E2 nodes. The ACLs act as a regulatory layer that prevents conflicts by controlling which instances can access which resources, enabling multiple instances to coexist without interference.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent implements differentiated access rights for different deployment instances through ACLs, where each instance is granted specific access permissions to particular E2 nodes and RAN functions. This local quality approach ensures that each instance operates with appropriate privileges, reducing conflicts while maintaining system capacity.

Inventive Principle:
Principle #3Local quality

3Object-generated harmful factors

If access control lists are implemented to limit access to E2 nodes, then conflicts are reduced and system organization is improved, but device complexity increases

Engineering Contradiction:
Improveconflicts between applicationsVSAvoidaccess control configuration
Core Design Contradiction:
Object-generated harmful factorsVSDevice complexity

Solution Approach 1:

The patent implements universal access control lists that can be applied across multiple deployment instances and E2 nodes with a single configuration framework. The ACL mechanism serves multiple functions simultaneously: conflict prevention, traffic management, and access control, reducing the overall complexity despite the added organizational layer.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS12581392B2Access control in a RAN
Publication Date: 2026.03.17 VMWARE INC
  • US12581392B2 patent drawing
  • US12581392B2 patent drawing
  • US12581392B2 patent drawing

AI summary

Some embodiments of the invention provide a method for implementing access controls in a RAN (radio access network) to limit access to base station components of the RAN by RAN applications. The method is performed at a RIC (RAN intelligent controller) that connects the RAN applications to the base station components. The method receives a set of access control data that specifies which RAN applications are allowed to access which base station components. From a particular RAN application, the method receives a data message destined for a particular base station component. Based on the set of access control data, the method determines that the particular RAN application is allowed to access the particular base station component. The method forwards the data message to the particular base station component.