Roaming Consent Exchange for Secure NWDAF User Data Analytics
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In roaming scenarios, the exchange of user equipment (UE) data between different networks exposes privacy risks due to the lack of proper user consent management, leading to potential privacy leakage.
Innovation Solution
A method and apparatus that facilitate the exchange of user consent information between network functions (NF), network data analytics functions (NWDAF), and unified data management (UDM) to ensure data and analysis results are shared only with user consent, using identity information and policy information to manage data access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If user data is exchanged between VPLMN and HPLMN for analysis, then data analytics capability is improved, but user privacy security deteriorates
Solution Approach 1:
The patent introduces an intermediary consent management mechanism that mediates between data sharing needs and privacy protection. The system uses consent indicators and policy information as intermediaries to control data flow between VPLMN and HPLMN, allowing analytics while preventing unauthorized privacy exposure.
Solution Approach 2:
The patent implements preliminary consent collection and verification before data exchange occurs. By obtaining and validating user consent information in advance through the UDM and NWDAF, the system ensures that data analytics operations only proceed when proper authorization is already in place, preventing privacy violations.
2Reliability
If user consent information is collected and verified, then privacy security is improved, but system complexity increases
Solution Approach 1:
The patent makes existing network functions multi-functional by enabling the UDM and NWDAF to handle both traditional tasks and new consent management responsibilities. This universal approach allows the system to gain privacy protection capabilities without adding completely new complex components, as existing elements are extended to perform additional functions.
Solution Approach 2:
The system implements self-service mechanisms where network elements automatically retrieve and verify consent information without manual intervention. The NWDAF autonomously queries the UDM for consent indicators, and the system self-regulates data access based on policy information, reducing operational complexity while maintaining security.
3Loss of information
If data exchange between networks is enabled, then data analytics effectiveness is improved, but information security deteriorates
Solution Approach 1:
The patent implements feedback mechanisms where the system continuously monitors and verifies consent status before and during data exchange operations. The NWDAF receives feedback from the UDM regarding consent indicators and adjusts data access accordingly, ensuring that analytics effectiveness is maintained only when information security requirements are satisfied.
Data Source
AI summary
An information processing method is performed by a network function (NF) in a visited public land mobile network (VPLMN), and includes: sending first request information to a network data analytics function (NWDAF), thereby causing the NWDAF to send second request information to a unified data management (UDM); wherein the first request information includes first identity information of at least one first user equipment (UE), and the first request information is configured to request data and/or analysis result of the first UE; the second request information includes the first identity information, and the second request information is configured to request user consent information of the first UE.