SDN Packet Collection for Virtualized Core Session Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In virtualized mobile core networks, there is a lack of effective methods for analyzing traffic in sections like Gn, S5/8, and N11 without physical cables, identifying attack targets using GTP tunnels, and maintaining terminal sessions across 3G, 4G, and 5G environments, especially during handovers.
Innovation Solution
A packet collection method and apparatus using software-defined networking (SDN) and an attack detection device to transmit and analyze control and user data packets across virtualized mobile core network devices, forming session chains and detecting patterns, applicable to 3G, 4G, and 5G networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If virtualized mobile core network devices communicate without physical cables, then network flexibility and adaptability are improved, but traffic analysis capability and security monitoring are worsened
Solution Approach 1:
The patent introduces a packet collection apparatus as an intermediary component in the virtualized core network. This apparatus includes a control plane packet collector that intercepts and collects control plane packets transmitted between virtualized network functions (VNFs), and a user plane packet collector that collects user plane packets. By placing this intermediary monitoring system in the network traffic flow, the patent enables traffic analysis and security monitoring in virtualized environments where traditional physical cable-based monitoring is no longer effective.
2Speed
If GTP tunnel is used for data transmission with unique TEID, then transmission efficiency is improved, but attack target identification becomes difficult
Solution Approach 1:
The patent implements a feedback mechanism where the packet collection apparatus collects GTP tunnel packets with TEID information, extracts and analyzes the tunnel identification data, and provides feedback about potential attack targets. The system monitors the GTP tunnel traffic, identifies patterns in TEID usage, and can detect anomalies that indicate attacks. This feedback loop enables security monitoring while maintaining the efficient GTP tunnel transmission protocol.
3Reliability
If session management is maintained across handovers, then service continuity is improved, but device complexity increases
Solution Approach 1:
The patent implements a universal packet collection apparatus that can collect and manage packets across multiple network technologies (3G, 4G, 5G) and different plane types (control plane, user plane). The apparatus includes universal session management capabilities that track sessions across handovers between different network technologies and base stations. By creating a multi-functional system that handles diverse scenarios through a unified approach, the patent maintains service continuity without proportionally increasing complexity for each individual case.
Data Source
AI summary
A packet collection apparatus for virtualization core network session management according to an embodiment of the present disclosure is a packet collection apparatus for virtualization core network session management including a mobile communication virtual machine, software-defined networking (SDN), and an attack detection device, wherein the packet collection apparatus for virtualization core network session management performs an operation (A) of transmitting a control-related packet to be transmitted via a session management unit of the attack detection device through the SDN when transmission of the control-related packet occurs in the mobile communication virtual machine, and the session management unit included in the attack detection device performs an operation (B) of extracting and collecting session information from the transmitted control-related packet.