SEAL Data Delivery Policy Control for Secure Cross-Domain Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies face challenges in securely and efficiently sharing data between business actors, particularly in vertical sectors, due to the complexity of configuring Virtual Private Networks (VPNs) and the lack of flexibility in data exchange, which requires IT expertise and is not cost-effective.
Innovation Solution
A system utilizing a wireless network, such as a 3GPP or 5G network, enables secure data sharing between business actors through an extended 5G API, allowing data owners to define sharing preferences and time windows, managed by a trusted regulator, without the need for IT expertise.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If Virtual Private Networks (VPNs) are used for data sharing between business actors, then data security is improved, but system complexity and configuration difficulty increase
Solution Approach 1:
The patent introduces a 5G Network Exposure Function (NEF) as an intermediary service that mediates between data owners and data users. The NEF provides a standardized API interface that simplifies the data sharing process while maintaining security through network-controlled policies, eliminating the need for complex VPN configurations between endpoints.
Solution Approach 2:
The patent replaces the traditional mechanical VPN configuration approach with a software-based policy enforcement mechanism. Instead of configuring network tunnels at the endpoint level, the system uses policy rules defined at the network level to control data flow, substituting complex endpoint configuration with simpler policy-based management.
2Adaptability or versatility
If traditional data sharing methods are used, then data exchange capability is limited, but flexibility and adaptability are reduced
Solution Approach 1:
The patent implements dynamic data sharing capabilities where policies can be created, modified, and deleted in real-time. The system supports time-bound policies, conditional routing, and dynamic QoS parameters that can be adjusted during data exchange, enabling flexible adaptation to changing business requirements without reconfiguring the entire network.
Solution Approach 2:
The system allows dynamic modification of data exchange parameters including QoS levels, data formats, transmission timing, and routing paths. Policies can specify different parameters for different data types, time windows, and business scenarios, enabling fine-grained control and optimization of data sharing efficiency.
3Ease of operation
If IT expertise is required for data sharing configuration, then data security can be maintained, but ease of operation and cost-effectiveness decrease
Solution Approach 1:
The patent enables self-service data sharing where business actors can create and manage their own data exchange policies through the standardized API without requiring IT expertise. The system automatically handles security enforcement, policy validation, and data routing, allowing users to configure data sharing by simply defining business rules rather than implementing complex network configurations.
Solution Approach 2:
The NEF acts as a security intermediary that handles all security-related functions automatically. It validates policies, enforces authentication, and manages encryption without requiring users to configure security parameters manually. This mediator approach maintains security while simplifying operation to basic policy definition.
Data Source
AI summary
Systems and methods are disclosed that relate management of Service Enabler Architecture Layer for verticals (SEAL) data delivery via a cellular communications system. In one embodiment, a method performed by a system for SEAL data delivery via a telecommunication system comprises, at a Vertical Application Layer (VAL) server of a regulator domain, determining a policy for data delivery from a client in a first business actor domain to a VAL server in a second business actor domain wherein the data delivery is via SEAL data delivery communication over telecommunication system. The method further comprises, at the VAL server of the regular domain, providing the policy to a SEAL data delivery server in the regulator domain for enforcement of the policy comprising establishing a data delivery connection between the first business actor domain (SEAL DD client) and the second actor business domain (VAL server).