Secure IP Assignment for O-Cloud Base Station Traffic
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mechanisms for IP address allocation in disaggregated Evolved Node B (eNB) or Next Generation Node B (gNB) architectures only allow for a single IP address, limiting bi-directional traffic between multiple elements within the network.
Innovation Solution
A method involving a base station that transmits an Open Cloud (O-cloud) available registration request through a first secure tunnel to an operator network system, terminates the tunnel upon receiving network information for multiple O-cloud entities, and establishes a second secure tunnel using authenticated network information and a base station operator signed certificate, allowing bi-directional traffic.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a single IP address is allocated to the base station, then the existing mechanism is simple and easy to implement, but multiple network elements within the eNB or gNB cannot be addressed and bi-directional traffic cannot be established
Solution Approach 1:
The patent segments the IP address allocation process into two distinct phases: initial base station allocation (simplifying early deployment) and subsequent element-specific allocation (enabling multi-element communication). This segmentation allows the system to progress from a simple single-IP model to a complex multi-IP model only when needed, resolving the contradiction between versatility and complexity.
Solution Approach 2:
The IP allocation mechanism is made dynamic through conditional allocation based on registration requests and network information exchange. The system automatically transitions from static single-IP allocation to dynamic multi-IP allocation when O-cloud entities register and request additional addresses, allowing the complexity to adapt to actual operational needs rather than being fixed in advance.
2Productivity
If multiple IP addresses are allocated to network elements, then bi-directional traffic between multiple elements is enabled, but the IP allocation mechanism becomes more complex
Solution Approach 1:
The patent performs preliminary actions by establishing the base station's IP address and secure tunnel before any O-cloud entities are deployed or registered. The framework prepares the infrastructure in advance, and only then activates additional IP allocations when entities register, reducing the complexity burden during initial deployment while enabling high productivity when needed.
Solution Approach 2:
The operator network system acts as an intermediary that manages the complex IP allocation process. Rather than requiring the base station to handle multiple IP allocations independently, the operator network coordinates the allocation of multiple IP addresses to different O-cloud entities, simplifying the base station's operational complexity while enabling multi-element traffic handling.
3Reliability
If a secure tunnel is established between the operator network and base station, then communication security is ensured, but network information exchange and authentication become more complex
Solution Approach 1:
The authentication and information exchange process is segmented into distinct phases: initial authentication for secure tunnel establishment, followed by separate registration and authentication steps for each O-cloud entity. This segmentation maintains strong security through multiple authentication layers while managing complexity by processing each phase independently and systematically.
Solution Approach 2:
The patent performs preliminary authentication and secure tunnel establishment before any O-cloud entity registration. This preliminary action creates a secure foundation that simplifies subsequent authentication steps, as the base station already has authenticated credentials and tunnel parameters in place, reducing the complexity of adding additional authenticated entities later.
Data Source
AI summary
Embodiments of present disclosure disclose internet protocol (IP) assignment and secure traffic for network elements deployed over untrusted transport network. In an embodiment, base station (101) transmits an Open Cloud (O-cloud) available registration request to an operator network system (103) through First Secure Tunnel (FST) (133) established between operator network system (103) and base station (101). The FST is terminated upon receiving network information related to each of plurality of O-cloud entities of O-cloud through FST from operator network system. Thereafter, base station (101) transmits second authentication request to operator network system for establishing Second Secure Tunnel (SST) (135) between operator network system and base station. Finally, base station establishes SST between operator network system and base station when network information is authenticated. The established SST allows bi-directional traffic related to each of plurality of O-cloud entities. The present disclosure helps in handling the traffic at the operator network system.