SEPP Connection Termination in 5G Roaming Networks

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Security concerns in roaming scenarios between networks, particularly in 5G networks, arise due to the need for terminating connections over forwarding interfaces, which can lead to unnecessary retries and delays when the security capability negotiated between Security Edge Protection Proxies (SEPPs) is Transport Layer Security (TLS).

Innovation Solution

An apparatus and method are provided to transmit a request to terminate connections over a forwarding interface between SEPPs using a security capability negotiation request, allowing for graceful termination of TLS connections, and ensuring that ongoing message exchanges are completed or timed out before deleting handshake information.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If connections are terminated over the forwarding interface in roaming scenarios, then security is improved, but unnecessary retries and delays occur

Engineering Contradiction:

ImprovesecurityVSAvoiddelays

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by sending a termination request message before actually terminating the connection. This allows the receiving SEPP to prepare for connection termination in advance, completing ongoing message exchanges and cleaning up resources before the connection is formally terminated, thereby avoiding unnecessary retries and delays

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent implements feedback by establishing an acknowledgment mechanism where the receiving SEPP sends a termination response message back to the initiating SEPP. This feedback loop ensures both parties are aware of the connection termination status, preventing unnecessary retries and ensuring coordinated disconnection

Inventive Principle:

Principle #23Feedback

2Reliability

If TLS security capability is negotiated between SEPPs, then security is enhanced, but connection termination becomes complex

Engineering Contradiction:

ImprovesecurityVSAvoidconnection termination complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies segmentation by separating the connection termination process into distinct phases: sending termination request, handling ongoing message exchanges, sending termination response, and final resource cleanup. This segmentation makes the complex TLS connection termination process more manageable and systematic

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent uses the termination request and response messages as intermediaries to coordinate connection termination between SEPPs. These message exchanges serve as mediators that enable both SEPPs to agree on termination timing and conditions, simplifying the overall termination complexity

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS12127001B2Termination of connections over a forwarding interface between networks

Publication Date: 2024.10.22 NOKIA TECHNOLOGIES OY

AI summary

There is provided an apparatus configured to protect security of communication in roaming scenarios between a first network and a second network, the apparatus being a first apparatus residing in the first network and comprising means forin response to a selection of transport layer security as a security capability mechanism, transmitting, to a second apparatus residing in the second network and configured to protect security of communication in roaming scenarios between the first network and the second network, a request to terminate connections over a forwarding interface between the first apparatus and the second apparatus.