Service Mesh Smart Contracts for 5G Network Slice Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current systems lack efficient methods for exchanging information, value, or tokens between blockchain networks and the physical world, particularly in securing and managing network slices in 5G core networks, which requires enhanced security, scalability, and interoperability.

Innovation Solution

A blockchain-enabled service-based cloud-native function (CNF) architecture is implemented, incorporating a service mesh network with smart contracts that record network slicing information using standardized protocols, ensuring secure resource allocation and management across multiple blockchain networks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional centralized authentication systems are used in 5G core networks, then ease of operation is maintained, but security and trust between network functions are compromised

Engineering Contradiction:
ImprovesecurityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a service mesh as an intermediary layer between network functions in the 5G core. This service mesh implements zero-trust security principles by mediating all communications, authenticating services, and enforcing security policies without requiring changes to the underlying network functions. The service mesh acts as a trusted intermediary that establishes security boundaries while maintaining operational simplicity.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent segments the 5G core network into distinct functional components with clearly defined trust boundaries. By dividing the system into network functions that communicate through standardized interfaces and a service mesh layer, each component can be independently secured and managed. This segmentation allows security to be implemented at the interface level rather than requiring complex integration security.

Inventive Principle:
Principle #1Segmentation

2Adaptability or versatility

If network slicing is implemented to manage diverse 5G services, then adaptability and versatility improve, but security management and resource isolation become more complex

Engineering Contradiction:
Improveservice diversityVSAvoidsecurity management complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent implements a universal service mesh architecture that handles multiple network slices through a single standardized security framework. The service mesh provides multi-functional capabilities including authentication, authorization, encryption, and policy enforcement that work across all network slices regardless of their specific requirements. This universal approach allows diverse 5G services to be managed through consistent security mechanisms rather than requiring slice-specific security implementations.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Productivity

If smart contracts are used to manage network slicing information, then automation and efficiency improve, but system complexity and deployment difficulty increase

Engineering Contradiction:
Improveautomation efficiencyVSAvoiddeployment complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent implements self-service smart contracts that automatically execute network slicing operations without requiring manual intervention. The smart contracts contain pre-defined logic for resource allocation, service authentication, and policy enforcement that automatically respond to network events and service requests. This self-service capability enables automated network slicing management while reducing the need for complex deployment procedures, as the contracts are designed to be self-configuring and self-managing.

Inventive Principle:
Principle #25Self-service

4Reliability

If blockchain technology is integrated into 5G core networks for secure transactions, then reliability and security improve, but processing speed and system complexity worsen

Engineering Contradiction:
Improvetransaction securityVSAvoidprocessing speed
Core Design Contradiction:
ReliabilityVSSpeed

Solution Approach 1:

The patent extracts the blockchain functionality into a separate, specialized layer that handles only critical security and authentication operations. Rather than implementing full blockchain processing across all network functions, the blockchain capability is extracted as a dedicated service that provides security verification and transaction validation. This extraction allows the main network operations to proceed at high speed while blockchain provides asynchronous security backing for critical operations.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS11316933B2Service meshes and smart contracts for zero-trust systems
Publication Date: 2022.04.26 VM INNOVATIONS I LLC
  • US11316933B2 patent drawing
  • US11316933B2 patent drawing
  • US11316933B2 patent drawing

AI summary

A blockchain-enabled service-based cloud native function (CNF) architecture including an application service mesh network comprising a plurality of applications configured to communicate with each other. A plurality of smart contracts including network slicing information from the application service mesh network are recorded to a blockchain network. The network slicing information is related to one or more of a standard protocol network exposure function (NEF), a standard protocol service communication proxy (SCP), and a standard protocol network repository function (NRF).