Service Communication Proxy for Trust-Based Network Slice Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional wireless communications systems lack effective mechanisms to prevent the propagation of internal threats within the network, as internal network elements are implicitly trusted, making them vulnerable to compromised network functions that can lead to issues like data theft, service failure, and denial of service.
Innovation Solution
Implementing trust-based access security policies that dynamically evaluate and monitor network functions, applying real-time security measures to restrict access and communication based on continuously updated trust levels, ensuring only trusted network functions can engage in service provision and consumption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If internal network elements are implicitly trusted to simplify operations, then ease of operation is improved, but network security deteriorates as threats can propagate within the network
Solution Approach 1:
The patent segments the network by introducing a Service Communication Proxy (SCP) that acts as an intermediary between network functions. This proxy evaluates trust relationships and enforces access control policies, dividing the network into trusted and untrusted zones. The SCP specifically segments service consumption relationships by monitoring and controlling interactions between network function consumers and producers, preventing threat propagation while maintaining operational simplicity.
Solution Approach 2:
The Service Communication Proxy serves as an intermediary entity that mediates communication between network functions. It evaluates trust relationships using security policies and trust evaluation data, then allows or blocks service requests accordingly. This intermediary layer maintains ease of operation for legitimate services while providing robust security by filtering out malicious communications before they can propagate through the network.
2Reliability
If trust-based security policies are implemented to improve network security, then network security is improved, but device complexity increases due to monitoring and evaluation mechanisms
Solution Approach 1:
The system performs preliminary trust evaluation and security policy checks before allowing service communications. The Service Communication Proxy pre-establishes trust relationships and access control rules based on security policies, so that when service requests occur, the decisions are already predetermined. This preliminary action reduces the complexity of real-time decision-making while maintaining strong security controls.
Solution Approach 2:
The trust evaluation mechanism operates autonomously by automatically monitoring service consumption patterns, evaluating trust relationships, and enforcing access control policies without requiring manual intervention. The Service Communication Proxy self-manages the complexity of security monitoring and policy enforcement, reducing the operational burden on network administrators while maintaining high security standards.
3Reliability
If access control security policies are applied to restrict service access, then network security is improved, but service consumption efficiency deteriorates due to additional evaluation steps
Solution Approach 1:
Trust relationships and access control permissions are established in advance through preliminary evaluation. The Service Communication Proxy pre-approves legitimate service requests based on pre-established trust relationships, so that approved services can proceed without repeated evaluation delays. This preliminary action minimizes the impact on service consumption efficiency while maintaining security controls.
Solution Approach 2:
The system implements periodic trust evaluation rather than continuous monitoring for all communications. Once trust relationships are established, they remain valid for a period unless triggered for re-evaluation. This periodic approach reduces the overhead on service consumption efficiency while maintaining security through regular updates of trust assessments.
Data Source
AI summary
Various aspects of the present disclosure relate to performing security monitoring and trust evaluation of network and application functions and network slices, creating access control security policies based on trust data from the trust evaluation, and enforcing the access control security policies over service providers and consumers. The access control security policies may be updated and enforced on an ongoing basis.