Trustworthiness Protocol Layer for Decoupled Network Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile network communication protocols integrate security functions closely with communication functions, leading to a heavy workload and complex operations for updates and upgrades, and future networks require a more independent and flexible security framework.
Innovation Solution
Implementing a trustworthiness protocol layer that decouples security functions from communication functions, enabling independent evolution and flexible deployment, with trustworthiness signaling and data processing protocols to manage and transmit trustworthiness information and data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security functions are integrated with communication functions in existing protocols, then security support is provided within the communication framework, but the workload and complexity of updating and upgrading security functions increases significantly
Solution Approach 1:
The patent segments the integrated security-communication protocol system into separate communication protocols and security protocols. The communication protocol layer handles data transmission while the security protocol layer independently manages security functions. This segmentation allows security functions to be updated and upgraded independently without modifying communication protocols, thereby reducing the complexity and workload of security maintenance while maintaining reliable security support.
Solution Approach 2:
The patent extracts security functions from the integrated communication-security protocol and places them into a separate security protocol layer. This extraction enables the security function to be independently evolved and deployed, allowing security updates to be applied without affecting communication functionality, thus resolving the contradiction between providing security support and managing update complexity.
2Reliability
If multiple protocols are modified to update security functions, then security capabilities are enhanced, but the operation becomes more complex and time-consuming
Solution Approach 1:
By segmenting security functions into a dedicated security protocol layer, the patent enables independent evolution of security capabilities. This means security protocols can be updated and upgraded in isolation from communication protocols, significantly reducing the time required for security enhancements without requiring modifications to multiple communication protocols.
3Ease of operation
If security function is closely coupled with communication function, then integrated protocol operation is achieved, but independent evolution and flexible deployment of security function is hindered
Solution Approach 1:
The patent applies segmentation by separating the communication protocol layer from the security protocol layer. This allows the security function to evolve independently and be deployed flexibly across different communication scenarios without being constrained by the communication protocol structure, while still maintaining ease of operation through standardized protocol interfaces.
Solution Approach 2:
The patent creates a universal security protocol layer that can serve multiple communication protocols and scenarios. This security layer provides adaptable and versatile security support that can be independently evolved and deployed across different communication frameworks, enhancing both ease of operation and adaptability.
Data Source
Figure 1
Figure 2
Figure 3~5
AI summary
This application provides a signaling transmission method, a data transmission method, and a communication apparatus, and proposes a trustworthiness protocol and protocol stack of a communication network, including a trustworthiness control plane protocol and protocol stack, and a trustworthiness service plane protocol and protocol stack. The trustworthiness control plane protocol is used for transmission of trustworthiness signaling, management of a trustworthiness capability, subscription to trustworthiness information, negotiation of a trustworthiness policy between communication nodes, a trustworthiness service, and the like. The trustworthiness service plane protocol is used for transmission and processing of trustworthiness data. In this case, a security function and a communication function are decoupled, and the security function can be independently evolved and upgraded. This is conducive to a technology development trend of security function enhancement in a future network. In addition, security functions of some protocols that originally have the security functions are enhanced, and security functions are introduced into underlying connection protocols, to improve network security.