5G Core Unikernel Network Isolation and Resource Optimization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing 5G core deployments using virtual machines with general-purpose operating systems face inefficiencies in resource utilization, security vulnerabilities, and difficulty in isolating issues due to large attack surfaces and unnecessary processes, leading to suboptimal latency, throughput, and security.
Innovation Solution
Provisioning a 5G core as a network of unikernels, where each service runs on a separate unikernel virtual machine, minimizing the operating system components to only those needed, reducing the attack surface, and allowing for granular resource allocation and easier scaling and fault tolerance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If virtual machines with general-purpose operating systems are used to deploy 5G core services, then ease of operation and versatility are improved, but resource utilization efficiency deteriorates due to unnecessary processes consuming resources
Solution Approach 1:
The patent extracts and removes unnecessary operating system components and processes from the virtual machine environment, retaining only the essential elements required for 5G core service operation. This creates a streamlined system that eliminates resource consumption by irrelevant processes while preserving the operational capabilities needed for 5G network functions.
Solution Approach 2:
The patent segments the 5G core services into isolated containers or namespaces within the virtual machine environment, allowing each service to run in its own controlled space. This segmentation prevents unnecessary processes from interfering with service operations and enables independent resource management for each service component.
2Adaptability or versatility
If virtual machines with general-purpose operating systems are used to deploy 5G core services, then adaptability and versatility are improved, but security deteriorates due to large attack surfaces
Solution Approach 1:
The patent extracts and eliminates unnecessary operating system components that expand the attack surface, retaining only the minimal required for 5G core functionality. This reduction in system complexity directly decreases the number of potential security vulnerabilities while preserving the adaptability needed for various 5G service deployments.
Solution Approach 2:
The patent implements segmentation through containerization or namespace isolation, separating 5G core services from the host operating system and from each other. This isolation creates security boundaries that limit the impact of potential attacks, allowing the system to maintain versatility while improving security posture.
3Ease of operation
If virtual machines with general-purpose operating systems are used to deploy 5G core services, then ease of operation is improved, but fault isolation and issue identification deteriorate due to interconnected processes
Solution Approach 1:
The patent segments 5G core services into isolated units using containerization or namespace technology, where each service operates in its own controlled environment. This segmentation enables independent fault isolation, allowing operators to identify and troubleshoot issues in one service without being affected by or having to analyze other services, thereby simplifying operation while improving detectability.
4Adaptability or versatility
If virtual machines with general-purpose operating systems are used to deploy 5G core services, then versatility is improved, but latency and throughput performance deteriorate due to resource contention
Solution Approach 1:
The patent extracts unnecessary processes and components from the virtual machine environment, eliminating source of resource contention. By removing these extraneous elements, the system achieves better resource availability for 5G core services, improving latency and throughput while retaining versatility through configurable service deployments.
Solution Approach 2:
The patent implements resource segmentation through container isolation, allowing each 5G core service to have dedicated or guaranteed resource allocations. This prevents resource contention between services while maintaining the versatility to deploy different service configurations, thereby improving performance metrics without sacrificing adaptability.
Data Source
AI summary
Provisioning a 5G core using unikernels includes provisioning the 5G core as a network of unikernels. The 5G core comprises a plurality of 5G network functions. Each 5G network function in the plurality of 5G network functions is run in a different unikernel in the network of unikernels. The unikernels communicate with each other over a private network.