URSP App Identity Routing for Secure Network Slice Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
User equipment can be vulnerable to spoof applications that occupy operator resources due to lack of uniqueness verification, leading to inefficient resource utilization.
Innovation Solution
A network device sends URSP information to user equipment, including App Store Id, App Id, and slice parameter information, ensuring that only authorized applications route through specified network slices, preventing spoof applications from accessing operator resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If applications are downloaded from platforms without uniqueness verification, then users can access more application sources, but spoof applications can occupy operator resources
Solution Approach 1:
The patent introduces an application identifier verification mechanism as an intermediary between the application download source and the network slice selection. The AMF network element verifies the application identifier against the URSP rule before allowing network slice access, thereby mediating between diverse download sources and reliable resource allocation, preventing spoof applications from occupying operator resources while maintaining access to multiple application sources
Solution Approach 2:
The patent implements a feedback mechanism where the terminal device reports application identifier information to the network side (AMF), which then verifies this information against stored URSP rules. This feedback loop enables continuous verification of application authenticity, allowing the system to adaptively control network slice access based on verified application identities while maintaining support for multiple download sources
2Reliability
If URSP information includes App Store Id and App Id verification, then spoof applications are prevented from occupying resources, but the system complexity increases
Solution Approach 1:
The patent extracts the application identifier verification function from the terminal device and relocates it to the network side (AMF network element). The terminal only needs to report application identifier information, while the complex verification logic and rule management are centralized on the network side, reducing terminal complexity while maintaining reliable resource protection through dual-identifier verification
Solution Approach 2:
The patent implements preliminary action by pre-configuring URSP rules with application store identifiers and application identifiers on the network side before applications are downloaded. When an application is installed, the terminal simply reports the pre-defined identifiers, and the network side performs verification against pre-established rules, avoiding complex real-time analysis and reducing system complexity while ensuring reliable resource protection
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
An application data transmission method, user equipment, and system are provided. The method includes: The user equipment receives a first message from a network device. The first message includes UE route selection policy URSP information. The URSP information includes an application store identifier App Store Id, an application identifier App Id, and slice parameter information. The App Store Id is used to identify an application store, the App Id is used to identify an application, and the slice parameter information is used to indicate a sliced network. The user equipment runs a first application, and transmits data of the first application through the sliced network indicated by the slice parameter information. The first application is from the application store indicated by the App Store Id in the USRP information, and an App Id of the first application is the same as the App Id in the URSP information. In this method, usage of operator resources by a spoof application is avoided, and resource utilization is effectively improved.