Virtual Mobile Core Network for Secure Wi-Fi and Cellular Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems struggle to provide flexible and efficient communication services based on the type of network access a terminal is connected to, particularly in scenarios involving non-3GPP access networks.
Innovation Solution
A data center provides a virtualized EPC (vEPC) that dynamically controls communication services based on the network access type, utilizing a virtualized network architecture to manage and control services such as charging and QoS through a control apparatus and packet filters, enabling secure and efficient communication over various networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a terminal connects to a non-3GPP access network (e.g., Wi-Fi) to enable flexible communication services, then service accessibility and user convenience are improved, but network security and service control reliability deteriorate due to lack of centralized authentication and policy management
Solution Approach 1:
The patent introduces a security gateway as an intermediary component between the non-3GPP access network and the EPC. This security gateway performs authentication, authorization, and IP address allocation for terminals accessing via Wi-Fi or other non-3GPP networks, thereby maintaining network security and service control reliability while enabling flexible service accessibility on diverse networks
2Reliability
If separate network infrastructures are maintained for 3GPP and non-3GPP access networks, then network performance and service quality for each access type are optimized, but system complexity and operational difficulty increase
Solution Approach 1:
The patent implements a universal EPC architecture that can handle both 3GPP and non-3GPP access networks through a unified interface and common core network functions. The MME, SGW, and PGW components serve multiple access types simultaneously, reducing system complexity while maintaining optimized network performance for each access type through appropriate policy enforcement
3Reliability
If centralized policy control is implemented for all access networks, then service management and security control are improved, but response time and service provisioning speed deteriorate due to centralized processing bottlenecks
Solution Approach 1:
The patent segments the policy control function into distributed policy control units that can operate autonomously at different network points while still adhering to centralized policy guidelines. This allows local policy decisions to be made quickly without constant centralized intervention, improving response time while maintaining service management reliability through overall centralized coordination
Data Source
Figure 1
Figure 2
Figure 3A~3C
AI summary
A data center adapted to connect via a first wide area network to a core network connected with a base station and to a wireless LAN, variably controls service provided in a virtual core network of the data center to a terminal enabled to select connection to either a wireless LAN or a base station and connect to the data center.