5G VN Group Authorization Provisioning for Secure Low-Latency Indications
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for creating groups of devices in a communications system suffer from long latencies and security vulnerabilities due to the need for manual configuration of permissions by operators, which can be exploited by malicious actors.
Innovation Solution
A computer-implemented method involving nodes in a communications system to automate the provisioning of authorization information for 5G Virtual Network (VN) groups, allowing additional AFs/MTC providers to manage groups with defined operations, using exposure Application Programming Interfaces (APIs) to dynamically populate permissions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual configuration of permissions by operators is used, then security control is maintained, but latency increases and security vulnerabilities arise
Solution Approach 1:
The system performs preliminary actions by automatically provisioning permissions at the moment of group creation. The authorization information is prepared and configured in advance through automated workflows, eliminating the need for delayed manual operator intervention and reducing the security gap window.
Solution Approach 2:
The system enables self-service by implementing automated permission provisioning that operates without manual operator intervention. The automated workflow independently configures permissions, manages authorization information, and updates network configuration, allowing the system to serve itself rather than relying on external manual operations.
2Reliability
If manual configuration of permissions by operators is used, then security control is maintained, but device complexity increases
Solution Approach 1:
The system enables self-service by implementing automated permission provisioning that operates without manual operator intervention. The automated workflow independently configures permissions, manages authorization information, and updates network configuration, allowing the system to serve itself rather than relying on external manual operations.
Solution Approach 2:
The system introduces an intermediary automated workflow that mediates between group creation and permission provisioning. This intermediary component orchestrates the automated permission configuration, managing the complexity internally while presenting a simplified interface to operators and reducing operational burden.
3Loss of time
If automated provisioning of authorization information is implemented, then latency is reduced and security gaps are closed, but system complexity increases
Solution Approach 1:
The system performs preliminary actions by automatically provisioning permissions at the moment of group creation. The authorization information is prepared and configured in advance through automated workflows, eliminating the need for delayed manual operator intervention and reducing the security gap window.
Solution Approach 2:
The system applies universality by implementing a multi-functional automated workflow that handles multiple tasks: permission configuration, authorization information management, and network configuration updates. This single automated mechanism performs diverse functions that would otherwise require separate manual operations, managing complexity through consolidation rather than proliferation of components.
Data Source
AI summary
A computer-implemented method, performed by a first node. The method is for handling indications. The first node operates in a communications system. The first node receives one or more first indications from a second node operating in the communications system. The one or more first indications may indicate one or more respective authorizations of one or more third nodes to perform one or more actions with a group of devices. The one or more third nodes are different than a fourth node operating in the communications system, the fourth node having created the group of devices. The first node sends, based on the received one or more first indications, one or more second indications to a fifth node operating in the communications system. The one or more second indications indicate to store the one or more respective authorizations.