VPN Gateway NEF Interaction via Application Function Mediator

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing wireless communication networks face challenges in effectively interacting between Virtual Private Networks (VPNs) and Network Exposure Functions (NEFs), leading to inefficient exchange of user data for wireless user devices.

Innovation Solution

A data communication system that integrates a Virtual Private Network Gateway (VPN-GW), Application Function (AF), and Network Exposure Function (NEF) to facilitate the exchange of user data between wireless user devices and external systems, enabling effective interaction between VPNs and NEFs.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If VPNs are used to securely communicate user data, then data security is improved, but interaction effectiveness between VPNs and NEFs deteriorates

Engineering Contradiction:

Improvedata securityVSAvoidinteraction effectiveness

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent introduces an Application Function (AF) as an intermediary component that mediates between the VPN and the NEF. The AF receives data from the VPN, processes it according to network policies, and forwards relevant information to the NEF. This intermediary approach maintains the security benefits of VPN encryption while enabling effective interaction with the NEF through standardized interfaces and protocols.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If VPNs encrypt user data for secure transmission, then data security is improved, but data exchange efficiency deteriorates

Engineering Contradiction:

Improvedata securityVSAvoiddata exchange efficiency

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent implements preliminary actions by establishing VPN sessions and encryption contexts before actual data exchange occurs. The network elements pre-negotiate security parameters, encryption algorithms, and data formats during session setup. This allows encrypted data to be exchanged efficiently without repeated cryptographic operations during the actual data transfer, maintaining both security and efficiency.

Inventive Principle:

Principle #10Preliminary action

3Ease of operation

If VPN-GW and NEF are integrated to enable interaction, then interaction effectiveness is improved, but device complexity increases

Engineering Contradiction:

Improveinteraction effectivenessVSAvoidsystem complexity

Core Design Contradiction:

Ease of operationVSDevice complexity

Solution Approach 1:

The patent designs the Application Function (AF) with multi-functionality to handle multiple tasks within a single network element. The AF performs data collection from VPNs, policy enforcement, information filtering, and NEF communication functions. This universal approach consolidates multiple functions into one component, improving interaction effectiveness while minimizing the increase in overall system complexity compared to adding separate dedicated components for each function.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS12245025B2Data communication service over a virtual private network gateway, application function, and network exposure function

Publication Date: 2025.03.04 T MOBILE INNOVATIONS LLC

AI summary

A data communication system serves a user application in a User Equipment (UE). The data communication system receives a subscription from an application server into a Network Exposure Function (NEF). The subscription is for user data from the user application in the UE. The data communication system receives the user data from the user application in the UE over a Virtual Private Network (VPN) and transfers the user data to the NEF. The data communication system transfers the user data from the NEF for delivery to the application server in response to the subscription.