WebSocket Proxy for Bi-directional 5G Roaming Signal Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current communication systems face challenges in enabling bi-directional communications between private networks across enterprise firewalls, particularly in 5G service-based architecture, due to conventional firewall policies that restrict inbound connections and the need for timely message delivery across diverse networks.
Innovation Solution
The implementation of a communication protocol using WebSockets to establish bi-directional exchange of roaming signals between Security Edge Protection Proxies (SEPPs) of home and visited networks, allowing for secure and timely communication across enterprise firewalls.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional firewall policies are used to protect enterprise networks, then network security is improved, but bi-directional communication between private networks is blocked
Solution Approach 1:
The patent introduces a WebSocket proxy server as an intermediary component that sits between the internal private network and the external firewall. This proxy server establishes a trusted outbound connection to the firewall's allowed port, enabling bi-directional communication without requiring inbound firewall rules. The intermediary resolves the contradiction by finding a middle ground that maintains security while enabling communication.
Solution Approach 2:
Instead of trying to establish inbound connections to private networks (which firewalls block), the patent inverts the approach by having internal clients initiate outbound connections to a WebSocket proxy. This reversal of connection direction allows communication to flow through the firewall in the permitted outbound direction, solving the security-communication contradiction.
2Device complexity
If traditional HTTP request-response model is used for communication, then simplicity is maintained, but timely message delivery cannot be guaranteed
Solution Approach 1:
The patent transitions from the static, request-response HTTP model to a dynamic, persistent WebSocket connection. The WebSocket connection remains open and active, allowing either party to initiate communication at any time without waiting for a request cycle. This dynamic approach guarantees timely message delivery while maintaining relative protocol simplicity through the use of standard WebSocket framing.
3Reliability
If outbound-only connections are allowed through firewalls, then security is maintained, but bi-directional roaming signal exchange is prevented
Solution Approach 1:
The WebSocket proxy server acts as a mediator that receives roaming signals from internal network functions and forwards them through the firewall's permitted outbound channel. The proxy maintains the security policy by only allowing outbound connections, while simultaneously enabling full bi-directional roaming signal exchange between home and visited networks through this secure outbound path.
Data Source
AI summary
Systems, methods, and computer-readable media are disclosed for facilitating bi-directional edge proxy-to-edge proxy communications across an enterprise firewall in 5G service-based architecture. In one aspect, a method includes receiving a subscription request from a user device to operate on a visited private network; determining that the user device is associated with a home network; and establishing a communication protocol between a security edge protection proxy of the visited private network and a security edge protection proxy of the home network, wherein the communication protocol enables bi-directional exchange of roaming signals between the visited private network and the home network while user device is operating on the visited private network.