US 10,477,390 B1Granted

Service-based security per user location in mobile networks

AssigneePalo Alto Networks, Inc.

InventorsSachin Verma, Leonid Burakovsky

Life of this patent

Estimating the term…

Loading patent…

Abstract

Techniques for providing service-based security per user location in mobile networks (e.g., service provider networks for mobile subscribers) are disclosed. In some embodiments, a system/process/computer program product for service-based security per user location in mobile networks in accordance with some embodiments includes monitoring network traffic on a service provider network at a security platform to identify a new session, wherein the service provider network includes a 5G network or a converged 5G network; extracting user location information for user traffic associated with the new session at the security platform; and determining a security policy to apply at the security platform to the new session based on the user location information.

Claims16

Dependent claims

A system, comprising:

a processor configured to:
monitor network traffic on a service provider network at a security platform to identify a new session, wherein the service provider network includes a 5G network or a converged 5G network, wherein the monitoring of the network traffic comprises to:
identify a create context request service operation or a create service operation in the network traffic;
extract user location information for user traffic associated with the new session at the security platform, comprising to:
extract EutraLocation or NRLocation from the create context request service operation or the create service operation of the network traffic, wherein the EutraLocation comprises Tracking Area Identity (TAI) and ECGI (EUTRA Cell Identity), wherein the NRLocation comprises Tracking Area Identity (TAI) and NR Cell Identity (NCGI);
and
determine a security policy to apply at the security platform to the new session based on the user location information;
and
a memory coupled to the processor and configured to provide the processor with instructions.

6 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/144,158Filed 27 Sep 2018
Granted: 12 Nov 2019
Term ends: Not estimatedThe source records don’t support an estimate.

Classification12 codes

H04W 12/37
Security of mobile devices; Security of mobile applications: managing security policies for mobile devices or for controlling mobile applications
H04L 63/1458
Countermeasures against malicious traffic: denial of Service
H04L 63/20
Network architectures or network communication protocols for network security: for managing network security; network security policies in general
H04W 8/18
Network data management: processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or…