US 11,057,203 B2 · Network Function Virtualization (NFV) hardware trusted hosted MANO

Abstract

A Network Function Virtualization (NFV) system implements hardware trusted Management and Orchestration (MANO). A Hardware (HW) trust server issues a HW trust challenge to a first MANO system. The first MANO system hashes its physically-embedded read-only hardware trust key to generate a HW trust result and transfers the HW trust result to the HW trust server. The HW trust server validates the hardware trust result and transfers a HW trust certificate to the first MANO system. The first MANO system transfers the HW trust certificate and NFV MANO data to a second MANO system. The second MANO system validates the HW trust certificate. The second MANO system exchanges NFVI control data with NFVI circuitry responsive to the NFV MANO data when the HW trust certificate is valid. The second MANO system isolates the NFV MANO data when the HW trust certificate is not valid.

Claims20

Dependent claims

A method of operating a Network Function Virtualization (NFV) data communication system to implement hardware trusted Management and Orchestration (MANO), the method comprising:

a Hardware (HW) trust server issuing a first HW trust challenge to a first MANO computer system that controls first NFV Infrastructure (NFVI) circuitry;
the first MANO computer system hashing its physically-embedded read-only hardware trust key to generate a first HW trust result and transferring the first HW trust result to the HW trust server;
the HW trust server validating the first hardware trust result and transferring a first HW trust certificate to the first MANO computer system;
the first MANO computer system transferring the first HW trust certificate and first NFV MANO data to a second MANO computer system;
and
the second MANO computer system validating the first HW trust certificate, exchanging second NFVI control data with second NFVI circuitry responsive to the first NFV MANO data when the first HW trust certificate is valid, and isolating the first NFV MANO data when the first HW trust certificate is not valid.

3 more elements

A Network Function Virtualization (NFV) data communication system to implement hardware trusted Management and Orchestration (MANO), the NFV data communication system comprising:

a Hardware (HW) trust server configured to issue a first HW trust challenge to a first MANO computer system that controls first NFV Infrastructure (NFVI) circuitry;
the first MANO computer system configured to hash its physically-embedded read-only hardware trust key to generate a first HW trust result and transfer the first HW trust result to the HW trust server;
the HW trust server configured to validate the first hardware trust result and transfer a first HW trust certificate to the first MANO computer system;
the first MANO computer system configured to transfer the first HW trust certificate and first NFV MANO data to a second MANO computer system;
and
the second MANO computer system configured to validate the first HW trust certificate, exchange second NFVI control data with second NFVI circuitry responsive to the first NFV MANO data when the first HW trust certificate is valid, and isolate the first NFV MANO data when the first HW trust certificate is not valid.

3 more elements

Dependencies are inferred from the claim text.

Network Function Virtualization (NFV) hardware trusted hosted MANO

Life of this patent

Network Function Virtualization (NFV) hardware trusted hosted MANO

Life of this patent

Abstract

Claims20