Security communication method in NFV environment and system thereof
AssigneeThe Industry & Academic Cooperation in Chungnam National University
InventorsJae Cheol Ryou, Hyun Jin Kim
Life of this patent
Estimating the term…
Abstract
Provided is a security communication method in a NFV environment and a system thereof. A security communication method in the NFV environment according to an exemplary embodiment of the present invention is a security communication method between virtualized network functions (VNF) in a network function virtualization (NFV) environment including: performing authentication between a first VNF and a second VNF by an element manager using a hash chain; generating secret keys based on its own hash chains by the first VNF and the second VNF which are authenticated; and performing the communication by the first VNF and the second VNF using its own secret keys.
Claims11
A security communication method between virtualized network functions (VNF) in a network function virtualization (NFV) environment, the security communication method comprising:
- generating a hash chain of a VNF image by a virtualized infrastructure manager (VIM) when a VNF in a tenant is instantiated to share the hash chain with an element manager;
- performing authentication between a first VNF and a second VNF by the element manager using the hash chain;
- generating a first secret key by the authenticated first VNF based on the hash chain and generating a second secret key by the authenticated second VNF based on a second hash chain;
- and
- performing communication by the first VNF and the second VNF using the first secret key and the second secret key,
- wherein the sharing includes:
- calculating VNF identification information VNFID in the tenant by combining at least one of tenant identification information, VNF identification information, and instance identification information;
- calculating the hash chain by applying the calculated VNF identification information VNFID in the tenant to a hash function and sharing the calculated hash chain with the element manager;
- and
- when the calculated hash chain is updated, sharing the updated hash chain with the element manager.
A system for security communication between VNFs in a tenant including a plurality of VNFs in a network function virtualization (NFV) environment, the system comprising:
- an element manager which manages hash chains allocated to the plurality of VNFs and authenticates the VNFs using a hash chain of the VNFs which want communication;
- a hardware VNF gateway which is located between the plurality of VNFs in the tenant and sets a Sec-catalog in which security policy information for a VNF traffic is set to control the traffic between the VNFs;
- and
- a virtualized infrastructure manager (VIM) which generates a hash chain of a VNF image when a VNF in the tenant is instantiated to share the hash chain with the element manager,
- wherein the VIM:
- calculates VNF identification information VNFID in the tenant by combining at least one of tenant identification information, VNF identification information, and instance identification information;
- calculates the hash chain by applying the calculated VNF identification information VNFID in the tenant to a hash function and sharing the calculated hash chain with the element manager;
- and when the calculated hash chain is updated, shares the updated hash chain with the element manager, and
- wherein the VNF which is authenticated in the element manager generates a secret key based on the hash chain, encrypts a message with the generated secret key to transmit the message to the VNF gateway, and when the encrypted message is received from the VNF gateway, decodes the encrypted message using the secret key, and the VNF gateway obtains setting information for the message and compares the obtained setting information with the security policy information so that when the obtained setting information and the security policy information coincides with each other, the VNF gateway transmits the encrypted message to the VNF of the other party.
Dependencies are inferred from the claim text.