Back to results
US 11,240,660 B2Granted
Unified security architecture
AssigneeAlcatel Lucent
InventorsZhiyuan Hu, Zhigang Luo, Xueqiang Yan
Life of this patent
Estimating the term…
Abstract
A security service function chain is created including a set of security service functions. The security service function chain is created in response to instantiation of a given network partition (e.g., network slice) in a communication network (5G or similar network). The communication network supports instantiation of a plurality of network partitions for providing a respective plurality of network services. The security service function chain is utilized to perform at least one security service (e.g., authentication) for an entity (e.g., a subscriber or a device) accessing or seeking access to a network service (e.g., one of eMBB, massive IoT, and mission-critical IoT) corresponding to the given network partition.
Claims26
A method performed by a processing device, the method comprising:
- creating, by a master authentication orchestrator function, at least one security service function chain comprising a set of security service functions, wherein the at least one security service function chain is created in response to instantiation of a given network partition in a communication network, wherein the communication network supports instantiation of a plurality of network partitions for providing a respective plurality of network services, each network partition of the plurality of network partitions including an authentication orchestrator created by the master authentication orchestrator function, and the master authentication orchestrator function is located on a core network included in the communication network;
- and
- utilizing the at least one security service function chain to perform at least one security service for a client device performing one of accessing or seeking access to a network service corresponding to the given network partition, the at least one security service including facilitating a single sign-on (SSO) operation for the client device for the network service corresponding to the given network partition and another network service corresponding to another network partition,
- the SSO operation including transmitting a SSO request from the authentication orchestrator of the another network partition to the master authentication orchestrator function, and receiving a SSO response from the authentication orchestrator of the given network partition from the master authentication orchestrator function.
1 more element
An article of manufacture comprising a processor-readable non-transitory storage medium having embodied therein executable program code that when executed by a processing device causes the processing device to perform:
- create, by a master authentication orchestrator function, at least one security service function chain comprising a set of security service functions, wherein the at least one security service function chain is created in response to instantiation of a given network partition in a communication network, wherein the communication network supports instantiation of a plurality of network partitions for providing a respective plurality of network services, each network partition of the plurality of network partitions including an authentication orchestrator created by the master authentication orchestrator function, and the master authentication orchestrator function is located on a core network included in the communication network;
- and
- utilize the security service function chain to perform at least one security service for a client device performing one of accessing or seeking access to a network service corresponding to the given network partition, the at least one security service including facilitating a single sign-on (SSO) operation for the client device for the network service corresponding to the given network partition and another network service corresponding to another network partition,
- the SSO operation including transmitting a SSO request from the authentication orchestrator of the another network partition to the master authentication orchestrator function, and receiving a SSO response from the authentication orchestrator of the given network partition from the master authentication orchestrator function.
1 more element
An apparatus comprising:
- a memory;
- and
- at least one processor operatively coupled to the memory to form a unified security architecture, the unified security architecture being configured to:
- create, by a master authentication orchestrator function, at least one security service function chain comprising a set of security service functions, wherein the at least one service function chain is created in response to instantiation of a given network partition in a communication network, wherein the communication network supports instantiation of a plurality of network partitions for providing a respective plurality of network services, each network partition of the plurality of network partitions including an authentication orchestrator created by the master authentication orchestrator function, and the master authentication orchestrator function is located on a core network included in the communication network;
- and
- utilize the security service function chain to perform at least one security service for a client device performing one of accessing or seeking access to a network service corresponding to the given network partition, the at least one security service including facilitating a single sign-on (SSO) operation for the client device for the network service corresponding to the given network partition and another network service corresponding to another network partition,
- the SSO operation including transmitting a SSO request from the authentication orchestrator of the another network partition to the master authentication orchestrator function, and receiving a SSO response from the authentication orchestrator of the given network partition from the master authentication orchestrator function.
4 more elements
Dependencies are inferred from the claim text.