Back to results
US 11,637,865 B2Granted
I2NSF registration interface yang data model
AssigneeResearch & Business Foundation Sungkyunkwan University
InventorsJaehoon Jeong, Sangwon Hyun, Taekyun Roh, Sarang Wi
Life of this patent
Estimating the term…
Abstract
The present disclosure provides a registration method by a developer's management system in a security management system managing a Network Security Function (NSF) through a registration interface.
Claims13
A registration processor-implemented method by a developer's management system in a security management system managing a Network Security Function (NSF) based on a registration interface, the registration method comprising:
- transmitting, by the developer's management system, a first registration request message for requesting registration of a provided NSF based on the registration interface to a security controller based on the NSF provided from an NSF vendor;
- receiving, by the developer's management system, a request message for requesting an additional NSF related to required capabilities based on the registration interface based on a security service request from an I2NSF (Interface to Network Security Functions) user, when there is no NSF providing the required capabilities in NSFs registered in the security controller;
- and
- transmitting, by the developer's management system, a second registration request message for requesting registration of the additional NSF to the security controller in response to the request message based on the registration interface,
- wherein the registration interface comprises a first model for registering a capability of the NSF in the security controller, and a second model for requesting the additional NSF from the developer's management system,
- wherein the first model comprises:
- an NSF name showing a unique name of an NSF that can be registered;
- NSF capability information showing a capability set of the NSF that can be registered;
- and
- NSF access information for the NSF that can be registered to communicate with a network,
- wherein the NSF capability information includes an event capability, a condition capability, and an action capability, a resolution strategy, capability, and a default action capability, and
- wherein the NSF capability information further includes bandwidth information related to an available network.
9 more elements
A developer's management system in a security management system managing a Network Security Function (NSF) based on a registration interface, the developer's management system comprising:
- a memory configured to store instructions;
- and
- a processor configured to execute the instructions to configure the processor to:
- transmit a first registration request message for requesting registration of a provided NSF based on the registration interface to a security controller based on the NSF provided from an NSF vendor;
- receive a request message for requesting an additional NSF related to required capabilities based on the registration interface based on a security service request from an I2NSF (Interface to Network Security Functions) user, when there is no NSF providing the required capabilities in NSFs registered in the security controller;
- and
- transmit a second registration request message for requesting registration of the additional NSF to the security controller in response to the request message based on the registration interface,
- wherein the registration interface comprises a first model for registering a capability of the NSF in the security controller, and a second model for requesting the additional NSF from the developer's management system,
- wherein the first model comprises:
- an NSF name showing a unique name of an NSF that can be registered;
- NSF capability information showing a capability set of the NSF that can be registered;
- and
- NSF access information for the NSF that can be registered to communicate with a network, and
- wherein the NSF capability information includes an event capability, a condition capability, and an action capability, a resolution strategy, ca pa bility, and a default action capability, and
- wherein the NSF capability information further includes bandwidth information related to an available network.
12 more elements
Dependencies are inferred from the claim text.