# US 12,192,768 B2 · Methods, systems, and computer readable media for handling hacker intrusion in profile management at network function (NF) repository function (NRF) > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,192,768 B2 - Document ID: US12192768B2 - Status: Granted - Kind: B2 - Application number: 17/583,177 - Filed: 2022-01-24 - Published: 2023-07-27 - Granted: 2025-01-07 - Earliest claimed: 2022-01-24 - Assignees: Oracle International Corporation - Applicants: Oracle International Corporation - Inventors: Rajiv Krishan - Web page: https://patentgrep.com/patent/US12192768B2 ## CPC - H04W 12/122: Counter-measures against attacks; Protection against rogue devices - G06F 8/71: Version control (security arrangements therefor G06F21/57); Configuration management - H04L 41/0806: for initial configuration or provisioning, e.g. plug-and-play - H04L 41/28: Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration - H04L 43/10: Active monitoring, e.g. heartbeat, ping or trace-route - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method for handling hacker intrusion in NF profile management at an NRF includes receiving, at the NRF and from a consumer NF, an NF register request message including an NF profile of the consumer NF, setting and storing an NF profile version number for the NF profile, and communicating the NF profile version number to the consumer NF. The consumer NF stores the NF profile version number and transmits a request for initiating an NF update or NF heart-beat service operation to the NRF. The NRF receives the request for initiating the NF update or NF heart-beat service operation, increments the NF profile version number, and communicates the incremented NF profile version number to the consumer NF. The consumer NF receives the incremented NF profile version number, determines that an NF profile version mismatch has occurred, and, in response, initiates an NF profile corrective action with the NRF. ## Claims ### Claim 1 A method for handling hacker intrusion in network function (NF) profile management at an NF repository function (NRF), the method comprising: receiving, at the NRF and from a consumer NF, an NF register request message including an NF profile of the consumer NF; setting, by the NRF, an NF profile version number for the NF profile; storing, by the NRF, the NF profile and the NF profile version number; communicating, by the NRF, the NF profile version number to the consumer NF; at the consumer NF, storing the NF profile version number received from the NRF; at the consumer NF, transmitting a first request for initiating an NF update or NF heart-beat service operation to update the NF profile with the NRF; at the NRF, receiving the first request for initiating the NF update or NF heart-beat service operation, incrementing the NF profile version number, and communicating the incremented NF profile version number to the consumer NF; and at the consumer NF, receiving the incremented NF profile version number, determining whether an NF profile version mismatch has occurred, and, in response to determining that an NF profile version mismatch has occurred, determining that the NF profile of the consumer NF has been updated without authorization by a hacker and initiating an NF profile corrective action with the NRF by updating, by the consumer NF and with the NRF, the NF profile stored by the NRF for the consumer NF with an NF profile of the consumer NF stored locally by the consumer NF. ### Claim 2 (depends on 1) The method of claim 1 wherein setting, by the NRF, the NF profile version number includes algorithmically generating the NF profile version number at the NRF. ### Claim 3 (depends on 2) The method of claim 2 wherein algorithmically generating the NF profile version number at the NRF includes using a random number generation algorithm to generate the NF profile version number at the NRF. ### Claim 4 (depends on 1) The method of claim 1 wherein communicating the NF profile version number to the consumer NF includes communicating the NF profile version number in a response to the NF register request message. ### Claim 5 (depends on 1) The method of claim 1 wherein communicating the incremented NF profile version number to the consumer NF includes communicating the incremented NF profile version number to the consumer NF in a response message to the first request for initiating the NF heart-beat or update service operation. ### Claim 6 (depends on 5) The method of claim 5 wherein communicating the incremented NF profile version number to the consumer NF includes communicating the incremented NF profile version number to the consumer NF in a custom header added to the response message, and, further comprising communicating, via the response message, a profile version updated indicator to the consumer NF indicating that the NF profile version number has been changed by the NRF. ### Claim 7 (depends on 1) The method of claim 1 wherein determining whether an NF profile version mismatch has occurred includes, at the consumer NF, comparing the incremented NF profile version number received from the NRF with the stored NF profile version number or an incremented version of the stored NF profile version number. ### Claim 8 (depends on 1) The method of claim 1 wherein determining whether an NF profile version mismatch has occurred includes determining that an NF profile version mismatch has occurred. ### Claim 9 (depends on 1) The method of claim 1 wherein determining whether an NF profile version mismatch has occurred includes determining that an NF profile version mismatch has not occurred, and, in response, at the consumer NF, incrementing the stored NF profile version number. ### Claim 10 (depends on 1) The method of claim 1 comprising, maintaining, at the NRF, a list of exception parameters for which the NF profile version number is not updated, receiving, at the NRF, a second request for initiating an NF update or NF heart-beat service operation, determining that the second request updates only NF profile parameters on the list of exception parameters, and, in response, refraining from incrementing the NF profile version number. ### Claim 11 A system for handling hacker intrusion in network function (NF) profile management at an NF repository function (NRF), the system comprising: an NRF including at least one processor; a consumer NF including at least one processor; an NF profile version number generator/communicator implemented by the at least one processor of the NRF for receiving, at the NRF and from the consumer NF, an NF register request message including an NF profile of the consumer NF, setting an NF profile version number for the NF profile, storing the NF profile and the NF profile version number, and communicating the NF profile version number to the consumer NF; an NF profile manager implemented by the at least one processor of the consumer NF for storing the NF profile version number received from the NRF and transmitting a first request for initiating an NF update or NF heart-beat service operation to update the NF profile with the NRF; and wherein the NF profile version number generator/communicator is configured to receive the first request for initiating the NF update or NF heart-beat service operation, increment the NF profile version number, and communicate the incremented NF profile version number to the consumer NF and the NF profile manager is configured to receive the incremented NF profile version number, determine whether an NF profile version mismatch has occurred, and, in response to determining that an NF profile version mismatch has occurred, determine that the NF profile of the consumer NF has been updated without authorization by a hacker, and initiate an NF profile corrective action with the NRF by updating, by the consumer NF and with the NRF, the NF profile stored by the NRF for the consumer NF with an NF profile of the consumer NF stored locally by the consumer NF. ### Claim 12 (depends on 11) The system of claim 11 wherein the NF profile version number generator/communicator is configured to algorithmically generate the NF profile version number at the NRF. ### Claim 13 (depends on 12) The system of claim 12 wherein the NF profile version number generator/communicator is configured to use a random number generation algorithm to generate the NF profile version number at the NRF. ### Claim 14 (depends on 11) The system of claim 11 wherein the NF profile version number generator/communicator is configured to communicate the NF profile version number to the consumer NF in a response to the NF register request message. ### Claim 15 (depends on 11) The system of claim 11 wherein the NF profile version number generator/communicator is configured to communicate the incremented NF profile version number to the consumer NF in a response message to the first request for initiating the NF update or NF heart-beat service operation. ### Claim 16 (depends on 11) The system of claim 11 wherein the NF profile manager is configured to determine whether an NF profile version mismatch has occurred by comparing the incremented NF profile version number received from the NRF with the stored NF profile version number or an incremented version of the stored NF profile version number. ### Claim 17 (depends on 11) The system of claim 11 wherein the NF profile manager is configured to determine that an NF profile version mismatch has occurred. ### Claim 18 (depends on 11) The system of claim 11 wherein the NF profile manager is configured to determine that an NF profile version mismatch has not occurred, and, in response, at the consumer NF, incrementing the stored NF profile version number. ### Claim 19 (depends on 11) The system of claim 11 wherein the NF profile version number generator/communicator is configured to maintain, at the NRF, a list of exception parameters for which the NF profile version number is not updated, receive, a second request for initiating an NF update or NF heart-beat service operation, determine that the second request updates only NF profile parameters on the list of exception parameters, and, in response, refrain from incrementing the NF profile version number. ### Claim 20 One or more non-transitory computer readable media having stored thereon executable instructions that when executed by one or more processors of one or more computers control the one or more computers to perform steps comprising: receiving, at a network function (NF) repository function (NRF) and from a consumer NF, an NF register request message including an NF profile of the consumer NF; setting, by the NRF, an NF profile version number for the NF profile; storing, by the NRF, the NF profile and the NF profile version number; communicating, by the NRF, the NF profile version number to the consumer NF; at the consumer NF, storing the NF profile version number received from the NRF; at the consumer NF, transmitting a first request for initiating an NF update or NF heart-beat service operation to update the NF profile with the NRF; at the NRF, receiving the first request for initiating the NF update or NF heart-beat service operation, incrementing the NF profile version number, and communicating the incremented NF profile version number to the consumer NF; and at the consumer NF, receiving the incremented NF profile version number, determining whether an NF profile version mismatch has occurred, and, in response to determining that an NF profile version mismatch has occurred, determining that the NF profile of the consumer NF has been updated without authorization by a hacker and initiating an NF profile corrective action with the NRF by updating, by the consumer NF and with the NRF, the NF profile stored by the NRF for the consumer NF with an NF profile of the consumer NF stored locally by the consumer NF.