xApp instance registration in cloud-native networks

A method implemented by a Near Real-Time (RT) Radio Access Network (RAN) Intelligent Controller (RIC), the method comprising:

• receiving a registration request message including details of an xApp instance from Service Management and Orchestration (SMO), the xApp instance being distinct and external to the SMO;
• receiving, by a server, a certificate signing request (CSR) for the xApp instance originating from an agent, wherein the CSR includes an xApp identifier (ID);
• sending, by the server, the CSR to an operator certificate authority (CA) for signing;
• receiving, by the server, an xApp Secure Production Identity Framework for Everyone (SPIFFE) verifiable identity document (SVID) from the operator CA;
• and
• sending, by the server, the xApp SVID to the agent, wherein upon receiving the xApp SVID, the agent provides the xApp SVID and a trust bundle to the xApp instance.

A system comprising:

• a Near Real-Time (RT) Radio Access Network (RAN) Intelligent Controller (RIC) configured to:
• receive a registration message including details of an xApp instance and an xApp identifier (ID) from Service Management and Orchestration (SMO);
• generate a certificate signing request (CSR) based on the registration message, wherein the CSR includes the xApp ID registered in the Near RT-RIC;
• receive an identification request message from the xApp instance, which is distinct and external to the SMO;
• verify the xApp instance based on the identification request message;
• and
• send an identification response message to the xApp instance.

A system comprising:

• a Near Real-Time (RT) Radio Access Network (RAN) Intelligent Controller (RIC) configured to:
• receive a registration request message including details of an xApp instance from Service Management and Orchestration (SMO), the xApp instance being distinct and external to the SMO;
• receive a certificate signing request (CSR) for the xApp instance originating from an agent, wherein the CSR includes an xApp identifier (ID);
• send the CSR to an operator certificate authority (CA) for signing;
• receive an xApp Secure Production Identity Framework for Everyone (SPIFFE) verifiable identity document (SVID) from the operator CA;
• and
• send the xApp SVID to the agent, wherein upon receiving the xApp SVID, the agent provides the xApp SVID and a trust bundle to the xApp instance.