Network configuration protocol datastore encryption
AssigneeTelefonaktiebolaget LM Ericsson (publ)
InventorsDaiying Liu, Renwang Liu, Min Luo
Life of this patent
Estimating the term…
Abstract
Methods and devices for encrypting Network Configuration Protocol (NETCONF) datastore in communication networks are disclosed. One of the methods is performed by a device using NETCONF. The method comprises enabling a function for NETCONF Datastore Security (DS-SEC). The method further comprises publishing a first indication indicating that the device supports the NETCONF DS-SEC function.
Claims15
A method performed by a device using Network Configuration Protocol (NETCONF), the method comprising:
- enabling a function for NETCONF Datastore Security (DS-SEC), wherein the function encrypts or decrypts a NETCONF Datastore and detects an encryption status of the NETCONF Datastore;
- sending, to a controller of the device, a first message comprising a first indication indicating that the device supports the NETCONF DS-SEC function;
- publishing a second indication indicating at least one encryption algorithm supported by the device;
- and
- receiving a second message from the controller of the device, wherein the second message comprises a third indication indicating a selected encryption algorithm, the selected encryption algorithm from the at least one encryption algorithm supported by the device.
A device configured to use Network Configuration Protocol (NETCONF), the device comprising processing circuitry and memory, the memory containing instructions executable by the processing circuitry whereby the device is configured to:
- enable a function for NETCONF Datastore Security (DS-SEC), wherein the function encrypts or decrypts a NETCONF Datastore and detects an encryption status of the NETCONF Datastore;
- send, to a controller of the device, a first message comprising a first indication indicating that the device supports the NETCONF DS-SEC function;
- publish a second indication indicating at least one encryption algorithm supported by the device;
- and
- receive a second message from the controller of the device, wherein the second message comprises a third indication indicating a selected encryption algorithm, the selected encryption algorithm from the at least one encryption algorithm supported by the device.
A method performed by a controller for controlling a device using Network Configuration Protocol (NETCONF), the method comprising:
- receiving a first message from the device, wherein the first message comprises a first indication indicating that the device supports a NETCONF Datastore Security (DS-SEC) function, wherein the function encrypts or decrypts a NETCONF Datastore and detects an encryption status of the NETCONF Datastore;
- obtain a second indication indicating at least one encryption algorithm supported by the device;
- and
- sending a second message to the device, wherein the second message comprises a third indication indicating whether the controller supports NETCONF Datastore Security (DS-SEC) function and a fourth indication indicating a selected encryption algorithm, the selected encryption algorithm from the at least one encryption algorithm supported by the device.
Dependencies are inferred from the claim text.