US 12,750,287 B2 · Security service orchestration function in a service-based architecture

Abstract

A method is implemented by a security service orchestration function (SSOF) in a communication infrastructure, that includes a plurality of PLMNs and a plurality of enterprises, for orchestration of a security service level agreement (S-SLA). The method includes receiving, by a SSOF in a HPLMN, a S-SLA request from one or more of the enterprises. Each S-SLA request includes a plurality of requirements. The HPLMN corresponds to one of the plurality of PLMNs. The method also includes converting each S-SLA request into a consistent and unified S-SLA offerable to each enterprise. The consistent and unified S-SLA includes security attributes that the HPLMN is capable of providing. The method also includes offering the consistent and unified S-SLA to each enterprise that submitted the S-SLA request. The method further includes transforming each S-SLA request from the enterprises into security policies and controls to be enforced within the HPLMN.

Claims19

Dependent claims

A method implemented by a security service orchestration function (SSOF) in a communication infrastructure, that includes a plurality of public land mobile networks (PLMNs) and a plurality of enterprises serving a plurality end users, for orchestration of a security service level agreement (S-SLA), the method comprising:

receiving, by the SSOF in a home public land mobile network (HPLMN), a S-SLA request from one or more of the plurality of enterprises, wherein each S-SLA request comprises a plurality of requirements and wherein the HPLMN corresponds to one of the plurality of PLMNs and wherein each of the enterprises serves a plurality of end users;
performing capability mapping between the plurality of requirements of each S-SLA request and a common security baseline capability template S-SLA of the HPLMN to determine security attributes that the HPLMN is capable of providing;
converting, based on the capability mapping, each S-SLA request into a consistent and unified S-SLA offerable to each enterprise, wherein the consistent and unified S-SLA comprises security attributes that the HPLMN is capable of providing each of the enterprises;
offering the consistent and unified S-SLA to each enterprise that submitted the S-SLA request;
and
transforming each S-SLA request from the one or more enterprises into security policies and controls to be enforced within the HPLMN.

3 more elements

A method implemented by a security service orchestration function (SSOF) in a communication infrastructure, that includes a plurality of public land mobile networks (PLMNs) and a plurality of enterprises, for orchestration of a security service level agreement (S-SLA), the method comprising:

transmitting, by a home public land mobile network (HPLMN) of the plurality of PLMNs, a S-SLA request to one or more visited public land mobile networks (VPLMNs) of the plurality of PLMNs to support specific business services with specific security attributes;
receiving a response from each VPLMN including a unique S-SLA including security attributes the VPLMN is capable of providing and based on the S-SLA request;
merging the security attributes received from each VPLMN into a common security baseline capability template S-SLA for communication to business services users or each of the enterprises;
receiving, by the HPLMN, an enterprise S-SLA request from a requesting enterprise of the plurality of enterprises, wherein the enterprise S-SLA request comprises a specific level of security attributes the requesting enterprise wants fulfilled in roaming situations;
performing capability mapping between the security attributes in the enterprise S-SLA request and the common security baseline capability template S-SLA of the HPLMN, wherein the common security baseline capability template S-SLA defines a common capability S-SLA offerable by the HPLMN to the enterprises;
offering the common capability S-SLA to the requesting enterprise for roaming situations in response to the common security baseline capability template S-SLA matching the security attributes in the enterprise S-SLA request;
and
receiving a response from the requesting enterprise, wherein the response comprises an acceptance or a decline of the common capability S-SLA.

5 more elements

A method implemented by a security service orchestration function (SSOF) in a communication infrastructure, that includes a plurality of public land mobile networks (PLMNs) and a plurality of enterprises, for orchestration of a security service level agreement (S-SLA), the method comprising:

receiving, by a home public land mobile network (HPLMN) of the plurality of PLMNs, an enterprise S-SLA request from a requesting enterprise, wherein the enterprise S-SLA request comprises a specific level of security attributes the requesting enterprise wants fulfilled in roaming situations;
performing capability mapping between the security attributes in the enterprise S-SLA request and a common security baseline capability template S-SLA of the HPLMN, wherein the common security baseline capability template S-SLA defines a common capability S-SLA offerable by the HPLMN;
offering the common capability S-SLA to the requesting enterprise for roaming situations in response to the common security baseline capability template S-SLA matching the security attributes in the enterprise S-SLA request;
and
receiving a response from the requesting enterprise, wherein the response comprises an acceptance or a decline of the common capability S-SLA.

2 more elements

Dependencies are inferred from the claim text.

Security service orchestration function in a service-based architecture

Life of this patent

Security service orchestration function in a service-based architecture

Life of this patent

Abstract

Claims19