Platform for computing at the mobile edge

A platform for computing within a network system, comprising:

• a wireless network capable of connecting with a privately managed network;
• a plurality of client devices, each associated with the privately managed network;
• at least one server, being part of the wireless network, acting as a gateway between the wireless network and the privately managed network, enabling communication between each client device and the server;
• an access node facilitating wireless connectivity between the plurality of client devices and the wireless network;
• a Mobile Edge Compute (“MEC”) Appliance comprising a hardware device capable of providing data services and security mechanisms for running programs associated with third party providers on the privately managed network, the MEC Appliance being placed at or near an edge of the privately managed network;
• a MEC Controller capable for command and control of the MEC Appliance, the MEC Controller residing within a core network of the MNO;
• and
• a Security Module comprising a plurality of components establishing a plurality of layers, the Security Module being configured to validate any action by any platform component establishing communication with the MNO network,
• wherein the platform provides computational resources for hosting at least one third party application used on at least one client device.

A platform for computing within a wireless network, comprising:

• a Mobile Edge Compute (“MEC”) Appliance comprising an x86 hardware device capable of providing data services and security mechanisms for running programs associated with third party providers on a privately managed network, the MEC Appliance being placed in-line between a small cell radio and an MNO;
• a MEC Controller capable for command and control of the MEC Appliance, the MEC Controller residing within the MNO's core network, the MEC Controller comprising:
• a Core Services Platform designed as a micro-services architecture, providing central control and aggregation of all capabilities provided by the platform, capable of isolating a scope of specific functions to a set of dedicated instances for independent scaling, the Core Services Platform comprising:
• a Security Module providing Authentication, Authorization, and Accounting to cryptographically authenticate and sign all actions;
• an Appliance Module configured for a one-to-many management of a plurality of MEC Appliances;
• a Telemetry Module configured capable of statistics and logging;
• an Evolved Packet Core (“EPC”) Module configured for communication with the MNO's EPC components;
• and
• a Public Gateway Module configured to provide the only public interface for the third party providers to access the Core Services Platform;
• an Enterprise Services Gateway and a Carrier Services Gateway capable of providing web user interfaces for a client device user and a carrier operator user, respectively;
• an Appliance Services Agent to serve as an interface between all components and services running in the MEC Appliance;
• and
• a Discovery Service module as a component of the platform responsible for provisioning of the MEC Appliance;
• and
• a Security Module comprising a plurality of components establishing a plurality of layers, each component structured to address various attack vectors and potential exploits at each layer, the Security Module being integral to a function of the MEC Controller and for which extends throughout the MEC Appliance,
• wherein the platform provides computational resources for hosting at least one third party application within an environment that is at least one of at a network perimeter of the privately managed network and near the network perimeter of the privately managed network;
• and
• wherein the Security Module is configured to validate any action by any platform component within the environment that is at least one of at the network perimeter of the privately managed network and near the network perimeter of the privately managed network before being granted access to the privately managed network.