Back to results
US 2020/0396256 A1Published application
I2nsf network security function facing interface yang data model
AssigneeResearch & Business Foundation Sungkyunkwan University
InventorsJaehoon JEONG, Jinyong KIM
Life of this patent
Estimating the term…
Abstract
The present disclosure provides a method of providing a security service by means of a network operator management system in a security management system.
Claims20
A method of providing a security service by means of a network operator management system in a security management system, the method comprising:
- receiving a high-level first security policy from an I2NSF (Interface to Network Security Functions) user;
- receiving an available security service from a developer's management system;
- creating a low-level second security policy corresponding to the first security policy on the basis of the security service;
- and
- transmitting a packet including the second security policy for setting the created second security policy to each of a plurality of NSFs (Network Security Function) to an NSF instance,
- wherein the network operator management system and the NSFs are respectively connected to an I2NSF NSF-facing interface, and
- the second security policy includes at least one or more of 1) blocking SNS access during business hours, 2) blocking a malicious VoIP (Voice over Internet Protocol) or a malicious VoLTE (Voice over LTE) packet, or 3) mitigating flood of http and https for a company web server.
4 more elements
A security management system for providing a security service, the security management system comprising:
- an I2NSF (Interface to Network Security Functions) creating a high-level first security policy;
- a developer's management system providing a security service;
- a network operator management system receiving the first security policy from the I2NSF user, receiving the security service from the developer's management system, creating a low-level second security policy corresponding to the first security policy on the basis of the security service, and transmitting a packet including the second security policy for setting the created second security polity to each of a plurality of NSFs (Network Security Function), to an NSF instance;
- and
- a plurality of NSFs (Network Security Function) receiving the second security policy from the security management system,
- wherein the network operator management system and the NSFs are respectively connected to an I2NSF NSF-facing interface, and
- the second security policy includes at least one or more of 1) blocking SNS access during business hours, 2) blocking a malicious VoIP (Voice over Internet Protocol) or a malicious VoLTE (Voice over LTE) packet, or 3) mitigating flood of http and https for a company web server.
4 more elements
Dependencies are inferred from the claim text.