Geofence-based edge service control and authentication

A non-transitory machine-readable storage medium comprising instructions, wherein the instructions, when deployed and executed by processing circuitry of an orchestration system, cause the processing circuitry to perform operations that:

• obtain, from a plurality of connectivity nodes providing edge services, physical location information and resource availability information associated with each of the plurality of connectivity nodes;
• generate an edge-to-edge location graph (ELG) based on the physical location information and the resource availability information, the ELG indicating a subset of the plurality of connectivity nodes that are available for executing a plurality of services associated with an edge workload;
• and
• provision the plurality of connectivity nodes with the ELG and a workflow execution plan to execute the plurality of services, the workflow execution plan including metadata with a geofence policy, wherein the geofence policy specifies geofence restrictions associated with each of the plurality of services.

A method performed by an edge computing device operable in an edge computing system, the method comprising:

• encoding current geolocation information of the edge computing device for transmission to a network management device;
• decoding a configuration message with a workflow execution plan for an edge workload and an edge-to-edge location graph (ELG) received from the network management device, the ELG based on the geolocation information and indicating a plurality of connectivity nodes within the edge computing system that are available for executing a plurality of services associated with an edge workload;
• retrieving a geofence policy within metadata of the workflow execution plan, the geofence policy specifying geofence restrictions associated with each of the plurality of services;
• and
• selecting a service of the plurality of services for execution based on a successful verification that the edge computing device is within the ELG and a geofence restriction of the geofence restrictions specified by the geofence policy for the selected service is satisfied by the geolocation information of the edge computing device.