# US 2021/0243156 A1 · Method for Securing OpenRAN Interfaces

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2021/0243156 A1
- Document ID: US20210243156A1
- Status: Published application
- Kind: A1
- Application number: 17/164,835
- Filed: 2021-02-01
- Published: 2021-08-05
- Earliest claimed: 2020-01-31
- Assignees: Parallel Wireless, Inc.
- Applicants: Parallel Wireless, Inc.
- Inventors: Rajesh Kumar Mishra; William Matthew Rowe
- Web page: https://patentgrep.com/patent/US20210243156A1

## CPC

- H04L 63/0209: {Architectural arrangements, e.g. perimeter networks or demilitarized zones}
- H04L 47/125: by balancing the load, e.g. traffic engineering
- H04L 61/256: NAT traversal
- H04L 63/0254: {Stateful filtering}
- H04L 61/2503: Translation of Internet protocol [IP] addresses
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Systems, methods, and computer software are disclosed for securing OpenRAN Interfaces. In ne embodiment a method is disclosed, comprising placing a stateful firewall at a node between a base station and a core network; wherein the stateful firewall mitigates compromised traffic from a radio access network (RAN).

## Claims

### Claim 1

A method for securing OpenRAN Interfaces, comprising:
placing a stateful firewall at a node between a base station and a core network;
wherein the stateful firewall mitigates compromised traffic from a radio access network (RAN).

### Claim 2 (depends on 1)

The method of claim 1 further comprising performing network address translation (NAT) at the stateful firewall.

### Claim 3 (depends on 1)

The method of claim 1 wherein placing a stateful firewall at a node between a base station and a core network comprises placing the stateful firewall at a management node.

### Claim 4 (depends on 1)

The method of claim 1 wherein placing a stateful firewall at a node between a base station and a core network comprises placing the stateful firewall at a controller node.

### Claim 5 (depends on 1)

The method of claim 1 wherein placing a stateful firewall at a node between a base station and a core network comprises placing the stateful firewall at a centralized unit (CU) in a case of a CU/DU split.

### Claim 6 (depends on 1)

The method of claim 1 wherein placing a stateful firewall at a node between a base station and a core network comprises placing the stateful firewall at the base station itself.

### Claim 7 (depends on 1)

The method of claim 1 further comprising performing aggregation and brokering.

### Claim 8 (depends on 1)

The method of claim 1 wherein placing a stateful firewall at a node between a base station and a core network comprises placing the stateful firewall at both ends of a CU/DU split.

### Claim 9 (depends on 1)

The method of claim 1 further comprising the stateful firewall blocking non-meaningful outbound traffic.

### Claim 10

A non-transitory computer-readable medium containing instructions for securing OpenRAN Interfaces, which, when executed, cause a system to perform steps comprising:
operating a stateful firewall placed at a node between a base station and a core network; wherein the stateful firewall mitigates compromised traffic from a radio access network (RAN).

### Claim 11 (depends on 10)

The computer-readable medium of claim 10 further comprising instructions for performing network address translation (NAT) at the stateful firewall.

### Claim 12 (depends on 10)

The computer-readable medium of claim 10 further comprising instructions for performing aggregation and brokering.

### Claim 13 (depends on 10)

The computer-readable medium of claim 10 further comprising instructions for blocking non-meaningful outbound traffic.

### Claim 14

A system securing OpenRAN Interfaces, comprising:
a base station;
a core network;
a node between the base station and the core network and in communication with the base station and a core network; and
wherein the node includes a stateful firewall mitigates compromised traffic from a radio access network (RAN).

### Claim 15 (depends on 14)

The system of claim 14 the stateful firewall performs network address translation (NAT).

### Claim 16 (depends on 14)

The system of claim 14 wherein the stateful firewall is placed at a management node or at a controller node.

### Claim 17 (depends on 14)

The system of claim 14 wherein the stateful firewall is placed at a centralized unit (CU) in a case of a CU/DU split.

### Claim 18 (depends on 14)

The system of claim 14 wherein the stateful firewall is placed at the base station itself.

### Claim 19 (depends on 14)

The system of claim 14 wherein the stateful firewall is placed at both ends of a CU/DU split.

### Claim 20 (depends on 14)

The system of claim 14 wherein the stateful firewall blocks non-meaningful outbound traffic.