On-demand security for network resources or nodes, such as for a wireless 5g network
AssigneeT-Mobile USA, Inc.
InventorsVenson Shaw, Sunil Lingayat, Gaviphat Lekutai
Life of this patent
Estimating the term…
Abstract
The disclosed embodiments include a method performed by a network access node to thwart unauthorized activity on a network such as a 5G wireless network. For example, the method can include employing contextual information to determine risk to the 5G wireless network. A network access node can detect that a wireless device seeks to perform unauthorized activity, and then implements security measures such that the unauthorized activity is thwarted at the network access node.
Claims20
At least one computer-readable medium, excluding transitory signals and carrying instructions, which when executed by a data processing system, cause the data processing system to perform operations comprising:
- maintaining multiple security resources of a security layer for a wireless network,
- wherein the multiple security resources are distributed across multiple wireless nodes that provide coverage areas for multiple wireless devices in multiple service environments, and
- wherein at least some of the multiple wireless devices comprises wireless user equipment (UE) and the wireless network comprises a 5G wireless network;
- and,
- during runtime execution of the multiple service environments:
- monitoring risk levels associated with the multiple wireless nodes,
- wherein each risk level is associated with an indication of a vulnerability to the wireless network;
- detecting an elevated risk level for a particular wireless node that supports a particular service environment for a particular wireless device;
- and
- responsive to detecting the elevated risk level, dynamically provisioning multiple security resources of the security layer for the particular wireless node to safeguard the wireless network,
- wherein the multiple security resources include a security resource from a wireless node other than the particular wireless node.
At least one computer-readable medium, excluding transitory signals and carrying instructions, which when executed by a data processing system, cause the data processing system to perform operations comprising:
- maintaining a security resource of a wireless network and a profile of a wireless device,
- wherein the security resource is inactive by default and configured for on-demand activation in response to a security risk associated with the wireless device while the wireless device is communicating via the wireless network;
- monitoring the wireless device for application-layer transactions while on the wireless network;
- monitoring the wireless device for contextual scenarios while on the wireless network;
- detecting a security risk relative to a type of application-layer transaction and a contextual scenario of the wireless device;
- in response to detecting the security risk, activating the security resource to support the application-layer transaction for safeguarding the wireless network;
- detecting a change to the application-layer transaction or the contextual scenario;
- and
- in response to detecting the change to the application-layer transaction or the contextual scenario, deactivating the security resource for the wireless device.
A non-transitory computer-readable medium with instructions stored thereon that, when executed by a computing system, cause the computing system to perform operations comprising:
- monitoring runtime behavior of a network of nodes of a wireless network;
- detecting an anomalous activity relative to historical activity of the network of nodes, wherein the anomalous activity is indicative of a risk to the network of nodes;
- dynamically coordinating a security service including a blacklist and a whitelist,
- wherein the blacklist includes a list of contaminated nodes or resources of the network of nodes;
- using resources to sanitize the contaminated resources and thereby produce newly decontaminated resources;
- removing the newly decontaminated nodes or resources from the blacklist to thereby produce an adjusted blacklist;
- adding the newly decontaminated nodes or resources to the whitelist to thereby produce an adjusted whitelist;
- and
- dynamically adjusting use of resources according to a load ratio.
Dependencies are inferred from the claim text.