Security services for end users that utilize service chaining
AssigneeAlcatel Lucent
InventorsSuzann Hua, Yigang Cai
Life of this patent
Estimating the term…
Abstract
Embodiments described herein provide security for end users of User Equipment (UE) that utilize service chaining for Service Data Flows (SDFs). One embodiment comprises a Policy and Charging Rules Function (PCRF) that determines that a service chain is enabled for a SDF requested by an end user of a UE. The PCRF identifies a service function implemented in the service chain that processes the SDF based on a generic security policy, and identifies a security rule for the end user for filtering the SDF by the service function. The PCRF provides the security rule to the service function for filtering the SDF within the service chain.
Claims21
An apparatus comprising:
- a processor and a memory, the memory including instructions that when executed configure the processor to implement a Policy and Charging Rules Function (PCRF) configured to determine that a service chain is enabled for a Service Data Flow (SDF) requested by an end user of User Equipment (UE), to identify a service function implemented in the service chain that processes the SDF based on a generic security policy, and to identify a security rule for the end user for detecting and removing by the service function a selected portion of content of the SDF that is presented to the end user;
- the PCRF is configured to provide the security rule to the service function for detecting and removing the selected portion of the SDF.
A method for providing security for end users of User Equipment (UE) that utilize service chaining for a Service Data Flow (SDF), the method comprising:
- determining, by a Policy and Charging Rules Function (PCRF), that a service chain is enabled for a SDF requested by an end user of a UE;
- identifying, by the PCRF, a service function implemented in the service chain that processes the SDF based on a generic security policy;
- identifying, by the PCRF, a security rule for the end user for detecting and removing by the service function a selected portion of content of the SDF that is presented to the end user;
- and
- providing, by the PCRF, the security rule to the service function for detecting and removing the selected portion of the SDF.
An apparatus comprising:
- a processor and a memory, the memory including instructions that when executed configure the processor to implement a Policy and Charging Enforcement Function (PCEF) configured to determine that a service chain is enabled for a Service Data Flow (SDF) requested by an end user of User Equipment (UE), to determine an ID of a service function implemented in the service chain that processes the SDF based on a generic security policy, and to provide the ID to a Policy and Rules Charging Function (PCRF);
- the PCEF is configured to receive a security rule from the PCRF for by the service function a selected portion of content of the SDF that is presented to the end user, and to provide to the service function the security rule for detecting and removing the selected portion of the SDF.
Dependencies are inferred from the claim text.