Oracle International Corporation

Stmicroelectronics Pvt. Ltd.

Ankit Srivastava

Virendra Singh

Jay Rajput

Venkatesh Aravamudhan

Shashikiran Bhalachandra Mahalank

Anup Shivarajapura

Avinash Jha

Paras Garg

Sridhar Karuturi

Kawal Sapra

Amit Kumar Rathi

Sourav Jandial

A method for prioritizing among alternate network function (NF) instances includes registering a first NF profile of a first NF instance with a first NF repository function (NRF), and defining, as part of the first NF profile, alternate NF instance information identifying a plurality of individual alternate NF instances to function as backups in response to unavailability of the first NF instance and specifying, for each alternate NF instance, a priority attribute value indicating a relative priority of the alternate NF instance with respect to the other alternate NF instances. The method further includes, at a first consumer NF or SCP, discovering, from the first NRF, the first NF profile of the first NF instance, detecting unavailability of the first NF instance, and, using the alternate NF instance information in the first NF profile to select and contact one of the alternate NF instances identified by the alternate NF instance information.

Methods, systems, and computer readable media for prioritizing among alternate network function (NF) instances

A method for error information propagation from an SCP to a NF to support a circuit breaker design at the consumer NF includes receiving, at the SCP and from the consumer NF, a first SBI service request message. The method further includes attempting, by the SCP, to forward the first SBI service request to N producer NF instances. The method further includes detecting, by the SCP, an error involving the N producer NF instances. The method further includes performing, by the SCP, successful alternate routing of the first SBI service request message to an (N+1) th producer NF instance. The method further includes receiving, by the SCP, a success response message from the (N+1) th producer NF instance. The method further includes propagating, by the SCP, with the success response message and to the consumer NF, error information regarding the N producer NF instances.

Methods, systems, and computer readable media for supporting circuit breaker design pattern at consumer network function (NF)

A method for providing service based interface (SBI) support for network elements (NEs) not supporting SBI service operations includes receiving SBI configuration parameters for an NE not supporting SBI service operations. The method further includes establishing a connection with the NE not supporting SBI service operations. The method further includes registering, with a network function (NF) repository function (NRF) and using the SBI configuration parameters, the NE not supporting SBI service operations. The method further includes monitoring, over the connection, status of the NE not supporting SBI service operations. The method further includes updating, with the NRF, the status of the NE not supporting SBI service operations.

Methods, systems, and computer readable media for providing service-based interface (SBI) support for network functions (NFs) not supporting SBI service operations

A method for delegated authorization at a security edge protection proxy (SEPP) includes intercepting, from a consumer network function (NF) that does not support access token based authorization, a service based interface (SBI) service request for accessing a service provided by a producer NF that requires access token based authorization. The method further includes operating as an access token authorization client to obtain a first access token on behalf of the consumer NF. The method further includes using the first access token to enable the consumer NF to access the service provided by the first producer NF. The SEPP may also operate as an access token authorization server on behalf of an NRF that does not support access-token-based authorization.

Methods, systems, and computer readable media for delegated authorization at security edge protection proxy (SEPP)

The subject matter described herein includes a method for reducing the likelihood of successful denial of service (DoS) attacks by validating overload control information (OCI) scope information against network function (NF) profile information obtained using target resource identification information. The method includes receiving a service based interface (SBI) request message, obtaining, from the SBI request message, target resource identification information, obtaining NF profile information using the target resource identification information and storing the NF profile information, receiving an SBI response message including overload control information and scope information for the overload control information, using the stored NF profile information to determine whether the scope information for the overload control information is valid, and, in response to determining that the scope information for the overload control information is invalid, rejecting the SBI response message.

Methods, systems, and computer readable media for reducing the likelihood of successful denial of service (DoS) attacks by validating overload control information (OCI) scope against network function (NF) profile information obtained using target resource identification information

A method for optimizing network traffic distribution using timeslot-based tracked producer network function (NF) performance during producer NF selection is performed at a service communication proxy (SCP) including at least one processor. The method includes tracking a performance characteristic of producer NFs across different timeslots. The method further includes receiving, from a consumer NF, a service based interface (SBI) service request. The method further includes identifying eligible producer NFs capable of handling the SBI service request. The method further includes selecting, from the eligible producer NFs, in a manner that at least partially overrides priorities of the eligible producer NFs, and based on the tracked performance characteristic across the different timeslots, a producer NF to handle the SBI service request. The method further includes forwarding the SBI service request to the producer NF.

Methods, systems, and computer readable media for optimizing network traffic distribution using timeslot-based tracked producer network function (NF) performance during producer NF selection

A method for optimized routing of service based interface (SBI) request messages to remote network function (NF) repository functions (NRFs) using indirect communications via a service communication proxy (SCP) includes, at an SCP including at least one processor, receiving an SBI request message. The method further includes forwarding the SBI request message to a remote NRF. The method further includes determining that the remote NRF is unable to process the SBI request message, and, in response to determining that the remote NRF is unable, identifying a georedundant mate of the remote NRF. The method further includes forwarding the SBI request message to the georedundant mate NRF of the remote NRF that is unable to process the SBI request message.

Methods, systems, and computer readable media for optimized routing of service based interface (SBI) request messages to remote network function (NF) repository functions using indirect communications via service communication proxy (SCP)

Methods, systems, and computer readable media for ingress message rate limiting are disclosed. One method includes, at a network node, receiving a service request message from a service consumer network function and extracting, from the received service request message, an access token that includes a consumer network function instance identifier identifying the service consumer network function. The method further includes determining, using the consumer network function instance identifier, that an allowed ingress message rate associated with the service consumer network function has been reached or exceeded and in response to determining that the allowed ingress message rate associated with the service consumer network function has been reached or exceeded, performing a message rate limiting action.

Methods, systems, and computer readable media for utilizing network function identifiers to implement ingress message rate limiting

A method for resolution of inter-network domain names between telecommunications networks includes storing, at a security edge protection proxy (SEPP) of a home network, a mapping between a domain name and a network address of a producer network function of the home network. The method includes receiving, at the SEPP of the home network, a request message from a consumer network function of a visitor network. The method includes resolving, at the SEPP of the home network, a request message domain name of the request message using the mapping between the domain name and the network address of the producer network function of the home network.

Methods, systems, and computer readable media for resolution of inter-network domain names

A method for communicating delegated NF discovery results between SCPs and using the delegated NF discovery results for alternate SBI service request routing includes receiving, at a first SCP and from a consumer NF instance, an SBI service request. The method further includes determining that delegated NF discovery is required, and, in response, performing delegated NF discovery on behalf of the consumer NF instance. The method further includes receiving an NF discovery response including delegated NF discovery results. The method further includes sending the SBI service request including the delegated NF discovery results to a second SCP. The method further includes receiving, at a second SCP, the SBI service request including the delegated NF discovery results, forwarding the SBI service request towards a first producer NF instance selected by the first SCP, detecting failure of routing or processing of the SBI service request, and using the delegated NF discovery results for alternate routing of the SBI service request.

Methods, systems, and computer readable media for communicating delegated network function (NF) discovery results between service communication proxies (SCPs) and using the delegated NF discovery results for alternate routing

A method for automatically managing a platform firewall using a network function (NF) repository function (NRF) or service communication proxy (SCP) includes receiving message relating to registering, updating, or deregistering an NF profile in an NF profiles database separate from a platform firewall. The method further includes determining that the registering, updating, or deregistering of the NF profile requires a change to a firewall rules configuration of the platform firewall. The method further includes, in response to determining that the registering, updating, or deregistering of the NF profile requires a change to the firewall rules configuration of the platform firewall, automatically updating, by the NRF or SCP, the firewall rules configuration of the platform firewall.

Methods, systems, and computer readable media for platform firewall management by network function (NF) repository function (NRF) or service communication proxy (SCP)

A method for generating, conveying, and using attempted producer network function (NF) instance communication information includes, at a first service communication proxy (SCP), receiving, from a sender, a first service based interface (SBI) request message. The method further includes attempting to obtain a service requested by the first SBI request message from at least one producer NF instance. The method further includes receiving at least one error response or failing to receive a response from the at least one producer NF instance. The method further includes generating, from the at least one error response or the failing to receive a response from the at least one producer NF instance, attempted producer NF instance communication information. The method further includes communicating, to the sender, the attempted producer NF instance communication information.

Methods, systems, and computer readable media for generating, conveying, and using attempted producer network function (NF) instance communication information

A method for delegated authorization at a service communications proxy (SCP) includes intercepting, from a consumer network function (NF) that does not support access token based authorization, a service based interface (SBI) request. The method further includes operating as an access token authorization client to obtain a first access token on behalf of the consumer NF. The method further includes using the first access token to enable the consumer NF to access the service provided by a first producer NF that requires access-token-based authorization. The SCP may also function as an access token authorization server on behalf of an NRF that does not support access-token-based authorization.

Methods, systems, and computer readable media for delegated authorization at service communication proxy (SCP)

A method for generating network function (NF) set load information aware NF discovery responses includes, at an NF repository function (NRF), receiving NFUpdate messages from producer NF instances. The method further includes collecting or generating, from the NFUpdate messages, NF set load information for NF sets of which the producer NF instances are members. The method further includes receiving, from a consumer NF, an NF discovery request. The method further includes generating, using query parameters in the NF discovery request, an NF discovery response including NF profiles of producer NF instances corresponding to the query and, including, in the NF discovery response, NF set load information for NF sets of producer NF instances whose NF profiles are included in the NF discovery response. The method further includes forwarding the NF discovery response including the NF set load information to the consumer NF.

Methods, systems, and computer readable media for generating network function (NF) set load information aware NF discovery response

A method for generating and using network function (NF) set load information, the method includes, at a service communication proxy (SCP), receiving service based interface (SBI) requests from consumer NFs. The method further includes forwarding the SBI requests to producer NF instances that are members of an NF set. The method further includes receiving responses to the SBI requests from the producer NF instances. The method further includes determining NF instance load control information (LCI) for the producer NF instances using the responses. The method further includes computing, by the SCP and from the NF instance LCI for the producer NF instances, NF set LCI for the NF set. The method further includes communicating the NF set LCI for the NF set to at least one of the consumer NFs or using the NF set LCI for the NF set to select a producer NF instance within an NF set to provide a service for one of the consumer NFs.

Methods, systems, and computer readable media for generating and using network function (NF) set overload control information (OCI) and load control information (LCI) at service communication proxy (SCP)

Growing community of inventors

Uttar Pradesh, India

Ankit Srivastava