Telefonaktiebolaget Lm Ericsson (publ)

Giuseppe Celozzi

Daniele Gaito

Luca Baldini

Gaetano Patria

Francesco Attanasio

Elvira Villani

Pietro Picaro

Gennaro Falanga

Domenico Raffaele Cione

Rosa Catapano

Gianpaolo Di Mauro

A lawful interception administrative function, LI ADMF, () in a telecommunication network () obtains from a quantum key distribution network, QKDN, () a quantum key and a key stream identifier, KSID, associated with the quantum key. The LI ADMF () transmits the KSID associated with the quantum key to an LI entity () in the telecommunication network (). The LI entity () then obtains, from the QKDN (), a quantum key associated with the KSID transmitted by the LI ADMF (). Such a procedure provides a secure exchange of quantum keys to enable encryption of sensitive data within messages exchanged by LI entities in the telecommunication network ().

Method in a telecommunication network, and computer system

A request associated with a destination to which a point of interception, POI, () is to transmit intercepted data via an X2/X3 interface during lawful interception, LI, is received from an administrative function, ADMF (), via an X1 interface. The request comprises an identifier of the destination and version information that specifies at least one version of a transmission protocol to use by the POI for transmission of intercepted data to the identified destination. The POI determines whether or not the POI is able to transmit intercepted data via the X2/X3 interface using a version of the protocol that is equal to one of the versions in the received version information. The received version information is compared with version information available in the POI. A response is transmitted via the X1 interface that indicates if the POI is able to transmit intercepted data via the X2/X3 interface.

Transmitting or receiving version information of transmission protocol

Network slice providers and resource providers in a communication network are configured to cause various records related to a smart contract for one or more resources to be stored in a permissioned blockchain. The records include an allocation, a deallocation and monitoring records related to the resource(s). When the resources are released, the blockchain records ease settling slice beneficiaries' financial obligations.

Methods and devices for resource sharing using smart contracts

A method, performed by a first entity (), for providing a service in a communications network (). The first entity () obtains (), from a second entity (), a request. The request is for one or more links () to be allocated to a first network slice to provide a service via one or more paths (). The () connect one or more nodes (). The request indicates at least one of: a) one or more requirements to be met by the links (), and b) a first priority to be assigned to the first network slice. The first entity () determines () the links () to be allocated to the first network slice. The determining () is based on the one or more requirements, the first priority, and a set of available resources. The first entity () sends (), to another entity (), an indication based on the determined links ().

First entity, second entity, third entity, and methods performed thereby for providing a service in a communications network

A method for allocating a plurality of virtual machines (-) provided on at least one host (-) to a virtualized network function is provided, which provides a defined functional behavior in a network and requires a total application capacity for the functional behavior, the functional behavior being provided by needed virtual machines from the plurality of virtual machines, wherein each of the at least one host has an available processing capacity which can be assigned to the virtual machines provided on the corresponding host, and each virtual machine has at least one flavor which indicates a used processing capacity of the available processing capacity of the corresponding host and which corresponds to a partial application capacity of the total application capacity provided by the corresponding virtual machine, the method comprising: &#x2014;determining the total application capacity of the virtualized network function, &#x2014;determining, for each of the virtual machines, the at least one flavor taking into account the available processing capacity of the host on which the corresponding virtual machine is provided, and the corresponding at least one partial application capacity, &#x2014;determining the needed virtual machines from the plurality of virtual machines and needed flavors of the needed virtual machines that are required to provide the total application capacity, wherein determining the needed virtual machines and needed flavors comprises: performing an iterative process in which the needed virtual machines are dynamically determined from the plurality of virtual machines based on the total application capacity, and in which the needed flavor for each of the needed virtual machines is dynamically determined taking into account the total application capacity and the available processing capacity provided on the host on which the corresponding needed virtual machine is provided.

Dynamic flavor allocation

A method for monitoring operation of a network service for the purpose of licensing control in a virtual network environment managed by a Network Functions Virtualisation Management and Orchestration, NFV-MANO, system, is disclosed. The method comprises: defining () the network service in a Network Service Descriptor and deploying the network service using at least one Virtual Network Function instance identified in said Network Service Descriptor by instantiating () at least one Virtual Network Function Component defined by a Virtualisation Deployment Unit, wherein said Virtualisation Deployment Unit is associated with said Virtual Network Function. The method also comprises recording () in a first information field associated with the Network Service Descriptor information indicative of usage of the at least one instantiated Virtual Network Function Component and maintaining () a licensing database for storing information indicative of usage of the at least one instantiated Virtual Network Function Component based on records in the first information field.

Method and apparatus for licensing control in a virtual network environment

A Software Defined Network (SDN) comprises a plurality of resources including Network Elements (NEs) and network links connecting the NEs. A method comprises receiving a request to provision an SDN Datapath in the SDN. The request comprises performance metrics for the SDN Datapath and a geographic constraint to be applied to resources used in provisioning the SDN Datapath. The method further comprises assembling a candidate set of resources to provision the SDN Datapath and initiating provision of the SDN Datapath using resources selected from the candidate set. Assembling a candidate set of resources to provision the SDN Datapath comprises obtaining a geographic location attribute of resources in the SDN and populating the candidate set with those resources having a geographic location attribute satisfying the received geographic constraint.

Datapath provision in software defined networks

A method () of managing a communications network comprising a plurality of hosts by allocating instances of virtual network function components, VNFC, to hosts, the method comprising receiving () a request for allocation of an instance of a VNFC to a host, the instance belonging to an anti-affinity group, AAG, of instances and attempting allocation () of the instance to a host. If allocation of the instance fails () because for each host considered for allocation of the instance a first number of instances, WA, belonging to the AAG that are allocable to a single host would be exceeded by allocation of the instance to the host the method comprises assigning () to the instance a second number of instances, WA', belonging to the AAG that are allocable to a single host, wherein WA&#x2032; is greater than WA and reattempting allocation () of the instance. Following successful allocation, if sufficient capacity for the instance subsequently becomes available on another host and if the WA of the instance would not be exceeded by allocation of the instance to the other host, migrating () the instance to the other host; or following unsuccessful allocation, if there is sufficient capacity for the instance available on at least one host, increasing WA&#x2032; of the instance and recommencing by reattempting allocation ().

Allocating VNFC instances with anti affinity rule to hosts

A technique for resolving a link failure occurring on a link between a first virtualized network function, VNF, and a second VNF provided in a cloud computing environment is disclosed. A method implementation of the technique is performed by the first VNF and comprises receiving a link failure notification comprising link recovery status information indicating a current recovery status of the link, and triggering an action depending on the link recovery status information to resolve the link failure.

Technique for resolving a link failure

It is disclosed a method, an arrangement and a computer program for configuring a secure domain, SD, in a network functions virtualization infrastructure. The SD comprises virtual objects handling privileged information. NS instance information of a virtual object is obtained based on input from a party associated with the SD. The NS instance information is searched for a level of confidentiality and a geographic location information. When having identified the level of confidentiality and the geographic location information, the virtual object is allocated to the SD according to the geographic location information, based on the level of confidentiality and a specific role of the party. It is an advantage that access to a SD is allowed or granted based on the specific role of the party.

Method and arrangement for configuring a secure domain in a network functions virtualization infrastructure

Managing a communications network involves allocating hosts () for instances () of a virtual network function component (). From a request to allocate, a number N is obtained indicating a minimum number of the instances to be available, and a number M indicating how many additional instances are to be allocated. If the allocations are requested to be to different hosts (anti affinity) and if the sharing of the instances by the virtual network function component can be adapted in the event of unavailability, then allocating is carried out automatically () of N+M of the instances to less than N+M of the hosts, so that if any one of the allocated hosts becomes unavailable there are sufficient hosts so that the virtual network function component can still be shared across at least N of the instances. Fewer hosts are needed, saving costs.

Allocating host for instances with anti affinity rule with adaptable sharing to allow instances associated with different failure domains to share surviving hosts

Growing community of inventors

Pagani, Italy

Giuseppe Celozzi