Rakuten Mobile, Inc.

John Carse

Pradheepkumar Singaravelu

Bharath Kumar Ravichandran

Sagiv Draznin

Sharad Sriwastawa

Tareq Amin

Provided are a method, system, and computer-readable recording medium for registering a node in a zero trust remote access system. The method includes: receiving a request to subscribe a node to a zero trust remote access system for a network; generating a subscription identification (ID) for the node based on one or more parameters of the node; configuring the node with security logging; initiating a service of the node based on a trust percentage calculated for the node according to a security configuration of the node; and receiving security logs from the node based on the configured security logging.

Secure monitoring for trusted/untrusted network node access in cloud-based telecommunication and enterprise network

Provided are a method, system, and computer-readable recording medium for controlling zero trust remote access to a target node in a network system. The method includes: receiving a request of a user to access the target node in the network system; generating, based on parameters of the user and the target node, an access policy segmentation for the user to access the target node; providing, based on the generated access policy segmentation, the user with access to the target node; and terminating, based on the generated access policy segmentation, access of the user to the target node.

Segmentation and access control for trusted nodes in cloud-based telecommunication and enterprise network

Provided are a method, system, and computer-readable recording medium for controlling zero trust remote access to a network system. The method includes: receiving a request of a user to access a target node in the network system; determining whether the user is a trusted user or an untrusted user based on whether the user has a subscription identification (ID) registered and valid in the network system; based on determining that the user is the untrusted user, generating the subscription ID for the user; validating a trust of the user; determining a validity period for the subscription ID of the user based on the validated trust; and providing the user with access to the target node in accordance with the validity period.

Methods and procedures to protect network nodes in cloud-based telecommunication and enterprise networks

A server of a mobile network operator (MNO) executes network control logic for unbundling vertically integrated software on specialized hardware equipment, referred to here as a host. For example, the server performs a handshake with the host, and establishes an encrypted channel. The server then negotiates with the host, and determines those interfaces that the host will expose to third party software. The server, based on a current need of the MNO for a network service, compares the negotiation results with contents of a smart library. If the smart library does not have a registered and suitable app for the network service, the server obtains metadata corresponding to the app from a software supplier. The server then, for example, tests the metadata on a mockup of the host, under the control of the server. The host eventually runs the app, providing the network service without requiring an entire software revision of the host.

Growing community of inventors

Tokyo, Japan

John Carse