The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jun. 27, 2023

Filed:

Jun. 30, 2020
Applicant:

Palo Alto Networks, Inc., Santa Clara, CA (US);

Inventors:

Leonid Burakovsky, Pleasanton, CA (US);

Sachin Verma, Danville, CA (US);

Fengliang Hu, Cupertino, CA (US);

I-Chun Chen, Santa Clara, CA (US);

How Tung Lim, San Jose, CA (US);

Assignee:

Palo Alto Networks, Inc., Santa Clara, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); H04L 9/40 (2022.01); H04W 24/08 (2009.01); H04W 12/122 (2021.01); H04L 61/5007 (2022.01); H04W 84/04 (2009.01); H04W 80/02 (2009.01);
U.S. Cl.
CPC ...
H04L 63/0263 (2013.01); H04L 61/5007 (2022.05); H04L 63/10 (2013.01); H04L 63/1458 (2013.01); H04L 63/1466 (2013.01); H04L 63/20 (2013.01); H04W 12/122 (2021.01); H04W 24/08 (2013.01); H04L 2463/141 (2013.01); H04W 80/02 (2013.01); H04W 84/04 (2013.01);
Abstract

Techniques for securing control and user plane separation in mobile networks (e.g., service provider networks for mobile subscribers, such as for 4G/5G networks) are disclosed. In some embodiments, a system/process/computer program product for securing control and user plane separation in mobile networks in accordance with some embodiments includes monitoring network traffic on a mobile network at a security platform to identify an Packet Forwarding Control Protocol (PFCP) message associated with a new session, in which the mobile network includes a 4G network or a 5G network; extracting a plurality of parameters from the PFCP message at the security platform; and enforcing a security policy at the security platform on the new session based on one or more of the plurality of parameters to secure control and user plane separation in the mobile network.


Find Patent Forward Citations

Loading…