公开(公告)号：US20180034781A1

公开(公告)日：2018-02-01

申请号：US15550530

申请日：2015-02-13

Applicant: NOKIA SOLUTIONS AND NETWORKS OY

Inventor： Bernd JAEGER ,  Stephane MAHIEU ,  Volker MENDISCH ,  Jing PING

IPC: H04L29/06 ,  G06F9/455

CPC classification number: H04L63/0263 ,  G06F9/45558 ,  G06F2009/45587 ,  G06F2009/45595 ,  H04L63/20

Abstract: An apparatus comprising at least one processing circuitry, and at least one memory for storing instructions to be executed by the processing circuitry, wherein the at least one memory and the instructions are configured to, with the at least one processing circuitry, cause the apparatus at least: to execute management tasks in an automated manner related to a control of security in a communication between two end points of a communication connection in a hybrid communication network, wherein the security is controlled for physical and virtual parts of the hybrid communication network, and to automatically control at least one of deployment, configuration and management of a security service including at least one security function instantiated or implemented in the hybrid communication network.

公开(公告)号：US20180316730A1

公开(公告)日：2018-11-01

申请号：US15770247

申请日：2015-10-22

Applicant: NOKIA SOLUTIONS AND NETWORKS OY

Inventor： Manfred SCHAEFER ,  Jing PING ,  Stephane MAHIEU

IPC: H04L29/06 ,  H04L12/24

CPC classification number: H04L63/20 ,  H04L41/0803 ,  H04L41/0883 ,  H04L41/0893 ,  H04L41/28

Abstract: An apparatus comprising at least one processing circuitry, and at least one memory for storing instructions to be executed by the processing circuitry, wherein the at least one memory and the instructions are configured to, with the at least one processing circuitry, cause the apparatus at least: to design an extended security zone configuration for a network service to be instantiated including at least one virtual network function in a communication network comprising virtualized network parts, wherein the extended security zone configuration assigns the at least one virtual network function according to local and/or global security requirements to at least one dedicated security zone, and to provide a security zone descriptor information element describing a final result of the extended security zone configuration design for usage in an information set defining a deployment variant of the network service to be instantiated