公开(公告)号：US20180248867A1

公开(公告)日：2018-08-30

申请号：US15958465

申请日：2018-04-20

Applicant: Huawei Technologies Co., Ltd.

Inventor： Wenji Liu ,  Jiangsheng Wang

IPC: H04L29/06 ,  H04L9/32 ,  H04L12/24 ,  G06F9/455

CPC classification number: H04L63/0823 ,  G06F9/45558 ,  G06F2009/45595 ,  H04L9/3268 ,  H04L29/06 ,  H04L41/0893

Abstract: Embodiments of the present application provide a certificate management method and apparatus in an NFV architecture. The certificate management method includes: determining, by an MANO, a storage network element, where the storage network element is configured to store a certificate of a VNFC, and the storage network element is different from the VNFC; creating, by the MANO, storage space in the storage network element, where the storage space is used to store the certificate of the VNFC; and sending, by the MANO, an address of the storage space to the VNFC, so that the VNFC accesses the address of the storage space, obtains the certificate of the VNFC, and directly communicates with another network element by using the certificate stored in the storage network element. The VNFC does not locally store the certificate.

公开(公告)号：US20180063184A1

公开(公告)日：2018-03-01

申请号：US15795623

申请日：2017-10-27

Applicant: HUAWEI TECHNOLOGIES CO., LTD.

Inventor： Chengyan FENG ,  Jiangsheng Wang

IPC: H04L29/06 ,  H04L12/24

Abstract: The present invention discloses a software security verification method, a device, and a system, and relates to the communications field, so as to resolve a problem in the prior art that security verification on a VNF packet increases a VNF instantiation delay and reduces VNF instantiation performance. In a specific solution, after a first device receives an instantiation request of a VNF, the first device performs security verification on a stored VNF packet of the VNF when or after starting to instantiate the VNF according to the instantiation request of the VNF, and the first device sends first result information to a second device when security verification on the VNF packet of the VNF succeeds. The first result information includes information that security verification on the VNF packet of the VNF succeeds. The present invention is applied to software security verification.

公开(公告)号：US20170338968A1

公开(公告)日：2017-11-23

申请号：US15673075

申请日：2017-08-09

Applicant: Huawei Technologies Co., Ltd.

Inventor： Chengyan Feng ,  Jiangsheng Wang

IPC: H04L9/32 ,  H04L9/08 ,  H04L12/46 ,  H04W12/04

CPC classification number: H04L9/3268 ,  G06F21/33 ,  G06F2221/2143 ,  H04L9/0891 ,  H04L12/4641 ,  H04L29/06 ,  H04L63/0823 ,  H04W12/04

Abstract: A certificate management method, a device, and a system relate to the communications field and for certificate management are used to resolve a problem that communication security of a virtual network system is degraded because after a virtualized network function (VNF) instance is terminated in the virtual network system, a private key corresponding to a certificate of the VNF instance may be illegally obtained by an attacker to forge an identity of the VNF instance. A specific solution includes obtaining, by a first device, a certificate identifier of a first instance, and updating certificate status information of the first instance to a revocation state according to the certificate identifier of the first instance, or sending, by the first device, a first request message to a second device, where the first request message requests to revoke a certificate of the first instance.