公开(公告)号：US10721258B2

公开(公告)日：2020-07-21

申请号：US16526364

申请日：2019-07-30

Applicant: Intel Corporation

Inventor： Kapil Sood ,  Manuel Nedbal

IPC: H04L29/06 ,  H04L12/24 ,  G06F21/53 ,  H04L29/08 ,  G06F21/50

Abstract: Technologies for secure personalization of a security monitoring virtual network function (VNF) in a network functions virtualization (NFV) architecture include various security monitoring components, including a NFV security services controller, a VNF manager, and a security monitoring VNF. The security monitoring VNF is configured to receive provisioning data from the NFV security services controller and perform a mutually authenticated key exchange procedure using at least a portion of the provisioning data to establish a secure communication path between the security monitoring VNF and a VNF manager. The security monitoring VNF is further configured to receive personalization data from the VNF manager via the secure communication path and perform a personalization operation to configure one or more functions of the security monitoring VNF based on the personalization data. Other embodiments are described and claimed.

公开(公告)号：US10230765B2

公开(公告)日：2019-03-12

申请号：US15396533

申请日：2016-12-31

Applicant: Intel Corporation

Inventor： Kapil Sood ,  Manuel Nedbal ,  Thomas M. Slaight ,  Brian J. Skerry ,  Ren Wang

IPC: H04L29/06 ,  G06F21/55

Abstract: Examples may include techniques to securely provision, configure, and de-provision virtual network functions for a software defined network or a cloud infrastructure elements. A policy for a virtual network function may be received, at a secure execution partition of circuitry, and the virtual network function configured to implement the policy by the secure execution partition of the circuitry. The secure execution partition may connect to the virtual network function through a virtual switch and may cause the virtual network function to implement a network function based on the policy.

公开(公告)号：US09871823B2

公开(公告)日：2018-01-16

申请号：US14582063

申请日：2014-12-23

Applicant: INTEL CORPORATION

Inventor： Kapil Sood ,  Manuel Nedbal ,  Thomas M. Slaight ,  Brian J. Skerry ,  Ren Wang

IPC: H04L29/06 ,  G06F21/55

CPC classification number: H04L63/20 ,  G06F21/554 ,  H04L63/0272 ,  H04L63/10 ,  H04L63/101 ,  H04L63/104 ,  H04L63/1441

Abstract: Examples may include techniques to securely provision, configure, and de-provision virtual network functions for a software defined network or a cloud infrastructure elements. A policy for a virtual network function may be received, at a secure execution partition of circuitry, and the virtual network function configured to implement the policy by the secure execution partition of the circuitry. The secure execution partition may connect to the virtual network function through a virtual switch and may cause the virtual network function to implement a network function based on the policy.

公开(公告)号：US09742790B2

公开(公告)日：2017-08-22

申请号：US14866565

申请日：2015-09-25

Applicant: Intel Corporation

Inventor： Kapil Sood ,  Manuel Nedbal

IPC: H04L29/06 ,  H04L12/24 ,  G06F21/50 ,  G06F21/53

CPC classification number: H04L63/1425 ,  G06F21/50 ,  G06F21/53 ,  H04L41/28 ,  H04L63/062 ,  H04L63/20

Abstract: Technologies for secure personalization of a security monitoring virtual network function (VNF) in a network functions virtualization (NFV) architecture include various security monitoring components, including a NFV security services controller, a VNF manager, and a security monitoring VNF. The security monitoring VNF is configured to receive provisioning data from the NFV security services controller and perform a mutually authenticated key exchange procedure using at least a portion of the provisioning data to establish a secure communication path between the security monitoring VNF and a VNF manager. The security monitoring VNF is further configured to receive personalization data from the VNF manager via the secure communication path and perform a personalization operation to configure one or more functions of the security monitoring VNF based on the personalization data. Other embodiments are described and claimed.