公开(公告)号：US12041078B2

公开(公告)日：2024-07-16

申请号：US17468117

申请日：2021-09-07

Applicant: Oracle International Corporation

Inventor： Jay Rajput ,  Virendra Singh ,  Ankit Srivastava

IPC: H04L29/06 ,  H04L9/40

CPC classification number: H04L63/1458 ,  H04L63/0281 ,  H04L63/123

Abstract: The subject matter described herein includes a method for reducing the likelihood of successful denial of service (DoS) attacks by validating overload control information (OCI) scope information against network function (NF) profile information obtained using target resource identification information. The method includes receiving a service based interface (SBI) request message, obtaining, from the SBI request message, target resource identification information, obtaining NF profile information using the target resource identification information and storing the NF profile information, receiving an SBI response message including overload control information and scope information for the overload control information, using the stored NF profile information to determine whether the scope information for the overload control information is valid, and, in response to determining that the scope information for the overload control information is invalid, rejecting the SBI response message.

公开(公告)号：US11950178B2

公开(公告)日：2024-04-02

申请号：US17392288

申请日：2021-08-03

Applicant: Oracle International Corporation

Inventor： Virendra Singh ,  Jay Rajput ,  Ankit Srivastava

IPC: H04W48/16 ,  H04W24/02 ,  H04W40/06 ,  H04W40/20 ,  H04W40/24

CPC classification number: H04W48/16 ,  H04W24/02 ,  H04W40/06 ,  H04W40/20 ,  H04W40/242

Abstract: A method for optimized routing of service based interface (SBI) request messages to remote network function (NF) repository functions (NRFs) using indirect communications via a service communication proxy (SCP) includes, at an SCP including at least one processor, receiving an SBI request message. The method further includes forwarding the SBI request message to a remote NRF. The method further includes determining that the remote NRF is unable to process the SBI request message, and, in response to determining that the remote NRF is unable, identifying a georedundant mate of the remote NRF. The method further includes forwarding the SBI request message to the georedundant mate NRF of the remote NRF that is unable to process the SBI request message.

公开(公告)号：US20230308908A1

公开(公告)日：2023-09-28

申请号：US17706557

申请日：2022-03-28

Applicant: Oracle International Corporation

Inventor： Jay Rajput ,  Virendra Singh ,  Ankit Srivastava

IPC: H04W24/04 ,  H04L45/00 ,  H04L67/02

CPC classification number: H04W24/04 ,  H04L45/22 ,  H04L67/02 ,  H04L67/56

Abstract: A method for error information propagation from a service communication proxy (SCP) to a consumer network function (NF) to support a circuit breaker design at the consumer NF includes receiving, at the SCP and from the consumer NF, a first service based interface (SBI) service request message. The method further includes attempting, by the SCP, to forward the first SBI service request to N producer NF instances, N being an integer of at least one. The method further includes detecting, by the SCP, an error involving the N producer NF instances. The method further includes performing, by the SCP, successful alternate routing of the first SBI service request message to an (N+1)th producer NF instance. The method further includes receiving, by the SCP, a success response message from the (N+1)th producer NF instance. The method further includes propagating, by the SCP, with the success response message and to the consumer NF, error information regarding the N producer NF instances.

公开(公告)号：US11611626B1

公开(公告)日：2023-03-21

申请号：US17334268

申请日：2021-05-28

Applicant: Oracle International Corporation

Inventor： Ankit Srivastava ,  Jay Rajput ,  Virendra Singh

IPC: H04L67/51 ,  H04L67/1095 ,  H04L67/5682

Abstract: A method for distributing network function (NF) high availability (HA) topology information in a core network includes, at an NF repository function (NRF) including at least one processor, receiving, from a plurality of producer NFs in an NF set, NFRegister requests including NF HA topology information for the producer NFs. The method further includes registering the producer NFs and storing the NF HA topology information for the producer NFs. The method further includes receiving, from a consumer NF or service communication proxy (SCP), an NFDiscover request containing at least one service discovery parameter that corresponds to a service provided by the producer NFs. The method further includes responding to the NFDiscover request by generating an NFDiscover response, including, in the NFDiscover response, the NF HA topology information for the producer NFs, and transmitting the NFDiscover response to the consumer NF or SCP.

公开(公告)号：US11895080B2

公开(公告)日：2024-02-06

申请号：US17356451

申请日：2021-06-23

Applicant: Oracle International Corporation

Inventor： Jay Rajput ,  Virendra Singh ,  Ankit Srivastava

IPC: H04L61/103 ,  H04L41/12 ,  H04L67/56

CPC classification number: H04L61/103 ,  H04L41/12 ,  H04L67/56

Abstract: A method for resolution of inter-network domain names between telecommunications networks includes storing, at a security edge protection proxy (SEPP) of a home network, a mapping between a domain name and a network address of a producer network function of the home network. The method includes receiving, at the SEPP of the home network, a request message from a consumer network function of a visitor network. The method includes resolving, at the SEPP of the home network, a request message domain name of the request message using the mapping between the domain name and the network address of the producer network function of the home network.

公开(公告)号：US11843580B2

公开(公告)日：2023-12-12

申请号：US17308018

申请日：2021-05-04

Applicant: Oracle International Corporation

Inventor： Jay Rajput ,  Virendra Singh ,  Ankit Srivastava

IPC: H04L9/40

CPC classification number: H04L63/0263 ,  H04L63/0227 ,  H04L63/0281

Abstract: A method for automatically managing a platform firewall using a network function (NF) repository function (NRF) or service communication proxy (SCP) includes receiving message relating to registering, updating, or deregistering an NF profile in an NF profiles database separate from a platform firewall. The method further includes determining that the registering, updating, or deregistering of the NF profile requires a change to a firewall rules configuration of the platform firewall. The method further includes, in response to determining that the registering, updating, or deregistering of the NF profile requires a change to the firewall rules configuration of the platform firewall, automatically updating, by the NRF or SCP, the firewall rules configuration of the platform firewall.

公开(公告)号：US20230232322A1

公开(公告)日：2023-07-20

申请号：US17578300

申请日：2022-01-18

Applicant: Oracle International Corporation

Inventor： Virendra Singh ,  Ankit Srivastava ,  Jay Rajput

IPC: H04W48/18 ,  H04W48/16 ,  H04W76/18 ,  H04W60/00 ,  H04W8/26

CPC classification number: H04W48/18 ,  H04W48/16 ,  H04W76/18 ,  H04W60/00 ,  H04W8/26

Abstract: A method for prioritizing among alternate network function (NF) instances includes registering a first NF profile of a first NF instance with a first NF repository function (NRF), and defining, as part of the first NF profile, alternate NF instance information identifying a plurality of individual alternate NF instances to function as backups in response to unavailability of the first NF instance and specifying, for each alternate NF instance, a priority attribute value indicating a relative priority of the alternate NF instance with respect to the other alternate NF instances. The method further includes, at a first consumer NF or SCP, discovering, from the first NRF, the first NF profile of the first NF instance, detecting unavailability of the first NF instance, and, using the alternate NF instance information in the first NF profile to select and contact one of the alternate NF instances identified by the alternate NF instance information.

公开(公告)号：US20230217355A1

公开(公告)日：2023-07-06

申请号：US17569319

申请日：2022-01-05

Applicant: Oracle International Corporation

Inventor： Ankit Srivastava ,  Sridhar Karuturi ,  Virendra Singh

IPC: H04W48/16 ,  H04W48/08 ,  H04W72/04

CPC classification number: H04W48/16 ,  H04W48/08 ,  H04W72/042

Abstract: A method for communicating delegated NF discovery results between SCPs and using the delegated NF discovery results for alternate SBI service request routing includes receiving, at a first SCP and from a consumer NF instance, an SBI service request. The method further includes determining that delegated NF discovery is required, and, in response, performing delegated NF discovery on behalf of the consumer NF instance. The method further includes receiving an NF discovery response including delegated NF discovery results. The method further includes sending the SBI service request including the delegated NF discovery results to a second SCP. The method further includes receiving, at a second SCP, the SBI service request including the delegated NF discovery results, forwarding the SBI service request towards a first producer NF instance selected by the first SCP, detecting failure of routing or processing of the SBI service request, and using the delegated NF discovery results for alternate routing of the SBI service request.

公开(公告)号：US20230022955A1

公开(公告)日：2023-01-26

申请号：US17376095

申请日：2021-07-14

Applicant: Oracle International Corporation

Inventor： Jay Rajput ,  Virendra Singh ,  Ankit Srivastava ,  Shashikiran Bhalachandra Mahalank

IPC: H04L12/801 ,  H04L29/08

Abstract: A method for generating and using network function (NF) set load information, the method includes, at a service communications proxy (SCP), receiving service based interface (SBI) requests from consumer NFs. The method further includes forwarding the SBI requests to producer NF instances that are members of an NF set. The method further includes receiving responses to the SBI requests from the producer NF instances. The method further includes determining NF instance load control information (LCI) for the producer NF instances using the responses. The method further includes computing, by the SCP and from the NF instance LCI for the producer NF instances, NF set LCI for the NF set. The method further includes communicating the NF set LCI for the NF set to at least one of the consumer NFs or using the NF set LCI for the NF set to select a producer NF instance within an NF set to provide a service for one of the consumer NFs.

公开(公告)号：US20220294775A1

公开(公告)日：2022-09-15

申请号：US17198815

申请日：2021-03-11

Applicant: Oracle International Corporation

Inventor： Virendra Singh ,  Jay Rajput ,  Ankit Srivastava

IPC: H04L29/06

Abstract: A method for delegated authorization at a service communications proxy (SCP) includes intercepting, from a consumer network function (NF) that does not support access token based authorization, a service based interface (SBI) request. The method further includes operating as an access token authorization client to obtain a first access token on behalf of the consumer NF. The method further includes using the first access token to enable the consumer NF to access the service provided by a first producer NF that requires access-token-based authorization. The SCP may also function as an access token authorization server on behalf of an NRF that does not support access-token-based authorization