-
公开(公告)号:WO2022235372A1
公开(公告)日:2022-11-10
申请号:PCT/US2022/023812
申请日:2022-04-07
Applicant: ORACLE INTERNATIONAL CORPORATION
Inventor: RAJPUT, Jay , SINGH, Virendra , SRIVASTAVA, Ankit
IPC: H04L9/40
Abstract: A method for automatically managing a platform firewall using a network function (NF) repository function (NRF) or service communications proxy (SCR) includes receiving message relating to registering, updating or deregistering an NF profile in an NF profiles database separate from a platform firewall. The method further includes determining that the registering, updating, or deregistering of the NF profile requires a change to a firewall rules configuration of the platform firewall. The method further includes, in response to determining that the registering, updating, or deregistering of the NF profile requires a change to the firewall rules configuration of the platform firewall, automatically updating, by the NRF or SCR, the firewall rules configuration of the platform firewall.
-
公开(公告)号:WO2022098405A1
公开(公告)日:2022-05-12
申请号:PCT/US2021/042662
申请日:2021-07-21
Applicant: ORACLE INTERNATIONAL CORPORATION
Inventor: RAJPUT, Jay , MAHALANK, Shashikiran, Bhalachandra , SRIVASTAVA, Ankit
Abstract: Methods, systems, and computer readable media for ingress message rate limiting are disclosed. One method includes, at a network node, receiving a service access request message from a service consumer network function and extracting, from the received service access request message, an access token that includes a consumer network function instance identifier identifying the service consumer network function. The method further includes determining, using the consumer network function instance identifier, that an allowed ingress message rate associated with the service consumer network function has been reached or exceeded and in response to determining that the allowed ingress message rate associated with the service consumer network function has been reached or exceeded, performing a message rate limiting action.
-
公开(公告)号:WO2022251324A1
公开(公告)日:2022-12-01
申请号:PCT/US2022/030874
申请日:2022-05-25
Applicant: ORACLE INTERNATIONAL CORPORATION
Inventor: SRIVASTAVA, Ankit , RAJPUT, Jay , SINGH, Virendra
IPC: H04L67/51 , H04L67/562 , H04L67/568 , H04W4/50
Abstract: A method for distributing network function (NF) high availability (HA) topology information in a core network includes, at an NF repository function (NRF) including at least one processor, receiving, from a plurality of producer NFs in an NF set, NFRegister requests including NF HA topology information for the producer NFs. The method further includes registering the producer NFs and storing the NF HA topology information for the producer NFs. The method further includes receiving, from a consumer NF or service communication proxy (SCP), an NFDiscover request containing at least one service discovery parameter that corresponds to a service provided by the producer NFs. The method further includes responding to the NFDiscover request by generating an NFDiscover response, including, in the NFDiscover response, the NF HA topology information for the producer NFs, and transmitting the NFDiscover response to the consumer NF or SCP.
-
4.
公开(公告)号:WO2022186911A1
公开(公告)日:2022-09-09
申请号:PCT/US2022/013268
申请日:2022-01-21
Applicant: ORACLE INTERNATIONAL CORPORATION
Inventor: SINGH, Virendra , RAJPUT, Jay , SRIVASTAVA, Ankit
Abstract: A method for resource object level authorization at a network function (NF) includes maintaining, by a first NF, a service based interface (SBI) resource object access authorization policy database containing policies for controlling access to SBI resource objects and dynamically populating a resource object owner database containing records for resource objects and corresponding resource object owners. The method further includes receiving, by the first NF and from a second NF, a first SBI resource object access request for accessing a resource object, accessing, using information from the first SBI resource object access request, the resource object access authorization policy database and the resource object owner database, determining that an access to the resource object requested by the first resource object access request is not permitted, and preventing the access to the resource object requested by the first resource object access request.
-
5.
公开(公告)号:WO2022093319A1
公开(公告)日:2022-05-05
申请号:PCT/US2021/033031
申请日:2021-05-18
Applicant: ORACLE INTERNATIONAL CORPORATION
Inventor: SAPRA, Kawal , SRIVASTAVA, Ankit , ARAVAMUDHAN, Venkatesh
IPC: H04L12/801
Abstract: Methods, systems, and computer readable media for rank processing in network function selection. A method includes periodically receiving, at a network function discovery node, and from each producer network function of a number of producer network functions, a current load value specifying a computing load carried by the producer network function. The network function discovery node is configured for performing service discovery between network functions of a telecommunications core network. The method includes determining, for each producer network function, an available capacity for the producer network function based on the current load value and a published capacity of the producer network function. The method includes responding to a network function discovery request from a consumer network function using the available capacity of each producer network function.
-
6.
公开(公告)号:WO2023038756A1
公开(公告)日:2023-03-16
申请号:PCT/US2022/039977
申请日:2022-08-10
Applicant: ORACLE INTERNATIONAL CORPORATION
Inventor: RAJPUT, Jay , SINGH, Virendra , SRIVASTAVA, Ankit
IPC: H04L63/40 , H04W12/122
Abstract: The subject matter described herein includes a method for reducing the likelihood of successful denial of service (DoS) attacks by validating overload control information (OCI) scope information against network function (NF) profile information obtained using target resource identification information. The method includes receiving a service based interface (SB I) request message, obtaining, from the SBI request message, target resource identification information, obtaining NF profile information using the target resource identification information and storing the NF profile information, receiving an SBI response message including overload control information and scope information for the overload control information, using the stored NF profile information to determine whether the scope information for the overload control information is valid, and, in response to determining that the scope information for the overload control information is invalid, rejecting the SBI response message.
-
公开(公告)号:WO2023287930A1
公开(公告)日:2023-01-19
申请号:PCT/US2022/037031
申请日:2022-07-13
Applicant: ORACLE INTERNATIONAL CORPORATION
Inventor: RAJPUT, Jay , SINGH, Virendra , SRIVASTAVA, Ankit
IPC: H04L67/30 , H04L67/51 , H04L67/1001 , H04L67/00
Abstract: A method for generating network function (NF) set load information aware NF discovery responses includes, at an NF repository function (NRF), receiving NFUpdate messages from producer NF instances. The method further includes collecting or generating, from the NFUpdate messages, NF set load information for NF sets of which the producer NF instances are members. The method further includes receiving, from a consumer NF, an NF discovery request. The method further includes generating, using query parameters in the NF discovery request, an NF discovery response including NF profiles of producer NF instances corresponding to the query and, including, in the NF discovery response, NF set load information for NF sets of producer NF instances whose NF profiles are included in the NF discovery response. The method further includes forwarding the NF discovery response including the NF set load information to the consumer NF.
-
公开(公告)号:WO2022271489A1
公开(公告)日:2022-12-29
申请号:PCT/US2022/033429
申请日:2022-06-14
Applicant: ORACLE INTERNATIONAL CORPORATION
Inventor: SRIVASTAVA, Ankit , JHA, Avinash , SHIVARAJAPURA, Anup , ARAVAMUDHAN, Venkatesh
IPC: H04L47/10 , H04L47/70 , H04W28/02 , H04W88/18 , H04L47/826 , H04W28/0231 , H04W28/0289 , H04W4/50 , H04W88/182
Abstract: A method for optimizing network traffic distribution using timeslot- based tracked producer network function (NF) performance during producer NF selection is performed at a service communication proxy (SCR) including at least one processor. The method includes tracking a performance characteristic of producer NFs across different timeslots. The method further includes receiving, from a consumer NF, a service based interface (SBI) service request. The method further includes identifying eligible producer NFs capable of handling the SBI service request. The method further includes selecting, from the eligible producer NFs, in a manner that at least partially overrides priorities of the eligible producer NFs, and based on the tracked performance characteristic across the different timeslots, a producer NF to handle the SBI service request. The method further includes forwarding the SBI service request to the producer NF.
-
公开(公告)号:WO2022212019A1
公开(公告)日:2022-10-06
申请号:PCT/US2022/020185
申请日:2022-03-14
Applicant: ORACLE INTERNATIONAL CORPORATION
Inventor: SRIVASTAVA, Ankit , JHA, Avinash , SHIVARAJAPURA, Anup , ARAVAMUDHAN, Venkatesh
IPC: H04L41/0226
Abstract: A method for providing service based interface (SBI) support for network elements (NEs) not supporting SBI service operations includes receiving SBI configuration parameters for an NE not supporting SBI service operations. The method further includes establishing a connection with the NE not supporting SBI service operations. The method further includes registering, with a network function (NF) repository function (NRF) and using the SBI configuration parameters, the NE not supporting SBI service operations. The method further includes monitoring, over the connection, status of the NE not supporting SBI service operations. The method further includes updating, with the NRF, the status of the NE not supporting SBI service operations.
-
10.
公开(公告)号:WO2022191932A1
公开(公告)日:2022-09-15
申请号:PCT/US2022/014087
申请日:2022-01-27
Applicant: ORACLE INTERNATIONAL CORPORATION
Inventor: SINGH, Virendra , RAJPUT, Jay , SRIVASTAVA, Ankit
IPC: H04L9/40 , H04W12/084 , H04W92/02
Abstract: A method for delegated authorization at a service communication proxy (SCR) includes intercepting, from a consumer network function (NF) that does not support access token based authorization, a service based interface (SBI) request. The method further includes operating as an access token authorization client to obtain a first access token on behalf of the consumer NF. The method further includes using the first access token to enable the consumer NF to access the service provided by a first producer NF that requires access-token-based authorization. The SCR may also function as an access token authorization server on behalf of an NRF that does not support access-token-based authorization
-
-
-
-
-
-
-
-
-