CN116438779B - 用于利用网络功能标识符实现入口消息速率限制的方法、系统和计算机可读介质 - Google Patents

用于利用网络功能标识符实现入口消息速率限制的方法、系统和计算机可读介质

Info

Publication number
CN116438779B
CN116438779B CN202180074770.9A CN202180074770A CN116438779B CN 116438779 B CN116438779 B CN 116438779B CN 202180074770 A CN202180074770 A CN 202180074770A CN 116438779 B CN116438779 B CN 116438779B
Authority
CN
China
Prior art keywords
network function
service
message rate
consumer
message
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202180074770.9A
Other languages
English (en)
Chinese (zh)
Other versions
CN116438779A (zh
Inventor
J·拉杰普特
S·B·马哈兰克
A·斯里瓦斯塔瓦
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Oracle International Corp
Original Assignee
Oracle International Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from US17/129,487 external-priority patent/US11528251B2/en
Priority claimed from US17/134,635 external-priority patent/US11943616B2/en
Application filed by Oracle International Corp filed Critical Oracle International Corp
Publication of CN116438779A publication Critical patent/CN116438779A/zh
Application granted granted Critical
Publication of CN116438779B publication Critical patent/CN116438779B/zh
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/10—Flow control; Congestion control
    • H04L47/22—Traffic shaping
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/10—Flow control; Congestion control
    • H04L47/32—Flow control; Congestion control by discarding or delaying data units, e.g. packets or frames
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/70—Admission control; Resource allocation
    • H04L47/82—Miscellaneous aspects
    • H04L47/822—Collecting or measuring resource availability data
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/321—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving a third party or a trusted authority
    • H04L9/3213—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving a third party or a trusted authority using tickets or tokens, e.g. Kerberos
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/08—Access security
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/16—Implementing security features at a particular protocol layer
    • H04L63/166—Implementing security features at a particular protocol layer at the transport layer

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Mobile Radio Communication Systems (AREA)
CN202180074770.9A 2020-11-06 2021-07-21 用于利用网络功能标识符实现入口消息速率限制的方法、系统和计算机可读介质 Active CN116438779B (zh)

Applications Claiming Priority (9)

Application Number Priority Date Filing Date Title
IN202041048552 2020-11-06
IN202041048552 2020-11-06
IN202041049614 2020-11-13
IN202041049614 2020-11-13
US17/129,487 US11528251B2 (en) 2020-11-06 2020-12-21 Methods, systems, and computer readable media for ingress message rate limiting
US17/129,487 2020-12-21
US17/134,635 2020-12-28
US17/134,635 US11943616B2 (en) 2020-11-13 2020-12-28 Methods, systems, and computer readable media for utilizing network function identifiers to implement ingress message rate limiting
PCT/US2021/042662 WO2022098405A1 (en) 2020-11-06 2021-07-21 Methods, systems, and computer readable media for utilizing network function identifiers to implement ingress message rate limiting

Publications (2)

Publication Number Publication Date
CN116438779A CN116438779A (zh) 2023-07-14
CN116438779B true CN116438779B (zh) 2026-02-27

Family

ID=81458176

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202180074770.9A Active CN116438779B (zh) 2020-11-06 2021-07-21 用于利用网络功能标识符实现入口消息速率限制的方法、系统和计算机可读介质

Country Status (4)

Country Link
EP (2) EP4241420A1 (enExample)
JP (2) JP7777585B2 (enExample)
CN (1) CN116438779B (enExample)
WO (2) WO2022098405A1 (enExample)

Families Citing this family (18)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11553342B2 (en) 2020-07-14 2023-01-10 Oracle International Corporation Methods, systems, and computer readable media for mitigating 5G roaming security attacks using security edge protection proxy (SEPP)
US11751056B2 (en) 2020-08-31 2023-09-05 Oracle International Corporation Methods, systems, and computer readable media for 5G user equipment (UE) historical mobility tracking and security screening using mobility patterns
US11825310B2 (en) 2020-09-25 2023-11-21 Oracle International Corporation Methods, systems, and computer readable media for mitigating 5G roaming spoofing attacks
US11832172B2 (en) 2020-09-25 2023-11-28 Oracle International Corporation Methods, systems, and computer readable media for mitigating spoofing attacks on security edge protection proxy (SEPP) inter-public land mobile network (inter-PLMN) forwarding interface
US11622255B2 (en) 2020-10-21 2023-04-04 Oracle International Corporation Methods, systems, and computer readable media for validating a session management function (SMF) registration request
US11943616B2 (en) 2020-11-13 2024-03-26 Oracle International Corporation Methods, systems, and computer readable media for utilizing network function identifiers to implement ingress message rate limiting
US11528251B2 (en) 2020-11-06 2022-12-13 Oracle International Corporation Methods, systems, and computer readable media for ingress message rate limiting
US11770694B2 (en) 2020-11-16 2023-09-26 Oracle International Corporation Methods, systems, and computer readable media for validating location update messages
US11895501B2 (en) 2020-12-08 2024-02-06 Oracle International Corporation Methods, systems, and computer readable media for automatic key management of network function (NF) repository function (NRF) access token public keys for 5G core (5GC) authorization to mitigate security attacks
US11818570B2 (en) 2020-12-15 2023-11-14 Oracle International Corporation Methods, systems, and computer readable media for message validation in fifth generation (5G) communications networks
US11812271B2 (en) 2020-12-17 2023-11-07 Oracle International Corporation Methods, systems, and computer readable media for mitigating 5G roaming attacks for internet of things (IoT) devices based on expected user equipment (UE) behavior patterns
US11700510B2 (en) 2021-02-12 2023-07-11 Oracle International Corporation Methods, systems, and computer readable media for short message delivery status report validation
US11516671B2 (en) 2021-02-25 2022-11-29 Oracle International Corporation Methods, systems, and computer readable media for mitigating location tracking and denial of service (DoS) attacks that utilize access and mobility management function (AMF) location service
US11553524B2 (en) 2021-03-04 2023-01-10 Oracle International Corporation Methods, systems, and computer readable media for resource object level authorization at a network function (NF)
US11689912B2 (en) 2021-05-12 2023-06-27 Oracle International Corporation Methods, systems, and computer readable media for conducting a velocity check for outbound subscribers roaming to neighboring countries
US12015923B2 (en) 2021-12-21 2024-06-18 Oracle International Corporation Methods, systems, and computer readable media for mitigating effects of access token misuse
US11843546B1 (en) * 2023-01-17 2023-12-12 Capital One Services, Llc Determining resource usage metrics for cloud computing systems
WO2025175524A1 (en) * 2024-02-22 2025-08-28 Zte Corporation Radio access network information exposure method, apparatus, and computer-readable medium

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1860809B (zh) 2003-10-21 2013-03-27 日本电气株式会社 无线线路共享网络系统和管理装置及其方法
EP2273737B1 (en) * 2009-06-30 2017-10-04 Alcatel Lucent Measurement-based resource access control
US9860390B2 (en) 2011-08-10 2018-01-02 Tekelec, Inc. Methods, systems, and computer readable media for policy event record generation
WO2015121941A1 (ja) 2014-02-13 2015-08-20 株式会社日立製作所 レート制御装置と基地局および無線通信システム
CN113691950A (zh) 2016-02-17 2021-11-23 日本电气株式会社 基于服务开放功能实施非ip数据监管的方法
US10334659B2 (en) * 2017-05-09 2019-06-25 Verizon Patent And Licensing Inc. System and method for group device access to wireless networks
WO2019034268A1 (en) * 2017-08-14 2019-02-21 Telefonaktiebolaget Lm Ericsson (Publ) METHOD FOR PERFORMING SERVICE FOR A SERVICE CONSUMER, AND CORRESPONDING NETWORK NODE AND COMPUTER PROGRAM PRODUCT
EP3815412B1 (en) 2018-06-26 2024-10-02 Nokia Solutions and Networks Oy Apparatus for a service based architecture
US10819636B1 (en) 2019-06-26 2020-10-27 Oracle International Corporation Methods, systems, and computer readable media for producer network function (NF) service instance wide egress rate limiting at service communication proxy (SCP)

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
ARIB, ATIS, CCSA, ETSI, TSDSI, TTA, TTC.Security architecture and procedures for 5G system.3rd Generation Partnership Project *
Technical Specification Group Services and System Aspects.2020,32-180页. *

Also Published As

Publication number Publication date
CN116438779A (zh) 2023-07-14
JP7777585B2 (ja) 2025-11-28
WO2022098405A1 (en) 2022-05-12
JP2023548370A (ja) 2023-11-16
WO2022098404A1 (en) 2022-05-12
EP4241420A1 (en) 2023-09-13
JP7611381B2 (ja) 2025-01-09
EP4241419A1 (en) 2023-09-13
JP2023548372A (ja) 2023-11-16

Similar Documents

Publication Publication Date Title
JP7611381B2 (ja) ネットワーク機能識別子を利用して受信メッセージレート制限を実施するための方法、システム、およびコンピュータ読み取り可能な媒体
US11943616B2 (en) Methods, systems, and computer readable media for utilizing network function identifiers to implement ingress message rate limiting
JP7770406B2 (ja) 第５世代（５ｇ）通信ネットワークにおいてメッセージ検証を実行するための方法、システムおよびコンピュータ可読媒体
JP7705947B2 (ja) アクセスおよびモビリティ管理機能（ＡＭＦ）位置サービスを利用する位置追跡攻撃およびサービス妨害（ＤｏＳ）攻撃を緩和するための方法、システム、およびコンピュータ読取可能媒体
JP7854452B2 (ja) 単一使用認証メッセージのための方法、システム、およびコンピュータ可読媒体
US12015923B2 (en) Methods, systems, and computer readable media for mitigating effects of access token misuse
JP2023548372A5 (enExample)
CN117280656A (zh) 用于隐藏网络功能实例标识符的方法、系统和计算机可读介质
US11582258B2 (en) Methods, systems, and computer readable media for mitigating denial of service (DoS) attacks at network functions (NFs)
CN117256124A (zh) 用于生成和使用一次性oauth 2.0访问令牌以保护特定的基于服务的架构（sba）接口的方法、系统和计算机可读介质
CN117859312B (zh) 通过验证过载控制信息来降低成功DoS攻击的可能性
US11974134B2 (en) Methods, systems, and computer readable media for validating subscriber entities against spoofing attacks in a communications network
US20250175801A1 (en) METHODS, SYSTEMS, AND COMPUTER READABLE MEDIA FOR DETECTING AND MITIGATING SECURITY ATTACKS ON PRODUCER NETWORK FUNCTIONS (NFs) USING MAPPINGS BETWEEN DYNAMICALLY ASSIGNED SERVICE-BASED INTERFACE (SBI) MESSAGE IDENTIFIERS AND PROXY NF IDENTIFIERS AT PROXY NF
WO2025117125A1 (en) Methods, systems, and computer readable media for detecting and mitigating security attacks on producer network functions
US12425863B2 (en) Methods, systems, and computer readable media for detecting and mitigating security attacks on producer network functions (NFs) using error response messages
CN119343941A (zh) 用于网络功能（nf）和nf储存库功能（nrf）之间的订阅/通知和发现消息的完整性保护的方法、系统和计算机可读介质
US12470592B2 (en) Methods, systems, and computer readable media for mitigating network security attacks by linking network function (NF) discovery results with subsequent messages at proxy NF
CN116491140A (zh) 用于入口消息速率限制的方法、系统和计算机可读介质

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant