DE202022104059U1 - Machine learning based intelligent system for 5G network security - Google Patents

Abstract

A machine learning based intelligent system for 5G network security, the system includes:
A 5G local communications network (1) having a 5G cellular communications access point (11) connectable to a network interface (12), and a first 5G cellular communications network module (13) connected to the 5G cellular communications access point (11) and can generate secure default parameter data for the 5G local communications network;
a receiver circuit (2) configured to receive a first 5G cellular communication packet from the 5G cellular communication access point (11), the first 5G cellular communication packet including a destination address;
a portable 5G cellular communication module (3) capable of dual communication of 5G cellular communication signals with the first 5G cellular communication network module (13);
a decryption module (5) configured to decrypt payloads of packets from the 5G cellular communications access point (11) using the 5G cellular communications network security key, and
a second 5G cellular communication network module (4) adapted for dual communication of 5G cellular communication signals with the first 5G cellular communication network module (13) and the portable 5G cellular communication module (3);
wherein the 5G portable cellular communication module (3) is operable to issue an authorized signal to the first 5G cellular communication network module (13) such that the first 5G cellular communication network module (13) transmits the secure default parameter data to the portable 5G cellular communication network module -Communication module (3) in response to that transmits authorized signals from the portable 5G cellular communication module (3);
wherein the 5G portable cellular communications module (3) is further operable to store the secure default parameter data received from the first 5G cellular communications network module (13) and to store the secure default parameter data in response to user manipulation of the 5G portable cellular communications module (3) transmits to the second 5G cellular communication network module (4); and
wherein the second 5G cellular communications network module (4) is operable to decrypt the secure standard parameter data received from the portable 5G cellular communications module (3) and to log into the local 5G cellular communications network.

Description

FIELD OF THE INVENTION

The present invention relates to the field of cellular communications.

The present invention relates to the field of 5G network security in cellular communications.

More particularly, the present invention relates to a machine learning based intelligent system for 5G network security.

BACKGROUND OF THE INVENTION

The subject matter discussed in the background section should not be assumed to constitute prior art merely by virtue of its mention in the background section. Likewise, it should not be assumed that any problem mentioned in the background section or associated with the subject matter of the background section has already been recognized in the prior art. The subject matter of the background section merely presents various approaches, which in themselves may also be inventions.

AU2021277595 MULTI-ACCESS DISTRIBUTED EDGE SECURITY IN MOBILE NETWORKS Techniques for providing distributed multi-access edge security in mobile networks (e.g. service provider networks for mobile subscribers, such as for 5G networks) are disclosed. In some embodiments, a system/process/computer program product for distributed security at the edge of multi-access cellular networks, according to some embodiments, comprises monitoring network traffic in a service provider network at a security platform to identify a new session, where the service provider network is a 5G network or a converged one 5G network included

WO/2020/068521 DISK-BASED SECURITY IN MOBILE NETWORKS Techniques for providing disk-based security in mobile networks (eg, service provider networks for mobile subscribers) are disclosed. In some embodiments, a system/process/computer program product for network slice-based security in mobile networks, according to some embodiments, comprises monitoring network traffic in a service provider network at a security platform to identify a new session, where the service provider network is a 5G network or a converged 5G network includes; extracting network slice information for user traffic associated with the new session at the security platform; and determining a security policy to apply to the new session at the security platform based on the network slice information.

US20220007195 SECURITY SYSTEM FOR CONTROLLING 5G NETWORK TRAFFIC The technology includes a process performed by a security system of a 5G network. The security system is instantiated to sort inbound or outbound network traffic at an edge of the 5G network into one of multiple groups, each uniquely associated with one of multiple functions or applications and one of multiple levels of security. The system can inspect portions of inbound network traffic that contain addressing information required for network traffic to reach an intended application or function, sort inbound network traffic into groups based in part on inspecting portions of network traffic, and identify network traffic for 5G - Dynamically route network based on a specific security level associated with a specific application or function of each of the groups.

US20200196144 SYSTEM FOR 5G ENABLED RAPID BANDWIDTH DEPLOYMENT Embodiments of the present invention provide a system for rapid bandwidth access provisioning across multiple entities for secure, accelerated bandwidth provisioning for entity connectivity. In this way, the invention provides a private, secure 5G connectivity network to create specific remote connectivity points for entity-to-entity connections. The 5G network can allow any user within the entity with authentication to connect from any point-to-point faster, with much more time for transmission using an existing wavelength within 5G technology. Additionally, in some embodiments, the system may provide a dedicated bandwidth pipeline that enables users of the entity to trade or communicate within milliseconds. This can be provided via geographic location or similar and allows for 5G deployment and submission that is faster than traditional fiber-based connectivity desired for enterprise communications.

US20200128399 SERVICE-BASED SECURITY PER NETWORK NAME IN MOBI LEN NETWORKS Techniques for providing service-based security per data network name in mobile networks (e.g. mobile subscriber service provider networks) are disclosed. In some embodiments, a system/process/computer program product for service-based security per data network name in mobile networks, according to some embodiments, comprises monitoring network traffic on a service provider network at a security platform to identify a new session, where the service provider network is a 5G network or a converged 5G -Network includes; extracting network name information for user traffic associated with the new session at the security platform; and determining a security policy to apply to the new session at the security platform based on the network name information.

US20210243232 SECURITY OF MULTI-ACCESS EDGE COMPUTING SERVICES IN MOBILE NETWORKS THROUGH APPLICATION PROGRAMMING INTERFACE PARSING Techniques to provide security for multi-access edge computing (MEC) services in mobile networks (e.g. service provider networks for mobile subscribers , as for 5G networks) by parsing application programming interfaces (APIs) are disclosed. In some embodiments, a system/process/computer program product for securing MEC services in mobile networks by parsing APIs, according to some embodiments, comprises monitoring network traffic in a mobile network on a security platform to identify an API message associated with a new session, wherein the mobile network comprises a 5G network or a converged 5G network that includes a MEC (Multi-Access Edge Computing) service; extracting mobile network identification information from the API message on the security platform; and determining a security policy to be applied to the new session on the security platform based on the mobile network identification information.

US20220007192 VULNERABILITY, RISK AND THREAT DETECTION (VRT) SECURITY SYSTEM The technology includes a process performed by a security system of a 5G network to protect against a cyber attack. The system can instantiate a function to monitor and control incoming network traffic at an edge of the 5G network in accordance with a security model based on a vulnerability parameter, a risk parameter and a threat parameter. The system can process the incoming network traffic with the security model to output a vulnerability-risk-threat score (VRT) that characterizes the incoming network traffic in terms of vulnerability parameter, risk parameter and threat parameter, and one or more actions based on it of the VRT score in order to defuse the cyber attack. The measure(s) may include blocking incoming network traffic at the 5G network border.

IN201841040509 GROUP ANONYMOUS DYNAMIC SLICE ENABLED 5G SOFTWARIZED SYSTEMS WITH PRIVACY PRESERVING SERVICE ACCESS “Accordingly, embodiments herein disclose a system and method for group anonymous user communication and service access in a 5G network system (1000) context. In the 5G network system (1000), multiple network slices are created using network function virtualization to handle different needs from different industries. Security and privacy is one of the most important requirements in 5G networks to protect the service access behavior of users/user devices and the virtualized mobile network infrastructure. In particular, this disclosure focuses on the secure association of the network slice entities to provide services to user devices (100a-100n). In one embodiment, the method can be used to preserve the privacy of users/user devices' service access behavior while accessing services from service providers or nearby users/user devices in case of device-to-device communication. The unique features of this disclosure are anonymous communication with group anonymity, securing association of network slice instances, and mitigating network slice topology learning attacks during secure slice formation in softwareized 5G networks.

US20220007191 SECURITY SYSTEM FOR MANAGEMENT OF 5G NETWORK TRAFFIC The technology includes a procedure performed by a system of a telecommunications network to manage the network traffic of a 5G network. The system can instantiate a security system to sort incoming or outgoing network traffic at a 5G network edge into multiple groups, each uniquely associated with multiple traffic types and multiple security levels. The system can examine data segments contained in incoming network traffic and sort multiple pieces of network traffic into the groups, based in part on examining the data segments. The system can dynamically adjust an available bandwidth of the 5G network based on each load of each of the groups, and distribute the pieces of network traffic in accordance with a traffic type and a security level of each of the groups.

US20220007194 DISTRIBUTED SECURITY SYSTEM FOR VULNERABILITY RISK DETECTION (VRT) The technology comprises a process performed by a security system of a 5G network. The system can instantiate an agent that monitors and controls incoming network traffic at an edge of the 5G network according to a security model. The agent can process the inbound network traffic with the security model to return a vulnerability-risk-threat (VRT) score that characterizes the inbound network traffic in terms of a vulnerability parameter, a risk parameter, and a threat parameter. The agent compares the VRT score to a threshold to determine the probability that the incoming network traffic contains VRT traffic. The agent transmits at least an indication of the VRT score and incoming network traffic to a central component, which collects VRT information from multiple agents to produce a security model update.

US20220070673 WIRELESS NETWORK THAT DISCOVER HOTSPOTS FOR CYBERATTACKS BASED ON SOCIAL MEDIA DATA A technique to prevent or mitigate cyberattacks may involve analyzing information from users of a 5G network. The information may include user profile data and social media data. The method may further include ranking the users for a network security ranking based on a social media ranking to identify target users as potential hotspots for cyberattacks. The 5G network dynamically allocates computing resources based on network security ranking to monitor the computing devices connected to the target users and receives an indication of any computing devices malicious software detected by the computing resources.

As used in the present specification and the following claims, the meaning of "a", "an" and "the" includes the plural unless the context clearly dictates otherwise. As used in the present specification, the meaning of "in" also includes "in" and "am" unless the context clearly dictates otherwise.

The enumeration of value ranges serves only as a short name for each individual value that falls within the range. Unless otherwise noted here, each individual value is included in the specification as if it were individually listed here.

The use of examples or exemplary language (e.g., "such as") with respect to particular embodiments is intended solely to better illustrate the invention and should not be construed as limiting the scope of the otherwise claimed invention. No language in the specification is intended as an indication of a unclaimed element essential to the practice of the invention.

The information disclosed in this Background section is only for enhancement of understanding of the background of the invention and therefore it may contain information that does not form the prior art and that is already known in this country to a person skilled in the art.

SUMMARY

Before describing the present systems and methods, it should be noted that this application is not limited to the systems and methods described, as there may be several possible embodiments that are not expressly illustrated in the present disclosure. It is also to be understood that the terminology used in the specification is for the purpose of describing particular versions or embodiments only and is not intended to limit the scope of the present application.

The present invention mainly addresses and solves the technical problems of the prior art. In response to these problems, the present invention discloses a machine learning based intelligent system for 5G network security.

One aspect of the present invention is to "present a machine learning-based intelligent system for 5G network security, the system comprising: a 5G communications local area network comprising a 5G cellular communications access point configured to be connected to a network interface and a first 5G cellular communication network module connected to the 5G cellular communication access point and capable of generating secure default parameter data for the 5G local communication network; and wherein the portable 5G cellular communication module is further operable to receive the received from the first 5G cellular communication network module store secure default parameter data and transmit the secure default parameter data to the second 5G cellular communications network module in response to user manipulation of the portable 5G cellular communications module; and wherein the second 5G cellular communications network module is operable to decrypt the secure standard parameter data received from the portable 5G cellular communications module and to log into the local 5G communications network.

character list

In order to clarify various aspects of some embodiments of the present invention, a more detailed description of the invention will be given by reference to specific embodiments illustrated in the accompanying drawings. It is understood that these drawings only show illustrated embodiments of the invention and are therefore not to be considered as limiting its scope. The invention will be described and illustrated with additional specificity and detail through the use of the accompanying drawings.

• 1 ein Blockdiagramm des auf maschinellem Lernen basierenden intelligenten Systems (10) für die 5G-Netzsicherheit zeigt.

In order that the advantages of the present invention may be readily understood, a detailed description of the invention will be discussed below in conjunction with the accompanying drawing, which should not, however, be construed as limiting the scope of the invention to the accompanying drawing, in which:

• 1 shows a block diagram of the machine learning based intelligent system (10) for 5G network security.

DETAILED DESCRIPTION

The present invention relates to a machine learning based intelligent system for 5G network security.

1 shows a detailed block diagram of the machine learning based intelligent system (10) for 5G network security.

Although the present disclosure has been described with the aim of a machine learning-based intelligent system for the security of 5G networks, it should be noted that this is only done to exemplify the invention and to highlight any other purpose or function for which the structures or configurations discussed could be used and fall within the scope of the present disclosure.

The machine learning based intelligent system (10) for 5G network security is disclosed in this disclosure.

The machine learning based intelligent system (10) for 5G network security includes a 5G local communication network (1), a receiver circuit (2), a portable 5G communication module (3), a decryption module (5) and a second 5G communication network module (4).

The 5G local communications network (1) comprises a 5G cellular communications access point (11) connectable to a network interface (12), and a first 5G cellular communications network module (13) connected to the 5G cellular communications access point (11) and can generate secure standard parameter data for the local 5G communication network.

The receiver circuit (2) is configured to receive a first 5G cellular communication packet from a 5G cellular communication access point (11).

The first 5G cellular package contains a destination address.

A portable 5G cellular communication module (3) is capable of dual communication of 5G cellular communication signals with the first 5G cellular communication network module (13).

The decryption module (5) is configured to decrypt the payload of packets from the 5G cellular communication access point (11) using the security key of the 5G cellular communication network.

The second 5G cellular communication network module (4) is able to dual-transmit 5G cellular communication signals with the first 5G cellular communication network module (13) and the portable 5G cellular communication module (3).

The 5G portable cellular communication module (3) is operable to issue an authorized signal to the first 5G cellular communication network module (13) so that the first 5G cellular communication network module (13) transmits the secure default parameter data to the portable 5G cellular communication module - the communication module (3) transmits in response to the authorized signal from the 5G portable cellular communication module (3).

The portable 5G cellular communication module (3) is further operable to communicate with the first 5G cellular communication network mo dul (13) stores received secure default parameter data and transmits the secure default parameter data to the second 5G cellular communication network module (4) in response to a user manipulation of the portable 5G cellular communication module (3).

The second module (4) of the 5G cellular communication network can decrypt the secure standard parameter data received from the portable cellular 5G communication module (3) and log into the local 5G communication network.

The system further includes a database containing historical location information for a plurality of 5G cellular communication modules observed from a 5G cellular communication access point (11) of a 5G cellular communication network.

The figure and the preceding description show examples of embodiments. Those skilled in the art will understand that one or more of the elements described may well be combined into a single functional element. Alternatively, certain elements can be broken down into multiple functional elements. Elements from one embodiment may be added to another embodiment. For example, the order of the processes described herein may be changed and is not limited to the manner described herein. Also, the actions of a block diagram do not need to be performed in the order shown, and not all actions need to be performed. Also, those actions that are not dependent on other actions can be performed in parallel with the other actions. The scope of the embodiments is in no way limited by these specific examples.

Although embodiments of the invention have been described in language specific to structural features and/or methods, the appended claims are not necessarily limited to the specific features or methods described. Rather, the specific features and methods are disclosed as examples of embodiments of the invention.

QUOTES INCLUDED IN DESCRIPTION

This list of documents cited by the applicant was generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Patent Literature Cited

• AU2021277595 [0005]
• WO 2020/068521 [0006]
• US20220007195 [0007]
• US20200196144 [0008]
• US20200128399 [0009]
• US20210243232 [0010]
• US20220007192 [0011]
• IN 201841040509 [0012]
• US20220007191 [0013]
• US20220007194 [0014]
• US20220070673 [0015]

Claims (2)

A machine learning based intelligent system for 5G network security, the system includes: A 5G local communications network (1) having a 5G cellular communications access point (11) connectable to a network interface (12), and a first 5G cellular communications network module (13) connected to the 5G cellular communications access point (11) and can generate secure default parameter data for the 5G local communications network; a receiver circuit (2) configured to receive a first 5G cellular communication packet from the 5G cellular communication access point (11), the first 5G cellular communication packet including a destination address; a portable 5G cellular communication module (3) capable of dual communication of 5G cellular communication signals with the first 5G cellular communication network module (13); a decryption module (5) configured to decrypt payloads of packets from the 5G cellular communications access point (11) using the 5G cellular communications network security key, and a second 5G cellular communication network module (4) adapted for dual communication of 5G cellular communication signals with the first 5G cellular communication network module (13) and the portable 5G cellular communication module (3); wherein the 5G portable cellular communication module (3) is operable to issue an authorized signal to the first 5G cellular communication network module (13) such that the first 5G cellular communication network module (13) transmits the secure default parameter data to the portable 5G cellular communication network module - the communication module (3) transmits in response to the authorized signal from the portable 5G cellular communication module (3); wherein the 5G portable cellular communication module (3) is further operable to store the secure default parameter data received from the first 5G cellular communication network module (13) and to store the secure default parameter data in response to a user manipulation of the 5G portable cellular communication module (3) transmits to the second 5G cellular communication network module (4); and wherein the second 5G cellular communications network module (4) is operable to decrypt the secure standard parameter data received from the portable 5G cellular communications module (3) and to log into the local 5G cellular communications network. The machine learning-based intelligent system for 5G network security claim 1 The system further comprising a database containing historical location information for a plurality of 5G cellular communication modules observed from a 5G cellular communication access point (11) of a 5G cellular communication network.

Images