System and method of establishing trusted operability between networks in a network functions virtualization environment
First Claim
1. A system for establishing a trusted end-to-end communication link between different networks, comprising:
- a first server associated with a first Network Function Virtualization (NFV) network, wherein the first server comprises a processor coupled to memory and is configured to;
generate and send a first trust ticket, a request to engage in communication with a second server associated with a second network, and trusted data from the first NFV network, wherein the first NFV network is executing in a trusted security zone that provides hardware assisted security, and wherein the second server comprises a processor coupled to memory;
disable communication with the first NFV network after the first trust ticket, the request, and the trusted data are sent;
a virtual machine stored on the first NFV network, wherein the virtual machine executes virtualized network functions and is executing in a trusted security zone; and
a session border controller executing in a trusted security zone, wherein the session border controller comprises a trust node and an application stored on the trust node, configured to;
receive the first trust ticket, the request, and the trusted data from the first server;
transmit the first trust ticket and the request to a second session border controller, wherein the second session border controller transmits the request and the first trust ticket to the second server associated with a second network;
receive a response to the request and a second trust ticket from the second server, wherein the response and second trust ticket are transmitted from the second session border controller to the first session border controller, wherein the second network is executing in a trusted security zone that provides hardware assisted security;
compare the first and second trust tickets for compatibility; and
transmit the trusted data to the second server if the first and second trust tickets are compatible.
4 Assignments
0 Petitions
Accused Products
Abstract
A system for establishing a trusted end-to-end communication link between different NFV networks is disclosed. The system comprises a server operating in a trusted security zone and configured to generate and send a trust ticket, a communication request, and disable communication with the first NFV network. The system further comprises a virtual machine executing virtualized network functions and a session border controller. The session border controller is configured to receive the trust ticket, request, and trusted data from the first server; transmit the trust ticket and request to a second session border controller, wherein the trust ticket and request are transmitted to a second server associated with a second NFV network, and receive a response and second trust ticket from the second NFV network, compare the first and second trust ticket for compatibility, and transmit the trusted data if the trust tickets are compatible.
-
Citations
20 Claims
-
1. A system for establishing a trusted end-to-end communication link between different networks, comprising:
-
a first server associated with a first Network Function Virtualization (NFV) network, wherein the first server comprises a processor coupled to memory and is configured to; generate and send a first trust ticket, a request to engage in communication with a second server associated with a second network, and trusted data from the first NFV network, wherein the first NFV network is executing in a trusted security zone that provides hardware assisted security, and wherein the second server comprises a processor coupled to memory; disable communication with the first NFV network after the first trust ticket, the request, and the trusted data are sent; a virtual machine stored on the first NFV network, wherein the virtual machine executes virtualized network functions and is executing in a trusted security zone; and a session border controller executing in a trusted security zone, wherein the session border controller comprises a trust node and an application stored on the trust node, configured to; receive the first trust ticket, the request, and the trusted data from the first server; transmit the first trust ticket and the request to a second session border controller, wherein the second session border controller transmits the request and the first trust ticket to the second server associated with a second network; receive a response to the request and a second trust ticket from the second server, wherein the response and second trust ticket are transmitted from the second session border controller to the first session border controller, wherein the second network is executing in a trusted security zone that provides hardware assisted security; compare the first and second trust tickets for compatibility; and transmit the trusted data to the second server if the first and second trust tickets are compatible. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. A system for establishing a trusted end-to-end communication link between different networks, comprising:
-
a first server associated with a first Network Function Virtualization (NFV) network, wherein the first server comprises a processor coupled to memory and is configured to; generate and send a first trust ticket, a request to engage in communication with a second server associated with a second network, and trusted data from the first NFV network, wherein the first NFV network is executing in a trusted security zone that provides hardware assisted security, and wherein the second server comprises a processor coupled to memory; disable communication with the first NFV network after the first trust ticket, the request, and the trusted data are sent; a virtual machine stored on the first NFV network, wherein the virtual machine executes virtualized network functions and is executing in a trusted security zone; and a session border controller executing in a trusted security zone, wherein the session border controller comprises a trust node and an application stored on the trust node, configured to; receive the first trust ticket, the request, and the trusted data from the first server; transmit the first trust ticket and the request to a second session border controller, wherein the second session border controller transmits the request and the first trust ticket to the second server associated with the second network; receive a response to the request and a second trust ticket from the second server, wherein the response and the second trust ticket are transmitted from the second session border controller to the first session border controller, wherein the second network is executing in in a trusted security zone that provides hardware assisted security; compare the first and second trust tickets for compatibility; and transmit, in response to a determination that the first and second trust tickets are incompatible, a message to the first server refusing to transmit the trusted data. - View Dependent Claims (10, 11, 12, 13, 14, 15, 16)
-
-
17. A method of establishing a trusted end-to-end communication link between different networks, comprising:
-
receiving, by a first session border controller, from a first server associated with a first Network Function Virtualization (NFV) network, a first ticket, a request to engage in communication with a second server associated with a second network, and trusted data from the first NFV network, wherein the first NFV network is executing in a trusted security zone that provides hardware assisted security; disabling communication between the first session border controller and the first server after the first trust ticket, the request, and the trusted data have been sent; transmitting, by the first session border controller executing in a trusted security zone, the first trust ticket and the request to a second session border controller; transmitting, by the second session border controller executing in a trusted security zone, the first trust ticket and the request to the second server; receiving, by the second session border controller executing in a trusted security zone, a second trust ticket and a response to the request for communication from the first server from the second server, wherein the second network is executing in a trusted security zone that provides hardware assisted security; transmitting, by the second session border controller, the second trust ticket and the response to the first session border controller; comparing, by the first session border controller, the first and second trust tickets for compatibility; and transmitting, by the first session border controller executing in a trusted security zone, the trusted data to the second server associated with the second network responsive to the first and second trust tickets being compatible. - View Dependent Claims (18, 19, 20)
-
Specification