Abstract: A method for NADD-assisted dynamic configuration of HTTP parameter settings at NFs includes receiving, at the NADD, SBI message feeds from a plurality of producer NFs. The method further includes determining, by the NADD and from at least one of the SBI message feeds, an HTTP parameter setting for one of the producer NFs. The method further includes communicating, by the NADD, the HTTP parameter setting to the producer NF. The method further includes receiving, by the producer NF and from the NADD, the HTTP parameter setting. The method further includes using, by the producer NF, the HTTP parameter setting to control traffic flow from a consumer NF to the producer NF.

Abstract: Methods, systems, and computer readable media for service communication proxy (SCP)-enforced network function (NF)-security-group-based segregation are disclosed. In one example, an SCP conducts security handshakes with NFs and learns, from the security handshakes, security groups of the NFs. Based on the learning, the SCP populates an NF security group database accessible by the SCP and including records identifying security groups of the NFs. The SCP receives service-based interface (SBI) messages transmitted by the NFs and uses the NF security group database to perform security-group-based segregation of the SBI messages, including selectively forwarding or blocking SBI messages based on whether a sender NF and a target NF are members of the same security group or mutually trusted security groups.

Abstract: The technology disclosed herein enables resiliency of routing between NFs when degraded 5G NF topology information is provided to an SCP by an NRF. In a particular example, In a particular example, a method includes receiving, at the SCP, responses from a plurality of Network Function Repository Functions (NRFs), wherein the responses indicate availability of NF topology information across an NRF set. The method further includes determining, based on the responses, that at least one NRF of the NRF set is providing degraded NF topology information. The method also includes receiving, at the SCP, an NF service request from a consumer NF. The method includes augmenting the degraded NF topology information to create selection NF topology information. The method then includes selecting a producer NF to service the NF service request using the selection NF topology information, and transmitting the NF service request to the producer NF.

Abstract: A method for detecting and mitigating security attacks on producer NFs using mappings between dynamically assigned SBI message IDs and proxy NF IDs includes, at a proxy NF, automatically creating a database of mappings between proxy NF IDs and SBI message IDs comprising resource IDs dynamically assigned by producer NFs in response to request messages from consumer NFs. The method further includes using the mappings to validate received inter-PLMN SBI request messages and performing network security actions for the received inter-PLMN SBI request messages for which validation fails.

Abstract: A method for synthetic monitoring of NF service instances and providing for enhanced NF discovery using an NRF includes generating, by the NRF, synthetic monitoring request messages. The method further includes transmitting, by the NRF, the synthetic monitoring request messages to NF service instances registered with the NRF and receiving, from the NF service instances, responses to the synthetic monitoring request messages. The method further includes analyzing, by the NRF, contents of the responses to the synthetic monitoring request messages. The method further includes maintaining, by the NRF and based on the contents of the responses to the synthetic monitoring request messages, indications of working status of the NF service instances. The method further includes receiving, by the NRF, an NF discovery request message. The method further includes generating, by the NRF and using the indications of working status of the NF service instances, an NF discovery response message.

Abstract: A method for network analytics data director (NADD)-informed configuration of a 3gpp-Sbi-Max-Rsp-Time header value includes receiving, at the NADD and from network functions (NFs), NF configuration details and copies of service-based interface (SBI) messages transmitted to and received by the NFs, determining service operation processing times of the NFs, and communicating, to an NF service consumer, NF analytics data including the service operation processing times and the NF configuration details. The method further includes automatically determining, by the NF service consumer and using the NF analytics data, a 3gpp-Sbi-Max-Rsp-Time header value for an SBI request message, adding, by the NF service consumer, the 3gpp-Sbi-Max-Rsp-Time header value to the SBI request message, and transmitting, by the NF service consumer, the SBI request message to a destination.

Abstract: A method for detecting and processing egress inter-PLMN SBI request messages without 3gpp-Sbi-Originating-Network-Id headers includes receiving, by a proxy NF serving a plurality of PLMNs, an egress inter-PLMN SBI request message without a 3gpp-Sbi-Originating-Network-Id header. The method further includes determining an originating network identifier from the message, from DNS, or from a database record. The method further includes adding a 3gpp-Originating-Network-Id header to the message, populating the header with the originating network identifier, and forwarding the message to or towards a target PLMN.

Abstract: Various embodiments of the present technology generally relate to systems and methods for utilizing a service communications proxy (SCP) to perform subscription permanent identifier (SUPI)-based message routing within a 5G network. In certain embodiments, a method may comprise operating a service communications proxy (SCP) of a mobile network, including receiving a service request from a consumer network function (C-NF), the service request including a subscription permanent identifier (SUPI) value, accessing a Group ID database at the SCP based on the SUPI value, the Group ID database mapping ranges of SUPI values to groups of producer NFs configured to service particular ranges of SUPI values, and forwarding the service request to a selected producer NF based on the Group ID database.

Abstract: A method for delegated network slice admission control using an SCP includes receiving, by the SCP and from an NF, a message relating to registration of a UE or establishment of a PDU session. The method further includes performing, by the SCP, delegated network slice admission control by: sending, by the SCP, a request message to an NSACF to perform a network slice availability check and update procedure; and receiving, by the SCP and from the NSACF, a response message indicating results of the network slice availability check and update procedure. The method further includes performing, by the SCP and based on the response indicating results of the network slice availability check and update procedure, signaling relating to the registration of the UE or the establishment of the PDU session.

Abstract: A method for automatically deriving and using a steering of roaming policy includes learning a steering of roaming (SoR) policy of a home public land mobile network (HPLMN). The method further includes receiving, by a proxy function, an SBI message from a first VPLMN and relating to an outbound roaming subscriber. The method further includes determining, by the proxy function and using the SoR policy for the HPLMN and parameters from the SBI message, whether the SoR policy indicates that the HPLMN will steer the outbound roaming subscriber to a VPLMN other than the first VPLMN. The method further includes blocking, by the proxy function, the SBI message when the SoR policy indicates that the HPLMN will steer the outbound roaming subscriber to a VPLMN other than the first VPLMN.

Abstract: The technology disclosed herein enables 5G wireless monitoring and analysis using an enhanced feed of 5G SBI traffic. In a particular example, a method includes receiving a 5G SBI message in a Service Communication Proxy (SCP), extracting information from protocols used to transmit the 5G SBI message, and including the information in a mirror message with a copy of a payload of the 5G SBI message. The method further includes transmitting the mirror message to a monitoring system.

Abstract: A method for dynamically adjusting service-based interface (SBI) message priority for roaming traffic includes receiving, by a security edge protection proxy (SEPP), an SBI message destined for a network function (NF) located in an administrative domain. The method further includes determining, by the SEPP and based on an SBI message priority configuration of the administrative domain, an SBI message priority attribute value for the SBI message. The method further includes dynamically adjusting, by the SEPP and using the SBI message priority attribute value determined based on the SBI message priority configuration of the administrative domain, a priority attribute value in the SBI message. The method further includes forwarding, by the SEPP, the SBI message with the dynamically adjusted SBI message priority attribute value to the administrative domain.

Abstract: The technology disclosed herein enables resiliency of routing between NFs when degraded 5G NF topology information is provided to an SCP by an NRF. In a particular example, a method includes transmitting requests for NRF status from a Service Communications Proxy (SCP) to NRFs in a 5G network. The NRFs exchange messages with each other to determine whether Network Function (NF) topology information is available from the NRFs. The method further includes receiving responses to the requests in the SCP. The responses indicate a number of the NRFs from which the NF topology information is available. The method also includes identifying one or more failed NRFs of the NRFs that are in a failed state based on the responses. The NF topology information is aggregated from operative NRFs should one or more of the NRFs still be operative.

Abstract: A method for network analytics data director (NADD)-informed configuration of a 3gpp-Sbi-Max-Rsp-Time header value includes receiving, at the NADD and from network functions (NFs), NF configuration details and copies of service-based interface (SBI) messages transmitted to and received by the NFs, determining service operation processing times of the NFs, and communicating, to an NF service consumer, NF analytics data including the service operation processing times and the NF configuration details. The method further includes automatically determining, by the NF service consumer and using the NF analytics data, a 3gpp-Sbi-Max-Rsp-Time header value for an SBI request message, adding, by the NF service consumer, the 3gpp-Sbi-Max-Rsp-Time header value to the SBI request message, and transmitting, by the NF service consumer, the SBI request message to a destination.

Abstract: A method for routing, alternate routing, or load balancing of SBI request messages among NFs that are members of the same NF set and located in different regions using an SCP includes actively learning NF topology information of NFs that are located in the different regions. The method further includes receiving an SBI request message and determining an NF set-Id of a first target NF of the SBI request message, the first target NF being located in a first region. The method further includes using the NF set-Id and the NF topology information to identify at least one second target NF that is in the same NF set as the first target NF and located in a different region from the first region. The method further includes routing, alternate routing, or load balancing the SBI request message to a least one of the first target NF and the at least one second target NF.

Abstract: A method for NADD-assisted dynamic configuration of HTTP parameter settings at NFs includes receiving, at the NADD, SBI message feeds from a plurality of producer NFs. The method further includes determining, by the NADD and from at least one of the SBI message feeds, an HTTP parameter setting for one of the producer NFs. The method further includes communicating, by the NADD, the HTTP parameter setting to the producer NF. The method further includes receiving, by the producer NF and from the NADD, the HTTP parameter setting. The method further includes using, by the producer NF, the HTTP parameter setting to control traffic flow from a consumer NF to the producer NF.

Abstract: A method for automatically binding an SBI communications digital certificate lifecycle to an NF lifecycle includes receiving, at an NRF, an NF deregister request message for deregistering an NF. The method further includes generating, by the NRF and in response to the NF deregister request message or successful completion of deregistration of the NF, a certificate revocation request message for revoking at least one digital certificate used by NF for SBI communications. The method further includes transmitting, by the NRF, the certificate revocation request message to a certificate authority. The method further includes receiving, by the NRF, an NF register request message identifying the NF. The method further includes determining, by the NRF, that the at least one digital certificate of the NF has been revoked.

Abstract: A method for network analytics data director (NADD)-assisted producer network function (NF) selection includes receiving, at the NADD and from consumer NFs, copies of service-based interface (SBI) messages transmitted to and received from producer NFs. The method further includes calculating, by the NADD, delay values associated with transport and processing of the SBI messages by the producer NFs. The method further includes providing, by the NADD, the delay values to a consumer NF. The method further includes using, by the consumer NF, the delay values to select a producer NF for processing an SBI request message originated or received by the consumer NF. The method further includes transmitting, by the consumer NF, the SBI request message to the producer NF.

Abstract: A method for automatic configuration and use of Category 1 message filtering rules includes, at a network function (NF), subscribing, with an NF repository function (NRF), to receive notification of NF profile changes. The method further includes receiving, from the NRF and as a result of the subscribing, notification of an NF profile change. The method further includes automatically configuring, based on the notification of the NF profile change, at least one Category 1 message filtering rule implemented. The method further includes using the at least one Category 1 message filtering rule to filter service based interface (SBI) messages.

Abstract: A method for increasing resilience of network topology hiding across geo-redundant SEPPs includes subscribing, with an NRF to receive notification of network topology updates of producer NFs configured to send inter-PLMN messages. The method includes receiving a notification including updated network topology information regarding one of the producer NFs. The method further includes generating, based on the updated network topology information, updated network topology hiding information for the producer NF. The method further includes receiving an inter-PLMN SBI request message requiring network topology recovery. The method further includes performing, using the updated network topology hiding information, the network topology recovery and forwarding the inter-PLMN SBI request message to the producer NF.