Patent Application
20230359498
The present disclosure relates generally to communications systems and, more particularly, to Trusted Computing Slices.
Network operators traditionally implement network functions using physical network nodes so that the network functions are tightly coupled with the infrastructure they run on. As a result, designing and deploying end-to-end services requires manual processes performed via Operation Support Systems (OSSs), with long lead times on the order of weeks or months.
Virtualization technologies such as Network Function Virtualization (NFV) offer network operators a software-centric approach to create, deploy, and manage their services with greater efficiency, flexibility, and cost-effectiveness. Virtualization abstracts the underlying infrastructure's hardware resources (e.g., compute, storage, and network resources) to define virtualized resources. These virtualized resources are leveraged for providing virtualized network functions (VNFs), e.g., in the form of routers, gateways, traffic analysis, firewalls, etc. The VNFs can be chained with one another and/or with physical network functions (PNFs) as building blocks to offer a network service, e.g., which may comprise all or part of an end-to-end network service.
Orchestration refers to the process of controlling the resources and/or network services that rely on those resources. Orchestration may for instance involve controlling the access to and/or allocation of resources for VNFs or network services. Orchestration may alternatively or additionally involve instantiating, scaling, updating, and/or terminating network services, e.g., by coordinating groups of VNFs to realize the network services. Orchestration may therefore entail interpreting and translating a given service request from customer premises equipment into a configuration of resources (physical and/or virtualized), as needed for establishing the requested service for the customer premises equipment.
Although orchestration advantageously abstracts the details of service establishment from customer premises equipment, that abstraction inherently delegates significant autonomy over service establishment to the orchestrator and thereby creates obstacles for the customer premises equipment to control and ensure the security of the service.
Some embodiments herein advantageously exploit trusted computing in the orchestration of a service for customer premises equipment. In doing so, some embodiments provide assurance to the customer premises equipment that a resource with which an orchestrator orchestrates the service complies with a trusted computing policy specified by the customer premises equipment. In one or more embodiments, for example, a resource must prove to the orchestrator, the customer premises equipment, or both that the resource complies with the trusted computing policy, as a condition for the resource to be used in the orchestration of the service. The resource may for instance prove this by providing, to the orchestrator, the customer premises equipment, or both, a remote attestation which attests to compliance with the trusted computing policy and/or attests to the resource having a certain identity, configuration, behavior, or property required by the trusted computing policy. The orchestrator, customer premises equipment, or both may then appraise or verify the provided remote attestation and condition use of the resource in orchestration of the service on satisfactory appraisal or verification. Some embodiments herein thereby advantageously abstract the details of service establishment from the customer premises equipment via orchestration, while at the same time providing the customer premises equipment with assurance about the security of the orchestrated service.
More particularly, embodiments herein include a method performed by an orchestrator. The method comprises receiving signaling that requests the orchestrator to orchestrate a service and that indicates a trusted computing policy with which a resource must prove compliance in order for the service to be orchestrated with that resource. The method in some embodiments further comprises sending a response to the signaling that indicates whether or not the orchestrator has orchestrated the service according to the received signaling.
Embodiments also include an orchestrator comprising processing circuitry and memory. The memory contains instructions executable by the processing circuitry whereby the orchestrator is configured to perform receiving signaling that requests the orchestrator to orchestrate a service and that indicates a trusted computing policy with which a resource must prove compliance in order for the service to be orchestrated with that resource. The orchestrator in some embodiments is further configured to perform sending a response to the signaling that indicates whether or not the orchestrator has orchestrated the service according to the received signaling.
Embodiments also include a method performed by customer premises equipment. The method comprises transmitting, from the customer premises equipment to an orchestrator, signaling that requests the orchestrator to orchestrate a service for the customer premises equipment and that indicates a trusted computing policy with which a resource must prove compliance in order for the service to be orchestrated with that resource. The method in some embodiments further comprises receiving, from the orchestrator, a response that indicates whether or not the orchestrator has orchestrated the service for the customer premises equipment according to the received signaling.
Embodiments also include a customer premises equipment comprising processing circuitry and memory. The memory containing instructions executable by the processing circuitry whereby the customer premises equipment is configured to perform transmitting, from the customer premises equipment to an orchestrator, signaling that requests the orchestrator to orchestrate a service for the customer premises equipment and that indicates a trusted computing policy with which a resource must prove compliance in order for the service to be orchestrated with that resource. The customer premises equipment in some embodiments is further configured to perform receiving, from the orchestrator, a response that indicates whether or not the orchestrator has orchestrated the service for the customer premises equipment according to the received signaling.
Embodiments herein also include a method performed by a resource equipment configurable to provide at least a part of a service to customer premises equipment. The method comprises receiving, from an orchestrator, signaling that requests the resource to prove that the resource complies with a trusted computing policy indicated by the signaling. The method may further comprise sending, to the orchestrator, a response which proves that the resource complies with a trusted computing policy indicated by the signaling.
Embodiments herein also include a resource equipment comprising processing circuitry and memory, the memory containing instructions executable by the processing circuitry whereby the resource equipment is configured to perform receiving, from an orchestrator, signaling that requests the resource to prove that the resource complies with a trusted computing policy indicated by the signaling. The resource equipment is further configured to perform sending, to the orchestrator, a response which proves that the resource complies with a trusted computing policy indicated by the signaling.
Embodiments herein also include a computer program product that includes a non-transitory computer readable medium storing program code configured for execution by a processor disclosed herein and configured to perform operations described herein.
Embodiments herein also include a computer program, when executed, performs operations described herein.
The accompanying drawings, which are included to provide a further understanding of the disclosure and are incorporated in and constitute a part of this application, illustrate certain non-limiting embodiments of inventive concepts.
According to some embodiments shown in
As shown, the customer premises equipment 12 tasks an orchestrator 18 with orchestrating the service 10. Such orchestration may involve determining which resource(s) 16 are needed to establish the service 10, discovering which of those resource(s) 16 are available for providing respective part(s) of the service 10, and/or instantiating or configuring available resource(s) as needed to establish the service 10. To prompt and assist the orchestrator 18 in this regard, the customer premises equipment 12 as shown transmits to the orchestrator 18 signaling 20 that includes an orchestration request 22. The orchestration request 22 requests the orchestrator 18 to orchestrate the service 10, e.g., as specified by information included in the request 22 that describes the service 10 and/or one or more parameters for the service 10.
Having received this request 22, the orchestrator 18 in turn transmits to each of one or more resources 16 signaling 24 that includes a resource request 26. The resource request 26 may request information about the capability and/or availability of a resource 16 to provide at least a part of the service 10, e.g., as part of resource discovery. Alternatively or additionally, the resource request 26 may actually request a resource 16 to provide at least a part of the service 10. Regardless, the orchestrator 18 receives a response 28 from each resource 16 to which a request 26 was sent. The response 28 may provide any requested information such as information about the capability and/or availability of the resource, or may indicate whether the resource 16 accepts the orchestrator's request to provide at least a part of the service 10.
Based on the response(s) 28 from one or more resources 16, the orchestrator 18 may in turn transmit a response 30 to the customer premises equipment 30 to indicate whether or not the orchestrator 18 was able to orchestrate the service 10 as requested. Generally, then, orchestration of the service 10 in this way means that the customer premises equipment 12 delegates the task of resource selection and configuration to the orchestrator 18.
Some embodiments herein advantageously enable the customer premises equipment 10 to nonetheless control, influence, and/or verify how secure the resource(s) 16 are that the orchestrator 18 uses to orchestrate the service 10.
In fact, in some embodiments, a resource 16 must prove compliance with the trusted computing policy 32 in order for the service 10 to be orchestrated with that resource 16. That is, proof that the resource 16 complies with the trusted computing policy 32 is a condition on the resource 16 being used to orchestrate the service 10. For example, a resource 16 must prove that the resource 16 has a certain identity, configuration, behavior, or property required by the trusted computing policy 32, in order for the service to be orchestrated with that resource 16. That the resource 16 must prove compliance with the trusted computing policy 32 may be explicitly indicated by the signaling 20, 24 or may be implicitly indicated by inclusion of the trusted computing policy 32 in the signaling 20, 24.
In order to prove compliance with the trusted computing policy 32, a resource 16 must provide reliable evidence of such compliance. In some embodiments, proof of compliance may take the form of a remote attestation, as understood in the trusted computing context. A resource 16 may for instance provide a remote attestation which attests to compliance with the trusted computing policy 32 and/or attests to the resource 16 having a certain identity, configuration, behavior, or property required by the trusted computing policy 32. Such a remote attestation may thereby amount to a claim about the resource's compliance, identity, configuration, behavior, or property as related to the trusted computing policy 32, coupled with evidence which supports that claim. The evidence on which a remote attestation is based may include raw evidence, such as a measurement that indicates the identity, configuration, behavior, or property of a resource 16. Alternatively or additionally, the evidence on which a remote attestation is based may include reduced or summarized evidence, such as a hash of the raw evidence. The evidence on which a remote attestation is based may alternatively or additionally take the form of a credential (e.g., a cryptographic signature) provided by a trusted appraiser or evaluator of raw or summarized evidence, e.g., so as to vouch for the fact that the raw or summarized evidence supports the resource's claim. In yet other embodiments, a remote attestation may include a combination of the above, e.g., raw or summarized evidence provided in conjunction with a credential from a trusted appraiser or evaluator.
In one or more embodiments, for example, the trusted computing policy 32 effectively requires a resource 16 to provide the proof discussed above using a Trusted Platform Module (TPM) or other hardware device serving as a root of trust. To do so, the resource 16 must place into Platform Configuration Registers (PCRs) a measurement that reflects an identity, configuration, behavior, or property of the resource 16. The resource's TMP or other trusted hardware device cryptographically signs a report of the PCR contents as evidence of the resource's identity, configuration, behavior, or property. Appraisal or verification of such a report as being a valid signature over particular PCR values proves that the resource 16 complies with a trusted computing policy 32 that requires a resource have the identity, configuration, behavior, or property reflected by those PCR values.
No matter the particular form of a remote attestation required from a resource 16,
In some embodiments, a resource 16 must prove its compliance to the orchestrator 18. In this case, the orchestrator 18 may serve as an appraiser or verifier of any proof that the resource 16 provides to support its claim that the resource 16 complies with the trusted computing policy 32 and/or that the resource 16 has a certain identity, configuration, behavior, or property. Where this proof takes the form of a remote attestation, for example, the orchestrator 18 may appraise or verify the remote attestation, e.g., by checking whether any accompanying cryptographic signature is valid, checking whether any hash of the resource's measurements is included in a list of valid hashes reflecting an identity, configuration, behavior, or property required by the trusted computing policy 32, or the like. Regardless, if the orchestrator 18's appraisal or verification reveals a resource 16 does not in fact comply with the trusted computing policy 32, the orchestrator 18 may avoid or abort orchestrating the service 10 with that resource 16. The orchestrator 18 may thereby enforce the trusted computing policy 32 on behalf of or for the benefit of the customer premises equipment 12. If the orchestrator's appraisal or verification confirms the resource's compliance, on the other hand, the orchestrator 18 may initiate or continue a procedure for orchestrating the service 10 with that resource 16. The orchestrator 18 may thereby orchestrate or refrain from orchestrating the service 10 with a resource 16 depending respectively on whether or not the orchestrator 18 verifies the resource 16 complies with the trusted computing policy 32.
In some embodiments, the orchestrator 18 explicitly indicates to the customer premises equipment 12 that the resource(s) 16 with which the orchestrator 18 orchestrated the service 10 comply with the trusted computing policy 32. The orchestrator 18 may for instance explicitly indicate this in its response 30 to the customer premises equipment 12. In other embodiments, though, the orchestrator 18 implicitly indicates this by providing a response 30 that explicitly indicates the orchestrator 18 orchestrated the service 10 for the customer premises equipment 12. That is, by indicating successful orchestration according to the request 22, the orchestrator 18 implies that the resource(s) 16 with which the service 10 was orchestrated comply with the trusted computing policy 32 accompanying that request 22. Alternatively or additionally, the orchestrator 18 may effectively indicate that the resource(s) 16 with which the orchestrator 18 orchestrated the service 10 comply with the trusted computing policy 32 by itself providing a remote attestation 36 to the customer premises equipment 12. This remote attestation 36 may explicitly attest that the orchestrator 18 itself complies with the trusted computing policy 32, and in doing so implicitly attest that the resource(s) 16 with which the orchestrator 18 orchestrated the service 10 comply with the trusted computing policy 32. The customer premises equipment 12 upon receiving such a remote attestation 36 may appraise or verify it, on the basis that verification of the orchestrator's remote attestation 36 effectively or implicitly verifies that the resource(s) 16 used to orchestrate the service 10 comply with the trusted computing policy 32.
Proof that a resource 16 complies with the trusted computing policy 32 may alternatively or additionally be directly verified by the customer premises equipment 10 in other embodiments. In one such embodiment, the orchestrator 14 may request or obtain such proof from the resource 16 and then relay that proof to the customer premises equipment 10 so that the customer premises equipment 10 itself can appraise or verify the proof, e.g., in a similar way as described above for the orchestrator 18. As shown in
Note that, in order to avoid orchestration failure due to non-compliance with the trusted computing policy 32, the orchestrator 14 in some embodiments proactively performs discovery of resources 16 for service orchestration on the basis of which resource(s) 16 claim to be able to comply with the trusted computing policy 32. Such discovery approach may advantageously reduce orchestration latency due to failed orchestration, and/or conserve signaling and computing resources that would otherwise be wasted on failed orchestration.
Note, too, that the customer premises equipment 12 may alternatively or additionally require that the orchestrator 14 itself comply with the trusted computing policy 32, e.g., as a condition for declaring the orchestration request 22 satisfied. The customer premises equipment 12 in such a case may request the orchestrator 14 to provide a remote attestation of compliance, so that the customer premises equipment 12 can appraise or verify the remote attestation. Requiring proof of compliance from not only the resource(s) 16 but also the orchestrator 14 may advantageously form a comprehensive chain or mesh of trust which provides assurance to the customer premises equipment 12 that the service 10 has been orchestrated securely and will be provided securely.
In some embodiments, nonetheless, the customer premises equipment 12 may only conditionally require proof of compliance with the trusted computing policy 32. In such a case, the signaling 20 to the orchestrator 14 may indicate one or more conditions under which proving compliance with the trusted computing policy 32 is required of a resource 16. The condition(s) may include, for instance, processing by a resource 16 of unencrypted data for the service 10. This way, if a resource 16 does not process unencrypted data for the service 10, but instead only has access to encrypted data for the service 10, the resource 16 need not prove compliance with the trusted computing policy 32. Indeed, such compliance may be unnecessary or moot given the nature of the resource's access to data of the service 10. These embodiments may thereby conserve signaling and processing resources that would otherwise be wasted on proof of unnecessary compliance.
Some embodiments may be exploited for orchestrating a service 10 in the form of a network slice or a transport slice. A network slice is a complete logical network that provides a service in its entirety with a specific assurance and function to a customer. Network slices can be used to implement specific quality of service (QoS) profiles, or even special software versions, different network nodes, and different functions.
Network slices in 5G networks are defined as end-to-end mechanisms. Underlying technologies, such as virtualization, virtual private networks, traffic engineering, and transport network slices may be used as resource 16 to implement these mobile-network specific slices. In these and other embodiments, then, resources 16 may be exemplified as and terms “network elements”. Network virtualization is network management pertaining to treating different traffic categories in separate virtual networks, with independent lifecycle management and resource, technology, and topology choices. Virtual private networks (VPNs) can be implemented in various different ways, from operator provided Multiprotocol Label Switching (MPLS) networks to VPNs created from encrypted tunnels. Traffic engineering is the general practice of managing networks to set up appropriate performance for specific traffic flows or traffic from specific groups of users. Transport slices are an IETF concept under development, encompassing the management of different traffic engineering, routing, and VPN mechanisms within a single framework.
For example, the use of transport slices is shown in
The higher-level operation system also requests a different system, the Transport Slice Controller (TSC), to set up the appropriate transport connectivity between the mobile network functions. The TSC in some embodiments is one example of the orchestrator 18 in
The request for a transport network slice gets mapped to a particular realization of the desired transport slice. For instance, a specific MPLS or VPN connection may be set up in the underlying network, to realize the necessary connectivity.
A number of transport slice services may be provided over a shared underlying network infrastructure. Each transport slice consists of both the overlay connectivity and a specific set of dedicated network resources and/or functions allocated in a shared underlay network to satisfy the needs of the transport slice consumer.
Using a transport slice typically involves the following [4]. The TSC takes requests from a management system or other application, which are then communicated via an NBI. This interface carries data objects the transport slice user provides, describing the needed transport slices in terms of topology, applicable service level objectives (SLO), and any monitoring and reporting requirements that may apply. Note that—in this context—“topology” means what the transport slice connectivity is meant to look like from the users perspective; it may be as simple as a list of mutually (and symmetrically) connected end points, or it may be complicated by details of connection asymmetry, per-connection SLO requirements, etc. These requests are assumed to be translated by one or more underlying systems, which are used to establish specific transport slice instances on top of an underlying network infrastructure. The TSC maintains a record of the mapping from user requests to slice instantiations, as needed to allow for subsequent control functions (such as modification or deletion of the requested slices), and as needed for any requested monitoring and reporting functions.
A transport slice can be realized in a network, using specific underlying technology or technologies. The creation of a new transport slice will be initiated in some embodiments with the following three steps:
Note that a request for a transport slice expresses the customer-side connectivity need, e.g., connect A, B, and C, as shown in
Some embodiments herein thereby exploit trusted computing technology in such an orchestration context. In this context, some embodiments employ trusted computing attestation such that a resource 16 can attest something about itself, such as that it runs on a particular type of central processing unit (CPU) and the software image being something. Such an attestation can be remote, i.e., an attestation can be sent to another entity (e.g., the orchestrator 18 or the customer premises equipment 12) observing the resource 16 running on trusted computing hardware. Attestation in some embodiments depends on a trust chain, such as the orchestrator 18 or the customer premises equipment 12 trusting a CPU manufacturer, the CPU manufacturer trusting that a key they put in a particular CPU is valid, and then that CPU signing a statement using that key.
In some embodiments, then, in order to run a part of the service 10 in a resource 16 require signed proof from the resource 16 that it is running a part of the service 10 on a particular type of CPU, running particular software, and that the CPU is trusted by the manufacturer. As a result, the Infrastructure Owner or other parties can not cause harm for the part of the service 10 running on that resource 16, e.g., by spying on the data processed within the service 10 or somehow subverting the results of the service 10.
Proof of trusted computing policy compliance in some embodiments takes the form of an attestation based on the one shown in
In
An implementation of remote attestation according to some embodiments, then, may use three technologies as described by [8]:
In one or more embodiments, attestation may involve the following. During startup of a resource 16, measurements (i.e., hashes computed as fingerprints of files) are “extended”, or stored, in a Trusted Platform Module (TPM) at the resource 16, along with entries added to an informational log. The TPM is the crypto processor that holds the trusted computing keys and is capable of performing some of the main cryptographic operations. The measurement process in some embodiments generally follows the Chain of Trust model used in Measured Boot, where each stage of the system measures the next one before launching it. See
Although some embodiments have been generally exemplified as described above, other implementations of trusted computing may be used.
Some embodiments herein thereby advantageously exploit trusted computing in a context where there are multiple layers of frameworks. Here, a single user-visible application at the customer premises equipment 12 needs to depend on multiple underlying components, each consisting of their own network of computers collaborating on a specific task. Embodiments herein ensure this application at the customer premises equipment 12 that those components satisfy the security requirements it sets on its own computation elements.
In the context of slices, for example, a complex slice may require functions and network processing within multiple computing elements (as examples of resources 16). Some embodiments use trusted computing to ensure that all of those parts are secure. And some embodiments do so in a way that provides the customer of a slice assurance that trusted computing was used, and used in a manner that satisfies that customer's trust requirements. Moreover, some embodiments provide the customer a list of attestations from various computing elements about specific functions performed. Further, some embodiments enable the customer to know that these computing elements are the ones and all the ones that are serving the customer's slice.
Some embodiments accomplish this by adding a trusted computing request to a request for a slice. Alternatively or additionally, some embodiments have an orchestrator indirectly provide attestations from both itself and the network elements used to set up the slice.
Consider an example in which customer premises equipment 12 wishes to ensure that a VPN service shown in
The slice orchestrator, as an example of orchestrator 18, sets this up according to some embodiments herein.
In some embodiments, this is realized by the customer premises equipment 12 making a request to the orchestrator 18 to use trusted computing resources, along with information about the trusted manufacturers and software. The orchestrator 18 (also referred to as a management entity) receives this request. It sets up the slice, sets up the necessary trusted computing enclaves for the needed resources 16. The orchestrator 18 in some embodiments will also provide attestations both (a) from itself and (b) from the needed resources (e.g., network elements). This indirection via the orchestrator 18 ensures that the customer can verify that the orchestration process was run correctly, that all used resources are reported, and that the resources themselves rely on the trusted manufacturers and software.
The customer requesting a slice in
The orchestrator in
In
In another alternative embodiment, there is a binding between requiring an attestation from a network element and whether that network element processes unencrypted data. For instance, a VPN gateway that decrypts packets before sending them further onwards to other encrypted tunnels is a network element that sees cleartext traffic. However, a router or switch that forwards the encrypted tunnel packets does not. So, one could imagine that the orchestrator only requires an attestation from those network elements that actually see the cleartext traffic.
Some embodiments herein may be applicable to standards specified by the IETF TEAS working group for transport slices, which will include both the concepts (such as specific requested characteristics of a slice) and the concrete north and south-bound interfaces that have to communicate the concepts in concrete way (such as expressing a bandwidth or trusted computing requirement). Some embodiments may for instance incorporate into such standards:
These extensions are specific to the IETF work that is focused on bit transport. At the level of end-to-end slices, similar extensions and developments may be needed in 3GPP.
Generally, then, according to some embodiments, an orchestrator is given a request from a customer entity to set up a service (e.g., a private communications mechanism between endpoints). The customer entity specifies trusted computing requirements for the orchestrator 18 and the service it sets up. The orchestrator 18 finds suitable network elements that are needed to setup the service, with both the orchestrator and the network elements providing trusted computing attestations about the hardware and software they run. In some embodiments, the orchestrator 18 relays these attestations back to the customer entity.
Some embodiments thereby make it possible to request a trusted computing-based service, e.g., network slice. This allows a more trustworthy service, e.g., more trustworthy processing of traffic in a slice.
Alternatively or additionally, some embodiments make it possible to not merely have to trust/check one entity (such as the orchestrator), but also be able to check that other network elements enrolled into helping the single entity are actually trustworthy:
Some embodiments for example make it possible to express requirements such as “I only want to include Ericsson-approved software in this slice” or “I only approve this software version of a Linux router” or “I only trust AMD CPUs for this communication network”.
Some embodiments further make it possible to express requirements such as “every network element that sees the cleartext form of my traffic needs to run Intel SGX and software approved by Ericsson”, and have the system automatically arrange that, along with providing proof to the customer that this is indeed what was done.
This is in contrast to current practices where requirements can be expressed in commercial agreements, but they cannot be technically endorsed, and no proof can be provided. While commercial agreements can and should of course be respected, it is a much stronger capability to be able to show with cryptography and trusted computing mechanisms that what was requested is indeed being provided.
Note that embodiments herein may be applicable to orchestration in the context of cloud computing, Software Defined Networking (SDN), Network Function Virtualization (NFV), or the like. Moreover, the embodiments herein are applicable to any type of reference architectural framework. Example architectural frameworks include, for example, an ETSI NFV-Management and Orchestration (MANO) framework and an Open Networking Automation Platform (ONAP) framework.
The NFV framework enables dynamic construction of management of VNF instances and the relationships between them regarding data, control, management, dependencies, and other attributes. The NFV framework thus provides the capability to load, execute, and move VNFs across different but standardized NFVI point of presence multi-vendor environments.
The NFV-MANO also includes a VNF Manager (VNFM) 62 that oversees the lifecycle management of VNF instances. The VNFM 62 for example is responsible for instantiation of VNFs, scaling of VNFs, updating and/or upgrading VNFs, and termination of VNFs. All VNFs are assumed to have an associated VNF manager. The
The NFV-MANO further includes an NFV orchestrator (NFVO) 64 responsible for on-boarding of new network services and VNF packages, NFV lifecycle management, global resource management, validation and authorization of NFVI resource requests. The NFVO 64 has the ability to coordinate, authorize, release, and engage NFVI resources independently of any specific VIM 60. It also provides governance of VNF instances sharing resources of the NFVI 61. To provide service orchestration, the NFVO 64 creates end-to-end services among different VNFs, that may be managed by different VNFMs with which the NFVO coordinates. Within this framework, an orchestrator 18 from
The NFVO 64 performs this role with the help of a network service (NS) catalog 66, a VNF catalog 68, a list of NFV instances 70, and a list of NFVI resources 72. The VNF catalog 68 is a repository of all usable VNF descriptors, where a VNF descriptor (VNFD) is a deployable template which describes a VNF in terms of its deployment and operational behavior requirements. It is primarily used by the VNFM 62 in the process of VNF instantiation and lifecycle management of a VNF instance. The information provided in the VNFD is also used by the NFVO to manage and orchestrate network services and virtualized resources on the NFVI 61. For VNFs that correspond to a service, then, the VNF catalog 68 includes service templates (e.g., in the form the VNF descriptors).
The NS catalog 66 is a catalog of usable network services. The NS catalog 66 includes a deployment template for a network service in terms of VNFs and a description of their connectivity through virtual links. The NS catalog 66 includes service templates (e.g., in the form of network service descriptors) for those respective services. As an example, a top-level service template may be a network service descriptor containing (abstract) VNF and/or PNF node templates, and each VNF or PNF node template can be substituted by a corresponding detailed VNF or PNF descriptor, i.e., a low-level service template.
The list of NFV instances 70 holds all details about network services instances and related VNF instances. And the NFVI resources 72 is a repository of NFVI resources utilized for the purpose of establishing NFV services. In this context, a resource 16 herein may be exemplified as an NFVI resource 72 or an NFV instance 70.
Also shown in
Moreover, although exemplified with respect to customer premises equipment 12, embodiments herein may be exploited by any equipment configured to request orchestration of a service. This is the case whether or not the equipment is located at the customer premises or controlled by the customer, and whether or not the service requested is a service is for the benefit of or to be consumed by the equipment itself. For example, in some embodiments, one orchestrator may delegate orchestration of a service to another orchestrator, such that the orchestration request from one orchestrator to another orchestrator may include a trusted computing policy 32.
Note further that a resource 16 herein may refer to any type of resource on which a service 10 may be established. A resource 16 may for example refer to infrastructure, a network entity, a network function, a network service, or the like, whether physical or virtual. In physical form, the resource may be or be included in resource equipment. In virtual or software form, the resource may be hosted on resource equipment.
In view of the above modifications and variations,
In some embodiments, the method comprises discovering a resource 16 to orchestrate the service 10, on the basis of a resource 16 claiming to be able to comply with the trusted computing policy 32 (Block 1310).
In some embodiments, the method alternatively or additionally comprises, enforcing the trusted computing policy 32 by verifying whether a received remote attestation 34 proves compliance with the trusted computing policy 32 (Block 1320).
In some embodiments, the method alternatively or additionally comprises, responsive to receiving the signaling 20, orchestrating, or attempting to orchestrate, the service 10 with a resource 16 that provides a remote attestation 36 proving compliance with the trusted computing policy 32 (Block 1330).
In some embodiments, the method comprises sending a response 30 that indicates whether or not the orchestrator 18 has orchestrated the service 10 according to the received signaling 20 (Block 1340).
In some embodiments, the method further comprises receiving, from the orchestrator 18, a response 30 that indicates whether or not the orchestrator 18 has orchestrated the service 10 for the customer premises equipment 12 according to the signaling 20 (Block 1410).
In some embodiments, the method comprises receiving, from the orchestrator 18, a remote attestation 36 that proves a resource 16 with which the service 10 has been orchestrated complies with the trusted computing policy 32 (Block 1420). In one such embodiment, the method may further comprise verifying the remote attestation 36 received, as a condition for declaring the request 22 for orchestration of the service 10 satisfied (Block 1430).
In some embodiments, the method alternatively or additionally comprises receiving a remote attestation 36 from the orchestrator (Block 1440). In one such embodiment, the method further comprises verifying whether the remote attestation 36 proves the orchestrator 18 itself complies with the trusted computing policy 32 (Block 1450).
Embodiments herein also include corresponding apparatuses. Embodiments herein for instance include an orchestrator 16 configured to perform any of the steps of any of the embodiments described above for the orchestrator 16.
Embodiments also include an orchestrator 16 comprising processing circuitry and power supply circuitry. The processing circuitry is configured to perform any of the steps of any of the embodiments described above for the orchestrator 16. The power supply circuitry is configured to supply power to the orchestrator 16.
Embodiments further include an orchestrator 16 comprising processing circuitry. The processing circuitry is configured to perform any of the steps of any of the embodiments described above for the orchestrator 16. In some embodiments, the orchestrator 16 further comprises communication circuitry.
Embodiments further include an orchestrator 16 comprising processing circuitry and memory. The memory contains instructions executable by the processing circuitry whereby the orchestrator 16 is configured to perform any of the steps of any of the embodiments described above for the orchestrator 16.
Embodiments herein also include customer premises equipment 12 configured to perform any of the steps of any of the embodiments described above for the customer premises equipment 12.
Embodiments also include customer premises equipment 12 comprising processing circuitry and power supply circuitry. The processing circuitry is configured to perform any of the steps of any of the embodiments described above for the customer premises equipment 12. The power supply circuitry is configured to supply power to the customer premises equipment 12.
Embodiments further include customer premises equipment 12 comprising processing circuitry. The processing circuitry is configured to perform any of the steps of any of the embodiments described above for the customer premises equipment 12. In some embodiments, the customer premises equipment 12 further comprises communication circuitry.
Embodiments further include customer premises equipment 12 comprising processing circuitry and memory. The memory contains instructions executable by the processing circuitry whereby the customer premises equipment 12 is configured to perform any of the steps of any of the embodiments described above for the customer premises equipment 12.
Embodiments herein also include resource equipment configured to be or host a resource 16 for providing at least a part of a service 10. The resource equipment may be configured to perform any of the steps of any of the embodiments described above in association with a resource 16.
Embodiments herein also include resource equipment configured to be or host a resource 16 for providing at least a part of a service 10. The resource equipment may comprise processing circuitry and power supply circuitry. The processing circuitry is configured to perform any of the steps of any of the embodiments described above in association with a resource 16. The power supply circuitry is configured to supply power to the resource equipment.
Embodiments herein also include resource equipment configured to be or host a resource 16 for providing at least a part of a service 10. The resource equipment may comprise processing circuitry. The processing circuitry is configured to perform any of the steps of any of the embodiments described above in association with a resource 16. In some embodiments, the resource equipment further comprises communication circuitry.
Embodiments herein also include resource equipment configured to be or host a resource 16 for providing at least a part of a service 10. The resource equipment may comprise processing circuitry and memory. The memory contains instructions executable by the processing circuitry whereby the resource equipment is configured to perform any of the steps of any of the embodiments described above in association with a resource 16.
More particularly, the apparatuses described above may perform the methods herein and any other processing by implementing any functional means, modules, units, or circuitry. In one embodiment, for example, the apparatuses comprise respective circuits or circuitry configured to perform the steps shown in the method figures. The circuits or circuitry in this regard may comprise circuits dedicated to performing certain functional processing and/or one or more microprocessors in conjunction with memory. For instance, the circuitry may include one or more microprocessor or microcontrollers, as well as other digital hardware, which may include digital signal processors (DSPs), special-purpose digital logic, and the like. The processing circuitry may be configured to execute program code stored in memory, which may include one or several types of memory such as read-only memory (ROM), random-access memory, cache memory, flash memory devices, optical storage devices, etc. Program code stored in memory may include program instructions for executing one or more telecommunications and/or data communications protocols as well as instructions for carrying out one or more of the techniques described herein, in several embodiments. In embodiments that employ memory, the memory stores program code that, when executed by the one or more processors, carries out the techniques described herein.
Those skilled in the art will also appreciate that embodiments herein further include corresponding computer programs.
A computer program comprises instructions which, when executed on at least one processor of an apparatus, cause the apparatus to carry out any of the respective processing described above. A computer program in this regard may comprise one or more code modules corresponding to the means or units described above.
Embodiments further include a carrier containing such a computer program. This carrier may comprise one of an electronic signal, optical signal, radio signal, or computer readable storage medium.
In this regard, embodiments herein also include a computer program product stored on a non-transitory computer readable (storage or recording) medium and comprising instructions that, when executed by a processor of an apparatus, cause the apparatus to perform as described above.
Embodiments further include a computer program product comprising program code portions for performing the steps of any of the embodiments herein when the computer program product is executed by a computing device. This computer program product may be stored on a computer readable recording medium.
Additional embodiments will now be described. At least some of these embodiments may be described as applicable in certain contexts and/or wireless network types for illustrative purposes, but the embodiments are similarly applicable in other contexts and/or wireless network types not explicitly described.
Although the subject matter described herein may be implemented in any appropriate type of system using any suitable components, some embodiments disclosed herein are described in relation to a wireless network, such as the example wireless network illustrated in
The wireless network may comprise and/or interface with any type of communication, telecommunication, data, cellular, and/or radio network or other similar type of system. In some embodiments, the wireless network may be configured to operate according to specific standards or other types of predefined rules or procedures. Thus, particular embodiments of the wireless network may implement communication standards, such as Global System for Mobile Communications (GSM), Universal Mobile Telecommunications System (UMTS), Long Term Evolution (LTE), Narrowband Internet of Things (NB-IoT), and/or other suitable 2G, 3G, 4G, or 5G standards; wireless local area network (WLAN) standards, such as the IEEE 802.11 standards; and/or any other appropriate wireless communication standard, such as the Worldwide Interoperability for Microwave Access (WiMax), Bluetooth, Z-Wave and/or ZigBee standards.
Network 1906 may comprise one or more backhaul networks, core networks, IP networks, public switched telephone networks (PSTNs), packet data networks, optical networks, wide-area networks (WANs), local area networks (LANs), wireless local area networks (WLANs), wired networks, wireless networks, metropolitan area networks, and other networks to enable communication between devices.
Network node 1960 and WD 1910 comprise various components described in more detail below. These components work together in order to provide network node and/or wireless device functionality, such as providing wireless connections in a wireless network. In different embodiments, the wireless network may comprise any number of wired or wireless networks, network nodes, base stations, controllers, wireless devices, relay stations, and/or any other components or systems that may facilitate or participate in the communication of data and/or signals whether via wired or wireless connections.
As used herein, network node refers to equipment capable, configured, arranged and/or operable to communicate directly or indirectly with a wireless device and/or with other network nodes or equipment in the wireless network to enable and/or provide wireless access to the wireless device and/or to perform other functions (e.g., administration) in the wireless network. Examples of network nodes include, but are not limited to, access points (APs) (e.g., radio access points), base stations (BSs) (e.g., radio base stations, Node Bs, evolved Node Bs (eNBs) and NR NodeBs (gNBs)). Base stations may be categorized based on the amount of coverage they provide (or, stated differently, their transmit power level) and may then also be referred to as femto base stations, pico base stations, micro base stations, or macro base stations. A base station may be a relay node or a relay donor node controlling a relay. A network node may also include one or more (or all) parts of a distributed radio base station such as centralized digital units and/or remote radio units (RRUs), sometimes referred to as Remote Radio Heads (RRHs). Such remote radio units may or may not be integrated with an antenna as an antenna integrated radio. Parts of a distributed radio base station may also be referred to as nodes in a distributed antenna system (DAS). Yet further examples of network nodes include multi-standard radio (MSR) equipment such as MSR BSs, network controllers such as radio network controllers (RNCs) or base station controllers (BSCs), base transceiver stations (BTSs), transmission points, transmission nodes, multi-cell/multicast coordination entities (MCEs), core network nodes (e.g., MSCs, MMEs), O&M nodes, OSS nodes, SON nodes, positioning nodes (e.g., E-SMLCs), and/or MDTs. More generally, however, network nodes may represent any suitable device (or group of devices) capable, configured, arranged, and/or operable to enable and/or provide a wireless device with access to the wireless network or to provide some service to a wireless device that has accessed the wireless network.
In
Similarly, network node 1960 may be composed of multiple physically separate components (e.g., a NodeB component and a RNC component, or a BTS component and a BSC component, etc.), which may each have their own respective components. In certain scenarios in which network node 1960 comprises multiple separate components (e.g., BTS and BSC components), one or more of the separate components may be shared among several network nodes. For example, a single RNC may control multiple NodeB's. In such a scenario, each unique NodeB and RNC pair, may in some instances be considered a single separate network node. In some embodiments, network node 1960 may be configured to support multiple radio access technologies (RATs). In such embodiments, some components may be duplicated (e.g., separate device readable medium 1980 for the different RATs) and some components may be reused (e.g., the same antenna 1962 may be shared by the RATs). Network node 1960 may also include multiple sets of the various illustrated components for different wireless technologies integrated into network node 1960, such as, for example, GSM, WCDMA, LTE, NR, WiFi, or Bluetooth wireless technologies. These wireless technologies may be integrated into the same or different chip or set of chips and other components within network node 1960.
Processing circuitry 1970 is configured to perform any determining, calculating, or similar operations (e.g., certain obtaining operations) described herein as being provided by a network node. These operations performed by processing circuitry 1970 may include processing information obtained by processing circuitry 1970 by, for example, converting the obtained information into other information, comparing the obtained information or converted information to information stored in the network node, and/or performing one or more operations based on the obtained information or converted information, and as a result of said processing making a determination.
Processing circuitry 1970 may comprise a combination of one or more of a microprocessor, controller, microcontroller, central processing unit, digital signal processor, application-specific integrated circuit, field programmable gate array, or any other suitable computing device, resource, or combination of hardware, software and/or encoded logic operable to provide, either alone or in conjunction with other network node 1960 components, such as device readable medium 1980, network node 1960 functionality. For example, processing circuitry 1970 may execute instructions stored in device readable medium 1980 or in memory within processing circuitry 1970. Such functionality may include providing any of the various wireless features, functions, or benefits discussed herein. In some embodiments, processing circuitry 1970 may include a system on a chip (SOC).
In some embodiments, processing circuitry 1970 may include one or more of radio frequency (RF) transceiver circuitry 1972 and baseband processing circuitry 1974. In some embodiments, radio frequency (RF) transceiver circuitry 1972 and baseband processing circuitry 1974 may be on separate chips (or sets of chips), boards, or units, such as radio units and digital units. In alternative embodiments, part or all of RF transceiver circuitry 1972 and baseband processing circuitry 1974 may be on the same chip or set of chips, boards, or units
In certain embodiments, some or all of the functionality described herein as being provided by a network node, base station, eNB or other such network device may be performed by processing circuitry 1970 executing instructions stored on device readable medium 1980 or memory within processing circuitry 1970. In alternative embodiments, some or all of the functionality may be provided by processing circuitry 1970 without executing instructions stored on a separate or discrete device readable medium, such as in a hard-wired manner. In any of those embodiments, whether executing instructions stored on a device readable storage medium or not, processing circuitry 1970 can be configured to perform the described functionality. The benefits provided by such functionality are not limited to processing circuitry 1970 alone or to other components of network node 1960, but are enjoyed by network node 1960 as a whole, and/or by end users and the wireless network generally.
Device readable medium 1980 may comprise any form of volatile or non-volatile computer readable memory including, without limitation, persistent storage, solid-state memory, remotely mounted memory, magnetic media, optical media, random access memory (RAM), read-only memory (ROM), mass storage media (for example, a hard disk), removable storage media (for example, a flash drive, a Compact Disk (CD) or a Digital Video Disk (DVD)), and/or any other volatile or non-volatile, non-transitory device readable and/or computer-executable memory devices that store information, data, and/or instructions that may be used by processing circuitry 1970. Device readable medium 1980 may store any suitable instructions, data or information, including a computer program, software, an application including one or more of logic, rules, code, tables, etc. and/or other instructions capable of being executed by processing circuitry 1970 and, utilized by network node 1960. Device readable medium 1980 may be used to store any calculations made by processing circuitry 1970 and/or any data received via interface 1990. In some embodiments, processing circuitry 1970 and device readable medium 1980 may be considered to be integrated.
Interface 1990 is used in the wired or wireless communication of signalling and/or data between network node 1960, network 1906, and/or WDs 1910. As illustrated, interface 1990 comprises port(s)/terminal(s) 1994 to send and receive data, for example to and from network 1906 over a wired connection. Interface 1990 also includes radio front end circuitry 1992 that may be coupled to, or in certain embodiments a part of, antenna 1962. Radio front end circuitry 1992 comprises filters 1998 and amplifiers 1996. Radio front end circuitry 1992 may be connected to antenna 1962 and processing circuitry 1970. Radio front end circuitry may be configured to condition signals communicated between antenna 1962 and processing circuitry 1970. Radio front end circuitry 1992 may receive digital data that is to be sent out to other network nodes or WDs via a wireless connection. Radio front end circuitry 1992 may convert the digital data into a radio signal having the appropriate channel and bandwidth parameters using a combination of filters 1998 and/or amplifiers 1996. The radio signal may then be transmitted via antenna 1962. Similarly, when receiving data, antenna 1962 may collect radio signals which are then converted into digital data by radio front end circuitry 1992. The digital data may be passed to processing circuitry 1970. In other embodiments, the interface may comprise different components and/or different combinations of components.
In certain alternative embodiments, network node 1960 may not include separate radio front end circuitry 1992, instead, processing circuitry 1970 may comprise radio front end circuitry and may be connected to antenna 1962 without separate radio front end circuitry 1992. Similarly, in some embodiments, all or some of RF transceiver circuitry 1972 may be considered a part of interface 1990. In still other embodiments, interface 1990 may include one or more ports or terminals 1994, radio front end circuitry 1992, and RF transceiver circuitry 1972, as part of a radio unit (not shown), and interface 1990 may communicate with baseband processing circuitry 1974, which is part of a digital unit (not shown).
Antenna 1962 may include one or more antennas, or antenna arrays, configured to send and/or receive wireless signals. Antenna 1962 may be coupled to radio front end circuitry 1990 and may be any type of antenna capable of transmitting and receiving data and/or signals wirelessly. In some embodiments, antenna 1962 may comprise one or more omni-directional, sector or panel antennas operable to transmit/receive radio signals between, for example, 2 GHz and 66 GHz. An omni-directional antenna may be used to transmit/receive radio signals in any direction, a sector antenna may be used to transmit/receive radio signals from devices within a particular area, and a panel antenna may be a line of sight antenna used to transmit/receive radio signals in a relatively straight line. In some instances, the use of more than one antenna may be referred to as MIMO. In certain embodiments, antenna 1962 may be separate from network node 1960 and may be connectable to network node 1960 through an interface or port.
Antenna 1962, interface 1990, and/or processing circuitry 1970 may be configured to perform any receiving operations and/or certain obtaining operations described herein as being performed by a network node. Any information, data and/or signals may be received from a wireless device, another network node and/or any other network equipment. Similarly, antenna 1962, interface 1990, and/or processing circuitry 1970 may be configured to perform any transmitting operations described herein as being performed by a network node. Any information, data and/or signals may be transmitted to a wireless device, another network node and/or any other network equipment.
Power circuitry 1987 may comprise, or be coupled to, power management circuitry and is configured to supply the components of network node 1960 with power for performing the functionality described herein. Power circuitry 1987 may receive power from power source 1986. Power source 1986 and/or power circuitry 1987 may be configured to provide power to the various components of network node 1960 in a form suitable for the respective components (e.g., at a voltage and current level needed for each respective component). Power source 1986 may either be included in, or external to, power circuitry 1987 and/or network node 1960. For example, network node 1960 may be connectable to an external power source (e.g., an electricity outlet) via an input circuitry or interface such as an electrical cable, whereby the external power source supplies power to power circuitry 1987. As a further example, power source 1986 may comprise a source of power in the form of a battery or battery pack which is connected to, or integrated in, power circuitry 1987. The battery may provide backup power should the external power source fail. Other types of power sources, such as photovoltaic devices, may also be used.
Alternative embodiments of network node 1960 may include additional components beyond those shown in
As used herein, wireless device (WD) refers to a device capable, configured, arranged and/or operable to communicate wirelessly with network nodes and/or other wireless devices. Unless otherwise noted, the term WD may be used interchangeably herein with user equipment (UE). Communicating wirelessly may involve transmitting and/or receiving wireless signals using electromagnetic waves, radio waves, infrared waves, and/or other types of signals suitable for conveying information through air. In some embodiments, a WD may be configured to transmit and/or receive information without direct human interaction. For instance, a WD may be designed to transmit information to a network on a predetermined schedule, when triggered by an internal or external event, or in response to requests from the network. Examples of a WD include, but are not limited to, a smart phone, a mobile phone, a cell phone, a voice over IP (VoIP) phone, a wireless local loop phone, a desktop computer, a personal digital assistant (PDA), a wireless cameras, a gaming console or device, a music storage device, a playback appliance, a wearable terminal device, a wireless endpoint, a mobile station, a tablet, a laptop, a laptop-embedded equipment (LEE), a laptop-mounted equipment (LME), a smart device, a wireless customer-premise equipment (CPE). a vehicle-mounted wireless terminal device, etc. A WD may support device-to-device (D2D) communication, for example by implementing a 3GPP standard for sidelink communication, vehicle-to-vehicle (V2V), vehicle-to-infrastructure (V2I), vehicle-to-everything (V2X) and may in this case be referred to as a D2D communication device. As yet another specific example, in an Internet of Things (IoT) scenario, a WD may represent a machine or other device that performs monitoring and/or measurements, and transmits the results of such monitoring and/or measurements to another WD and/or a network node. The WD may in this case be a machine-to-machine (M2M) device, which may in a 3GPP context be referred to as an MTC device. As one particular example, the WD may be a UE implementing the 3GPP narrow band internet of things (NB-IoT) standard. Particular examples of such machines or devices are sensors, metering devices such as power meters, industrial machinery, or home or personal appliances (e.g. refrigerators, televisions, etc.) personal wearables (e.g., watches, fitness trackers, etc.). In other scenarios, a WD may represent a vehicle or other equipment that is capable of monitoring and/or reporting on its operational status or other functions associated with its operation. A WD as described above may represent the endpoint of a wireless connection, in which case the device may be referred to as a wireless terminal. Furthermore, a WD as described above may be mobile, in which case it may also be referred to as a mobile device or a mobile terminal.
As illustrated, wireless device 1910 includes antenna 1911, interface 1914, processing circuitry 1920, device readable medium 1930, user interface equipment 1932, auxiliary equipment 1934, power source 1936 and power circuitry 1937. WD 1910 may include multiple sets of one or more of the illustrated components for different wireless technologies supported by WD 1910, such as, for example, GSM, WCDMA, LTE, NR, WiFi, WiMAX, NB-IoT, or Bluetooth wireless technologies, just to mention a few. These wireless technologies may be integrated into the same or different chips or set of chips as other components within WD 1910.
Antenna 1911 may include one or more antennas or antenna arrays, configured to send and/or receive wireless signals, and is connected to interface 1914. In certain alternative embodiments, antenna 1911 may be separate from WD 1910 and be connectable to WD 1910 through an interface or port. Antenna 1911, interface 1914, and/or processing circuitry 1920 may be configured to perform any receiving or transmitting operations described herein as being performed by a WD. Any information, data and/or signals may be received from a network node and/or another WD. In some embodiments, radio front end circuitry and/or antenna 1911 may be considered an interface.
As illustrated, interface 1914 comprises radio front end circuitry 1912 and antenna 1911. Radio front end circuitry 1912 comprise one or more filters 1918 and amplifiers 1916. Radio front end circuitry 1914 is connected to antenna 1911 and processing circuitry 1920, and is configured to condition signals communicated between antenna 1911 and processing circuitry 1920. Radio front end circuitry 1912 may be coupled to or a part of antenna 1911. In some embodiments, WD 1910 may not include separate radio front end circuitry 1912; rather, processing circuitry 1920 may comprise radio front end circuitry and may be connected to antenna 1911. Similarly, in some embodiments, some or all of RF transceiver circuitry 1922 may be considered a part of interface 1914. Radio front end circuitry 1912 may receive digital data that is to be sent out to other network nodes or WDs via a wireless connection. Radio front end circuitry 1912 may convert the digital data into a radio signal having the appropriate channel and bandwidth parameters using a combination of filters 1918 and/or amplifiers 1916. The radio signal may then be transmitted via antenna 1911. Similarly, when receiving data, antenna 1911 may collect radio signals which are then converted into digital data by radio front end circuitry 1912. The digital data may be passed to processing circuitry 1920. In other embodiments, the interface may comprise different components and/or different combinations of components.
Processing circuitry 1920 may comprise a combination of one or more of a microprocessor, controller, microcontroller, central processing unit, digital signal processor, application-specific integrated circuit, field programmable gate array, or any other suitable computing device, resource, or combination of hardware, software, and/or encoded logic operable to provide, either alone or in conjunction with other WD 1910 components, such as device readable medium 1930, WD 1910 functionality. Such functionality may include providing any of the various wireless features or benefits discussed herein. For example, processing circuitry 1920 may execute instructions stored in device readable medium 1930 or in memory within processing circuitry 1920 to provide the functionality disclosed herein.
As illustrated, processing circuitry 1920 includes one or more of RF transceiver circuitry 1922, baseband processing circuitry 1924, and application processing circuitry 1926. In other embodiments, the processing circuitry may comprise different components and/or different combinations of components. In certain embodiments processing circuitry 1920 of WD 1910 may comprise a SOC. In some embodiments, RF transceiver circuitry 1922, baseband processing circuitry 1924, and application processing circuitry 1926 may be on separate chips or sets of chips. In alternative embodiments, part or all of baseband processing circuitry 1924 and application processing circuitry 1926 may be combined into one chip or set of chips, and RF transceiver circuitry 1922 may be on a separate chip or set of chips. In still alternative embodiments, part or all of RF transceiver circuitry 1922 and baseband processing circuitry 1924 may be on the same chip or set of chips, and application processing circuitry 1926 may be on a separate chip or set of chips. In yet other alternative embodiments, part or all of RF transceiver circuitry 1922, baseband processing circuitry 1924, and application processing circuitry 1926 may be combined in the same chip or set of chips. In some embodiments, RF transceiver circuitry 1922 may be a part of interface 1914. RF transceiver circuitry 1922 may condition RF signals for processing circuitry 1920.
In certain embodiments, some or all of the functionality described herein as being performed by a WD may be provided by processing circuitry 1920 executing instructions stored on device readable medium 1930, which in certain embodiments may be a computer-readable storage medium. In alternative embodiments, some or all of the functionality may be provided by processing circuitry 1920 without executing instructions stored on a separate or discrete device readable storage medium, such as in a hard-wired manner. In any of those particular embodiments, whether executing instructions stored on a device readable storage medium or not, processing circuitry 1920 can be configured to perform the described functionality. The benefits provided by such functionality are not limited to processing circuitry 1920 alone or to other components of WD 1910, but are enjoyed by WD 1910 as a whole, and/or by end users and the wireless network generally.
Processing circuitry 1920 may be configured to perform any determining, calculating, or similar operations (e.g., certain obtaining operations) described herein as being performed by a WD. These operations, as performed by processing circuitry 1920, may include processing information obtained by processing circuitry 1920 by, for example, converting the obtained information into other information, comparing the obtained information or converted information to information stored by WD 1910, and/or performing one or more operations based on the obtained information or converted information, and as a result of said processing making a determination.
Device readable medium 1930 may be operable to store a computer program, software, an application including one or more of logic, rules, code, tables, etc. and/or other instructions capable of being executed by processing circuitry 1920. Device readable medium 1930 may include computer memory (e.g., Random Access Memory (RAM) or Read Only Memory (ROM)), mass storage media (e.g., a hard disk), removable storage media (e.g., a Compact Disk (CD) or a Digital Video Disk (DVD)), and/or any other volatile or non-volatile, non-transitory device readable and/or computer executable memory devices that store information, data, and/or instructions that may be used by processing circuitry 1920. In some embodiments, processing circuitry 1920 and device readable medium 1930 may be considered to be integrated.
User interface equipment 1932 may provide components that allow for a human user to interact with WD 1910. Such interaction may be of many forms, such as visual, audial, tactile, etc. User interface equipment 1932 may be operable to produce output to the user and to allow the user to provide input to WD 1910. The type of interaction may vary depending on the type of user interface equipment 1932 installed in WD 1910. For example, if WD 1910 is a smart phone, the interaction may be via a touch screen; if WD 1910 is a smart meter, the interaction may be through a screen that provides usage (e.g., the number of gallons used) or a speaker that provides an audible alert (e.g., if smoke is detected). User interface equipment 1932 may include input interfaces, devices and circuits, and output interfaces, devices and circuits. User interface equipment 1932 is configured to allow input of information into WD 1910, and is connected to processing circuitry 1920 to allow processing circuitry 1920 to process the input information. User interface equipment 1932 may include, for example, a microphone, a proximity or other sensor, keys/buttons, a touch display, one or more cameras, a USB port, or other input circuitry. User interface equipment 1932 is also configured to allow output of information from WD 1910, and to allow processing circuitry 1920 to output information from WD 1910. User interface equipment 1932 may include, for example, a speaker, a display, vibrating circuitry, a USB port, a headphone interface, or other output circuitry. Using one or more input and output interfaces, devices, and circuits, of user interface equipment 1932, WD 1910 may communicate with end users and/or the wireless network, and allow them to benefit from the functionality described herein.
Auxiliary equipment 1934 is operable to provide more specific functionality which may not be generally performed by WDs. This may comprise specialized sensors for doing measurements for various purposes, interfaces for additional types of communication such as wired communications etc. The inclusion and type of components of auxiliary equipment 1934 may vary depending on the embodiment and/or scenario.
Power source 1936 may, in some embodiments, be in the form of a battery or battery pack. Other types of power sources, such as an external power source (e.g., an electricity outlet), photovoltaic devices or power cells, may also be used. WD 1910 may further comprise power circuitry 1937 for delivering power from power source 1936 to the various parts of WD 1910 which need power from power source 1936 to carry out any functionality described or indicated herein. Power circuitry 1937 may in certain embodiments comprise power management circuitry. Power circuitry 1937 may additionally or alternatively be operable to receive power from an external power source; in which case WD 1910 may be connectable to the external power source (such as an electricity outlet) via input circuitry or an interface such as an electrical power cable. Power circuitry 1937 may also in certain embodiments be operable to deliver power from an external power source to power source 1936. This may be, for example, for the charging of power source 1936. Power circuitry 1937 may perform any formatting, converting, or other modification to the power from power source 1936 to make the power suitable for the respective components of WD 1910 to which power is supplied.
In
In
In the depicted embodiment, input/output interface 2005 may be configured to provide a communication interface to an input device, output device, or input and output device. UE 2000 may be configured to use an output device via input/output interface 2005. An output device may use the same type of interface port as an input device. For example, a USB port may be used to provide input to and output from UE 2000. The output device may be a speaker, a sound card, a video card, a display, a monitor, a printer, an actuator, an emitter, a smartcard, another output device, or any combination thereof. UE 2000 may be configured to use an input device via input/output interface 2005 to allow a user to capture information into UE 2000. The input device may include a touch-sensitive or presence-sensitive display, a camera (e.g., a digital camera, a digital video camera, a web camera, etc.), a microphone, a sensor, a mouse, a trackball, a directional pad, a trackpad, a scroll wheel, a smartcard, and the like. The presence-sensitive display may include a capacitive or resistive touch sensor to sense input from a user. A sensor may be, for instance, an accelerometer, a gyroscope, a tilt sensor, a force sensor, a magnetometer, an optical sensor, a proximity sensor, another like sensor, or any combination thereof. For example, the input device may be an accelerometer, a magnetometer, a digital camera, a microphone, and an optical sensor.
In
RAM 2017 may be configured to interface via bus 2002 to processing circuitry 2001 to provide storage or caching of data or computer instructions during the execution of software programs such as the operating system, application programs, and device drivers. ROM 2019 may be configured to provide computer instructions or data to processing circuitry 2001. For example, ROM 2019 may be configured to store invariant low-level system code or data for basic system functions such as basic input and output (I/O), startup, or reception of keystrokes from a keyboard that are stored in a non-volatile memory. Storage medium 2021 may be configured to include memory such as RAM, ROM, programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), magnetic disks, optical disks, floppy disks, hard disks, removable cartridges, or flash drives. In one example, storage medium 2021 may be configured to include operating system 2023, application program 2025 such as a web browser application, a widget or gadget engine or another application, and data file 2027. Storage medium 2021 may store, for use by UE 2000, any of a variety of various operating systems or combinations of operating systems.
Storage medium 2021 may be configured to include a number of physical drive units, such as redundant array of independent disks (RAID), floppy disk drive, flash memory, USB flash drive, external hard disk drive, thumb drive, pen drive, key drive, high-density digital versatile disc (HD-DVD) optical disc drive, internal hard disk drive, Blu-Ray optical disc drive, holographic digital data storage (HDDS) optical disc drive, external mini-dual in-line memory module (DIMM), synchronous dynamic random access memory (SDRAM), external micro-DIMM SDRAM, smartcard memory such as a subscriber identity module or a removable user identity (SIM/RUIM) module, other memory, or any combination thereof. Storage medium 2021 may allow UE 2000 to access computer-executable instructions, application programs or the like, stored on transitory or non-transitory memory media, to off-load data, or to upload data. An article of manufacture, such as one utilizing a communication system may be tangibly embodied in storage medium 2021, which may comprise a device readable medium.
In
In the illustrated embodiment, the communication functions of communication subsystem 2031 may include data communication, voice communication, multimedia communication, short-range communications such as Bluetooth, near-field communication, location-based communication such as the use of the global positioning system (GPS) to determine a location, another like communication function, or any combination thereof. For example, communication subsystem 2031 may include cellular communication, Wi-Fi communication, Bluetooth communication, and GPS communication. Network 2043b may encompass wired and/or wireless networks such as a local-area network (LAN), a wide-area network (WAN), a computer network, a wireless network, a telecommunications network, another like network or any combination thereof. For example, network 2043b may be a cellular network, a Wi-Fi network, and/or a near-field network. Power source 2013 may be configured to provide alternating current (AC) or direct current (DC) power to components of UE 2000.
The features, benefits and/or functions described herein may be implemented in one of the components of UE 2000 or partitioned across multiple components of UE 2000. Further, the features, benefits, and/or functions described herein may be implemented in any combination of hardware, software or firmware. In one example, communication subsystem 2031 may be configured to include any of the components described herein. Further, processing circuitry 2001 may be configured to communicate with any of such components over bus 2002. In another example, any of such components may be represented by program instructions stored in memory that when executed by processing circuitry 2001 perform the corresponding functions described herein. In another example, the functionality of any of such components may be partitioned between processing circuitry 2001 and communication subsystem 2031. In another example, the non-computationally intensive functions of any of such components may be implemented in software or firmware and the computationally intensive functions may be implemented in hardware.
Any appropriate steps, methods, features, functions, or benefits disclosed herein may be performed through one or more functional units or modules of one or more virtual apparatuses. Each virtual apparatus may comprise a number of these functional units. These functional units may be implemented via processing circuitry, which may include one or more microprocessor or microcontrollers, as well as other digital hardware, which may include digital signal processors (DSPs), special-purpose digital logic, and the like. The processing circuitry may be configured to execute program code stored in memory, which may include one or several types of memory such as read-only memory (ROM), random-access memory (RAM), cache memory, flash memory devices, optical storage devices, etc. Program code stored in memory includes program instructions for executing one or more telecommunications and/or data communications protocols as well as instructions for carrying out one or more of the techniques described herein. In some implementations, the processing circuitry may be used to cause the respective functional unit to perform corresponding functions according one or more embodiments of the present disclosure.
Generally, all terms used herein are to be interpreted according to their ordinary meaning in the relevant technical field, unless a different meaning is clearly given and/or is implied from the context in which it is used. All references to a/an/the element, apparatus, component, means, step, etc. are to be interpreted openly as referring to at least one instance of the element, apparatus, component, means, step, etc., unless explicitly stated otherwise. The steps of any methods disclosed herein do not have to be performed in the exact order disclosed, unless a step is explicitly described as following or preceding another step and/or where it is implicit that a step must follow or precede another step. Any feature of any of the embodiments disclosed herein may be applied to any other embodiment, wherever appropriate. Likewise, any advantage of any of the embodiments may apply to any other embodiments, and vice versa. Other objectives, features and advantages of the enclosed embodiments will be apparent from the description.
The term unit may have conventional meaning in the field of electronics, electrical devices and/or electronic devices and may include, for example, electrical and/or electronic circuitry, devices, modules, processors, memories, logic solid state and/or discrete devices, computer programs or instructions for carrying out respective tasks, procedures, computations, outputs, and/or displaying functions, and so on, as such as those that are described herein.
The term “A and/or B” as used herein covers embodiments having A alone, B alone, or both A and B together. The term “A and/or B” may therefore equivalently mean “at least one of any one or more of A and B”.
Some of the embodiments contemplated herein are described more fully with reference to the accompanying drawings. Other embodiments, however, are contained within the scope of the subject matter disclosed herein. The disclosed subject matter should not be construed as limited to only the embodiments set forth herein; rather, these embodiments are provided by way of example to convey the scope of the subject matter to those skilled in the art.
| Filing Document | Filing Date | Country | Kind |
|---|---|---|---|
| PCT/EP2021/069917 | 7/16/2021 | WO |
| Number | Date | Country | |
|---|---|---|---|
| 63056701 | Jul 2020 | US |
