Method and System for Facilitating Participation of an Intermediary Network Device in a Security Gateway Communication Between at least one Base Station and a Core Network Portion in a Cellular Communication Network

摘要

A method for facilitating participation of an intermediary network device in a security gateway communication including:
establishing a secure channel between the intermediary network device and a security gateway;transmitting a virtual machine instantiation command generated by software running in the security gateway to the intermediary network device;instantiating a virtual machine on the intermediary network device;when establishing a secure communication session between the at least one base station and the core network portion via the security gateway for the first time, establishing an Internet Key Exchange communication between the virtual machine and the security gateway and transmitting session keys from the security gateway to the virtual machine during the Internet Key Exchange communication;establishing an IPsec tunnel between the virtual machine and the security gateway.

主权项

1. A method for facilitating participation of an intermediary network device in a security gateway communication between at least one base station and a core network portion in a cellular communication network, the method comprising the steps of:
(a) establishing a secure channel between the intermediary network device and a security gateway connecting between the at least one base station and the core network portion; (b) transmitting a virtual machine instantiation command generated by software running in the security gateway to the intermediary network device over the secure channel; (c) instantiating a virtual machine on the intermediary network device responsive to the virtual machine instantiation command; (d) when establishing a secure communication session between the at least one base station and the core network portion via the security gateway for the first time, establishing an Internet Key Exchange communication between the virtual machine and the security gateway and transmitting session keys from the security gateway to the virtual machine during the Internet Key Exchange communication; (e) establishing an IPsec tunnel between the virtual machine and the security gateway using the transmitted session keys for facilitating participation of the network interface device in the secure communication session.