Carrier network security interface for fielded devices

摘要

Carrier-side security services for fielded devices is disclosed. In contrast to conventional authentication systems for fielded devices, wherein an end-to-end communications pathway is typically established for authentication of a fielded device by a back-end service provider, authentication and security services can be moved into devices associated with a carrier network. A device associated with the carrier network can authenticate field components to service components without first establishing a communications pathway to a back-end service provider. Further, the device can provide for secured communications with an authenticated field component and are not readable by carrier devices. In an aspect, this can allow for centralization of security elements from the periphery of back-end service providers into a device associated with the carrier network. In a further aspect, the device can host a security services platform for back-end service providers.

主权项

1. A device associated with a network operator identity, comprising:
a processor; and a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising:
identifying an association between a field device and a service device based on a communication with the field device, wherein the service device is not associated with the network operator identity;in response to the identifying the association, determining a service security protocol to enable communication between the field device and the service device via the service security protocol without authentication of the field device via the service device; andin response to determining a communication link is successfully established via a network security protocol between the field device and a network device associated with the network operator identity, adapting communication employing a communication path between the field device and the service device to convey data via the service security protocol, wherein the communication path comprises the communication link, wherein the adapting comprises encrypting the data for communication via the communication path to be unreadable by network devices associated with the network operator identity, and wherein the data encrypted for the service security protocol is decryptable by the field device and the service device.