Method and System for Secure Distribution of Mobile Data Traffic to Closer Network Endpoints

摘要

When a UE provides a new request to an S-GW, the S-GW augments DNS requests and provides them to a public DNS, with the augmentation providing indications of the requested function. The public DNS responds by providing the IP address of a simplified P-GW close to the UE location. The P-GW forwards communications to the nearest instance of an endpoint providing the requested service or function. In embodiments, some of the functions of the P-GW are shifted to other devices in the mobile core, devices that are already local. The simplification of the P-GW allows the P-GW to be virtualized and moved to a general-purpose server location. Existing information present in the data path is used to provide encryption of portions of the GTP connection, allowing the location of the P-GW to be optimized in a virtual server data center, as the data path is now secure.

主权项

1. A method comprising:
receiving, at a serving gateway (S-GW), a request from a user equipment (UE) to access a network resource; preparing, at the S-GW, in response to the received request, an augmented domain name server (DNS) request, the augmentation indicating the desired function of the request; providing, by the S-GW, the augmented DNS request to a public DNS located on a public network; receiving, at the S-GW, from the public DNS an Internet Protocol (IP) address of a closest packet data network (PDN) gateway (P-GW) based on the augmented DNS request; and connecting, by the S-GW, to the P-GW at the received IP address, to develop a flow path from the UE to the S-GW to the closest P-GW.