Methods, apparatuses, and related computer program product for network security

摘要

It is disclosed a method (and related apparatus) including selecting, at a first endpoint entity, at least one range of protection to be granted, the range of protection relating to one of a plurality of network elements in at least one access network and at least one core network and to a second endpoint entity, and transmitting, to a network element entity, a signaling message including first establishment information indicating the at least one range of protection to be granted; and a method (and related apparatus) including receiving, at the network element entity, the signaling message from the first endpoint entity, obtaining, from a second endpoint entity and based on the first establishment information, second establishment information indicating protection granted by the second endpoint entity, and signaling, from the network element entity to the first endpoint entity, third establishment information indicating the protection granted to the first endpoint entity.

主权项

1. A method, comprising:
receiving, at a network element entity, a signaling message from a first endpoint entity, the signaling message comprising first establishment information indicating a plurality of ranges of protection to be granted, the ranges of protection each specifying the parts of a communication path between the first endpoint entity and a second endpoint entity, being an endpoint entity different from the first endpoint entity, which are to be protected, the ranges of protection relating to at least one of the following: at least one of a plurality of network elements in at least one access network and at least one core network; and the second endpoint entity; obtaining, at a network element entity, from the second endpoint entity and derived from the first establishment information, second establishment information indicating a range of protection granted by the second endpoint entity, the range of protection granted by the second endpoint entity being one of the plurality of ranges of protection of the signaling message; and signaling, from the network element entity which obtains the second establishment information from the second endpoint entity, to the first endpoint entity, third establishment information indicating the protection granted to the first endpoint entity.