Context-based cryptography selection
A system and method of selecting a cryptography algorithm within a network. The method can include receiving network data from a one or more network interfaces or network elements; analyzing the network data to identify a cryptography algorithm from a plurality of cryptography algorithms; and identifying the cryptography algorithm from the plurality of cryptography algorithms based on at least one of the following parameters: network security level, network criticality, or energy efficiency. In addition, the step of analyzing the network data to identify the cryptography algorithm may further include receiving a plurality of identifiers associated with the network data, wherein the plurality of identifiers are each further associated with a degree of importance in connection with the network security level parameter.
1. A method of selecting a cryptography algorithm within a network, the method comprising:
receiving, by a service management and orchestrator (SMO) framework in an Open-Radio Access Network (O-RAN), network data from one or more network interfaces or network elements;
analyzing, by the SMO, the network data to identify a cryptography algorithm from a plurality of cryptography algorithms; and
identifying, by the SMO, the cryptography algorithm from the plurality of cryptography algorithms based on energy consumption during signing of public key signatures and at least one of the following parameters: network security level, network criticality, or energy efficiency.
2. The method of claim 1 , wherein the step of analyzing the network data to identify the cryptography algorithm further comprises receiving a plurality of identifiers associated with the network data, wherein the plurality of identifiers are each further associated with a degree of importance in connection with the network security level parameter.
3. The method of claim 1 , wherein the step of analyzing the network data to identify the cryptography algorithm further comprises receiving a plurality of identifiers associated with the network data, wherein the plurality of identifiers are each further associated with a degree of importance in connection with the network criticality parameter.
4. The method of claim 1 , wherein the step of analyzing the network data to identify the cryptography algorithm further comprises receiving a plurality of identifiers associated with the network data, wherein the plurality of identifiers are each further associated with a degree of importance in connection with the energy efficiency parameter.
5. The method of claim 1 , wherein the SMO framework comprises an orchestrator module in communication with a network infrastructure module.
6. The method of claim 5 , wherein the step of analyzing the network data to identify a cryptography algorithm from a plurality of cryptography algorithms is performed via the orchestrator module.
7. The method of claim 6 , further comprising:
transmitting the identified cryptography algorithm from the orchestrator module to the network infrastructure module.
8. The method of claim 7 , further comprising:
receiving, via the orchestrator module, a selection of conditions with respect to the identified cryptography algorithm from the network infrastructure module.
9. The method of claim 8 , further comprising:
generating, via the orchestrator module, a cryptography policy for the network with respect to the identified cryptography algorithm.
10. The method of claim 9 , further comprising:
transmitting, via the orchestrator module, the cryptography policy for the network with respect to the identified cryptography algorithm to the network infrastructure module.
11. An apparatus for selecting a cryptography algorithm within a network, comprising:
a memory storage storing computer-executable instructions; and
a processor communicatively coupled to the memory storage, wherein the processor is configured to execute the computer-executable instructions and cause the apparatus to:
receive, by a service management and orchestrator (SMO) framework in an Open-Radio Access Network (O-RAN), network data from a one or more network interfaces or network elements;
analyze, by the SMO, the network data to identify a cryptography algorithm from a plurality of cryptography algorithms; and
identify, by the SMO, the cryptography algorithm from the plurality of cryptography algorithms based on energy consumption during signing of public key signatures and at least one of the following parameters: network security level, network criticality, or energy efficiency.
12. The apparatus of claim 11 , wherein the computer-executable instructions, when executed by the processor, further cause the apparatus to:
receive a plurality of identifiers associated with the network data, wherein the plurality of identifiers are each further associated with a degree of importance in connection with the network security level parameter.
13. The apparatus of claim 11 , wherein the computer-executable instructions, when executed by the processor, further cause the apparatus to:
receive a plurality of identifiers associated with the network data, wherein the plurality of identifiers are each further associated with a degree of importance in connection with the network criticality parameter.
14. The apparatus of claim 11 , wherein the computer-executable instructions, when executed by the processor, further cause the apparatus to:
receive a plurality of identifiers associated with the network data, wherein the plurality of identifiers are each further associated with a degree of importance in connection with the energy efficiency parameter.
15. The apparatus of claim 11 , wherein the SMO framework comprises an orchestrator module in communication with a network infrastructure module.
16. The apparatus of claim 15 , wherein the step of analyzing the network data to identify a cryptography algorithm from a plurality of cryptography algorithms is performed via the orchestrator module.
17. The apparatus of claim 16 , wherein the computer-executable instructions, when executed by the processor, further cause the apparatus to:
transmit the identified cryptography algorithm from the orchestrator module to the network infrastructure module.
18. The apparatus of claim 17 , wherein the computer-executable instructions, when executed by the processor, further cause the apparatus to:
receive, via the orchestrator module, a selection of conditions with respect to the identified cryptography algorithm from the network infrastructure module.
19. The apparatus of claim 18 , wherein the computer-executable instructions, when executed by the processor, further cause the apparatus to:
generate, via the orchestrator module, a cryptography policy for the network with respect to the identified cryptography algorithm.
20. A non-transitory computer-readable medium comprising computer-executable instructions for selecting a cryptography algorithm within a network by an apparatus, wherein the computer-executable instructions, when executed by at least one processor of the apparatus, cause the apparatus to:
receive, by a service management and orchestrator (SMO) framework in an Open-Radio Access Network (O-RAN), network data from a one or more network interfaces or network elements;
analyze, by the SMO, the network data to identify a cryptography algorithm from a plurality of cryptography algorithms; and
identify, by the SMO, the cryptography algorithm from the plurality of cryptography algorithms based on energy consumption during signing of public key signatures and at least one of the following parameters: network security level, network criticality, or energy.