Granted Patent B2

US 12,524,166 · App. 18/022,580 · Granted Jan 13, 2026

Inventors: Naga Krishna Prasad Jampala (Bangalore, IN); Mahesh Sivapuram (Banaglore, IN); Arun S Menon (Bangalore, IN)

Assignee: RAKUTEN SYMPHONY, INC.

G06F3/0622G06F3/0655G06F3/067G06F21/31H04W4/50

Abstract

Claims (42)

1 . A system for File Transfer Protocol (FTP) server deployment as part of a

Distributed Unit (DU) network function of a wireless network, wherein the system comprises:

a memory storing instructions; and

at least one hardware processor configured to execute the instructions to implement a DU comprising:

a Radio Unit (RU) manager container hosting a DU application and application container sensitive information at a first directory; and

a sidecar container that hosts the FTP server, a RU software (SW) image of an RU and sidecar container credentials at a second directory, wherein the sidecar container sends sidecar container credentials to the RU in the wireless network to download the RU software image using a file transfer protocol (FTP) service,

wherein the RU establishes a FTP session with the sidecar container using the sidecar container credentials and downloads the RU software image from the sidecar container using a FTP service, and

wherein the at least one hardware processor is configured to execute the instructions to implement the DU to provide the RU software image from the sidecar container using the FTP by:

allocating restricted access to the RU while downloading the RU software image from the sidecar container; and

allowing the RU to download the RU software image from the sidecar container based on the allocated restricted access using the FTP service, the allocated restricted access being an access provided to the RU to directly download the RU software image from the sidecar container without exposure of the sensitive information in a file system.

2 . The system as claimed in claim 1 , wherein the restricted access comprises at least one of:

a. enable read and write access only to a second directory hosting the RU SW image at the sidecar container,

b. disable read and write access to the first directory hosting the sensitive information in the application container,

c. enable to establish FTP session and disable SSH access to the RU,

d. disable access to any proprietary information in the sidecar container, and

e. disable read and write access to any host path volumes in the sidecar container.

3 . The system as claimed in claim 1 , wherein the at least one hardware processor is configured to execute the instructions to implement the DU to establish the FTP service with the sidecar container using the sidecar container credentials by:

receiving the sidecar container credentials by the sidecar container to allow the RU to download the RU software image from the sidecar container using the FTP service;

validating the RU by the RU manager based on the sidecar container credentials; and

establishing the FTP service between the RU and the sidecar container upon successful connection with the RU manager.

4 . The system as claimed in claim 1 , wherein the sidecar container is configured to provide the FTP service using an unprivileged port.

5 . The system as claimed in claim 1 , wherein the sidecar container creates a mapping between the sidecar container credentials with the application container sensitive credentials.

6 . A method for File Transfer Protocol (FTP) server deployment as part of a Distributed Unit (DU) network function of a wireless network, wherein the method comprises:

hosting, by a DU, the FTP server in a sidecar container of the DU;

storing Radio Unit (RU) image in the sidecar container;

hosting a DU application in a Radio Unit (RU) manager container of the DU;

storing application container sensitive information in the Radio Unit (RU) manager container;

sending the sidecar container credentials from the sidecar container to a RU for downloading the RU software image from the sidecar container using a FTP service;

allocating restricted access to the RU while downloading the RU software image from the sidecar container; and

allowing the RU to download the RU software image from the sidecar container based on the allocated restricted access using the FTP service, the allocated restricted access being an access provided to the RU to directly download the RU software image from the sidecar container without exposure of the sensitive information in a file system.

7 . The method as claimed in claim 1 , wherein the restricted access comprises at least one of:

a. enable read and write access only to a directory hosting the RU software image at the sidecar container,

b. disable read and write access to the sensitive information in the filesystem,

c. enable to establish FTP session and disable SSH access to the RU,

d. disable access to any proprietary information in the sidecar container, and

e. disable read and write access to any host path volumes in the sidecar container.

8 . The method as claimed in claim 6 , further comprising:

receiving the sidecar container credentials from the RU to download the RU software image from the sidecar container using the FTP service;

validating the RU by the RU manager based on the sidecar container credentials; and

establishing the FTP service between the RU and the sidecar container upon successful connection with the RU manager.

9 . The method as claimed in claim 6 , wherein the sidecar container is configured to provide the FTP service using an unprivileged port.

10 . The method as claimed in claim 6 , wherein the sidecar container creates a mapping between the sidecar container credentials with the application container sensitive credentials.

Assignments (2)

Priority Claims (1)

Continuity (1)

References Cited (13)