Network function virtualization (NFV) virtual network function (VNF) crash recovery

1. A method of operating a Network Function Virtualization (NFV) system to recover from a Virtual Network Function (VNF) crash, the method comprising:

first NFV processing circuitry executing a VNF, and in response, the first NFV processing circuitry supporting a wireless data communication service and transferring VNF state data;

VNF memory circuitry receiving and storing the VNF state data;

Management and Orchestration (MANO) processing circuitry executing an NFV orchestrator and the MANO processing circuitry responsively detecting a crash of the VNF by failing to receive heartbeat messages from the crashed VNF and responsively retrieving the VNF state data for the crashed VNF from the VNF memory circuitry;

the MANO processing circuitry executing the NFV orchestrator and the MANO processing circuitry responsively directing second NFV processing circuitry to execute a new VNF to replace the crashed VNF based on the VNF state data;

the second NFV processing circuitry executing the new VNF based on the VNF state data and the second NFV processing circuitry responsively supporting the wireless data communication service and transferring additional VNF state data;

the MANO processing circuitry executing the NFV orchestrator, and in response to the VNF state data, the MANO processing circuitry establishing a new Hardware Root of Trust (HRoT) relationship between the new VNF in second NFV processing circuitry and an HRoT control system; and

the second NFV processing circuitry using a secret read-only HRoT key embedded in the second NFV processing circuitry to hash a random challenge from the HRoT control system and the second NFV processing circuitry and responsively transferring a hash result to the HRoT control system for hardware identity verification.

2. The method of claim 1 wherein the MANO processing circuitry directing the NFV system to install the new VNF further comprises directing the NFV system to install the new VNF based on a recovery instruction in a VNF Descriptor for the crashed VNF.

3. The method of claim 1 wherein the MANO processing circuitry directing the NFV system to install the new VNF further comprises directing the NFV system to install the new VNF based on a recovery instruction in a Network Service Descriptor for the crashed VNF.

4. The method of claim 1 wherein the MANO processing circuitry retrieving the VNF state data for the crashed VNF from the VNF state database comprises processing a VNF Descriptor for the crashed VNF to identify the VNF state database.

5. The method of claim 1 wherein the MANO processing circuitry retrieving the VNF state data for the crashed VNF from the VNF state database comprises processing a Network Service Descriptor for the crashed VNF to identify the VNF state database.

6. The method of claim 1 wherein the crashed NFV was executing in a first portion of the NFV system and wherein the MANO processing circuitry directing the NFV system to install the new VNF to replace the crashed VNF comprises directing the NFV system to install the new VNF in a second portion of the NFV system.

7. The method of claim 1 wherein the VNF state database indicates a Hardware Root of Trust (HRoT) relationship between the crashed VNF in the NFV system and an HRoT control system and further comprising the MANO processing circuitry executing the NFV orchestrator and transferring a message indicating the VNF crash for delivery to the HRoT control system.

8. The method of claim 1 wherein the VNF state database indicates a Hardware Root of Trust (HRoT) relationship between the crashed VNF in the NFV system and an HRoT control system and further comprising the MANO processing circuitry executing the NFV orchestrator and establishing a new HRoT relationship between the new VNF in the NFV system and the HRoT control system.

9. The method of claim 1 wherein the VNF comprises a priority communication VNF.

10. The method of claim 1 wherein the VNF state data comprises a priority communication session context.

11. A Network Function Virtualization (NFV) system to recover from a Virtual Network Function (VNF) crash, the NFV system comprising:

first NFV processing circuitry configured to execute a VNF to support a wireless data communication service and to transfer VNF state data;

VNF memory circuitry configured to receive and store the VNF state data;

Management and Orchestration (MANO) processing circuitry configured to execute an NFV orchestrator to detect a crash of the VNF by failing to receive heartbeat messages from the crashed VNF and responsively retrieve the VNF state data for the crashed VNF from the VNF memory circuitry and direct second NFV processing circuitry to execute a new VNF to replace the crashed VNF based on the VNF state data;

the second NFV processing circuitry configured to execute the new VNF based on the VNF state data to support the wireless data communication service and to transfer additional VNF state data;

the MANO processing circuitry configured to execute the NFV orchestrator, and in response to the VNF state data for the crashed VNF, the MANO processing circuitry configured to establish a new Hardware Root of Trust (HRoT) relationship between the new VNF in second NFV processing circuitry and an HRoT control system; and

the second NFV processing circuitry configured to use a secret read-only HRoT key embedded in the second NFV processing circuitry to hash a random challenge from the HRoT control system to transfer a hash result to the HRoT control system for hardware identity verification.

12. The NFV system of claim 11 wherein the MANO processing circuitry is configured to direct the NFVI to install the new VNF based on a recovery instruction in a VNF Descriptor for the crashed VNF.

13. The NFV system of claim 11 wherein the MANO processing circuitry is configured to direct the NFVI to install the new VNF based on a recovery instruction in a Network Service Descriptor for the crashed VNF.

14. The NFV system of claim 11 wherein the MANO processing circuitry is configured to process a VNF Descriptor for the crashed VNF to identify the VNF state database.

15. The NFV system of claim 11 wherein the MANO processing circuitry is configured to process a Network Service Descriptor for the crashed VNF to identify the VNF state database.

16. The NFV system of claim 11 wherein the crashed NFV was executing in a first portion of the NFVI and wherein the MANO processing circuitry is configured to direct the NFVI to install the new VNF in a second portion of the NFVI.

17. The NFV system of claim 11 wherein the VNF state database indicates a Hardware Root of Trust (HRoT) relationship between the crashed VNF in the NFV system and an HRoT control system and further comprising the MANO processing circuitry configured to execute the NFV orchestrator and transfer a message indicating the VNF crash for delivery to the HRoT control system.

18. The NFV system of claim 11 wherein the VNF state database indicates a Hardware Root of Trust (HRoT) relationship between the crashed VNF in the NFV system and an HRoT control system and further comprising the MANO processing circuitry configured to execute the NFV orchestrator and establish a new HRoT relationship between the new VNF in the NFV system and the HRoT control system.

19. The NFV system of claim 11 wherein the VNF comprises a priority communication VNF.

20. The NFV system of claim 11 wherein the VNF state data comprises a priority communication session context.