System, method, and computer program for verifying virtual network function (VNF) package and/or network service definition integrity

1. A method, comprising:

identifying, by a system, a virtual network function (VNF) package or a network service definition for performing integrity verification;

computing, by the system, a digital signature of the VNF package or the network service definition that allows verification of an integrity of the VNF package or the network service definition;

storing, by the system, the digital signature in a blockchain; and

providing, by the system, the VNF package or the network service definition to an entity that:

accesses the digital signature of the VNF package or the network service definition from the blockchain,

determines a second digital signature of the VNF package or the network service definition provided to the entity by the system,

compares the digital signature of the VNF package or the network service definition accessed from the blockchain with the second digital signature of the VNF package or the network service definition provided to the entity by the system, and

verifies the integrity of the VNF package or the network service definition when a result of the comparison indicates that the digital signature of the VNF package or the network service definition accessed from the blockchain matches the second digital signature of the VNF package or the network service definition provided to the entity by the system,

wherein the entity verifies the integrity of the VNF package prior to using the VNF package to build a network service or verifies the integrity of the network service definition prior to using the network service definition to create a running network service.

2. The method of claim 1 , wherein the system includes a plurality of entities each dedicated to performing a portion of the integrity verification.

3. The method of claim 1 , wherein the system includes one entity dedicated to performing the integrity verification.

4. The method of claim 1 , wherein a verified VNF package, resulting from the entity verifying the integrity of the VNF package, is added to a communication service provider (CSP) catalog.

5. The method of claim 4 , wherein the system verifies that the verified VNF package in the CSP catalog is unchanged by verifying the digital signature of the VNF package in the blockchain.

6. The method of claim 1 , wherein a verified network service definition, resulting from the entity verifying the integrity of the network service definition, is added to a CSP catalog.

7. The method of claim 6 , wherein an orchestrator verifies that the verified network service definition in the CSP catalog is unchanged by verifying the digital signature of the network service definition in the blockchain when the orchestrator receives a request to run the network service definition.

8. The method of claim 7 , wherein the orchestrator creates the running network service utilizing the verified network service definition.

9. The method of claim 8 , further comprising:

computing, by the orchestrator, a first digital signature for a configuration representation associated with the running network service;

storing, by the orchestrator, the first digital signature in the blockchain;

computing, by the orchestrator, a second digital signature for the running network service during production;

comparing, by the orchestrator, the second digital signature to the first digital signature stored in the blockchain;

determining, by the orchestrator, whether the second digital signature matches the first digital signature; and

generating, by the orchestrator, an alert for potential tampering of the running network service if the second digital signature does not match the first digital signature.

10. The method of claim 9 , further comprising updating and storing, by the orchestrator, the digital signature if the running network service undergoes an approved change.

11. The method of claim 10 , wherein the approved change includes one or more of migration, change of scaling, change of network address, change of location, change of functional configuration, and change of one or more policies.

12. A non-transitory computer readable medium storing computer code executable by a computer processor to perform a method comprising:

identifying a virtual network function (VNF) package or a network service definition for performing integrity verification;

computing a digital signature of the VNF package or the network service definition that allows verification of an integrity of the VNF package or the network service definition;

storing the digital signature in a blockchain; and

providing the VNF package or the network service definition to an entity that:

accesses the digital signature of the VNF package or the network service definition from the blockchain,

determines a second digital signature of the VNF package or the network service definition provided to the entity by the system,

compares the digital signature of the VNF package or the network service definition accessed from the blockchain with the second digital signature of the VNF package or the network service definition provided to the entity by the system, and

verifies the integrity of the VNF package or the network service definition when a result of the comparison indicates that the digital signature of the VNF package or the network service definition accessed from the blockchain matches the second digital signature of the VNF package or the network service definition provided to the entity by the system,

wherein the entity verifies the integrity of the VNF package prior to using the VNF package to build a network service or verifies the integrity of the network service definition prior to using the network service definition to create a running network service.

13. A system, comprising:

memory storing computer instructions; and

one or more computer processors that execute the computer instructions to perform a method comprising:

identifying a virtual network function (VNF) package or a network service definition for performing integrity verification;

computing a digital signature of the VNF package or the network service definition that allows verification of an integrity of the VNF package or the network service definition;

storing the digital signature in a blockchain; and

providing the VNF package or the network service definition to an entity that:

accesses the digital signature of the VNF package or the network service definition from the blockchain,

determines a second digital signature of the VNF package or the network service definition provided to the entity by the system,

compares the digital signature of the VNF package or the network service definition accessed from the blockchain with the second digital signature of the VNF package or the network service definition provided to the entity by the system, and

verifies the integrity of the VNF package or the network service definition when a result of the comparison indicates that the digital signature of the VNF package or the network service definition accessed from the blockchain matches the second digital signature of the VNF package or the network service definition provided to the entity by the system,

wherein the entity verifies the integrity of the VNF package prior to using the VNF package to build a network service or verifies the integrity of the network service definition prior to using the network service definition to create a running network service.

14. The method of claim 1 , wherein the digital signature is stored in the blockchain once accredited.