System and method of securing allocation of network functions for session slices
Aspects of the subject disclosure may include, for example, a device including a processing system including a processor; and a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations of receiving a query for 5G Session Management Functions (SMFs) to handle a connection request, wherein the query includes a slice ID and data network name; determining a list of SMFs that each have a blockchain ID immutably recorded on a blockchain, wherein the blockchain ID is authorized to provide service to the slice ID; and sending, responsive to the query, the list of SMFs. Other embodiments are disclosed.
1. A device, comprising:
a processing system including a processor; and
a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations, the operations comprising:
receiving a query for 5G Session Management Functions (SMFs) to handle a connection request, wherein the query includes a slice ID and data network name;
determining a list of SMFs that each have a blockchain ID immutably recorded on a blockchain, wherein the blockchain ID is authorized to provide service to the slice ID; and
sending, responsive to the query, the list of SMFs.
2. The device of claim 1 , wherein the query is received from an Access and Mobility Management Function.
3. The device of claim 1 , wherein the blockchain ID of each of the SMFs is recorded on the blockchain upon instantiation of each of the SMFs.
4. The device of claim 3 , wherein the blockchain provides the blockchain ID of each of the SMFs to each of the SMFs.
5. The device of claim 1 , wherein the operations further comprise registering the blockchain ID of each of the SMFs.
6. The device of claim 5 , wherein the operations further comprise acknowledging the registering of the blockchain ID to each of the SMFs.
7. The device of claim 1 , wherein the operations further comprise associating the blockchain ID with the slice ID.
8. The device of claim 7 , wherein the operations further comprise recording an association of the blockchain ID with the slice ID in a secure storage of the memory.
9. The device of claim 1 , wherein the device provides a virtualized Network Resource Function (NRF).
10. The device of claim 1 , wherein the processing system comprises a plurality of processors operating in a distributed computing environment.
11. A non-transitory, machine-readable medium, comprising executable instructions that, when executed by a processing system including a processor, facilitate performance of operations, the operations comprising:
receiving a query for network functions to handle a connection request, wherein the query includes a slice ID;
determining a network function authorized to provide service for the slice ID based on a blockchain ID for the network function immutably recorded on a blockchain; and
sending, responsive to the query, an identifier for the network function.
12. The non-transitory, machine-readable medium of claim 11 , wherein the identifier is the blockchain ID.
13. The non-transitory, machine-readable medium of claim 11 , wherein the network function provides a Session Management Function, an Access and Mobility Management Function, a User Plane Function, or any combination thereof.
14. The non-transitory, machine-readable medium of claim 11 , wherein the blockchain ID of the network function is immutably recorded on the blockchain upon instantiation of the network function.
15. The non-transitory, machine-readable medium of claim 11 , wherein the operations further comprise associating the blockchain ID with the slice ID.
16. The non-transitory, machine-readable medium of claim 11 , wherein the network function provides an Access and Mobility Management Function.
17. The non-transitory, machine-readable medium of claim 11 , wherein the executable instructions provide a Network Slice Selection Function.
18. The non-transitory, machine-readable medium of claim 11 , wherein the processing system comprises a plurality of processors operating in a distributed computing environment.
19. A method, comprising:
receiving, by a processing system including a processor, a query for network functions to handle a connection request, wherein the query includes a slice ID;
determining, by the processing system, a network function authorized to provide service for the slice ID based on a blockchain ID of the network function, wherein the blockchain ID is immutably recorded on a blockchain; and
sending, by the processor responsive to the query, an identifier for the network function.
20. The method of claim 19 , comprising: associating, by the processing system, the blockchain ID with the slice ID, wherein the slice ID comprises single network slice selection assistance information.