Cloud-based 5G security network architectures with workload isolation
Cloud-based 5G security, implemented in a Multi-Access Edge Compute (MEC) system, includes steps of receiving a request for compute resources from User Equipment (UE); validating a user of the UE for the compute resources; responsive to the user being authorized, creating a connection between the UE and a destination of the compute resources; responsive to the user being unauthorized, rendering the compute resources as hidden from the UE. The steps can include utilizing a cloud-based system for control and signaling the connection.
1. A method of cloud-based 5G security, implemented in a Multi-Access Edge Compute (MEC) system, comprising:
receiving a request for compute resources from User Equipment (UE);
validating in edge transport defining a virtual switch in the MEC a user of the UE for the compute resources;
responsive to the user being authorized, creating a connection between the UE and a destination of the compute resources;
responsive to the user being unauthorized, rendering the compute resources as hidden from the UE.
2. The method of claim 1 , further comprising utilizing a cloud-based system configured to implement a zero-trust layer for edge-hosted workload control and signaling the connection.
3. The method of claim 2 , wherein the cloud-based system is connected to the MEC via an encrypted tunnel adapted to be non-reliant on underlying mobile network transports.
4. The method of claim 1 , wherein the compute resources are hosted locally at the MEC for lower latency applications.
5. The method of claim 1 , further comprising performing the validating for each substantiation of the connection.
6. The method of claim 1 , further comprising tearing down the connection at session completion.
7. A Multi-Access Edge Compute (MEC) system comprising:
one or more servers each including at least one processor and memory storing instructions that, when executed, cause the at least one processor to receive a request for compute resources from User Equipment (UE);
validate in edge transport defining a virtual switch in the MEC a user of the UE for the compute resources;
responsive to the user being authorized, create a connection between the UE and a destination of the compute resources;
responsive to the user being unauthorized, render the compute resources as hidden from the UE.
8. The MEC system of claim 7 , wherein the instructions, when executed, cause the at least one processor to
utilize a cloud-based system for control and signaling the connection.
9. The MEC system of claim 8 , wherein the cloud-based system is connected to the MEC via an encrypted tunnel.
10. The MEC system of claim 7 , wherein the compute resources are hosted locally at the MEC for lower latency applications.
11. The MEC system of claim 7 , wherein the instructions, when executed, cause the at least one processor to
perform the validate for each substantiation of the connection.
12. The MEC system of claim 7 , wherein the instructions, when executed, cause the at least one processor to
tear down the connection at session completion.
13. A non-transitory computer-readable storage medium having computer-readable code stored thereon for programming a Multi-Access Edge Compute (MEC) system to perform steps of:
receiving a request for compute resources from User Equipment (UE);
validating in edge transport defining a virtual switch in the MEC a user of the UE for the compute resources;
responsive to the user being authorized, creating a connection between the UE and a destination of the compute resources;
responsive to the user being unauthorized, rendering the compute resources as hidden from the UE.
14. The non-transitory computer-readable storage medium of claim 13 , wherein the steps further include
utilizing a cloud-based system for control and signaling the connection.
15. The non-transitory computer-readable storage medium of claim 14 , wherein the cloud-based system is connected to the MEC via an encrypted tunnel.
16. The non-transitory computer-readable storage medium of claim 13 , wherein the compute resources are hosted locally at the MEC for lower latency applications.
17. The non-transitory computer-readable storage medium of claim 13 , wherein the steps further include
performing the validating for each substantiation of the connection.
18. The method of claim 1 , further comprising directing the traffic traversing the edge transport with an intelligent steering solution defining at least one key outcome.