Decentralized Certificate Management for Network Function Virtualisation (NFV) Implementation in Telecommunication Networks
The certificate management complexity and cost increase when PKI technology is leveraged into Network Function Virtualisation (NFV), a significant enabling technology for 5G networks. The expected security of PKI cannot be met due to the unavailability of the certificate revocation inquiry in the te...
Gespeichert in:
| Veröffentlicht in: | Wireless communications and mobile computing 2021, Vol.2021 (1) |
|---|---|
| Hauptverfasser: | , , , , , |
| Format: | Artikel |
| Sprache: | eng |
| Schlagworte: | |
| Online-Zugang: | Volltext |
| Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
| container_end_page | |
|---|---|
| container_issue | 1 |
| container_start_page | |
| container_title | Wireless communications and mobile computing |
| container_volume | 2021 |
| creator | Yan, Junzhi Li, Na Yang, Bo Li, Min Su, Li He, Shen |
| description | The certificate management complexity and cost increase when PKI technology is leveraged into Network Function Virtualisation (NFV), a significant enabling technology for 5G networks. The expected security of PKI cannot be met due to the unavailability of the certificate revocation inquiry in the telecommunication operator’s core network. This paper analyses the issues and challenges during the NFV implementation and proposes a blockchain-based decentralized NFV certificate management mechanism. During instantiation, the Virtual Network Functions (VNF) instance generates certificates according to the certificate profile provided in the VNF package. The certificate management unit is responsible for the certificate enrolment, renewal, and revocation. The certificates submitted to the decentralized certificate management system by the instance will be recorded into the ledger after validation and consensus. The experiment and analysis show the transaction throughput, and the transaction delay is noncritical in practice, which could be fulfilled by the proposed mechanism. The certificate inquiry performance is critical, which can be facilitated by the decentralized deployment of inquiry nodes. |
| doi_str_mv | 10.1155/2021/6985492 |
| format | Article |
| fullrecord | <record><control><sourceid>proquest_cross</sourceid><recordid>TN_cdi_proquest_journals_2589581511</recordid><sourceformat>XML</sourceformat><sourcesystem>PC</sourcesystem><sourcerecordid>2589581511</sourcerecordid><originalsourceid>FETCH-LOGICAL-c294t-e1fdebe9ea03ef697799e6599118620a033c9e6ae45697ee95cb6ed6ba42050a3</originalsourceid><addsrcrecordid>eNp9kDFPwzAQhS0EEqWw8QMssYAg1E5iJx5RoVCplKV0jdzkAi6JU2xHFfDncZqKkenu3n33TnoInVNySyljo5CEdMRFymIRHqABZREJUp4kh389F8foxNo1ISTy8AD93EMO2hlZqW8o8BiMU6XKpQP8LLV8g9pvcdkYPAe3bcwHnrQ6d6rReKmMa_2dlbvxcj5ZXuFpval2N72oNF5ABXlT163ubDtx72RP0VEpKwtn-zpEr5OHxfgpmL08Tsd3syAPRewCoGUBKxAgSQQlF0kiBHAmBKUpD4lXo9wLEmLmlwCC5SsOBV_JOCSMyGiILnrfjWk-W7AuWzet0f5lFrJUsJQySj1101O5aaw1UGYbo2ppvjJKsi7erIs328fr8esef1e6kFv1P_0L35V8JQ</addsrcrecordid><sourcetype>Aggregation Database</sourcetype><iscdi>true</iscdi><recordtype>article</recordtype><pqid>2589581511</pqid></control><display><type>article</type><title>Decentralized Certificate Management for Network Function Virtualisation (NFV) Implementation in Telecommunication Networks</title><source>Wiley Online Library Open Access</source><source>EZB-FREE-00999 freely available EZB journals</source><source>Alma/SFX Local Collection</source><creator>Yan, Junzhi ; Li, Na ; Yang, Bo ; Li, Min ; Su, Li ; He, Shen</creator><contributor>Liu, Ximeng ; Ximeng Liu</contributor><creatorcontrib>Yan, Junzhi ; Li, Na ; Yang, Bo ; Li, Min ; Su, Li ; He, Shen ; Liu, Ximeng ; Ximeng Liu</creatorcontrib><description>The certificate management complexity and cost increase when PKI technology is leveraged into Network Function Virtualisation (NFV), a significant enabling technology for 5G networks. The expected security of PKI cannot be met due to the unavailability of the certificate revocation inquiry in the telecommunication operator’s core network. This paper analyses the issues and challenges during the NFV implementation and proposes a blockchain-based decentralized NFV certificate management mechanism. During instantiation, the Virtual Network Functions (VNF) instance generates certificates according to the certificate profile provided in the VNF package. The certificate management unit is responsible for the certificate enrolment, renewal, and revocation. The certificates submitted to the decentralized certificate management system by the instance will be recorded into the ledger after validation and consensus. The experiment and analysis show the transaction throughput, and the transaction delay is noncritical in practice, which could be fulfilled by the proposed mechanism. The certificate inquiry performance is critical, which can be facilitated by the decentralized deployment of inquiry nodes.</description><identifier>ISSN: 1530-8669</identifier><identifier>EISSN: 1530-8677</identifier><identifier>DOI: 10.1155/2021/6985492</identifier><language>eng</language><publisher>Oxford: Hindawi</publisher><subject>Blockchain ; Certificates ; Certification ; Cryptography ; Operation support systems ; Operators (mathematics) ; Trust ; Virtual networks</subject><ispartof>Wireless communications and mobile computing, 2021, Vol.2021 (1)</ispartof><rights>Copyright © 2021 Junzhi Yan et al.</rights><rights>Copyright © 2021 Junzhi Yan et al. This work is licensed under http://creativecommons.org/licenses/by/4.0/ (the “License”). Notwithstanding the ProQuest Terms and Conditions, you may use this content in accordance with the terms of the License.</rights><lds50>peer_reviewed</lds50><oa>free_for_read</oa><woscitedreferencessubscribed>false</woscitedreferencessubscribed><cites>FETCH-LOGICAL-c294t-e1fdebe9ea03ef697799e6599118620a033c9e6ae45697ee95cb6ed6ba42050a3</cites><orcidid>0000-0002-7676-0116</orcidid></display><links><openurl>$$Topenurl_article</openurl><openurlfulltext>$$Topenurlfull_article</openurlfulltext><thumbnail>$$Tsyndetics_thumb_exl</thumbnail><link.rule.ids>314,776,780,4010,27900,27901,27902</link.rule.ids></links><search><contributor>Liu, Ximeng</contributor><contributor>Ximeng Liu</contributor><creatorcontrib>Yan, Junzhi</creatorcontrib><creatorcontrib>Li, Na</creatorcontrib><creatorcontrib>Yang, Bo</creatorcontrib><creatorcontrib>Li, Min</creatorcontrib><creatorcontrib>Su, Li</creatorcontrib><creatorcontrib>He, Shen</creatorcontrib><title>Decentralized Certificate Management for Network Function Virtualisation (NFV) Implementation in Telecommunication Networks</title><title>Wireless communications and mobile computing</title><description>The certificate management complexity and cost increase when PKI technology is leveraged into Network Function Virtualisation (NFV), a significant enabling technology for 5G networks. The expected security of PKI cannot be met due to the unavailability of the certificate revocation inquiry in the telecommunication operator’s core network. This paper analyses the issues and challenges during the NFV implementation and proposes a blockchain-based decentralized NFV certificate management mechanism. During instantiation, the Virtual Network Functions (VNF) instance generates certificates according to the certificate profile provided in the VNF package. The certificate management unit is responsible for the certificate enrolment, renewal, and revocation. The certificates submitted to the decentralized certificate management system by the instance will be recorded into the ledger after validation and consensus. The experiment and analysis show the transaction throughput, and the transaction delay is noncritical in practice, which could be fulfilled by the proposed mechanism. The certificate inquiry performance is critical, which can be facilitated by the decentralized deployment of inquiry nodes.</description><subject>Blockchain</subject><subject>Certificates</subject><subject>Certification</subject><subject>Cryptography</subject><subject>Operation support systems</subject><subject>Operators (mathematics)</subject><subject>Trust</subject><subject>Virtual networks</subject><issn>1530-8669</issn><issn>1530-8677</issn><fulltext>true</fulltext><rsrctype>article</rsrctype><creationdate>2021</creationdate><recordtype>article</recordtype><sourceid>RHX</sourceid><sourceid>BENPR</sourceid><recordid>eNp9kDFPwzAQhS0EEqWw8QMssYAg1E5iJx5RoVCplKV0jdzkAi6JU2xHFfDncZqKkenu3n33TnoInVNySyljo5CEdMRFymIRHqABZREJUp4kh389F8foxNo1ISTy8AD93EMO2hlZqW8o8BiMU6XKpQP8LLV8g9pvcdkYPAe3bcwHnrQ6d6rReKmMa_2dlbvxcj5ZXuFpval2N72oNF5ABXlT163ubDtx72RP0VEpKwtn-zpEr5OHxfgpmL08Tsd3syAPRewCoGUBKxAgSQQlF0kiBHAmBKUpD4lXo9wLEmLmlwCC5SsOBV_JOCSMyGiILnrfjWk-W7AuWzet0f5lFrJUsJQySj1101O5aaw1UGYbo2ppvjJKsi7erIs328fr8esef1e6kFv1P_0L35V8JQ</recordid><startdate>2021</startdate><enddate>2021</enddate><creator>Yan, Junzhi</creator><creator>Li, Na</creator><creator>Yang, Bo</creator><creator>Li, Min</creator><creator>Su, Li</creator><creator>He, Shen</creator><general>Hindawi</general><general>Hindawi Limited</general><scope>RHU</scope><scope>RHW</scope><scope>RHX</scope><scope>AAYXX</scope><scope>CITATION</scope><scope>7SC</scope><scope>7SP</scope><scope>7XB</scope><scope>8FD</scope><scope>8FE</scope><scope>8FG</scope><scope>ABUWG</scope><scope>AFKRA</scope><scope>ARAPS</scope><scope>AZQEC</scope><scope>BENPR</scope><scope>BGLVJ</scope><scope>CCPQU</scope><scope>DWQXO</scope><scope>GNUQQ</scope><scope>HCIFZ</scope><scope>JQ2</scope><scope>K7-</scope><scope>L7M</scope><scope>L~C</scope><scope>L~D</scope><scope>M0N</scope><scope>P5Z</scope><scope>P62</scope><scope>PIMPY</scope><scope>PQEST</scope><scope>PQQKQ</scope><scope>PQUKI</scope><scope>PRINS</scope><scope>Q9U</scope><orcidid>https://orcid.org/0000-0002-7676-0116</orcidid></search><sort><creationdate>2021</creationdate><title>Decentralized Certificate Management for Network Function Virtualisation (NFV) Implementation in Telecommunication Networks</title><author>Yan, Junzhi ; Li, Na ; Yang, Bo ; Li, Min ; Su, Li ; He, Shen</author></sort><facets><frbrtype>5</frbrtype><frbrgroupid>cdi_FETCH-LOGICAL-c294t-e1fdebe9ea03ef697799e6599118620a033c9e6ae45697ee95cb6ed6ba42050a3</frbrgroupid><rsrctype>articles</rsrctype><prefilter>articles</prefilter><language>eng</language><creationdate>2021</creationdate><topic>Blockchain</topic><topic>Certificates</topic><topic>Certification</topic><topic>Cryptography</topic><topic>Operation support systems</topic><topic>Operators (mathematics)</topic><topic>Trust</topic><topic>Virtual networks</topic><toplevel>peer_reviewed</toplevel><toplevel>online_resources</toplevel><creatorcontrib>Yan, Junzhi</creatorcontrib><creatorcontrib>Li, Na</creatorcontrib><creatorcontrib>Yang, Bo</creatorcontrib><creatorcontrib>Li, Min</creatorcontrib><creatorcontrib>Su, Li</creatorcontrib><creatorcontrib>He, Shen</creatorcontrib><collection>Hindawi Publishing Complete</collection><collection>Hindawi Publishing Subscription Journals</collection><collection>Hindawi Publishing Open Access</collection><collection>CrossRef</collection><collection>Computer and Information Systems Abstracts</collection><collection>Electronics & Communications Abstracts</collection><collection>ProQuest Central (purchase pre-March 2016)</collection><collection>Technology Research Database</collection><collection>ProQuest SciTech Collection</collection><collection>ProQuest Technology Collection</collection><collection>ProQuest Central (Alumni Edition)</collection><collection>ProQuest Central UK/Ireland</collection><collection>Advanced Technologies & Aerospace Collection</collection><collection>ProQuest Central Essentials</collection><collection>ProQuest Central</collection><collection>Technology Collection</collection><collection>ProQuest One Community College</collection><collection>ProQuest Central Korea</collection><collection>ProQuest Central Student</collection><collection>SciTech Premium Collection</collection><collection>ProQuest Computer Science Collection</collection><collection>Computer Science Database</collection><collection>Advanced Technologies Database with Aerospace</collection><collection>Computer and Information Systems Abstracts Academic</collection><collection>Computer and Information Systems Abstracts Professional</collection><collection>Computing Database</collection><collection>Advanced Technologies & Aerospace Database</collection><collection>ProQuest Advanced Technologies & Aerospace Collection</collection><collection>Publicly Available Content Database</collection><collection>ProQuest One Academic Eastern Edition (DO NOT USE)</collection><collection>ProQuest One Academic</collection><collection>ProQuest One Academic UKI Edition</collection><collection>ProQuest Central China</collection><collection>ProQuest Central Basic</collection><jtitle>Wireless communications and mobile computing</jtitle></facets><delivery><delcategory>Remote Search Resource</delcategory><fulltext>fulltext</fulltext></delivery><addata><au>Yan, Junzhi</au><au>Li, Na</au><au>Yang, Bo</au><au>Li, Min</au><au>Su, Li</au><au>He, Shen</au><au>Liu, Ximeng</au><au>Ximeng Liu</au><format>journal</format><genre>article</genre><ristype>JOUR</ristype><atitle>Decentralized Certificate Management for Network Function Virtualisation (NFV) Implementation in Telecommunication Networks</atitle><jtitle>Wireless communications and mobile computing</jtitle><date>2021</date><risdate>2021</risdate><volume>2021</volume><issue>1</issue><issn>1530-8669</issn><eissn>1530-8677</eissn><abstract>The certificate management complexity and cost increase when PKI technology is leveraged into Network Function Virtualisation (NFV), a significant enabling technology for 5G networks. The expected security of PKI cannot be met due to the unavailability of the certificate revocation inquiry in the telecommunication operator’s core network. This paper analyses the issues and challenges during the NFV implementation and proposes a blockchain-based decentralized NFV certificate management mechanism. During instantiation, the Virtual Network Functions (VNF) instance generates certificates according to the certificate profile provided in the VNF package. The certificate management unit is responsible for the certificate enrolment, renewal, and revocation. The certificates submitted to the decentralized certificate management system by the instance will be recorded into the ledger after validation and consensus. The experiment and analysis show the transaction throughput, and the transaction delay is noncritical in practice, which could be fulfilled by the proposed mechanism. The certificate inquiry performance is critical, which can be facilitated by the decentralized deployment of inquiry nodes.</abstract><cop>Oxford</cop><pub>Hindawi</pub><doi>10.1155/2021/6985492</doi><orcidid>https://orcid.org/0000-0002-7676-0116</orcidid><oa>free_for_read</oa></addata></record> |
| fulltext | fulltext |
| identifier | ISSN: 1530-8669 |
| ispartof | Wireless communications and mobile computing, 2021, Vol.2021 (1) |
| issn | 1530-8669 1530-8677 |
| language | eng |
| recordid | cdi_proquest_journals_2589581511 |
| source | Wiley Online Library Open Access; EZB-FREE-00999 freely available EZB journals; Alma/SFX Local Collection |
| subjects | Blockchain Certificates Certification Cryptography Operation support systems Operators (mathematics) Trust Virtual networks |
| title | Decentralized Certificate Management for Network Function Virtualisation (NFV) Implementation in Telecommunication Networks |
| url | https://sfx.bib-bvb.de/sfx_tum?ctx_ver=Z39.88-2004&ctx_enc=info:ofi/enc:UTF-8&ctx_tim=2025-01-30T03%3A58%3A50IST&url_ver=Z39.88-2004&url_ctx_fmt=infofi/fmt:kev:mtx:ctx&rfr_id=info:sid/primo.exlibrisgroup.com:primo3-Article-proquest_cross&rft_val_fmt=info:ofi/fmt:kev:mtx:journal&rft.genre=article&rft.atitle=Decentralized%20Certificate%20Management%20for%20Network%20Function%20Virtualisation%20(NFV)%20Implementation%20in%20Telecommunication%20Networks&rft.jtitle=Wireless%20communications%20and%20mobile%20computing&rft.au=Yan,%20Junzhi&rft.date=2021&rft.volume=2021&rft.issue=1&rft.issn=1530-8669&rft.eissn=1530-8677&rft_id=info:doi/10.1155/2021/6985492&rft_dat=%3Cproquest_cross%3E2589581511%3C/proquest_cross%3E%3Curl%3E%3C/url%3E&disable_directlink=true&sfx.directlink=off&sfx.report_link=0&rft_id=info:oai/&rft_pqid=2589581511&rft_id=info:pmid/&rfr_iscdi=true |