US 12,425,388 B2
Enhanced hop by hop security
Nagendra Bykampadi, Bangalore (IN); Bruno Landais, Pleumeur-Bodou (FR); Silke Holtmanns, Klaukkala (FI); and Jani Petteri Ekman, Kangasala (FI)
Assigned to NOKIA TECHNOLOGIES OY, Espoo (FI)
Filed by Nokia Technologies Oy, Espoo (FI)
Filed on Jan. 27, 2021, as Appl. No. 17/159,346.
Claims priority of application No. 202041013502 (IN), filed on Mar. 27, 2020.
Prior Publication US 2021/0306326 A1, Sep. 30, 2021
Int. Cl. H04L 9/32 (2006.01); H04L 9/30 (2006.01); H04L 9/40 (2022.01); H04L 12/66 (2006.01); H04L 67/56 (2022.01); H04W 12/10 (2021.01); H04W 92/24 (2009.01)
CPC H04L 63/0823 (2013.01) [H04L 9/30 (2013.01); H04L 67/56 (2022.05)] 19 Claims
OG exemplary drawing
 
1. A first apparatus, configured to implement a service communication proxy connected to a first network function, the first apparatus comprising:
at least one processor; and
at least one memory including computer program codes;
the at least one memory and the computer program codes are configured to, with the at least one processor, cause the first apparatus to:
receive, from a second apparatus associated with the first network function, a message directed from the first network function to a second network function, the message comprising a first signature and network function information, the network function information at least comprising identification information of the first network function;
in accordance with a successful validation of the first signature, update the message with a second signature specific to the service communication proxy implemented by the first apparatus; and
transmit the updated message to a third apparatus associated with the second network function, the updated message comprising at least the second signature and the network function information,
wherein the network function information further comprises certificate information of the first network function, the second apparatus is configured to implement the first network function, and the first apparatus is caused to:
generate the second signature at least based on the first signature and a private key of the service communication proxy; and
insert the second signature into the message.