Building the Network of Things with Policy Management

Size: px

Start display at page:

Download "Building the Network of Things with Policy Management"

Lawrence Lyons
6 years ago
Views:

1 Building the Network of Things with Policy Management

2 Policy in IoT intro & General value

3 IoT diversity Cellular LPWA serves much more MODULE COST/ PERFORMANCE <$25 10 Mbps <$10 1 Mbps <$5 10s kbps 100 bps LTE CAT-1 (with EC, PSM, edrx) LTE CAT-M1 (with EC, PSM, edrx) EC-GSM + PSM + edrx NB-IOT + EC + PSM + edrx Unlicensed LPWA SMART GRID MANAGEMENT VOICE SERVICES CONNECTED ELEVATORS ENVIRONMENT MONITORING SMART CITY LIGHTING, WASTE MANAGEMENT KIDS/ELDERLY/PET/VIP TRACKING WEARABLES VEHICLE/ASSET TRACKING SMART METERING, SMART BUILDING, HOME AUTOMATION USE CASE DIVERSITY 10 km 10+ years COVERAGE/ BATTERY Ericsson Internal Page 3

4 LTE device cost reduction 3GPP Rel.9 CAT-4 100% Mobile Broadband Support for LTE category 0 devices with half duplex operation Significantly reduced device complexity, functionality and capability, thus cost 3GPP Rel.8 CAT-1 3GPP Rel.12 75% (CAT-0) 3GPP Rel.13 40% CAT-M1 20% CAT-NB 10% 3GPP Rel-13 Narrowband IoT IoT Ericsson Internal Page 4

AGRICULTURE CAPILLARY NETWORKS INDUSTRIAL APPLICATION & CONTROL REMOTE MANUFACTURING,

5 Wide Range of access Requirements Massive IoT Critical IoT SMART BUILDING LOGISTICS, TRACKING AND FLEET MANAGEMENT REMOTE HEALTH CARE TRAFFIC SAFETY & CONTROL SMART METER SMART AGRICULTURE CAPILLARY NETWORKS INDUSTRIAL APPLICATION & CONTROL REMOTE MANUFACTURING, TRAINING, SURGERY ULTRA RELIABLE VERY LOW LATENCY VERY HIGH AVAILABILITY Ericsson Internal Page 5

Policy for IOT Massive IoT (NB-IoT, CAT-M1, EC-GSM) Critical IoT LOGISTICS, TRACKING AND FLEET MANAGEMENT SMART METER REMOTE HEALTH CARE TRAFFIC SAFETY & CONTROL SMART

Location/Time Based Policies NATIONAL SECURITY REMOTE MANUFACTURING, TRAINING, SURGERY QoS Assurance Traffic Priority Handling Quota Control Dynamic Access Control Based on

6 Policy for IOT Massive IoT (NB-IoT, CAT-M1, EC-GSM) Critical IoT LOGISTICS, TRACKING AND FLEET MANAGEMENT SMART METER REMOTE HEALTH CARE TRAFFIC SAFETY & CONTROL SMART AGRICULTURE CAPILLARY NETWORKS SMART CITIES Fair Usage Policies Group-based Quota Control SAPC INDUSTRIAL APPLICATION & CONTROL Access Control DDoS Attack Mitigation Location/Time Based Policies NATIONAL SECURITY REMOTE MANUFACTURING, TRAINING, SURGERY QoS Assurance Traffic Priority Handling Quota Control Dynamic Access Control Based on access: 2G/3G, LTE, WiFi Time of the Day, Location Device Type Great Delivery Service Prioritation QoS Assurance Data Monetization Data Consumption Control Ericsson Internal Page 6

7 Access Control Fraud detection DDoS mitigation Quota Control IoT + MBB Data Plans Location and Time Policy Control for IoT Priority Handling Dynamic QoS assurance Dynamic Slicing Event Exposure Usage Statistics /Business Reports Dynamic Slice Optimization

8 Priority Handling Dynamic QoS assurance Policy Control for IoT Dynamic Slicing

Priority Handling IOT QoSADMISSION CONTROL FOR

Handling Priority (THP) Legacy QoS feature Traffic

OPTIMIZATION Dynamic selection of earp and Radio

9 Priority Handling IOT QoSADMISSION CONTROL FOR DEVICES DEPENDING ON DYNAMIC CONDITIONS Traffic Handling Priority (THP) Legacy QoS feature Traffic Prioritization ACCESS PRIORITIZATION CAPACITY OPTIMIZATION Dynamic selection of earp and Radio Priority Bits Matrix Allows 15 levels of priority and 3 bits of preemption susceptibility Prioritization at Random Access Preemption at Congestion Ericsson Internal Page 9

10 Dynamic network slicing. value Network Slice Selection based on Dynamic Conditions P4S QUALITY OF EXPERIENCE Maximized Subscriber Satisfaction. Slice is selected based on the subscriber, service requirements and datacenter status NETWORK EFFICIENCY Optimized network use. The network is used in an efficient way allowing dynamic regulation of the slice load and maximizing the slice efficiency 5G Ericsson Internal Page 10

11 Dynamic Network slicing Data Center selection based on QoE Cameras, Drones Analytics CN Slice Smart phones P4S CN Slice Analytics Dynamic selection of CN slice based on Data Center status, service needs and subscriber segmentation Ericsson Internal Page 11

12 Quota Control Policy Control for IoT IoT + MBB Data Plans Location and Time

13 Quota Management Beyond Personal data-plans UPGRADE! UPGRADE! Data Bucket Shared Data Bucket Shared Data Bucket Ericsson Internal Page 13

14 Quota control Family & Things data-plans Extensible Data Plan for IoT COMMON BUCKET for Things + Family One SINGLE BILL Allow to define INDIVIDUAL LIMITS Shared Data Bucket Allow of TOP-UPS FOR HIGHER BW (e.g. gaming) Ericsson Internal Page 14

15 Quota control IoT data-plans Specific Data Plan for IoT COMMON BUCKET for connected Things Cost control of IoT devices needs Shared Data Bucket Allow to define INDIVIDUAL LIMITS per device or group of devices Allow of TOP-UPS FOR HIGHER BW (e.g. video surveillance) Ericsson Internal Page 15

16 Dynamic QoS Assurance Dynamic assignation of Quality of service Critical devices assigned to high priority bearer High priority bearer assures max QoS Low throughput devices assigned to low priority bearer EMERGENCY TRAFFIC NORMAL TRAFFIC HIGH Priority Bearer MID Priority Bearer LOW Priority Bearer Ericsson Internal Page 16

17 Time based control Limit the access to the network according with time restrictions Daily LOGISTIC TRACKING AND MANAGEMENT 7:00-20:00 h 5 Days/Week 24 hours INDUSTRIAL APPLICATIONS 6 Days/Week 6:00-00:00 h FLEET MANAGEMENT Ericsson Internal Page 17

18 Location based control Model the access to the network according with current location Local City Home Country European Union World Home zone Rest of the City Concrete Radio Station Ericsson Internal Page 18

19 Access Control Fraud detection DDoS mitigation Policy Control for IoT

Security in IoT ecosystem Challenges in the Ecosystem OCT 21 2016 OCT 21 2021 16 BILLION

possible by unsecured internetconnected devices, the vast Internet of Things Source: http://www.

20 Security in IoT ecosystem Challenges in the Ecosystem OCT OCT BILLION CONNECTED IoT DEVICES What is new is the massive scale of the DDoS attacks that are made possible by unsecured internetconnected devices, the vast Internet of Things Source: Ericsson Internal Page 20

21 Security in IoT ecosystem. Challenges for Telco Operators Increased network vulnerability > NEED to secure operator s networks Number of IoT devices will grow exponentially The ecosystem consist of a big number of IoT devices makers IoT devices are manufactured for mass market IoT devices typically transmit low amount of data but with malicious software they can generate massive amount bogus traffic Difficult to control that all of them comply with security measures Need to protect operator s network beyond what IoT devices could do to secure service assurance Ericsson Internal Page 21

22 Security in IoT ecosystem. Policy Control Value Network Protection Service Continuity Preventive Quota handling for IoT devices Revenue Assurance If quotas are consumed too fast, DoS attack is detected Block access to the network of that device/group of devices Ericsson Internal Page 22

23 Security in IoT ecosystem. Policy Control Value Network Protection Service Continuity Revenue Assurance SAPC Online Music Service Social Network Apps Ericsson Internal Page 23

24 Security in IoT ecosystem. Examples Smart-Cities Smartcities include a big number of IoT devices of different kinds (camaras, meters, ) Local government will contract the connection service to a cellular operator The selected cellular operator has the responsibility to secure its network to avoid denial of service Denial of Service would imply the malfunctioning of regular local services If the amount of data received from any IoT device is much bigger than expected that device is automatically disconnected and an alarm generated Ericsson Internal Page 24

25 Security in IoT ecosystem. Examples Utilities Sector Utilities sector includes a big number of IoT devices of different kinds (camaras, meters, ) Utilities companies will contract the connection service to a cellular operator The selected cellular operator has the responsibility to secure its network to avoid denial of service Denial of service would mean the lack of means to chargein the right way (revenue leakage) to the end customers or even security issues due to lack of misoperation detection If the amount of data received from any IoT device is much bigger than expected that device is automatically disconnected and an alarm generated Ericsson Internal Page 25

26 Policy Control for IoT Event Exposure Usage Statistics /Business Reports Dynamic Slice Optimization

UDM Analytics for iot Unlock the value of data Subscription and policy data are key operator assets How UDM can unlock the value of those assets?

27 UDM Analytics for iot Unlock the value of data Subscription and policy data are key operator assets How UDM can unlock the value of those assets? Policy Analytics Suscription Data IoT Data analytics Operational efficiency and safe data exposure to verticals Dynamic Optimization of Network Slices Adapt network slice to the traffic changes for optimal efficiency Event exposure Safe exposure of real time policy management events Ericsson Building Internal the Network of things The Page roles 27of Policy and Data Management in IoT - Commercial in Confidence 2/ FGB Uen Rev A

28 IoT DATA Analytics Use cases for Operational efficiency and Verticals Operational efficiency Verticals Cross DB consistency Automated check of CUDB subs data and BSS data to detect inconsistencies Reduce revenue leakage Automatically detect data inconsistencies in IoT devices Roaming Analytics Track where the containers are Track where they have been and if they deviated from the planned route IMEI security Detect fake IMEI in IoT devices Secure that IoT devices are not incorrectly blacklisted Syncronize with EIR-FE data to take actions (grey listing) Ericsson CUDB KPI reporting Facilitate devices monitoring with configurable KPI measurements Monitor status, location and activation of new services Data consumption from different device types Ericsson Building Internal the Network of things The Page roles 28of Policy and Data Management in IoT - Commercial in Confidence 2/ FGB Uen Rev A

Dynamic slice optimization Subscription data Policy Analytics Dynamically adapt QoS and Quota characteristics of single slice to the traffic changes Slice optimization Network slice Optimized usage

29 Dynamic slice optimization Subscription data Policy Analytics Dynamically adapt QoS and Quota characteristics of single slice to the traffic changes Slice optimization Network slice Optimized usage of connectivity resources Ericsson Building Internal the Network of things The Page roles 29of Policy and Data Management in IoT - Commercial in Confidence 2/ FGB Uen Rev A

30 Dynamic slice optimization Node view Group category with different sub-groups of subscriptions Network Slice optimization (QoS, quota) Traffic recognition per group SMS to device owner SOAP notif to internal system Cloud Orchestration Layer CUDB SAPC Accumulators retrieval Accumulators storage UPG REST provisioning: trigger Quota Management per device/group QoS handling (QCI, ARP) High Occupancy indication Predictive embedded analytics about best QoS/Volume to optimize slice to the traffic pattern Slice Configuration Ericsson Internal Page 30

31 Policy in IoT VNS part of vepc offering

Ericsson s Virtual EPC Fast time to customer with virtual network services Internet Virtu of Things al Ente rpris e Distributed MBB MVNO MB Virtual Enterprise B vep C MBB vepc + new network services

32 Ericsson s Virtual EPC Fast time to customer with virtual network services Internet Virtu of Things al Ente rpris e Distributed MBB MVNO MB Virtual Enterprise B vep C MBB vepc + new network services Complete virtual EPC with extensive cloud support VNF Software, Validated Solutions, Certified Solutions vsapc vsgsn -MME Telecom grade KPIs and characteristics vsasn vcg-nat vepg vwmg Global services organization vsbg vmsp Providing flexibility & innovative network services with fast time to revenue Ericsson Internal Page 32

33 INTERNET OF THINGS VNS Huge number of devices Wide variety of traffic models Robust connectivity ARPU <$5 per month Dedicated infrastructure vepg vsgsn- MME vsapc vsasn Ericsson Internal Page 33

34 vsapc as part of IoT VNS within vepc Base and Value Packages Internet of Things vepg vsapc vsgsn-mme vsasn IoT Extended Analytics IoT Analytics Advanced IoT High Speed High Availability and Pooling Mobility and Roaming IoT Full EPC overlay Base Package Internet of Things S-KPIs for TCP and EBM event streaming Traffic analysis for detailed analytics A set of advanced functionality including VNF detailed event reporting and advanced policy control For high bandwidth devices Provides Inter POD failovers and load-sharing for 24x7 availability For moving things For operators requiring full EPC overlay dedicated to IoT business Enables cost efficient and scalable deployment for low bandwidth stationary devices Ericsson Internal Page 34

35 vsapc Added value in IoT VNS IoT Extended Analytics EBM event streaming IoT Analytics Traffic analysis for detailed analytics SAPC Advanced IoT High Speed High Availability and Pooling Mobility and Roaming IoT Full EPC overlay Base Package Advanced policy control including dedicated bearers E.g Stadium, Smart Cities Dynamic QoS policies based on device needs E.g. Video Surveillance, Connected cars High availability in policy node (GeoRed) E.g. Critical IoT Generic Policy Control + specific roaming policies. E.g. Connected cars, Fleet management Ericsson Internal Page 35

36 Policy in IoT why ericsson?

37 Key selling points Full IoT Policy Solution for Massive and Critical IoT available now Deployable as stand-alone or Integrated in vepc VNS IoT Policies for Slice Selection Ericsson Internal Page 37

How to enable change-makers in the Networked Society. Telefonaktiebolaget LM Ericsson 2015 Ericsson June 2015

5G How to enable change-makers in the Networked Society Telefonaktiebolaget LM Ericsson 2015 Ericsson June 2015 Building 5g One Network Multiple Industries Platform for 50 Billion Open Innovation 5G Telefonaktiebolaget