Authorizing Access to Edge Resources at Wire Speed using 5G Device Authentication
Luca Giacometti, Francesco Battagin, Giacomo Verticale · 2024
We present a protocol for carrying device authentication information in packets breaking out of the 5 G network and entering the computing resources of a Multiaccess Edge Computing (MEC) site. The authentication information is then used in a network function, called Customer Edge Switch (CES), inserted in front of the ingress into the computing resources, which authorizes traffic flows originated in the mobile network to access computing resources on a per-user and per-service basis according to the principles of zero-trust security.We evaluate the performance of our solution in an emulation environment that includes the 5 G domain, a prototype implementation of the CES using the P4 language, and a Function-as-a-Service computing environment. Results show that the processing delay in the CES is small. We also provide a mathematical model for computing the maximum number of devices that can be managed at wire speed.1