Patent AU-2020204346-B2 (AU)
Title: Multi-access distributed edge security in mobile networks
Inventor: VERMA SACHIN
IPC: H04W12/00
Filed: 2020-03-23
Granted: 2021-09-30
Abstract: INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) 
(19) World Intellectual Property 
(1) Organization11111111111111111111111I1111111111111i1111liiiii 
International Bureau (10) International Publication Number 
(43) International Publication Date W O 2020/198157 Al 
01 October 2020 (01.10.2020) W IPOI PCT 
(51) InternationalPatent Classification: (72) Inventors: VERMA, Sachin; 3000 Tannery Way, Santa 
H04L 29/06 (2006.01) H04W12/06 (2009.01) Clara, CA 95054 (US). BURAKOVSKY, Leonid; 3000 
H04W 76/11 (2018.01) H04W 76/12 (2018.01) Tannery Way, Santa Clara, CA 95054 (US).  
H04W24/08 (2009.01) H04W80/12 (2009.01) (74) Agent: SCHALLOP, Michael, J.; Van Pelt, Yi & James, 
(21) International Application Number: LLP, 10050 N. Foothill Blvd., Suite 200, Cupertino, CA 
PCT/US2020/024281 95014 (US).  
(22) International Filing Date: (81) Designated States (unless otherwise indicated, for every 
23 March 2020 (23.03.2020) kind ofnational protection available): AE, AG, AL, AM, 
AO, AT, AU, AZ, BA, BB, BG, BH, BN, BR, BW, BY, BZ, 
(25)FilingLanguage: English CA, CH, CL, CN, CO, CR, CU, CZ, DE, DJ, DK, DM, DO, 
(26) Publication Language: English DZ, EC, EE, EG, ES, Fl, GB, GD, GE, GH, GM, GT, HN, 
(30)PriorityData: HR, HU, ID, IL, IN, IR, IS, JO, JP, KE, KG, KH, KN, KP, 
(30)/Priorit : 28 March 2019 (28.03.2019) us KR, KW, KZ, LA, LC, LK, LR, LS, LU, LY, MA, MD, ME, 
MG, MK, MN, MW, MX, MY, MZ, NA, NG, NI, NO, NZ, 
(71) Applicant: PALO ALTO NETWORKS, INC. [US/US]; OM, PA, PE, PG, PH, PL, PT, QA, RO, RS, RU, RW, SA, 
3000 Tannery Way, Santa Clara, CA 95054 (US). SC, SD, SE, SG, SK, SL, ST, SV, SY, TH, TJ, TM, TN, TR, 
TT, TZ, UA, UG, US, UZ, VC, VN, WS, ZA, ZM, ZW.  
(54) Title: MULTI-ACCESS DISTRIBUTED EDGE SECURITY INMOBILE NETWORKS 
5G Multi-Access Security 122 Cloud 
Security 
uA 
Security 
Platfo 
102b 5G Core 
Control/ 
110 -- --- Signaling - -/ - --- ----- Functions 
4G RAM N -- 4G RAM\g 118 120 N3 
5G User 5 G User Dt ~/ Data Plane Plne Network 
1085 102a unctions Functions Network 
Security 
Platform 
106 
600 Wifi Access 
Local Data 
0Network , _\ 112 
104 601-6 
Fixed Access 
FIG. 1A 
t (57) Abstract: Techniques for providing multi-access distributed edge security in mobile networks (e.g., service provider networks 
for mobile subscribers, such as for 5G networks) are disclosed. In some embodiments, a system/process/computer program product for 
multi- access distributed edge security in mobile networks in accordance with some embodiments includes monitoring network traffic 
on a service provider network at a security platform to identify a new session, wherein the service provider network includes a 5G 
network or a converged 5G network; extracting subscription and/or equipment identifier information for user traffic associated with 
the new session at the security platform; and determining a security policy to apply at the security platform to the new session based 
on the subscription and/or equipment identifier infonnation.
W O 2020/198 157 A||||||||||||||||||||||||||||||||||||||11||||||||||||||||||||||||||||||I| 
(84) Designated States (unless otherwise indicated, for every 
kind of regional protection available): ARIPO (BW, GH, 
GM, KE, LR, LS, MW, MZ, NA, RW, SD, SL, ST, SZ, TZ, 
UG, ZM, ZW), Eurasian (AM, AZ, BY, KG, KZ, RU, TJ, 
TM), European (AL, AT, BE, BG, CH, CY, CZ, DE, DK, 
EE, ES, Fl, FR, GB, GR, HR, HU, IE, IS, IT, LT, LU, LV, 
MC, MK, MT, NL, NO, PL, PT, RO, RS, SE, SI, SK, SM, 
TR), OAPI (BF, BJ, CF, CG, CI, CM, GA, GN, GQ, GW, 
KM, ML, MR, NE, SN, TD, TG).  
Published: 
- with international search report (Art. 21(3))