TECHNIQUES FOR KEY EXCHANGE TO ESTABLISH SECURE CONNECTION IN NETWORK FUNCTION VIRTUALIZATION ENVIRONMENT

摘要

An apparatus (800) for a key exchange to establish a secure connection in a network function virtualization environment. The apparatus (800) exchanges an encrypted session key (410) between virtual network functions (VNF-A, VNF-B, VNF-C) executed by respective virtual machines (160-1 to 160-N) to establish the secure connection over a network connection, and uses a hardware security module (150) coupled with a processor (110) that supports at least one of the respective virtual machines (160-1 to 160-N). The hardware security module (150) facilitates encryption and decryption of the exchanged encrypted session key (410) via use of a virtual network function fingerprint (210, 220) for at least one of the virtual network functions(VNF-A, VNF-B, VNF-C).