ONF Connect 2019

In this presentation we’ll describe the usage of Intel® Software Guard Extensions (Intel® SGX) to secure various components and features of OMEC while operating in a cloud environment, closing a critical security gap when migrating to open platforms in the cloud. More specifically, we’ll describe a novel system architecture that allows operators to scale out billing/charging records at network speed by using distributed Intel SGX platforms to meet necessary security and performance requirements. Securing charging/billing records facilitate operators’ internal and external auditing process with regulatory authorities.  Additionally, we’ll also show how we can protect the data plane path using Intel SGX thus providing a secure communication path through the platform operating in the cloud.  OMEC has been released in the Open Networking Foundation and undergoes field trials with operators testing and validating Intel SGX in an operational deployment.