Building network of things

Transcription

1 Building network of things the role of policy and subscriber data management in iot Feb 2018

2 content Introduction UDM Addressing Key IoT needs Connectivity Analytics Adaptability Security Deployment aspects Roadmap Summary Building Network of Things - The roles of Policy and Subscriber Data Management in IoT Commercial in confidence 2/ FGB Uen, Rev E

3 content Introduction UDM Addressing Key IoT needs Connectivity Analytics Adaptability Security Deployment aspects Roadmap Summary Building Network of Things - The roles of Policy and Subscriber Data Management in IoT Commercial in confidence 2/ FGB Uen, Rev E

4 UDM EVOLUTION DRIVING FORCES TRANSFORMATION CONSOLIDATION CLOUD ANALYTICS IoT 5G

5 Connected Devices in BILLION 16 billion IoT DEVICES 12 billion MOBILE PHONES, PC S, LAPTOPS, TABLETS SIM, esim & non-sim 14.5 billion NON CELLULAR; non-sim - MASSIVE IoT - EMBEDDED SIM Source: Ericsson Mobility Report 1.5 billion CELLULAR, SIM & esim Building the Network of things The roles of Policy and Data Management in IoT - Commercial in Confidence 2/ FGB Uen Rev A Building Network of Things - The roles of Policy and Subscriber Data Management in IoT Commercial in confidence 2/ FGB Uen, Rev E

6 Wide Range of access Requirements Massive IoT Critical IoT SMART BUILDING LOGISTICS, TRACKING AND FLEET MANAGEMENT REMOTE HEALTH CARE TRAFFIC SATY & CONTROL SMART METER SMART AGRICULTURE CAPILLARY NETWORKS INDUSTRIAL APPLICATION & CONTROL REMOTE MANUFACTURING, TRAINING, SURGERY ULTRA RELIABLE VERY LOW LATENCY VERY HIGH AVAILABILITY

7 Cellular massive iot serves much more MODULE COST/ PERFORMANCE <$20 10 Mbps 1 Mbps <$10 100s kbps <$5 10s kbps 100 bps LTE-M CAT1 (PSM + edrx) EC-GSM (EC + PSM + edrx) NB-IOT (EC + PSM + edrx) Unlicensed LPWA INDUSTRIAL PROCESS MONITORING & CONTROL SMART GRID SMART CITY, SMART BUILDING WEARABLES, KIDS /PET TRACKING SMART METERING VOICE SERVICES CONNECTED ELEVATORS VEHICLE TRACKING ASSET TRACKING SMART AGRICUTURE, ENVIRONMENT USE CASE DIVERSITY 10 km 10+ years COVERAGE / BATTERY

8 IOT brings new CHALLENGES SECURITY CONNECTIVITY ANALYTICS ADAPTABILITY Large number of devices Big surface attack. Low network cost per device New and very diverse behaviors Quota control for IoT groups Insecure design in devices Robustness and network performance Real time insights from IoT Priority based on type of IoT Low security maintenance Deployment flexibility - tailored to use case Secure exposure to verticals Control of access time and location

9 Ericsson udm address key needs for iot Authentication Fraud detection DDoS mitigation Dynamic QoS assurance Priority Handling UDM for IoT 2G/3G/4G WiFi NB-IoT, CAT-M1, EC-GSM Robustness Network and Database Slicing Event exposure Operational Efficiency Quota Control Time/Location based policies Dynamic Slice optimization Exposure to vertical ecosystem

10 content Introduction UDM Addressing Key IoT needs Connectivity Analytics Adaptability Security Deployment aspects Roadmap Summary Building Network of Things - The roles of Policy and Subscriber Data Management in IoT Commercial in confidence 2/ FGB Uen, Rev E

11 Connectivity for iot IoT requires cost-efficient robust and flexible connectivity How UDM secure the most efficient and high performance IoT connectivity? Support for Cellular Massive IoT New accesses (Nb-IoT, CAT-M1, EC-GSM) and traffic optimizations (non-ip, Subs TAU timer) Superior robustness Unique protection mechanisms against overloads Slicing Optimization and separation of resources depending on use case Commercial in confidence Ericsson AB 2017 Building Network of Things - The roles of Policy and Subscriber Data Management in IoT Commercial in confidence 2/ FGB Uen, Rev E

12 NEW cellular technologies for massive iot CAT-4 100% 3GPP Rel.8 COMPLEXITY EVOLUTION Significantly reduced device complexity, functionality and capability CAT-1 CAT-0 75% 3GPP Rel.8 40% 3GPP Rel.12 20% 3GPP Rel.13 10% 3GPP Rel.13 CAT-M1 NB IOT EC GSM

13 MASSIVE IOT access IN UDM Access enablers UDC enablers IoT on GSM EC-GSM-IoT Global cellular IoT for all GSM markets UDC ready Massive IOT IoT on LTE Cat-M1 NB-IoT Wide range of applications Ultra low-bitrate applications UDC ready Non-IP PDN type NB-IoT RAT and Access Restriction data Non-IP PDN type

14 traffic optimization for massive iot Non-IP PDN types Simple device No IP stack Subscribed TAU timer IP Header Payload Non-IP Header Payload Efficient use of device and network resources when transmitting small amount of data (e.g smart meter) Optimized network CAPEX Periodic TAU* Timer min 60 min Periodic signaling optimized per type of subscription Increased battery life *TAU= Tracking Area Update

15 Superior network robustness unique advanced protection Signaling storm Intensity Less duration and intensity of the signaling storm Up to 83% shorter & 20% softer Duration Network x CUDB 150% Better performance than competition during the Overload 100% Up to 32% more traffic processed Cooperative Load Regulation in UDC Maximum throughput Extra processing capacity instead of degradation: Up to 150% of capacity

16 NETWORK SLICING - THE BASIS LARGE SPAN OF REQUIREMENTS AND CUSTOMER SEGMENTS Drivers for slicing: Optimization per service/customer Improved TTM/TTC Reduced risk Flexibility and Agility DIVERSITY Separation of concerns Different requirements in terms of MOBILITY DATA VOLUMES LATENCY SERVICE AVAILABILITY LEVEL OF ACTIVITY

17 a Policy and user data for slicing KEY ENABLERS UDC NETWORK SLICE ORCHESTRATION USING DECOR DATABASE SLICING SAPC DYNAMIC SLICE SELECTION

18 a Network slice orchestration using DECOR Core Network (CN) Slice selection using subscription profile data stored in -EPC Flexible allocation of connected devices (MBB or IoT) to the right CN slice, at individual level No need of specific and predefined IMSI series per slice CUDB.. Slice 1 Slice 2 Slice allocation can be dynamically switched, just changing individual profile data Enable Dinamic Slice Selection solution, in combination with Policy Management MBB Slice 1 Nb-IoT Slice 2 DECOR as CN Selection mechanism Full flexibility for optimized usage of network resources, and maximised customer satisfaction. Common LTE access MBB Nb-IoT Requires Packet Core and RAN support All device types supported (Nb-IoT, CAT-M1)

19 slice routing database PoC available IoT Slice1 CUDB.. CN#1 IoT Slice Routing DB CUDB CN#2 IoT.. IoT Slice2 Common LTE access Slice Routing DB allows 3GPP DECOR procedure with completely separated DB & UDC systems for, e.g MBB and different types of IoT With DECOR a common repository is needed to store UE usage data for full subscription base Dedicated UDC Full optimized Database for IoT slice or slices Traffic Isolation maximized Slicing DB also enables Smooth reallocation of subscriptions across slices A framework to store shared information, beyond routing, for e.g Data Exposure Solution also applicable to 5G Core Commercial in confidence Ericsson AB 2017 Building Network of Things - The roles of Policy and Subscriber Data Management in IoT Commercial in confidence 2/ FGB Uen, Rev E

20 Dynamic slice selection Network Slice Selection based on Dynamic Conditions SAPC QUALITY OF EXPERIENCE Maximized Subscriber Satisfaction. Slice is selected based on the subscriber, service requirements and other dynamic parameters (e.g. location) NETWORK EFFICIENCY Optimized network use. The network is used in an efficient way allowing dynamic regulation of the slice load and maximizing the slice efficiency 5G

21 Dynamic slice selection - Concept Two selection levels: E2E and/or CN Slice Selection Sensors Cameras, Drones E2E Slice Smart phones SAPC Service Subscriber Location Embedded Policy and Analytics Dynamic selection of CN slice based on Data Center status, service needs and subscriber segmentation Slice Load SDN Networking SAPC CN Slice CN Slice

22 content Introduction UDM Addressing Key IoT needs Connectivity Analytics Adaptability Security Deployment aspects Roadmap Summary Building Network of Things - The roles of Policy and Subscriber Data Management in IoT Commercial in confidence 2/ FGB Uen, Rev E

23 Analytics and exposure for iot Subscription and policy data are key operator assets How UDM can unlock the value of those assets? Analytics Event exposure Non-IP data delivery and event monitoring via SCEF towards Application Server Policy Suscription Data IoT Data analytics Operational efficiency and safe data exposure to verticals Commercial in confidence Ericsson AB 2017 Building Network of Things - The roles of Policy and Subscriber Data Management in IoT Commercial in confidence 2/ FGB Uen, Rev E

24 SCEF SUPPORT in Support for S6t interface towards SCEF to enable: CUDB Configuration and reporting of UE monitoring events capability Non-IP Data Delivery expose NIDD via SCEF towards AS S6t S6m SCEF/ SCS AS Support for S6m interface towards SCEF to enable Device Triggering S6a T6a MME Benefits: Efficiency handling of massive IoT low cost devices Monetize IoT traffic and add more value towards AS Wide-Band EUTRAN NB-IoT Note: information in this slide is roadmap candidate Building Network of Things - The roles of Policy and Subscriber Data Management in IoT Commercial in confidence 2/ FGB Uen, Rev E Enabling revenue increase through new IoT use cases with SCEF

25 IoT DATA Analytics Use cases for Operational efficiency and Verticals Operational efficiency Verticals Cross DB consistency Automated check of CUDB subs data and BSS data to detect inconsistencies Reduce revenue leakage Automatically detect data inconsistencies in IoT devices Roaming Analytics Track where the containers are Track where they have been and if they deviated from the planned route IMEI security Detect fake IMEI in IoT devices Secure that IoT devices are not incorrectly blacklisted Syncronize with EIR- data to take actions (grey listing) Ericsson CUDB KPI reporting Facilitate devices monitoring with configurable KPI measurements Monitor status, location and activation of new services Data consumption from different device types

26 content Introduction UDM Addressing Key IoT needs Connectivity Analytics Adaptability Security Deployment aspects Roadmap Summary Building Network of Things - The roles of Policy and Subscriber Data Management in IoT Commercial in confidence 2/ FGB Uen, Rev E

27 Policy for IOT Massive IoT (NB-IoT, CAT-M1, EC-GSM) Critical IoT LOGISTICS, TRACKING AND FLEET MANAGEMENT SMART METER REMOTE HEALTH CARE TRAFFIC SATY & CONTROL CAPILLARY NETWORKS NATIONAL SECURITY REMOTE MANUFACTURING, TRAINING, SURGERY SMART AGRICULTURE SMART CITIES Fair Usage Policies Group-based Quota Control SAPC INDUSTRIAL APPLICATION & CONTROL Access Control DDoS Attack Mitigation Location/Time Based Policies QoS Assurance Traffic Priority Handling Quota Control Dynamic Access Control for Fraud Prevention Based on access: 2G/3G, LTE, NB-IoT Time of the Day, Location Device Type Great Delivery Service Prioritation QoS Assurance Data Monetization Data Consumption Control Building PCRF PRM Network for Vodafone of Things - Commercial The roles of in Policy Confidence and Subscriber Ericsson Data AB Management 2017 Page in IoT 28 Commercial in confidence 2/ FGB Uen, Rev E

28 Priority Handling IOT QoS ADMISSION CONTROL FOR DEVICES DEPENDING ON DYNAMIC CONDITIONS Traffic Handling Priority (THP) Legacy QoS feature Traffic Prioritization ACCESS PRIORITIZATION CAPACITY OPTIMIZATION Dynamic selection of earp and Radio Priority Bits Matrix Allows 15 levels of priority and 3 bits of preemption susceptibility Prioritization at Random Access Preemption at Congestion

29 Quota Management Beyond Personal data-plans UPGRADE! UPGRADE! Data Bucket Shared Data Bucket Shared Data Bucket

30 Quota control IoT data-plans Shared Data Bucket Specific Data Plan for IoT COMMON BUCKET for connected Things Cost control of IoT devices needs Allow to define INDIVIDUAL LIMITS per device or group of devices Allow of TOP-UPS FOR HIGHER BW (e.g. video surveillance)

31 Dynamic QoS Assurance Dynamic assignation of Quality of service Critical devices assigned to high priority bearer on emergency situations High priority bearer assures max QoS Low throughput devices assigned to low priority bearer EMERGENCY EVENT NORMAL SITUATION HIGH Priority Bearer MID Priority Bearer LOW Priority Bearer

32 Time based control Limit the access to the network according with time restrictions LOGISTIC TRACKING AND MANAGEMENT Daily 7:00-20:00 h 5 Days/Week 24 hours INDUSTRIAL APPLICATIONS 6 Days/Week 6:00-00:00 h FLEET MANAGEMENT

33 Location based control Model the access to the network according with current location Local City Home Country European Union World Home zone Rest of the City Concrete Radio Station

34 Policy Studio Best-in-Class configuration of IoT use cases High Speed to business needs Building Network of Things - The roles of Policy and Subscriber Data Management in IoT Commercial in confidence 2/ FGB Uen, Rev E

35 content Introduction UDM Addressing Key IoT needs Connectivity Analytics Adaptability Security Deployment aspects Roadmap Summary Building Network of Things - The roles of Policy and Subscriber Data Management in IoT Commercial in confidence 2/ FGB Uen, Rev E

36 UDM Security for IoT IoT brings new security challenges for networks How UDM can make your network safe for IoT? Motherboard, Sept 2015 esim Solid SIM security with flexible management, operator controlled PKI (Public Key Infrastrucure) Proven technology for Non-SIM devices What is new is the massive scale of the DDoS attacks that are made possible by unsecured internetconnected devices, the vast Internet of Things Policy Management Fraud Detection and mitigation of DoS attacks Source: things-know-october-21-iot-ddos-attacks/

37 UDC Security for IoT IoT brings new security challenges for networks How UDC can make your network safe for IoT? Motherboard, Sept 2015 Support of enhanced security for SIM and esim IoT devices : AKA and TUAK Algorithm Terminal device authentication via EIR What is new is the massive scale of the DDoS attacks that are made possible by unsecured internetconnected devices, the vast Internet of Things Unique protection mechanisms against overloads Source: things-know-october-21-iot-ddos-attacks/ Commercial in confidence Ericsson AB 2017 Building Network of Things - The roles of Policy and Subscriber Data Management in IoT Commercial in confidence 2/ FGB Uen, Rev E

38 Security in IoT ecosystem Policy control value Increased network vulnerability > NEED to secure operator s networks Number of IoT devices will grow exponentially The ecosystem consist of a big number of IoT devices makers IoT devices are manufactured for mass market IoT devices typically transmit low amount of data but with malicious software they can generate massive amount bogus traffic Difficult to control that all of them comply with security measures Need to protect operator s network beyond what IoT devices could do to secure service assurance

39 Security in IoT ecosystem Policy Control Value Network Protection Service Continuity Preventive Quota handling for IoT devices Revenue Assurance If quotas are consumed too fast, DoS attack is detected Block access to the network of that device/group of devices

40 Security in IoT ecosystem. Policy Control Value Network Protection Service Continuity Revenue Assurance SAPC Online Music Service Social Network Apps

41 FRAUD DETECTION BASED ON LOCATION Fixed devices should be always in the same location. If some device change location, possible fraud. Traffic light Bus stops Connected billboards Smart-Cities

42 Security in IoT ecosystem. Examples Utilities Sector Utilities sector includes a big number of IoT devices of different kinds (camaras, meters, ) Utilities companies will contract the connection service to a cellular operator The selected cellular operator has the responsibility to secure its network to avoid denial of service Denial of service would mean the lack of means to chargein the right way (revenue leakage) to the end customers or even security issues due to lack of misoperation detection If the amount of data received from any IoT device is much bigger than expected that device is automatically disconnected and an alarm generated

43 FRAUD DETECTION BASED ON LOCATION Utilities Sector Utilities sector includes a big number of IoT devices of different kinds (camaras, meters, ) Utilities companies will contract the connection service to a cellular operator The selected cellular operator has the responsibility to secure its network to avoid denial of service Denial of service would mean the lack of means to chargein the right way (revenue leakage) to the end customers or even security issues due to lack of misoperation detection If the amount of data received from any IoT device is much bigger than expected that device is automatically disconnected and an alarm generated

44 content Introduction UDM Addressing Key IoT needs Connectivity Analytics Adaptability Security Deployment aspects Roadmap Summary

45 dedicated IOT network deployment MBB UDC IoT (Dedicated) UDC IoT is deployed as dedicated UDC system for Massive IoT. CUDB CUDB Benefits of dedicated UDC IoT Organizational flexibility.... Independent lifecycle Maximum Network Isolation Optimization and scaling for growth MBB Slice 1 IoT Slice 2 Independent control of subscriber base When virtualized, first step into Cloud technologies with no risk for MBB business Common NB-IoT / CAT-M1 access For combined MBB/IoT deployments, standard UDC offering applies Building UDC IoT Network Commercial of Things Presentation - The roles of Commercial Policy and in Subscriber Confidence Data Management Ericsson 2017 in IoT June Commercial 2017 in confidence 2/ FGB Uen, Rev E

46 Cn selection mechanisms Based on PLMN-Id Based on UE type DECOR CUDB Available Available In roadmap CUDB CUDB CN#1 MBB PLMN#1 CN#2 IoT PLMN#2 CN#1 MBB CN#2 Nb-IoT CN#1 MBB CN#2 IoT Common LTE access Common LTE access Common LTE access CN selection by RAN using PLMN ID s Additional PLMN ID required Requires UE, RAN and Core support All device types supported CN selection by RAN using device info Simple - requires RAN support only For NB-IoT, (No standard for CAT-M1) Ericsson-unique solution Only separation Nb-IOT from the rest. No further slicing possible. CN selection using :UE Usage Type Requires CN and RAN support All device types supported Requires a single repository for DECOR data Can be combined with Logical Zones in CUDB

47 Additional flexibility adding database slicing CUDB With Logical Zones and differentiated storage MBB/IoT.. In roadmap MBB IoT Both combined MBB/IoT and dedicated IoT deployments can evolve using CUDB.... Database Slicing. In case of combined MBB/IoT deployment this evolution can happen when expanding the system for IoT growth MBB Slice 1 IoT Slice 2 MBB Slice 1 IoT Slice 2 Benefits of Database Slicing are applicable to both type of deployments Common LTE access Common LTE access Optimization of Storage Resources Storage separation per type of device

48 Dedicated udc with routing database Massive sensors Auto ehealth UDC 1 UDC 2 UDC 3 What if I want separate UDCs per IoT slice, with different characteristics, but I need some data in a common repository for all subscriptions, for example, for DECOR routing? CN Slice 1 CN Slice 2 CN Slice 3 Common LTE access

49 Why decor info needs a single repository UE usage Type MMEGI 3 7 UE Usage Type Authentication/Registration. Initial attach procedure in DECOR is used to find out what is the right target slice for each device/user Equipment Slice #1 MBB MME Attach Request enb selects slice #1 MME 2 Attach Request 5 4 Reroute NAS Message Request 1 AIA UE Usage Type enb 6 Attach Procedure continues MME enb selects new MME in slice #2 according to MMEGI * Slice #2 is the target slice for this device Slice #2 (IoT) The slice used for initial attach request may not be the target slice, and need access to the UE Usage Type information for ALL subscriptions, in order to trigger relocation procedures to the right target slice In case has not ALL the subscriptions stored, needs to fetch slide routing information to assign initial slide Building Network of Things - The roles of Policy and Subscriber Data Management in IoT Commercial in confidence 2/ FGB Uen, Rev E Building the Network of things The roles of Policy and Data Management in IoT - Commercial in Confidence 2/ FGB Uen Rev A

50 Dedicated udc per slice + slice routing database Slice Routing DB MBB Slice CUDB.. CUDB.. IoT Slice Complete separate UDC systems for MBB and different types of IoT. Common repository is needed to handle, for example, DECOR information for full subscription base. CN#1 MBB CN#2 IoT Common LTE access -Full optimized Database for IoT slice or slices -DECOR procedure for slicing available for all devices -Traffic Isolation maximized -Slicing DB enables a framework to store shared information, beyond routing

51 slice routing database PoC available IoT Slice1 CUDB.. CN#1 IoT Slice Routing DB CUDB CN#2 IoT.. IoT Slice2 Common LTE access Slice Routing DB allows 3GPP DECOR procedure with completely separated DB & UDC systems for, e.g MBB and different types of IoT With DECOR a common repository is needed to store UE usage data for full subscription base Dedicated UDC Full optimized Database for IoT slice or slices Traffic Isolation maximized Slicing DB also enables Smooth reallocation of subscriptions across slices A framework to store shared information, beyond routing, for e.g Data Exposure Solution also applicable to 5G Core Commercial in confidence Ericsson AB 2017 Building Network of Things - The roles of Policy and Subscriber Data Management in IoT Commercial in confidence 2/ FGB Uen, Rev E

52 Slice routing database how it works At user Initial Attach, (e)decor routes procedure to dedicated slice If user data is FOUND in dedicated CUDB, Slice selection-related User Data can be provided back without need to access Slice Routing DB User Initial Attach 6 1 IoT Slice User FOUND CUDB#1 Slice Routing CUDB IoT Slice2 - CUDB#n Commercial in confidence Ericsson AB 2017 Building Network of Things - The roles of Policy and Subscriber Data Management in IoT Commercial in confidence 2/ FGB Uen, Rev E

53 Slice routing database how it works User Initial Attach 1 IoT Slice1 2 - User NOT FOUND CUDB#1 Retrieve Slice selection-related User Data from Slice Routing CUDB 5 If user data is NOT FOUND in dedicated CUDB, the slice-dedicated CUDB will access Slice Routing DB via LDAP Attach can then be redirected to proper slice 11 7 Attach Redirect IoT Slice 2.. Slice selection user data User FOUND Slice Routing CUDB CUDB#n Commercial in confidence Ericsson AB 2017 Building Network of Things - The roles of Policy and Subscriber Data Management in IoT Commercial in confidence 2/ FGB Uen, Rev E

54 content Introduction UDM Addressing Key IoT needs Connectivity Analytics Adaptability Security Deployment aspects Roadmap Summary

55 Udm evolution for iot UDM enablers for IoT Connectivity NB-IoT, CAT-M1 access support Non-IP PDN type support for IoT devices within subscription data Subscribed Periodic Tracking Area Update (TAU) Timer for IoT UE Usage Type support for (DECOR) Security TUAK support in AuC PKI Authentication and certificate revocation support in AAA Fraud detection DDoS mitigation Analytics & Exposure User and IoT data analytics Adaptability SAPC: Dynamic QoS assurance SAPC: Priority Handling SAPC: Quota control SAPC: Time/Location based policies SAPC: Presence Reporting Area (PRA) over Gx SAPC: High Resilience Mission Critical IoT in Policy Management SAPC: Policy Studio Templates for IoT Connectivity Massive IoT IoT devices with both IP & non- IP support(additional Context Id) Remote immediate EPS reattach UDC Dashboard enhancements Non-IP Data Delivery via SCEF PoC (Q1) Database slicing Slice routing DB PoC (Q1) Analytics & Exposure SCEF support for Monitoring Events - PoC (Q1) Adaptability SAPC: Quota Rollover for IoT dataplans Connectivity Massive IoT Non-IP Data Delivery via SCEF - Commercial Diameter Overload Indication Conveyance support SCEF device triggering (S6m interface) Database slicing Slice routing DB Commercial Evolved ARP in HLR Security Locking of IMSIs based on class of device Analytics & Exposure SCEF support for Monitoring Events Commercial SAPC: EBM for Network Assurance and Business Intelligence Adaptability SAPC: Families support Connectivity Database slicing Network slicing in CUDB (Logical zones, DSG Flexible redundancy, Flexible storage) CUDB smart mastership allocation Federated CUDB nodes Security TUAK support in AVG Authentication algorithms support for IoT in AAA Analytics & Exposure SAPC: Dynamic Slice optimization SAPC: Nt with SCEF Adaptability SAPC: Group management for Massive IoT SAPC: Presence Reporting Area (PRA) on Smp Released H H & beyond Building Network of Things - The roles of Policy and Subscriber Data Management in IoT Commercial in confidence 2/ FGB Uen, Rev E Legend: Released, Ready for contract (PRT), Indicative, Candidate

56 content Introduction UDM Addressing Key IoT needs Connectivity Analytics Adaptability Security Deployment aspects Roadmap Summary

57 UdM comprehensive offering for iot Dynamic Network Slicing Fraud and DDoS mitigation Verticals and applications Dynamic QoS and quota control Time/base location policies SAPC UPG IoT analytics and exposure Unified storage Advanced Protection again signalling storms CUDB LTE/NB-IoT Connectivity Network slicing (DECOR support) HLR: 2G/3G Connectivity SMS enabler AuC: Central authenticaton for SIM based producedures HLR- IPworks EIR- - 4G/IMS and Application (GAA/GBA) Security Wi-Fi access security IoT device security Building the Network of things The roles of Policy and Data Management in IoT - Commercial in Confidence 2/ FGB Uen Rev A Building Network of Things - The roles of Policy and Subscriber Data Management in IoT Commercial in confidence 2/ FGB Uen, Rev E * Please see roadmap tor VNF support GA date for each node

58 UDC IOT offering Optimized for massive Iot SLIDE TITLE SLIDE SUBTITLE UDC IoT Commercial Structure Price parameter = Active Thing - CUDB EDA IoT Shared Networks IoT Shared Networks IoT Network efficiency IoT Network Efficiency IoT Evolved subscription handling IoT Evolved subscription handling IoT Mobility and Roaming IoT Mobility and Roaming Optional IoT Authentication and security Advanced Network Protection IoT license IoT Start Mandatory BP IoT - BP Generic Profile IoT license BP IoT EDA Active Thing = Unique IMSI that performs a LU or Authentication during 90 Days Applicable to Massive IoT (Nb-IoT and CAT-M1 access) Building UDC IoT Network Commercial of Things Presentation - The roles of Commercial Policy and in Subscriber Confidence Data Management Ericsson 2017 in IoT June Commercial 2017 in confidence 2/ FGB Uen, Rev E

59 Ericsson iot core KEY numbers 27 Customers Common Core Dedicated Core 90+ PoCs, Trials and precommercial engagements Building Network of Things - The roles of Policy and Subscriber Data Management in IoT Commercial in confidence 2/ FGB Uen, Rev E

60 Ericsson Udm for Iot key benefits Superior Performance and Robustness - Unique solution to protect the network against IoT signaling storms. UNIFIED DATA MANAGEMENT (UDM) Strong Security for IoT - Supporting latest authentication algorithms for IoT Policy Analytics Subs. Data Flexible and efficient Database Slicing Database tailored to the diversity of IoT use cases Dynamic slice optimization Automated adaptation of network resources according to IoT instant Massive IoT Critical IoT Embedded analytics - Enabling operational efficiency and monetization of IoT data for verticals

61 Building Network of Things - The roles of Policy and Subscriber Data Management in IoT Commercial in confidence 2/ FGB Uen, Rev E This image cannot currently be displayed.

62 Udc offering options for IoT UDC Native vudc Full-fledged UDC DB/Network app. decoupling Reduced SW/HW One common HW Platform Certified characteristics UDC in a Box Flexibility and scalability Reduced footprint Lower TCO Virtualized (NFV) Complete HW/SW decoupling Applications collocate to the same blade HW agnostic Cloud Automation Automatic scaling (In/Out) Automatic upgrades / updates Auto installation, configuration and healing Hot migration One UDC offering enabling both MBB and IoT Building Network of Things - The roles of Policy and Subscriber Data Management in IoT Commercial in confidence 2/ FGB Uen, Rev E

63 Building Network of Things - The roles of Policy and Subscriber Data Management in IoT Commercial in confidence 2/ FGB Uen, Rev E This image cannot currently be displayed.