1. All rights reserved © 2005, Alcatel Distributed Storage Networks  Dr. Stephan Rupp  s.rupp@alcatel.de

2. All rights reserved © 2005, Alcatel Page Distibuted Storage Networks  Problems in current network design  Solutions - the Flexinet approach  Data beyond current user profiles  Technical options for distributed storage networks

3. All rights reserved © 2005, Alcatel Page Current Networks, for example 3GPP Each function requires new network elements. => growing complexity

4. All rights reserved © 2005, Alcatel Page Problems with current network design No Future! Gc#3 C#4 Iu#19 D#17 Specialised Network Elements Specialised Protocols User Data hidden in Network Elements a closed environment a network for each service too complex too expensive

5. All rights reserved © 2005, Alcatel Page  > go “meta”: use IDL on interfaces & semantic models to describe the meaning of interfaces  > separate data from applications Distibuted Storage Networks  Problems in current network design  Solutions - the Flexinet approach:  Data beyond current user profiles  Technical options for distributed storage networks Functions of network elements & protocols become self-explanatory Facilitates virtualisation of resources (application = computer power, data = storage). The bigger bang.

6. All rights reserved © 2005, Alcatel Page The traditional approach: functions and protocols The Customer Billing CSE HSSCRM CC Marketing Distributed and hidden information

7. All rights reserved © 2005, Alcatel Page A new approach: data centric design Billing CSE HSS CRM CC Consolidation of customer data “The Customer Profile” Marketing

8. All rights reserved © 2005, Alcatel Page Keep data in one place. HLR SCP Voice Mail Video Mail E- Mail SMS HLR1HLR2HLRn SCPnSCP1SCP2 Voice Mail Video Mail E-Mail SMS Which data? Instead of protocol specifications: IDL + semantic model of interfaces New areas of application? Data models & technical options for implementation (distribution, persistency, redundancy, security) Technical Challenges

9. All rights reserved © 2005, Alcatel Page Distibuted Storage Networks  Problems in current network design  Solutions - the Flexinet approach  Data beyond current user profiles  Technical options for distributed storage networks:

10. All rights reserved © 2005, Alcatel Page Beyond current user profiles Extended User Profile  e.g. Mobile Subcriber  User data and services subscribed Device Profiles  associated with user profile  decribes device, supplier, hardware, firmware software Identification System  Semantic models for classification Meta Data  Place, how to access, interface definition Messages, Files, Executables and Blobs  Any information distributed over the network in need of storage User Device HWFWSW

11. All rights reserved © 2005, Alcatel Page Beyond current service offerings User and Devices Identity Provider Devices & Software (Supplier, ASP) Service Semantic Modell: System for Classification and Schnema- Transformations Meta-Information: Object References, IDL, Inventory ?

12. All rights reserved © 2005, Alcatel Page Distibuted Storage Networks  Problems in current network design  Solutions - the Flexinet approach  Data beyond current user profiles  Technical options for distributed storage networks: > store data in a redundant and secure way > present single point of access to all data for all applications and administrative systems

13. All rights reserved © 2005, Alcatel Page Redundancy and geographic distribution SAN Site 1Site 2 Layer 1 Fibre Channel Database Server LAN Database Server LAN WAN Layer 2 Database Server Database Server Appl. Logic 1 e.g. HLR Appl. Logic xAppl. Logic 1 e.g. HLR Appl. Logic x Signaling Network (SS7, SIGTRAN) Layer 3 WAN Fibre Channel DWDM Dark FiberSDH

14. All rights reserved © 2005, Alcatel Page Resilience and Redundancy Characteristic Typical High Availability Systems Redundancy by Distributed Storage Networks Unit Cost High (Proprietary HW and standby redundant policy) Low (COTS HW and optimised redundancy policy) Typical ArchitectureMated-pairLoad-sharing peers Local Fault Tolerance2 x NN + k Geographical Redundancy 4 x NN + k Disaster Recovery TimeMinutes -> HoursInstant Source: Siemens/Apertio, Flexinet 2nd operator workshop, Dec. 2, 2005

15. All rights reserved © 2005, Alcatel Page Security threats for distributed storage networks  Same risks as in current distributed systems, but the the potential damage is much bigger. However:  Centralisation facilitates higher level of protection compared to protecting many distributed systems.

16. All rights reserved © 2005, Alcatel Page Security Concept: Access Control & Roles...... Authentication Role Departsments/ Organisations define: Role...... Security Policy Processes Access rights Security Policy Security Category Processes Access rights Authorisation Security Policy Processes Tasks Functions Security Policy Application / Ressource Desired Ressource Security Policy Processes Tasks Functions

17. All rights reserved © 2005, Alcatel Page Security Policy Access rights to - IT services (applications, tools) - Data - Ressources (Subnetworks, disks,...) Administrator rights Physical access to - plants and buildings - technical equipment... Processes - Logging, recording of interventions Log Files, Tracking - Physical access Authentication, Monitoring,... Registration, Deregistration,... - Backup procedures - Roll Back methods... What is used ? is accessible ? How - should access be controlled ? - secure has communication to be ? - to reverse interventions ? - to log interventions ? How, how-long, where - should data be stored ? Security Policy

18. All rights reserved © 2005, Alcatel Page www.alcatel.com Thanks for your attention! Questions?